11092 matches found
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge web browsers allows attackers to access confidential data.
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge web browsers allows attackers to access confidential data.
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge relates to reading data beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to access confidential data through a specially created HTML page...
The vulnerability of the Autofill component in Google Chrome and Microsoft Edge web browsers allows a hacker to compromise data integrity.
The vulnerability of the Autofill component in Google Chrome and Microsoft Edge is related to lack of access control. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML page...
The vulnerability of the Viz component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.
The vulnerability of the Viz component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...
PT-2026-83437
A new vulnerability with increased severity was disclosed for Microsoft Edge CVE-2026-70341 https://t.co/rjoItPf1ZC...
CVE-2026-72984
Access of resource using incompatible type 'type confusion' in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...
CVE-2026-70331
Improper neutralization of input used for llm prompting in Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-70309
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-66798
Use after free in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...
CVE-2026-66324
External control of file name or path in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-66323
Improper neutralization of parameter/argument delimiters in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...
CVE-2026-62904
Incorrect authorization in Microsoft Edge Chromium-based allows an unauthorized attacker to disclose information over a network...
CVE-2026-58616
Concurrent execution using shared resource with improper synchronization 'race condition' in Copilot Chat Microsoft Edge allows an authorized attacker to disclose information over a network...
EUVD-2026-67853
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-70309
An origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network. The CVSS 3.1 score is 5.4 (Medium) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N, indicating that exploitation requires user interaction and results in...
CVE-2026-70309 Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
...
CVE-2026-72984 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
...
CVE-2026-72984 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
...
EUVD-2026-67852
Access of resource using incompatible type 'type confusion' in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...
CVE-2026-72984
CVE-2026-72984 is a type confusion vulnerability in Microsoft Edge (Chromium-based) , described as an "access of resource using incompatible type." This flaw allows an unauthorized attacker to achieve remote code execution over a network, provided user interaction is required (e.g., the victim vi...