Microsoft Edge Stable <150.0.4078.48
productDEA product tracked in the threat graph; the vulnerabilities below are known to affect it.
0
KEV-listed
0
EPSS ≥ 10%
by severity
1critical6high11medium0low
updated 2026-10-28
01
vulnerabilities (44)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2026-58289US | high8.3 | Exploit |
| CVE-2026-57991US | — | — |
| CVE-2026-58291US | — | — |
| CVE-2026-56646US | — | — |
| CVE-2026-57993US | high7.4 | — |
| CVE-2026-58523US | medium6.5 | — |
| CVE-2026-45489US | medium6.5 | — |
| CVE-2026-57987US | — | — |
| CVE-2026-57981US | — | — |
| CVE-2026-57974US | — | — |
| CVE-2026-56645US | — | — |
| CVE-2026-57988US | — | — |
| CVE-2026-57985US | high8.8 | — |
| CVE-2026-58597US | — | — |
| CVE-2026-57983US | critical10.0 | — |
| CVE-2026-58293US | high7.5 | — |
| CVE-2026-57984US | high7.5 | — |
| CVE-2026-58294US | — | — |
| CVE-2026-58288US | — | — |
| CVE-2026-58287US | — | — |
| CVE-2026-58285US | — | — |
| CVE-2026-58276US | — | — |
| CVE-2026-57992US | — | — |
| CVE-2026-57986US | — | — |
| CVE-2026-57975US | — | — |
| CVE-2026-57977US | — | — |
| CVE-2026-58284US | — | — |
| CVE-2026-58297US | high7.1 | — |
| CVE-2026-58296US | — | — |
| CVE-2026-58525US | — | — |
| CVE-2026-58295US | — | — |
| CVE-2026-58292US | — | — |
| CVE-2026-58299US | — | — |
| CVE-2026-58300US | medium5.5 | — |
| CVE-2026-58283US | medium6.9 | — |
| CVE-2026-58522US | medium5.5 | — |
| CVE-2026-58290US | — | — |
| CVE-2026-58286US | medium6.9 | — |
| CVE-2026-58282US | medium6.9 | — |
| CVE-2026-58524US | medium6.1 | — |
| CVE-2026-58298US | medium6.1 | — |
| CVE-2026-58278US | medium5.4 | — |
| CVE-2026-45488US | medium5.9 | — |
| CVE-2026-55945US | — | — |
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-416Use After Free8 CVEs
- CWE-843Access of Resource Using Incompatible Type ('Type Confusion')6 CVEs
- CWE-284Improper Access Control4 CVEs
- CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3 CVEs
- CWE-918Server-Side Request Forgery (SSRF)3 CVEs
- CWE-20Improper Input Validation2 CVEs
- CWE-23Relative Path Traversal2 CVEs
- CWE-285Improper Authorization2 CVEs
03
sources (1)
Which sources assert this record, and when.
- DECERT-Bund (BSI CSAF)44 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan