Microsoft Edge

Name: Microsoft Edge
Brand: Microsoft

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

35critical166high140medium4low

updated 2026-10-27

vulnerabilities (3,385)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-2441US	high8.8OT critical	55.0% (99th)	KEV	145.0.3800.58	2026-02-13	< 145.0.3800.58
CVE-2025-6554US	—OT critical	14.1% (97th)	KEV	138.0.3351.65	2025-06-30	2 versions
CVE-2026-5281US	—OT critical	13.5% (96th)	KEV	146.0.3856.97	2026-04-01	< 146.0.3856.97
CVE-2024-4761US	high8.8OT critical	11.0% (96th)	KEV	124.0.2478.105	2024-05-14	< 124.0.2478.105
CVE-2025-5419US	—OT critical	7.82% (95th)	KEV	137.0.3296.62	2025-06-03	2 versions
CVE-2024-5274US	critical9.6OT critical	7.73% (95th)	KEV	125.0.2535.67	2024-05-28	< 125.0.2535.67
CVE-2023-7024US	high8.8OT critical	6.67% (94th)	KEV	120.0.2210.91	2023-12-21	< 120.0.2210.91
CVE-2025-10585US	critical9.8OT critical	6.06% (93rd)	KEV	140.0.3485.81	2025-09-24	< 140.0.3485.81
CVE-2024-0519US	high8.8OT critical	3.80% (90th)	KEV	120.0.2210.144	2024-01-16	< 120.0.2210.144
CVE-2026-87491US	—OT critical	3.51% (89th)	KEV	153.0.4234.32	2026-09-09	< 153.0.4234.32
CVE-2026-11645US	—OT critical	2.44% (84th)	KEV	149.0.4022.53	2026-06-09	< 149.0.4022.53
CVE-2026-85046US	—OT critical	1.81% (78th)	KEV	152.0.4191.65	2026-09-03	< 152.0.4191.65
CVE-2023-6345US	critical9.6OT critical	16.5% (97th)	KEV	119.0.2151.97	2023-11-29	2 versions
CVE-2025-13223US	—OT critical	4.90% (92nd)	KEV	142.0.3595.90	2025-11-17	< 142.0.3595.90
CVE-2026-0628US	—OT elevated	20.9% (98th)	Exploit	143.0.3650.139	2026-01-07	< 143.0.3650.139
CVE-2024-2887US	high7.7	17.9% (97th)	Exploit	123.0.2420.65	2024-03-26	2 versions
CVE-2025-2135US	—	6.57% (94th)	Exploit	134.0.3124.66	2025-03-10	2 versions
CVE-2025-4664US	medium4.3	5.43% (93rd)	Exploit	136.0.3240.76	2025-05-14	< 136.0.3240.76
CVE-2024-12381US	high8.8	4.84% (92nd)	Exploit	131.0.2903.99	2024-12-12	< 131.0.2903.99
CVE-2025-49741US	high7.5	3.91% (90th)	Exploit	135.0.3179.98	2025-07-01	2 versions
CVE-2025-14765US	—	2.97% (87th)	Exploit	143.0.3650.96	2025-12-16	< 143.0.3650.96
CVE-2026-58289US	high8.3	1.99% (81st)	Exploit	no fix	2026-07-03	2 versions
CVE-2023-6350US	high8.8	1.28% (70th)	Exploit	Extended Stable Channel 118.0.2088.122	2023-11-29	2 versions
CVE-2024-6778US	high7.5	0.79% (56th)	Exploit	126.0.2592.113	2024-07-16	< 126.0.2592.113
CVE-2025-10200US	—	0.64% (51st)	Exploit	140.0.3485.66	2025-09-10	< 140.0.3485.66
CVE-2025-47181US	—	0.60% (49th)	Exploit	1.3.195.61	2025-05-22	< 1.3.195.61
CVE-2026-76036US	—	0.51% (43rd)	Exploit	151.0.4129.101	2026-08-18	< 151.0.4129.101
CVE-2026-10961US	—	0.50% (43rd)	Exploit	149.0.4022.52	2026-06-04	< 149.0.4022.52
CVE-2026-14431US	—	0.50% (43rd)	Exploit	150.0.4078.48	2026-07-01	3 versions
CVE-2025-13224US	—	0.48% (41st)	Exploit	142.0.3595.90	2025-11-17	< 142.0.3595.90
CVE-2026-87492US	—OT elevated	0.44% (38th)	Exploit	153.0.4234.32	2026-09-09	< 153.0.4234.32
CVE-2026-85048US	—	0.40% (34th)	Exploit	152.0.4191.65	2026-09-03	< 152.0.4191.65
CVE-2026-11118US	—	0.39% (32nd)	Exploit	149.0.4022.52	2026-06-04	< 149.0.4022.52
CVE-2026-11102US	high8.8	0.37% (31st)	Exploit	149.0.4022.52	2026-06-04	< 149.0.4022.52
CVE-2026-4447US	—	0.37% (30th)	Exploit	146.0.3856.72	2026-03-20	< 146.0.3856.72
CVE-2026-6307US	—	0.36% (30th)	Exploit	146.0.3856.130	2026-04-15	2 versions
CVE-2026-13934US	—	0.34% (28th)	Exploit	149.0.4022.105	2026-06-30	3 versions
CVE-2026-6300US	—	0.34% (27th)	Exploit	147.0.3912.72	2026-04-15	2 versions
CVE-2026-91737US	—	0.34% (27th)	Exploit	153.0.4234.46	2026-09-15	< 153.0.4234.46
CVE-2026-9973US	—	0.31% (24th)	Exploit	148.0.3967.96	2026-05-28	< 148.0.3967.96
CVE-2026-11117US	—	0.31% (23rd)	Exploit	149.0.4022.52	2026-06-04	< 149.0.4022.52
CVE-2026-7899US	—	0.30% (23rd)	Exploit	148.0.3967.54	2026-05-06	< 148.0.3967.54
CVE-2026-4444US	—	0.30% (23rd)	Exploit	146.0.3856.72	2026-03-20	< 146.0.3856.72
CVE-2025-12433US	—	0.29% (22nd)	Exploit	142.0.3595.58	2025-11-10	< 142.0.3595.58
CVE-2026-11116US	—	0.29% (21st)	Exploit	149.0.4022.52	2026-06-04	< 149.0.4022.52
CVE-2026-11120US	critical9.6	0.27% (18th)	Exploit	149.0.4022.52	2026-06-04	< 149.0.4022.52
CVE-2026-11101US	—	0.25% (16th)	Exploit	149.0.4022.52	2026-06-04	< 149.0.4022.52
CVE-2026-9999US	—	0.25% (16th)	Exploit	148.0.3967.96	2026-05-28	< 148.0.3967.96
CVE-2026-11105US	—	0.24% (15th)	Exploit	149.0.4022.52	2026-06-04	< 149.0.4022.52
CVE-2026-11119US	—	0.23% (14th)	Exploit	149.0.4022.52	2026-06-04	< 149.0.4022.52

showing 50 of 3,385

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-416Use After Free885 CVEs
CWE-20Improper Input Validation433 CVEs
CWE-451User Interface (UI) Misrepresentation of Critical Information239 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer187 CVEs
CWE-125Out-of-bounds Read154 CVEs
CWE-346Origin Validation Error129 CVEs
CWE-787Out-of-bounds Write117 CVEs
CWE-843Access of Resource Using Incompatible Type ('Type Confusion')114 CVEs

sources (2)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)3,385 CVEs
NLNCSC-NL (CSAF)5 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan