303 matches found
CVE-2021-30614
CVE-2021-30614 is a Chromium/Chrome vulnerability: a heap buffer overflow in TabStrip. Connected sources confirm this CVE and note multiple distributions issued updates (e.g., Fedora chromium-93.0.4577.63 and related Chromium patches). Affected component: Chromium/Chrome browser TabStrip handling...
CVE-2023-29345
Technical details for CVE-2023-29345 are not publicly available in the provided documents; monitor for updates from vendors and security advisories before assessing impact or fixes.
CVE-2023-21719
CVE-2023-21719 : Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability. CVSS v3.1 base score 6.5 (Network, Low attack complexity, Privileges required: None, User interaction: Required, Scope: Unchanged; confidentiality impact High; integrity/availability: None). Affected product i...
CVE-2024-21382
CVE-2024-21382 affects Microsoft Edge for Android (Chromium-based). The connected data identifies an Information Disclosure Vulnerability in Edge for Android that could allow an attacker to obtain sensitive information. The CVSS data indicates a Network attack vector with user interaction require...
CVE-2022-26905
CVE-2022-26905 affects Microsoft Edge (Chromium-based) and is described as a Spoofing Vulnerability. Public documents indicate that fixes were released; ENISA/NCSc state that Edge update version 102.0.1245.30 addresses the vulnerabilities. Metascore metrics from NVD show a MEDIUM base score (CVSS...
CVE-2023-36559
CVE-2023-36559 is a spoofing vulnerability in Microsoft Edge (Chromium-based). The connected documents corroborate that Edge is affected and that this CVE is listed among multiple Edge vulnerabilities (including spoofing). The provided sources do not include concrete exploit details, affected sub...
CVE-2024-30058
CVE-2024-30058 affects Microsoft Edge (Chromium-based); a spoofing vulnerability in the browser UI with CVSS 3.1 base score 5.4 (AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N). Connected sources corroborate Edge spoofing vulnerabilities in the same family. The vulnerability is listed for Edge (Chromium-bas...
CVE-2021-30607
CVE-2021-30607 is a Use-After-Free vulnerability in Chromium’s Permissions handling. Affected software includes Chromium/Chrome builds as part of Chromium-based browsers; public feeds list Chromium versions such as Chromium 93.0.4577.63 (e.g., Fedora 34/35 package updates) addressing this issue. ...
CVE-2023-44323
CVE-2023-44323 affects Adobe Acrobat for Edge (Edge browser) with the Adobe PDF component, where a Use-After-Free in the PDF handling can lead to an application DoS. Exploitation requires user interaction (victim opens a malicious file) and does not detail exploit availability. A patchable remedi...
CVE-2021-21139
CVE-2021-21139 : In Chromium/Google Chrome, an incorrect implementation in the iframe sandbox allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Affected: Chromium/Chrome before 88.0.4324.96. Impact: potential navigation bypass; remote exploitation risk is descri...
CVE-2021-21134
CVE-2021-21134 is a Chromium/Chrome Page Info UI security issue reported as content spoofing. Affected software: Chromium/Chrome prior to version 88.0.4324.96. Root cause: incorrect security UI handling in Page Info allowed a remote attacker to spoof security UI via a crafted page. Impact stateme...
CVE-2024-43577
Technical details for CVE-2024-43577 are not publicly available in the provided connected documents. Monitor for updates from official advisories and vendor pages to obtain affected products, root cause, impact, and remediation.
CVE-2021-21124
CVE-2021-21124 is a use-after-free vulnerability in the Speech Recognizer component of the Chromium browser (tracked across multiple advisories). Impacted versions are Chromium before 88.0.4324.96. The issue could allow a remote attacker to escape sandbox and execute arbitrary code via a crafted ...
CVE-2022-26908
Technical details for CVE-2022-26908 are not publicly provided in the supplied documents. The materials reference an Elevation of Privilege issue in Microsoft Edge (Chromium-based) but lack specifics on vulnerable components, versions, or fixes. Monitor for updates.
CVE-2024-30055
CVE-2024-30055 affects Microsoft Edge (Chromium-based) and is a spoofing vulnerability in the Chromium components used by Edge. The available connected documents confirm affected product: Microsoft Edge (Chromium-based); vulnerability described as spoofing, with higher-level impact to spoof user ...
CVE-2023-28261
Technical details about CVE-2023-28261 are not publicly provided in the supplied documents. Monitor for updates.
CVE-2023-29350
CVE-2023-29350 is a Microsoft Edge (Chromium-based) Elevation of Privilege vulnerability. The available documents identify Edge as affected and classify the issue as an elevation of privilege with high impact (per CVSS metrics: AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H). A remediation path is suggested...
CVE-2023-36562
Technical details about CVE-2023-36562 are not provided in the supplied documents. Monitor for updates from Microsoft and security advisories to confirm affected versions, root cause, and remediation.
CVE-2023-36735
CVE-2023-36735 is a Microsoft Edge (Chromium-based) elevation of privilege vulnerability. The affected product is the Edge browser (Chromium-based). The CVSS metrics indicate a high-severity issue (9.6, CRITICAL) with a network attack vector, no privileges required, but user interaction needed, a...
CVE-2024-29987
Microsoft Edge (Chromium-based) has a documented information disclosure vulnerability associated with CVE-2024-29987. Publicly reported details indicate the issue affects Edge’s Chromium-based browser and can enable an attacker to obtain sensitive information. Several connected sources reference ...
CVE-2023-36034
CVE-2023-36034 is a Microsoft Edge (Chromium-based) Remote Code Execution vulnerability. Documents confirm a local exploit path (AV: Local) with low attack complexity, no privileges required, and user interaction needed, yielding high impact to confidentiality and integrity (CVE CVSS: 3.1 vector:...
CVE-2023-36727
CVE-2023-36727 affects Microsoft Edge (Chromium-based) and is categorized as a Spoofing Vulnerability. The available connected documents identify the affected product (Microsoft Edge, Chromium-based) and label the issue as a Spoofing vulnerability, with no explicit technical exploit details provi...
CVE-2022-26894
Technical details for CVE-2022-26894 are not publicly provided in the supplied documents. No affected versions, root cause, or remediation are specified here; monitor for updates.
CVE-2024-21387
Technical details about CVE-2024-21387 are not publicly available in the provided documents. Monitor for updates from official advisories and CVE/CNVD/NVD entries for affected products, impact, and fixes.
CVE-2022-26895
CVE-2022-26895 affects Microsoft Edge (Chromium-based). The provided documents identify it as an Elevation of Privilege vulnerability but do not reveal the exact root cause, affected component/version, or exploit details. Remediation is to apply the Microsoft Edge update/version specified by MSRC...
CVE-2026-72970
Technical details about CVE-2026-72970 are not publicly available in the provided documents. Monitor official vendor advisories and security bulletins for updates.
CVE-2023-21720
CVE-2023-21720 refers to a tampering vulnerability in Microsoft Edge (Chromium-based). The connected Gentoo GLSA 202309-17 documents this issue and provides remediation guidance: upgrade Edge to the latest safe version (at least 113.0.5672.126) across supported platforms. The GLSA also lists othe...
CVE-2024-21383
CVE-2024-21383 involves a spoofing vulnerability in Microsoft Edge (Chromium-based). The affected product is Edge; the vulnerability is described as spoofing UI, with a CVSS v3.1 base score of 3.3 (LOW). Exploitation details in the provided materials indicate a local attack vector requiring user ...
CVE-2022-33636
CVE-2022-33636 refers to a remote code execution vulnerability in Microsoft Edge (Chromium-based) . Connected documents corroborate the vulnerability is associated with Edge/Chromium and indicate a fix has been released by Microsoft. The Gentoo advisory GLSA-202208-35 lists CVE-2022-33636 among m...
CVE-2023-29354
CVE-2023-29354 is a Microsoft Edge (Chromium-based) security feature bypass vulnerability. The CVSS v3.1 base score is 4.7 (Medium) with vectors: AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N, indicating network access with low attack complexity, no privileges, user interaction required, and potential impa...
CVE-2022-24475
Technical details about CVE-2022-24475 are not publicly provided in the supplied documents. No affected products, root cause, vulnerability scope, exploit info, or remediation are specified here. Monitor for updates from official advisories and trusted third parties.
CVE-2024-20675
CVE-2024-20675 is a Microsoft Edge (Chromium-based) Security Feature Bypass vulnerability. The entry lists a CVSS v3.1 base score of 6.3 (Medium) with Network attack vector, Low attack complexity, No privileges required, and User interaction required; impacts to confidentiality, integrity, and av...
CVE-2024-21336
Microsoft Edge (Chromium-based) Spoofing Vulnerability (CVE-2024-21336) affects the Edge browser’s UI spoofing surface. Root cause: spoofing in the Chromium-based UI; impact is spoofed user interface with potential to mislead. Attack vector: local, requires user interaction; CVSS v3.1 base score ...
CVE-2023-24892
CVE-2023-24892 affects Microsoft Edge (Chromium-based) using the WebView2 control. The vulnerability is a spoofing issue that can enable spoofed user-interface behavior, as described in multiple sources (Edge/WebView2 spoofing entries and exploitation references). The impact is consistent with a ...
CVE-2023-24935
CVE-2023-24935 affects Microsoft Edge (Chromium-based). The vulnerability is a Spoofing issue in the browser UI. A fix is available in Edge 112.0.1722.34 and later versions (per Nessus/Microsoft advisories). Exploitation status is not detailed in the provided documents. Update Edge to the latest ...
CVE-2024-29991
CVE-2024-29991 affects Microsoft Edge (Chromium-based). The entry describes a Security Feature Bypass vulnerability in Edge with CVSS v3.1 base score 5.0 (Network, High attack complexity, Privileges None, User Interaction Required, Confidentiality/Integrity/Availability Low to None). Connected so...
CVE-2025-25000
CVE-2025-25000 affects Microsoft Edge (Chromium-based). The vulnerability is a type confusion error described as access of a resource using an incompatible type that could allow an unauthorized attacker to execute code over a network. The connected sources confirm affected product and the remote ...
CVE-2026-58289
CVE-2026-58289 concerns Microsoft Edge (Chromium-based). The vulnerability is a type confusion during resource access that enables a remote attacker to execute code over a network. Affected product is Microsoft Edge (Chromium-based); the root cause is incompatible type handling in resource access...
CVE-2023-36026
CVE-2023-36026 affects Microsoft Edge (Chromium-based). The connected OpenVAS entry confirms this CVE is part of a set of Microsoft Edge vulnerabilities and references a remediation path via Microsoft Edge updates (solution: install updates listed in About/Microsoft Edge update settings). The NVD...
CVE-2022-26912
CVE-2022-26912 is an Elevation of Privilege vulnerability in Microsoft Edge (Chromium-based). Connected sources confirm affected product is Edge and classify the issue as an elevation of privilege, with exploitation details not disclosed in the provided documents. Microsoft’s advisory (MSRC) is t...
CVE-2022-38012
CVE-2022-38012 corresponds to a Microsoft Edge (Chromium-based) remote code execution vulnerability . The GLSA-202209-23 advisory groups this with multiple Chromium issues and confirms a fix is available: upgrade Edge to 105.0.1343.25 (and Chromium baseline versions around 105.0.5195.x where appl...
CVE-2025-29806
CVE-2025-29806 corresponds to a Microsoft Edge (Chromium-based) remote code execution vulnerability. Multiple connected sources identify it as a network-exploitable issue that could allow an attacker to run arbitrary code on a vulnerable machine, with attack vector over the network and requiring ...
CVE-2024-38219
CVE-2024-38219 affects Microsoft Edge (Chromium-based). The NVD lists a Remote Code Execution vulnerability with CVSS v3.1 base score 9.0 (Network, No user interaction, Privileges None, Scope Changed; Impact on Confidentiality, Integrity, Availability High). Microsoft/Edge advisory references a v...
CVE-2022-21970
CVE-2022-21970: Microsoft Edge (Chromium-based) Elevation of Privilege vulnerability with PoC exploit cited in a GitHub repo; affected version chain includes Edge prior to 97.0.1072.55. Documents indicate exploitation potential via a crafted action in Edge and note that patches exist (Edge 97.0.1...
CVE-2023-21795
CVE-2023-21795 affects Microsoft Edge (Chromium-based). It is an elevation of privilege vulnerability in Edge that can be executed over a network with high impact on confidentiality, integrity, and availability (CVSS 3.1: 8.3, HIGH). The entry lists attack vector as NETWORK, attack complexity as ...
CVE-2023-33143
Technical details for CVE-2023-33143 are not publicly provided in the supplied documents; monitor for updates from vendors and related advisories.
CVE-2025-47963
CVE-2025-47963 affects Microsoft Edge (Chromium-based). The issue is a spoofing vulnerability in Edge that could be triggered over a network by an unauthorized attacker to spoof the user interface. The primary public description notes no CWE. Connected sources corroborate Edge spoofing and list a...
CVE-2024-38210
CVE-2024-38210 affects Microsoft Edge (Chromium-based) prior to version 128.0.2739.42. Connected sources identify this as a remote code execution vulnerability in Edge Chromium, with PT-2024-5978 listing susceptibility for versions before 128.0.2739.42 and recommending upgrade to 128.0.2739.42 or...
CVE-2025-47964
CVE-2025-47964 is a Microsoft Edge (Chromium-based) spoofing vulnerability. Reported as a UI spoofing issue affecting Edge, with exposure via network, requiring user interaction. No exploit details provided in the initial documents; exploitation status is not confirmed. Remediation guidance refer...
CVE-2022-30128
CVE-2022-30128 is a Microsoft Edge (Chromium-based) elevation of privilege vulnerability. Public details among the connected documents show an attacker could exploit a network-based vector with high severity in the CVSS 3.1 context, requiring user interaction, and with potential impacts to confid...