Microsoft Edge For Ios vulnerabilities
17 known vulnerabilities affecting microsoft/microsoft_edge_for_ios.
Total CVEs
17
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH4MEDIUM11LOW2
Vulnerabilities
Page 1 of 1
CVE-2026-70341P2HIGHCVSS 8.8≥ 1.0.0.0, < 152.0.4191.522026-09-11
CVE-2026-70341 [HIGH] CWE-416 CVE-2026-70341: Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over
Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.
nvd
CVE-2026-72984P3HIGHCVSS 8.8≥ 1.0.0.0, < 152.0.4191.522026-08-28
CVE-2026-72984 [HIGH] CWE-843 CVE-2026-72984: Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) all
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2022-44708P3HIGHCVSS 8.3≥ 1.0.0.0, < 108.0.1462.422022-12-13
CVE-2022-44708 [HIGH] CVE-2022-44708: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2026-26133P3HIGHCVSS 7.1≥ 1.0.0.0, < 145.3800.992026-03-16
CVE-2026-26133 [HIGH] CWE-77 CVE-2026-26133: AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a
AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2026-66324P3MEDIUMCVSS 6.5≥ 1.0.0.0, < 152.0.4191.522026-08-28
CVE-2026-66324 [MEDIUM] CWE-73 CVE-2026-66324: External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized atta
External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2026-66323P4MEDIUMCVSS 5.4≥ 1.0.0.0, < 152.0.4191.522026-08-28
CVE-2026-66323 [MEDIUM] CWE-141 CVE-2026-66323: Improper neutralization of parameter/argument delimiters in Microsoft Edge (Chromium-based) allows a
Improper neutralization of parameter/argument delimiters in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-62904P4MEDIUMCVSS 5.4≥ 1.0.0.0, < 152.0.4191.522026-08-28
CVE-2026-62904 [MEDIUM] CWE-863 CVE-2026-62904: Incorrect authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclo
Incorrect authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2026-70331P4MEDIUMCVSS 5.4≥ 1.0.0.0, < 150.0.4078.502026-08-28
CVE-2026-70331 [MEDIUM] CWE-1427 CVE-2026-70331: Improper neutralization of input used for llm prompting in Microsoft Edge for iOS allows an unauthor
Improper neutralization of input used for llm prompting in Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2026-66798P4MEDIUMCVSS 4.3≥ 1.0.0.0, < 152.0.4191.522026-08-28
CVE-2026-66798 [MEDIUM] CWE-416 CVE-2026-66798: Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code ov
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2025-21253P4MEDIUMCVSS 5.3≥ 1.0.0.0, < 133.0.3065.512025-02-06
CVE-2025-21253 [MEDIUM] CWE-451 CVE-2025-21253: Microsoft Edge for IOS and Android Spoofing Vulnerability
Microsoft Edge for IOS and Android Spoofing Vulnerability
nvd
CVE-2025-25001P4MEDIUMCVSS 4.3≥ 1.0.0.0, < 132.0.2957.1182025-04-04
CVE-2025-25001 [MEDIUM] CWE-79 CVE-2025-25001: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Ed
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2024-38083P4MEDIUMCVSS 4.3≥ 1.0.0.0, < 126.0.2592.562024-06-13
CVE-2024-38083 [MEDIUM] CWE-449 CVE-2024-38083: Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
nvd
CVE-2026-58616P4LOWCVSS 3.0≥ 1.0.0.0, < 152.0.4191.522026-08-28
CVE-2026-58616 [LOW] CWE-362 CVE-2026-58616: Concurrent execution using shared resource with improper synchronization ('race condition') in Copil
Concurrent execution using shared resource with improper synchronization ('race condition') in Copilot Chat (Microsoft Edge) allows an authorized attacker to disclose information over a network.
nvd
CVE-2024-30057MEDIUMCVSS 5.4≥ 1.0.0.0, < 126.0.2592.562024-06-13
CVE-2024-30057 [MEDIUM] CWE-356 Microsoft Edge for iOS Spoofing Vulnerability
Microsoft Edge for iOS Spoofing Vulnerability
Microsoft Edge for iOS Spoofing Vulnerability
cvelistv5
CVE-2025-29796MEDIUMCVSS 4.7≥ 1.0.0.0, < 135.0.3179.542025-04-04
CVE-2025-29796 [MEDIUM] CWE-451 Microsoft Edge for iOS Spoofing Vulnerability
Microsoft Edge for iOS Spoofing Vulnerability
User interface (ui) misrepresentation of critical information in Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network.
cvelistv5
CVE-2023-36883MEDIUMCVSS 4.3≥ 1.0.0.0, < 114.0.1823.822023-07-14
CVE-2023-36883 [MEDIUM] Microsoft Edge for iOS Spoofing Vulnerability
Microsoft Edge for iOS Spoofing Vulnerability
Microsoft Edge for iOS Spoofing Vulnerability
cvelistv5
CVE-2021-43220LOWCVSS 3.1≥ 1.0.0.0, < 96.0 1954.292021-11-24
CVE-2021-43220 [LOW] Microsoft Edge for iOS Spoofing Vulnerability
Microsoft Edge for iOS Spoofing Vulnerability
Microsoft Edge for iOS Spoofing Vulnerability
cvelistv5