Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

Chromium CVE-2026-87593: Information leak in Editing

Chromium CVE-2026-87437: Information leak in Frames

Chromium CVE-2026-87477: Information leak in Core

Chromium CVE-2026-87551: Improper certificate validation in CORS

Chromium CVE-2026-87571: Improper certificate validation in Loader

Chromium CVE-2026-87602: Out of bounds read in ANGLE

Chromium CVE-2026-87473: Incorrect authorization in FileHandling

Chromium CVE-2026-87469: Improper input validation in Extensions

Chromium CVE-2026-87461: Information leak in Core

Chromium CVE-2026-87575: Incorrect authorization in Loader

Chromium CVE-2026-87631: Missing authorization in DOM

Chromium CVE-2026-87490: Information leak in Transactions Platform

Chromium CVE-2026-87605: Missing authorization in Contacts

Chromium CVE-2026-87624: UI misrepresentation in Passwords

Chromium CVE-2026-87583: UI misrepresentation in Passwords

Chromium CVE-2026-87463: Incorrect authorization in Certificate

Chromium CVE-2026-87523: Race condition in DataTransfer

Chromium CVE-2026-87546: Incorrect type conversion or cast in Safebrowsing

Chromium CVE-2026-87565: Information leak in Passwords

Chromium CVE-2026-87538: Clickjacking in Input

Chromium CVE-2026-87459: Observable discrepancy in Select

Chromium CVE-2026-87502: Confused deputy in Fullscreen

Chromium CVE-2026-87620: Observable discrepancy in SVG

Chromium CVE-2026-87592: Out of bounds read in Tint

Chromium CVE-2026-87511: Missing authorization in DevTools

Chromium CVE-2026-87568: Improper input validation in Chromium

Chromium CVE-2026-87543: Missing authorization in Core

Chromium CVE-2026-87627: Interpretation conflict in Safebrowsing

Chromium CVE-2026-87656: Improper state validation in Safebrowsing