EC
Product
Edge Chromium
On CISA KEVExploited in the wild
309
CVEs
9
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 14High 141Medium 145Low 9
Watch
Add Edge Chromium to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-14174 In wildKEV | 8.8 | Dec 12 | Google Chromium Out of Bounds Memory Access Vulnerability Affected: before 143.0.3650.80 |
| CVE-2025-5419 In wildKEV | 8.8 | Jun 2 | Google Chromium V8 Out-of-Bounds Read and Write Vulnerability Affected: before 137.0.3296.62 |
| CVE-2024-7965 In wildKEV | 8.8 | Aug 21 | Google Chromium V8 Inappropriate Implementation Vulnerability Affected: before 128.0.2739.42 |
| CVE-2023-5217 In wildKEV | 8.8 | Sep 28 | Google Chromium libvpx Heap Buffer Overflow Vulnerability Affected: 116.0.5845.229; 117.0.5938.132 |
| CVE-2023-4863 In wildKEV | 8.8 | Sep 12 | Google Chromium WebP Heap-Based Buffer Overflow Vulnerability Affected: before 116.0.1938.81 |
| CVE-2023-4762 In wildKEV | 8.8 | Sep 5 | Google Chromium V8 Type Confusion Vulnerability Affected: before 116.0.1938.76 |
| CVE-2020-16009 In wildKEV | 8.8 | Nov 3 | Google Chromium V8 Type Confusion Vulnerability Affected: before 86.0.4240.183 |
| CVE-2026-85893 | 8.8 | Sep 15 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Affected: before 153.0.4234.32 |
| CVE-2026-69486 | 8.8 | Sep 15 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Affected: before 153.0.4234.32 |
| CVE-2026-70341 | 8.8 | Sep 11 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Affected: before 152.0.4191.52 |
| CVE-2026-72984 | 8.8 | Aug 28 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Affected: before 152.0.4191.53 |
| CVE-2026-66326 | 8.8 | Aug 3 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Affected: before 151.0.4129.59 |
| CVE-2026-66312 | 8.8 | Aug 3 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Affected: before 151.0.4129.59 |
| CVE-2026-57981 | 8.8 | Jul 3 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Affected: before 150.0.4078.48 |
| CVE-2026-57974 | 8.8 | Jul 3 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Affected: before 150.0.4078.48 |
| CVE-2026-57985 | 8.8 | Jul 3 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Affected: before 150.0.4078.48 |
| CVE-2026-56645 | 8.8 | Jul 3 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Affected: before 150.0.4078.48 |
| CVE-2025-49713 | 8.8 | Jul 2 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network Affected: before 138.0.3351.65 |
| CVE-2025-25000 | 8.8 | Apr 4 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network Affected: before 135.0.3179.54 |
| CVE-2025-21408 | 8.8 | Feb 6 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Affected: before 133.0.3065.51 |
| CVE-2025-21342 | 8.8 | Feb 6 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Affected: before 133.0.3065.51 |
| CVE-2025-21283 | 8.8 | Feb 6 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Affected: before 133.0.3065.51 |
| CVE-2025-21279 | 8.8 | Feb 6 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Affected: before 133.0.3065.51 |
| CVE-2024-43596 | 8.8 | Oct 17 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Affected: before 130.0.2849.46 |
| CVE-2024-43595 | 8.8 | Oct 17 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Affected: before 130.0.2849.46 |
| CVE-2024-43496 | 8.8 | Sep 19 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Affected: before 129.0.2792.52 |
| CVE-2024-43489 | 8.8 | Sep 19 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Affected: before 129.0.2792.52 |
| CVE-2023-6702 | 8.8 | Dec 14 | Type confusion in V8 in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: before 120.0.2210.77 |
| CVE-2023-36787 | 8.8 | Aug 21 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Affected: before 116.0.1938.54 |
| CVE-2021-31982 | 8.8 | Jul 1 | Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability Affected: before 91.0.864.37 |
| CVE-2022-26899 | 8.8 | Jun 29 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Affected: before 99.0.1150.46 |
| CVE-2021-30624 | 8.8 | Sep 3 | Chromium: CVE-2021-30624 Use after free in Autofill Affected: through 93.0.4577.63 |
| CVE-2021-30623 | 8.8 | Sep 3 | Chromium: CVE-2021-30623 Use after free in Bookmarks Affected: through 93.0.4577.63 |
| CVE-2021-30622 | 8.8 | Sep 3 | Chromium: CVE-2021-30622 Use after free in WebApp Installs Affected: through 93.0.4577.63 |
| CVE-2021-30620 | 8.8 | Sep 3 | Chromium: CVE-2021-30620 Insufficient policy enforcement in Blink Affected: through 93.0.4577.63 |
| CVE-2021-30618 | 8.8 | Sep 3 | Chromium: CVE-2021-30618 Inappropriate implementation in DevTools Affected: through 93.0.4577.63 |
| CVE-2021-30616 | 8.8 | Sep 3 | Chromium: CVE-2021-30616 Use after free in Media Affected: through 93.0.4577.63 |
| CVE-2021-30614 | 8.8 | Sep 3 | Chromium: CVE-2021-30614 Heap buffer overflow in TabStrip Affected: through 93.0.4577.63 |
| CVE-2021-30613 | 8.8 | Sep 3 | Chromium: CVE-2021-30613 Use after free in Base internals Affected: through 93.0.4577.63 |
| CVE-2021-30612 | 8.8 | Sep 3 | Chromium: CVE-2021-30612 Use after free in WebRTC Affected: through 93.0.4577.63 |
| CVE-2021-30611 | 8.8 | Sep 3 | Chromium: CVE-2021-30611 Use after free in WebRTC Affected: through 93.0.4577.63 |
| CVE-2021-30610 | 8.8 | Sep 3 | Chromium: CVE-2021-30610 Use after free in Extensions API Affected: through 93.0.4577.63 |
| CVE-2021-30609 | 8.8 | Sep 3 | Chromium: CVE-2021-30609 Use after free in Sign-In Affected: through 93.0.4577.63 |
| CVE-2021-30608 | 8.8 | Sep 3 | Chromium: CVE-2021-30608 Use after free in Web Share Affected: through 93.0.4577.63 |
| CVE-2021-30607 | 8.8 | Sep 3 | Chromium: CVE-2021-30607 Use after free in Permissions Affected: through 93.0.4577.63 |
| CVE-2021-30606 | 8.8 | Sep 3 | Chromium: CVE-2021-30606 Use after free in Blink Affected: through 93.0.4577.63 |
| CVE-2021-21157 | 8.8 | Feb 22 | Use after free in Web Sockets in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: before 88.0.4324.182 |
| CVE-2021-21128 | 8.8 | Feb 9 | Heap buffer overflow in Blink in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: before 88.0.705.50 |
| CVE-2021-21127 | 8.8 | Feb 9 | Insufficient policy enforcement in extensions in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass content security policy via a crafted Chrome Extension Affected: before 88.0.705.50 |
| CVE-2021-21122 | 8.8 | Feb 9 | Use after free in Blink in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: before 88.0.705.50 |
