ME
Product
Microsoft Edge (EdgeHTML-based)
On CISA KEVExploited in the wildRansomware-linked
760
CVEs
12
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 9High 489Medium 2Low 0
Watch
Add Microsoft Edge (EdgeHTML-based) to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-0313 In wildKEV | 9.8 | Feb 2 | Adobe Flash Player Use-After-Free Vulnerability Affected: All versions, or not specified |
| CVE-2015-0311 In wildKEV | 9.8 | Jan 23 | Adobe Flash Player Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2024-7971 In wildKEV | 9.6 | Aug 21 | Google Chromium V8 Type Confusion Vulnerability Affected: before 128.0.2739.42 |
| CVE-2022-4135 In wildKEV | 9.6 | Nov 25 | Google Chromium GPU Heap Buffer Overflow Vulnerability Affected: before 107.0.1418.62 |
| CVE-2023-5217 In wildKEV | 8.8 | Sep 28 | Google Chromium libvpx Heap Buffer Overflow Vulnerability Affected: 116.0.1938.98; 117.0.2045.47 |
| CVE-2021-26411 RansomwareIn wildKEV | 8.8 | Mar 11 | Internet Explorer Memory Corruption Vulnerability Affected: All versions, or not specified |
| CVE-2020-16009 In wildKEV | 8.8 | Nov 3 | Google Chromium V8 Type Confusion Vulnerability Affected: before 86.0.622.63 |
| CVE-2016-7200 In wildKEV | 8.8 | Nov 10 | The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site,… Affected: All versions, or not specified |
| CVE-2016-7201 In wildKEV | 8.8 | Nov 10 | The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site,… Affected: All versions, or not specified |
| CVE-2017-0037 In wildKEV | 8.1 | Feb 26 | Microsoft Edge and Internet Explorer Type Confusion Vulnerability Affected: All versions, or not specified |
| CVE-2016-3351 RansomwareIn wildKEV | 6.5 | Sep 14 | Microsoft Internet Explorer and Edge Information Disclosure Vulnerability Affected: All versions, or not specified |
| CVE-2020-0878 RansomwareIn wildKEV | 4.2 | Sep 11 | Microsoft Browser Memory Corruption Vulnerability Affected: 1.0..0 before publication |
| CVE-2017-0028 | 9.8 | Jul 17 | A remote code execution vulnerability exists when Microsoft scripting engine improperly accesses objects in memory Affected: All versions, or not specified |
| CVE-2017-0252 | 9.8 | May 15 | A remote code execution vulnerability exists in Microsoft Chakra Core in the way JavaScript engines render when handling objects in memory Affected: All versions, or not specified |
| CVE-2017-0223 | 9.8 | May 15 | A remote code execution vulnerability exists in Microsoft Chakra Core in the way JavaScript engines render when handling objects in memory Affected: All versions, or not specified |
| CVE-2016-0003 | 9.6 | Jan 13 | Microsoft Edge allows remote attackers to execute arbitrary code via unspecified vectors, aka "Microsoft Edge Memory Corruption Vulnerability." Affected: All versions, or not specified |
| CVE-2019-0938 | 9.0 | May 16 | An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser, aka 'Microsoft Edge Elevation… Affected: All versions, or not specified |
| CVE-2026-70341 | 8.8 | Sep 11 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Affected: before 152.0.4191.52; before 152.0.4191.52 |
| CVE-2021-30624 | 8.8 | Sep 3 | Chromium: CVE-2021-30624 Use after free in Autofill Affected: through 93.0.961.38 |
| CVE-2021-30623 | 8.8 | Sep 3 | Chromium: CVE-2021-30623 Use after free in Bookmarks Affected: through 93.0.961.38 |
| CVE-2021-30622 | 8.8 | Sep 3 | Chromium: CVE-2021-30622 Use after free in WebApp Installs Affected: through 93.0.961.38 |
| CVE-2021-30620 | 8.8 | Sep 3 | Chromium: CVE-2021-30620 Insufficient policy enforcement in Blink Affected: through 93.0.961.38 |
| CVE-2021-30618 | 8.8 | Sep 3 | Chromium: CVE-2021-30618 Inappropriate implementation in DevTools Affected: through 93.0.961.38 |
| CVE-2021-30616 | 8.8 | Sep 3 | Chromium: CVE-2021-30616 Use after free in Media Affected: through 93.0.961.38 |
| CVE-2021-30614 | 8.8 | Sep 3 | Chromium: CVE-2021-30614 Heap buffer overflow in TabStrip Affected: through 93.0.961.38 |
| CVE-2021-30613 | 8.8 | Sep 3 | Chromium: CVE-2021-30613 Use after free in Base internals Affected: through 93.0.961.38 |
| CVE-2021-30612 | 8.8 | Sep 3 | Chromium: CVE-2021-30612 Use after free in WebRTC Affected: through 93.0.961.38 |
| CVE-2021-30611 | 8.8 | Sep 3 | Chromium: CVE-2021-30611 Use after free in WebRTC Affected: through 93.0.961.38 |
| CVE-2021-30610 | 8.8 | Sep 3 | Chromium: CVE-2021-30610 Use after free in Extensions API Affected: through 93.0.961.38 |
| CVE-2021-30609 | 8.8 | Sep 3 | Chromium: CVE-2021-30609 Use after free in Sign-In Affected: through 93.0.961.38 |
| CVE-2021-30608 | 8.8 | Sep 3 | Chromium: CVE-2021-30608 Use after free in Web Share Affected: through 93.0.961.38 |
| CVE-2021-30607 | 8.8 | Sep 3 | Chromium: CVE-2021-30607 Use after free in Permissions Affected: through 93.0.961.38 |
| CVE-2021-30606 | 8.8 | Sep 3 | Chromium: CVE-2021-30606 Use after free in Blink Affected: through 93.0.961.38 |
| CVE-2021-21157 | 8.8 | Feb 22 | Use after free in Web Sockets in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: before 88.0.705.74 |
| CVE-2020-1555 | 8.8 | Aug 17 | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based) Affected: All versions, or not specified |
| CVE-2020-0816 | 8.8 | Mar 12 | A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft Edge Memory Corruption Vulnerability' Affected: All versions, or not specified |
| CVE-2019-1140 | 8.8 | Aug 14 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based) Affected: All versions, or not specified |
| CVE-2019-0566 | 8.8 | Jan 8 | An elevation of privilege vulnerability exists in Microsoft Edge Browser Broker COM object, aka "Microsoft Edge Elevation of Privilege Vulnerability." This affects Microsoft Edge Affected: All versions, or not specified |
| CVE-2017-8660 | 8.8 | Sep 13 | Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way… Affected: All versions, or not specified |
| CVE-2017-8503 | 8.8 | Aug 8 | Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to escape from the AppContainer sandbox, aka "Microsoft Edge Elevation of… Affected: All versions, or not specified |
| CVE-2017-0002 | 8.8 | Jan 10 | Microsoft Edge allows remote attackers to bypass the Same Origin Policy via vectors involving the about:blank URL and data: URLs, aka "Microsoft Edge Elevation of Privilege… Affected: All versions, or not specified |
| CVE-2016-3297 | 8.8 | Sep 14 | Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Affected: All versions, or not specified |
| CVE-2016-3269 | 8.8 | Jul 13 | The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka… Affected: All versions, or not specified |
| CVE-2016-3265 | 8.8 | Jul 13 | The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka… Affected: All versions, or not specified |
| CVE-2016-3260 | 8.8 | Jul 13 | The Microsoft (1) JScript 9, (2) VBScript, and (3) Chakra JavaScript engines, as used in Microsoft Internet Explorer 11, Microsoft Edge, and other products, allow remote attackers… Affected: All versions, or not specified |
| CVE-2016-3259 | 8.8 | Jul 13 | The Microsoft (1) JScript 9, (2) VBScript, and (3) Chakra JavaScript engines, as used in Microsoft Internet Explorer 9 through 11, Microsoft Edge, and other products, allow remote… Affected: All versions, or not specified |
| CVE-2016-3248 | 8.8 | Jul 13 | The Microsoft (1) JScript 9, (2) VBScript, and (3) Chakra JavaScript engines, as used in Microsoft Internet Explorer 9 through 11, Microsoft Edge, and other products, allow remote… Affected: All versions, or not specified |
| CVE-2016-3222 | 8.8 | Jun 16 | Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Edge Memory Corruption… Affected: All versions, or not specified |
| CVE-2016-3214 | 8.8 | Jun 16 | The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka… Affected: All versions, or not specified |
| CVE-2016-3199 | 8.8 | Jun 16 | The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka… Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)