Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Microsoft Microsoft EdgeMicrosoft Edge (Chromium-based) Spoofing Vulnerability

Risk 38
Severity
6.1
XSS
AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

1 / 2
Source: Microsoft
First published (updated )
CVE-2026-77490

Google ChromeChromium CVE-2026-87511: Missing authorization in DevTools

Risk 22
Severity
4.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Chromium CVE-2026-87511: Missing authorization in DevTools

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-87511

Google ChromeChromium CVE-2026-87473: Incorrect authorization in FileHandling

Risk 37
Severity
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Chromium CVE-2026-87473: Incorrect authorization in FileHandling

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-87473

Google ChromeInput Validation

Risk 22
Severity
4.3
Input Validation
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Chromium CVE-2026-87469: Improper input validation in Extensions

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-87469

Google ChromeChromium CVE-2026-87564: Type confusion in V8

Risk 22
Severity
4.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Chromium CVE-2026-87564: Type confusion in V8

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-87564

Google ChromeChromium CVE-2026-87627: Interpretation conflict in Safebrowsing

Risk 37
Severity
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Chromium CVE-2026-87627: Interpretation conflict in Safebrowsing

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-87627

Microsoft Microsoft EdgeMicrosoft Edge (Chromium-based) Security Feature Bypass Vulnerability

Risk 34
Severity
5.4
AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

1 / 2
Source: Microsoft
First published (updated )
CVE-2026-70309

Microsoft EdgeMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability

Risk 22
Severity
4.3
Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

1 / 2
Source: Microsoft
First published (updated )
CVE-2026-66798

Microsoft EdgeMicrosoft Edge (Chromium-based) Spoofing Vulnerability

Risk 37
Severity
6.5
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

1 / 2
Source: Microsoft
First published (updated )
CVE-2026-66324

Microsoft EdgeMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability

Risk 34
Severity
5.4
AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C

Improper neutralization of parameter/argument delimiters in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

1 / 2
Source: Microsoft
First published (updated )
CVE-2026-66323

Microsoft EdgeMicrosoft Edge (Chromium-based) Information Disclosure Vulnerability

Risk 34
Severity
5.4
AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C

Incorrect authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

1 / 2
Source: Microsoft
First published (updated )
CVE-2026-62904

Microsoft EdgeCopilot Chat (Microsoft Edge) Information Disclosure Vulnerability

Risk 29
Severity
4.4
Race Condition
AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C

Concurrent execution using shared resource with improper synchronization ('race condition') in Copilot Chat (Microsoft Edge) allows an authorized attacker to disclose information over a network.

1 / 2
Source: Microsoft
First published (updated )
CVE-2026-58616

Microsoft EdgeMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability

Risk 34
Severity
5.4
AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

1 / 2
Source: Microsoft
First published (updated )
CVE-2026-70339

Microsoft Edge for iOSMicrosoft Edge for iOS Spoofing Vulnerability

Risk 34
Severity
5.4
AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C

Improper neutralization of input used for llm prompting in Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network.

1 / 2
Source: Microsoft
First published (updated )
CVE-2026-70331

Google ChromeChromium CVE-2026-87575: Incorrect authorization in Loader

Risk 34
Severity
5.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Chromium CVE-2026-87575: Incorrect authorization in Loader

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-87575

Google ChromeChromium CVE-2026-87656: Improper state validation in Safebrowsing

Risk 34
Severity
5.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Chromium CVE-2026-87656: Improper state validation in Safebrowsing

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-87656

Google Google ChromeIncorrect Type Cast

Risk 22
Severity
4.3
Incorrect Type Cast
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Chromium CVE-2026-87546: Incorrect type conversion or cast in Safebrowsing

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-87546

Google Google ChromeChromium CVE-2026-87551: Improper certificate validation in CORS

Risk 22
Severity
4.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Chromium CVE-2026-87551: Improper certificate validation in CORS

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-87551

Google Google ChromeChromium CVE-2026-87571: Improper certificate validation in Loader

Risk 34
Severity
5.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Chromium CVE-2026-87571: Improper certificate validation in Loader

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-87571

Google Google ChromeChromium CVE-2026-87468: Incorrect authorization in Isolated

Risk 37
Severity
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Chromium CVE-2026-87468: Incorrect authorization in Isolated

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-87468

Google ChromeChromium CVE-2026-87493: Missing authorization in FileSystem

Risk 37
Severity
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Chromium CVE-2026-87493: Missing authorization in FileSystem

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-87493

Google Google ChromeChromium CVE-2026-87519: Incorrect authorization in Safebrowsing

Risk 37
Severity
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Chromium CVE-2026-87519: Incorrect authorization in Safebrowsing

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-87519

Google ChromeChromium CVE-2026-87584: Incorrect authorization in WebUI

Risk 37
Severity
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Chromium CVE-2026-87584: Incorrect authorization in WebUI

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-87584

Google ChromeChromium CVE-2026-87580: Incorrect authorization in WebAppInstalls

Risk 37
Severity
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Chromium CVE-2026-87580: Incorrect authorization in WebAppInstalls

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-87580

Google ChromeChromium CVE-2026-87589: Incorrect authorization in SiteIsolation

Risk 37
Severity
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Chromium CVE-2026-87589: Incorrect authorization in SiteIsolation

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-87589

Google Google ChromeInput Validation

Risk 35
Severity
5.9
Input Validation
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Chromium CVE-2026-87590: Improper input validation in Passwords

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-87590

Google ChromeChromium CVE-2026-87591: Incorrect authorization in Extensions

Risk 37
Severity
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Chromium CVE-2026-87591: Incorrect authorization in Extensions

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-87591

Google Chrome for AndroidUI misrepresentation in FullScreen

Risk 34
Severity
5.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L

Chromium: CVE-2026-84330 UI misrepresentation in FullScreen

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-84330

Google ChromeChromium CVE-2026-87603: Missing authorization in FileSystem

Risk 37
Severity
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Chromium CVE-2026-87603: Missing authorization in FileSystem

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-87603

Google ChromeChromium CVE-2026-87610: Incorrect authorization in Omnibox

Risk 37
Severity
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Chromium CVE-2026-87610: Incorrect authorization in Omnibox

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-87610

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203