← Back

Edge Chromium

edge_chromium

Vendor: Microsoft • 303 CVEs

CVEs (303)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Microsoft
1Edge Chromium
Sep 1, 2026
Aug 28, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
1Microsoft
2Edge
Edge Chromium
Sep 1, 2026
Aug 28, 2026
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Improper neutralization of input used for llm prompting in Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network.
1Microsoft
1Edge Chromium
Aug 31, 2026
Aug 28, 2026
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.
1Microsoft
1Edge Chromium
Sep 1, 2026
Aug 28, 2026
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
1Microsoft
1Edge Chromium
Aug 31, 2026
Aug 28, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
1Microsoft
1Edge Chromium
Aug 31, 2026
Aug 28, 2026
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Improper neutralization of parameter/argument delimiters in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
1Microsoft
1Edge Chromium
Aug 31, 2026
Aug 28, 2026
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Incorrect authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
1Microsoft
1Edge Chromium
Aug 31, 2026
Aug 28, 2026
N/A· v4
3.0 LOW· v3
N/A· v2
Concurrent execution using shared resource with improper synchronization ('race condition') in Copilot Chat (Microsoft Edge) allows an authorized attacker to disclose information over a network.
1Microsoft
1Edge Chromium
Aug 18, 2026
Aug 14, 2026
N/A· v4
8.3 HIGH· v3
N/A· v2
Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
1Microsoft
1Edge Chromium
Aug 17, 2026
Aug 11, 2026
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
1Microsoft
1Edge Chromium
Aug 6, 2026
Aug 4, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Missing authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
1Microsoft
1Edge Chromium
Aug 6, 2026
Aug 4, 2026
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
1Microsoft
1Edge Chromium
Aug 6, 2026
Aug 4, 2026
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
1Microsoft
1Edge Chromium
Aug 6, 2026
Aug 4, 2026
N/A· v4
9.6 CRITICAL· v3
N/A· v2
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
1Microsoft
1Edge Chromium
Aug 6, 2026
Aug 4, 2026
N/A· v4
8.1 HIGH· v3
N/A· v2
Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
1Microsoft
1Edge Chromium
Aug 6, 2026
Aug 4, 2026
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering over a network.
1Microsoft
1Edge Chromium
Aug 6, 2026
Aug 4, 2026
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
1Microsoft
1Edge Chromium
Aug 6, 2026
Aug 4, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
1Microsoft
1Edge Chromium
Aug 6, 2026
Aug 4, 2026
N/A· v4
5.3 MEDIUM· v3
N/A· v2
Time-of-check time-of-use (toctou) race condition in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
1Microsoft
1Edge Chromium
Aug 6, 2026
Aug 4, 2026
N/A· v4
6.8 MEDIUM· v3
N/A· v2
Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering locally.