Vulnerabilidades do Microsoft Edge Chromium

CVE-2026-70341 Alta · 8.8 CWE-416 11/09/2026

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.

CVE-2026-32208 Média · 5.4 CWE-79 19/06/2026

Microsoft Entra ID Spoofing Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Entra ID allows an authorized attacker to perform spoofing over a network.

CVE-2026-45495 Crítica · 9.8 CWE-35 18/05/2026

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

CVE-2026-45494 Média · 6.1 CWE-79 18/05/2026

Microsoft Edge (Chromium-based) Spoofing Vulnerability

CVE-2026-45492 Média · 5.4 CWE-20 18/05/2026

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-42891 Média · 6.5 CWE-451 12/05/2026

Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-42838 Média · 5.4 CWE-74 12/05/2026

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Improper neutralization of special elements in output used by a downstream component ('injection') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-41107 Alta · 7.4 CWE-610 12/05/2026

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

CVE-2026-40416 Média · 4.3 CWE-451 12/05/2026

Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-33118 Média · 4.3 CWE-451 10/04/2026

Microsoft Edge (Chromium-based) Spoofing Vulnerability

User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-0385 Média · 5.0 CWE-451 16/03/2026

Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

CVE-2026-0102 Baixa · 3.1 CWE-359 17/02/2026

Microsoft Edge (Chromium-based) Defense in Depth Vulnerability

Under specific conditions, a malicious webpage may trigger autofill population after two consecutive taps, potentially without clear or intentional user consent. This could result in disclosure of stored autofill data such as addresses, email, or phone number metadata.

CVE-2026-0391 Média · 6.5 CWE-451 05/02/2026

Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

User interface (ui) misrepresentation of critical information in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-21223 Alta · 7.1 CWE-269 16/01/2026

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

Improper privilege management in Microsoft Edge (Chromium-based) allows an authorized attacker to bypass a security feature locally.

CVE-2025-65046 Baixa · 3.1 CWE-451 18/12/2025

Microsoft Edge (Chromium-based) Spoofing Vulnerability

CVE-2025-14174 Alta · 8.8 KEV Alta · 62 Exploit público CWE-787 12/12/2025

Google Chromium Out of Bounds Memory Access Vulnerability

Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

CVE-2025-62223 Média · 4.3 CWE-451 04/12/2025

Microsoft Edge (Chromium-based) for Mac Spoofing Vulnerability

User interface (ui) misrepresentation of critical information in Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network.

CVE-2025-60711 Média · 6.3 CWE-693 31/10/2025

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Protection mechanism failure in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

CVE-2025-5419 Alta · 8.8 KEV Alta · 61 Exploit público CWE-125 02/06/2025

Google Chromium V8 Out-of-Bounds Read and Write Vulnerability

Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVE-2024-7965 Alta · 8.8 KEV Alta · 62 Exploit público CWE-787 21/08/2024

Google Chromium V8 Inappropriate Implementation Vulnerability

Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVE-2023-6345 Crítica · 9.6 KEV Alta · 63 CWE-190 29/11/2023

Google Skia Integer Overflow Vulnerability

Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)

CVE-2023-5217 Alta · 8.8 KEV Alta · 62 Exploit público CWE-787 28/09/2023

Google Chromium libvpx Heap Buffer Overflow Vulnerability

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVE-2023-4863 Alta · 8.8 KEV Alta · 62 Exploit público CWE-787 12/09/2023

Google Chromium WebP Heap-Based Buffer Overflow Vulnerability

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)

CVE-2023-4762 Alta · 8.8 KEV Alta · 62 Exploit público CWE-843 05/09/2023

Google Chromium V8 Type Confusion Vulnerability

Type Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

CVE-2022-4135 Crítica · 9.6 KEV Alta · 60 CWE-787 24/11/2022

Google Chromium GPU Heap Buffer Overflow Vulnerability

Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)