Microsoft Edge vulnerabilities

Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

Incomplete list of disallowed inputs in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

Improper verification of cryptographic signature in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

Microsoft Edge (Chromium-based) contains an improper restriction of rendered UI layers or frames vulnerability. It allows an unauthorized attacker to perform spoofing over a network.

A type confusion vulnerability exists in Microsoft Edge (Chromium-based). An unauthorized attacker can exploit it to execute code over a network.

Microsoft Edge (Chromium-based) contains a type confusion vulnerability when accessing a resource using an incompatible type. An unauthenticated attacker can exploit it to execute code over a network.

Microsoft Edge (Chromium-based) contains a double free vulnerability. An unauthenticated attacker can exploit it to execute code over a network.

Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges locally.

A use-after-free vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. The vulnerability is remotely exploitable.

A heap-based buffer overflow vulnerability exists in Microsoft Edge (Chromium-based). An unauthorized attacker can exploit this to execute code over a network.

A race condition due to improper synchronization of a shared resource in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges locally.

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

A use-after-free vulnerability in Microsoft Edge (Chromium-based). An authorized attacker can execute code over a network. The vulnerability is remotely exploitable.

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

Improper neutralization of input used for LLM prompting in Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network.

Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.

Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

Improper neutralization of parameter/argument delimiters in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

Incorrect authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

A type confusion vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

Missing authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

Server-side request forgery (SSRF) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

Microsoft Edge (Chromium-based) has an origin validation error that allows an unauthorized attacker to perform spoofing over a network.

In Microsoft Edge (Chromium-based), a type confusion vulnerability allows an unauthorized attacker to execute code over a network.

An origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering over a network.

Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

A use-after-free vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

A time-of-check time-of-use (TOCTOU) race condition in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering locally.

A buffer over-read in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.

Missing authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering locally.

An improper control of generation of code (code injection) vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

In Microsoft Edge for Android, an external control of file name or path vulnerability allows an unauthorized attacker to disclose information over a network.

Improper input validation in Microsoft Edge for Android allows an unauthorized attacker to perform tampering over a network.

Vulnerability allowing external parties to access files and directories in Microsoft Edge (Chromium-based). An unauthorized attacker can disclose information over a network.

Origin validation error in Microsoft Edge (Chromium-based). An unauthorized attacker can disclose information over a network.

Origin validation error in Microsoft Edge (Chromium-based). An unauthorized attacker can perform spoofing over a network.

A vulnerability in Microsoft Edge (Chromium-based) allows authentication bypass via an alternate path or channel. An unauthorized attacker can perform tampering over a network.

A vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network via untrusted pointer dereference.

A deserialization of untrusted data vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.