ME
Product
Microsoft Edge (EdgeHTML-based)
by Microsoft · last CVE Sep 11, 2026
On CISA KEVExploited in the wildRansomware-linked
760
CVEs
12
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 9High 489Medium 2Low 0
Watch

Add Microsoft Edge (EdgeHTML-based) to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2016-0084
8.8
17%
Feb 10
Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Edge Memory Corruption…
Affected: All versions, or not specified
CVE-2016-0062
8.8
21%
Feb 10
Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka…
Affected: All versions, or not specified
CVE-2016-0061
8.8
21%
Feb 10
Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web…
Affected: All versions, or not specified
CVE-2016-0060
8.8
27%
Feb 10
Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web…
Affected: All versions, or not specified
CVE-2016-0024
8.8
17%
Jan 13
The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via unspecified vectors, aka "Scripting Engine Memory Corruption Vulnerability."
Affected: All versions, or not specified
CVE-2022-44708
8.3
2%
Dec 13
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Affected: before 108.0.1462.42
CVE-2018-8357
8.3
8%
Aug 15
An elevation of privilege vulnerability exists in Microsoft browsers allowing sandbox escape, aka "Microsoft Browser Elevation of Privilege Vulnerability." This affects Internet…
Affected: All versions, or not specified
CVE-2017-0233
8.3
3%
May 12
An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser, aka "Microsoft Edge Elevation…
Affected: All versions, or not specified
CVE-2020-1073
8.1
9%
Jun 9
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'
Affected: All versions, or not specified
CVE-2019-0649
8.1
4%
Mar 5
A vulnerability exists in Microsoft Chakra JIT server, aka 'Scripting Engine Elevation of Privileged Vulnerability'
Affected: All versions, or not specified
CVE-2017-0152
8.1
11%
Jul 17
A remote code execution vulnerability exists in the way affected Microsoft scripting engine render when handling objects in memory in Microsoft browsers
Affected: All versions, or not specified
CVE-2024-41879
7.8
0%
Aug 26
Acrobat Reader versions 127.0.2651.105 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current…
Affected: before 128.0.2739.42
CVE-2020-1569
7.8
3%
Aug 17
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory
Affected: All versions, or not specified
CVE-2016-3203
7.8
33%
Jun 16
Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 Gold and 1511, and Microsoft Edge allow remote attackers to execute arbitrary code via a crafted PDF document,…
Affected: All versions, or not specified
CVE-2020-17058
7.5
3%
Nov 11
Microsoft Browser Memory Corruption Vulnerability
Affected: All versions, or not specified
CVE-2020-17052
7.5
3%
Nov 11
Scripting Engine Memory Corruption Vulnerability
Affected: All versions, or not specified
CVE-2020-1568
7.5
3%
Aug 17
A remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory
Affected: All versions, or not specified
CVE-2020-1219
7.5
19%
Jun 9
A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka 'Microsoft Browser Memory Corruption Vulnerability'
Affected: All versions, or not specified
CVE-2020-0970
7.5
13%
Apr 15
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'
Affected: All versions, or not specified
CVE-2020-0969
7.5
13%
Apr 15
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based), aka 'Chakra Scripting Engine…
Affected: All versions, or not specified
CVE-2020-0848
7.5
10%
Mar 12
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'
Affected: All versions, or not specified
CVE-2020-0831
7.5
9%
Mar 12
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'
Affected: All versions, or not specified
CVE-2020-0830
7.5
9%
Mar 12
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption…
Affected: All versions, or not specified
CVE-2020-0829
7.5
9%
Mar 12
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'
Affected: All versions, or not specified
CVE-2020-0828
7.5
9%
Mar 12
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'
Affected: All versions, or not specified
CVE-2020-0827
7.5
13%
Mar 12
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'
Affected: All versions, or not specified
CVE-2020-0826
7.5
9%
Mar 12
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'
Affected: All versions, or not specified
CVE-2020-0825
7.5
13%
Mar 12
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'
Affected: All versions, or not specified
CVE-2020-0823
7.5
9%
Mar 12
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'
Affected: All versions, or not specified
CVE-2020-0813
7.5
5%
Mar 12
An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an attacker with information to further compromise…
Affected: All versions, or not specified
CVE-2020-0812
7.5
8%
Mar 12
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based)L, aka 'Chakra Scripting Engine…
Affected: All versions, or not specified
CVE-2020-0811
7.5
8%
Mar 12
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based)L, aka 'Chakra Scripting Engine…
Affected: All versions, or not specified
CVE-2020-0768
7.5
9%
Mar 12
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption…
Affected: All versions, or not specified
CVE-2020-0767
7.5
18%
Feb 11
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'
Affected: All versions, or not specified
CVE-2020-0713
7.5
10%
Feb 11
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'
Affected: All versions, or not specified
CVE-2020-0712
7.5
10%
Feb 11
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'
Affected: All versions, or not specified
CVE-2020-0711
7.5
10%
Feb 11
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'
Affected: All versions, or not specified
CVE-2020-0710
7.5
10%
Feb 11
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'
Affected: All versions, or not specified
CVE-2019-1428
7.5
10%
Nov 12
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based), aka 'Scripting Engine Memory Corruption…
Affected: All versions, or not specified
CVE-2019-1427
7.5
10%
Nov 12
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based), aka 'Scripting Engine Memory Corruption…
Affected: All versions, or not specified
CVE-2019-1426
7.5
10%
Nov 12
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based), aka 'Scripting Engine Memory Corruption…
Affected: All versions, or not specified
CVE-2019-1366
7.5
10%
Oct 10
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory…
Affected: All versions, or not specified
CVE-2019-1335
7.5
10%
Oct 10
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory…
Affected: All versions, or not specified
CVE-2019-1308
7.5
10%
Oct 10
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory…
Affected: All versions, or not specified
CVE-2019-1307
7.5
10%
Oct 10
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory…
Affected: All versions, or not specified
CVE-2019-1300
7.5
9%
Sep 11
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory…
Affected: All versions, or not specified
CVE-2019-1298
7.5
9%
Sep 11
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory…
Affected: All versions, or not specified
CVE-2019-1237
7.5
9%
Sep 11
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory…
Affected: All versions, or not specified
CVE-2019-1217
7.5
9%
Sep 11
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory…
Affected: All versions, or not specified
CVE-2019-1138
7.5
9%
Sep 11
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory…
Affected: All versions, or not specified
Page 2 of 10 · 500 total
The 500 most important CVEs for this product (exploited first, then by severity)