Microsoft Edge Chromium vulnerabilities, page 4
309 vulnerabilities
Known vulnerabilities in Microsoft Edge Chromium, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-21267microsoftedge_chromium+1
EPSS score0.57%
Microsoft Edge (Chromium-based) Spoofing VulnerabilityCVE-2025-21401microsoftedge_chromium+1EPSS score0.32%
Microsoft Edge (Chromium-based) Security Feature Bypass VulnerabilityCVE-2025-21342microsoftedge_chromium+1EPSS score1.25%
Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityCVE-2025-59251microsoftedge_chromium+1EPSS score0.51%
Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityCVE-2025-65046microsoftedge_chromium+1EPSS score0.28%
Microsoft Edge (Chromium-based) Spoofing VulnerabilityCVE-2025-62223microsoftedge_chromium+1EPSS score0.43%
User interface (ui) misrepresentation of critical information in Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network.CVE-2025-26643microsoftedge_chromium+1EPSS score0.71%
The UI performs the wrong action in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.CVE-2025-47964microsoftedge_chromium+1EPSS score0.48%
Microsoft Edge (Chromium-based) Spoofing VulnerabilityCVE-2025-47963microsoftedge_chromium+1EPSS score0.63%
No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.CVE-2025-47182microsoftedge_chromium+1EPSS score0.37%
Improper input validation in Microsoft Edge (Chromium-based) allows an authorized attacker to bypass a security feature locally.CVE-2025-14174chainguardchromium+17KEVEPSS score22.33%
Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)CVE-2025-25000microsoftedge_chromium+1EPSS score1.00%
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.CVE-2025-53791microsoftedge_chromium+1EPSS score0.41%
Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.CVE-2025-29815microsoftedge_chromium+1EPSS score0.79%
Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.CVE-2025-29825microsoftedge_chromium+1EPSS score0.88%
User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.CVE-2025-29834microsoftedge_chromium+1EPSS score0.64%
Out-of-bounds read in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.CVE-2025-29806microsoftedge_chromium+1EPSS score0.95%
No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.CVE-2025-5419chainguardchromium+5KEVEPSS score7.82%
Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)CVE-2025-49741microsoftedge_chromium+1EPSS score3.91%
No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.CVE-2025-49713microsoftedge_chromium+1EPSS score0.81%
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.