Microsoft Edge
761 CVEs affecting Microsoft Edge. Latest disclosed: 2026-05-12. Critical: 9, High: 499.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-0028 | Critical | 9.8 | 2017-07-17 | A remote code execution vulnerability exists when Microsoft scripting engine improperly accesses objects in memory. The vulnerability could corrupt memory in a… |
CVE-2017-0252 | Critical | 9.8 | 2017-05-15 | A remote code execution vulnerability exists in Microsoft Chakra Core in the way JavaScript engines render when handling objects in memory. aka "Scripting Engi… |
CVE-2017-0223 | Critical | 9.8 | 2017-05-15 | A remote code execution vulnerability exists in Microsoft Chakra Core in the way JavaScript engines render when handling objects in memory. aka "Scripting Engi… |
CVE-2015-0313 | Critical | 9.8 | 2015-02-02 | Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Lin… |
CVE-2015-0311 | Critical | 9.8 | 2015-01-23 | Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X and through 11.2.202.438 on… |
CVE-2024-7971 | Critical | 9.6 | 2024-08-21 | Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to exploit heap corruption via a crafted HTML page. (Chromium security s… |
CVE-2022-4135 | Critical | 9.6 | 2022-11-25 | Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentially perform… |
CVE-2016-0003 | Critical | 9.6 | 2016-01-13 | Microsoft Edge allows remote attackers to execute arbitrary code via unspecified vectors, aka "Microsoft Edge Memory Corruption Vulnerability." |
CVE-2019-0938 | Critical | 9.0 | 2019-05-16 | An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser, aka 'Micr… |
CVE-2023-5217 | High | 8.8 | 2023-09-28 | Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap… |
CVE-2021-30624 | High | 8.8 | 2021-09-03 | Chromium: CVE-2021-30624 Use after free in Autofill |
CVE-2021-30623 | High | 8.8 | 2021-09-03 | Chromium: CVE-2021-30623 Use after free in Bookmarks |
CVE-2021-30622 | High | 8.8 | 2021-09-03 | Chromium: CVE-2021-30622 Use after free in WebApp Installs |
CVE-2021-30620 | High | 8.8 | 2021-09-03 | Chromium: CVE-2021-30620 Insufficient policy enforcement in Blink |
CVE-2021-30618 | High | 8.8 | 2021-09-03 | Chromium: CVE-2021-30618 Inappropriate implementation in DevTools |
CVE-2021-30616 | High | 8.8 | 2021-09-03 | Chromium: CVE-2021-30616 Use after free in Media |
CVE-2021-30614 | High | 8.8 | 2021-09-03 | Chromium: CVE-2021-30614 Heap buffer overflow in TabStrip |
CVE-2021-30613 | High | 8.8 | 2021-09-03 | Chromium: CVE-2021-30613 Use after free in Base internals |
CVE-2021-30612 | High | 8.8 | 2021-09-03 | Chromium: CVE-2021-30612 Use after free in WebRTC |
CVE-2021-30611 | High | 8.8 | 2021-09-03 | Chromium: CVE-2021-30611 Use after free in WebRTC |