| CVE-2026-70341 | 高8.8 | Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network. | 11/09/2026 |
| CVE-2026-70331 | 中5.4 | Improper neutralization of input used for llm prompting in Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network. | 28/08/2026 |
| CVE-2026-66310 | 高7.1 | External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally. | 04/08/2026 |
| CVE-2026-35429 | 中4.3 | User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. | 12/05/2026 |
| CVE-2026-33119 | 中5.4 | User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. | 10/04/2026 |
| CVE-2026-26133 | 高7.1 | AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network. | 16/03/2026 |
| CVE-2025-62224 | 低3.5 | User interface (ui) misrepresentation of critical information in Microsoft Edge for Android allows an authorized attacker to perform spoofing over a network. | 07/01/2026 |
| CVE-2025-47967 | 中4.7 | Insufficient ui warning of dangerous operations in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network. | 16/09/2025 |
| CVE-2025-49755 | 中4.3 | User interface (ui) misrepresentation of critical information in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network. | 12/08/2025 |
| CVE-2025-49736 | 中4.3 | The ui performs the wrong action in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network. | 12/08/2025 |
| CVE-2025-29796 | 中4.7 | User interface (ui) misrepresentation of critical information in Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network. | 04/04/2025 |
| CVE-2025-25001 | 中4.3 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. | 04/04/2025 |
| CVE-2024-38222 | 中6.5 | Microsoft Edge (Chromium-based) Information Disclosure Vulnerability | 12/09/2024 |
| CVE-2024-41879 | 高7.8 | Acrobat Reader versions 127.0.2651.105 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | 26/08/2024 |
| CVE-2024-38208 | 中6.1 | Microsoft Edge for Android Spoofing Vulnerability | 22/08/2024 |
| CVE-2024-7971KEV | 緊急9.6 | Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to exploit heap corruption via a crafted HTML page. (Chromium security severity: High) | 21/08/2024 |
| CVE-2024-38103 | 中5.9 | Microsoft Edge (Chromium-based) Information Disclosure Vulnerability | 25/07/2024 |
| CVE-2024-38156 | 中6.1 | Microsoft Edge (Chromium-based) Spoofing Vulnerability | 19/07/2024 |
| CVE-2024-38093 | 中4.3 | Microsoft Edge (Chromium-based) Spoofing Vulnerability | 20/06/2024 |
| CVE-2024-38082 | 中4.7 | Microsoft Edge (Chromium-based) Spoofing Vulnerability | 20/06/2024 |