Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

762 records

Vendor: Microsoft Component: Edge Clear all filters
TI-2026-82520 CVE-2026-85330 · GHSA-v6gv-j265-fhhf

Security feature bypass in Microsoft Edge for Android

Priority LOW 20

Incorrect authorization in Microsoft Edge for Android allows an unauthorized attacker to bypass a security feature over a network.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.0035 Published 2026-10-29 Fixed in 155.0.4283.45 CWE-863
TI-2026-49149 CVE-2026-70331 · GHSA-wjm5-2899-cw52

Microsoft Edge for iOS Spoofing Vulnerability

Priority LOW 25

Improper neutralization of input used for llm prompting in Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00413 Published 2026-08-28 Fixed in 150.0.4078.50 CWE-1427
TI-2026-47109 CVE-2026-66310 · GHSA-78fm-87r7-5p5x

Microsoft Edge for Android Information Disclosure Vulnerability

Priority LOW 36

External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally.

CVSS 3.1HIGH 7.7 Local No auth No interaction EPSS 0.00364 Published 2026-08-03 Fixed in 151.0.4129.59 CWE-73
TI-2026-27563 CVE-2026-35429 · GHSA-r323-gp9m-h5c5

Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

Priority LOW 21

User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00497 Published 2026-05-12 Fixed in 148.0.3967.55 CWE-451
TI-2026-25551 CVE-2026-33119 · GHSA-29q2-v59x-3mg8

Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

Priority LOW 24

User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00323 Published 2026-04-10 Fixed in 147.0.3912.60 CWE-451
TI-2026-21126 CVE-2026-26133 · GHSA-rjf5-cxrf-4rvw

M365 Copilot Information Disclosure Vulnerability

Priority LOW 32

AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0045 Published 2026-03-13 Fixed in 16.0.19815.10000, 2.107.2 +9 CWE-77
TI-2025-38536 CVE-2025-62224 · GHSA-xrhf-c555-w8f8

Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

Priority LOW 25

User interface (ui) misrepresentation of critical information in Microsoft Edge for Android allows an authorized attacker to perform spoofing over a network.

CVSS 3.1MEDIUM 5.5 Network Low privileges User interaction EPSS 0.00318 Published 2026-01-07 Fixed in 143.0.3650.97 CWE-451
TI-2025-30356 CVE-2025-47967 · GHSA-w837-7f8r-vf6m

Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

Priority LOW 22

Insufficient ui warning of dangerous operations in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network.

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00384 Published 2025-09-16 Fixed in 140.0.3485.71 CWE-357
TI-2025-31705 CVE-2025-49736 · GHSA-cq92-fpfc-ph75

Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

Priority LOW 21

The ui performs the wrong action in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00575 Published 2025-08-12 Fixed in 139.0.3405.86 CWE-449
TI-2025-31720 CVE-2025-49755 · GHSA-vqq3-x6g9-8v8h

Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

Priority LOW 21

User interface (ui) misrepresentation of critical information in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00532 Published 2025-08-12 Fixed in 139.0.3405.86 CWE-451
TI-2025-21207 CVE-2025-29796 · GHSA-85hh-j9mv-r2v4

Microsoft Edge for iOS Spoofing Vulnerability

Priority LOW 23

User interface (ui) misrepresentation of critical information in Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network.

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00609 Published 2025-04-04 Fixed in 135.0.3179.54 CWE-451
TI-2025-18679 CVE-2025-25001 · GHSA-pr6w-g472-rf39

Microsoft Edge for iOS Spoofing Vulnerability

Priority LOW 21

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00798 Published 2025-04-04 Fixed in 132.0.2957.118 CWE-79
TI-2024-27916 CVE-2024-41879 · GHSA-6xfm-jchr-8jgw

RE: New Edge T5 MSRC Case [DCMSFT-1294]

Priority LOW 37

Acrobat Reader versions 127.0.2651.105 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00483 Published 2024-08-26 No fix listed CWE-787
TI-2024-07390 CVE-2024-7971 · GHSA-pq5w-h3jm-m95c

Type confusion in Google Chrome

Priority CRITICAL 100KEV

Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to exploit heap corruption via a crafted HTML page.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.21009 Published 2024-08-21 Fixed in 128.0.6613.84 CWE-843
Load more