Edge
by Microsoft
Source repositories
CVEs (965)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2016-3350 | Hig | 0.43 | 7.5 | 0.16 | Sep 14, 2016 | The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3377. | ||
| CVE-2016-0193 | Hig | 0.43 | 7.5 | 0.20 | May 11, 2016 | The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0186 and… | ||
| CVE-2016-0186 | Hig | 0.43 | 7.5 | 0.20 | May 11, 2016 | The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0191 and… | ||
| CVE-2016-0158 | Med | 0.43 | 6.5 | 0.14 | Apr 12, 2016 | Microsoft Edge allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka "Microsoft Edge Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0161. | ||
| CVE-2026-66324 | Med | 0.42 | 6.5 | 0.01 | Aug 28, 2026 | External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. | ||
| CVE-2026-66326 | Med | 0.42 | 6.5 | 0.00 | Aug 4, 2026 | Missing authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-66314 | Med | 0.42 | 6.5 | 0.00 | Aug 4, 2026 | Time-of-check time-of-use (toctou) race condition in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network. | ||
| CVE-2026-66312 | Med | 0.42 | 6.5 | 0.01 | Aug 4, 2026 | Buffer over-read in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network. | ||
| CVE-2026-42891 | Med | 0.42 | 6.5 | 0.00 | May 12, 2026 | User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. | ||
| CVE-2025-29825 | Med | 0.42 | 6.5 | 0.01 | May 2, 2025 | User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. | ||
| CVE-2025-29806 | Med | 0.42 | 6.5 | 0.01 | Mar 23, 2025 | No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | ||
| CVE-2025-21283 | Med | 0.42 | 6.5 | 0.01 | Feb 6, 2025 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | ||
| CVE-2025-21279 | Med | 0.42 | 6.5 | 0.02 | Feb 6, 2025 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | ||
| CVE-2025-21185 | Med | 0.42 | 6.5 | 0.01 | Jan 17, 2025 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | ||
| CVE-2024-43596 | Med | 0.42 | 6.5 | 0.01 | Oct 17, 2024 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | ||
| CVE-2024-43595 | Med | 0.42 | 6.5 | 0.01 | Oct 17, 2024 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | ||
| CVE-2024-43496 | Med | 0.42 | 6.5 | 0.01 | Sep 19, 2024 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | ||
| CVE-2024-43489 | Med | 0.42 | 6.5 | 0.01 | Sep 19, 2024 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | ||
| CVE-2024-38222 | Med | 0.42 | 6.5 | 0.01 | Sep 12, 2024 | Microsoft Edge (Chromium-based) Information Disclosure Vulnerability | ||
| CVE-2024-38219 | Med | 0.42 | 6.5 | 0.01 | Aug 12, 2024 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
- risk 0.43cvss 7.5epss 0.16
The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3377.
- risk 0.43cvss 7.5epss 0.20
The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0186 and…
- risk 0.43cvss 7.5epss 0.20
The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0191 and…
- risk 0.43cvss 6.5epss 0.14
Microsoft Edge allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka "Microsoft Edge Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0161.
- risk 0.42cvss 6.5epss 0.01
External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
- risk 0.42cvss 6.5epss 0.00
Missing authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
- risk 0.42cvss 6.5epss 0.00
Time-of-check time-of-use (toctou) race condition in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
- risk 0.42cvss 6.5epss 0.01
Buffer over-read in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.
- risk 0.42cvss 6.5epss 0.00
User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
- risk 0.42cvss 6.5epss 0.01
User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
- risk 0.42cvss 6.5epss 0.01
No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
- risk 0.42cvss 6.5epss 0.01
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
- risk 0.42cvss 6.5epss 0.02
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
- risk 0.42cvss 6.5epss 0.01
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
- risk 0.42cvss 6.5epss 0.01
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
- risk 0.42cvss 6.5epss 0.01
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
- risk 0.42cvss 6.5epss 0.01
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
- risk 0.42cvss 6.5epss 0.01
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
- risk 0.42cvss 6.5epss 0.01
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
- risk 0.42cvss 6.5epss 0.01
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Page 31 of 49