Veille CVE

Recherche « Microsoft edge »

103 CVE

Critique 6 Élevée 52 Moyenne 44 Faible 1 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Microsoft edge » ✕
  1. CVE-2026-63205 5.1 Moyenne

    zammad

    Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, when creating or updating an email signature, Zammad processes inline images referenced in the signature body. If a signature body contains an HTML img tag pointing to any existing attachment, the system copies that attachment into a new signature-owned record, without checking whether the user has permission to access the original attachment. The newly created copy is then downloadable by the same channel-admin user, because attachment access is determined by the copy's owner (the signature), not the original object (e.g., a ticket or knowledge-base article). This allows a user with any of the admin.channel_email, admin.channel_google, admin.channel_microsoft365, or admin.channel_microsoft_graph permissions to read attachments they would otherwise be denied access to, such as ticket attachments belonging to groups they are not a member of. This issue is fixed in version 7.1.2.

  2. CVE-2026-88097 7.8 Élevée

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges locally.

  3. CVE-2026-85893 8.8 Élevée

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

  4. CVE-2026-69486 8.8 Élevée

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

  5. CVE-2026-85892 7.8 Élevée

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges locally.

  6. CVE-2026-77490 6.1 Moyenne

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

  7. CVE-2026-70341 8.8 Élevée

    Microsoft Edge (Chromium-based) · Microsoft Edge for Android · Microsoft Edge for iOS · Microsoft Edge for Linux

    Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.

  8. CVE-2026-72984 8.8 Élevée

    Microsoft Edge (Chromium-based) · Microsoft Edge for Android · Microsoft Edge for iOS · Microsoft Edge for Linux

    Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

  9. CVE-2026-70331 5.4 Moyenne

    Microsoft Edge (Chromium-based) · Microsoft Edge for iOS · Microsoft edge · Microsoft edge chromium

    Improper neutralization of input used for llm prompting in Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network.

  10. CVE-2026-70309 5.4 Moyenne

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.

  11. CVE-2026-66798 4.3 Moyenne

    Microsoft Edge (Chromium-based) · Microsoft Edge for Android · Microsoft Edge for iOS · Microsoft Edge for Linux

    Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

  12. CVE-2026-66324 6.5 Moyenne

    Microsoft Edge for Android · Microsoft Edge for iOS · Microsoft Edge for Linux · Microsoft Edge for MAC

    External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

  13. CVE-2026-66323 5.4 Moyenne

    Microsoft Edge for Android · Microsoft Edge for iOS · Microsoft Edge for Linux · Microsoft Edge for MAC

    Improper neutralization of parameter/argument delimiters in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

  14. CVE-2026-62904 5.4 Moyenne

    Microsoft Edge (Chromium-based) · Microsoft Edge for Android · Microsoft Edge for iOS · Microsoft Edge for Linux

    Incorrect authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

  15. CVE-2026-58616 3.0 Faible

    Microsoft Edge (Chromium-based) · Microsoft Edge for Android · Microsoft Edge for iOS · Microsoft Edge for Linux

    Concurrent execution using shared resource with improper synchronization ('race condition') in Copilot Chat (Microsoft Edge) allows an authorized attacker to disclose information over a network.

  16. CVE-2026-72970 8.3 Élevée

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

  17. CVE-2026-70339 5.4 Moyenne

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

  18. CVE-2026-68823 9.1 Critique

    Microsoft Azure Confidential Ledger

    Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a network.

  19. CVE-2026-66326 8.8 Élevée

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Missing authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

  20. CVE-2026-66325 6.1 Moyenne

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

  21. CVE-2026-66322 5.4 Moyenne

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

  22. CVE-2026-66321 9.6 Critique

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

  23. CVE-2026-66318 8.1 Élevée

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

  24. CVE-2026-66317 5.4 Moyenne

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering over a network.

  25. CVE-2026-66316 5.4 Moyenne

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

  26. CVE-2026-66315 7.5 Élevée

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

  27. CVE-2026-66314 5.3 Moyenne

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Time-of-check time-of-use (toctou) race condition in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

  28. CVE-2026-66313 6.8 Moyenne

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering locally.

  29. CVE-2026-66312 8.8 Élevée

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Buffer over-read in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.

  30. CVE-2026-66311 6.2 Moyenne

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Missing authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering locally.

  31. CVE-2026-66310 7.1 Élevée

    Microsoft Edge for Android · Microsoft edge

    External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally.

  32. CVE-2026-65804 6.1 Moyenne

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Improper control of generation of code ('code injection') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

  33. CVE-2026-65802 7.4 Élevée

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information over a network.

  34. CVE-2026-62828 5.4 Moyenne

    Microsoft Edge for Android · Microsoft edge

    Improper input validation in Microsoft Edge for Android allows an unauthorized attacker to perform tampering over a network.

  35. CVE-2026-57990 7.4 Élevée

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Files or directories accessible to external parties in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

  36. CVE-2026-57989 7.4 Élevée

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

  37. CVE-2026-57978 5.4 Moyenne

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

  38. CVE-2026-57980 5.4 Moyenne

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Authentication bypass using an alternate path or channel in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering over a network.

  39. CVE-2026-48561 9.6 Critique

    Microsoft Edge Copilot for Android · Microsoft Edge Copilot for IOS · Microsoft 365 copilot

    Improper neutralization of special elements used in a command ('command injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to execute code over a network.

  40. CVE-2026-58596 8.3 Élevée

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Untrusted pointer dereference in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

  41. CVE-2026-58281 8.3 Élevée

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Deserialization of untrusted data in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

  42. CVE-2026-58525 8.2 Élevée

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.

  43. CVE-2026-58523 6.5 Moyenne

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Improper access control in Microsoft Edge for Android allows an unauthorized attacker to bypass a security feature over a network.

  44. CVE-2026-58597 4.3 Moyenne

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Insufficient ui warning of dangerous operations in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

  45. CVE-2026-58524 6.1 Moyenne

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

  46. CVE-2026-58522 5.5 Moyenne

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Relative path traversal in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally.

  47. CVE-2026-58300 5.5 Moyenne

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Absolute path traversal in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally.

  48. CVE-2026-58299 7.5 Élevée

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Time-of-check time-of-use (toctou) race condition in Microsoft Edge for Android allows an unauthorized attacker to execute code over a network.

  49. CVE-2026-58298 6.1 Moyenne

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

  50. CVE-2026-58297 7.1 Élevée

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Exposure of private personal information to an unauthorized actor in Microsoft Edge for Android allows an unauthorized attacker to disclose information over a network.

  51. CVE-2026-58296 7.1 Élevée

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Exposure of private personal information to an unauthorized actor in Microsoft Edge for Android allows an unauthorized attacker to disclose information over a network.

  52. CVE-2026-58295 8.3 Élevée

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.

  53. CVE-2026-58294 7.5 Élevée

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

  54. CVE-2026-58293 7.5 Élevée

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

  55. CVE-2026-58292 7.5 Élevée

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

  56. CVE-2026-58291 6.1 Moyenne

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Operation on a resource after expiration or release in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

  57. CVE-2026-58290 7.5 Élevée

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

  58. CVE-2026-58289 8.3 Élevée

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

  59. CVE-2026-58288 8.3 Élevée

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

  60. CVE-2026-58287 8.3 Élevée

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

  61. CVE-2026-58286 6.9 Moyenne

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

  62. CVE-2026-58285 8.3 Élevée

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

  63. CVE-2026-58284 8.3 Élevée

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Improper authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

  64. CVE-2026-58283 6.9 Moyenne

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

  65. CVE-2026-58282 6.9 Moyenne

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

  66. CVE-2026-58278 5.4 Moyenne

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

  67. CVE-2026-58276 7.5 Élevée

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

  68. CVE-2026-57993 7.4 Élevée

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

  69. CVE-2026-57992 7.5 Élevée

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

  70. CVE-2026-57991 7.4 Élevée

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Improper link resolution before file access ('link following') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

  71. CVE-2026-57988 7.1 Élevée

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Relative path traversal in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

  72. CVE-2026-57987 6.5 Moyenne

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

  73. CVE-2026-57986 7.5 Élevée

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

  74. CVE-2026-57985 8.8 Élevée

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

  75. CVE-2026-57984 7.5 Élevée

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

  76. CVE-2026-57983 10.0 Critique

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Improper authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.

  77. CVE-2026-57981 8.8 Élevée

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

  78. CVE-2026-57977 7.1 Élevée

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

  79. CVE-2026-57975 7.5 Élevée

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

  80. CVE-2026-57974 8.8 Élevée

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

  81. CVE-2026-56646 6.5 Moyenne

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Exposure of sensitive information to an unauthorized actor in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

  82. CVE-2026-56645 8.8 Élevée

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

  83. CVE-2026-55945 4.2 Moyenne

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Edge (Chromium-based) allows an authorized attacker to disclose information locally.

  84. CVE-2026-45489 6.5 Moyenne

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Microsoft Edge (Chromium-based) Spoofing Vulnerability

  85. CVE-2026-45488 5.9 Moyenne

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

  86. CVE-2026-50521 8.3 Élevée

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.

  87. CVE-2026-32208 5.4 Moyenne

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Entra ID allows an authorized attacker to perform spoofing over a network.

  88. CVE-2026-47643 9.8 Critique

    Microsoft Azure Stack Edge

    External control of file name or path in Azure Stack Edge allows an unauthorized attacker to execute code over a network.

  89. CVE-2026-41098 8.4 Élevée

    Microsoft Azure Stack Edge

    Improper neutralization of input during web page generation ('cross-site scripting') in Azure Stack Edge allows an authorized attacker to perform spoofing over a network.

  90. CVE-2026-47644 7.5 Élevée

    Microsoft Copilot Chat (Microsoft Edge) · Microsoft copilot chat

    Improper neutralization of special elements in output used by a downstream component ('injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to disclose information over a network.

  91. CVE-2026-45495 9.8 Critique

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

  92. CVE-2026-45494 6.1 Moyenne

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Microsoft Edge (Chromium-based) Spoofing Vulnerability

  93. CVE-2026-45492 5.4 Moyenne

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.

  94. CVE-2026-42891 6.5 Moyenne

    Microsoft Edge for Android · Microsoft edge chromium

    User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

  95. CVE-2026-42838 5.4 Moyenne

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    Improper neutralization of special elements in output used by a downstream component ('injection') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

  96. CVE-2026-41107 7.4 Élevée

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

  97. CVE-2026-40416 4.3 Moyenne

    Microsoft Edge (Chromium-based) · Microsoft edge chromium

    User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

  98. CVE-2026-35429 4.3 Moyenne

    Microsoft Edge for Android · Microsoft edge

    User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

  99. CVE-2026-33111 7.5 Élevée

    Microsoft Copilot Chat (Microsoft Edge) · Microsoft copilot chat

    Improper neutralization of special elements used in a command ('command injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to disclose information over a network.

  100. CVE-2023-4863 8.8 Élevée Exploitée

    Google Chrome · Google libwebp · Fedoraproject fedora · Debian debian linux

    Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)

  101. CVE-2016-7201 8.8 Élevée Exploitée

    Microsoft edge

    The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-7200, CVE-2016-7202, CVE-2016-7203, CVE-2016-7208, CVE-2016-7240, CVE-2016-7242, and CVE-2016-7243.

  102. CVE-2016-7200 8.8 Élevée Exploitée

    Microsoft edge

    The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-7201, CVE-2016-7202, CVE-2016-7203, CVE-2016-7208, CVE-2016-7240, CVE-2016-7242, and CVE-2016-7243.

  103. CVE-2016-3351 6.5 Moyenne Exploitée Rançongiciel

    Microsoft internet explorer · Microsoft edge

    Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Browser Information Disclosure Vulnerability."