← Back

Edge Chromium

edge_chromium

Vendor: Microsoft • 276 CVEs

CVEs (276)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Microsoft
1Edge Chromium
Jul 7, 2026
Jul 3, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
1Microsoft
1Edge Chromium
Jul 7, 2026
Jul 3, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
1Microsoft
1Edge Chromium
Jul 7, 2026
Jul 3, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Exposure of sensitive information to an unauthorized actor in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
1Microsoft
1Edge Chromium
Jul 7, 2026
Jul 3, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
1Microsoft
1Edge Chromium
Jul 7, 2026
Jul 3, 2026
N/A· v4
4.2 MEDIUM· v3
N/A· v2
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Edge (Chromium-based) allows an authorized attacker to disclose information locally.
1Microsoft
1Edge Chromium
Jul 12, 2026
Jul 3, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Microsoft Edge (Chromium-based) Spoofing Vulnerability
1Microsoft
1Edge Chromium
Jul 7, 2026
Jul 3, 2026
N/A· v4
5.9 MEDIUM· v3
N/A· v2
User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
1Microsoft
1Edge Chromium
Jul 3, 2026
Jul 1, 2026
N/A· v4
8.3 HIGH· v3
N/A· v2
Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.
1Microsoft
1Edge Chromium
Jul 1, 2026
Jun 19, 2026
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Entra ID allows an authorized attacker to perform spoofing over a network.
1Microsoft
1Edge Chromium
Jun 17, 2026
May 18, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
1Microsoft
1Edge Chromium
Jun 17, 2026
May 18, 2026
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Microsoft Edge (Chromium-based) Spoofing Vulnerability
1Microsoft
1Edge Chromium
Jun 17, 2026
May 18, 2026
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.
1Microsoft
1Edge Chromium
Jun 17, 2026
May 12, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
1Microsoft
1Edge Chromium
Jun 17, 2026
May 12, 2026
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Improper neutralization of special elements in output used by a downstream component ('injection') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.
1Microsoft
1Edge Chromium
Jun 17, 2026
May 12, 2026
N/A· v4
7.4 HIGH· v3
N/A· v2
External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
1Microsoft
1Edge Chromium
Jun 17, 2026
May 12, 2026
N/A· v4
4.3 MEDIUM· v3
N/A· v2
User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
1Microsoft
1Edge Chromium
Jun 19, 2026
Apr 10, 2026
N/A· v4
4.3 MEDIUM· v3
N/A· v2
User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
1Microsoft
1Edge Chromium
Jun 17, 2026
Mar 16, 2026
N/A· v4
5.0 MEDIUM· v3
N/A· v2
Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability
1Microsoft
1Edge Chromium
Jun 17, 2026
Feb 17, 2026
N/A· v4
3.1 LOW· v3
N/A· v2
Under specific conditions, a malicious webpage may trigger autofill population after two consecutive taps, potentially without clear or intentional user consent. This could result in disclosure of stored autofill data su...Show more
Under specific conditions, a malicious webpage may trigger autofill population after two consecutive taps, potentially without clear or intentional user consent. This could result in disclosure of stored autofill data such as addresses, email, or phone number metadata.Show less
1Microsoft
1Edge Chromium
Jun 17, 2026
Feb 5, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
User interface (ui) misrepresentation of critical information in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network.