Microsoft Edge vulnerabilities

Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.

Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

Improper neutralization of parameter/argument delimiters in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

Incorrect authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

A type confusion vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

Missing authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

Server-side request forgery (SSRF) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

Microsoft Edge (Chromium-based) has an origin validation error that allows an unauthorized attacker to perform spoofing over a network.

In Microsoft Edge (Chromium-based), a type confusion vulnerability allows an unauthorized attacker to execute code over a network.

An origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering over a network.

Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

A use-after-free vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

A time-of-check time-of-use (TOCTOU) race condition in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering locally.

A buffer over-read in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.

Missing authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering locally.

An improper control of generation of code (code injection) vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

In Microsoft Edge for Android, an external control of file name or path vulnerability allows an unauthorized attacker to disclose information over a network.

Improper input validation in Microsoft Edge for Android allows an unauthorized attacker to perform tampering over a network.

Vulnerability allowing external parties to access files and directories in Microsoft Edge (Chromium-based). An unauthorized attacker can disclose information over a network.

Origin validation error in Microsoft Edge (Chromium-based). An unauthorized attacker can disclose information over a network.

Origin validation error in Microsoft Edge (Chromium-based). An unauthorized attacker can perform spoofing over a network.

A vulnerability in Microsoft Edge (Chromium-based) allows authentication bypass via an alternate path or channel. An unauthorized attacker can perform tampering over a network.

A vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network via untrusted pointer dereference.

A deserialization of untrusted data vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

An improper access control vulnerability has been found in Microsoft Edge (Chromium-based). An unauthorized attacker can remotely bypass a security feature.

An improper access control vulnerability in Microsoft Edge for Android allows an unauthorized attacker to bypass a security feature over a network.

A Cross-Site Scripting (XSS) vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. The flaw is due to improper neutralization of input during web page generation.

A Relative Path Traversal vulnerability in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally.

An absolute path traversal vulnerability in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally.

A Time-of-check time-of-use (TOCTOU) race condition in Microsoft Edge for Android allows an unauthorized attacker to execute code over a network by exploiting a race between resource check and use.

An XSS vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network due to improper input neutralization during web page generation.

A vulnerability in Microsoft Edge for Android allows an unauthorized attacker to disclose private personal information over a network. The issue stems from improper access restrictions to sensitive data.

A vulnerability in Microsoft Edge for Android allows an unauthorized attacker to disclose private personal information over a network. The issue stems from improper access restrictions to sensitive data.

A type confusion vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.

A vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code remotely by controlling file names or paths. The issue stems from external control over file paths, potentially leading to privilege escalation.

An improper input validation vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. This can lead to remote code execution on the victim's system.

A vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network. The issue stems from an operation on a resource after expiration or release.

A type confusion vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code remotely over a network.

A Use-After-Free vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code remotely over a network.

A Use-After-Free vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code remotely over a network.

An improper access control vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform network spoofing.

A type confusion vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code remotely over a network. The flaw arises from accessing a resource using an incompatible data type.

An improper authorization vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code remotely over a network.

A type confusion vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

A vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform a spoofing attack over a network. The issue is caused by improper access control.

A Server-Side Request Forgery (SSRF) vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.