EC
Product
Edge Chromium
On CISA KEVExploited in the wild
309
CVEs
9
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 14High 141Medium 145Low 9
Watch
Add Edge Chromium to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-6345 In wildKEV | 9.6 | Nov 29 | Google Skia Integer Overflow Vulnerability Affected: before 119.0.2151.97 |
| CVE-2022-4135 In wildKEV | 9.6 | Nov 25 | Google Chromium GPU Heap Buffer Overflow Vulnerability Affected: before 107.0.5304.150 |
| CVE-2025-14174 In wildKEV | 8.8 | Dec 12 | Google Chromium Out of Bounds Memory Access Vulnerability Affected: before 143.0.3650.80 |
| CVE-2025-5419 In wildKEV | 8.8 | Jun 2 | Google Chromium V8 Out-of-Bounds Read and Write Vulnerability Affected: before 137.0.3296.62 |
| CVE-2024-7965 In wildKEV | 8.8 | Aug 21 | Google Chromium V8 Inappropriate Implementation Vulnerability Affected: before 128.0.2739.42 |
| CVE-2023-5217 In wildKEV | 8.8 | Sep 28 | Google Chromium libvpx Heap Buffer Overflow Vulnerability Affected: 116.0.5845.229; 117.0.5938.132 |
| CVE-2023-4863 In wildKEV | 8.8 | Sep 12 | Google Chromium WebP Heap-Based Buffer Overflow Vulnerability Affected: before 116.0.1938.81 |
| CVE-2023-4762 In wildKEV | 8.8 | Sep 5 | Google Chromium V8 Type Confusion Vulnerability Affected: before 116.0.1938.76 |
| CVE-2020-16009 In wildKEV | 8.8 | Nov 3 | Google Chromium V8 Type Confusion Vulnerability Affected: before 86.0.4240.183 |
| CVE-2026-57983 | 10.0 | Jul 3 | Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability Affected: before 150.0.4078.48 |
| CVE-2026-45495 | 9.8 | May 18 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Affected: before 148.0.3967.70 |
| CVE-2024-43566 | 9.8 | Oct 17 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Affected: before 130.0.2849.46 |
| CVE-2026-66321 | 9.6 | Aug 3 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Affected: before 151.0.4129.59 |
| CVE-2024-21326 | 9.6 | Jan 26 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Affected: before 121.0.2277.83 |
| CVE-2023-35618 | 9.6 | Dec 7 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Affected: before 120.0.2210.61 |
| CVE-2023-36735 | 9.6 | Sep 15 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Affected: before 117.0.2045.31 |
| CVE-2022-33649 | 9.6 | Aug 9 | Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability Affected: before 104.0.1293.47 |
| CVE-2021-21132 | 9.6 | Feb 9 | Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted Chrome Extension Affected: before 88.0.705.50 |
| CVE-2021-21124 | 9.6 | Feb 9 | Potential user after free in Speech Recognizer in Google Chrome on Android prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted… Affected: before 88.0.705.50 |
| CVE-2021-21121 | 9.6 | Feb 9 | Use after free in Omnibox in Google Chrome on Linux prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page Affected: before 88.0.705.50 |
| CVE-2024-38219 | 9.0 | Aug 12 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Affected: before 127.0.2651.98 |
| CVE-2026-85893 | 8.8 | Sep 15 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Affected: before 153.0.4234.32 |
| CVE-2026-69486 | 8.8 | Sep 15 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Affected: before 153.0.4234.32 |
| CVE-2026-70341 | 8.8 | Sep 11 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Affected: before 152.0.4191.52 |
| CVE-2026-72984 | 8.8 | Aug 28 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Affected: before 152.0.4191.53 |
| CVE-2026-66326 | 8.8 | Aug 3 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Affected: before 151.0.4129.59 |
| CVE-2026-66312 | 8.8 | Aug 3 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Affected: before 151.0.4129.59 |
| CVE-2026-57981 | 8.8 | Jul 3 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Affected: before 150.0.4078.48 |
| CVE-2026-57974 | 8.8 | Jul 3 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Affected: before 150.0.4078.48 |
| CVE-2026-57985 | 8.8 | Jul 3 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Affected: before 150.0.4078.48 |
| CVE-2026-56645 | 8.8 | Jul 3 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Affected: before 150.0.4078.48 |
| CVE-2025-49713 | 8.8 | Jul 2 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network Affected: before 138.0.3351.65 |
| CVE-2025-25000 | 8.8 | Apr 4 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network Affected: before 135.0.3179.54 |
| CVE-2025-21408 | 8.8 | Feb 6 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Affected: before 133.0.3065.51 |
| CVE-2025-21342 | 8.8 | Feb 6 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Affected: before 133.0.3065.51 |
| CVE-2025-21283 | 8.8 | Feb 6 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Affected: before 133.0.3065.51 |
| CVE-2025-21279 | 8.8 | Feb 6 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Affected: before 133.0.3065.51 |
| CVE-2024-43596 | 8.8 | Oct 17 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Affected: before 130.0.2849.46 |
| CVE-2024-43595 | 8.8 | Oct 17 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Affected: before 130.0.2849.46 |
| CVE-2024-43496 | 8.8 | Sep 19 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Affected: before 129.0.2792.52 |
| CVE-2024-43489 | 8.8 | Sep 19 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Affected: before 129.0.2792.52 |
| CVE-2023-6702 | 8.8 | Dec 14 | Type confusion in V8 in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: before 120.0.2210.77 |
| CVE-2023-36787 | 8.8 | Aug 21 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Affected: before 116.0.1938.54 |
| CVE-2021-31982 | 8.8 | Jul 1 | Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability Affected: before 91.0.864.37 |
| CVE-2022-26899 | 8.8 | Jun 29 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Affected: before 99.0.1150.46 |
| CVE-2021-30624 | 8.8 | Sep 3 | Chromium: CVE-2021-30624 Use after free in Autofill Affected: through 93.0.4577.63 |
| CVE-2021-30623 | 8.8 | Sep 3 | Chromium: CVE-2021-30623 Use after free in Bookmarks Affected: through 93.0.4577.63 |
| CVE-2021-30622 | 8.8 | Sep 3 | Chromium: CVE-2021-30622 Use after free in WebApp Installs Affected: through 93.0.4577.63 |
| CVE-2021-30620 | 8.8 | Sep 3 | Chromium: CVE-2021-30620 Insufficient policy enforcement in Blink Affected: through 93.0.4577.63 |
| CVE-2021-30618 | 8.8 | Sep 3 | Chromium: CVE-2021-30618 Inappropriate implementation in DevTools Affected: through 93.0.4577.63 |
