Vulnerabilities > Microsoft > Edge Chromium > Medium

DATE CVE VULNERABILITY TITLE RISK
2022-12-13 CVE-2022-41115 Unspecified vulnerability in Microsoft Edge Chromium
Microsoft Edge (Chromium-based) Update Elevation of Privilege Vulnerability
network
high complexity
microsoft
6.6
6.6
2021-09-03 CVE-2021-30615 Chromium: CVE-2021-30615 Cross-origin data leak in Navigation
network
low complexity
fedoraproject microsoft
6.5
6.5
2021-09-03 CVE-2021-30617 Chromium: CVE-2021-30617 Policy bypass in Blink
network
low complexity
fedoraproject microsoft
6.5
6.5
2021-09-03 CVE-2021-30619 Authentication Bypass by Spoofing vulnerability in multiple products
Chromium: CVE-2021-30619 UI Spoofing in Autofill
network
low complexity
fedoraproject microsoft CWE-290
6.5
6.5
2021-09-03 CVE-2021-30621 Authentication Bypass by Spoofing vulnerability in multiple products
Chromium: CVE-2021-30621 UI Spoofing in Autofill
network
low complexity
fedoraproject microsoft CWE-290
6.5
6.5
2021-02-09 CVE-2021-21139 Improper Restriction of Rendered UI Layers or Frames vulnerability in multiple products
Inappropriate implementation in iframe sandbox in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
network
low complexity
google microsoft CWE-1021
6.5
6.5
2021-02-09 CVE-2021-21137 Injection vulnerability in multiple products
Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to obtain potentially sensitive information from disk via a crafted HTML page.
network
low complexity
google microsoft CWE-74
6.5
6.5
2021-02-09 CVE-2021-21136 Origin Validation Error vulnerability in multiple products
Insufficient policy enforcement in WebView in Google Chrome on Android prior to 88.0.4324.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
network
low complexity
google microsoft CWE-346
6.5
6.5
2021-02-09 CVE-2021-21135 Origin Validation Error vulnerability in multiple products
Inappropriate implementation in Performance API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
network
low complexity
google microsoft CWE-346
6.5
6.5
2021-02-09 CVE-2021-21134 Authentication Bypass by Spoofing vulnerability in multiple products
Incorrect security UI in Page Info in Google Chrome on iOS prior to 88.0.4324.96 allowed a remote attacker to spoof security UI via a crafted HTML page.
network
low complexity
google microsoft CWE-290
6.5
6.5