Chromium: CVE-2026-3539 Object lifecycle issue in DevTools

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Malicious AI Assistant Extensions Harvest LLM Chat Histories

Microsoft Defender has been investigating reports of malicious Chromium‑based browser extensions that impersonate legitimate AI assistant tools to harvest LLM chat histories and browsing data. Reporting indicates these extensions have reached approximately 900,000 installs. Microsoft Defender...

Chromium: CVE-2026-3061 Out of bounds read in Media

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-2323 Inappropriate implementation in Downloads

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-0102 Microsoft Edge (Chromium-based) Defense in Depth Vulnerability

...

CVE-2026-0102 Microsoft Edge (Chromium-based) Defense in Depth Vulnerability

...

CVE-2026-0102

CVE-2026-0102 affects Microsoft Edge (Chromium-based) with a vulnerability where, under specific conditions, a malicious webpage can trigger autofill population after two consecutive taps, potentially disclosing stored autofill data (addresses, email, phone number metadata). Connected documents i...

CVE-2026-0391 Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

...

CVE-2026-0391 Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

...

Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

User interface ui misrepresentation of critical information in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network...

Chromium: CVE-2026-0903 Insufficient validation of untrusted input in Downloads

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-0900 Inappropriate implementation in V8

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-21223 Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

...

CVE-2026-21223 Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

...

CVE-2026-21223

CVE-2026-21223 affects Microsoft Edge (Chromium-based) via the Edge Elevation Service. The vulnerability is a design flaw in a privileged COM interface (IElevatorEdge) that does not properly validate the caller’s privileges, enabling a standard local user to invoke LaunchUpdateCmdElevatedAndWait ...

Microsoft Edge (Chromium-Based) Insufficient policy enforcement Vulnerability (Jan 2026)

Microsoft Edge Chromium-Based is prone to an insufficient policy enforcement vulnerability. SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

CVE-2025-62224 Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

...

CVE-2025-62224 Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

...

Microsoft Edge (Chromium-based) Spoofing Vulnerability (CNVD-2026-00010)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A spoofing vulnerability exists in Microsoft Edge Chromium-based, which can be exploited by attackers to perform spoofing attacks...

Microsoft Edge (Chromium-Based) < 143.0.3650.96 Multiple Vulnerabilities (Dec 2025)

Microsoft Edge Chromium-Based is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...