Microsoft Edge vulnerabilities
349 known vulnerabilities affecting microsoft/microsoft_edge.
Total CVEs
349
CISA KEV
2
actively exploited
Public exploits
8
Exploited in wild
2
Severity breakdown
CRITICAL9HIGH168MEDIUM164LOW8
Vulnerabilities
Page 7 of 18
CVE-2022-33636P3HIGHCVSS 8.3≥ 1.0.0, < 104.0.1293.472022-08-09
CVE-2022-33636 [HIGH] CWE-362 CVE-2022-33636: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
nvd
CVE-2019-0780P3HIGHCVSS 7.5vWindows 10 for 32-bit Systemsvn/a2019-04-09
CVE-2019-0780 [HIGH] CWE-787 CVE-2019-0780: A remote code execution vulnerability exists in the way that Microsoft browsers access objects in me
A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka 'Microsoft Browser Memory Corruption Vulnerability'.
nvd
CVE-2021-30609P3HIGHCVSS 8.8vunspecified2021-09-03
CVE-2021-30609 [HIGH] CWE-416 CVE-2021-30609: Chromium: CVE-2021-30609 Use after free in Sign-In
Chromium: CVE-2021-30609 Use after free in Sign-In
nvd
CVE-2021-30613P3HIGHCVSS 8.8vunspecified2021-09-03
CVE-2021-30613 [HIGH] CWE-416 CVE-2021-30613: Chromium: CVE-2021-30613 Use after free in Base internals
Chromium: CVE-2021-30613 Use after free in Base internals
nvd
CVE-2021-30624P3HIGHCVSS 8.8vunspecified2021-09-03
CVE-2021-30624 [HIGH] CWE-416 CVE-2021-30624: Chromium: CVE-2021-30624 Use after free in Autofill
Chromium: CVE-2021-30624 Use after free in Autofill
nvd
CVE-2021-30622P3HIGHCVSS 8.8vunspecified2021-09-03
CVE-2021-30622 [HIGH] CWE-416 CVE-2021-30622: Chromium: CVE-2021-30622 Use after free in WebApp Installs
Chromium: CVE-2021-30622 Use after free in WebApp Installs
nvd
CVE-2021-30623P3HIGHCVSS 8.8vunspecified2021-09-03
CVE-2021-30623 [HIGH] CWE-416 CVE-2021-30623: Chromium: CVE-2021-30623 Use after free in Bookmarks
Chromium: CVE-2021-30623 Use after free in Bookmarks
nvd
CVE-2026-57991P3HIGHCVSS 7.4≥ 1.0.0.0, < 150.0.4078.482026-07-03
CVE-2026-57991 [HIGH] CWE-59 CVE-2026-57991: Improper link resolution before file access ('link following') in Microsoft Edge (Chromium-based) al
Improper link resolution before file access ('link following') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2026-58290P3HIGHCVSS 7.5≥ 1.0.0.0, < 150.0.4078.482026-07-03
CVE-2026-58290 [HIGH] CWE-843 CVE-2026-58290: Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) all
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2019-1038P3HIGHCVSS 7.5≥ 1.0..0, < publication2019-06-12
CVE-2019-1038 [HIGH] CWE-787 CVE-2019-1038: A remote code execution vulnerability exists in the way that Microsoft browsers access objects in me
A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user.
nvd
CVE-2020-1568P3HIGHCVSS 7.5≥ 1.0..0, < publication2020-08-17
CVE-2020-1568 [HIGH] CVE-2020-1568: A remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objec
A remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory. The vulnerability could corrupt memory in such a way that enables an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user.
nvd
CVE-2021-30607P3HIGHCVSS 8.8vunspecified2021-09-03
CVE-2021-30607 [HIGH] CWE-416 CVE-2021-30607: Chromium: CVE-2021-30607 Use after free in Permissions
Chromium: CVE-2021-30607 Use after free in Permissions
nvd
CVE-2019-1104P3HIGHCVSS 7.5vWindows 10 for 32-bit SystemsvWindows 10 for x64-based Systems+15 more2019-07-15
CVE-2019-1104 [HIGH] CWE-787 CVE-2019-1104: A remote code execution vulnerability exists in the way that Microsoft browsers access objects in me
A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka 'Microsoft Browser Memory Corruption Vulnerability'.
nvd
CVE-2025-29834P3HIGHCVSS 7.5≥ 1.0.0.0, < 134.0.3124.932025-04-12
CVE-2025-29834 [HIGH] CWE-125 CVE-2025-29834: Out-of-bounds read in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute cod
Out-of-bounds read in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2019-0649P3HIGHCVSS 8.1vWindows 10 Version 1703 for 32-bit SystemsvWindows 10 Version 1703 for x64-based Systems+10 more2019-03-05
CVE-2019-0649 [HIGH] CVE-2019-0649: A vulnerability exists in Microsoft Chakra JIT server, aka 'Scripting Engine Elevation of Privileged
A vulnerability exists in Microsoft Chakra JIT server, aka 'Scripting Engine Elevation of Privileged Vulnerability'.
nvd
CVE-2020-1569P3HIGHCVSS 7.5≥ 1.0..0, < publication2020-08-17
CVE-2020-1569 [HIGH] CWE-787 CVE-2020-1569: A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memo
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that enables an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. I
nvd
CVE-2024-21385P3HIGHCVSS 8.3≥ 1.0.0, < 121.0.2277.832024-01-26
CVE-2024-21385 [HIGH] CWE-416 CVE-2024-21385: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2023-29350P3HIGHCVSS 7.5≥ 1.0.0, < 113.0.1774.352023-05-05
CVE-2023-29350 [HIGH] CWE-269 CVE-2023-29350: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2024-43472P3HIGHCVSS 8.3≥ 1.0.0, < 127.0.2651.1052024-08-16
CVE-2024-43472 [HIGH] CWE-416 CVE-2024-43472: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2020-1172P3HIGHCVSS 7.5≥ 1.0..0, < publication2020-09-11
CVE-2020-1172 [HIGH] CWE-787 CVE-2020-1172: <p>A remote code execution vulnerability exists in the way that the ChakraCore scripting engine hand
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the curr
nvd