Microsoft Microsoft Edge (Chromium-based)
246 CVEs affecting Microsoft Microsoft Edge (Chromium-based). Latest disclosed: 2026-07-17. Critical: 5, High: 109.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-21326 | Critical | 9.6 | 2024-01-26 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
CVE-2023-35618 | Critical | 9.6 | 2023-12-07 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
CVE-2023-36735 | Critical | 9.6 | 2023-09-15 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
CVE-2022-33649 | Critical | 9.6 | 2022-08-09 | Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability |
CVE-2026-58289 | Critical | 9.0 | 2026-07-03 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |
CVE-2026-57981 | High | 8.8 | 2026-07-03 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |
CVE-2026-57974 | High | 8.8 | 2026-07-03 | Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |
CVE-2026-56645 | High | 8.8 | 2026-07-03 | Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |
CVE-2026-32208 | High | 8.8 | 2026-06-19 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Entra ID allows an authorized attacker to perform spoofing ov… |
CVE-2026-45495 | High | 8.8 | 2026-05-18 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
CVE-2025-49713 | High | 8.8 | 2025-07-02 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |
CVE-2025-25000 | High | 8.8 | 2025-04-04 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |
CVE-2025-21408 | High | 8.8 | 2025-02-06 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
CVE-2025-21342 | High | 8.8 | 2025-02-06 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
CVE-2023-36787 | High | 8.8 | 2023-08-21 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
CVE-2021-31982 | High | 8.8 | 2023-07-01 | Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability |
CVE-2021-30624 | High | 8.8 | 2021-09-03 | Chromium: CVE-2021-30624 Use after free in Autofill |
CVE-2021-30623 | High | 8.8 | 2021-09-03 | Chromium: CVE-2021-30623 Use after free in Bookmarks |
CVE-2021-30622 | High | 8.8 | 2021-09-03 | Chromium: CVE-2021-30622 Use after free in WebApp Installs |
CVE-2021-30620 | High | 8.8 | 2021-09-03 | Chromium: CVE-2021-30620 Insufficient policy enforcement in Blink |