Microsoft Edge vulnerabilities
230 known CVE vulnerabilities in Microsoft Edge, translated and rated.
- CVE-2026-58525High
An improper access control vulnerability has been found in Microsoft Edge (Chromium-based). An unauthorized attacker can remotely bypass a security feature.
- CVE-2026-58523Medium
An improper access control vulnerability in Microsoft Edge for Android allows an unauthorized attacker to bypass a security feature over a network.
- CVE-2026-58524Medium
A Cross-Site Scripting (XSS) vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. The flaw is due to improper neutralization of input during web page generation.
- CVE-2026-58522Medium
A Relative Path Traversal vulnerability in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally.
- CVE-2026-58300Medium
An absolute path traversal vulnerability in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally.
- CVE-2026-58299High
A Time-of-check time-of-use (TOCTOU) race condition in Microsoft Edge for Android allows an unauthorized attacker to execute code over a network by exploiting a race between resource check and use.
- CVE-2026-58298High
An XSS vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network due to improper input neutralization during web page generation.
- CVE-2026-58297High
A vulnerability in Microsoft Edge for Android allows an unauthorized attacker to disclose private personal information over a network. The issue stems from improper access restrictions to sensitive data.
- CVE-2026-58296High
A vulnerability in Microsoft Edge for Android allows an unauthorized attacker to disclose private personal information over a network. The issue stems from improper access restrictions to sensitive data.
- CVE-2026-58295High
A type confusion vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.
- CVE-2026-58293High
A vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code remotely by controlling file names or paths. The issue stems from external control over file paths, potentially leading to privilege escalation.
- CVE-2026-58292High
An improper input validation vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. This can lead to remote code execution on the victim's system.
- CVE-2026-58291Medium
A vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network. The issue stems from an operation on a resource after expiration or release.
- CVE-2026-58290High
A type confusion vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code remotely over a network.
- CVE-2026-58288High
A Use-After-Free vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code remotely over a network.
- CVE-2026-58287High
A Use-After-Free vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code remotely over a network.
- CVE-2026-58286High
An improper access control vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform network spoofing.
- CVE-2026-58285High
A type confusion vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code remotely over a network. The flaw arises from accessing a resource using an incompatible data type.
- CVE-2026-58284High
An improper authorization vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code remotely over a network.
- CVE-2026-58283High
A type confusion vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
- CVE-2026-58282High
A vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform a spoofing attack over a network. The issue is caused by improper access control.
- CVE-2026-58278Medium
A Server-Side Request Forgery (SSRF) vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
- CVE-2026-58276High
A Use After Free vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code remotely over a network. The issue stems from improper memory management when processing specially crafted network requests.
- CVE-2026-57993High
A Server-Side Request Forgery (SSRF) vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform network spoofing.
- CVE-2026-57992High
A Use-After-Free vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code remotely over a network.
- CVE-2026-57991High
A vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network due to improper link resolution before file access.
- CVE-2026-57988High
A Relative Path Traversal vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. The flaw stems from improper handling of relative paths, bypassing security mechanisms.
- CVE-2026-57987Medium
A Server-Side Request Forgery (SSRF) vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
- CVE-2026-57986High
A Use-After-Free vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code remotely over a network. The issue stems from improper memory management when processing specially crafted network requests.
- CVE-2026-57985High
An improper input validation vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. This can lead to remote code execution on the victim's system.
- CVE-2026-57984High
A Use-After-Free vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. The issue stems from improper memory management when processing specially crafted network requests.
- CVE-2026-57983High
A vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network. The issue is due to improper authorization.
- CVE-2026-57981High
A Use-After-Free vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code remotely over a network.
- CVE-2026-57977High
An XSS vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network due to improper input neutralization during web page generation.
- CVE-2026-57975High
A type confusion vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code remotely over a network.
- CVE-2026-57974High
An integer overflow or wraparound vulnerability has been discovered in Microsoft Edge (Chromium-based). This flaw allows an unauthorized attacker to execute code remotely on the victim's system.
- CVE-2026-56646Medium
A vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose sensitive information. The attack can be performed remotely over a network, enabling spoofing of content.
- CVE-2026-56645High
A heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code remotely over a network.
- CVE-2026-55945Medium
A race condition vulnerability has been discovered in Microsoft Edge (Chromium-based) due to improper synchronization of shared resources during concurrent execution. This allows an authorized attacker to disclose information locally.
- CVE-2026-45489Medium
A spoofing vulnerability in Microsoft Edge (Chromium-based) allows an attacker to impersonate a trusted website. The flaw stems from improper handling of URLs or page content.
- CVE-2026-45488Medium
A vulnerability in Microsoft Edge (Chromium-based) allows an attacker to spoof the user interface, potentially leading to network-based fraud. The issue involves misrepresentation of critical information in the UI.
- CVE-2026-50521High
A Use-After-Free vulnerability in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code remotely over a network.
- CVE-2026-45494Medium
Microsoft Edge (Chromium-based) contains a spoofing vulnerability that allows impersonation of trusted content or interfaces. The vulnerability can be used to mislead the user.
- CVE-2026-45492Medium
Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network. The vulnerability relates to incorrect checking of input data.
- CVE-2026-42891Medium
A user interface misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
- CVE-2026-42838Medium
Microsoft Edge (Chromium-based) contains improper neutralization of special elements in output used by a downstream component (injection), allowing an unauthorized attacker to elevate privileges over a network.
- CVE-2026-40416Medium
User interface (UI) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
- CVE-2026-33119Medium
User interface (UI) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. The vulnerability involves misleading the user through a distorted interface.
- CVE-2025-65046Low
Microsoft Edge (Chromium-based) Spoofing Vulnerability.
- CVE-2025-62223Medium
A vulnerability in the user interface of Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

