CVE-2024-26163

CVE-2024-26163 affects Microsoft Edge (Chromium-based). A security feature bypass vulnerability with CVSSv3.1 base metrics: AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N (base score 4.7, MEDIUM). The issue is network-exploitable with user interaction required; impact is limited to bypassing security featur...

CVE-2021-21126

Chromium/Google Chrome is affected by CVE-2021-21126 due to an insufficient policy enforcement in extensions, enabling a remote attacker to bypass site isolation via a crafted extension. Affected components include the extensions subsystem of Chromium (prior to version 88.0.4324.96). The issue is...

CVE-2023-35392

CVE-2023-35392 affects Microsoft Edge (Chromium-based). The vulnerability stems from errors in presenting information in the browser’s UI, enabling a remote spoofing attack that requires user interaction. According to available documents, exploitation is possible over network with user interactio...

CVE-2021-21127

CVE-2021-21127 affects Chromium/Chrome:Insufficient policy enforcement in extensions before 88.0.4324.96 allows bypassing Content Security Policy via a crafted extension. Affected product: Chromium/Chrome extensions subsystem; root cause is policy enforcement weakness in extensions. Impact: attac...

CVE-2024-21326

Technical details for CVE-2024-21326 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2024-43472

CVE-2024-43472 affects Microsoft Edge (Chromium-based). Affected component: Edge browser (Chromium-based) with elevation of privilege. Root cause details are not fully disclosed in the provided documents, but Nessus corroborates vulnerability in Edge

CVE-2021-21137

CVE-2021-21137 concerns an incorrect calculation issue in the DevTools component of Chromium prior to 88.0.4324.96. The core vulnerability is an inappropriate implementation in DevTools that could allow a remote attacker to obtain potentially sensitive information from disk via a crafted HTML pag...

CVE-2022-33649

CVE-2022-33649 is a Microsoft Edge (Chromium-based) security feature bypass vulnerability. The NVD entry specifies a 3.1.1 CVSS: 3.1 base score 9.6 (CRITICAL) with network attack vector, no user privileges required, and user interaction needed. The overall impact is high on confidentiality, integ...

CVE-2024-26192

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability (CVE-2024-26192) affects the Edge Chromium-based browser. Connected sources confirm the vulnerability is a information disclosure flaw in Edge that can expose sensitive data via the browser’s components; CVSS 3.1 vector indicate...

CVE-2021-21131

CVE-2021-21131 is a policy enforcement issue in Chromium’s File System API (before version 88.0.4324.96). The vulnerability allows a remote attacker to bypass filesystem restrictions via a crafted HTML page. Affected product: Chromium browser (File System API component). Root cause: insufficient ...

CVE-2021-21129

CVE-2021-21129 describes a policy-enforcement vulnerability in Chromium’s File System API, prior to version 88.0.4324.96, enabling a remote attacker to bypass filesystem restrictions via a crafted HTML page. Root cause: insufficient policy enforcement in the File System API. Impact stated by sour...

CVE-2022-33680

CVE-2022-33680 affects Microsoft Edge (Chromium-based). It is an Elevation of Privilege vulnerability in Edge, with CVSSv3.1 base score 8.3 (NETWORK, HIGH), requiring user interaction and having a changed scope that impacts confidentiality, integrity, and availability. Affected product: Microsoft...

CVE-2023-21775

CVE-2023-21775 is a Microsoft Edge (Chromium-based) Remote Code Execution vulnerability. Public details in the connected NC SC advisory confirm fixes in Google Chrome and Microsoft Edge, with updates to Chrome 109.0.5414.74 (and Edge equivalents) addressing the issue. The briefing does not provid...

CVE-2023-36027

CVE-2023-36027 affects Microsoft Edge (Chromium-based) and is described as an elevated-privilege vulnerability. The OpenVAS NASL entry links this CVE to a pre-update condition: Edge versions older than 118.0.2088.102 / 119.0.2151.58 are affected, with a remote-execution/elevation-privilege scenar...

CVE-2023-38187

CVE-2023-38187 affects Microsoft Edge (Chromium-based). Descriptions across sources identify an elevation of privilege vulnerability in Edge; the connected documents confirm the CVE exists but do not provide explicit technical details (vulnerable component/version/root cause) within this set. Exp...

CVE-2021-21130

CVE-2021-21130 refers to a policy enforcement issue in Chromium’s File System API prior to 88.0.4324.96, allowing a crafted HTML page to bypass filesystem restrictions. Affected software: Chromium browser (before 88.0.4324.96). Root cause: insufficient policy enforcement in the File System API co...

CVE-2022-26909

Technical details for CVE-2022-26909 are not publicly provided in the supplied documents. Monitor for updates from official advisories (Microsoft Edge vulnerability guides) to obtain affected products, impact, and remediation.

CVE-2024-38083

CVE-2024-38083 affects Microsoft Edge (Chromium-based). It is a spoofing vulnerability in the browser’s UI behavior, with impact limited to spoofing user interface and partial data integrity impact; exploitation is not described as remote code execution. The CVE is associated with Edge versions p...

CVE-2022-30192

Technical details about CVE-2022-30192 are not publicly available in the provided documents. Monitor for updates from vendor advisories and security databases.

CVE-2023-6702

CVE-2023-6702 describes a Type Confusion in V8 used by Google Chrome/Chromium before version 120.0.6099.109, which could allow a remote attacker to potentially cause heap corruption via a crafted HTML page. The vulnerability is rated High (CVSS 3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Public no...

CVE-2023-36022

CVE-2023-36022 : Microsoft Edge (Chromium-based) contains a remote code execution vulnerability. Reported as CVSSv3.1: Local attack, User interaction required, with Confidentiality Impact High, Integrity/Availability Low. No exploit details in provided docs. Remediation: apply the vendor update (...

CVE-2025-21404

Microsoft Edge (Chromium-based) contains a Spoofing Vulnerability (CVE-2025-21404). Affected products include Edge Chromium-based on desktop and mobile (iOS/Android); the issue is described as spoofing UI without widely documented exploitation details in the provided sources. The CVE entry lists ...

CVE-2023-28286

Technical details about CVE-2023-28286 are not publicly provided in the supplied documents; no affected versions, exploit info, or fixes are described. Monitor for future updates from vendors and security advisories.

CVE-2024-21388

Microsoft Edge (Chromium-based) is affected by CVE-2024-21388, a Privilege Escalation vulnerability tied to a private “marketing” API. The connected exploit repository describes a Python-based technique exploiting a private Edge API on privileged Microsoft domains to silently install extensions w...

CVE-2023-21794

CVE-2023-21794 is a Microsoft Edge (Chromium-based) spoofing vulnerability. The available description identifies a spoofing issue but does not detail the exact root cause or vulnerable component/versions in this document. Public advisories linked to the CVE indicate mitigation via updating Edge t...

CVE-2023-36008

CVE-2023-36008, Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability, is evidenced in connected sources as a remote code execution issue affecting Microsoft Edge (Chromium-based). The OpenVAS/Nessus entries corroborate an RCE vulnerability referenced with Edge versions around the 1...

CVE-2023-38173

CVE-2023-38173 describes a spoofing vulnerability in Microsoft Edge for Android. Affected product is Edge for Android (Chromium-based). The entry notes a CVSS v3.1 base score of 4.3 (Medium) with network attack vector, no confidentiality impact, and partial integrity impact; user interaction is r...

CVE-2024-21337

CVE-2024-21337 is an Elevation of Privilege vulnerability in Microsoft Edge (Chromium-based). Affected product: Edge (Chromium-based). CVSS 3.1 metrics indicate local attack vector, high complexity, no privileges required, user interaction required, and a changed scope with low impact on confiden...

CVE-2023-36559

CVE-2023-36559 is a spoofing vulnerability in Microsoft Edge (Chromium-based). The connected documents corroborate that Edge is affected and that this CVE is listed among multiple Edge vulnerabilities (including spoofing). The provided sources do not include concrete exploit details, affected sub...

CVE-2021-21125

CVE-2021-21125 is a policy-enforcement vulnerability in the Chromium-based File System API of Google Chrome (Windows) before version 88.0.4324.96. The issue allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page. Connected sources confirm this CVE occurs within Chromi...

CVE-2021-21133

CVE-2021-21133 is a policy-enforcement vulnerability in Chromium’s Downloads component. The issue, observed in Chromium before 88.0.4324.96, could allow an attacker who lures a user to download files to bypass navigation restrictions via a crafted HTML page. Public advisories (Arch Linux ASA-2021...

CVE-2021-21136

CVE-2021-21136 affects Chromium WebView on Android (before 88.0.4324.96). Root cause: insufficient policy enforcement in WebView. Impact: remote attacker could leak cross-origin data via a crafted HTML page. Public fixes and references indicate upgrade to Chromium 88.0.4324.96+ (e.g., Chromium pa...

CVE-2023-44323

CVE-2023-44323 affects Adobe Acrobat for Edge (Edge browser) with the Adobe PDF component, where a Use-After-Free in the PDF handling can lead to an application DoS. Exploitation requires user interaction (victim opens a malicious file) and does not detail exploit availability. A patchable remedi...

CVE-2024-21385

CVE-2024-21385 affects Microsoft Edge (Chromium-based). The vulnerability is an Elevation of Privilege in Edge/Chromium components (root cause not explicitly detailed in the provided documents). CVSS v3.1 vector: AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H with base score 8.3 (HIGH). Public sources indic...

CVE-2024-30058

CVE-2024-30058 affects Microsoft Edge (Chromium-based); a spoofing vulnerability in the browser UI with CVSS 3.1 base score 5.4 (AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N). Connected sources corroborate Edge spoofing vulnerabilities in the same family. The vulnerability is listed for Edge (Chromium-bas...

CVE-2023-21719

CVE-2023-21719 : Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability. CVSS v3.1 base score 6.5 (Network, Low attack complexity, Privileges required: None, User interaction: Required, Scope: Unchanged; confidentiality impact High; integrity/availability: None). Affected product i...

CVE-2023-29345

Technical details for CVE-2023-29345 are not publicly available in the provided documents; monitor for updates from vendors and security advisories before assessing impact or fixes.

CVE-2021-21139

CVE-2021-21139 : In Chromium/Google Chrome, an incorrect implementation in the iframe sandbox allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Affected: Chromium/Chrome before 88.0.4324.96. Impact: potential navigation bypass; remote exploitation risk is descri...

CVE-2024-21382

CVE-2024-21382 affects Microsoft Edge for Android (Chromium-based). The connected data identifies an Information Disclosure Vulnerability in Edge for Android that could allow an attacker to obtain sensitive information. The CVSS data indicates a Network attack vector with user interaction require...

CVE-2022-26905

CVE-2022-26905 affects Microsoft Edge (Chromium-based) and is described as a Spoofing Vulnerability. Public documents indicate that fixes were released; ENISA/NCSc state that Edge update version 102.0.1245.30 addresses the vulnerabilities. Metascore metrics from NVD show a MEDIUM base score (CVSS...

CVE-2021-21134

CVE-2021-21134 is a Chromium/Chrome Page Info UI security issue reported as content spoofing. Affected software: Chromium/Chrome prior to version 88.0.4324.96. Root cause: incorrect security UI handling in Page Info allowed a remote attacker to spoof security UI via a crafted page. Impact stateme...

CVE-2024-43577

Technical details for CVE-2024-43577 are not publicly available in the provided connected documents. Monitor for updates from official advisories and vendor pages to obtain affected products, root cause, impact, and remediation.

CVE-2022-26908

Technical details for CVE-2022-26908 are not publicly provided in the supplied documents. The materials reference an Elevation of Privilege issue in Microsoft Edge (Chromium-based) but lack specifics on vulnerable components, versions, or fixes. Monitor for updates.

CVE-2021-21124

CVE-2021-21124 is a use-after-free vulnerability in the Speech Recognizer component of the Chromium browser (tracked across multiple advisories). Impacted versions are Chromium before 88.0.4324.96. The issue could allow a remote attacker to escape sandbox and execute arbitrary code via a crafted ...

CVE-2023-28261

Technical details about CVE-2023-28261 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2023-29350

CVE-2023-29350 is a Microsoft Edge (Chromium-based) Elevation of Privilege vulnerability. The available documents identify Edge as affected and classify the issue as an elevation of privilege with high impact (per CVSS metrics: AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H). A remediation path is suggested...

CVE-2024-30055

CVE-2024-30055 affects Microsoft Edge (Chromium-based) and is a spoofing vulnerability in the Chromium components used by Edge. The available connected documents confirm affected product: Microsoft Edge (Chromium-based); vulnerability described as spoofing, with higher-level impact to spoof user ...

CVE-2022-26894

Technical details for CVE-2022-26894 are not publicly provided in the supplied documents. No affected versions, root cause, or remediation are specified here; monitor for updates.

CVE-2023-36562

Technical details about CVE-2023-36562 are not provided in the supplied documents. Monitor for updates from Microsoft and security advisories to confirm affected versions, root cause, and remediation.

CVE-2023-36034

CVE-2023-36034 is a Microsoft Edge (Chromium-based) Remote Code Execution vulnerability. Documents confirm a local exploit path (AV: Local) with low attack complexity, no privileges required, and user interaction needed, yielding high impact to confidentiality and integrity (CVE CVSS: 3.1 vector:...