PT-2026-41712

Name of the Vulnerable Software and Affected Versions Microsoft Edge versions prior to 148.0.3967.70 Description A remote code execution issue exists in Microsoft Edge Chromium-based due to improper input validation within the browser's rendering pipeline and JavaScript engine. Specifically, the...

CVE-2026-40416

User interface ui misrepresentation of critical information in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...

EUVD-2026-29673

User interface ui misrepresentation of critical information in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-42891

User interface ui misrepresentation of critical information in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-40416 Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

...

CVE-2026-42838 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

...

CVE-2026-42838

CVE-2026-42838 affects Microsoft Edge (Chromium-based). The issue is caused by improper neutralization of special elements in output used by a downstream component ('injection'), enabling a remote attacker to elevate privileges over a network. Affected product scope includes Microsoft Edge (Chrom...

CVE-2026-40416

CVE-2026-40416 affects Microsoft Edge (Chromium-based) for Android. The vulnerability is a UI misrepresentation that allows an unauthorized attacker to spoof information over the network, potentially misleading users. Affected component is the Edge browser on Android; root cause is misleading UI ...

CVE-2026-42838 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

...

CVE-2026-40416 Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

...

CVE-2026-42891 Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

...

CVE-2026-35429 Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

...

CVE-2026-42891 Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

...

CVE-2026-42891

CVE-2026-42891 affects Microsoft Edge (Chromium-based) for Android . The issue is a UI misrepresentation that can enable an attacker to perform a spoofing action over a network. Documented impact includes spoofing user interface with potential exposure of sensitive information, aligned with the C...

CVE-2026-35429

CVE-2026-35429 affects Microsoft Edge for Android (Chromium-based) . The vulnerability is a UI misrepresentation that enables an unauthorized attacker to perform spoofing over a network. The CVSS 3.1 vector shows network attack, low attack complexity, no privileges required, user interaction need...

CVE-2026-41107

CVE-2026-41107 describes an information disclosure in Microsoft Edge (Chromium-based) caused by external control of a file name or path. The vulnerability affects Microsoft Edge for Android and the Chromium-based Edge on other platforms. The underlying issue enables an unauthorized attacker to di...

CVE-2026-41107 Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

...

Microsoft Edge (Chromium) < 148.0.3967.55 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 148.0.3967.55. It is, therefore, affected by multiple vulnerabilities as referenced in the May 11, 2026 advisory. - Insufficient validation of untrusted input in Media in Google Chrome on Android prior to 148.0.7778.96...

Chromium: CVE-2026-7941 Insufficient validation of untrusted input in Mobile

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

PT-2026-40259

Name of the Vulnerable Software and Affected Versions Microsoft Edge Chromium-based affected versions not specified Description Improper neutralization of special elements in output used by a downstream component injection allows an unauthorized attacker to elevate privileges over a network...