CVE-2023-33145

Microsoft Edge (Chromium-based) Information Disclosure vulnerability (CVE-2023-33145) affects the Edge browser. Root cause and exact component/versions are not detailed in the provided documents beyond classification as an information disclosure issue with confidentiality impact. Affected: Micros...

CVE-2025-29834

Microsoft Edge (Chromium-based) Remote Code Execution vulnerability (CVE-2025-29834) is due to an out-of-bounds read in the browser, allowing an unauthenticated attacker to execute code over a network. Affected product: Microsoft Edge (Chromium-based). Vulnerable component: Edge/Chromium code han...

CVE-2025-21185

Microsoft Edge (Chromium-based) has a CVE-2025-21185 Elevation of Privilege vulnerability (CVSS v3.1 base score 6.5; vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N). Affects Edge components as described in the entry; impact is limited to confidentiality exposure (C:H) with no integrity or a...

CVE-2024-43566

CVE-2024-43566 affects Microsoft Edge (Chromium-based) with remote code execution. The NVD CVSS v3.1 vector is CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, base score 9.8 (CRITICAL). Microsoft’s CNA data references a separate 3.1 vector with base score 7.5 (HIGH). OpenVAS/NESSUS entries indicate...

CVE-2024-43587

CVE-2024-43587 is a remote code execution vulnerability in Microsoft Edge (Chromium-based). Public sources in the connected data identify Edge as affected and list multiple vulnerabilities, including CVE-2024-43587, as part of a bundle affecting Edge versions prior to update 130.0.2849.46. The Op...

CVE-2025-26643

CVE-2025-26643 affects Microsoft Edge (Chromium-based). Description: a spoofing vulnerability where the UI performs the wrong action, enabling a network-based spoofing possibility. CVSS v3.1 base score 5.4 (MEDIUM), vector AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N, with user interaction required and ne...

CVE-2022-33639

CVE-2022-33639 affects Microsoft Edge (Chromium-based) and is an Elevation of Privilege vulnerability. NVD records CVSS‑3.1 base score 8.3 (HIGH) with NETWORK attack vector, HIGH impact to confidentiality/integrity/availability, PR:N, UI:REQUIRED, S:C. Remediation guidance appears in Gentoo GLSA ...

CVE-2024-38207

Microsoft Edge (HTML-based) memory corruption vulnerability (CVE-2024-38207) affects Edge HTML-based components. Root cause: memory corruption in Edge’s HTML handling leading to arbitrary code execution. Affected: Microsoft Edge (Chromium-based) and Edge HTML-based variants; versions include olde...

CVE-2024-29986

Summary: CVE-2024-29986 affects Microsoft Edge for Android (Chromium-based) and is categorized as an information disclosure vulnerability. The issue is disclosed in Edge for Android and can lead to the exposure of sensitive information, as described in multiple sources (CNVD/CNNVD/NVD) and corrob...

CVE-2024-30056

Microsoft Edge (Chromium-based) information disclosure vulnerability CVE-2024-30056 is reported across multiple sources (NVD/CNVD/Nessus/NVD references). Affected product: Microsoft Edge (Chromium-based). Issue: information disclosure vulnerability; exact root cause is not detailed in the provide...

CVE-2025-47182

CVE-2025-47182 affects Microsoft Edge (Chromium-based) and is caused by improper input validation. The vulnerability enables an authorized, locally scoped attacker to bypass a security feature, resulting in potential elevation of privileges with the integrity impact high and confidentiality uncha...

CVE-2026-50521

CVE-2026-50521 : Use-after-free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network. The vulnerability has a CVSS v3.1 base score of 8.3 (High) with network attack vector, low attack complexity, required privileges, no user interaction, and impact to co...

CVE-2022-35796

Technical details for CVE-2022-35796 (Microsoft Edge Chromium-based elevation of privilege) are not publicly disclosed in the provided connected documents. Monitor for updates from official vulnerability feeds for affected versions, impact, and remediation information.

CVE-2022-44688

Technical details about CVE-2022-44688 are not publicly provided in the supplied documents. No explicit affected products, vectors, impacts, or remediation specifics are included here. Monitor for official disclosures or updates from vendors/security advisories.

CVE-2022-30127

CVE-2022-30127 affects Microsoft Edge (Chromium-based). The connected advisories confirm an Elevation of Privilege vulnerability and that fixes are available in Edge (update 102.0.1245.30). Apply the recommended Edge update to mitigate. The documents do not provide detailed root-cause analysis or...

CVE-2024-20709

CVE-2024-20709 describes an Improper Input Validation in Acrobat Reader T5 (MSFT Edge) affecting versions

CVE-2025-29825

CVE-2025-29825 affects Microsoft Edge (Chromium-based). The flaw is a UI misrepresentation that enables a remote attacker to spoof UI over a network, requiring user interaction. Impact per the metrics is Confidentiality High, with no impacts to Integrity/Availability reported. The CVSS 3.1 vector...

CVE-2022-23261

CVE-2022-23261 refers to a Tampering Vulnerability in Microsoft Edge (Chromium-based). Affected product is Microsoft Edge (Chromium-based); the vulnerability concerns integrity tampering with Edge components. According to NVD, the CVSSv3.1 base score is 5.3 (NETWORK, LOW attack complexity, NO pri...

CVE-2026-66321

CVE-2026-66321 affects Microsoft Edge (Chromium-based). The issue is an access of resource using an incompatible type (type confusion) that could allow an unauthenticated, network-based attacker to execute code on the target system. Exploitation details, affected versions, and a mitigation patch/...

CVE-2024-49025

CVE-2024-49025 affects Microsoft Edge (Chromium-based). The connected sources describe an information-disclosure vulnerability in Edge/Chromium components (insufficient access controls per PT-2024-8168; OpenVAS/Nessus references label it as an Edge information-disclosure issue). Affected versions...

CVE-2023-36024

CVE-2023-36024 affects Microsoft Edge (Chromium-based). The vulnerability is an Elevation of Privilege in the browser’s Chromium-based code. Impact per sources indicates potential local privilege escalation with low confidentiality/integrity/availability impact; exploit details are not provided i...

CVE-2022-22021

CVE-2022-22021 affects Microsoft Edge (Chromium-based). The vulnerability allows remote code execution via network access with high privileges required and user interaction needed (per CVSS3.1: CVSS:3.1 vector AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H; base score 8.3). The NVD entry cites Edge as the a...

CVE-2025-21401

Microsoft Edge (Chromium-based) Security Feature Bypass (CVE-2025-21401) is corroborated by connected sources indicating affected versions prior to 133.0.3065.69 and a security feature bypass issue. The Nessus entry specifies the vulnerability as present in Edge versions before 133.0.3065.69 and ...

CVE-2025-29815

CVE-2025-29815 is a vulnerability in Microsoft Edge (Chromium-based) caused by a use-after-free in the browser. The issue enables a network-exposed remote code execution by an authorized attacker, with a CVSS v3.1 base score of 7.6 (High) and impact on confidentiality, integrity, and availability...

CVE-2024-20721

CVE-2024-20721 affects Acrobat Reader T5 (MSFT Edge) versions 120.0.2210.91 and earlier. The root cause is improper input validation. In the described vulnerability, an unauthenticated attacker can cause an application DoS in the context of the current user, with exploitation requiring user inter...

CVE-2026-32208

CVE-2026-32208 is a cross-site scripting vulnerability in Microsoft Edge (Chromium-based) caused by improper neutralization of input during web page generation, enabling an authorized attacker to spoof users over a network. Affected product: Microsoft Edge (Chromium-based). Impact is rated High f...

CVE-2024-43596

Technical details about CVE-2024-43596 are not publicly available in the provided documents. Monitor for updates from official vendors (Microsoft) and trusted security advisories for affected versions, impact, and remediation.

CVE-2022-41035

CVE-2022-41035 is a spoofing vulnerability in Microsoft Edge (Chromium-based) . The CVE entry references an issue in Edge’s Chromium components that can affect integrity without affecting confidentiality or availability according to the CVSS data, with exploitation requiring user interaction (UI:...

CVE-2026-65802

CVE-2026-65802 affects Microsoft Edge for Android. The vulnerability is described as external control of a file name or path that enables an unauthorized attacker to disclose information over a network. It is network‑accessible with low attack complexity, no privileges required, but user interact...

CVE-2026-66318

CVE-2026-66318 affects Microsoft Edge (Chromium-based). Description: origin validation error may allow an unauthorized attacker to disclose information over a network. Metrics indicate CVSS v3.1 Base Score 8.1 (High) with network attack vector, low attack complexity, no privileges required, but u...

CVE-2022-23263

CVE-2022-23263 is a Microsoft Edge (Chromium-based) Elevation of Privilege vulnerability. Connected sources identify the affected product as Microsoft Edge (Chromium-based) and describe the issue as an elevation of privileges due to insecure privilege management in the browser. Core details from ...

CVE-2024-43496

CVE-2024-43496 affects Microsoft Edge (Chromium-based). Connected sources describe a buffer overflow that enables remote code execution, with Edge as the affected product and the vulnerability linked to CVE-2024-43496. The Edge-related entries note the issue can be triggered remotely and could al...

CVE-2025-21408

CVE-2025-21408 refers to a Microsoft Edge (Chromium-based) remote code execution vulnerability. The entry documents a network-exposed flaw with a high impact (C:H/I:H/A:H) and a CVSSv3.1 score of 8.8. Initial data notes Edge Chromium-based, RCE, with user interaction required and no privileges re...

CVE-2023-35618

CVE-2023-35618 is a Microsoft Edge (Chromium-based) Elevation of Privilege vulnerability. Affected component: Edge browser. CVSS 3.1 base score 9.6 (CRITICAL) with network attack vector, no user interaction (UI:R) required, and changes in scope with high confidentiality, integrity, and availabili...

CVE-2024-38221

CVE-2024-38221 affects Microsoft Edge (Chromium-based). Public sources consistently describe a spoofing vulnerability in Edge that can enable spoofed user interface, potentially coupled with cross-site scripting concerns (CNVD reference). According to NVD, the CVSS 3.1 base score is 4.3 (Medium) ...

CVE-2026-66322

The CVE-2026-66322 issue concerns Microsoft Edge (Chromium-based). The connected sources describe an origin validation error that enables an unauthorized attacker to perform spoofing over a network. Affected software is Edge (Chromium-based); the vulnerability is tied to origin validation in the ...

CVE-2022-41115

Technical details about CVE-2022-41115 are not publicly provided in the supplied documents. Please monitor official advisories (e.g., Microsoft MSRC) for details, impact specifics, and remediation.

CVE-2026-58525

CVE-2026-58525 affects Microsoft Edge (Chromium-based) with an improper access control that lets an unauthenticated attacker bypass a security feature over the network. CVSS 3.1 base score 8.2 (HIGH) with Network attack vector, Low attack complexity, No privileges, User interaction required, Conf...

CVE-2021-24113

CVE-2021-24113 affects Microsoft Edge (Chromium-based). The issue is described as a security feature bypass vulnerability in Edge Chromium. According to the public entry, the vulnerability is exploitable over a network (attack vector: NETWORK) and requires user interaction (UI: REQUIRED). The CVS...

CVE-2023-36888

CVE-2023-36888 affects Microsoft Edge for Android (Chromium-based). Documented as a Tampering Vulnerability that enables spoofing the user interface; CVSS base reflects low impacts to confidentiality, integrity and availability. Connected sources identify affected products as Edge for Android (Ch...

CVE-2024-38209

CVE-2024-38209 affects Microsoft Edge (Chromium-based). The connected sources confirm a remote code execution vulnerability in Edge/Chromium components. Available public advisories indicate multiple entries around Edge-related flaws; PT-2024-5977 specifies affected Edge (Chromium-based) versions ...

CVE-2021-34506

CVE-2021-34506 affects Microsoft Edge (Chromium-based) and is a security feature bypass in Edge. Publicly available sources in the provided documents identify the affected product as Edge (Chromium-based) and the vulnerability class as a security feature bypass; Microsoft’s and ENISA/NCSC advisor...

CVE-2022-21930

Technical details for CVE-2022-21930 are not publicly available in the provided documents. Monitor for updates.

CVE-2025-21342

CVE-2025-21342 refers to a remote code execution vulnerability in Microsoft Edge (Chromium-based). The NVD entry notes a network-based exploit with low attack complexity, no privileges required, but requires user interaction, and yields high impact on confidentiality, integrity, and availability....

CVE-2026-58284

CVE-2026-58284 affects Microsoft Edge (Chromium-based). The vulnerability is described as improper authorization that could allow an unauthorized attacker to execute code over a network (remote code execution). The NVD entry lists a CVSS v3.1 base score of 8.3 (HITE: HIGH) with Network attack vec...

CVE-2021-42307

CVE-2021-42307 affects Microsoft Edge (Chromium-based). The vulnerability is an Information Disclosure issue in Edge, with a Confidentiality impact described as Low and no Integrity/Availability impact. The public documentation does not specify the exact component or root cause; exploitation deta...

CVE-2022-21954

CVE-2022-21954 is an Elevation of Privilege vulnerability affecting Microsoft Edge (Chromium-based). The Connected OpenVAS/Nessus entries reference Edge-related vulnerabilities and list CVEs used in conjunction with Edge, but do not provide concrete technical details for CVE-2022-21954 itself (e....

CVE-2026-70339

CVE-2026-70339 is a remote code execution vulnerability in Microsoft Edge (Chromium-based) caused by a type confusion in resource access. The NVD/NVD-derived descriptions state that an unauthorized attacker could execute code over a network. The provided metrics show a CVSS v3.1 base score of 5.4...

CVE-2021-36928

CVE-2021-36928 is described as a Microsoft Edge (Chromium-based) Elevation of Privilege vulnerability. Connected document PT-2021-3742 references Edge Installer as the vulnerable component and notes the issue relates to errors in creating connections with directories, enabling potential privilege...

CVE-2024-43489

CVE-2024-43489 affects Microsoft Edge (Chromium-based). Multiple connected sources confirm a remote code execution vulnerability linked to type confusion issues in Edge’s Chromium components (notably V8) that could allow arbitrary code execution. Affected software is Microsoft Edge (Chromium-base...