CVE-2026-66324

CVE-2026-66324 is a spoofing vulnerability in Microsoft Edge (Chromium-based) caused by external control of a file name or path . An unauthorized network-based attacker with low complexity and no prior privileges , but requiring user interaction , can exploit this to perform spoofing. The CVSS 3....

CVE-2026-66323 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

EUVD-2026-67849

Improper neutralization of parameter/argument delimiters in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

CVE-2026-66323 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

CVE-2026-66323

Microsoft Edge (Chromium-based) is affected by an improper neutralization of parameter/argument delimiters vulnerability that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS v3.1 score is 5.4 (Medium) , reflecting a network attack vector with low complexi...

CVE-2026-62904

CVE-2026-62904 is an information disclosure vulnerability in Microsoft Edge (Chromium-based) caused by incorrect authorization , allowing an unauthorized attacker to disclose information over a network. The CVSS 3.1 score is 5.4 (Medium) with a vector of AV:N/AC:L/PR:N/UI:R, meaning exploitation ...

CVE-2026-62904 Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

...

EUVD-2026-67848

Incorrect authorization in Microsoft Edge Chromium-based allows an unauthorized attacker to disclose information over a network...

CVE-2026-62904 Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

...

CVE-2026-58616 Copilot Chat (Microsoft Edge) Information Disclosure Vulnerability

...

EUVD-2026-67847

Concurrent execution using shared resource with improper synchronization 'race condition' in Copilot Chat Microsoft Edge allows an authorized attacker to disclose information over a network...

CVE-2026-58616 Copilot Chat (Microsoft Edge) Information Disclosure Vulnerability

...

CVE-2026-58616

CVE-2026-58616 is a race condition (improper synchronization of a shared resource) in Copilot Chat within Microsoft Edge , rated CVSS 4.4 (Medium) . An authorized attacker with low privileges can trigger a network-based information disclosure , requiring user interaction and exhibiting changed sc...

CVE-2026-70331

CVE-2026-70331 affects Microsoft Edge for iOS and involves an improper neutralization of input used for LLM prompting , allowing an unauthorized attacker to perform spoofing over a network . The vulnerability requires user interaction and no prior privileges , with low attack complexity over the ...

EUVD-2026-67846

Improper neutralization of input used for llm prompting in Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-70331 Microsoft Edge for iOS Spoofing Vulnerability

...

Chromium: CVE-2026-79083 Improper enforcement of behavioral workflow in Media

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-79025 Improper input validation in Workers

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-78961 Incorrect authorization in Core

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-79077 Incorrect authorization in WebProtect

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...