Microsoft Edge_chromium
277 CVEs affecting Microsoft Edge_chromium. Latest disclosed: 2026-07-12. Critical: 10, High: 128.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-21326 | Critical | 9.6 | 2024-01-26 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
CVE-2023-35618 | Critical | 9.6 | 2023-12-07 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
CVE-2023-6345 | Critical | 9.6 | 2023-11-29 | Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a s… |
CVE-2023-36735 | Critical | 9.6 | 2023-09-15 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
CVE-2022-4135 | Critical | 9.6 | 2022-11-25 | Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentially perform… |
CVE-2022-33649 | Critical | 9.6 | 2022-08-09 | Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability |
CVE-2021-21132 | Critical | 9.6 | 2021-02-09 | Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted… |
CVE-2021-21124 | Critical | 9.6 | 2021-02-09 | Potential user after free in Speech Recognizer in Google Chrome on Android prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox esc… |
CVE-2021-21121 | Critical | 9.6 | 2021-02-09 | Use after free in Omnibox in Google Chrome on Linux prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML… |
CVE-2026-58289 | Critical | 9.0 | 2026-07-03 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |
CVE-2026-57981 | High | 8.8 | 2026-07-03 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |
CVE-2026-57974 | High | 8.8 | 2026-07-03 | Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |
CVE-2026-56645 | High | 8.8 | 2026-07-03 | Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |
CVE-2026-32208 | High | 8.8 | 2026-06-19 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Entra ID allows an authorized attacker to perform spoofing ov… |
CVE-2026-45495 | High | 8.8 | 2026-05-18 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
CVE-2025-14174 | High | 8.8 | 2025-12-12 | Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memory access via a cra… |
CVE-2025-49713 | High | 8.8 | 2025-07-02 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |
CVE-2025-5419 | High | 8.8 | 2025-06-03 | Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
CVE-2025-25000 | High | 8.8 | 2025-04-04 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |
CVE-2025-21408 | High | 8.8 | 2025-02-06 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |