What’s Vulnerable › Products

Microsoft Edge vulnerabilities

760 known vulnerabilities, 12 confirmed exploited in the wild (CISA KEV), 14 published in the last 12 months.

Check whether your Microsoft Edge version is affected

Exploited Microsoft Edge vulnerabilities

• CVE-2024-7971 — Google Chromium V8 Type Confusion Vulnerability
• CVE-2023-5217 — Google Chromium libvpx Heap Buffer Overflow Vulnerability
• CVE-2022-4135 — Google Chromium GPU Heap Buffer Overflow Vulnerability
• CVE-2016-3351 — Microsoft Internet Explorer and Edge Information Disclosure Vulnerability
• CVE-2015-0313 — Adobe Flash Player Use-After-Free Vulnerability
• CVE-2015-0311 — Adobe Flash Player Remote Code Execution Vulnerability
• CVE-2017-0037 — Microsoft Edge and Internet Explorer Type Confusion Vulnerability
• CVE-2016-7201 — Microsoft Edge Memory Corruption Vulnerability
• CVE-2016-7200 — Microsoft Edge Memory Corruption Vulnerability
• CVE-2021-26411 — Microsoft Internet Explorer Memory Corruption Vulnerability
• CVE-2020-16009 — Google Chromium V8 Type Confusion Vulnerability
• CVE-2020-0878 — Microsoft Edge and Internet Explorer Memory Corruption Vulnerability

Latest Microsoft Edge vulnerabilities

• CVE-2026-70341 — Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (CVSS 8.8)
• CVE-2026-70331 — Microsoft Edge for iOS Spoofing Vulnerability (CVSS 5.4)
• CVE-2026-66310 — Microsoft Edge for Android Information Disclosure Vulnerability (CVSS 7.1)
• CVE-2026-62828 — Microsoft Edge for Android (Chromium-based) Tampering Vulnerability (CVSS 5.4)
• CVE-2026-35429 — Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability (CVSS 4.3)
• CVE-2026-33119 — Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability (CVSS 5.4)
• CVE-2026-26133 — M365 Copilot Information Disclosure Vulnerability (CVSS 7.1)
• CVE-2025-62224 — Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability (CVSS 3.5)
• CVE-2025-47967 — Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability (CVSS 4.7)
• CVE-2025-49755 — Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability (CVSS 4.3)
• CVE-2025-49736 — Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability (CVSS 4.3)
• CVE-2025-29796 — Microsoft Edge for iOS Spoofing Vulnerability (CVSS 4.7)
• CVE-2025-25001 — Microsoft Edge for iOS Spoofing Vulnerability (CVSS 4.3)
• CVE-2025-21253 — Microsoft Edge for IOS and Android Spoofing Vulnerability (CVSS 5.3)
• CVE-2024-38222 — Microsoft Edge (Chromium-based) Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2024-41879 — RE: New Edge T5 MSRC Case [DCMSFT-1294] (CVSS 7.8)
• CVE-2024-38208 — Microsoft Edge for Android Spoofing Vulnerability (CVSS 6.1)
• CVE-2024-7971 — Google Chromium V8 Type Confusion Vulnerability (CVSS 9.6) — exploited
• CVE-2024-38103 — Microsoft Edge (Chromium-based) Information Disclosure Vulnerability (CVSS 5.9)
• CVE-2024-38156 — Microsoft Edge (Chromium-based) Spoofing Vulnerability (CVSS 6.1)
• CVE-2024-38093 — Microsoft Edge (Chromium-based) Spoofing Vulnerability (CVSS 4.3)
• CVE-2024-38082 — Microsoft Edge (Chromium-based) Spoofing Vulnerability (CVSS 4.7)
• CVE-2024-30057 — Microsoft Edge for iOS Spoofing Vulnerability (CVSS 5.4)
• CVE-2024-29057 — Microsoft Edge (Chromium-based) Spoofing Vulnerability (CVSS 4.3)
• CVE-2024-26247 — Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability (CVSS 4.7)