Vulnerabilities > Microsoft > Edge

DATE CVE VULNERABILITY TITLE RISK
2024-09-12 CVE-2024-38222 Unspecified vulnerability in Microsoft Edge
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
network
low complexity
microsoft
6.5
2024-08-26 CVE-2024-41879 Out-of-bounds Write vulnerability in multiple products
Acrobat Reader versions 127.0.2651.105 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.
local
low complexity
adobe microsoft CWE-787
7.8
2024-08-22 CVE-2024-38208 Cross-site Scripting vulnerability in Microsoft Edge
Microsoft Edge for Android Spoofing Vulnerability
network
low complexity
microsoft CWE-79
6.1
2024-07-25 CVE-2024-38103 Unspecified vulnerability in Microsoft Edge
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
network
high complexity
microsoft
5.9
2024-03-22 CVE-2024-29057 Unspecified vulnerability in Microsoft Edge
Microsoft Edge (Chromium-based) Spoofing Vulnerability
network
low complexity
microsoft
4.3
2024-03-14 CVE-2024-26246 Unspecified vulnerability in Microsoft Edge 112.0.1722.34/118.0.2088.88/122.0.2365.63
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
low complexity
microsoft
3.9
2023-11-03 CVE-2023-36029 Unspecified vulnerability in Microsoft Edge 112.0.1722.34
Microsoft Edge (Chromium-based) Spoofing Vulnerability
network
low complexity
microsoft
4.3
2023-09-28 CVE-2023-5217 Out-of-bounds Write vulnerability in multiple products
Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
8.8
2022-12-13 CVE-2022-44708 Unspecified vulnerability in Microsoft Edge Chromium
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
network
high complexity
microsoft
8.3
2022-11-25 CVE-2022-4135 Out-of-bounds Write vulnerability in multiple products
Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
network
low complexity
google microsoft CWE-787
critical
9.6