cve.bz

microsoft edge vulnerabilities, newest first

Filter
  1. 8.8CVE-2026-96192EPSS 0.6%

    Use after free in Microsoft Edge for iOS allows an unauthorized attacker to execute code over a network.

  2. 4.3CVE-2026-85330EPSS 0.4%

    Incorrect authorization in Microsoft Edge for Android allows an unauthorized attacker to bypass a security feature over a network.

  3. 8.8CVE-2026-70341EPSS 0.6%

    Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.

  4. 5.4CVE-2026-70331EPSS 0.4%

    Improper neutralization of input used for llm prompting in Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network.

  5. 7.1CVE-2026-66310EPSS 0.4%

    External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally.

  6. 5.4CVE-2026-62828EPSS 0.4%

    Improper input validation in Microsoft Edge for Android allows an unauthorized attacker to perform tampering over a network.

  7. 4.3CVE-2026-35429EPSS 0.5%

    User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

  8. 5.4CVE-2026-33119EPSS 0.3%

    User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

  9. 7.1CVE-2026-26133EPSS 0.4%

    AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.

  10. 3.5CVE-2025-62224EPSS 0.3%

    User interface (ui) misrepresentation of critical information in Microsoft Edge for Android allows an authorized attacker to perform spoofing over a network.

  11. 4.7CVE-2025-47967EPSS 0.4%

    Insufficient ui warning of dangerous operations in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network.

  12. 4.3CVE-2025-49755EPSS 0.5%

    User interface (ui) misrepresentation of critical information in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network.

  13. 4.3CVE-2025-49736EPSS 0.5%

    The ui performs the wrong action in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network.

  14. 4.7CVE-2025-29796EPSS 0.6%

    User interface (ui) misrepresentation of critical information in Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network.

  15. 4.3CVE-2025-25001EPSS 0.8%

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

  16. 5.3CVE-2025-21253EPSS 1.2%

    Microsoft Edge for IOS and Android Spoofing Vulnerability

  17. 6.5CVE-2024-38222EPSS 1.2%

    Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

  18. 7.8CVE-2024-41879EPSS 0.5%

    Acrobat Reader versions 127.0.2651.105 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction …

  19. 6.1CVE-2024-38208EPSS 0.4%

    Microsoft Edge for Android Spoofing Vulnerability

  20. 9.6CVE-2024-7971KEVEPSS 21%

    Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  21. 5.9CVE-2024-38103EPSS 0.5%

    Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

  22. 6.1CVE-2024-38156EPSS 0.4%

    Microsoft Edge (Chromium-based) Spoofing Vulnerability

  23. 4.3CVE-2024-38093EPSS 0.5%

    Microsoft Edge (Chromium-based) Spoofing Vulnerability

  24. 4.7CVE-2024-38082EPSS 0.5%

    Microsoft Edge (Chromium-based) Spoofing Vulnerability

  25. 5.4CVE-2024-30057EPSS 0.4%

    Microsoft Edge for iOS Spoofing Vulnerability

  26. 4.3CVE-2024-29057EPSS 1.0%

    Microsoft Edge (Chromium-based) Spoofing Vulnerability

  27. 4.7CVE-2024-26247EPSS 1.1%

    Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

  28. 4.3CVE-2024-26196EPSS 1.2%

    Microsoft Edge for Android (Chromium-based) Information Disclosure Vulnerability

  29. 3.9CVE-2024-26246EPSS 0.6%

    Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

  30. 4.3CVE-2024-26167EPSS 0.9%

    Microsoft Edge for Android Spoofing Vulnerability

  31. 4.3CVE-2024-26188EPSS 0.8%

    Microsoft Edge (Chromium-based) Spoofing Vulnerability

  32. 4.3CVE-2023-36029EPSS 1.0%

    Microsoft Edge (Chromium-based) Spoofing Vulnerability

  33. 8.8CVE-2023-5217KEVEPSS 49%

    Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  34. 4.3CVE-2023-36883EPSS 0.6%

    Microsoft Edge for iOS Spoofing Vulnerability

  35. 3.7CVE-2023-28301EPSS 0.9%

    Microsoft Edge (Chromium-based) Tampering Vulnerability

  36. 4.3CVE-2023-28284EPSS 0.8%

    Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

  37. 8.3CVE-2022-44708EPSS 2.0%

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

  38. 9.6CVE-2022-4135KEVEPSS 32%

    Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

  39. 4.3CVE-2022-23258EPSS 1.6%

    Microsoft Edge for Android Spoofing Vulnerability

  40. 4.3CVE-2021-41351EPSS 3.9%

    Microsoft Edge (Chrome based) Spoofing on IE Mode

  41. 6.4CVE-2021-38669EPSS 2.9%

    Microsoft Edge (Chromium-based) Tampering Vulnerability

  42. 8.8CVE-2021-30624EPSS 4.1%

    Chromium: CVE-2021-30624 Use after free in Autofill

  43. 8.8CVE-2021-30623EPSS 4.0%

    Chromium: CVE-2021-30623 Use after free in Bookmarks

  44. 8.8CVE-2021-30622EPSS 4.1%

    Chromium: CVE-2021-30622 Use after free in WebApp Installs

  45. 6.5CVE-2021-30621EPSS 3.5%

    Chromium: CVE-2021-30621 UI Spoofing in Autofill

  46. 8.8CVE-2021-30620EPSS 4.1%

    Chromium: CVE-2021-30620 Insufficient policy enforcement in Blink

  47. 6.5CVE-2021-30619EPSS 3.5%

    Chromium: CVE-2021-30619 UI Spoofing in Autofill

  48. 8.8CVE-2021-30618EPSS 4.1%

    Chromium: CVE-2021-30618 Inappropriate implementation in DevTools

  49. 6.5CVE-2021-30617EPSS 3.7%

    Chromium: CVE-2021-30617 Policy bypass in Blink

  50. 8.8CVE-2021-30616EPSS 4.1%

    Chromium: CVE-2021-30616 Use after free in Media