VendorsMicrosoftedge_chromiumall versions
Vulnerabilities

Microsoft Edge

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

306CVEs
CVE-2026-57988
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Published 2026-07-03 · Analyzed
7.1EPSS 0.008
CVE-2026-57977
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Published 2026-07-03 · Analyzed
7.1EPSS 0.006
CVE-2026-58296
Microsoft Edge for Android Information Disclosure Vulnerability
Published 2026-07-03 · Analyzed
7.1EPSS 0.005
CVE-2026-58297
Microsoft Edge for Android Information Disclosure Vulnerability
Published 2026-07-03 · Analyzed
7.1EPSS 0.005
CVE-2026-21223
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Published 2026-01-16 · Modified
7.1EPSS 0.003
CVE-2026-66322
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Published 2026-08-03 · Analyzed
7.1EPSS 0.002
CVE-2022-23262
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Published 2022-02-07 · Modified
6.8EPSS 0.012
CVE-2026-58522
Microsoft Edge for Android Information Disclosure Vulnerability
Published 2026-07-03 · Analyzed
6.8EPSS 0.004
CVE-2026-66313
Microsoft Edge (Chromium-based) Tampering Vulnerability
Published 2026-08-03 · Analyzed
6.8EPSS 0.002
CVE-2022-41115
Microsoft Edge (Chromium-based) Update Elevation of Privilege Vulnerability
Published 2022-12-13 · Modified
6.6EPSS 0.020
CVE-2023-36022
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Published 2023-11-03 · Modified
6.6EPSS 0.012
CVE-2023-36008
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Published 2023-11-16 · Modified
6.6EPSS 0.006
CVE-2024-21388
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Published 2024-01-30 · Modified
6.5EPSS 0.320
CVE-2021-21135
Inappropriate implementation in Performance API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
Published 2021-02-09 · Modified
6.5EPSS 0.192
CVE-2021-21123
Insufficient data validation in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.
Published 2021-02-09 · Modified
6.5EPSS 0.109
CVE-2021-21126
Insufficient policy enforcement in extensions in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass site isolation via a crafted Chrome Extension.
Published 2021-02-09 · Modified
6.5EPSS 0.087
CVE-2023-33145
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Published 2023-06-13 · Modified
6.51 PoCEPSS 0.086
CVE-2021-21131
Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.
Published 2021-02-09 · Modified
6.5EPSS 0.076
CVE-2021-21137
Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to obtain potentially sensitive information from disk via a crafted HTML page.
Published 2021-02-09 · Modified
6.5EPSS 0.059
CVE-2021-30615
Chromium: CVE-2021-30615 Cross-origin data leak in Navigation
Published 2021-09-03 · Modified
6.5EPSS 0.056
CVE-2021-21129
Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.
Published 2021-02-09 · Modified
6.5EPSS 0.054
CVE-2021-21130
Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.
Published 2021-02-09 · Modified
6.5EPSS 0.054
CVE-2021-21134
Incorrect security UI in Page Info in Google Chrome on iOS prior to 88.0.4324.96 allowed a remote attacker to spoof security UI via a crafted HTML page.
Published 2021-02-09 · Modified
6.5EPSS 0.050
CVE-2021-21139
Inappropriate implementation in iframe sandbox in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
Published 2021-02-09 · Modified
6.5EPSS 0.047
CVE-2021-21136
Insufficient policy enforcement in WebView in Google Chrome on Android prior to 88.0.4324.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
Published 2021-02-09 · Modified
6.5EPSS 0.042
CVE-2021-30617
Chromium: CVE-2021-30617 Policy bypass in Blink
Published 2021-09-03 · Modified
6.5EPSS 0.037
CVE-2021-30619
Chromium: CVE-2021-30619 UI Spoofing in Autofill
Published 2021-09-03 · Modified
6.5EPSS 0.035
CVE-2021-30621
Chromium: CVE-2021-30621 UI Spoofing in Autofill
Published 2021-09-03 · Modified
6.5EPSS 0.035
CVE-2021-21133
Insufficient policy enforcement in Downloads in Google Chrome prior to 88.0.4324.96 allowed an attacker who convinced a user to download files to bypass navigation restrictions via a crafted HTML page.
Published 2021-02-09 · Modified
6.5EPSS 0.030
CVE-2023-38157
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Published 2023-08-07 · Modified
6.5EPSS 0.025
CVE-2023-21719
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Published 2023-01-23 · Modified
6.5EPSS 0.017
CVE-2024-29987
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Published 2024-04-18 · Analyzed
6.5EPSS 0.012
CVE-2025-29806
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Published 2025-03-23 · Modified
6.5EPSS 0.009
CVE-2026-66324
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Published 2026-08-28 · Analyzed
6.5EPSS 0.009
CVE-2026-56646
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Published 2026-07-03 · Analyzed
6.5EPSS 0.009
CVE-2023-36409
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Published 2023-11-06 · Modified
6.5EPSS 0.009
CVE-2026-45489
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Published 2026-07-03 · Modified
6.5EPSS 0.009
CVE-2026-58523
Microsoft Edge for Android Security Feature Bypass Vulnerability
Published 2026-07-03 · Analyzed
6.5EPSS 0.009
CVE-2026-57987
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Published 2026-07-03 · Analyzed
6.5EPSS 0.009
CVE-2025-21185
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Published 2025-01-17 · Analyzed
6.5EPSS 0.008
← Prev5 / 8Next →