Microsoft Edge vulnerabilities
199 known CVE vulnerabilities in Microsoft Edge, translated and rated.
- CVE-2026-58276High
A Use After Free vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code remotely over a network. The issue stems from improper memory management when processing specially crafted network requests.
- CVE-2026-57993High
A Server-Side Request Forgery (SSRF) vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform network spoofing.
- CVE-2026-57992High
A Use-After-Free vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code remotely over a network.
- CVE-2026-57991High
A vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network due to improper link resolution before file access.
- CVE-2026-57988High
A Relative Path Traversal vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. The flaw stems from improper handling of relative paths, bypassing security mechanisms.
- CVE-2026-57987Medium
A Server-Side Request Forgery (SSRF) vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
- CVE-2026-57986High
A Use-After-Free vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code remotely over a network. The issue stems from improper memory management when processing specially crafted network requests.
- CVE-2026-57985High
An improper input validation vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. This can lead to remote code execution on the victim's system.
- CVE-2026-57984High
A Use-After-Free vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. The issue stems from improper memory management when processing specially crafted network requests.
- CVE-2026-57983High
A vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network. The issue is due to improper authorization.
- CVE-2026-57981High
A Use-After-Free vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code remotely over a network.
- CVE-2026-57977High
An XSS vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network due to improper input neutralization during web page generation.
- CVE-2026-57975High
A type confusion vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code remotely over a network.
- CVE-2026-57974High
An integer overflow or wraparound vulnerability has been discovered in Microsoft Edge (Chromium-based). This flaw allows an unauthorized attacker to execute code remotely on the victim's system.
- CVE-2026-56646Medium
A vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose sensitive information. The attack can be performed remotely over a network, enabling spoofing of content.
- CVE-2026-56645High
A heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code remotely over a network.
- CVE-2026-55945Medium
A race condition vulnerability has been discovered in Microsoft Edge (Chromium-based) due to improper synchronization of shared resources during concurrent execution. This allows an authorized attacker to disclose information locally.
- CVE-2026-45489Medium
A spoofing vulnerability in Microsoft Edge (Chromium-based) allows an attacker to impersonate a trusted website. The flaw stems from improper handling of URLs or page content.
- CVE-2026-45488Medium
A vulnerability in Microsoft Edge (Chromium-based) allows an attacker to spoof the user interface, potentially leading to network-based fraud. The issue involves misrepresentation of critical information in the UI.
- CVE-2026-50521High
A Use-After-Free vulnerability in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code remotely over a network.
- CVE-2024-43496Medium
Remote code execution vulnerability in Microsoft Edge (Chromium-based). Allows an attacker to execute malicious code on the victim's device.
- CVE-2024-43489Medium
A vulnerability in Microsoft Edge (Chromium-based) allows remote code execution. An attacker could exploit this flaw to execute arbitrary code on the victim's device.
- CVE-2024-38221Medium
A Spoofing vulnerability in Microsoft Edge (Chromium-based) allows an attacker to impersonate trusted content or interfaces.
- CVE-2024-38222Medium
Information disclosure vulnerability in Microsoft Edge (Chromium-based). Could allow unauthorized access to data.
- CVE-2024-38093Medium
A spoofing vulnerability in Microsoft Edge (Chromium-based) allows an attacker to falsify content or user interface elements. This flaw can be exploited to display a fake website, impersonating a trusted source.
- CVE-2024-38082Medium
A spoofing vulnerability in Microsoft Edge (Chromium-based) allows attackers to falsify content or user interface elements. This flaw can be exploited to display deceptive information, potentially leading to fraud or data theft.
- CVE-2024-38083Medium
A spoofing vulnerability in Microsoft Edge (Chromium-based) allows an attacker to impersonate a trusted website. The flaw stems from improper URL processing, which can lead to a fake address bar being displayed.
- CVE-2024-30058Medium
A spoofing vulnerability in Microsoft Edge (Chromium-based) allows an attacker to manipulate the user interface, such as the address bar. This can be used to display misleading content, tricking users into believing they are on a legitimate site.
- CVE-2024-30057Medium
A spoofing vulnerability in Microsoft Edge for iOS allows user interface manipulation, potentially leading to the display of fraudulent content or web pages.
- CVE-2024-26196Medium
Information disclosure vulnerability in Microsoft Edge for Android (Chromium-based). Could allow unauthorized access to data.
- CVE-2024-26192High
Information disclosure vulnerability in Microsoft Edge (Chromium-based). Could allow an attacker to gain unauthorized access to data.
- CVE-2024-26188Medium
Spoofing vulnerability in Microsoft Edge (Chromium-based). Could allow an attacker to impersonate trusted websites.
- CVE-2024-21423Medium
A vulnerability in Microsoft Edge (Chromium-based) allows information disclosure.
- CVE-2024-21399High
Remote code execution vulnerability in Microsoft Edge (Chromium-based). An attacker could exploit it to execute malicious code on the victim's device.
- CVE-2023-23374High
Remote code execution vulnerability in Microsoft Edge (Chromium-based). An attacker could exploit it to execute code in the browser context.
- CVE-2023-21794Medium
Spoofing Vulnerability in Microsoft Edge (Chromium-based). An attacker could impersonate a trusted source.
- CVE-2023-21720Medium
Tampering vulnerability in Microsoft Edge (Chromium-based).
- CVE-2021-43221Medium
Remote code execution vulnerability in Microsoft Edge (Chromium-based).
- CVE-2021-41351Medium
A spoofing vulnerability in Microsoft Edge (Chromium-based) in IE Mode. An attacker could exploit this to impersonate trusted websites.
- CVE-2021-38669Medium
Tampering vulnerability in Microsoft Edge (Chromium-based). Could allow modification of browser data or behavior.
- CVE-2021-38642Medium
Spoofing vulnerability in Microsoft Edge for iOS. Could allow an attacker to impersonate trusted websites.
- CVE-2021-38641Medium
Spoofing vulnerability in Microsoft Edge for Android. Allows an attacker to impersonate trusted content.
- CVE-2021-36930Medium
Elevation of Privilege vulnerability in Microsoft Edge (Chromium-based). Could allow an attacker to gain elevated privileges.
- CVE-2021-26436Medium
Elevation of privilege vulnerability in Microsoft Edge (Chromium-based). An attacker could exploit this flaw to gain elevated privileges on the system.
- CVE-2021-36931Medium
Elevation of privilege vulnerability in Microsoft Edge (Chromium-based). An attacker could exploit this flaw to gain elevated privileges on the system.
- CVE-2021-36929Medium
Information disclosure vulnerability in Microsoft Edge (Chromium-based). It could allow an attacker to access information that should not be disclosed.
- CVE-2021-36928Medium
A vulnerability in Microsoft Edge (Chromium-based) allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges in the browser context.
- CVE-2020-1059Medium
A spoofing vulnerability in Microsoft Edge due to improper parsing of HTTP content. An attacker can trick a user by redirecting to a specially crafted website that can spoof content or serve as a pivot for further attacks. Requires user clicking a specially crafted URL.
- CVE-2020-1056Medium
An elevation of privilege vulnerability in Microsoft Edge due to improper enforcement of cross-domain policies. An attacker could access information from one domain and inject it into another.

