Total
311 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-85893 | 1 Microsoft | 1 Edge Chromium | 2026-10-30 | N/A | 8.8 HIGH |
| Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | |||||
| CVE-2026-70341 | 3 Apple, Linux, Microsoft | 4 Macos, Linux Kernel, Edge and 1 more | 2026-10-28 | N/A | 8.5 HIGH |
| Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network. | |||||
| CVE-2026-66798 | 1 Microsoft | 1 Edge Chromium | 2026-10-28 | N/A | 4.3 MEDIUM |
| Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | |||||
| CVE-2026-66324 | 1 Microsoft | 1 Edge Chromium | 2026-10-28 | N/A | 6.5 MEDIUM |
| External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. | |||||
| CVE-2026-66323 | 1 Microsoft | 1 Edge Chromium | 2026-10-28 | N/A | 5.4 MEDIUM |
| Improper neutralization of parameter/argument delimiters in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | |||||
| CVE-2026-62904 | 1 Microsoft | 1 Edge Chromium | 2026-10-28 | N/A | 5.4 MEDIUM |
| Incorrect authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network. | |||||
| CVE-2026-58616 | 1 Microsoft | 1 Edge Chromium | 2026-10-28 | N/A | 4.4 MEDIUM |
| Concurrent execution using shared resource with improper synchronization ('race condition') in Copilot Chat (Microsoft Edge) allows an authorized attacker to disclose information over a network. | |||||
| CVE-2026-42838 | 1 Microsoft | 1 Edge Chromium | 2026-10-26 | N/A | 5.4 MEDIUM |
| Improper neutralization of special elements in output used by a downstream component ('injection') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network. | |||||
| CVE-2026-42891 | 1 Microsoft | 1 Edge Chromium | 2026-10-26 | N/A | 6.5 MEDIUM |
| User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. | |||||
| CVE-2026-45173 | 4 Google, Microsoft, Mozilla and 1 more | 4 Chrome, Edge Chromium, Firefox and 1 more | 2026-10-26 | N/A | 6.5 MEDIUM |
| Idira Identity Browser Extension (Chrome, Firefox, and Edge builds) versions prior to 26.8.1 exhibit an origin validation flaw within its internal web-page verification routines. If an authenticated user navigates to a specially crafted webpage, this interaction could potentially allow a remote attacker to trigger unauthorized application interaction or execution parameters within the context of that authenticated browser session. CyberArk Security Bulletin: CA26-21 | |||||
| CVE-2026-41107 | 1 Microsoft | 1 Edge Chromium | 2026-10-26 | N/A | 7.4 HIGH |
| External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network. | |||||
| CVE-2026-40416 | 1 Microsoft | 1 Edge Chromium | 2026-10-26 | N/A | 4.3 MEDIUM |
| User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. | |||||
| CVE-2026-33118 | 1 Microsoft | 1 Edge Chromium | 2026-10-25 | N/A | 4.3 MEDIUM |
| User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. | |||||
| CVE-2026-32208 | 1 Microsoft | 1 Edge Chromium | 2026-10-25 | N/A | 8.8 HIGH |
| Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Entra ID allows an authorized attacker to perform spoofing over a network. | |||||
| CVE-2026-58525 | 1 Microsoft | 1 Edge Chromium | 2026-10-25 | N/A | 8.2 HIGH |
| Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network. | |||||
| CVE-2026-50521 | 1 Microsoft | 1 Edge Chromium | 2026-10-25 | N/A | 8.3 HIGH |
| Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network. | |||||
| CVE-2026-58292 | 1 Microsoft | 1 Edge Chromium | 2026-10-25 | N/A | 7.5 HIGH |
| Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | |||||
| CVE-2026-58287 | 1 Microsoft | 1 Edge Chromium | 2026-10-25 | N/A | 8.3 HIGH |
| Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | |||||
| CVE-2026-45488 | 1 Microsoft | 1 Edge Chromium | 2026-10-25 | N/A | 5.4 MEDIUM |
| User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. | |||||
| CVE-2026-58288 | 1 Microsoft | 1 Edge Chromium | 2026-10-25 | N/A | 8.3 HIGH |
| Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | |||||