CVE-2026-58285

Microsoft Edge (Chromium-based) is affected by CVE-2026-58285 due to an input/resource access type confusion vulnerability, enabling a remote attacker to execute code over the network. The CVSS 3.1 metrics show Network attack, high impact on confidentiality, integrity, and availability, with user...

CVE-2026-58284

CVE-2026-58284 affects Microsoft Edge (Chromium-based). The vulnerability is described as improper authorization that could allow an unauthorized attacker to execute code over a network (remote code execution). The NVD entry lists a CVSS v3.1 base score of 8.3 (HITE: HIGH) with Network attack vec...

CVE-2026-57991 Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

...

CVE-2026-57981

Use after free in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

CVE-2026-58299

CVE-2026-58299 affects Microsoft Edge for Android. The issue is a time-of-check time-of-use (TOCTOU) race condition that could allow a network-based attacker to execute code remotely. This is documented with a CVSS v3.1 base score of 7.5 (HIGH) and network attack vector, requiring no privileges b...

CVE-2026-56646

Exposure of sensitive information to an unauthorized actor in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-57984 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

CVE-2026-56645

CVE-2026-56645 is a heap-based buffer overflow in Microsoft Edge (Chromium-based) that allows a remote attacker to execute code over a network. CVSS 3.1: 8.8 (HIGH), AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. Exploitation details are not provided in the connected documents; no explicit exploit status o...

The vulnerability of Google Chrome and Microsoft Edge web browsers allows attackers to bypass existing security measures.

The vulnerability of Google Chrome and Microsoft Edge browser-based services is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing security mechanisms through the created HTML pages...

PT-2026-48703

Name of the Vulnerable Software and Affected Versions Idira Secrets Manager SaaS Edge versions prior to 1.8 Description Improper access control within internal authentication components allows a remote, unauthenticated attacker to submit a specially crafted request. This can lead to the...

The vulnerability of the Media component in Google Chrome and Microsoft Edge allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Media component in Google Chrome and Microsoft Edge is related to improper protection of physical external channels. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially created...

The vulnerability of the search function in Google Chrome and Microsoft Edge allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the search function in Google Chrome and Microsoft Edge is related to a violation of data protection mechanisms. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially created HTML page...

The vulnerability of the Companion component in Google Chrome and Microsoft Edge browsers allows attackers to increase their privileges.

The vulnerability of the Companion browser components in Google Chrome and Microsoft Edge is related to a flaw in the data protection mechanism. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to gain unauthorized access to protected information.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

CVE-2026-9908

creationtimestamp| type| source ---|---|--- 2026-05-28 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260529 2026-05-28 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260529 2026-05-29...

CVE-2026-9924

creationtimestamp| type| source ---|---|--- 2026-05-28 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260529 2026-05-28 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260529 2026-05-29...

CVE-2026-9937

creationtimestamp| type| source ---|---|--- 2026-05-28 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260529 2026-05-28 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260529 2026-05-29...

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge browsers allows a hacker to bypass the sandboxing protection mechanisms.

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to bypass the sandboxing protection mechanisms...

The vulnerability of the DOM components in Google Chrome and Microsoft Edge allows a hacker to execute arbitrary code.

The vulnerability of the DOM components in Google Chrome and Microsoft Edge relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the Cross-Origin-Opener-Policy (COOP) function in Google Chrome and Microsoft Edge allows a perpetrator to bypass existing security mechanisms.

The vulnerability of the Cross-Origin-Opener-Policy COOP function in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to bypass existing security mechanisms...