CVE-2023-36878

Microsoft Edge (Chromium-based) Security Feature Bypass (CVE-2023-36878) is documented in Edge-related advisories. Connected sources describe a bypass enabling security restrictions to be bypassed by loading a malicious page/file, attributed to a lack of blocking tags in Edge. Affected product: M...

CVE-2026-57989

CVE-2026-57989 affects Microsoft Edge (Chromium-based). The provided documents describe an origin validation error that allows an unauthorized attacker to disclose information over a network. The NVD entry and MSRC page confirm the same description; no specific exploit vectors, affected product v...

CVE-2026-66312

CVE-2026-66312 is a buffer over-read in Microsoft Edge (Chromium-based) that enables an authorized attacker to execute remote code over a network. The vulnerability is referenced across NVD, ENISA Europe and CVE listings, and Microsoft’s vulnerability advisory. Affected product is Edge (Chromium-...

CVE-2026-66324

CVE-2026-66324 is a spoofing vulnerability in Microsoft Edge (Chromium-based) caused by external control of a file name or path . An unauthorized network-based attacker with low complexity and no prior privileges , but requiring user interaction , can exploit this to perform spoofing. The CVSS 3....

CVE-2026-58290

Microsoft Edge (Chromium-based) is affected by CVE-2026-58290 due to a type confusion in resource access, enabling remote code execution over the network. The CVSS indicates network access with user interaction required and limited impact to confidentiality and availability, with higher impact to...

CVE-2026-58298

CVE-2026-58298 affects Microsoft Edge (Chromium-based). The issue is improper neutralization of input during web page generation, enabling cross-site scripting that can be leveraged by an unauthenticated attacker over the network to perform spoofing. CVSS 3.1 base score 7.2 (HIGH) with network ac...

CVE-2026-66325

Technical details are not publicly available in the provided documents for CVE-2026-66325 beyond the basic briefing that it is an SSRF/spoofing issue in Microsoft Edge (Chromium-based). Monitor for updates and authoritative advisories to assess impact and remediation.

CVE-2026-66326

Technical details (affected products/versions, root cause, and remediation) are not publicly provided in the supplied documents. Monitor for updates.

CVE-2026-0102

CVE-2026-0102 affects Microsoft Edge (Chromium-based) with a vulnerability where, under specific conditions, a malicious webpage can trigger autofill population after two consecutive taps, potentially disclosing stored autofill data (addresses, email, phone number metadata). Connected documents i...

CVE-2026-66314

Microsoft Edge (Chromium-based) is affected by a time-of-check time-of-use (TOCTOU) race condition that could allow an unauthenticated attacker to disclose information over a network. The vulnerability impacts the browser’s ability to protect data during network interactions. Root cause described...

CVE-2026-66317

Technical details (affected product/components, root cause, impact, or remediation) are not publicly available in the provided documents. Monitor for updates from MSRC/NVD/ENISA EUVD for new information.

CVE-2021-42308

Technical details for CVE-2021-42308 are not publicly available in the provided connected documents. Monitor for updates from listed sources; current materials mention Edge spoofing vulnerability but do not specify affected versions, impact, or remediation within these documents.

CVE-2026-57991

Microsoft Edge (Chromium-based) is affected by CVE-2026-57991 due to Improper link resolution before file access ("link following"). The issue could allow an unauthenticated attacker to disclose information over a network. The vulnerability affects the Edge Chromium rendering/file handling path a...

CVE-2025-60711

CVE-2025-60711 affects Microsoft Edge (Chromium-based). The vulnerability is described as a protection mechanism failure enabling remote code execution over a network. CVSS 3.1 base score is 6.3 (Network, Low attack complexity, No privileges required, User interaction required; Confidentiality, I...

CVE-2026-66798

Microsoft Edge (Chromium-based) is affected by a Use After Free vulnerability that allows an unauthorized attacker to execute code over a network . The CVSS 3.1 base score is 4.3 (MEDIUM) , with an attack vector of network, low complexity, no privileges required, but user interaction required . N...

CVE-2026-58288

CVE-2026-58288 affects Microsoft Edge (Chromium-based). It is described as a use-after-free vulnerability that could allow a remote attacker to execute code over a network. The CVSS 3.1 vector indicates Network attack, high impact on confidentiality, integrity, and availability, with user interac...

CVE-2026-66323

Microsoft Edge (Chromium-based) is affected by an improper neutralization of parameter/argument delimiters vulnerability that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS v3.1 score is 5.4 (Medium) , reflecting a network attack vector with low complexi...

CVE-2026-45488

CVE-2026-45488 concerns a UI misrepresentation in Microsoft Edge (Chromium-based) that enables a network-based spoofing attempt by an unauthorized attacker. The public description indicates the issue is focused on how critical information is presented in the browser UI, with impact described as s...

CVE-2025-49713

CVE-2025-49713 is a Microsoft Edge (Chromium-based) remote code execution vulnerability through a type confusion in Edge. Affected product: Edge (Chromium-based) browser. Cause: resource access using incompatible type leading to code execution over a network. Impact per CVSS: high severity, user ...

CVE-2025-49741

CVE-2025-49741 concerns an information-disclosure vulnerability in Microsoft Edge (Chromium-based). The available data identify the affected software as Edge/Chromium and confirm a network-exposed information disclosure vulnerability; root-cause details are not provided beyond the vulnerability c...

CVE-2026-57992

CVE-2026-57992 affects Microsoft Edge (Chromium-based). It is described as a use-after-free vulnerability that allows a remote attacker to execute code over a network. The CVSS v3.1 base score is 7.5 (HIGH) with Network attack, no privileges required, user interaction required, and full impact on...

CVE-2026-57974

CVE-2026-57974 affects Microsoft Edge (Chromium-based). The issue is an integer overflow/wraparound in Edge that enables an unauthenticated attacker to execute code over a network. The NVD/CVE entries confirm the vulnerability and related CVSS v3.1 metrics (High severity, network attack vector, u...

CVE-2026-66315

Technical details about CVE-2026-66315 are not publicly available in the provided documents. Monitor for updates from the vendors and security advisories to obtain affected products, vulnerable components, impact specifics, and remediations.

CVE-2025-62223

CVE-2025-62223 pertains to Microsoft Edge (Chromium-based) on macOS, where the UI can misrepresent critical information to spoof users. The vulnerability is exploitable over a network and requires user interaction. Per the CVE data, the impact vector indicates no confidentiality or availability i...

CVE-2026-45495

Microsoft Edge (Chromium-based) vulnerability CVE-2026-45495 affects Edge versions prior to 148.0.3967.70. PT-2026-41712 documents an improper input validation flaw in the browser’s rendering pipeline and JavaScript engine, enabling an unauthenticated user to execute arbitrary code with the brows...

CVE-2026-62904

CVE-2026-62904 is an information disclosure vulnerability in Microsoft Edge (Chromium-based) caused by incorrect authorization , allowing an unauthorized attacker to disclose information over a network. The CVSS 3.1 score is 5.4 (Medium) with a vector of AV:N/AC:L/PR:N/UI:R, meaning exploitation ...

CVE-2026-66313

CVE-2026-66313: A origin validation error in Microsoft Edge (Chromium-based) enables local tampering by an unauthorized attacker. Documents confirm the vulnerability exists but provide no specific exploit details or mitigations; no patch/version is stated in the supplied sources. Remediation stat...

CVE-2026-58596

Microsoft Edge (Chromium-based) contains CVE-2026-58596: an untrusted pointer dereference that allows an unauthenticated attacker to elevate privileges over a network. The CVSSv3.1 vector is AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H with a base score of 8.3 (HIGH). Impact affects confidentiality, integ...

CVE-2026-66311

CVE-2026-66311: Microsoft Edge (Chromium-based) Tampering Vulnerability. Local attacker can tamper due to missing authorization. Affects Edge when running Chromium-based builds; CVSSv3.1 base score 6.2 (Medium), confidentiality impact High, no impact to integrity/availability. Remediation: apply ...

CVE-2026-57988

CVE-2026-57988 describes a Relative path traversal in Microsoft Edge (Chromium-based) that enables an unauthenticated attacker to execute code over a network. Affected product: Microsoft Edge (Chromium-based). The root cause is a relative path traversal in handling network input/resources. Impact...

CVE-2026-58285

Microsoft Edge (Chromium-based) is affected by CVE-2026-58285 due to an input/resource access type confusion vulnerability, enabling a remote attacker to execute code over the network. The CVSS 3.1 metrics show Network attack, high impact on confidentiality, integrity, and availability, with user...

CVE-2026-66316

Technical details for CVE-2026-66316 are not publicly available in the provided documents. Monitor for updates from MSRC/NVD.

CVE-2026-58523

CVE-2026-58523 affects Microsoft Edge for Android. The issue is improper access control that allows an unauthenticated remote attacker to bypass a security feature over a network. The published data indicates a CVSS v3.1 base score of 6.5 (MEDIUM) with Network attack vector, low attack complexity...

CVE-2021-31937

CVE-2021-31937 affects Microsoft Edge (Chromium-based). The provided sources identify an Elevation of Privilege in Edge with a CVSSv3.1 base score of 8.2 (HIGH): attack vector appears to be network, requiring user interaction, with changed scope and mixed impacts (confidentiality HIGH, integrity ...

CVE-2026-57984

CVE-2026-57984 affects Microsoft Edge (Chromium-based). The vulnerability is described as a use-after-free in Edge that enables remote code execution over a network. The CVSS 3.1 base score is 7.5 (HIGH) with NETWORK attack vector, HIGH impact to confidentiality, integrity, and availability, and ...

CVE-2025-59251

CVE-2025-59251 concerns Microsoft Edge (Chromium-based). The provided documents confirm a Remote Code Execution vulnerability in Edge, with affected product/version generally described as Edge based on Chromium. The CVE entry associates a network-exploit path requiring user interaction, yielding ...

CVE-2026-58293

CVE-2026-58293 affects Microsoft Edge (Chromium-based). It describes external control of a file name or path that allows an unauthenticated attacker to execute code over the network. The CVSSv3.1 base score is 8.1 (High) with attack vector Network, attack complexity High, privileges required None...

CVE-2026-42838

CVE-2026-42838 affects Microsoft Edge (Chromium-based). The issue is caused by improper neutralization of special elements in output used by a downstream component ('injection'), enabling a remote attacker to elevate privileges over a network. Affected product scope includes Microsoft Edge (Chrom...

CVE-2026-55945

CVE-2026-55945 : In Microsoft Edge (Chromium-based), a race condition due to concurrent execution on a shared resource allows an authorized, local attacker to disclose information. The available documents confirm the issue and its local impact, but do not provide exploit details, affected version...

CVE-2026-58276

CVE-2026-58276 affects Microsoft Edge (Chromium-based). The vulnerability is described as a use-after-free in Edge that enables remote code execution over a network. Documented impact is high (CVSS 7.5) with network attack, high attack complexity, and user interaction required. Connected sources ...

CVE-2026-58278

CVE-2026-58278 is an SSRF vulnerability in Microsoft Edge (Chromium-based) described as allowing an unauthorized attacker to perform spoofing over a network. The provided connected documents confirm the issue and its basic impact, but do not supply version details, affected components beyond Edge...

CVE-2026-58286

CVE-2026-58286 affects Microsoft Edge (Chromium-based). The vulnerability is described as improper access control that enables an unauthorized network attacker to perform spoofing. CVSS 3.1 base score 8.1 (HIGH) with NETWORK attack vector, no user interaction required. Impact includes compromised...

CVE-2026-56646

CVE-2026-56646 affects Microsoft Edge (Chromium-based). The vulnerability exposes sensitive information to an unauthorized actor, enabling network-based spoofing. CVSSv3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N; base score 6.5 (Medium). Connected sources show the impact as spoofing via network; no ...

CVE-2026-58292

CVE-2026-58292 is an endpoint in Microsoft Edge (Chromium-based) with improper input validation that allows an unauthorized attacker to execute code over a network. The CVSS-derived data indicates a network attack vector, high impact on confidentiality/availability and high integrity impact, with...

CVE-2026-33118

CVE-2026-33118 is a vulnerability in Microsoft Edge (Chromium-based) classified as a spoofing issue. The CVSS v3.1 base score is 4.3 (MEDIUM) with attack vector: NETWORK , attack complexity: LOW , and user interaction: REQUIRED . The impact is limited to confidentiality: LOW ; integrity: NONE ; a...

CVE-2026-57981

Microsoft Edge (Chromium-based) is affected by CVE-2026-57981 due to a use-after-free vulnerability in the browser, enabling a remote attacker to execute code over a network. The sources indicate an in-browser memory management error as the root cause, with impact described as remote code executi...

CVE-2026-58297

CVE-2026-58297 affects Microsoft Edge for Android. The issue is an information disclosure that allows an unauthorized attacker to exfiltrate private personal information over a network. According to the sources, the CVSS v3.1 base score is 7.1 (HIGH) with network attack vector, no privileges requ...

CVE-2026-21223

CVE-2026-21223 affects Microsoft Edge (Chromium-based) via the Edge Elevation Service. The vulnerability is a design flaw in a privileged COM interface (IElevatorEdge) that does not properly validate the caller’s privileges, enabling a standard local user to invoke LaunchUpdateCmdElevatedAndWait ...

CVE-2026-56645

CVE-2026-56645 is a heap-based buffer overflow in Microsoft Edge (Chromium-based) that allows a remote attacker to execute code over a network. CVSS 3.1: 8.8 (HIGH), AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. Exploitation details are not provided in the connected documents; no explicit exploit status o...

CVE-2026-58295

CVE-2026-58295 affects Microsoft Edge (Chromium-based). A resource access type confusion allows a network-based attacker to bypass a security feature without user interaction (CVSS v3.1: 8.3). No exploitation details are provided beyond MSRC reference; remediation is to apply the appropriate Edge...