Microsoft Edge For Android vulnerabilities
34 known vulnerabilities affecting microsoft/microsoft_edge_for_android.
Total CVEs
34
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH5MEDIUM24LOW5
Vulnerabilities
Page 1 of 2
CVE-2026-70341P2HIGHCVSS 8.8≥ 1.0.0.0, < 152.0.4191.522026-09-11
CVE-2026-70341 [HIGH] CWE-416 CVE-2026-70341: Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over
Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.
nvd
CVE-2026-72984P3HIGHCVSS 8.8≥ 1.0.0.0, < 152.0.4191.522026-08-28
CVE-2026-72984 [HIGH] CWE-843 CVE-2026-72984: Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) all
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2023-23374P3HIGHCVSS 8.3≥ 1.0.0, < 110.0.1587.412023-02-14
CVE-2023-23374 [HIGH] CVE-2023-23374: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
nvd
CVE-2026-26133P3HIGHCVSS 7.1≥ 1.0.0, < 145.3800.992026-03-16
CVE-2026-26133 [HIGH] CWE-77 CVE-2026-26133: AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a
AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2026-66324P3MEDIUMCVSS 6.5≥ 1.0.0.0, < 152.0.4191.522026-08-28
CVE-2026-66324 [MEDIUM] CWE-73 CVE-2026-66324: External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized atta
External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2026-66310P3HIGHCVSS 7.1≥ 1.0.0.0, < 151.0.4129.592026-08-04
CVE-2026-66310 [HIGH] CWE-73 CVE-2026-66310: External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker
External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally.
nvd
CVE-2026-66323P4MEDIUMCVSS 5.4≥ 1.0.0.0, < 152.0.4191.522026-08-28
CVE-2026-66323 [MEDIUM] CWE-141 CVE-2026-66323: Improper neutralization of parameter/argument delimiters in Microsoft Edge (Chromium-based) allows a
Improper neutralization of parameter/argument delimiters in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-62904P4MEDIUMCVSS 5.4≥ 1.0.0.0, < 152.0.4191.522026-08-28
CVE-2026-62904 [MEDIUM] CWE-863 CVE-2026-62904: Incorrect authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclo
Incorrect authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2021-26439P4MEDIUMCVSS 5.9≥ 1.0.0, < 93.0.961.382021-09-02
CVE-2021-26439 [MEDIUM] CVE-2021-26439: Microsoft Edge for Android Information Disclosure Vulnerability
Microsoft Edge for Android Information Disclosure Vulnerability
nvd
CVE-2023-36888P4MEDIUMCVSS 6.3≥ 1.0.0, < 114.0.1823.822023-07-14
CVE-2023-36888 [MEDIUM] CWE-20 CVE-2023-36888: Microsoft Edge for Android (Chromium-based) Tampering Vulnerability
Microsoft Edge for Android (Chromium-based) Tampering Vulnerability
nvd
CVE-2026-62828P4MEDIUMCVSS 5.4v-2026-07-28
CVE-2026-62828 [MEDIUM] CWE-20 CVE-2026-62828: Improper input validation in Microsoft Edge for Android allows an unauthorized attacker to perform t
Improper input validation in Microsoft Edge for Android allows an unauthorized attacker to perform tampering over a network.
nvd
CVE-2026-66798P4MEDIUMCVSS 4.3≥ 1.0.0.0, < 152.0.4191.522026-08-28
CVE-2026-66798 [MEDIUM] CWE-416 CVE-2026-66798: Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code ov
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2025-21253P4MEDIUMCVSS 5.3≥ 1.0.0, < 133.0.3065.512025-02-06
CVE-2025-21253 [MEDIUM] CWE-451 CVE-2025-21253: Microsoft Edge for IOS and Android Spoofing Vulnerability
Microsoft Edge for IOS and Android Spoofing Vulnerability
nvd
CVE-2026-0385P4MEDIUMCVSS 5.0≥ 1.0.0, < 146.0.3856.592026-03-16
CVE-2026-0385 [MEDIUM] CWE-451 CVE-2026-0385: Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability
Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability
nvd
CVE-2025-49736P4MEDIUMCVSS 4.3≥ 1.0.0, < 139.0.3405.862025-08-12
CVE-2025-49736 [MEDIUM] CWE-449 CVE-2025-49736: The ui performs the wrong action in Microsoft Edge for Android allows an unauthorized attacker to pe
The ui performs the wrong action in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2021-24100P4MEDIUMCVSS 4.4vN/A2021-02-25
CVE-2021-24100 [MEDIUM] CVE-2021-24100: Microsoft Edge for Android Information Disclosure Vulnerability
Microsoft Edge for Android Information Disclosure Vulnerability
nvd
CVE-2023-36029P4MEDIUMCVSS 4.3≥ 1.0.0, < 118.0.2088.882023-11-03
CVE-2023-36029 [MEDIUM] CVE-2023-36029: Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
nvd
CVE-2024-26188P4MEDIUMCVSS 4.3≥ 1.0.0, < 122.0.2365.522024-02-23
CVE-2024-26188 [MEDIUM] CWE-357 CVE-2024-26188: Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
nvd
CVE-2024-38083P4MEDIUMCVSS 4.3≥ 1.0.0, < 126.0.2592.562024-06-13
CVE-2024-38083 [MEDIUM] CWE-449 CVE-2024-38083: Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
nvd
CVE-2024-26196P4MEDIUMCVSS 4.3≥ 1.0.0, < 122.0.2365.632024-03-21
CVE-2024-26196 [MEDIUM] CWE-259 CVE-2024-26196: Microsoft Edge for Android (Chromium-based) Information Disclosure Vulnerability
Microsoft Edge for Android (Chromium-based) Information Disclosure Vulnerability
nvd
1 / 2Next →