CVE-2026-42838

Improper neutralization of special elements in output used by a downstream component 'injection' in Microsoft Edge Chromium-based allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-40416

User interface ui misrepresentation of critical information in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-42838 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

...

CVE-2026-42838

CVE-2026-42838 affects Microsoft Edge (Chromium-based). The issue is caused by improper neutralization of special elements in output used by a downstream component ('injection'), enabling a remote attacker to elevate privileges over a network. Affected product scope includes Microsoft Edge (Chrom...

CVE-2026-40416 Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

...

CVE-2026-42891

User interface ui misrepresentation of critical information in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-42891 Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

...

CVE-2026-35429 Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

...

CVE-2026-42891

CVE-2026-42891 affects Microsoft Edge (Chromium-based) for Android . The issue is a UI misrepresentation that can enable an attacker to perform a spoofing action over a network. Documented impact includes spoofing user interface with potential exposure of sensitive information, aligned with the C...

CVE-2026-35429

CVE-2026-35429 affects Microsoft Edge for Android (Chromium-based) . The vulnerability is a UI misrepresentation that enables an unauthorized attacker to perform spoofing over a network. The CVSS 3.1 vector shows network attack, low attack complexity, no privileges required, user interaction need...

CVE-2026-41107 Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

...

CVE-2026-41107

CVE-2026-41107 describes an information disclosure in Microsoft Edge (Chromium-based) caused by external control of a file name or path. The vulnerability affects Microsoft Edge for Android and the Chromium-based Edge on other platforms. The underlying issue enables an unauthorized attacker to di...

PT-2026-40260

User interface ui misrepresentation of critical information in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...

Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

User interface ui misrepresentation of critical information in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...

Chromium: CVE-2026-7913 Insufficient policy enforcement in DevTools

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-7915 Insufficient data validation in DevTools

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-7993 Insufficient validation of untrusted input in Payments

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-7897 Use after free in Mobile

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-8020 Uninitialized Use in GPU

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

PT-2026-40259

Name of the Vulnerable Software and Affected Versions Microsoft Edge Chromium-based affected versions not specified Description Improper neutralization of special elements in output used by a downstream component injection allows an unauthorized attacker to elevate privileges over a network...