Edge Chromium
by Microsoft
CVEs (324)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-65802 | Hig | 0.48 | 7.4 | 0.01 | Aug 4, 2026 | External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information over a network. | ||
| CVE-2026-41107 | Hig | 0.48 | 7.4 | 0.01 | May 12, 2026 | External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network. | ||
| CVE-2023-36014 | Hig | 0.48 | 7.3 | 0.01 | Nov 10, 2023 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | ||
| CVE-2023-36034 | Hig | 0.48 | 7.3 | 0.03 | Nov 3, 2023 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | ||
| CVE-2026-66322 | Hig | 0.46 | 7.1 | 0.00 | Aug 4, 2026 | Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. | ||
| CVE-2026-21223 | Hig | 0.46 | 7.1 | 0.00 | Jan 16, 2026 | Improper privilege management in Microsoft Edge (Chromium-based) allows an authorized attacker to bypass a security feature locally. | ||
| CVE-2024-30056 | Hig | 0.46 | 7.1 | 0.02 | May 25, 2024 | Microsoft Edge (Chromium-based) Information Disclosure Vulnerability | ||
| CVE-2023-36027 | Hig | 0.46 | 7.1 | 0.01 | Nov 10, 2023 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | ||
| CVE-2023-36024 | Hig | 0.46 | 7.1 | 0.01 | Nov 10, 2023 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | ||
| CVE-2023-36562 | Hig | 0.46 | 7.1 | 0.01 | Sep 15, 2023 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | ||
| CVE-2023-33145 | Med | 0.46 | 6.5 | 0.09 | Jun 14, 2023 | Microsoft Edge (Chromium-based) Information Disclosure Vulnerability | ||
| CVE-2024-21388 | Med | 0.45 | 6.5 | 0.32 | Jan 30, 2024 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | ||
| CVE-2026-66313 | Med | 0.44 | 6.8 | 0.00 | Aug 4, 2026 | Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering locally. | ||
| CVE-2021-21135 | Med | 0.44 | 6.5 | 0.19 | Feb 9, 2021 | Inappropriate implementation in Performance API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page. | ||
| CVE-2023-36008 | Med | 0.43 | 6.6 | 0.01 | Nov 16, 2023 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | ||
| CVE-2023-36022 | Med | 0.43 | 6.6 | 0.01 | Nov 3, 2023 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | ||
| CVE-2022-41115 | Med | 0.43 | 6.6 | 0.02 | Dec 13, 2022 | Microsoft Edge (Chromium-based) Update Elevation of Privilege Vulnerability | ||
| CVE-2021-30621 | Med | 0.43 | 6.5 | 0.03 | Sep 3, 2021 | Chromium: CVE-2021-30621 UI Spoofing in Autofill | ||
| CVE-2021-30619 | Med | 0.43 | 6.5 | 0.03 | Sep 3, 2021 | Chromium: CVE-2021-30619 UI Spoofing in Autofill | ||
| CVE-2021-30617 | Med | 0.43 | 6.5 | 0.04 | Sep 3, 2021 | Chromium: CVE-2021-30617 Policy bypass in Blink |
- risk 0.48cvss 7.4epss 0.01
External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information over a network.
- risk 0.48cvss 7.4epss 0.01
External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
- risk 0.48cvss 7.3epss 0.01
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
- risk 0.48cvss 7.3epss 0.03
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
- risk 0.46cvss 7.1epss 0.00
Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
- risk 0.46cvss 7.1epss 0.00
Improper privilege management in Microsoft Edge (Chromium-based) allows an authorized attacker to bypass a security feature locally.
- risk 0.46cvss 7.1epss 0.02
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
- risk 0.46cvss 7.1epss 0.01
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
- risk 0.46cvss 7.1epss 0.01
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
- risk 0.46cvss 7.1epss 0.01
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
- risk 0.46cvss 6.5epss 0.09
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
- risk 0.45cvss 6.5epss 0.32
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
- risk 0.44cvss 6.8epss 0.00
Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering locally.
- risk 0.44cvss 6.5epss 0.19
Inappropriate implementation in Performance API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
- risk 0.43cvss 6.6epss 0.01
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
- risk 0.43cvss 6.6epss 0.01
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
- risk 0.43cvss 6.6epss 0.02
Microsoft Edge (Chromium-based) Update Elevation of Privilege Vulnerability
- risk 0.43cvss 6.5epss 0.03
Chromium: CVE-2021-30621 UI Spoofing in Autofill
- risk 0.43cvss 6.5epss 0.03
Chromium: CVE-2021-30619 UI Spoofing in Autofill
- risk 0.43cvss 6.5epss 0.04
Chromium: CVE-2021-30617 Policy bypass in Blink
Page 6 of 17