CVE-2026-40416 Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

...

CVE-2026-42838 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

...

CVE-2026-42838

CVE-2026-42838 affects Microsoft Edge (Chromium-based). The issue is caused by improper neutralization of special elements in output used by a downstream component ('injection'), enabling a remote attacker to elevate privileges over a network. Affected product scope includes Microsoft Edge (Chrom...

CVE-2026-42838 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

...

CVE-2026-40416 Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

...

CVE-2026-40416

CVE-2026-40416 affects Microsoft Edge (Chromium-based) for Android. The vulnerability is a UI misrepresentation that allows an unauthorized attacker to spoof information over the network, potentially misleading users. Affected component is the Edge browser on Android; root cause is misleading UI ...

CVE-2026-42891 Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

...

CVE-2026-35429 Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

...

CVE-2026-42891 Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

...

CVE-2026-42891

CVE-2026-42891 affects Microsoft Edge (Chromium-based) for Android . The issue is a UI misrepresentation that can enable an attacker to perform a spoofing action over a network. Documented impact includes spoofing user interface with potential exposure of sensitive information, aligned with the C...

CVE-2026-35429

CVE-2026-35429 affects Microsoft Edge for Android (Chromium-based) . The vulnerability is a UI misrepresentation that enables an unauthorized attacker to perform spoofing over a network. The CVSS 3.1 vector shows network attack, low attack complexity, no privileges required, user interaction need...

CVE-2026-41107 Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

...

CVE-2026-41107

CVE-2026-41107 describes an information disclosure in Microsoft Edge (Chromium-based) caused by external control of a file name or path. The vulnerability affects Microsoft Edge for Android and the Chromium-based Edge on other platforms. The underlying issue enables an unauthorized attacker to di...

Microsoft Edge (Chromium) < 148.0.3967.55 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 148.0.3967.55. It is, therefore, affected by multiple vulnerabilities as referenced in the May 11, 2026 advisory. - Insufficient validation of untrusted input in Media in Google Chrome on Android prior to 148.0.7778.96...

Chromium: CVE-2026-7941 Insufficient validation of untrusted input in Mobile

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

PT-2026-40259

Name of the Vulnerable Software and Affected Versions Microsoft Edge Chromium-based affected versions not specified Description Improper neutralization of special elements in output used by a downstream component injection allows an unauthorized attacker to elevate privileges over a network...

PT-2026-40243

Name of the Vulnerable Software and Affected Versions Microsoft Edge Chromium-based affected versions not specified Description External control of a file name or path allows an unauthorized attacker to disclose sensitive information over a network. Recommendations At the moment, there is no...

Chromium: CVE-2026-7965 Insufficient validation of untrusted input in DevTools

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-7972 Uninitialized Use in GPU

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-7902 Out of bounds memory access in V8

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...