Microsoft Edge vulnerabilities
199 known CVE vulnerabilities in Microsoft Edge, translated and rated.
- CVE-2017-0229High
A remote code execution vulnerability exists in Microsoft Edge related to errors in the JavaScript engine when handling objects in memory, known as 'Scripting Engine Memory Corruption Vulnerability.'
- CVE-2017-0227High
A remote code execution vulnerability exists in Microsoft Edge related to the way affected Microsoft scripting engines render when handling objects in memory, known as 'Microsoft Edge Memory Corruption Vulnerability.'
- CVE-2017-0224High
A remote code execution vulnerability exists in Microsoft Edge due to issues in how JavaScript engines render objects in memory, referred to as 'Scripting Engine Memory Corruption Vulnerability.'
- CVE-2017-0221High
A vulnerability exists when Microsoft Edge improperly accesses objects in memory, known as 'Microsoft Edge Memory Corruption Vulnerability.'
- CVE-2017-0205High
A remote code execution vulnerability exists in Microsoft Edge due to improper access to objects in memory. This could corrupt memory in such a way that allows an attacker to execute arbitrary code in the context of the current user.
- CVE-2017-0200High
A remote code execution vulnerability exists in Microsoft Edge due to improper access to objects in memory. This could corrupt memory in a way that allows an attacker to execute arbitrary code in the context of the current user.
- CVE-2017-0093High
A remote code execution vulnerability in Microsoft Edge exists in the way that the Scripting Engine renders when handling objects in memory. An attacker could exploit this vulnerability to execute arbitrary code in the context of the current user.
- CVE-2017-0034High
A remote code execution vulnerability exists in Microsoft Edge due to improper access to objects in memory. An attacker can exploit this vulnerability to execute arbitrary code in the context of the current user.
- CVE-2017-0002High
Microsoft Edge allows remote attackers to bypass the Same Origin Policy via vectors involving the about:blank URL and data: URLs.
- CVE-2016-7297High
The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
- CVE-2016-7296High
The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
- CVE-2016-7288High
The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
- CVE-2016-7286High
The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
- CVE-2016-7181High
Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, known as 'Microsoft Edge Memory Corruption Vulnerability.'
- CVE-2016-7243High
The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
- CVE-2016-7242High
The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
- CVE-2016-7240High
The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
- CVE-2016-7208High
The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
- CVE-2016-7203High
The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
- CVE-2016-7194High
The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
- CVE-2016-7190High
The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
- CVE-2016-7189High
The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via a crafted web site.
- CVE-2016-3389High
The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
- CVE-2016-3386High
The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
- CVE-2016-3377High
The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
- CVE-2016-3350High
The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
- CVE-2016-3330High
Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
- CVE-2016-3294High
Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka 'Microsoft Edge Memory Corruption Vulnerability,' a different vulnerability than CVE-2016-3330.
- CVE-2016-3269High
The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
- CVE-2016-3246High
Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, known as 'Microsoft Edge Memory Corruption Vulnerability.'
- CVE-2016-3222High
Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka 'Microsoft Edge Memory Corruption Vulnerability.'
- CVE-2016-0193High
The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
- CVE-2016-0191High
The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
- CVE-2016-0186High
The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
- CVE-2016-0157High
Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. This is a different vulnerability than CVE-2016-0155 and CVE-2016-0156.
- CVE-2016-0156High
Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. This is a different vulnerability than CVE-2016-0155 and CVE-2016-0157.
- CVE-2016-0155High
Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. This is a different vulnerability than CVE-2016-0156 and CVE-2016-0157.
- CVE-2016-0130High
Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. This is a different vulnerability than CVE-2016-0116, CVE-2016-0123, CVE-2016-0124, and CVE-2016-0129.
- CVE-2016-0129High
Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. This is a different vulnerability than CVE-2016-0116, CVE-2016-0123, CVE-2016-0124, and CVE-2016-0130.
- CVE-2016-0124High
Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. This is a different vulnerability than CVE-2016-0116, CVE-2016-0123, CVE-2016-0129, and CVE-2016-0130.
- CVE-2016-0123High
Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. This is a different vulnerability than CVE-2016-0116, CVE-2016-0124, CVE-2016-0129, and CVE-2016-0130.
- CVE-2016-0116High
Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. This is a different vulnerability than CVE-2016-0123, CVE-2016-0124, CVE-2016-0129, and CVE-2016-0130.
- CVE-2016-0084High
Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, known as 'Microsoft Edge Memory Corruption Vulnerability.'
- CVE-2016-0024High
The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via unspecified vectors, known as 'Scripting Engine Memory Corruption Vulnerability.'
- CVE-2015-6168High
Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, known as 'Microsoft Edge Memory Corruption Vulnerability.'
- CVE-2026-48561Critical
Command injection vulnerability in Copilot Chat within Microsoft Edge. An unauthorized attacker can remotely execute code on the victim's device.
- CVE-2026-58289Critical
A type confusion vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code remotely over a network.
- CVE-2016-0003Critical
Microsoft Edge allows remote attackers to execute arbitrary code via unspecified vectors, aka 'Microsoft Edge Memory Corruption Vulnerability.'
- CVE-2026-72984High
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
- CVE-2026-70331Medium
Improper neutralization of input used for LLM prompting in Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network.