Vulnerabilities (CVE)

Filtered by vendor Microsoft Subscribe
Filtered by product Edge Chromium
Total 226 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2026-45495 1 Microsoft 1 Edge Chromium 2026-05-26 N/A 8.8 HIGH
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2026-45494 1 Microsoft 1 Edge Chromium 2026-05-19 N/A 5.4 MEDIUM
Microsoft Edge (Chromium-based) Spoofing Vulnerability
CVE-2026-45492 1 Microsoft 1 Edge Chromium 2026-05-19 N/A 5.4 MEDIUM
Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-40416 1 Microsoft 1 Edge Chromium 2026-05-18 N/A 4.3 MEDIUM
User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-41107 1 Microsoft 1 Edge Chromium 2026-05-15 N/A 7.4 HIGH
External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
CVE-2026-42891 1 Microsoft 1 Edge Chromium 2026-05-14 N/A 6.5 MEDIUM
User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-42838 1 Microsoft 1 Edge Chromium 2026-05-14 N/A 5.4 MEDIUM
Improper neutralization of special elements in output used by a downstream component ('injection') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-33118 1 Microsoft 1 Edge Chromium 2026-04-16 N/A 4.3 MEDIUM
Microsoft Edge (Chromium-based) Spoofing Vulnerability
CVE-2026-0385 1 Microsoft 1 Edge Chromium 2026-04-07 N/A 5.0 MEDIUM
Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability
CVE-2026-21223 1 Microsoft 1 Edge Chromium 2026-02-22 N/A 7.1 HIGH
Improper privilege management in Microsoft Edge (Chromium-based) allows an authorized attacker to bypass a security feature locally.
CVE-2025-65046 1 Microsoft 1 Edge Chromium 2026-02-20 N/A 3.1 LOW
Microsoft Edge (Chromium-based) Spoofing Vulnerability
CVE-2026-0102 1 Microsoft 1 Edge Chromium 2026-02-19 N/A 3.1 LOW
Under specific conditions, a malicious webpage may trigger autofill population after two consecutive taps, potentially without clear or intentional user consent. This could result in disclosure of stored autofill data such as addresses, email, or phone number metadata.
CVE-2026-0391 1 Microsoft 1 Edge Chromium 2026-02-18 N/A 6.5 MEDIUM
User interface (ui) misrepresentation of critical information in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network.
CVE-2025-47964 1 Microsoft 1 Edge Chromium 2026-02-13 N/A 5.4 MEDIUM
Microsoft Edge (Chromium-based) Spoofing Vulnerability
CVE-2025-47963 1 Microsoft 1 Edge Chromium 2026-02-13 N/A 6.3 MEDIUM
No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
CVE-2025-14174 4 Apple, Google, Linux and 1 more 11 Ipados, Iphone Os, Macos and 8 more 2025-12-15 N/A 8.8 HIGH
Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)
CVE-2025-62223 1 Microsoft 1 Edge Chromium 2025-12-10 N/A 4.3 MEDIUM
User interface (ui) misrepresentation of critical information in Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network.
CVE-2025-59251 1 Microsoft 1 Edge Chromium 2025-11-20 N/A 7.6 HIGH
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2025-60711 1 Microsoft 1 Edge Chromium 2025-11-05 N/A 6.3 MEDIUM
Protection mechanism failure in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
CVE-2023-6702 3 Fedoraproject, Google, Microsoft 3 Fedora, Chrome, Edge Chromium 2025-11-04 N/A 8.8 HIGH
Type confusion in V8 in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)