Microsoft Edge Chromium vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Edge Chromium: 106 record(s), with affected versions and fixes.cpe:2.3:a:microsoft:edge_chromium
CVE-2023-6345
Critical · 9.6
KEV High · 63 CWE-190 Nov 29, 2023
Google Skia Integer Overflow Vulnerability
Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)
CVE-2023-5217
High · 8.8
KEV High · 62 Public exploit CWE-787 Sep 28, 2023
Google Chromium libvpx Heap Buffer Overflow Vulnerability
Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2023-4863
High · 8.8
KEV High · 62 Public exploit CWE-787 Sep 12, 2023
Google Chromium WebP Heap-Based Buffer Overflow Vulnerability
Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)
CVE-2023-4762
High · 8.8
KEV High · 62 Public exploit CWE-843 Sep 5, 2023
Google Chromium V8 Type Confusion Vulnerability
Type Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
CVE-2022-4135
Critical · 9.6
KEV High · 60 CWE-787 Nov 24, 2022
Google Chromium GPU Heap Buffer Overflow Vulnerability
Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2020-16009
High · 8.8
KEV High · 56 CWE-787 Nov 3, 2020
Google Chromium V8 Type Confusion Vulnerability
Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.