ME
Product
Microsoft Edge (EdgeHTML-based)
On CISA KEVExploited in the wildRansomware-linked
760
CVEs
12
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 9High 489Medium 2Low 0
Watch
Add Microsoft Edge (EdgeHTML-based) to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-5217 In wildKEV | 8.8 | Sep 28 | Google Chromium libvpx Heap Buffer Overflow Vulnerability Affected: 116.0.1938.98; 117.0.2045.47 |
| CVE-2021-26411 RansomwareIn wildKEV | 8.8 | Mar 11 | Internet Explorer Memory Corruption Vulnerability Affected: All versions, or not specified |
| CVE-2020-16009 In wildKEV | 8.8 | Nov 3 | Google Chromium V8 Type Confusion Vulnerability Affected: before 86.0.622.63 |
| CVE-2016-7200 In wildKEV | 8.8 | Nov 10 | The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site,… Affected: All versions, or not specified |
| CVE-2016-7201 In wildKEV | 8.8 | Nov 10 | The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site,… Affected: All versions, or not specified |
| CVE-2017-0037 In wildKEV | 8.1 | Feb 26 | Microsoft Edge and Internet Explorer Type Confusion Vulnerability Affected: All versions, or not specified |
| CVE-2026-70341 | 8.8 | Sep 11 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Affected: before 152.0.4191.52; before 152.0.4191.52 |
| CVE-2021-30624 | 8.8 | Sep 3 | Chromium: CVE-2021-30624 Use after free in Autofill Affected: through 93.0.961.38 |
| CVE-2021-30623 | 8.8 | Sep 3 | Chromium: CVE-2021-30623 Use after free in Bookmarks Affected: through 93.0.961.38 |
| CVE-2021-30622 | 8.8 | Sep 3 | Chromium: CVE-2021-30622 Use after free in WebApp Installs Affected: through 93.0.961.38 |
| CVE-2021-30620 | 8.8 | Sep 3 | Chromium: CVE-2021-30620 Insufficient policy enforcement in Blink Affected: through 93.0.961.38 |
| CVE-2021-30618 | 8.8 | Sep 3 | Chromium: CVE-2021-30618 Inappropriate implementation in DevTools Affected: through 93.0.961.38 |
| CVE-2021-30616 | 8.8 | Sep 3 | Chromium: CVE-2021-30616 Use after free in Media Affected: through 93.0.961.38 |
| CVE-2021-30614 | 8.8 | Sep 3 | Chromium: CVE-2021-30614 Heap buffer overflow in TabStrip Affected: through 93.0.961.38 |
| CVE-2021-30613 | 8.8 | Sep 3 | Chromium: CVE-2021-30613 Use after free in Base internals Affected: through 93.0.961.38 |
| CVE-2021-30612 | 8.8 | Sep 3 | Chromium: CVE-2021-30612 Use after free in WebRTC Affected: through 93.0.961.38 |
| CVE-2021-30611 | 8.8 | Sep 3 | Chromium: CVE-2021-30611 Use after free in WebRTC Affected: through 93.0.961.38 |
| CVE-2021-30610 | 8.8 | Sep 3 | Chromium: CVE-2021-30610 Use after free in Extensions API Affected: through 93.0.961.38 |
| CVE-2021-30609 | 8.8 | Sep 3 | Chromium: CVE-2021-30609 Use after free in Sign-In Affected: through 93.0.961.38 |
| CVE-2021-30608 | 8.8 | Sep 3 | Chromium: CVE-2021-30608 Use after free in Web Share Affected: through 93.0.961.38 |
| CVE-2021-30607 | 8.8 | Sep 3 | Chromium: CVE-2021-30607 Use after free in Permissions Affected: through 93.0.961.38 |
| CVE-2021-30606 | 8.8 | Sep 3 | Chromium: CVE-2021-30606 Use after free in Blink Affected: through 93.0.961.38 |
| CVE-2021-21157 | 8.8 | Feb 22 | Use after free in Web Sockets in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: before 88.0.705.74 |
| CVE-2020-1555 | 8.8 | Aug 17 | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based) Affected: All versions, or not specified |
| CVE-2020-0816 | 8.8 | Mar 12 | A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft Edge Memory Corruption Vulnerability' Affected: All versions, or not specified |
| CVE-2019-1140 | 8.8 | Aug 14 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based) Affected: All versions, or not specified |
| CVE-2019-0566 | 8.8 | Jan 8 | An elevation of privilege vulnerability exists in Microsoft Edge Browser Broker COM object, aka "Microsoft Edge Elevation of Privilege Vulnerability." This affects Microsoft Edge Affected: All versions, or not specified |
| CVE-2017-8660 | 8.8 | Sep 13 | Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way… Affected: All versions, or not specified |
| CVE-2017-8503 | 8.8 | Aug 8 | Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to escape from the AppContainer sandbox, aka "Microsoft Edge Elevation of… Affected: All versions, or not specified |
| CVE-2017-0002 | 8.8 | Jan 10 | Microsoft Edge allows remote attackers to bypass the Same Origin Policy via vectors involving the about:blank URL and data: URLs, aka "Microsoft Edge Elevation of Privilege… Affected: All versions, or not specified |
| CVE-2016-3297 | 8.8 | Sep 14 | Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Affected: All versions, or not specified |
| CVE-2016-3269 | 8.8 | Jul 13 | The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka… Affected: All versions, or not specified |
| CVE-2016-3265 | 8.8 | Jul 13 | The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka… Affected: All versions, or not specified |
| CVE-2016-3260 | 8.8 | Jul 13 | The Microsoft (1) JScript 9, (2) VBScript, and (3) Chakra JavaScript engines, as used in Microsoft Internet Explorer 11, Microsoft Edge, and other products, allow remote attackers… Affected: All versions, or not specified |
| CVE-2016-3259 | 8.8 | Jul 13 | The Microsoft (1) JScript 9, (2) VBScript, and (3) Chakra JavaScript engines, as used in Microsoft Internet Explorer 9 through 11, Microsoft Edge, and other products, allow remote… Affected: All versions, or not specified |
| CVE-2016-3248 | 8.8 | Jul 13 | The Microsoft (1) JScript 9, (2) VBScript, and (3) Chakra JavaScript engines, as used in Microsoft Internet Explorer 9 through 11, Microsoft Edge, and other products, allow remote… Affected: All versions, or not specified |
| CVE-2016-3222 | 8.8 | Jun 16 | Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Edge Memory Corruption… Affected: All versions, or not specified |
| CVE-2016-3214 | 8.8 | Jun 16 | The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka… Affected: All versions, or not specified |
| CVE-2016-3199 | 8.8 | Jun 16 | The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka… Affected: All versions, or not specified |
| CVE-2016-0084 | 8.8 | Feb 10 | Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Edge Memory Corruption… Affected: All versions, or not specified |
| CVE-2016-0062 | 8.8 | Feb 10 | Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka… Affected: All versions, or not specified |
| CVE-2016-0061 | 8.8 | Feb 10 | Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Affected: All versions, or not specified |
| CVE-2016-0060 | 8.8 | Feb 10 | Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Affected: All versions, or not specified |
| CVE-2016-0024 | 8.8 | Jan 13 | The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via unspecified vectors, aka "Scripting Engine Memory Corruption Vulnerability." Affected: All versions, or not specified |
| CVE-2022-44708 | 8.3 | Dec 13 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Affected: before 108.0.1462.42 |
| CVE-2018-8357 | 8.3 | Aug 15 | An elevation of privilege vulnerability exists in Microsoft browsers allowing sandbox escape, aka "Microsoft Browser Elevation of Privilege Vulnerability." This affects Internet… Affected: All versions, or not specified |
| CVE-2017-0233 | 8.3 | May 12 | An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser, aka "Microsoft Edge Elevation… Affected: All versions, or not specified |
| CVE-2020-1073 | 8.1 | Jun 9 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability' Affected: All versions, or not specified |
| CVE-2019-0649 | 8.1 | Mar 5 | A vulnerability exists in Microsoft Chakra JIT server, aka 'Scripting Engine Elevation of Privileged Vulnerability' Affected: All versions, or not specified |
| CVE-2017-0152 | 8.1 | Jul 17 | A remote code execution vulnerability exists in the way affected Microsoft scripting engine render when handling objects in memory in Microsoft browsers Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)