Total
311 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-58596 | 1 Microsoft | 1 Edge Chromium | 2026-10-24 | N/A | 8.3 HIGH |
| Untrusted pointer dereference in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network. | |||||
| CVE-2026-57980 | 1 Microsoft | 1 Edge Chromium | 2026-10-24 | N/A | 5.4 MEDIUM |
| Authentication bypass using an alternate path or channel in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering over a network. | |||||
| CVE-2026-70339 | 1 Microsoft | 1 Edge Chromium | 2026-10-24 | N/A | 5.4 MEDIUM |
| Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | |||||
| CVE-2026-57990 | 1 Microsoft | 1 Edge Chromium | 2026-10-24 | N/A | 7.4 HIGH |
| Files or directories accessible to external parties in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network. | |||||
| CVE-2026-57978 | 1 Microsoft | 1 Edge Chromium | 2026-10-24 | N/A | 5.4 MEDIUM |
| Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. | |||||
| CVE-2026-57989 | 1 Microsoft | 1 Edge Chromium | 2026-10-24 | N/A | 7.4 HIGH |
| Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network. | |||||
| CVE-2026-66326 | 1 Microsoft | 1 Edge Chromium | 2026-10-23 | N/A | 6.5 MEDIUM |
| Missing authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | |||||
| CVE-2026-66312 | 1 Microsoft | 1 Edge Chromium | 2026-10-23 | N/A | 6.5 MEDIUM |
| Buffer over-read in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network. | |||||
| CVE-2026-66316 | 1 Microsoft | 1 Edge Chromium | 2026-10-23 | N/A | 5.4 MEDIUM |
| Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. | |||||
| CVE-2026-66314 | 1 Microsoft | 1 Edge Chromium | 2026-10-23 | N/A | 6.5 MEDIUM |
| Time-of-check time-of-use (toctou) race condition in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network. | |||||
| CVE-2026-66317 | 1 Microsoft | 1 Edge Chromium | 2026-10-23 | N/A | 5.4 MEDIUM |
| Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering over a network. | |||||
| CVE-2026-65802 | 2 Google, Microsoft | 2 Android, Edge Chromium | 2026-10-23 | N/A | 7.4 HIGH |
| External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information over a network. | |||||
| CVE-2026-66315 | 1 Microsoft | 1 Edge Chromium | 2026-10-23 | N/A | 7.5 HIGH |
| Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | |||||
| CVE-2026-66311 | 1 Microsoft | 1 Edge Chromium | 2026-10-23 | N/A | 6.2 MEDIUM |
| Missing authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering locally. | |||||
| CVE-2026-66313 | 1 Microsoft | 1 Edge Chromium | 2026-10-23 | N/A | 6.8 MEDIUM |
| Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering locally. | |||||
| CVE-2026-66318 | 1 Microsoft | 1 Edge Chromium | 2026-10-23 | N/A | 8.1 HIGH |
| Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network. | |||||
| CVE-2026-66325 | 1 Microsoft | 1 Edge Chromium | 2026-10-23 | N/A | 6.1 MEDIUM |
| Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. | |||||
| CVE-2026-66322 | 1 Microsoft | 1 Edge Chromium | 2026-10-23 | N/A | 7.1 HIGH |
| Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. | |||||
| CVE-2026-66321 | 1 Microsoft | 1 Edge Chromium | 2026-10-23 | N/A | 7.4 HIGH |
| Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | |||||
| CVE-2026-65804 | 1 Microsoft | 1 Edge Chromium | 2026-10-23 | N/A | 6.1 MEDIUM |
| Improper control of generation of code ('code injection') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. | |||||