Edgechromium
by Microsoft
CVEs (340)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-32208 | Hig | 0.57 | 8.8 | 0.01 | Jun 19, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Entra ID allows an authorized attacker to perform spoofing over a network. | ||
| CVE-2026-45495 | Hig | 0.57 | 8.8 | 0.01 | May 18, 2026 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | ||
| CVE-2025-49713 | Hig | 0.57 | 8.8 | 0.01 | Jul 2, 2025 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | ||
| CVE-2025-47181 | Hig | 0.57 | 8.8 | 0.01 | May 22, 2025 | Improper link resolution before file access ('link following') in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges locally. | ||
| CVE-2025-25000 | Hig | 0.57 | 8.8 | 0.01 | Apr 4, 2025 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | ||
| CVE-2025-21408 | Hig | 0.57 | 8.8 | 0.01 | Feb 6, 2025 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | ||
| CVE-2025-21342 | Hig | 0.57 | 8.8 | 0.01 | Feb 6, 2025 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | ||
| CVE-2023-36787 | Hig | 0.57 | 8.8 | 0.02 | Aug 21, 2023 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | ||
| CVE-2021-31982 | Hig | 0.57 | 8.8 | 0.01 | Jul 1, 2023 | Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability | ||
| CVE-2023-24892 | Hig | 0.57 | 8.2 | 0.04 | Mar 14, 2023 | Microsoft Edge (Chromium-based) Webview2 Spoofing Vulnerability | ||
| CVE-2021-30612 | Hig | 0.57 | 8.8 | 0.03 | Sep 3, 2021 | Chromium: CVE-2021-30612 Use after free in WebRTC | ||
| CVE-2021-30611 | Hig | 0.57 | 8.8 | 0.03 | Sep 3, 2021 | Chromium: CVE-2021-30611 Use after free in WebRTC | ||
| CVE-2026-70341 | Hig | 0.55 | 8.5 | 0.01 | Sep 11, 2026 | Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network. | ||
| CVE-2024-38218 | Hig | 0.55 | 8.4 | 0.01 | Aug 12, 2024 | Microsoft Edge (HTML-based) Memory Corruption Vulnerability | ||
| CVE-2026-72970 | Hig | 0.54 | 8.3 | 0.01 | Aug 14, 2026 | Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-50521 | Hig | 0.54 | 8.3 | 0.01 | Jul 1, 2026 | Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network. | ||
| CVE-2024-21399 | Hig | 0.54 | 8.3 | 0.01 | Feb 2, 2024 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | ||
| CVE-2024-21385 | Hig | 0.54 | 8.3 | 0.01 | Jan 26, 2024 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | ||
| CVE-2023-36741 | Hig | 0.54 | 8.3 | 0.02 | Aug 26, 2023 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | ||
| CVE-2022-29146 | Hig | 0.54 | 8.3 | 0.01 | Jun 29, 2023 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
- risk 0.57cvss 8.8epss 0.01
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Entra ID allows an authorized attacker to perform spoofing over a network.
- risk 0.57cvss 8.8epss 0.01
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.01
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Improper link resolution before file access ('link following') in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges locally.
- risk 0.57cvss 8.8epss 0.01
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.01
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.02
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
- risk 0.57cvss 8.8epss 0.01
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
- risk 0.57cvss 8.2epss 0.04
Microsoft Edge (Chromium-based) Webview2 Spoofing Vulnerability
- risk 0.57cvss 8.8epss 0.03
Chromium: CVE-2021-30612 Use after free in WebRTC
- risk 0.57cvss 8.8epss 0.03
Chromium: CVE-2021-30611 Use after free in WebRTC
- risk 0.55cvss 8.5epss 0.01
Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.
- risk 0.55cvss 8.4epss 0.01
Microsoft Edge (HTML-based) Memory Corruption Vulnerability
- risk 0.54cvss 8.3epss 0.01
Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
- risk 0.54cvss 8.3epss 0.01
Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.
- risk 0.54cvss 8.3epss 0.01
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
- risk 0.54cvss 8.3epss 0.01
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
- risk 0.54cvss 8.3epss 0.02
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
- risk 0.54cvss 8.3epss 0.01
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Page 3 of 17