Microsoft Edge Chromium — known CVE vulnerabilities

Every CVE whose affected-product data names Microsoft Edge Chromium, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (200)

• CVE-2022-33649 — CVSS 9.6 (critical): Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
• CVE-2021-21121 — CVSS 9.6 (critical): Use after free in Omnibox in Google Chrome on Linux prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape…
• CVE-2023-36735 — CVSS 9.6 (critical): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
• CVE-2024-21326 — CVSS 9.6 (critical): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
• CVE-2021-21132 — CVSS 9.6 (critical): Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox…
• CVE-2023-35618 — CVSS 9.6 (critical): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
• CVE-2022-4135 — CVSS 9.6 (critical) — actively exploited: Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to…
• CVE-2021-21124 — CVSS 9.6 (critical): Potential user after free in Speech Recognizer in Google Chrome on Android prior to 88.0.4324.96 allowed a remote attacker to potentially…
• CVE-2023-6345 — CVSS 9.6 (critical) — actively exploited: Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to…
• CVE-2026-58289 — CVSS 9.0 (critical): Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute…
• CVE-2021-30606 — CVSS 8.8 (high): Chromium: CVE-2021-30606 Use after free in Blink
• CVE-2021-21120 — CVSS 8.8 (high): Use after free in WebSQL in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2021-21122 — CVSS 8.8 (high): Use after free in Blink in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2021-21127 — CVSS 8.8 (high): Insufficient policy enforcement in extensions in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass content security…
• CVE-2021-21128 — CVSS 8.8 (high): Heap buffer overflow in Blink in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2021-21157 — CVSS 8.8 (high): Use after free in Web Sockets in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially exploit heap…
• CVE-2021-30607 — CVSS 8.8 (high): Chromium: CVE-2021-30607 Use after free in Permissions
• CVE-2021-30608 — CVSS 8.8 (high): Chromium: CVE-2021-30608 Use after free in Web Share
• CVE-2021-30609 — CVSS 8.8 (high): Chromium: CVE-2021-30609 Use after free in Sign-In
• CVE-2021-30610 — CVSS 8.8 (high): Chromium: CVE-2021-30610 Use after free in Extensions API
• CVE-2021-30611 — CVSS 8.8 (high): Chromium: CVE-2021-30611 Use after free in WebRTC
• CVE-2021-30612 — CVSS 8.8 (high): Chromium: CVE-2021-30612 Use after free in WebRTC
• CVE-2021-30613 — CVSS 8.8 (high): Chromium: CVE-2021-30613 Use after free in Base internals
• CVE-2021-30614 — CVSS 8.8 (high): Chromium: CVE-2021-30614 Heap buffer overflow in TabStrip
• CVE-2026-57981 — CVSS 8.8 (high): Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
• CVE-2021-30616 — CVSS 8.8 (high): Chromium: CVE-2021-30616 Use after free in Media
• CVE-2026-57974 — CVSS 8.8 (high): Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
• CVE-2021-30618 — CVSS 8.8 (high): Chromium: CVE-2021-30618 Inappropriate implementation in DevTools
• CVE-2026-56645 — CVSS 8.8 (high): Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
• CVE-2021-30620 — CVSS 8.8 (high): Chromium: CVE-2021-30620 Insufficient policy enforcement in Blink
• CVE-2021-30622 — CVSS 8.8 (high): Chromium: CVE-2021-30622 Use after free in WebApp Installs
• CVE-2021-30623 — CVSS 8.8 (high): Chromium: CVE-2021-30623 Use after free in Bookmarks
• CVE-2021-30624 — CVSS 8.8 (high): Chromium: CVE-2021-30624 Use after free in Autofill
• CVE-2021-31982 — CVSS 8.8 (high): Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
• CVE-2026-45495 — CVSS 8.8 (high): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
• CVE-2026-32208 — CVSS 8.8 (high): Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Entra ID allows an authorized attacker to…
• CVE-2025-5419 — CVSS 8.8 (high) — actively exploited: Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption…
• CVE-2025-49713 — CVSS 8.8 (high): Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute…
• CVE-2020-16009 — CVSS 8.8 (high) — actively exploited: Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption…
• CVE-2025-25000 — CVSS 8.8 (high): Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute…
• CVE-2025-21408 — CVSS 8.8 (high): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
• CVE-2025-21342 — CVSS 8.8 (high): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
• CVE-2025-14174 — CVSS 8.8 (high) — actively exploited: Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds…
• CVE-2024-7965 — CVSS 8.8 (high) — actively exploited: Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption…
• CVE-2021-21118 — CVSS 8.8 (high): Insufficient data validation in V8 in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform out of bounds…
• CVE-2021-21119 — CVSS 8.8 (high): Use after free in Media in Google Chrome prior to 88.0.4324.96 allowed a remote attacker who had compromised the renderer process to…
• CVE-2023-6702 — CVSS 8.8 (high): Type confusion in V8 in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2023-5217 — CVSS 8.8 (high) — actively exploited: Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to…
• CVE-2023-4863 — CVSS 8.8 (high) — actively exploited: Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of…
• CVE-2023-4762 — CVSS 8.8 (high) — actively exploited: Type Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page…
• CVE-2023-36787 — CVSS 8.8 (high): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
• CVE-2026-57983 — CVSS 8.7 (high): Improper authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.
• CVE-2024-38218 — CVSS 8.4 (high): Microsoft Edge (HTML-based) Memory Corruption Vulnerability
• CVE-2023-21796 — CVSS 8.3 (high): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
• CVE-2022-44708 — CVSS 8.3 (high): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
• CVE-2023-23374 — CVSS 8.3 (high): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
• CVE-2022-30192 — CVSS 8.3 (high): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
• CVE-2026-58295 — CVSS 8.3 (high): Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass…
• CVE-2022-26894 — CVSS 8.3 (high): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
• CVE-2022-26895 — CVSS 8.3 (high): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
• CVE-2024-21399 — CVSS 8.3 (high): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
• CVE-2022-26900 — CVSS 8.3 (high): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
• CVE-2024-21385 — CVSS 8.3 (high): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
• CVE-2022-26908 — CVSS 8.3 (high): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
• CVE-2022-26909 — CVSS 8.3 (high): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
• CVE-2022-26912 — CVSS 8.3 (high): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
• CVE-2023-21775 — CVSS 8.3 (high): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
• CVE-2022-29146 — CVSS 8.3 (high): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
• CVE-2026-58288 — CVSS 8.3 (high): Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
• CVE-2022-30127 — CVSS 8.3 (high): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
• CVE-2022-30128 — CVSS 8.3 (high): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
• CVE-2026-50521 — CVSS 8.3 (high): Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.
• CVE-2022-33636 — CVSS 8.3 (high): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
• CVE-2022-33638 — CVSS 8.3 (high): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
• CVE-2022-33639 — CVSS 8.3 (high): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
• CVE-2022-33680 — CVSS 8.3 (high): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
• CVE-2023-21795 — CVSS 8.3 (high): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
• CVE-2022-22021 — CVSS 8.3 (high): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
• CVE-2022-24475 — CVSS 8.3 (high): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
• CVE-2026-58287 — CVSS 8.3 (high): Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
• CVE-2026-58285 — CVSS 8.3 (high): Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute…
• CVE-2026-58284 — CVSS 8.3 (high): Improper authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
• CVE-2022-26891 — CVSS 8.3 (high): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
• CVE-2023-36741 — CVSS 8.3 (high): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
• CVE-2023-24892 — CVSS 8.2 (high): Microsoft Edge (Chromium-based) Webview2 Spoofing Vulnerability
• CVE-2021-33741 — CVSS 8.2 (high): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
• CVE-2021-31937 — CVSS 8.2 (high): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
• CVE-2024-26192 — CVSS 8.2 (high): Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
• CVE-2026-58282 — CVSS 8.1 (high): Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
• CVE-2021-21125 — CVSS 8.1 (high): Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 88.0.4324.96 allowed a remote attacker to bypass…
• CVE-2026-58286 — CVSS 8.1 (high): Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
• CVE-2026-58283 — CVSS 8.1 (high): Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform…
• CVE-2026-58293 — CVSS 8.1 (high): External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
• CVE-2023-36887 — CVSS 7.8 (high): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
• CVE-2024-38210 — CVSS 7.8 (high): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
• CVE-2024-38209 — CVSS 7.8 (high): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
• CVE-2022-38012 — CVSS 7.7 (high): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
• CVE-2022-23263 — CVSS 7.7 (high): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
• CVE-2025-59251 — CVSS 7.6 (high): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
• CVE-2025-29815 — CVSS 7.6 (high): Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.
• CVE-2024-43578 — CVSS 7.6 (high): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
• CVE-2026-57985 — CVSS 7.6 (high): Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
• CVE-2024-43579 — CVSS 7.6 (high): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
• CVE-2025-29834 — CVSS 7.5 (high): Out-of-bounds read in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
• CVE-2022-29144 — CVSS 7.5 (high): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
• CVE-2022-35796 — CVSS 7.5 (high): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
• CVE-2023-29350 — CVSS 7.5 (high): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
• CVE-2023-33143 — CVSS 7.5 (high): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
• CVE-2024-43566 — CVSS 7.5 (high): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
• CVE-2026-57975 — CVSS 7.5 (high): Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute…
• CVE-2026-57984 — CVSS 7.5 (high): Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
• CVE-2026-57986 — CVSS 7.5 (high): Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
• CVE-2026-57992 — CVSS 7.5 (high): Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
• CVE-2026-58276 — CVSS 7.5 (high): Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
• CVE-2026-58290 — CVSS 7.5 (high): Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute…
• CVE-2026-58292 — CVSS 7.5 (high): Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
• CVE-2026-58294 — CVSS 7.5 (high): Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
• CVE-2026-58299 — CVSS 7.5 (high): Time-of-check time-of-use (toctou) race condition in Microsoft Edge for Android allows an unauthorized attacker to execute code over a…
• CVE-2026-57993 — CVSS 7.4 (high): Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
• CVE-2025-49741 — CVSS 7.4 (high): No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
• CVE-2026-57991 — CVSS 7.4 (high): Improper link resolution before file access ('link following') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to…
• CVE-2026-41107 — CVSS 7.4 (high): External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a…
• CVE-2023-36014 — CVSS 7.3 (high): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
• CVE-2023-36034 — CVSS 7.3 (high): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
• CVE-2026-58298 — CVSS 7.2 (high): Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an…
• CVE-2026-57977 — CVSS 7.1 (high): Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an…
• CVE-2026-58296 — CVSS 7.1 (high): Exposure of private personal information to an unauthorized actor in Microsoft Edge for Android allows an unauthorized attacker to disclose…
• CVE-2026-21223 — CVSS 7.1 (high): Improper privilege management in Microsoft Edge (Chromium-based) allows an authorized attacker to bypass a security feature locally.
• CVE-2023-36027 — CVSS 7.1 (high): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
• CVE-2026-58297 — CVSS 7.1 (high): Exposure of private personal information to an unauthorized actor in Microsoft Edge for Android allows an unauthorized attacker to disclose…
• CVE-2023-36024 — CVSS 7.1 (high): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
• CVE-2023-36562 — CVSS 7.1 (high): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
• CVE-2026-57988 — CVSS 7.1 (high): Relative path traversal in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
• CVE-2024-30056 — CVSS 7.1 (high): Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
• CVE-2026-58522 — CVSS 6.8 (medium): Relative path traversal in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally.
• CVE-2022-41115 — CVSS 6.6 (medium): Microsoft Edge (Chromium-based) Update Elevation of Privilege Vulnerability
• CVE-2023-36022 — CVSS 6.6 (medium): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
• CVE-2023-36008 — CVSS 6.6 (medium): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
• CVE-2026-57987 — CVSS 6.5 (medium): Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
• CVE-2021-30619 — CVSS 6.5 (medium): Chromium: CVE-2021-30619 UI Spoofing in Autofill
• CVE-2021-21139 — CVSS 6.5 (medium): Inappropriate implementation in iframe sandbox in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass navigation…
• CVE-2025-29825 — CVSS 6.5 (medium): User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform…
• CVE-2023-38187 — CVSS 6.5 (medium): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
• CVE-2025-29806 — CVSS 6.5 (medium): No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
• CVE-2026-56646 — CVSS 6.5 (medium): Exposure of sensitive information to an unauthorized actor in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform…
• CVE-2026-58523 — CVSS 6.5 (medium): Improper access control in Microsoft Edge for Android allows an unauthorized attacker to bypass a security feature over a network.
• CVE-2021-30617 — CVSS 6.5 (medium): Chromium: CVE-2021-30617 Policy bypass in Blink
• CVE-2021-21126 — CVSS 6.5 (medium): Insufficient policy enforcement in extensions in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass site isolation via…
• CVE-2021-21129 — CVSS 6.5 (medium): Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem…
• CVE-2021-21130 — CVSS 6.5 (medium): Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem…
• CVE-2021-21131 — CVSS 6.5 (medium): Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem…
• CVE-2023-36409 — CVSS 6.5 (medium): Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
• CVE-2024-21388 — CVSS 6.5 (medium): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
• CVE-2023-21719 — CVSS 6.5 (medium): Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
• CVE-2021-21133 — CVSS 6.5 (medium): Insufficient policy enforcement in Downloads in Google Chrome prior to 88.0.4324.96 allowed an attacker who convinced a user to download…
• CVE-2021-21134 — CVSS 6.5 (medium): Incorrect security UI in Page Info in Google Chrome on iOS prior to 88.0.4324.96 allowed a remote attacker to spoof security UI via a…
• CVE-2021-21135 — CVSS 6.5 (medium): Inappropriate implementation in Performance API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to leak cross-origin data…
• CVE-2021-21136 — CVSS 6.5 (medium): Insufficient policy enforcement in WebView in Google Chrome on Android prior to 88.0.4324.96 allowed a remote attacker to leak cross-origin…
• CVE-2021-21137 — CVSS 6.5 (medium): Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to obtain potentially sensitive…
• CVE-2023-33145 — CVSS 6.5 (medium): Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
• CVE-2024-29987 — CVSS 6.5 (medium): Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
• CVE-2023-38157 — CVSS 6.5 (medium): Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
• CVE-2021-30615 — CVSS 6.5 (medium): Chromium: CVE-2021-30615 Cross-origin data leak in Navigation
• CVE-2026-42891 — CVSS 6.5 (medium): User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform…
• CVE-2025-21283 — CVSS 6.5 (medium): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
• CVE-2025-21279 — CVSS 6.5 (medium): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
• CVE-2021-30621 — CVSS 6.5 (medium): Chromium: CVE-2021-30621 UI Spoofing in Autofill
• CVE-2026-45489 — CVSS 6.5 (medium): Microsoft Edge (Chromium-based) Spoofing Vulnerability
• CVE-2025-21185 — CVSS 6.5 (medium): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
• CVE-2026-0391 — CVSS 6.5 (medium): User interface (ui) misrepresentation of critical information in Microsoft Edge for Android allows an unauthorized attacker to perform…
• CVE-2024-38219 — CVSS 6.5 (medium): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
• CVE-2024-43595 — CVSS 6.5 (medium): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
• CVE-2024-43596 — CVSS 6.5 (medium): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
• CVE-2024-43489 — CVSS 6.5 (medium): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
• CVE-2024-43496 — CVSS 6.5 (medium): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
• CVE-2021-21123 — CVSS 6.5 (medium): Insufficient data validation in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem…
• CVE-2021-38669 — CVSS 6.4 (medium): Microsoft Edge (Chromium-based) Tampering Vulnerability
• CVE-2022-23262 — CVSS 6.3 (medium): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
• CVE-2023-36888 — CVSS 6.3 (medium): Microsoft Edge for Android (Chromium-based) Tampering Vulnerability
• CVE-2024-20675 — CVSS 6.3 (medium): Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
• CVE-2022-26899 — CVSS 6.3 (medium): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
• CVE-2024-38207 — CVSS 6.3 (medium): Microsoft Edge (HTML-based) Memory Corruption Vulnerability
• CVE-2025-47963 — CVSS 6.3 (medium): No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
• CVE-2021-36929 — CVSS 6.3 (medium): Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
• CVE-2025-60711 — CVSS 6.3 (medium): Protection mechanism failure in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
• CVE-2026-58300 — CVSS 6.2 (medium): Absolute path traversal in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally.
• CVE-2023-29345 — CVSS 6.1 (medium): Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
• CVE-2021-34506 — CVSS 6.1 (medium): Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
• CVE-2022-21954 — CVSS 6.1 (medium): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
• CVE-2023-24935 — CVSS 6.1 (medium): Microsoft Edge (Chromium-based) Spoofing Vulnerability
• CVE-2023-28286 — CVSS 6.1 (medium): Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
• CVE-2023-36727 — CVSS 6.1 (medium): Microsoft Edge (Chromium-based) Spoofing Vulnerability
• CVE-2022-21970 — CVSS 6.1 (medium): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
• CVE-2026-58291 — CVSS 6.1 (medium): Operation on a resource after expiration or release in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose…
• CVE-2021-36928 — CVSS 6.0 (medium): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
• CVE-2024-49023 — CVSS 5.9 (medium): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
• CVE-2024-43587 — CVSS 5.9 (medium): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
• CVE-2024-43472 — CVSS 5.8 (medium): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
• CVE-2023-28261 — CVSS 5.7 (medium): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
• CVE-2025-47182 — CVSS 5.6 (medium): Improper input validation in Microsoft Edge (Chromium-based) allows an authorized attacker to bypass a security feature locally.