Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Microsoft Microsoft EdgeMicrosoft Edge (Chromium-based) Spoofing Vulnerability

Risk 38
Severity
6.1
XSS
AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

1 / 2
Source: Microsoft
First published (updated )
CVE-2026-77490

Microsoft EdgeMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability

Risk 22
Severity
4.3
Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

1 / 2
Source: Microsoft
First published (updated )
CVE-2026-66798

Microsoft EdgeMicrosoft Edge (Chromium-based) Spoofing Vulnerability

Risk 37
Severity
6.5
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

1 / 2
Source: Microsoft
First published (updated )
CVE-2026-66324

Microsoft EdgeMicrosoft Edge (Chromium-based) Information Disclosure Vulnerability

Risk 34
Severity
5.4
AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C

Incorrect authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

1 / 2
Source: Microsoft
First published (updated )
CVE-2026-62904

Microsoft EdgeMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability

Risk 34
Severity
5.4
AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C

Improper neutralization of parameter/argument delimiters in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

1 / 2
Source: Microsoft
First published (updated )
CVE-2026-66323

Microsoft EdgeCopilot Chat (Microsoft Edge) Information Disclosure Vulnerability

Risk 29
Severity
4.4
Race Condition
AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C

Concurrent execution using shared resource with improper synchronization ('race condition') in Copilot Chat (Microsoft Edge) allows an authorized attacker to disclose information over a network.

1 / 2
Source: Microsoft
First published (updated )
CVE-2026-58616

Google ChromeObservable discrepancy in Autofill

Risk 31
Severity
5.3
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

Chromium: CVE-2026-79030 Observable discrepancy in Autofill

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-79030

Microsoft EdgeMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability

Risk 34
Severity
5.4
AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

1 / 2
Source: Microsoft
First published (updated )
CVE-2026-70339

Google Google ChromeHigh Information leak in GPU

Risk 22
Severity
4.3
Infoleak
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Chromium: CVE-2026-79274 Information leak in GPU

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-79274

Microsoft Edge (Chromium-based)Microsoft Edge (Chromium-based) Tampering Vulnerability

Risk 34
Severity
5.4
AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C

Microsoft Edge (Chromium-based) Tampering Vulnerability

1 / 2
Source: Microsoft
First published (updated )
CVE-2026-66317

Microsoft Edge (Chromium-based)Microsoft Edge (Chromium-based) Spoofing Vulnerability

Risk 38
Severity
6.1
Code Injection
AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C

Improper control of generation of code ('code injection') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

1 / 2
Source: Microsoft
First published (updated )
CVE-2026-65804

Microsoft Edge (Chromium-based)Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

Risk 37
Severity
6.5
Race Condition
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

1 / 2
Source: Microsoft
First published (updated )
CVE-2026-66314

Microsoft Edge (Chromium-based)Microsoft Edge (Chromium-based) Tampering Vulnerability

Risk 36
Severity
6.2
AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

Microsoft Edge (Chromium-based) Tampering Vulnerability

1 / 2
Source: Microsoft
First published (updated )
CVE-2026-66311

Microsoft Edge (Chromium-based)Microsoft Edge (Chromium-based) Spoofing Vulnerability

Risk 38
Severity
6.1
SSRF
AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C

Microsoft Edge (Chromium-based) Spoofing Vulnerability

1 / 2
Source: Microsoft
First published (updated )
CVE-2026-66325

Microsoft Edge (Chromium-based)Microsoft Edge (Chromium-based) Tampering Vulnerability

Risk 45
Severity
6.8
AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N/E:U/RL:O/RC:C

Microsoft Edge (Chromium-based) Tampering Vulnerability

1 / 2
Source: Microsoft
First published (updated )
CVE-2026-66313

Microsoft Edge (Chromium-based)Microsoft Edge (Chromium-based) Spoofing Vulnerability

Risk 34
Severity
5.4
AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C

Microsoft Edge (Chromium-based) Spoofing Vulnerability

1 / 2
Source: Microsoft
First published (updated )
CVE-2026-66316

Google ChromeHigh Incorrect authorization in Extensions

Risk 22
Severity
4.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Chromium: CVE-2026-78954 Incorrect authorization in Extensions

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-78954

Google Google ChromeInformation leak in Skia

Risk 22
Severity
4.3
Infoleak
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Chromium: CVE-2026-76041 Information leak in Skia

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-76041

Google ChromeIncorrect authorization in Browser

Risk 22
Severity
4.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Chromium: CVE-2026-79141 Incorrect authorization in Browser

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-79141

Microsoft EdgeMicrosoft Edge (Chromium-based) Spoofing Vulnerability

Risk 34
Severity
5.4
AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C

Microsoft Edge (Chromium-based) Spoofing Vulnerability

1 / 2
Source: Microsoft
First published (updated )
CVE-2026-57978

Google ChromeImproper input validation in Workers

Risk 28
Severity
4.2
Input Validation
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N

Chromium: CVE-2026-79025 Improper input validation in Workers

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-79025

Google Google ChromeRace condition in Autofill

Risk 22
Severity
4.3
Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Chromium: CVE-2026-79014 Race condition in Autofill

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-79014

Google ChromeInformation leak in DOM

Risk 22
Severity
4.3
Infoleak
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Chromium: CVE-2026-79185 Information leak in DOM

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-79185

Google ChromeUninitialized resource in Skia

Risk 37
Severity
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Chromium: CVE-2026-78914 Uninitialized resource in Skia

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-78914

Google ChromeMedium Incorrect authorization in Extensions

Risk 22
Severity
4.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Chromium: CVE-2026-79174 Incorrect authorization in Extensions

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-79174

Microsoft Microsoft EdgeMicrosoft Edge (Chromium-based) Tampering Vulnerability

Risk 34
Severity
5.4
AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C

Authentication bypass using an alternate path or channel in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering over a network.

1 / 2
Source: Microsoft
First published (updated )
CVE-2026-57980

Google ChromeUninitialized resource in ANGLE

Risk 22
Severity
4.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Chromium: CVE-2026-79118 Uninitialized resource in ANGLE

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-79118

Google Google ChromeInformation leak in Extensions

Risk 37
Severity
6.5
Infoleak
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Chromium: CVE-2026-78960 Information leak in Extensions

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-78960

Google ChromeIncorrect provision of specified functionality in Proxy

Risk 35
Severity
5.9
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Chromium: CVE-2026-79126 Incorrect provision of specified functionality in Proxy

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-79126

Google Google ChromeImproper input validation in Network

Risk 37
Severity
6.5
Input Validation
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Chromium: CVE-2026-79253 Improper input validation in Network

1 / 3
Source: Microsoft
First published (updated )
CVE-2026-79253

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203