Edge Chromium vulnerabilities | LiveThreat CVE Feed

Product

Edge Chromium

by Microsoft · last CVE Sep 18, 2026

On CISA KEVExploited in the wild

309

CVEs

On KEV

10.0

Max CVSS

New 30D

Vulnerabilities309 In the news5 Timeline

Severity mix

Critical 14High 141Medium 145Low 9

Severity

All severities309 Critical14 High141 Medium145 Low9

Exploitation

On CISA KEV9 Exploited in the wild9

Watch

Add Edge Chromium to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-57977	7.1	1%	Jul 3	Microsoft Edge (Chromium-based) Spoofing Vulnerability Affected: before 150.0.4078.48
CVE-2026-57988	7.1	1%	Jul 3	Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Affected: before 150.0.4078.48
CVE-2026-21223	7.1	0%	Jan 16	Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability Affected: before 144.0.3719.82
CVE-2023-36024	7.1	1%	Nov 10	Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Affected: before 118.0.2088.102; before 119.0.2151.58
CVE-2023-36562	7.1	1%	Sep 15	Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Affected: before 117.0.2045.31
CVE-2026-58286	6.9	0%	Jul 3	Microsoft Edge (Chromium-based) Spoofing Vulnerability Affected: before 150.0.4078.48
CVE-2026-58283	6.9	0%	Jul 3	Microsoft Edge (Chromium-based) Spoofing Vulnerability Affected: before 150.0.4078.48
CVE-2026-58282	6.9	0%	Jul 3	Microsoft Edge (Chromium-based) Spoofing Vulnerability Affected: before 150.0.4078.48
CVE-2026-66313	6.8	0%	Aug 3	Microsoft Edge (Chromium-based) Tampering Vulnerability Affected: before 151.0.4129.59
CVE-2023-36008	6.6	1%	Nov 16	Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Affected: before 119.0.2151.72
CVE-2023-36022	6.6	1%	Nov 3	Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Affected: before 118.0.2088.88; before 119.0.2151.44
CVE-2022-41115	6.6	2%	Dec 13	Microsoft Edge (Chromium-based) Update Elevation of Privilege Vulnerability Affected: before 108.0.1462.41
CVE-2026-66324	6.5	1%	Aug 28	Microsoft Edge (Chromium-based) Spoofing Vulnerability Affected: before 152.0.4191.53
CVE-2026-58523	6.5	1%	Jul 3	Microsoft Edge for Android Security Feature Bypass Vulnerability Affected: before 150.0.4078.48
CVE-2026-45489	6.5	1%	Jul 3	Microsoft Edge (Chromium-based) Spoofing Vulnerability Affected: before 150.0.4078.48
CVE-2026-56646	6.5	1%	Jul 3	Microsoft Edge (Chromium-based) Spoofing Vulnerability Affected: before 150.0.4078.48
CVE-2026-57987	6.5	1%	Jul 3	Microsoft Edge (Chromium-based) Spoofing Vulnerability Affected: before 150.0.4078.48
CVE-2026-42891	6.5	0%	May 12	Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability Affected: before 148.0.3967.55
CVE-2026-0391	6.5	1%	Feb 5	Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability Affected: before 143.0.3650.66
CVE-2025-47963	6.5	1%	Jul 11	No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network Affected: before 138.0.3351.55
CVE-2025-29825	6.5	1%	May 2	User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network Affected: before 136.0.3240.50
CVE-2025-29806	6.5	1%	Mar 23	No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network Affected: before 129.0.2792.52
CVE-2025-21185	6.5	1%	Jan 17	Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Affected: before 132.0.2957.115
CVE-2024-29987	6.5	1%	Apr 18	Microsoft Edge (Chromium-based) Information Disclosure Vulnerability Affected: before 124.0.2478.51
CVE-2024-21388	6.5	32%	Jan 30	Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Affected: before 121.0.2277.83
CVE-2023-36409	6.5	1%	Nov 7	Microsoft Edge (Chromium-based) Information Disclosure Vulnerability Affected: before 118.0.2088.46
CVE-2023-38157	6.5	2%	Aug 7	Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability Affected: before 115.0.1901.200
CVE-2023-38187	6.5	1%	Jul 21	Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Affected: before 115.0.1901.183
CVE-2023-33145	6.5	9%	Jun 14	Microsoft Edge (Chromium-based) Information Disclosure Vulnerability Affected: before 114.0.1823.51
CVE-2023-21719	6.5	2%	Jan 24	Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability Affected: before 109.0.1518.70
CVE-2021-30621	6.5	3%	Sep 3	Chromium: CVE-2021-30621 UI Spoofing in Autofill Affected: through 93.0.4577.63
CVE-2021-30619	6.5	3%	Sep 3	Chromium: CVE-2021-30619 UI Spoofing in Autofill Affected: through 93.0.4577.63
CVE-2021-30617	6.5	4%	Sep 3	Chromium: CVE-2021-30617 Policy bypass in Blink Affected: through 93.0.4577.63
CVE-2021-30615	6.5	6%	Sep 3	Chromium: CVE-2021-30615 Cross-origin data leak in Navigation Affected: through 93.0.4577.63
CVE-2021-21139	6.5	5%	Feb 9	Inappropriate implementation in iframe sandbox in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page Affected: before 88.0.705.50
CVE-2021-21137	6.5	6%	Feb 9	Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to obtain potentially sensitive information from disk via a crafted HTML… Affected: before 88.0.705.50
CVE-2021-21136	6.5	4%	Feb 9	Insufficient policy enforcement in WebView in Google Chrome on Android prior to 88.0.4324.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page Affected: before 88.0.705.50
CVE-2021-21135	6.5	19%	Feb 9	Inappropriate implementation in Performance API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page Affected: before 88.0.705.50
CVE-2021-21134	6.5	5%	Feb 9	Incorrect security UI in Page Info in Google Chrome on iOS prior to 88.0.4324.96 allowed a remote attacker to spoof security UI via a crafted HTML page Affected: before 88.0.705.50
CVE-2021-21133	6.5	3%	Feb 9	Insufficient policy enforcement in Downloads in Google Chrome prior to 88.0.4324.96 allowed an attacker who convinced a user to download files to bypass navigation restrictions… Affected: before 88.0.705.50
CVE-2021-21131	6.5	8%	Feb 9	Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page Affected: before 88.0.705.50
CVE-2021-21130	6.5	5%	Feb 9	Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page Affected: before 88.0.705.50
CVE-2021-21129	6.5	5%	Feb 9	Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page Affected: before 88.0.705.50
CVE-2021-21126	6.5	9%	Feb 9	Insufficient policy enforcement in extensions in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass site isolation via a crafted Chrome Extension Affected: before 88.0.705.50
CVE-2021-21123	6.5	11%	Feb 9	Insufficient data validation in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page Affected: before 88.0.705.50
CVE-2021-38669	6.4	3%	Sep 15	Microsoft Edge (Chromium-based) Tampering Vulnerability Affected: before 93.04577.63
CVE-2025-60711	6.3	0%	Oct 31	Protection mechanism failure in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network Affected: before 142.0.3595.53
CVE-2024-38207	6.3	0%	Aug 23	Microsoft Edge (HTML-based) Memory Corruption Vulnerability Affected: before 128.0.2739.42
CVE-2024-20675	6.3	0%	Jan 11	Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability Affected: before 120.0.2210.133
CVE-2023-36027	6.3	1%	Nov 10	Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Affected: before 118.0.2088.102; before 119.0.2151.58