Vulnerabilities > Microsoft > Edge > 86.0.622.51

DATE CVE VULNERABILITY TITLE RISK
2021-09-03 CVE-2021-30620 Chromium: CVE-2021-30620 Insufficient policy enforcement in Blink
network
low complexity
fedoraproject microsoft
8.8
2021-09-03 CVE-2021-30621 Authentication Bypass by Spoofing vulnerability in multiple products
Chromium: CVE-2021-30621 UI Spoofing in Autofill
network
low complexity
fedoraproject microsoft CWE-290
6.5
2021-09-03 CVE-2021-30622 Use After Free vulnerability in multiple products
Chromium: CVE-2021-30622 Use after free in WebApp Installs
network
low complexity
fedoraproject microsoft CWE-416
8.8
2021-09-03 CVE-2021-30623 Use After Free vulnerability in multiple products
Chromium: CVE-2021-30623 Use after free in Bookmarks
network
low complexity
fedoraproject microsoft CWE-416
8.8
2021-09-03 CVE-2021-30624 Use After Free vulnerability in multiple products
Chromium: CVE-2021-30624 Use after free in Autofill
network
low complexity
fedoraproject microsoft CWE-416
8.8
2021-02-22 CVE-2021-21157 Use After Free vulnerability in multiple products
Use after free in Web Sockets in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
microsoft fedoraproject google CWE-416
8.8
2021-02-09 CVE-2021-21141 Injection vulnerability in multiple products
Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass file extension policy via a crafted HTML page.
4.3
2021-02-09 CVE-2021-21140 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
Uninitialized use in USB in Google Chrome prior to 88.0.4324.96 allowed a local attacker to potentially perform out of bounds memory access via via a USB device.
local
low complexity
google microsoft CWE-119
4.6
2020-11-03 CVE-2020-16009 Type Confusion vulnerability in multiple products
Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
8.8