Microsoft Microsoft Edge For Android
34 CVEs affecting Microsoft Microsoft Edge For Android. Latest disclosed: 2026-09-11. Critical: 0, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-72984 | High | 8.8 | 2026-08-28 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |
CVE-2026-70341 | High | 8.5 | 2026-09-11 | Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network. |
CVE-2023-23374 | High | 8.3 | 2023-02-14 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
CVE-2026-66310 | High | 7.7 | 2026-08-04 | External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally. |
CVE-2026-26133 | High | 7.1 | 2026-03-16 | AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network. |
CVE-2026-66324 | Medium | 6.5 | 2026-08-28 | External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. |
CVE-2026-42891 | Medium | 6.5 | 2026-05-12 | User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a net… |
CVE-2023-36888 | Medium | 6.3 | 2023-07-14 | Microsoft Edge for Android (Chromium-based) Tampering Vulnerability |
CVE-2024-38208 | Medium | 6.1 | 2024-08-22 | Microsoft Edge for Android Spoofing Vulnerability |
CVE-2025-62224 | Medium | 5.5 | 2026-01-07 | User interface (ui) misrepresentation of critical information in Microsoft Edge for Android allows an authorized attacker to perform spoofing over a network. |
CVE-2026-66323 | Medium | 5.4 | 2026-08-28 | Improper neutralization of parameter/argument delimiters in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |
CVE-2026-62904 | Medium | 5.4 | 2026-08-28 | Incorrect authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network. |
CVE-2026-62828 | Medium | 5.4 | 2026-07-28 | Improper input validation in Microsoft Edge for Android allows an unauthorized attacker to perform tampering over a network. |
CVE-2026-33119 | Medium | 5.4 | 2026-04-10 | User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a net… |
CVE-2025-21253 | Medium | 5.3 | 2025-02-06 | Microsoft Edge for IOS and Android Spoofing Vulnerability |
CVE-2026-0385 | Medium | 5.0 | 2026-03-16 | Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability |
CVE-2021-24100 | Medium | 5.0 | 2021-02-25 | Microsoft Edge for Android Information Disclosure Vulnerability |
CVE-2021-26439 | Medium | 4.6 | 2021-09-02 | Microsoft Edge for Android Information Disclosure Vulnerability |
CVE-2026-58616 | Medium | 4.4 | 2026-08-28 | Concurrent execution using shared resource with improper synchronization ('race condition') in Copilot Chat (Microsoft Edge) allows an authorized attacker to d… |
CVE-2026-66798 | Medium | 4.3 | 2026-08-28 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |