Microsoft Edge vulnerabilities
382 known vulnerabilities affecting microsoft/microsoft_edge.
Total CVEs
382
CISA KEV
2
actively exploited
Public exploits
9
Exploited in wild
2
Severity breakdown
CRITICAL10HIGH184MEDIUM179LOW9
Vulnerabilities
Page 9 of 20
CVE-2021-36930P3HIGHCVSS 8.1≥ 1.0.0.0, < 93.0.961.382021-09-02
CVE-2021-36930 [HIGH] CWE-269 CVE-2021-36930: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2024-43472P3HIGHCVSS 8.3≥ 1.0.0, < 127.0.2651.1052024-08-16
CVE-2024-43472 [HIGH] CWE-416 CVE-2024-43472: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2020-1065P3HIGHCVSS 7.5≥ 1.0..0, < publication2020-05-21
CVE-2020-1065 [HIGH] CWE-787 CVE-2020-1065: A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the curr
nvd
CVE-2020-1172P3HIGHCVSS 7.5≥ 1.0..0, < publication2020-09-11
CVE-2020-1172 [HIGH] CWE-787 CVE-2020-1172: <p>A remote code execution vulnerability exists in the way that the ChakraCore scripting engine hand
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the curr
nvd
CVE-2023-36034P3HIGHCVSS 7.3≥ 1.0.0, < 119.0.2151.442023-11-03
CVE-2023-36034 [HIGH] CWE-416 CVE-2023-36034: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
nvd
CVE-2020-1180P3HIGHCVSS 7.5≥ 1.0..0, < publication2020-09-11
CVE-2020-1180 [HIGH] CWE-787 CVE-2020-1180: <p>A remote code execution vulnerability exists in the way that the ChakraCore scripting engine hand
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the curr
nvd
CVE-2020-1096P3HIGHCVSS 7.5≥ 1.0..0, < publication2020-05-21
CVE-2020-1096 [HIGH] CVE-2020-1096: A remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objec
A remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory. The vulnerability could corrupt memory in such a way that enables an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user.
nvd
CVE-2024-38210P3HIGHCVSS 7.8≥ 1.0.0, < 128.0.2739.422024-08-22
CVE-2024-38210 [HIGH] CWE-125 CVE-2024-38210: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
nvd
CVE-2024-38209P3HIGHCVSS 7.8≥ 1.0.0, < 128.0.2739.422024-08-22
CVE-2024-38209 [HIGH] CWE-843 CVE-2024-38209: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
nvd
CVE-2026-57989P3HIGHCVSS 7.4≥ 1.0.0.0, < 150.0.4078.992026-07-26
CVE-2026-57989 [HIGH] CWE-346 CVE-2026-57989: Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclo
Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2026-57988P3HIGHCVSS 7.1≥ 1.0.0.0, < 150.0.4078.482026-07-03
CVE-2026-57988 [HIGH] CWE-23 CVE-2026-57988: Relative path traversal in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execut
Relative path traversal in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2021-31937P3HIGHCVSS 8.2≥ 1.0.0, < 91.0.864.372023-06-28
CVE-2021-31937 [HIGH] CWE-269 CVE-2021-31937: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2023-36887P3HIGHCVSS 7.8≥ 1.0.0, < 114.0.1823.822023-07-14
CVE-2023-36887 [HIGH] CWE-843 CVE-2023-36887: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
nvd
CVE-2024-38218P3HIGHCVSS 7.8≥ 1.0.0, < 127.0.2651.982024-08-12
CVE-2024-38218 [HIGH] CWE-843 CVE-2024-38218: Microsoft Edge (HTML-based) Memory Corruption Vulnerability
Microsoft Edge (HTML-based) Memory Corruption Vulnerability
nvd
CVE-2022-21970P3HIGHCVSS 7.8≥ 1.0.0, < 97.0.1072.552022-01-11
CVE-2022-21970 [HIGH] CWE-269 CVE-2022-21970: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2020-17048P3HIGHCVSS 8.1≥ 1.0..0, < publication2020-11-11
CVE-2020-17048 [HIGH] CWE-787 CVE-2020-17048: Chakra Scripting Engine Memory Corruption Vulnerability
Chakra Scripting Engine Memory Corruption Vulnerability
nvd
CVE-2021-36928P3HIGHCVSS 7.8≥ 1.0.0.0, < 92.0.902.552021-08-26
CVE-2021-36928 [HIGH] CWE-59 CVE-2021-36928: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2022-35796P3HIGHCVSS 7.5≥ 1.0.0, < 104.0.1293.472022-08-09
CVE-2022-35796 [HIGH] CWE-362 CVE-2022-35796: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2022-38012P3HIGHCVSS 7.7≥ 1.0.0, < 105.0.1343.252022-09-13
CVE-2022-38012 [HIGH] CVE-2022-38012: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
nvd
CVE-2023-36014P3HIGHCVSS 7.3≥ 1.0.0, < 119.0.2151.582023-11-10
CVE-2023-36014 [HIGH] CWE-94 CVE-2023-36014: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
nvd