Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges locally.
Chromium CVE-2026-87564: Type confusion in V8
Chromium CVE-2026-87587: Use after free in V8
Chromium CVE-2026-87536: Use after free in V8
Chromium: CVE-2026-5883 Use after free in Media
Chromium: CVE-2026-17909 Insufficient validation of untrusted input in Isolated Web Apps
Accessibility. A logic issue was addressed with improved checks.
Chromium CVE-2026-87491: Out of bounds write in V8
Chromium: CVE-2026-85046 Type confusion in V8
Chromium: CVE-2025-13223 Type Confusion in V8
Accessibility. A privacy issue was addressed by removing sensitive data.
Chromium: CVE-2026-2441 Use after free in CSS
Chromium: CVE-2026-78953 Missing authorization in SiteIsolation
Chromium CVE-2026-87544: Incorrect authorization in Extensions
Chromium: CVE-2026-0899 Out of bounds memory access in V8
External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally.
Chromium: CVE-2026-79276 Improper privilege management in FileSystem
Chromium: CVE-2026-79264 Incorrect reference resolution in Preload
Chromium: CVE-2026-79259 Improper input validation in Safebrowsing
Chromium: CVE-2026-79251 Improper input validation in Network
Chromium: CVE-2026-79248 Incorrect authorization in Input
Chromium: CVE-2026-79238 Incorrect authorization in ServiceWorker
Chromium: CVE-2026-79211 Incorrect authorization in USB
Chromium: CVE-2026-79205 Incorrect authorization in Network
Chromium: CVE-2026-79201 Improper access control in Workers
Chromium: CVE-2026-79199 Incorrect authorization in Network
Chromium: CVE-2026-79192 Improper input validation in Variations