Edge Chromium Security Vulnerabilities and Issues — Edge Chromium CVE List

Lucene search

MicrosoftEdge Chromium

209 matches found

CVE•added 2023/06/29 1:15 a.m.•1975 views

CVE-2022-29146

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

8.3CVSS8.1AI score0.00707EPSS

CVE•added 2023/06/29 1:15 a.m.•1518 views

CVE-2022-29144

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

7.5CVSS7.5AI score0.01502EPSS

CVE•added 2023/09/12 3:15 p.m.•1385 views

CVE-2023-4863

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)

8.8CVSS8.5AI score0.93991EPSS

CVE•added 2020/11/03 3:15 a.m.•1318 views

CVE-2020-16009

Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

8.8CVSS8.6AI score0.80718EPSS

CVE•added 2023/06/29 1:15 a.m.•1143 views

CVE-2022-29147

Microsoft Edge (Chromium-based) Spoofing Vulnerability

3.1CVSS4AI score0.01411EPSS

CVE•added 2022/11/25 1:15 a.m.•1116 views

CVE-2022-4135

Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

9.6CVSS9.3AI score0.00114EPSS

CVE•added 2023/06/29 5:15 a.m.•928 views

CVE-2022-23264

Microsoft Edge (Chromium-based) Spoofing Vulnerability

4.7CVSS4.5AI score0.00194EPSS

CVE•added 2023/09/28 4:15 p.m.•868 views

CVE-2023-5217

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

8.8CVSS9.2AI score0.01679EPSS

CVE•added 2021/02/22 10:15 p.m.•814 views

CVE-2021-21157

Use after free in Web Sockets in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

8.8CVSS9AI score0.01551EPSS

CVE•added 2022/12/13 7:15 p.m.•711 views

CVE-2022-44708

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

8.3CVSS8.2AI score0.00256EPSS

CVE•added 2023/06/29 2:15 a.m.•461 views

CVE-2022-26899

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

8.8CVSS7.2AI score0.00355EPSS

CVE•added 2021/06/08 11:15 p.m.•401 views

CVE-2021-33741

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

8.2CVSS7.7AI score0.0191EPSS

CVE•added 2023/04/28 6:15 p.m.•379 views

CVE-2023-29334

Microsoft Edge (Chromium-based) Spoofing Vulnerability

4.3CVSS4.7AI score0.00329EPSS

CVE•added 2023/11/29 12:15 p.m.•368 views

CVE-2023-6345

Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)

9.6CVSS9.2AI score0.0067EPSS

CVE•added 2023/09/05 10:15 p.m.•339 views

CVE-2023-4762

Type Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

8.8CVSS8.7AI score0.11497EPSS

CVE•added 2024/08/21 9:15 p.m.•306 views

CVE-2024-7965

Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

8.8CVSS6.6AI score0.10893EPSS

CVE•added 2023/08/21 8:15 p.m.•305 views

CVE-2023-38158

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

3.1CVSS3.9AI score0.00871EPSS

CVE•added 2021/09/03 8:15 p.m.•280 views

CVE-2021-30617

Chromium: CVE-2021-30617 Policy bypass in Blink

6.5CVSS7.2AI score0.00721EPSS

CVE•added 2025/06/03 12:15 a.m.•277 views

CVE-2025-5419

Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

8.8CVSS6.7AI score0.00851EPSS

CVE•added 2023/07/14 6:15 p.m.•269 views

CVE-2023-36887

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

7.8CVSS7.7AI score0.01177EPSS

CVE•added 2023/08/26 1:15 a.m.•265 views

CVE-2023-36741

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

8.3CVSS7.5AI score0.00902EPSS

CVE•added 2021/09/03 8:15 p.m.•244 views

CVE-2021-30624

Chromium: CVE-2021-30624 Use after free in Autofill

8.8CVSS8.2AI score0.00373EPSS

CVE•added 2023/11/07 12:15 a.m.•238 views

CVE-2023-36409

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

6.5CVSS6AI score0.01774EPSS

CVE•added 2022/04/05 8:15 p.m.•229 views

CVE-2022-24523

Microsoft Edge (Chromium-based) Spoofing Vulnerability

4.3CVSS4.7AI score0.05015EPSS

CVE•added 2025/01/24 10:15 p.m.•226 views

CVE-2025-21262

User Interface (UI) Misrepresentation of Critical Information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network

5.4CVSS5.2AI score0.00128EPSS

CVE•added 2023/08/21 8:15 p.m.•225 views

CVE-2023-36787

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

8.8CVSS8.5AI score0.03845EPSS

CVE•added 2023/08/07 6:15 p.m.•225 views

CVE-2023-38157

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

6.5CVSS6.5AI score0.00519EPSS

CVE•added 2024/08/12 1:38 p.m.•221 views

CVE-2024-38218

Microsoft Edge (HTML-based) Memory Corruption Vulnerability

8.4CVSS8.3AI score0.00578EPSS

CVE•added 2021/02/09 2:15 p.m.•216 views

CVE-2021-21132

Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted Chrome Extension.

9.6CVSS8.7AI score0.15757EPSS

CVE•added 2022/04/05 8:15 p.m.•214 views

CVE-2022-26891

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

8.3CVSS8.1AI score0.01556EPSS

CVE•added 2022/04/05 8:15 p.m.•207 views

CVE-2022-26900

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

8.3CVSS8.1AI score0.01556EPSS

CVE•added 2021/02/09 2:15 p.m.•205 views

CVE-2021-21123

Insufficient data validation in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.

6.5CVSS6.5AI score0.02848EPSS

CVE•added 2023/11/10 12:15 a.m.•205 views

CVE-2023-36014

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

7.3CVSS7.4AI score0.00391EPSS

CVE•added 2022/06/29 5:15 p.m.•202 views

CVE-2022-33638

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

8.3CVSS7.7AI score0.00556EPSS

CVE•added 2024/02/02 1:15 a.m.•201 views

CVE-2024-21399

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

8.3CVSS8.2AI score0.00315EPSS

CVE•added 2025/02/06 11:15 p.m.•201 views

CVE-2025-21267

Microsoft Edge (Chromium-based) Spoofing Vulnerability

4.4CVSS4.7AI score0.00081EPSS

CVE•added 2021/02/09 2:15 p.m.•200 views

CVE-2021-21121

Use after free in Omnibox in Google Chrome on Linux prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.

9.6CVSS9.2AI score0.01546EPSS

CVE•added 2024/12/06 2:15 a.m.•200 views

CVE-2024-49041

Microsoft Edge (Chromium-based) Spoofing Vulnerability

4.3CVSS4.5AI score0.00187EPSS

CVE•added 2021/02/09 2:15 p.m.•199 views

CVE-2021-21135

Inappropriate implementation in Performance API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

6.5CVSS6.4AI score0.24927EPSS

CVE•added 2023/02/14 8:15 p.m.•199 views

CVE-2023-23374

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

8.3CVSS8.3AI score0.00129EPSS

CVE•added 2024/04/04 10:15 p.m.•199 views

CVE-2024-29981

Microsoft Edge (Chromium-based) Spoofing Vulnerability

4.3CVSS4.8AI score0.00653EPSS

CVE•added 2021/02/09 2:15 p.m.•198 views

CVE-2021-21122

Use after free in Blink in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

8.8CVSS9AI score0.01993EPSS

CVE•added 2024/03/14 11:15 p.m.•198 views

CVE-2024-26163

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

4.7CVSS4.9AI score0.00697EPSS

CVE•added 2021/02/09 2:15 p.m.•197 views

CVE-2021-21119

Use after free in Media in Google Chrome prior to 88.0.4324.96 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.

8.8CVSS9AI score0.01993EPSS

CVE•added 2022/07/07 8:15 p.m.•197 views

CVE-2022-33680

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

8.3CVSS7.8AI score0.00914EPSS

CVE•added 2021/02/09 2:15 p.m.•195 views

CVE-2021-21127

Insufficient policy enforcement in extensions in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass content security policy via a crafted Chrome Extension.

8.8CVSS8.1AI score0.01167EPSS

CVE•added 2022/08/09 8:15 p.m.•195 views

CVE-2022-33649

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

9.6CVSS9.1AI score0.01095EPSS

CVE•added 2021/02/09 2:15 p.m.•194 views

CVE-2021-21126

Insufficient policy enforcement in extensions in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass site isolation via a crafted Chrome Extension.

6.5CVSS6.6AI score0.03236EPSS

CVE•added 2023/11/10 8:15 p.m.•194 views

CVE-2023-36027

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

7.1CVSS6.5AI score0.00137EPSS

CVE•added 2022/04/05 8:15 p.m.•193 views

CVE-2022-26909

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

8.3CVSS8.1AI score0.01556EPSS

Total number of security vulnerabilities209