Microsoft Edge Chromium vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Edge Chromium: 106 record(s), with affected versions and fixes.cpe:2.3:a:microsoft:edge_chromium
CVE-2026-56646
Medium · 6.5
CWE-200 Jul 3, 2026
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Exposure of sensitive information to an unauthorized actor in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-56645
High · 8.8
CWE-122 Jul 3, 2026
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
CVE-2026-55945
Medium · 4.2
CWE-362 Jul 3, 2026
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Edge (Chromium-based) allows an authorized attacker to disclose information locally.
CVE-2026-45489
Medium · 6.5
CWE-749 Jul 3, 2026
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
CVE-2026-45488
Medium · 5.9
CWE-451 Jul 3, 2026
Microsoft Edge (Chromium-based) Spoofing Vulnerability
User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-50521
High · 8.3
CWE-416 Jul 1, 2026
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.
CVE-2026-32208
Medium · 5.4
CWE-79 Jun 19, 2026
Microsoft Entra ID Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Entra ID allows an authorized attacker to perform spoofing over a network.
CVE-2026-45495
Critical · 9.8
CWE-35 May 18, 2026
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2026-45494
Medium · 6.1
CWE-79 May 18, 2026
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
CVE-2026-45492
Medium · 5.4
CWE-20 May 18, 2026
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-42891
Medium · 6.5
CWE-451 May 12, 2026
Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability
User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-42838
Medium · 5.4
CWE-74 May 12, 2026
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Improper neutralization of special elements in output used by a downstream component ('injection') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-41107
High · 7.4
CWE-610 May 12, 2026
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
CVE-2026-40416
Medium · 4.3
CWE-451 May 12, 2026
Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability
User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-33118
Medium · 4.3
CWE-451 Apr 10, 2026
Microsoft Edge (Chromium-based) Spoofing Vulnerability
User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-0385
Medium · 5.0
CWE-451 Mar 16, 2026
Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability
Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability
CVE-2026-0102
Low · 3.1
CWE-359 Feb 17, 2026
Microsoft Edge (Chromium-based) Defense in Depth Vulnerability
Under specific conditions, a malicious webpage may trigger autofill population after two consecutive taps, potentially without clear or intentional user consent. This could result in disclosure of stored autofill data such as addresses, email, or phone number metadata.
CVE-2026-0391
Medium · 6.5
CWE-451 Feb 5, 2026
Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability
User interface (ui) misrepresentation of critical information in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-21223
High · 7.1
CWE-269 Jan 16, 2026
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Improper privilege management in Microsoft Edge (Chromium-based) allows an authorized attacker to bypass a security feature locally.
CVE-2025-65046
Low · 3.1
CWE-451 Dec 18, 2025
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
CVE-2025-14174
High · 8.8
KEV High · 62 Public exploit CWE-787 Dec 12, 2025
Google Chromium Out of Bounds Memory Access Vulnerability
Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)
CVE-2025-62223
Medium · 4.3
CWE-451 Dec 4, 2025
Microsoft Edge (Chromium-based) for Mac Spoofing Vulnerability
User interface (ui) misrepresentation of critical information in Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network.
CVE-2025-60711
Medium · 6.3
CWE-693 Oct 31, 2025
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Protection mechanism failure in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
CVE-2025-5419
High · 8.8
KEV High · 61 Public exploit CWE-125 Jun 2, 2025
Google Chromium V8 Out-of-Bounds Read and Write Vulnerability
Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2024-7965
High · 8.8
KEV High · 62 Public exploit CWE-787 Aug 21, 2024
Google Chromium V8 Inappropriate Implementation Vulnerability
Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)