11456 matches found
CVE-2026-85892
CVE-2026-85892 is a race condition vulnerability in Microsoft Edge (Chromium-based) , caused by concurrent execution using a shared resource with improper synchronization. An authorized attacker can exploit this to elevate privileges locally , with the scope changed to allow full compromise of co...
Microsoft Edge (Chromium) < 153.0.4234.32 Multiple Vulnerabilities
The version of Microsoft Edge installed on the remote Windows host is prior to 153.0.4234.32. It is, therefore, affected by multiple vulnerabilities as referenced in the September 15, 2026 advisory. - Incorrect authorization in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remot...
CVE-2026-85892: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Edge Chromium-based allows an authorized attacker to elevate privileges locally...
Chromium CVE-2026-87491: Out of bounds write in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Google is aware that an exploit for CVE-2026-87491 exists in the wild...
PT-2026-90781
Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Edge Chromium-based allows an authorized attacker to elevate privileges locally...
GLSA-202609-02 : Chromium, Google Chrome, Microsoft Edge, Opera, Vivaldi: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202609-02 Chromium, Google Chrome, Microsoft Edge, Opera, Vivaldi: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in Chromium, Google Chrome, Microsoft Edge, Opera, Vivaldi. Please review the CVE identifier...
CVE-2026-77490
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...
EUVD-2026-76247
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-77490
CVE-2026-77490 affects Microsoft Edge (Chromium-based) due to improper neutralization of input during web page generation, i.e., a cross-site scripting (XSS) flaw. An unauthorized attacker can leverage this over a network to perform spoofing . The CVSS 3.1 score is 6.1 (Medium) with a vector of A...
CVE-2026-70341
Use after free in Microsoft Edge Chromium-based allows an authorized attacker to execute code over a network...
EUVD-2026-76143
Use after free in Microsoft Edge Chromium-based allows an authorized attacker to execute code over a network...
CVE-2026-70341
CVE-2026-70341 is a use-after-free vulnerability in Microsoft Edge (Chromium-based) that allows an authorized attacker to achieve remote code execution over a network. Microsoft assigned a CVSS 3.1 base score of 8.5 (HIGH) with a changed scope, reflecting high impact to confidentiality, integrity...
Chromium: CVE-2026-84333 Use after free in Dawn
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-84330 UI misrepresentation in FullScreen
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-84352 Use after free in WebGL
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Edge Chromium-based allows an authorized attacker to elevate privileges locally...
Type confusion in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High)
...