ME
Product
Microsoft Edge (EdgeHTML-based)
by Microsoft · last CVE Sep 11, 2026
On CISA KEVExploited in the wildRansomware-linked
760
CVEs
12
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 9High 489Medium 2Low 0
Watch

Add Microsoft Edge (EdgeHTML-based) to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2015-0313
In wildKEV
9.8
95%
Feb 2
Adobe Flash Player Use-After-Free Vulnerability
Affected: All versions, or not specified
CVE-2015-0311
In wildKEV
9.8
86%
Jan 23
Adobe Flash Player Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2024-7971
In wildKEV
9.6
21%
Aug 21
Google Chromium V8 Type Confusion Vulnerability
Affected: before 128.0.2739.42
CVE-2022-4135
In wildKEV
9.6
32%
Nov 25
Google Chromium GPU Heap Buffer Overflow Vulnerability
Affected: before 107.0.1418.62
CVE-2017-0028
9.8
19%
Jul 17
A remote code execution vulnerability exists when Microsoft scripting engine improperly accesses objects in memory
Affected: All versions, or not specified
CVE-2017-0252
9.8
13%
May 15
A remote code execution vulnerability exists in Microsoft Chakra Core in the way JavaScript engines render when handling objects in memory
Affected: All versions, or not specified
CVE-2017-0223
9.8
15%
May 15
A remote code execution vulnerability exists in Microsoft Chakra Core in the way JavaScript engines render when handling objects in memory
Affected: All versions, or not specified
CVE-2016-0003
9.6
38%
Jan 13
Microsoft Edge allows remote attackers to execute arbitrary code via unspecified vectors, aka "Microsoft Edge Memory Corruption Vulnerability."
Affected: All versions, or not specified
CVE-2019-0938
9.0
3%
May 16
An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser, aka 'Microsoft Edge Elevation…
Affected: All versions, or not specified
Showing 9
The 500 most important CVEs for this product (exploited first, then by severity)