Edge (Microsoft) - vulnerabilities (CVEs)

776 CVEs, 0 in the last 30 days, 633 known versions, newest CVE from 2026-09-11. Vendor: Microsoft.

CVEs of Edge

CVE-2026-70341 - CVSS 8.8 (high), 2026-09-11: Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.
CVE-2026-72984 - CVSS 8.8 (high), 2026-08-28: Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
CVE-2026-66798 - CVSS 4.3 (medium), 2026-08-28: Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
CVE-2026-66324 - CVSS 6.5 (medium), 2026-08-28: External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-66323 - CVSS 5.4 (medium), 2026-08-28: Improper neutralization of parameter/argument delimiters in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
CVE-2026-62904 - CVSS 5.4 (medium), 2026-08-28: Incorrect authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
CVE-2026-58616 - CVSS 4.4 (medium), 2026-08-28: Concurrent execution using shared resource with improper synchronization ('race condition') in Copilot Chat (Microsoft Edge) allows an authorized attacker to…
CVE-2026-70331 - CVSS 5.4 (medium), 2026-08-28: Improper neutralization of input used for llm prompting in Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-66310 - CVSS 7.7 (high), 2026-08-03: External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally.
CVE-2026-62828 - CVSS 5.4 (medium), 2026-07-28: Improper input validation in Microsoft Edge for Android allows an unauthorized attacker to perform tampering over a network.
CVE-2026-42891 - CVSS 6.5 (medium), 2026-05-12: User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a…
CVE-2026-35429 - CVSS 4.3 (medium), 2026-05-12: User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a…
CVE-2026-33119 - CVSS 5.4 (medium), 2026-04-10: User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a…
CVE-2026-26133 - CVSS 7.1 (high), 2026-03-16: AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.
CVE-2026-0385 - CVSS 5 (medium), 2026-03-16: Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability
CVE-2025-62224 - CVSS 5.5 (medium), 2026-01-07: User interface (ui) misrepresentation of critical information in Microsoft Edge for Android allows an authorized attacker to perform spoofing over a network.
CVE-2025-65046 - CVSS 3.1 (low), 2025-12-18: Microsoft Edge (Chromium-based) Spoofing Vulnerability
CVE-2025-47967 - CVSS 4.7 (medium), 2025-09-16: Insufficient ui warning of dangerous operations in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network.
CVE-2025-49736 - CVSS 4.3 (medium), 2025-08-12: The ui performs the wrong action in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network.
CVE-2025-49755 - CVSS 4.3 (medium), 2025-08-12: User interface (ui) misrepresentation of critical information in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network.
CVE-2025-29796 - CVSS 4.7 (medium), 2025-04-04: User interface (ui) misrepresentation of critical information in Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network.
CVE-2025-25001 - CVSS 4.3 (medium), 2025-04-04: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to…
CVE-2025-21253 - CVSS 5.3 (medium), 2025-02-06: Microsoft Edge for IOS and Android Spoofing Vulnerability
CVE-2024-38222 - CVSS 6.5 (medium), 2024-09-12: Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
CVE-2024-41879 - CVSS 7.8 (high), 2024-08-26: Acrobat Reader versions 127.0.2651.105 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the…
CVE-2024-38208 - CVSS 6.1 (medium), 2024-08-22: Microsoft Edge for Android Spoofing Vulnerability
CVE-2024-7971 - CVSS 9.6 (critical), 2024-08-21: Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to exploit heap corruption via a crafted HTML page. (Chromium security…
CVE-2024-38103 - CVSS 5.9 (medium), 2024-07-25: Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
CVE-2024-38156 - CVSS 6.1 (medium), 2024-07-19: Microsoft Edge (Chromium-based) Spoofing Vulnerability
CVE-2024-38093 - CVSS 4.3 (medium), 2024-06-20: Microsoft Edge (Chromium-based) Spoofing Vulnerability
CVE-2024-38082 - CVSS 4.7 (medium), 2024-06-20: Microsoft Edge (Chromium-based) Spoofing Vulnerability
CVE-2024-38083 - CVSS 4.3 (medium), 2024-06-13: Microsoft Edge (Chromium-based) Spoofing Vulnerability
CVE-2024-30057 - CVSS 5.4 (medium), 2024-06-13: Microsoft Edge for iOS Spoofing Vulnerability
CVE-2024-29057 - CVSS 4.3 (medium), 2024-03-22: Microsoft Edge (Chromium-based) Spoofing Vulnerability
CVE-2024-26247 - CVSS 4.7 (medium), 2024-03-22: Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
CVE-2024-26196 - CVSS 4.3 (medium), 2024-03-21: Microsoft Edge for Android (Chromium-based) Information Disclosure Vulnerability
CVE-2024-26246 - CVSS 3.9 (low), 2024-03-14: Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
CVE-2024-26167 - CVSS 4.3 (medium), 2024-03-07: Microsoft Edge for Android Spoofing Vulnerability
CVE-2024-26188 - CVSS 4.3 (medium), 2024-02-23: Microsoft Edge (Chromium-based) Spoofing Vulnerability
CVE-2023-36029 - CVSS 4.3 (medium), 2023-11-03: Microsoft Edge (Chromium-based) Spoofing Vulnerability
CVE-2023-5217 - CVSS 8.8 (high), 2023-09-28: Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit…
CVE-2023-38173 - CVSS 4.3 (medium), 2023-07-21: Microsoft Edge for Android Spoofing Vulnerability
CVE-2023-36888 - CVSS 6.3 (medium), 2023-07-14: Microsoft Edge for Android (Chromium-based) Tampering Vulnerability
CVE-2023-36883 - CVSS 4.3 (medium), 2023-07-14: Microsoft Edge for iOS Spoofing Vulnerability
CVE-2023-28301 - CVSS 3.7 (low), 2023-04-11: Microsoft Edge (Chromium-based) Tampering Vulnerability
CVE-2023-28284 - CVSS 4.3 (medium), 2023-04-11: Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
CVE-2023-23374 - CVSS 8.3 (high), 2023-02-14: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2022-44708 - CVSS 8.3 (high), 2022-12-13: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2022-4135 - CVSS 9.6 (critical), 2022-11-25: Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentially perform…
CVE-2022-37968 - CVSS 10 (critical), 2022-10-11: Microsoft has identified a vulnerability affecting the cluster connect feature of Azure Arc-enabled Kubernetes clusters. This vulnerability could allow an…
CVE-2022-23258 - CVSS 4.3 (medium), 2022-01-25: Microsoft Edge for Android Spoofing Vulnerability
CVE-2021-43220 - CVSS 7.5 (high), 2021-11-24: Microsoft Edge for iOS Spoofing Vulnerability
CVE-2021-41351 - CVSS 4.3 (medium), 2021-11-10: Microsoft Edge (Chrome based) Spoofing on IE Mode
CVE-2021-38669 - CVSS 8.8 (high), 2021-09-15: Microsoft Edge (Chromium-based) Tampering Vulnerability
CVE-2021-30624 - CVSS 8.8 (high), 2021-09-03: Chromium: CVE-2021-30624 Use after free in Autofill
CVE-2021-30623 - CVSS 8.8 (high), 2021-09-03: Chromium: CVE-2021-30623 Use after free in Bookmarks
CVE-2021-30621 - CVSS 6.5 (medium), 2021-09-03: Chromium: CVE-2021-30621 UI Spoofing in Autofill
CVE-2021-30608 - CVSS 8.8 (high), 2021-09-03: Chromium: CVE-2021-30608 Use after free in Web Share
CVE-2021-30611 - CVSS 8.8 (high), 2021-09-03: Chromium: CVE-2021-30611 Use after free in WebRTC
CVE-2021-30614 - CVSS 8.8 (high), 2021-09-03: Chromium: CVE-2021-30614 Heap buffer overflow in TabStrip
CVE-2021-30617 - CVSS 6.5 (medium), 2021-09-03: Chromium: CVE-2021-30617 Policy bypass in Blink
CVE-2021-30620 - CVSS 8.8 (high), 2021-09-03: Chromium: CVE-2021-30620 Insufficient policy enforcement in Blink
CVE-2021-30607 - CVSS 8.8 (high), 2021-09-03: Chromium: CVE-2021-30607 Use after free in Permissions
CVE-2021-30610 - CVSS 8.8 (high), 2021-09-03: Chromium: CVE-2021-30610 Use after free in Extensions API
CVE-2021-30613 - CVSS 8.8 (high), 2021-09-03: Chromium: CVE-2021-30613 Use after free in Base internals
CVE-2021-30616 - CVSS 8.8 (high), 2021-09-03: Chromium: CVE-2021-30616 Use after free in Media
CVE-2021-30619 - CVSS 6.5 (medium), 2021-09-03: Chromium: CVE-2021-30619 UI Spoofing in Autofill
CVE-2021-30622 - CVSS 8.8 (high), 2021-09-03: Chromium: CVE-2021-30622 Use after free in WebApp Installs
CVE-2021-30606 - CVSS 8.8 (high), 2021-09-03: Chromium: CVE-2021-30606 Use after free in Blink
CVE-2021-30609 - CVSS 8.8 (high), 2021-09-03: Chromium: CVE-2021-30609 Use after free in Sign-In
CVE-2021-30612 - CVSS 8.8 (high), 2021-09-03: Chromium: CVE-2021-30612 Use after free in WebRTC
CVE-2021-30615 - CVSS 6.5 (medium), 2021-09-03: Chromium: CVE-2021-30615 Cross-origin data leak in Navigation
CVE-2021-30618 - CVSS 8.8 (high), 2021-09-03: Chromium: CVE-2021-30618 Inappropriate implementation in DevTools
CVE-2021-38642 - CVSS 6.1 (medium), 2021-09-02: Microsoft Edge for iOS Spoofing Vulnerability
CVE-2021-26436 - CVSS 8.1 (high), 2021-09-02: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2021-38641 - CVSS 6.1 (medium), 2021-09-02: Microsoft Edge for Android Spoofing Vulnerability
CVE-2021-36930 - CVSS 8.1 (high), 2021-09-02: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2021-26439 - CVSS 5.9 (medium), 2021-09-02: Microsoft Edge for Android Information Disclosure Vulnerability
CVE-2021-26411 - CVSS 8.8 (high), 2021-03-11: Internet Explorer Memory Corruption Vulnerability
CVE-2021-24100 - CVSS 5 (medium), 2021-02-25: Microsoft Edge for Android Information Disclosure Vulnerability
CVE-2021-21157 - CVSS 8.8 (high), 2021-02-22: Use after free in Web Sockets in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially exploit heap corruption via a crafted…
CVE-2021-21141 - CVSS 6.5 (medium), 2021-02-09: Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass file extension policy via a…
CVE-2021-21140 - CVSS 6.8 (medium), 2021-02-09: Uninitialized use in USB in Google Chrome prior to 88.0.4324.96 allowed a local attacker to potentially perform out of bounds memory access via via a USB…
CVE-2021-1705 - CVSS 7.5 (high), 2021-01-12: Microsoft Edge (HTML-based) Memory Corruption Vulnerability
CVE-2020-17153 - CVSS 6.1 (medium), 2020-12-10: Microsoft Edge for Android Spoofing Vulnerability
CVE-2020-17131 - CVSS 7.5 (high), 2020-12-10: Chakra Scripting Engine Memory Corruption Vulnerability
CVE-2020-17058 - CVSS 7.5 (high), 2020-11-11: Microsoft Browser Memory Corruption Vulnerability
CVE-2020-17048 - CVSS 8.1 (high), 2020-11-11: Chakra Scripting Engine Memory Corruption Vulnerability
CVE-2020-17054 - CVSS 7.5 (high), 2020-11-11: Chakra Scripting Engine Memory Corruption Vulnerability
CVE-2020-17052 - CVSS 8.1 (high), 2020-11-11: Scripting Engine Memory Corruption Vulnerability
CVE-2020-16009 - CVSS 8.8 (high), 2020-11-03: Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML…
CVE-2020-1180 - CVSS 7.5 (high), 2020-09-11: A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory. The vulnerability could corrupt…
CVE-2020-1172 - CVSS 7.5 (high), 2020-09-11: A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory. The vulnerability could corrupt…
CVE-2020-1057 - CVSS 8.1 (high), 2020-09-11: A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory. The vulnerability could corrupt…
CVE-2020-16884 - CVSS 8.8 (high), 2020-09-11: A remote code execution vulnerability exists in the way that the IEToEdge Browser Helper Object (BHO) plugin on Internet Explorer handles objects in…
CVE-2020-0878 - CVSS 7.5 (high), 2020-09-11: A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way…
CVE-2020-1569 - CVSS 7.8 (high), 2020-08-17: A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory. The vulnerability could corrupt memory in such a way…
CVE-2020-1568 - CVSS 7.5 (high), 2020-08-17: A remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory. The vulnerability could corrupt memory in…
CVE-2020-1555 - CVSS 8.8 (high), 2020-08-17: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability…
CVE-2020-1462 - CVSS 4.3 (medium), 2020-07-14: An information disclosure vulnerability exists when Skype for Business is accessed via Microsoft Edge (EdgeHTML-based), aka 'Skype for Business via Microsoft…