CVE-2023-36735

CVE-2023-36735 is a Microsoft Edge (Chromium-based) elevation of privilege vulnerability. The affected product is the Edge browser (Chromium-based). The CVSS metrics indicate a high-severity issue (9.6, CRITICAL) with a network attack vector, no privileges required, but user interaction needed, a...

CVE-2022-26895

CVE-2022-26895 affects Microsoft Edge (Chromium-based). The provided documents identify it as an Elevation of Privilege vulnerability but do not reveal the exact root cause, affected component/version, or exploit details. Remediation is to apply the Microsoft Edge update/version specified by MSRC...

CVE-2024-21387

Technical details about CVE-2024-21387 are not publicly available in the provided documents. Monitor for updates from official advisories and CVE/CNVD/NVD entries for affected products, impact, and fixes.

CVE-2023-36727

CVE-2023-36727 affects Microsoft Edge (Chromium-based) and is categorized as a Spoofing Vulnerability. The available connected documents identify the affected product (Microsoft Edge, Chromium-based) and label the issue as a Spoofing vulnerability, with no explicit technical exploit details provi...

CVE-2024-29987

Microsoft Edge (Chromium-based) has a documented information disclosure vulnerability associated with CVE-2024-29987. Publicly reported details indicate the issue affects Edge’s Chromium-based browser and can enable an attacker to obtain sensitive information. Several connected sources reference ...

CVE-2024-21383

CVE-2024-21383 involves a spoofing vulnerability in Microsoft Edge (Chromium-based). The affected product is Edge; the vulnerability is described as spoofing UI, with a CVSS v3.1 base score of 3.3 (LOW). Exploitation details in the provided materials indicate a local attack vector requiring user ...

CVE-2023-21720

CVE-2023-21720 refers to a tampering vulnerability in Microsoft Edge (Chromium-based). The connected Gentoo GLSA 202309-17 documents this issue and provides remediation guidance: upgrade Edge to the latest safe version (at least 113.0.5672.126) across supported platforms. The GLSA also lists othe...

CVE-2023-29354

CVE-2023-29354 is a Microsoft Edge (Chromium-based) security feature bypass vulnerability. The CVSS v3.1 base score is 4.7 (Medium) with vectors: AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N, indicating network access with low attack complexity, no privileges, user interaction required, and potential impa...

CVE-2024-20675

CVE-2024-20675 is a Microsoft Edge (Chromium-based) Security Feature Bypass vulnerability. The entry lists a CVSS v3.1 base score of 6.3 (Medium) with Network attack vector, Low attack complexity, No privileges required, and User interaction required; impacts to confidentiality, integrity, and av...

CVE-2023-24892

CVE-2023-24892 affects Microsoft Edge (Chromium-based) using the WebView2 control. The vulnerability is a spoofing issue that can enable spoofed user-interface behavior, as described in multiple sources (Edge/WebView2 spoofing entries and exploitation references). The impact is consistent with a ...

CVE-2023-24935

CVE-2023-24935 affects Microsoft Edge (Chromium-based). The vulnerability is a Spoofing issue in the browser UI. A fix is available in Edge 112.0.1722.34 and later versions (per Nessus/Microsoft advisories). Exploitation status is not detailed in the provided documents. Update Edge to the latest ...

CVE-2024-21336

Microsoft Edge (Chromium-based) Spoofing Vulnerability (CVE-2024-21336) affects the Edge browser’s UI spoofing surface. Root cause: spoofing in the Chromium-based UI; impact is spoofed user interface with potential to mislead. Attack vector: local, requires user interaction; CVSS v3.1 base score ...

CVE-2024-29991

CVE-2024-29991 affects Microsoft Edge (Chromium-based). The entry describes a Security Feature Bypass vulnerability in Edge with CVSS v3.1 base score 5.0 (Network, High attack complexity, Privileges None, User Interaction Required, Confidentiality/Integrity/Availability Low to None). Connected so...

CVE-2022-33636

CVE-2022-33636 refers to a remote code execution vulnerability in Microsoft Edge (Chromium-based) . Connected documents corroborate the vulnerability is associated with Edge/Chromium and indicate a fix has been released by Microsoft. The Gentoo advisory GLSA-202208-35 lists CVE-2022-33636 among m...

CVE-2022-24475

Technical details about CVE-2022-24475 are not publicly provided in the supplied documents. No affected products, root cause, vulnerability scope, exploit info, or remediation are specified here. Monitor for updates from official advisories and trusted third parties.

CVE-2022-26912

CVE-2022-26912 is an Elevation of Privilege vulnerability in Microsoft Edge (Chromium-based). Connected sources confirm affected product is Edge and classify the issue as an elevation of privilege, with exploitation details not disclosed in the provided documents. Microsoft’s advisory (MSRC) is t...

CVE-2023-36026

CVE-2023-36026 affects Microsoft Edge (Chromium-based). The connected OpenVAS entry confirms this CVE is part of a set of Microsoft Edge vulnerabilities and references a remediation path via Microsoft Edge updates (solution: install updates listed in About/Microsoft Edge update settings). The NVD...

CVE-2025-25000

CVE-2025-25000 affects Microsoft Edge (Chromium-based). The vulnerability is a type confusion error described as access of a resource using an incompatible type that could allow an unauthorized attacker to execute code over a network. The connected sources confirm affected product and the remote ...

CVE-2022-21970

CVE-2022-21970: Microsoft Edge (Chromium-based) Elevation of Privilege vulnerability with PoC exploit cited in a GitHub repo; affected version chain includes Edge prior to 97.0.1072.55. Documents indicate exploitation potential via a crafted action in Edge and note that patches exist (Edge 97.0.1...

CVE-2023-33143

Technical details for CVE-2023-33143 are not publicly provided in the supplied documents; monitor for updates from vendors and related advisories.

CVE-2025-29806

CVE-2025-29806 corresponds to a Microsoft Edge (Chromium-based) remote code execution vulnerability. Multiple connected sources identify it as a network-exploitable issue that could allow an attacker to run arbitrary code on a vulnerable machine, with attack vector over the network and requiring ...

CVE-2023-21795

CVE-2023-21795 affects Microsoft Edge (Chromium-based). It is an elevation of privilege vulnerability in Edge that can be executed over a network with high impact on confidentiality, integrity, and availability (CVSS 3.1: 8.3, HIGH). The entry lists attack vector as NETWORK, attack complexity as ...

CVE-2024-38219

CVE-2024-38219 affects Microsoft Edge (Chromium-based). The NVD lists a Remote Code Execution vulnerability with CVSS v3.1 base score 9.0 (Network, No user interaction, Privileges None, Scope Changed; Impact on Confidentiality, Integrity, Availability High). Microsoft/Edge advisory references a v...

CVE-2026-72970

Technical details about CVE-2026-72970 are not publicly available in the provided documents. Monitor official vendor advisories and security bulletins for updates.

CVE-2025-47963

CVE-2025-47963 affects Microsoft Edge (Chromium-based). The issue is a spoofing vulnerability in Edge that could be triggered over a network by an unauthorized attacker to spoof the user interface. The primary public description notes no CWE. Connected sources corroborate Edge spoofing and list a...

CVE-2025-29834

Microsoft Edge (Chromium-based) Remote Code Execution vulnerability (CVE-2025-29834) is due to an out-of-bounds read in the browser, allowing an unauthenticated attacker to execute code over a network. Affected product: Microsoft Edge (Chromium-based). Vulnerable component: Edge/Chromium code han...

CVE-2025-47964

CVE-2025-47964 is a Microsoft Edge (Chromium-based) spoofing vulnerability. Reported as a UI spoofing issue affecting Edge, with exposure via network, requiring user interaction. No exploit details provided in the initial documents; exploitation status is not confirmed. Remediation guidance refer...

CVE-2022-30128

CVE-2022-30128 is a Microsoft Edge (Chromium-based) elevation of privilege vulnerability. Public details among the connected documents show an attacker could exploit a network-based vector with high severity in the CVSS 3.1 context, requiring user interaction, and with potential impacts to confid...

CVE-2024-38210

CVE-2024-38210 affects Microsoft Edge (Chromium-based) prior to version 128.0.2739.42. Connected sources identify this as a remote code execution vulnerability in Edge Chromium, with PT-2024-5978 listing susceptibility for versions before 128.0.2739.42 and recommending upgrade to 128.0.2739.42 or...

CVE-2025-21185

Microsoft Edge (Chromium-based) has a CVE-2025-21185 Elevation of Privilege vulnerability (CVSS v3.1 base score 6.5; vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N). Affects Edge components as described in the entry; impact is limited to confidentiality exposure (C:H) with no integrity or a...

CVE-2024-43566

CVE-2024-43566 affects Microsoft Edge (Chromium-based) with remote code execution. The NVD CVSS v3.1 vector is CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, base score 9.8 (CRITICAL). Microsoft’s CNA data references a separate 3.1 vector with base score 7.5 (HIGH). OpenVAS/NESSUS entries indicate...

CVE-2022-33639

CVE-2022-33639 affects Microsoft Edge (Chromium-based) and is an Elevation of Privilege vulnerability. NVD records CVSS‑3.1 base score 8.3 (HIGH) with NETWORK attack vector, HIGH impact to confidentiality/integrity/availability, PR:N, UI:REQUIRED, S:C. Remediation guidance appears in Gentoo GLSA ...

CVE-2025-26643

CVE-2025-26643 affects Microsoft Edge (Chromium-based). Description: a spoofing vulnerability where the UI performs the wrong action, enabling a network-based spoofing possibility. CVSS v3.1 base score 5.4 (MEDIUM), vector AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N, with user interaction required and ne...

CVE-2026-58289

CVE-2026-58289 concerns Microsoft Edge (Chromium-based). The vulnerability is a type confusion during resource access that enables a remote attacker to execute code over a network. Affected product is Microsoft Edge (Chromium-based); the root cause is incompatible type handling in resource access...

CVE-2024-43587

CVE-2024-43587 is a remote code execution vulnerability in Microsoft Edge (Chromium-based). Public sources in the connected data identify Edge as affected and list multiple vulnerabilities, including CVE-2024-43587, as part of a bundle affecting Edge versions prior to update 130.0.2849.46. The Op...

CVE-2025-47182

CVE-2025-47182 affects Microsoft Edge (Chromium-based) and is caused by improper input validation. The vulnerability enables an authorized, locally scoped attacker to bypass a security feature, resulting in potential elevation of privileges with the integrity impact high and confidentiality uncha...

CVE-2024-30056

Microsoft Edge (Chromium-based) information disclosure vulnerability CVE-2024-30056 is reported across multiple sources (NVD/CNVD/Nessus/NVD references). Affected product: Microsoft Edge (Chromium-based). Issue: information disclosure vulnerability; exact root cause is not detailed in the provide...

CVE-2023-33145

Microsoft Edge (Chromium-based) Information Disclosure vulnerability (CVE-2023-33145) affects the Edge browser. Root cause and exact component/versions are not detailed in the provided documents beyond classification as an information disclosure issue with confidentiality impact. Affected: Micros...

CVE-2024-29986

Summary: CVE-2024-29986 affects Microsoft Edge for Android (Chromium-based) and is categorized as an information disclosure vulnerability. The issue is disclosed in Edge for Android and can lead to the exposure of sensitive information, as described in multiple sources (CNVD/CNNVD/NVD) and corrob...

CVE-2022-30127

CVE-2022-30127 affects Microsoft Edge (Chromium-based). The connected advisories confirm an Elevation of Privilege vulnerability and that fixes are available in Edge (update 102.0.1245.30). Apply the recommended Edge update to mitigate. The documents do not provide detailed root-cause analysis or...

CVE-2024-38207

Microsoft Edge (HTML-based) memory corruption vulnerability (CVE-2024-38207) affects Edge HTML-based components. Root cause: memory corruption in Edge’s HTML handling leading to arbitrary code execution. Affected: Microsoft Edge (Chromium-based) and Edge HTML-based variants; versions include olde...

CVE-2022-44688

Technical details about CVE-2022-44688 are not publicly provided in the supplied documents. No explicit affected products, vectors, impacts, or remediation specifics are included here. Monitor for official disclosures or updates from vendors/security advisories.

CVE-2022-23261

CVE-2022-23261 refers to a Tampering Vulnerability in Microsoft Edge (Chromium-based). Affected product is Microsoft Edge (Chromium-based); the vulnerability concerns integrity tampering with Edge components. According to NVD, the CVSSv3.1 base score is 5.3 (NETWORK, LOW attack complexity, NO pri...

CVE-2023-36024

CVE-2023-36024 affects Microsoft Edge (Chromium-based). The vulnerability is an Elevation of Privilege in the browser’s Chromium-based code. Impact per sources indicates potential local privilege escalation with low confidentiality/integrity/availability impact; exploit details are not provided i...

CVE-2024-20709

CVE-2024-20709 describes an Improper Input Validation in Acrobat Reader T5 (MSFT Edge) affecting versions

CVE-2022-22021

CVE-2022-22021 affects Microsoft Edge (Chromium-based). The vulnerability allows remote code execution via network access with high privileges required and user interaction needed (per CVSS3.1: CVSS:3.1 vector AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H; base score 8.3). The NVD entry cites Edge as the a...

CVE-2025-29825

CVE-2025-29825 affects Microsoft Edge (Chromium-based). The flaw is a UI misrepresentation that enables a remote attacker to spoof UI over a network, requiring user interaction. Impact per the metrics is Confidentiality High, with no impacts to Integrity/Availability reported. The CVSS 3.1 vector...

CVE-2022-35796

Technical details for CVE-2022-35796 (Microsoft Edge Chromium-based elevation of privilege) are not publicly disclosed in the provided connected documents. Monitor for updates from official vulnerability feeds for affected versions, impact, and remediation information.

CVE-2024-49025

CVE-2024-49025 affects Microsoft Edge (Chromium-based). The connected sources describe an information-disclosure vulnerability in Edge/Chromium components (insufficient access controls per PT-2024-8168; OpenVAS/Nessus references label it as an Edge information-disclosure issue). Affected versions...

CVE-2026-50521

CVE-2026-50521 : Use-after-free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network. The vulnerability has a CVSS v3.1 base score of 8.3 (High) with network attack vector, low attack complexity, required privileges, no user interaction, and impact to co...