Skip to content

Known vulnerabilities in Microsoft Edge (Chromium-based)

Is your version affected?

CVE Summary Score Published
CVE-2026-55945 Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Edge… 4.2 Medium Jul 3, 2026
CVE-2026-50521 Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network 8.3 High Jul 1, 2026
CVE-2026-32208 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Entra ID allows an… 8.8 High Jun 19, 2026
CVE-2026-45495 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability 8.8 High May 18, 2026
CVE-2026-45494 Microsoft Edge (Chromium-based) Spoofing Vulnerability 5.4 Medium May 18, 2026
CVE-2026-45492 Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security… 5.4 Medium May 18, 2026
CVE-2026-40416 User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an… 4.3 Medium May 12, 2026
CVE-2026-42838 Improper neutralization of special elements in output used by a downstream component ('injection') in Microsoft Edge… 5.4 Medium May 12, 2026
CVE-2026-41107 External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose… 7.4 High May 12, 2026
CVE-2026-33118 User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an… 4.3 Medium Apr 10, 2026
CVE-2026-32187 Microsoft Edge (Chromium-based) Defense in Depth Vulnerability 4.2 Medium Mar 27, 2026
CVE-2026-0102 Under specific conditions, a malicious webpage may trigger autofill population after two consecutive taps, potentially… 3.1 Low Feb 17, 2026
CVE-2026-0391 User interface (ui) misrepresentation of critical information in Microsoft Edge for Android allows an unauthorized… 6.5 Medium Feb 5, 2026
CVE-2026-21223 Improper privilege management in Microsoft Edge (Chromium-based) allows an authorized attacker to bypass a security… 7.1 High Jan 16, 2026
CVE-2025-62223 User interface (ui) misrepresentation of critical information in Microsoft Edge for iOS allows an unauthorized… 4.3 Medium Dec 5, 2025
CVE-2025-60711 Protection mechanism failure in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a… 6.3 Medium Oct 31, 2025
CVE-2025-59251 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability 7.6 High Sep 24, 2025
CVE-2025-47967 Insufficient ui warning of dangerous operations in Microsoft Edge for Android allows an unauthorized attacker to perform… 4.7 Medium Sep 16, 2025
CVE-2025-53791 Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security… 4.7 Medium Sep 5, 2025
CVE-2025-47964 Microsoft Edge (Chromium-based) Spoofing Vulnerability 5.4 Medium Jul 11, 2025
CVE-2025-47963 No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a… 6.3 Medium Jul 11, 2025
CVE-2025-47182 Improper input validation in Microsoft Edge (Chromium-based) allows an authorized attacker to bypass a security… 5.6 Medium Jul 11, 2025
CVE-2025-49713 Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an… 8.8 High Jul 2, 2025
CVE-2025-49741 No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over… 7.4 High Jul 1, 2025
CVE-2025-29825 User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an… 6.5 Medium May 2, 2025

Other Microsoft products