Microsoft Microsoft Edge For iOS
17 CVEs affecting Microsoft Microsoft Edge For iOS. Latest disclosed: 2026-09-11. Critical: 0, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-72984 | High | 8.8 | 2026-08-28 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |
CVE-2026-70341 | High | 8.5 | 2026-09-11 | Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network. |
CVE-2022-44708 | High | 8.3 | 2022-12-13 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
CVE-2026-26133 | High | 7.1 | 2026-03-16 | AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network. |
CVE-2026-66324 | Medium | 6.5 | 2026-08-28 | External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. |
CVE-2026-70331 | Medium | 5.4 | 2026-08-28 | Improper neutralization of input used for llm prompting in Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network. |
CVE-2026-66323 | Medium | 5.4 | 2026-08-28 | Improper neutralization of parameter/argument delimiters in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |
CVE-2026-62904 | Medium | 5.4 | 2026-08-28 | Incorrect authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network. |
CVE-2024-30057 | Medium | 5.4 | 2024-06-13 | Microsoft Edge for iOS Spoofing Vulnerability |
CVE-2025-21253 | Medium | 5.3 | 2025-02-06 | Microsoft Edge for IOS and Android Spoofing Vulnerability |
CVE-2025-29796 | Medium | 4.7 | 2025-04-04 | User interface (ui) misrepresentation of critical information in Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network. |
CVE-2026-58616 | Medium | 4.4 | 2026-08-28 | Concurrent execution using shared resource with improper synchronization ('race condition') in Copilot Chat (Microsoft Edge) allows an authorized attacker to d… |
CVE-2026-66798 | Medium | 4.3 | 2026-08-28 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |
CVE-2025-25001 | Medium | 4.3 | 2025-04-04 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perf… |
CVE-2024-38083 | Medium | 4.3 | 2024-06-13 | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
CVE-2023-36883 | Medium | 4.3 | 2023-07-14 | Microsoft Edge for iOS Spoofing Vulnerability |
CVE-2021-43220 | Low | 3.1 | 2021-11-24 | Microsoft Edge for iOS Spoofing Vulnerability |