CVE-2021-43221

CVE-2021-43221 is a Remote Code Execution vulnerability affecting Microsoft Edge (Chromium-based). The connected sources identify it as one of multiple Edge/Chromium vulnerabilities (notably in Edge versions prior to 96.0.1054.29) that can be exploited remotely via network activity. The Nessus en...

CVE-2026-70339

CVE-2026-70339 is a remote code execution vulnerability in Microsoft Edge (Chromium-based) caused by a type confusion in resource access. The NVD/NVD-derived descriptions state that an unauthorized attacker could execute code over a network. The provided metrics show a CVSS v3.1 base score of 5.4...

CVE-2026-66326

Technical details (affected products/versions, root cause, and remediation) are not publicly provided in the supplied documents. Monitor for updates.

CVE-2026-57989

CVE-2026-57989 affects Microsoft Edge (Chromium-based). The provided documents describe an origin validation error that allows an unauthorized attacker to disclose information over a network. The NVD entry and MSRC page confirm the same description; no specific exploit vectors, affected product v...

CVE-2021-42308

Technical details for CVE-2021-42308 are not publicly available in the provided connected documents. Monitor for updates from listed sources; current materials mention Edge spoofing vulnerability but do not specify affected versions, impact, or remediation within these documents.

CVE-2026-0102

CVE-2026-0102 affects Microsoft Edge (Chromium-based) with a vulnerability where, under specific conditions, a malicious webpage can trigger autofill population after two consecutive taps, potentially disclosing stored autofill data (addresses, email, phone number metadata). Connected documents i...

CVE-2026-66325

Technical details are not publicly available in the provided documents for CVE-2026-66325 beyond the basic briefing that it is an SSRF/spoofing issue in Microsoft Edge (Chromium-based). Monitor for updates and authoritative advisories to assess impact and remediation.

CVE-2025-49713

CVE-2025-49713 is a Microsoft Edge (Chromium-based) remote code execution vulnerability through a type confusion in Edge. Affected product: Edge (Chromium-based) browser. Cause: resource access using incompatible type leading to code execution over a network. Impact per CVSS: high severity, user ...

CVE-2026-57991

Microsoft Edge (Chromium-based) is affected by CVE-2026-57991 due to Improper link resolution before file access ("link following"). The issue could allow an unauthenticated attacker to disclose information over a network. The vulnerability affects the Edge Chromium rendering/file handling path a...

CVE-2026-57992

CVE-2026-57992 affects Microsoft Edge (Chromium-based). It is described as a use-after-free vulnerability that allows a remote attacker to execute code over a network. The CVSS v3.1 base score is 7.5 (HIGH) with Network attack, no privileges required, user interaction required, and full impact on...

CVE-2025-49741

CVE-2025-49741 concerns an information-disclosure vulnerability in Microsoft Edge (Chromium-based). The available data identify the affected software as Edge/Chromium and confirm a network-exposed information disclosure vulnerability; root-cause details are not provided beyond the vulnerability c...

CVE-2026-45495

Microsoft Edge (Chromium-based) vulnerability CVE-2026-45495 affects Edge versions prior to 148.0.3967.70. PT-2026-41712 documents an improper input validation flaw in the browser’s rendering pipeline and JavaScript engine, enabling an unauthenticated user to execute arbitrary code with the brows...

CVE-2025-60711

CVE-2025-60711 affects Microsoft Edge (Chromium-based). The vulnerability is described as a protection mechanism failure enabling remote code execution over a network. CVSS 3.1 base score is 6.3 (Network, Low attack complexity, No privileges required, User interaction required; Confidentiality, I...

CVE-2026-66315

Technical details about CVE-2026-66315 are not publicly available in the provided documents. Monitor for updates from the vendors and security advisories to obtain affected products, vulnerable components, impact specifics, and remediations.

CVE-2026-45488

CVE-2026-45488 concerns a UI misrepresentation in Microsoft Edge (Chromium-based) that enables a network-based spoofing attempt by an unauthorized attacker. The public description indicates the issue is focused on how critical information is presented in the browser UI, with impact described as s...

CVE-2026-57974

CVE-2026-57974 affects Microsoft Edge (Chromium-based). The issue is an integer overflow/wraparound in Edge that enables an unauthenticated attacker to execute code over a network. The NVD/CVE entries confirm the vulnerability and related CVSS v3.1 metrics (High severity, network attack vector, u...

CVE-2026-58288

CVE-2026-58288 affects Microsoft Edge (Chromium-based). It is described as a use-after-free vulnerability that could allow a remote attacker to execute code over a network. The CVSS 3.1 vector indicates Network attack, high impact on confidentiality, integrity, and availability, with user interac...

CVE-2021-31937

CVE-2021-31937 affects Microsoft Edge (Chromium-based). The provided sources identify an Elevation of Privilege in Edge with a CVSSv3.1 base score of 8.2 (HIGH): attack vector appears to be network, requiring user interaction, with changed scope and mixed impacts (confidentiality HIGH, integrity ...

CVE-2026-58290

Microsoft Edge (Chromium-based) is affected by CVE-2026-58290 due to a type confusion in resource access, enabling remote code execution over the network. The CVSS indicates network access with user interaction required and limited impact to confidentiality and availability, with higher impact to...

CVE-2026-58523

CVE-2026-58523 affects Microsoft Edge for Android. The issue is improper access control that allows an unauthenticated remote attacker to bypass a security feature over a network. The published data indicates a CVSS v3.1 base score of 6.5 (MEDIUM) with Network attack vector, low attack complexity...

CVE-2026-58596

Microsoft Edge (Chromium-based) contains CVE-2026-58596: an untrusted pointer dereference that allows an unauthenticated attacker to elevate privileges over a network. The CVSSv3.1 vector is AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H with a base score of 8.3 (HIGH). Impact affects confidentiality, integ...

CVE-2026-66311

CVE-2026-66311: Microsoft Edge (Chromium-based) Tampering Vulnerability. Local attacker can tamper due to missing authorization. Affects Edge when running Chromium-based builds; CVSSv3.1 base score 6.2 (Medium), confidentiality impact High, no impact to integrity/availability. Remediation: apply ...

CVE-2026-66313

CVE-2026-66313: A origin validation error in Microsoft Edge (Chromium-based) enables local tampering by an unauthorized attacker. Documents confirm the vulnerability exists but provide no specific exploit details or mitigations; no patch/version is stated in the supplied sources. Remediation stat...

CVE-2026-66316

Technical details for CVE-2026-66316 are not publicly available in the provided documents. Monitor for updates from MSRC/NVD.

CVE-2025-62223

CVE-2025-62223 pertains to Microsoft Edge (Chromium-based) on macOS, where the UI can misrepresent critical information to spoof users. The vulnerability is exploitable over a network and requires user interaction. Per the CVE data, the impact vector indicates no confidentiality or availability i...

CVE-2026-58285

Microsoft Edge (Chromium-based) is affected by CVE-2026-58285 due to an input/resource access type confusion vulnerability, enabling a remote attacker to execute code over the network. The CVSS 3.1 metrics show Network attack, high impact on confidentiality, integrity, and availability, with user...

CVE-2026-66317

Technical details (affected product/components, root cause, impact, or remediation) are not publicly available in the provided documents. Monitor for updates from MSRC/NVD/ENISA EUVD for new information.

CVE-2025-59251

CVE-2025-59251 concerns Microsoft Edge (Chromium-based). The provided documents confirm a Remote Code Execution vulnerability in Edge, with affected product/version generally described as Edge based on Chromium. The CVE entry associates a network-exploit path requiring user interaction, yielding ...

CVE-2026-57988

CVE-2026-57988 describes a Relative path traversal in Microsoft Edge (Chromium-based) that enables an unauthenticated attacker to execute code over a network. Affected product: Microsoft Edge (Chromium-based). The root cause is a relative path traversal in handling network input/resources. Impact...

CVE-2026-58278

CVE-2026-58278 is an SSRF vulnerability in Microsoft Edge (Chromium-based) described as allowing an unauthorized attacker to perform spoofing over a network. The provided connected documents confirm the issue and its basic impact, but do not supply version details, affected components beyond Edge...

CVE-2026-57984

CVE-2026-57984 affects Microsoft Edge (Chromium-based). The vulnerability is described as a use-after-free in Edge that enables remote code execution over a network. The CVSS 3.1 base score is 7.5 (HIGH) with NETWORK attack vector, HIGH impact to confidentiality, integrity, and availability, and ...

CVE-2026-58293

CVE-2026-58293 affects Microsoft Edge (Chromium-based). It describes external control of a file name or path that allows an unauthenticated attacker to execute code over the network. The CVSSv3.1 base score is 8.1 (High) with attack vector Network, attack complexity High, privileges required None...

CVE-2026-55945

CVE-2026-55945 : In Microsoft Edge (Chromium-based), a race condition due to concurrent execution on a shared resource allows an authorized, local attacker to disclose information. The available documents confirm the issue and its local impact, but do not provide exploit details, affected version...

CVE-2026-41107

CVE-2026-41107 describes an information disclosure in Microsoft Edge (Chromium-based) caused by external control of a file name or path. The vulnerability affects Microsoft Edge for Android and the Chromium-based Edge on other platforms. The underlying issue enables an unauthorized attacker to di...

CVE-2026-57981

Microsoft Edge (Chromium-based) is affected by CVE-2026-57981 due to a use-after-free vulnerability in the browser, enabling a remote attacker to execute code over a network. The sources indicate an in-browser memory management error as the root cause, with impact described as remote code executi...

CVE-2026-58295

CVE-2026-58295 affects Microsoft Edge (Chromium-based). A resource access type confusion allows a network-based attacker to bypass a security feature without user interaction (CVSS v3.1: 8.3). No exploitation details are provided beyond MSRC reference; remediation is to apply the appropriate Edge...

CVE-2026-56645

CVE-2026-56645 is a heap-based buffer overflow in Microsoft Edge (Chromium-based) that allows a remote attacker to execute code over a network. CVSS 3.1: 8.8 (HIGH), AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. Exploitation details are not provided in the connected documents; no explicit exploit status o...

CVE-2026-58276

CVE-2026-58276 affects Microsoft Edge (Chromium-based). The vulnerability is described as a use-after-free in Edge that enables remote code execution over a network. Documented impact is high (CVSS 7.5) with network attack, high attack complexity, and user interaction required. Connected sources ...

CVE-2026-58286

CVE-2026-58286 affects Microsoft Edge (Chromium-based). The vulnerability is described as improper access control that enables an unauthorized network attacker to perform spoofing. CVSS 3.1 base score 8.1 (HIGH) with NETWORK attack vector, no user interaction required. Impact includes compromised...

CVE-2026-58287

CVE-2026-58287 affects Microsoft Edge (Chromium-based). The vulnerability is a use-after-free in Edge that can lead to remote code execution over a network. CVSS v3.1 metrics indicate high impact (Confidentiality/Integrity/Availability), network attack vector, high attack complexity, no privilege...

CVE-2026-58297

CVE-2026-58297 affects Microsoft Edge for Android. The issue is an information disclosure that allows an unauthorized attacker to exfiltrate private personal information over a network. According to the sources, the CVSS v3.1 base score is 7.1 (HIGH) with network attack vector, no privileges requ...

CVE-2026-58524

Microsoft Edge (Chromium-based) has a cross-site scripting (XSS) vulnerability (CVE-2026-58524) due to improper input neutralization during web page generation, enabling spoofing over a network. The CVSS v3.1 base score is 5.4 (Medium) with network attack vector and user interaction required. Aff...

CVE-2026-21223

CVE-2026-21223 affects Microsoft Edge (Chromium-based) via the Edge Elevation Service. The vulnerability is a design flaw in a privileged COM interface (IElevatorEdge) that does not properly validate the caller’s privileges, enabling a standard local user to invoke LaunchUpdateCmdElevatedAndWait ...

CVE-2026-57978

CVE-2026-57978 describes an origin validation error in Microsoft Edge (Chromium-based) that could enable an attacker to perform spoofing over a network. The entry’s metrics show a CVSS v3.1 base score of 5.4 (Medium) , with attack vector Network , required user interaction, and no availability im...

CVE-2026-57983

Technical details about CVE-2026-57983 (affected product/versions, root cause, exploit details, and fix) are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-2026-58292

CVE-2026-58292 is an endpoint in Microsoft Edge (Chromium-based) with improper input validation that allows an unauthorized attacker to execute code over a network. The CVSS-derived data indicates a network attack vector, high impact on confidentiality/availability and high integrity impact, with...

CVE-2026-58291

CVE-2026-58291 affects Microsoft Edge (Chromium-based). The description indicates an information disclosure vulnerability where an attacker can disclose data by operating on a resource after expiration or release. CVSSv3.1 metrics cite Network attack, high complexity, no privileges required, user...

CVE-2026-58300

CVE-2026-58300 describes an absolute path traversal vulnerability in Microsoft Edge for Android that could allow an unauthorized local attacker to disclose information. Core details from connected sources confirm the impact is local information disclosure; CVSS v3.1 base score 6.2 (Medium) with h...

CVE-2026-42838

CVE-2026-42838 affects Microsoft Edge (Chromium-based). The issue is caused by improper neutralization of special elements in output used by a downstream component ('injection'), enabling a remote attacker to elevate privileges over a network. Affected product scope includes Microsoft Edge (Chrom...

CVE-2026-57986

The CVE-2026-57986 entry concerns a use-after-free in Microsoft Edge (Chromium-based) that can allow an unauthorized attacker to execute code over a network . The vulnerability is described as a network-exploitable remote code execution with high impact on confidentiality, integrity, and availabi...