Summary
| Detail | |||
|---|---|---|---|
| Vendor | Microsoft | First view | 2020-11-03 |
| Product | Edge | Last view | 2023-11-03 |
| Version | - | Type | Application |
| Update | * | ||
| Edition | * | ||
| Language | * | ||
| Sofware Edition | * | ||
| Target Software | android | ||
| Target Hardware | * | ||
| Other | * | ||
| CPE Product | cpe:2.3:a:microsoft:edge | ||
Activity : Overall
Related : CVE
| Date | Alert | Description | |
|---|---|---|---|
| 4.3 | 2023-11-03 | CVE-2023-36029 | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
| 8.8 | 2023-09-12 | CVE-2023-4863 | Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical) |
| 4.3 | 2023-07-14 | CVE-2023-36883 | Microsoft Edge for iOS Spoofing Vulnerability |
| 3.7 | 2023-04-11 | CVE-2023-28301 | Microsoft Edge (Chromium-based) Tampering Vulnerability |
| 4.3 | 2023-04-11 | CVE-2023-28284 | Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability |
| 8.3 | 2022-12-13 | CVE-2022-44708 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
| 9.6 | 2022-11-25 | CVE-2022-4135 | Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High) |
| 4.3 | 2022-01-25 | CVE-2022-23258 | Microsoft Edge for Android Spoofing Vulnerability |
| 8.8 | 2021-09-15 | CVE-2021-38669 | Microsoft Edge (Chromium-based) Tampering Vulnerability |
| 8.8 | 2021-09-03 | CVE-2021-30624 | Chromium: CVE-2021-30624 Use after free in Autofill |
| 8.8 | 2021-09-03 | CVE-2021-30623 | Chromium: CVE-2021-30623 Use after free in Bookmarks |
| 8.8 | 2021-09-03 | CVE-2021-30622 | Chromium: CVE-2021-30622 Use after free in WebApp Installs |
| 6.5 | 2021-09-03 | CVE-2021-30621 | Chromium: CVE-2021-30621 UI Spoofing in Autofill |
| 8.8 | 2021-09-03 | CVE-2021-30620 | Chromium: CVE-2021-30620 Insufficient policy enforcement in Blink |
| 6.5 | 2021-09-03 | CVE-2021-30619 | Chromium: CVE-2021-30619 UI Spoofing in Autofill |
| 8.8 | 2021-09-03 | CVE-2021-30618 | Chromium: CVE-2021-30618 Inappropriate implementation in DevTools |
| 6.5 | 2021-09-03 | CVE-2021-30617 | Chromium: CVE-2021-30617 Policy bypass in Blink |
| 8.8 | 2021-09-03 | CVE-2021-30616 | Chromium: CVE-2021-30616 Use after free in Media |
| 6.5 | 2021-09-03 | CVE-2021-30615 | Chromium: CVE-2021-30615 Cross-origin data leak in Navigation |
| 8.8 | 2021-09-03 | CVE-2021-30614 | Chromium: CVE-2021-30614 Heap buffer overflow in TabStrip |
| 8.8 | 2021-09-03 | CVE-2021-30613 | Chromium: CVE-2021-30613 Use after free in Base internals |
| 8.8 | 2021-09-03 | CVE-2021-30612 | Chromium: CVE-2021-30612 Use after free in WebRTC |
| 8.8 | 2021-09-03 | CVE-2021-30611 | Chromium: CVE-2021-30611 Use after free in WebRTC |
| 8.8 | 2021-09-03 | CVE-2021-30610 | Chromium: CVE-2021-30610 Use after free in Extensions API |
| 8.8 | 2021-09-03 | CVE-2021-30609 | Chromium: CVE-2021-30609 Use after free in Sign-In |
CWE : Common Weakness Enumeration
| % | id | Name |
|---|---|---|
| 59% (13) | CWE-416 | Use After Free |
| 18% (4) | CWE-787 | Out-of-bounds Write |
| 9% (2) | CWE-290 | Authentication Bypass by Spoofing |
| 4% (1) | CWE-269 | Improper Privilege Management |
| 4% (1) | CWE-119 | Failure to Constrain Operations within the Bounds of a Memory Buffer |
| 4% (1) | CWE-74 | Failure to Sanitize Data into a Different Plane ('Injection') |
