303 matches found
CVE-2026-0385
CVE-2026-0385 affects Microsoft Edge (Chromium-based) for Android and is described as a spoofing vulnerability. According to the metrics, it requires network access and user interaction, with a Medium base score (CVSS 3.1: AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L) and a vulnerability impact on confide...
CVE-2021-38669
CVE-2021-38669 concerns Microsoft Edge (Chromium-based) Tampering Vulnerability. Connected docs indicate Edge
CVE-2024-49054
CVE-2024-49054 affects the Microsoft Edge (Chromium-based) browser. OpenVAS and related records describe a spoofing vulnerability impacting the browser UI, with root cause framed as a spoofing weakness in Edge (Chromium-based). The NVD/CVE metadata shows a CVSS‑3.1 base score of 4.3 (Network ->...
CVE-2021-36928
CVE-2021-36928 is described as a Microsoft Edge (Chromium-based) Elevation of Privilege vulnerability. Connected document PT-2021-3742 references Edge Installer as the vulnerable component and notes the issue relates to errors in creating connections with directories, enabling potential privilege...
CVE-2024-43580
CVE-2024-43580 is a spoofing vulnerability in Microsoft Edge (Chromium-based) that affects the browser UI. Public sources indicate it exists in Edge prior to at least version 130.0.2849.46 (and related entries reference multiple vulnerabilities against Edge Chromium). The root cause is a spoofing...
CVE-2022-23262
CVE-2022-23262 is a Microsoft Edge (Chromium-based) elevation-of-privilege vulnerability affecting the Edge browser. According to the provided records, it impacts Microsoft Edge (Chromium-based) on Windows 10 and later, with a CVSS v3.1 base score of 6.3 (vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/...
CVE-2026-58616
CVE-2026-58616 is a race condition (improper synchronization of a shared resource) in Copilot Chat within Microsoft Edge , rated CVSS 4.4 (Medium) . An authorized attacker with low privileges can trigger a network-based information disclosure , requiring user interaction and exhibiting changed sc...
CVE-2022-21929
CVE-2022-21929 : Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability. Affected product: Microsoft Edge (Chromium-based). The connected documents provide limited technical detail beyond “remote code execution” and patch guidance. Remediation: apply updates listed in the Microsoft E...
CVE-2023-36880
CVE-2023-36880 affects Microsoft Edge (Chromium-based). The connected materials identify it as an information disclosure vulnerability in Edge. A PoC exploit (Mirage) demonstrates how a vulnerable prefs_enclave_x64.dll and related UnsealSettings/SealSettings calls can move shellcode from an encla...
CVE-2026-72984
CVE-2026-72984 is a type confusion vulnerability in Microsoft Edge (Chromium-based) , described as an "access of resource using incompatible type." This flaw allows an unauthorized attacker to achieve remote code execution over a network, provided user interaction is required (e.g., the victim vi...
CVE-2021-31982
CVE-2021-31982 affects Microsoft Edge (Chromium-based). It is a Security Feature Bypass vulnerability (CVSS v3.1 base score 8.8; Network attack, Low complexity, User interaction required). The issue is addressed by Microsoft Edge updates listed in the MSRC guidance; remediation is to install the ...
CVE-2025-21283
CVE-2025-21283 affects Microsoft Edge (Chromium-based). The NVD entry documents a Remote Code Execution vulnerability with CVSS v3.1: base score 8.8 (HIGH) via NETWORK attack vector, requiring user interaction, and high impact on confidentiality, integrity, and availability. Microsoft’s advisory ...
CVE-2026-65804
Technical details about CVE-2026-65804 are not publicly provided in the supplied documents; no information on affected versions, root cause specifics, or mitigations is available. Monitor for updates.
CVE-2022-21931
Technical details are not publicly provided in the provided documents for CVE-2022-21931; no affected versions, root cause, or fixes are stated. Monitor for official advisories for updates.
CVE-2025-21279
CVE-2025-21279 is a Microsoft Edge (Chromium-based) Remote Code Execution vulnerability. Edge is the affected product; CVE-2025-21279 is documented across multiple sources (NVD entry and Microsoft Edge advisories) as a high-severity, network-exposed issue with potential for arbitrary code executi...
CVE-2024-43579
CVE-2024-43579 affects Microsoft Edge (Chromium-based). It is a remote code execution vulnerability in Edge with high impact (C/H/I/H) and network attack vector; exploitation exists publicly. Affected component is Edge browser on Windows; root cause details are not fully described in the provided...
CVE-2021-43221
CVE-2021-43221 is a Remote Code Execution vulnerability affecting Microsoft Edge (Chromium-based). The connected sources identify it as one of multiple Edge/Chromium vulnerabilities (notably in Edge versions prior to 96.0.1054.29) that can be exploited remotely via network activity. The Nessus en...
CVE-2023-38174
CVE-2023-38174 affects Microsoft Edge (Chromium-based). The vulnerability is categorized as Information Disclosure with a CVSSv3.1 base score of 4.3 (Medium); attack requires user interaction and network access suspected, per the provided metrics. The cited connected entries confirm the issue wit...
CVE-2024-43578
Affected software: Microsoft Edge (Chromium-based). Issue: CVE-2024-43578 — a remote code execution vulnerability. Root cause / detail from sources: a set of CVEs impacting the Chromium-based Edge stack; CVE-2024-43578 is listed among multiple vulnerabilities in Edge, with exploitation vectors de...
CVE-2024-43595
CVE-2024-43595 affects Microsoft Edge (Chromium-based). Public sources (Microsoft/MSRC advisories and Nessus/NVAS listings) indicate a Remote Code Execution vulnerability in Edge Chromium with exploitation potential via network access and user interaction. The OpenVAS/Nessus entries enumerate aff...
CVE-2021-34475
CVE-2021-34475 affects Microsoft Edge (Chromium-based). The available connected documents identify an Elevation of Privilege vulnerability in Edge and note updates were issued by Microsoft to address the issue; CVSS appears as 3.1, base score 5.4 (Medium), with Network attack vector, Low attack c...
CVE-2021-36929
Technical details about CVE-2021-36929 are not publicly provided in the connected documents. Affected products and root cause are not specified here. Monitor for updates from referenced advisories (MSRC) and external vendors for remediation and impact.
CVE-2021-36931
CVE-2021-36931 is a Microsoft Edge (Chromium-based) elevation-of-privilege vulnerability. Connected documents attribute the root cause to insufficient access restrictions in Edge, enabling a local privilege escalation. Affected product: Microsoft Edge (Chromium-based). Public exploits exist for t...
CVE-2023-36878
Microsoft Edge (Chromium-based) Security Feature Bypass (CVE-2023-36878) is documented in Edge-related advisories. Connected sources describe a bypass enabling security restrictions to be bypassed by loading a malicious page/file, attributed to a lack of blocking tags in Edge. Affected product: M...
CVE-2026-57989
CVE-2026-57989 affects Microsoft Edge (Chromium-based). The provided documents describe an origin validation error that allows an unauthorized attacker to disclose information over a network. The NVD entry and MSRC page confirm the same description; no specific exploit vectors, affected product v...
CVE-2026-66324
CVE-2026-66324 is a spoofing vulnerability in Microsoft Edge (Chromium-based) caused by external control of a file name or path . An unauthorized network-based attacker with low complexity and no prior privileges , but requiring user interaction , can exploit this to perform spoofing. The CVSS 3....
CVE-2026-66312
CVE-2026-66312 is a buffer over-read in Microsoft Edge (Chromium-based) that enables an authorized attacker to execute remote code over a network. The vulnerability is referenced across NVD, ENISA Europe and CVE listings, and Microsoft’s vulnerability advisory. Affected product is Edge (Chromium-...
CVE-2026-58290
Microsoft Edge (Chromium-based) is affected by CVE-2026-58290 due to a type confusion in resource access, enabling remote code execution over the network. The CVSS indicates network access with user interaction required and limited impact to confidentiality and availability, with higher impact to...
CVE-2026-58298
CVE-2026-58298 affects Microsoft Edge (Chromium-based). The issue is improper neutralization of input during web page generation, enabling cross-site scripting that can be leveraged by an unauthenticated attacker over the network to perform spoofing. CVSS 3.1 base score 7.2 (HIGH) with network ac...
CVE-2026-66314
Microsoft Edge (Chromium-based) is affected by a time-of-check time-of-use (TOCTOU) race condition that could allow an unauthenticated attacker to disclose information over a network. The vulnerability impacts the browser’s ability to protect data during network interactions. Root cause described...
CVE-2026-66325
Technical details are not publicly available in the provided documents for CVE-2026-66325 beyond the basic briefing that it is an SSRF/spoofing issue in Microsoft Edge (Chromium-based). Monitor for updates and authoritative advisories to assess impact and remediation.
CVE-2026-66326
Technical details (affected products/versions, root cause, and remediation) are not publicly provided in the supplied documents. Monitor for updates.
CVE-2026-0102
CVE-2026-0102 affects Microsoft Edge (Chromium-based) with a vulnerability where, under specific conditions, a malicious webpage can trigger autofill population after two consecutive taps, potentially disclosing stored autofill data (addresses, email, phone number metadata). Connected documents i...
CVE-2026-66317
Technical details (affected product/components, root cause, impact, or remediation) are not publicly available in the provided documents. Monitor for updates from MSRC/NVD/ENISA EUVD for new information.
CVE-2021-42308
Technical details for CVE-2021-42308 are not publicly available in the provided connected documents. Monitor for updates from listed sources; current materials mention Edge spoofing vulnerability but do not specify affected versions, impact, or remediation within these documents.
CVE-2026-57991
Microsoft Edge (Chromium-based) is affected by CVE-2026-57991 due to Improper link resolution before file access ("link following"). The issue could allow an unauthenticated attacker to disclose information over a network. The vulnerability affects the Edge Chromium rendering/file handling path a...
CVE-2025-60711
CVE-2025-60711 affects Microsoft Edge (Chromium-based). The vulnerability is described as a protection mechanism failure enabling remote code execution over a network. CVSS 3.1 base score is 6.3 (Network, Low attack complexity, No privileges required, User interaction required; Confidentiality, I...
CVE-2026-66798
Microsoft Edge (Chromium-based) is affected by a Use After Free vulnerability that allows an unauthorized attacker to execute code over a network . The CVSS 3.1 base score is 4.3 (MEDIUM) , with an attack vector of network, low complexity, no privileges required, but user interaction required . N...
CVE-2025-49713
CVE-2025-49713 is a Microsoft Edge (Chromium-based) remote code execution vulnerability through a type confusion in Edge. Affected product: Edge (Chromium-based) browser. Cause: resource access using incompatible type leading to code execution over a network. Impact per CVSS: high severity, user ...
CVE-2026-45488
CVE-2026-45488 concerns a UI misrepresentation in Microsoft Edge (Chromium-based) that enables a network-based spoofing attempt by an unauthorized attacker. The public description indicates the issue is focused on how critical information is presented in the browser UI, with impact described as s...
CVE-2026-58288
CVE-2026-58288 affects Microsoft Edge (Chromium-based). It is described as a use-after-free vulnerability that could allow a remote attacker to execute code over a network. The CVSS 3.1 vector indicates Network attack, high impact on confidentiality, integrity, and availability, with user interac...
CVE-2026-66323
Microsoft Edge (Chromium-based) is affected by an improper neutralization of parameter/argument delimiters vulnerability that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS v3.1 score is 5.4 (Medium) , reflecting a network attack vector with low complexi...
CVE-2025-49741
CVE-2025-49741 concerns an information-disclosure vulnerability in Microsoft Edge (Chromium-based). The available data identify the affected software as Edge/Chromium and confirm a network-exposed information disclosure vulnerability; root-cause details are not provided beyond the vulnerability c...
CVE-2026-57992
CVE-2026-57992 affects Microsoft Edge (Chromium-based). It is described as a use-after-free vulnerability that allows a remote attacker to execute code over a network. The CVSS v3.1 base score is 7.5 (HIGH) with Network attack, no privileges required, user interaction required, and full impact on...
CVE-2026-57974
CVE-2026-57974 affects Microsoft Edge (Chromium-based). The issue is an integer overflow/wraparound in Edge that enables an unauthenticated attacker to execute code over a network. The NVD/CVE entries confirm the vulnerability and related CVSS v3.1 metrics (High severity, network attack vector, u...
CVE-2026-66315
Technical details about CVE-2026-66315 are not publicly available in the provided documents. Monitor for updates from the vendors and security advisories to obtain affected products, vulnerable components, impact specifics, and remediations.
CVE-2025-62223
CVE-2025-62223 pertains to Microsoft Edge (Chromium-based) on macOS, where the UI can misrepresent critical information to spoof users. The vulnerability is exploitable over a network and requires user interaction. Per the CVE data, the impact vector indicates no confidentiality or availability i...
CVE-2026-45495
Microsoft Edge (Chromium-based) vulnerability CVE-2026-45495 affects Edge versions prior to 148.0.3967.70. PT-2026-41712 documents an improper input validation flaw in the browser’s rendering pipeline and JavaScript engine, enabling an unauthenticated user to execute arbitrary code with the brows...
CVE-2026-62904
CVE-2026-62904 is an information disclosure vulnerability in Microsoft Edge (Chromium-based) caused by incorrect authorization , allowing an unauthorized attacker to disclose information over a network. The CVSS 3.1 score is 5.4 (Medium) with a vector of AV:N/AC:L/PR:N/UI:R, meaning exploitation ...
CVE-2026-66311
CVE-2026-66311: Microsoft Edge (Chromium-based) Tampering Vulnerability. Local attacker can tamper due to missing authorization. Affects Edge when running Chromium-based builds; CVSSv3.1 base score 6.2 (Medium), confidentiality impact High, no impact to integrity/availability. Remediation: apply ...