CVE-20XX-?

Microsoft Edge Chromium CVEs.

Published CVEs affecting Microsoft Edge Chromium, ranked by exploit odds.

133 CVEs · updated 2026-11-06 06:05 UTC

  1. CVE-2025-49741

    No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

    Disclosure Browser & mail Microsoft Edge Chromium

    7.4 HIGH 4% exploit odds Fix listed
  2. CVE-2026-58289

    Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

    Other Browser & mail Microsoft Edge Chromium

    9.0 CRITICAL 2% exploit odds Fix listed
  3. CVE-2025-21279

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

    Microsoft Edge Chromium

    6.5 MEDIUM 2% exploit odds Fix listed
  4. CVE-2025-21283

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

    Microsoft Edge Chromium

    6.5 MEDIUM 1% exploit odds Fix listed
  5. CVE-2025-21408

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

    Microsoft Edge Chromium

    8.8 HIGH 1% exploit odds Fix listed
  6. CVE-2025-21342

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

    Microsoft Edge Chromium

    8.8 HIGH 1% exploit odds Fix listed
  7. CVE-2026-66312

    Buffer over-read in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.

    Other Browser & mail Microsoft Edge Chromium

    6.5 MEDIUM 1% exploit odds Fix listed
  8. CVE-2025-21404

    Microsoft Edge (Chromium-based) Spoofing Vulnerability

    Microsoft Edge Chromium

    4.3 MEDIUM 1% exploit odds Fix listed
  9. CVE-2026-66321

    Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

    Other Browser & mail Microsoft Edge Chromium

    7.4 HIGH 1% exploit odds Fix listed
  10. CVE-2026-57991

    Improper link resolution before file access ('link following') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

    Other Browser & mail Microsoft Edge Chromium

    7.4 HIGH 1% exploit odds Fix listed
  11. CVE-2025-25000

    Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

    Microsoft Edge Chromium

    8.8 HIGH 1% exploit odds Fix listed
  12. CVE-2026-58291

    Operation on a resource after expiration or release in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

    Other Browser & mail Microsoft Edge Chromium

    6.1 MEDIUM 1.0% exploit odds Fix listed
  13. CVE-2026-45495

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

    Code execution Browser & mail Microsoft Edge Chromium

    8.8 HIGH 1.0% exploit odds Fix listed
  14. CVE-2026-58281

    Deserialization of untrusted data in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

    Code execution Browser & mail Microsoft Edge Chromium

    8.3 HIGH 1.0% exploit odds Fix listed
  15. CVE-2025-29806

    No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

    Microsoft Edge Chromium

    6.5 MEDIUM 0.9% exploit odds Fix listed
  16. CVE-2026-65802

    External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information over a network.

    Other Browser & mail Microsoft Edge Chromium

    7.4 HIGH 0.9% exploit odds Fix listed
  17. CVE-2026-66324

    External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

    Other Browser & mail Microsoft Edge Chromium

    6.5 MEDIUM 0.9% exploit odds Fix listed
  18. CVE-2026-56646

    Exposure of sensitive information to an unauthorized actor in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

    Disclosure Browser & mail Microsoft Edge Chromium

    6.5 MEDIUM 0.9% exploit odds Fix listed
  19. CVE-2026-57990

    Files or directories accessible to external parties in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

    Other Browser & mail Microsoft Edge Chromium

    7.4 HIGH 0.9% exploit odds Fix listed
  20. CVE-2025-29825

    User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

    Microsoft Edge Chromium

    6.5 MEDIUM 0.9% exploit odds Fix listed
  21. CVE-2026-45489

    Microsoft Edge (Chromium-based) Spoofing Vulnerability

    Other Browser & mail Microsoft Edge Chromium

    6.5 MEDIUM 0.9% exploit odds Fix listed
  22. CVE-2026-57993

    Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

    Disclosure Browser & mail Microsoft Edge Chromium

    7.4 HIGH 0.9% exploit odds Fix listed
  23. CVE-2026-58523

    Improper access control in Microsoft Edge for Android allows an unauthorized attacker to bypass a security feature over a network.

    Auth & access Browser & mail Microsoft Edge Chromium

    6.5 MEDIUM 0.9% exploit odds Fix listed
  24. CVE-2026-57987

    Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

    Disclosure Browser & mail Microsoft Edge Chromium

    6.5 MEDIUM 0.9% exploit odds Fix listed
  25. CVE-2025-21185

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

    Microsoft Edge Chromium

    6.5 MEDIUM 0.8% exploit odds Fix listed
  26. CVE-2026-50521

    Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.

    Memory safety Browser & mail Microsoft Edge Chromium

    8.3 HIGH 0.8% exploit odds Fix listed
  27. CVE-2026-72984

    Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

    Other Browser & mail Microsoft Edge Chromium

    8.8 HIGH 0.8% exploit odds Fix listed
  28. CVE-2026-69486

    Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

    Memory safety Browser & mail Microsoft Edge Chromium

    8.8 HIGH 0.8% exploit odds Fix listed
  29. CVE-2026-85893

    Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

    Memory safety Browser & mail Microsoft Edge Chromium

    8.8 HIGH 0.8% exploit odds Fix listed
  30. CVE-2026-56645

    Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

    Memory safety Browser & mail Microsoft Edge Chromium

    8.8 HIGH 0.8% exploit odds Fix listed
  31. CVE-2026-57974

    Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

    Memory safety Browser & mail Microsoft Edge Chromium

    8.8 HIGH 0.8% exploit odds Fix listed
  32. CVE-2026-57981

    Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

    Memory safety Browser & mail Microsoft Edge Chromium

    8.8 HIGH 0.8% exploit odds Fix listed
  33. CVE-2025-49713

    Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

    Other Browser & mail Microsoft Edge Chromium

    8.8 HIGH 0.8% exploit odds Fix listed
  34. CVE-2025-29815

    Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.

    Microsoft Edge Chromium

    7.6 HIGH 0.8% exploit odds Fix listed
  35. CVE-2026-66798

    Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

    Memory safety Browser & mail Microsoft Edge Chromium

    4.3 MEDIUM 0.8% exploit odds Fix listed
  36. CVE-2026-66326

    Missing authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

    Auth & access Browser & mail Microsoft Edge Chromium

    6.5 MEDIUM 0.8% exploit odds Fix listed
  37. CVE-2026-57988

    Relative path traversal in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

    Disclosure Browser & mail Microsoft Edge Chromium

    7.1 HIGH 0.8% exploit odds Fix listed
  38. CVE-2026-83831

    Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

    Memory safety Browser & mail Microsoft Edge Chromium

    8.8 HIGH 0.8% exploit odds Fix listed
  39. CVE-2026-85898

    Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

    Code execution Browser & mail Microsoft Edge Chromium

    8.8 HIGH 0.8% exploit odds Fix listed
  40. CVE-2026-96196

    Incomplete list of disallowed inputs in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.

    Other Browser & mail Microsoft Edge Chromium

    8.8 HIGH 0.8% exploit odds Fix listed
  41. CVE-2026-72970

    Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

    Memory safety Browser & mail Microsoft Edge Chromium

    8.3 HIGH 0.7% exploit odds Fix listed
  42. CVE-2026-57985

    Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

    Other Browser & mail Microsoft Edge Chromium

    7.6 HIGH 0.7% exploit odds Fix listed
  43. CVE-2025-26643

    The UI performs the wrong action in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

    Microsoft Edge Chromium

    5.4 MEDIUM 0.7% exploit odds Fix listed
  44. CVE-2026-58597

    Insufficient ui warning of dangerous operations in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

    Other Browser & mail Microsoft Edge Chromium

    4.3 MEDIUM 0.7% exploit odds Fix listed
  45. CVE-2025-29834

    Out-of-bounds read in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

    Microsoft Edge Chromium

    7.5 HIGH 0.7% exploit odds Fix listed
  46. CVE-2026-41107

    External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

    Other Browser & mail Microsoft Edge Chromium

    7.4 HIGH 0.7% exploit odds Fix listed
  47. CVE-2026-57983

    Improper authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.

    Other Browser & mail Microsoft Edge Chromium

    8.7 HIGH 0.6% exploit odds Fix listed
  48. CVE-2026-85899

    Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges over a network.

    Memory safety Browser & mail Microsoft Edge Chromium

    8.1 HIGH 0.6% exploit odds Fix listed
  49. CVE-2026-0391

    User interface (ui) misrepresentation of critical information in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network.

    Other Browser & mail Microsoft Edge Chromium

    6.5 MEDIUM 0.6% exploit odds Fix listed
  50. CVE-2026-20942

    Improper restriction of rendered ui layers or frames in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

    XSS Browser & mail Microsoft Edge Chromium

    4.3 MEDIUM 0.6% exploit odds Fix listed

All CVEs affecting Microsoft Edge Chromium that appear in CVE.org and NVD, sorted by how likely they are to be exploited (EPSS), with fix status and timeline.