CVE-2025-29815

CVE-2025-29815 is a vulnerability in Microsoft Edge (Chromium-based) caused by a use-after-free in the browser. The issue enables a network-exposed remote code execution by an authorized attacker, with a CVSS v3.1 base score of 7.6 (High) and impact on confidentiality, integrity, and availability...

CVE-2024-20721

CVE-2024-20721 affects Acrobat Reader T5 (MSFT Edge) versions 120.0.2210.91 and earlier. The root cause is improper input validation. In the described vulnerability, an unauthenticated attacker can cause an application DoS in the context of the current user, with exploitation requiring user inter...

CVE-2025-21401

Microsoft Edge (Chromium-based) Security Feature Bypass (CVE-2025-21401) is corroborated by connected sources indicating affected versions prior to 133.0.3065.69 and a security feature bypass issue. The Nessus entry specifies the vulnerability as present in Edge versions before 133.0.3065.69 and ...

CVE-2022-41035

CVE-2022-41035 is a spoofing vulnerability in Microsoft Edge (Chromium-based) . The CVE entry references an issue in Edge’s Chromium components that can affect integrity without affecting confidentiality or availability according to the CVSS data, with exploitation requiring user interaction (UI:...

CVE-2024-43596

Technical details about CVE-2024-43596 are not publicly available in the provided documents. Monitor for updates from official vendors (Microsoft) and trusted security advisories for affected versions, impact, and remediation.

CVE-2026-65802

CVE-2026-65802 affects Microsoft Edge for Android. The vulnerability is described as external control of a file name or path that enables an unauthorized attacker to disclose information over a network. It is network‑accessible with low attack complexity, no privileges required, but user interact...

CVE-2025-21408

CVE-2025-21408 refers to a Microsoft Edge (Chromium-based) remote code execution vulnerability. The entry documents a network-exposed flaw with a high impact (C:H/I:H/A:H) and a CVSSv3.1 score of 8.8. Initial data notes Edge Chromium-based, RCE, with user interaction required and no privileges re...

CVE-2026-66321

CVE-2026-66321 affects Microsoft Edge (Chromium-based). The issue is an access of resource using an incompatible type (type confusion) that could allow an unauthenticated, network-based attacker to execute code on the target system. Exploitation details, affected versions, and a mitigation patch/...

CVE-2022-23263

CVE-2022-23263 is a Microsoft Edge (Chromium-based) Elevation of Privilege vulnerability. Connected sources identify the affected product as Microsoft Edge (Chromium-based) and describe the issue as an elevation of privileges due to insecure privilege management in the browser. Core details from ...

CVE-2026-66318

CVE-2026-66318 affects Microsoft Edge (Chromium-based). Description: origin validation error may allow an unauthorized attacker to disclose information over a network. Metrics indicate CVSS v3.1 Base Score 8.1 (High) with network attack vector, low attack complexity, no privileges required, but u...

CVE-2022-41115

Technical details about CVE-2022-41115 are not publicly provided in the supplied documents. Please monitor official advisories (e.g., Microsoft MSRC) for details, impact specifics, and remediation.

CVE-2024-38221

CVE-2024-38221 affects Microsoft Edge (Chromium-based). Public sources consistently describe a spoofing vulnerability in Edge that can enable spoofed user interface, potentially coupled with cross-site scripting concerns (CNVD reference). According to NVD, the CVSS 3.1 base score is 4.3 (Medium) ...

CVE-2023-35618

CVE-2023-35618 is a Microsoft Edge (Chromium-based) Elevation of Privilege vulnerability. Affected component: Edge browser. CVSS 3.1 base score 9.6 (CRITICAL) with network attack vector, no user interaction (UI:R) required, and changes in scope with high confidentiality, integrity, and availabili...

CVE-2024-43496

CVE-2024-43496 affects Microsoft Edge (Chromium-based). Connected sources describe a buffer overflow that enables remote code execution, with Edge as the affected product and the vulnerability linked to CVE-2024-43496. The Edge-related entries note the issue can be triggered remotely and could al...

CVE-2026-66322

The CVE-2026-66322 issue concerns Microsoft Edge (Chromium-based). The connected sources describe an origin validation error that enables an unauthorized attacker to perform spoofing over a network. Affected software is Edge (Chromium-based); the vulnerability is tied to origin validation in the ...

CVE-2024-38209

CVE-2024-38209 affects Microsoft Edge (Chromium-based). The connected sources confirm a remote code execution vulnerability in Edge/Chromium components. Available public advisories indicate multiple entries around Edge-related flaws; PT-2024-5977 specifies affected Edge (Chromium-based) versions ...

CVE-2022-21930

Technical details for CVE-2022-21930 are not publicly available in the provided documents. Monitor for updates.

CVE-2023-36888

CVE-2023-36888 affects Microsoft Edge for Android (Chromium-based). Documented as a Tampering Vulnerability that enables spoofing the user interface; CVSS base reflects low impacts to confidentiality, integrity and availability. Connected sources identify affected products as Edge for Android (Ch...

CVE-2021-36928

CVE-2021-36928 is described as a Microsoft Edge (Chromium-based) Elevation of Privilege vulnerability. Connected document PT-2021-3742 references Edge Installer as the vulnerable component and notes the issue relates to errors in creating connections with directories, enabling potential privilege...

CVE-2025-21342

CVE-2025-21342 refers to a remote code execution vulnerability in Microsoft Edge (Chromium-based). The NVD entry notes a network-based exploit with low attack complexity, no privileges required, but requires user interaction, and yields high impact on confidentiality, integrity, and availability....

CVE-2021-34506

CVE-2021-34506 affects Microsoft Edge (Chromium-based) and is a security feature bypass in Edge. Publicly available sources in the provided documents identify the affected product as Edge (Chromium-based) and the vulnerability class as a security feature bypass; Microsoft’s and ENISA/NCSC advisor...

CVE-2022-21954

CVE-2022-21954 is an Elevation of Privilege vulnerability affecting Microsoft Edge (Chromium-based). The Connected OpenVAS/Nessus entries reference Edge-related vulnerabilities and list CVEs used in conjunction with Edge, but do not provide concrete technical details for CVE-2022-21954 itself (e....

CVE-2026-58525

CVE-2026-58525 affects Microsoft Edge (Chromium-based) with an improper access control that lets an unauthenticated attacker bypass a security feature over the network. CVSS 3.1 base score 8.2 (HIGH) with Network attack vector, Low attack complexity, No privileges, User interaction required, Conf...

CVE-2022-23262

CVE-2022-23262 is a Microsoft Edge (Chromium-based) elevation-of-privilege vulnerability affecting the Edge browser. According to the provided records, it impacts Microsoft Edge (Chromium-based) on Windows 10 and later, with a CVSS v3.1 base score of 6.3 (vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/...

CVE-2024-43489

CVE-2024-43489 affects Microsoft Edge (Chromium-based). Multiple connected sources confirm a remote code execution vulnerability linked to type confusion issues in Edge’s Chromium components (notably V8) that could allow arbitrary code execution. Affected software is Microsoft Edge (Chromium-base...

CVE-2024-49023

Microsoft Edge (Chromium-based) is affected by CVE-2024-49023, a remote code execution vulnerability reported as part of a set of Edge vulnerabilities. Connected sources indicate use-after-free in Edge components leading to RCE, with exploits publicly available. Affected versions are Edge before ...

CVE-2021-38669

CVE-2021-38669 concerns Microsoft Edge (Chromium-based) Tampering Vulnerability. Connected docs indicate Edge

CVE-2021-42307

CVE-2021-42307 affects Microsoft Edge (Chromium-based). The vulnerability is an Information Disclosure issue in Edge, with a Confidentiality impact described as Low and no Integrity/Availability impact. The public documentation does not specify the exact component or root cause; exploitation deta...

CVE-2022-21929

CVE-2022-21929 : Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability. Affected product: Microsoft Edge (Chromium-based). The connected documents provide limited technical detail beyond “remote code execution” and patch guidance. Remediation: apply updates listed in the Microsoft E...

CVE-2024-43580

CVE-2024-43580 is a spoofing vulnerability in Microsoft Edge (Chromium-based) that affects the browser UI. Public sources indicate it exists in Edge prior to at least version 130.0.2849.46 (and related entries reference multiple vulnerabilities against Edge Chromium). The root cause is a spoofing...

CVE-2026-58284

CVE-2026-58284 affects Microsoft Edge (Chromium-based). The vulnerability is described as improper authorization that could allow an unauthorized attacker to execute code over a network (remote code execution). The NVD entry lists a CVSS v3.1 base score of 8.3 (HITE: HIGH) with Network attack vec...

CVE-2021-31982

CVE-2021-31982 affects Microsoft Edge (Chromium-based). It is a Security Feature Bypass vulnerability (CVSS v3.1 base score 8.8; Network attack, Low complexity, User interaction required). The issue is addressed by Microsoft Edge updates listed in the MSRC guidance; remediation is to install the ...

CVE-2024-49054

CVE-2024-49054 affects the Microsoft Edge (Chromium-based) browser. OpenVAS and related records describe a spoofing vulnerability impacting the browser UI, with root cause framed as a spoofing weakness in Edge (Chromium-based). The NVD/CVE metadata shows a CVSS‑3.1 base score of 4.3 (Network -&gt...

CVE-2022-21931

Technical details are not publicly provided in the provided documents for CVE-2022-21931; no affected versions, root cause, or fixes are stated. Monitor for official advisories for updates.

CVE-2025-21279

CVE-2025-21279 is a Microsoft Edge (Chromium-based) Remote Code Execution vulnerability. Edge is the affected product; CVE-2025-21279 is documented across multiple sources (NVD entry and Microsoft Edge advisories) as a high-severity, network-exposed issue with potential for arbitrary code executi...

CVE-2025-21283

CVE-2025-21283 affects Microsoft Edge (Chromium-based). The NVD entry documents a Remote Code Execution vulnerability with CVSS v3.1: base score 8.8 (HIGH) via NETWORK attack vector, requiring user interaction, and high impact on confidentiality, integrity, and availability. Microsoft’s advisory ...

CVE-2023-36880

CVE-2023-36880 affects Microsoft Edge (Chromium-based). The connected materials identify it as an information disclosure vulnerability in Edge. A PoC exploit (Mirage) demonstrates how a vulnerable prefs_enclave_x64.dll and related UnsealSettings/SealSettings calls can move shellcode from an encla...

CVE-2024-43579

CVE-2024-43579 affects Microsoft Edge (Chromium-based). It is a remote code execution vulnerability in Edge with high impact (C/H/I/H) and network attack vector; exploitation exists publicly. Affected component is Edge browser on Windows; root cause details are not fully described in the provided...

CVE-2021-36931

CVE-2021-36931 is a Microsoft Edge (Chromium-based) elevation-of-privilege vulnerability. Connected documents attribute the root cause to insufficient access restrictions in Edge, enabling a local privilege escalation. Affected product: Microsoft Edge (Chromium-based). Public exploits exist for t...

CVE-2024-43578

Affected software: Microsoft Edge (Chromium-based). Issue: CVE-2024-43578 — a remote code execution vulnerability. Root cause / detail from sources: a set of CVEs impacting the Chromium-based Edge stack; CVE-2024-43578 is listed among multiple vulnerabilities in Edge, with exploitation vectors de...

CVE-2024-43595

CVE-2024-43595 affects Microsoft Edge (Chromium-based). Public sources (Microsoft/MSRC advisories and Nessus/NVAS listings) indicate a Remote Code Execution vulnerability in Edge Chromium with exploitation potential via network access and user interaction. The OpenVAS/Nessus entries enumerate aff...

CVE-2026-0385

CVE-2026-0385 affects Microsoft Edge (Chromium-based) for Android and is described as a spoofing vulnerability. According to the metrics, it requires network access and user interaction, with a Medium base score (CVSS 3.1: AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L) and a vulnerability impact on confide...

CVE-2021-34475

CVE-2021-34475 affects Microsoft Edge (Chromium-based). The available connected documents identify an Elevation of Privilege vulnerability in Edge and note updates were issued by Microsoft to address the issue; CVSS appears as 3.1, base score 5.4 (Medium), with Network attack vector, Low attack c...

CVE-2023-38174

CVE-2023-38174 affects Microsoft Edge (Chromium-based). The vulnerability is categorized as Information Disclosure with a CVSSv3.1 base score of 4.3 (Medium); attack requires user interaction and network access suspected, per the provided metrics. The cited connected entries confirm the issue wit...

CVE-2021-36929

Technical details about CVE-2021-36929 are not publicly provided in the connected documents. Affected products and root cause are not specified here. Monitor for updates from referenced advisories (MSRC) and external vendors for remediation and impact.

CVE-2023-36878

Microsoft Edge (Chromium-based) Security Feature Bypass (CVE-2023-36878) is documented in Edge-related advisories. Connected sources describe a bypass enabling security restrictions to be bypassed by loading a malicious page/file, attributed to a lack of blocking tags in Edge. Affected product: M...

CVE-2026-65804

Technical details about CVE-2026-65804 are not publicly provided in the supplied documents; no information on affected versions, root cause specifics, or mitigations is available. Monitor for updates.

CVE-2026-66312

CVE-2026-66312 is a buffer over-read in Microsoft Edge (Chromium-based) that enables an authorized attacker to execute remote code over a network. The vulnerability is referenced across NVD, ENISA Europe and CVE listings, and Microsoft’s vulnerability advisory. Affected product is Edge (Chromium-...

CVE-2026-66314

Microsoft Edge (Chromium-based) is affected by a time-of-check time-of-use (TOCTOU) race condition that could allow an unauthenticated attacker to disclose information over a network. The vulnerability impacts the browser’s ability to protect data during network interactions. Root cause described...

CVE-2021-43221

CVE-2021-43221 is a Remote Code Execution vulnerability affecting Microsoft Edge (Chromium-based). The connected sources identify it as one of multiple Edge/Chromium vulnerabilities (notably in Edge versions prior to 96.0.1054.29) that can be exploited remotely via network activity. The Nessus en...