# Microsoft Edge Chromium vulnerabilities Source: https://junglewise.ai/threats/technologies/edge-chromium Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 13 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/edge-chromium.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 37 vulnerabilities in Microsoft Edge Chromium: 0 in the last 7 days and 13 in the last 90 days, 3 of them critical and 3 exploited in the wild. The most recent, CVE-2026-88097, was published on 18 September 2026. Nothing in the last four weeks, down from 4 vulnerabilities in the four before. ## Counts - Last 7 days: 0 - Last 30 days: 0 - Last 90 days: 13 - All time: 37 (3 critical, 3 exploited in the wild) ## About Microsoft Edge Chromium Chromium-based web browser developed and distributed by Microsoft. ## Latest Microsoft Edge Chromium vulnerabilities - [CVE-2026-88097: Microsoft Edge use after free privilege escalation](https://junglewise.ai/threats/cve-2026-88097-use-after-free-in-microsoft-edge-chromium-based-allows-an) (high, CVSS 8.1, published 18 Sep 2026) - [CVE-2026-85893: Microsoft Edge use-after-free in Chromium](https://junglewise.ai/threats/cve-2026-85893-microsoft-edge-use-after-free-in-chromium) (high, CVSS 8.8, published 15 Sep 2026) - [CVE-2026-69486: Microsoft Edge heap-based buffer overflow](https://junglewise.ai/threats/cve-2026-69486-microsoft-edge-heap-based-buffer-overflow) (high, CVSS 8.8, published 15 Sep 2026) - [CVE-2026-85892: Microsoft Edge race condition in shared resource synchronization](https://junglewise.ai/threats/cve-2026-85892-microsoft-edge-race-condition-in-shared-resource-synchronization) (high, CVSS 7.8, published 14 Sep 2026) - [CVE-2026-77490: Microsoft Edge cross-site scripting in page generation](https://junglewise.ai/threats/cve-2026-77490-microsoft-edge-cross-site-scripting-in-page-generation) (medium, CVSS 6.1, published 11 Sep 2026) - [CVE-2026-72984: Microsoft Edge type confusion in resource access](https://junglewise.ai/threats/cve-2026-72984-microsoft-edge-type-confusion-in-resource-access) (high, CVSS 8.8, published 28 Aug 2026) - [CVE-2026-70331: Microsoft Edge for iOS prompt injection vulnerability](https://junglewise.ai/threats/cve-2026-70331-microsoft-edge-for-ios-prompt-injection-vulnerability) (medium, CVSS 5.4, published 28 Aug 2026) - [CVE-2026-70309: Microsoft Edge origin validation error security feature bypass](https://junglewise.ai/threats/cve-2026-70309-microsoft-edge-origin-validation-error-security-feature-bypass) (medium, CVSS 5.4, published 28 Aug 2026) - [CVE-2026-66798: Microsoft Edge use-after-free in Chromium](https://junglewise.ai/threats/cve-2026-66798-microsoft-edge-use-after-free-in-chromium) (medium, CVSS 4.3, published 28 Aug 2026) - [CVE-2026-66324: Microsoft Edge path traversal spoofing vulnerability](https://junglewise.ai/threats/cve-2026-66324-microsoft-edge-path-traversal-spoofing-vulnerability) (medium, CVSS 6.5, published 28 Aug 2026) - [CVE-2026-66323: Microsoft Edge improper neutralization of parameter delimiters](https://junglewise.ai/threats/cve-2026-66323-microsoft-edge-improper-neutralization-of-parameter-delimiters) (medium, CVSS 5.4, published 28 Aug 2026) - [CVE-2026-62904: Microsoft Edge incorrect authorization information disclosure](https://junglewise.ai/threats/cve-2026-62904-microsoft-edge-incorrect-authorization-information-disclosure) (medium, CVSS 5.4, published 28 Aug 2026) - [CVE-2026-58616: Microsoft Edge Copilot Chat race condition information disclosure](https://junglewise.ai/threats/cve-2026-58616-microsoft-edge-copilot-chat-race-condition-information-disclosure) (medium, CVSS 4.4, published 28 Aug 2026) - [CVE-2026-72970: Microsoft Edge heap-based buffer overflow](https://junglewise.ai/threats/cve-2026-72970-microsoft-edge-heap-based-buffer-overflow) (high, CVSS 8.3, published 14 Aug 2026) - [CVE-2026-70339: Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an…](https://junglewise.ai/threats/cve-2026-70339-access-of-resource-using-incompatible-type-type-confusion-in) (medium, CVSS 5.4, published 11 Aug 2026) - [CVE-2026-66326: Microsoft Edge missing authorization allows remote code execution](https://junglewise.ai/threats/cve-2026-66326-microsoft-edge-missing-authorization-allows-remote-code-execution) (medium, CVSS 6.5, published 4 Aug 2026) - [CVE-2026-66325: Microsoft Edge server-side request forgery](https://junglewise.ai/threats/cve-2026-66325-microsoft-edge-server-side-request-forgery) (medium, CVSS 6.1, published 4 Aug 2026) - [CVE-2026-66322: Microsoft Edge origin validation error enabling spoofing attacks](https://junglewise.ai/threats/cve-2026-66322-microsoft-edge-origin-validation-error-enabling-spoofing-attacks) (high, CVSS 7.1, published 4 Aug 2026) - [CVE-2026-66321: Microsoft Edge type confusion vulnerability](https://junglewise.ai/threats/cve-2026-66321-microsoft-edge-type-confusion-vulnerability) (high, CVSS 7.4, published 4 Aug 2026) - [CVE-2026-66318: Microsoft Edge origin validation error allows information disclosure](https://junglewise.ai/threats/cve-2026-66318-microsoft-edge-origin-validation-error-allows-information) (high, CVSS 8.1, published 4 Aug 2026) - [CVE-2026-66317: Microsoft Edge origin validation error allows network tampering](https://junglewise.ai/threats/cve-2026-66317-microsoft-edge-origin-validation-error-allows-network-tampering) (medium, CVSS 5.4, published 4 Aug 2026) - [CVE-2026-66316: Microsoft Edge origin validation bypass allowing spoofing](https://junglewise.ai/threats/cve-2026-66316-microsoft-edge-origin-validation-bypass-allowing-spoofing) (medium, CVSS 5.4, published 4 Aug 2026) - [CVE-2026-66315: Microsoft Edge use-after-free vulnerability in Chromium](https://junglewise.ai/threats/cve-2026-66315-microsoft-edge-use-after-free-vulnerability-in-chromium) (high, CVSS 7.5, published 4 Aug 2026) - [CVE-2026-66314: Microsoft Edge time-of-check time-of-use race condition](https://junglewise.ai/threats/cve-2026-66314-microsoft-edge-time-of-check-time-of-use-race-condition) (medium, CVSS 6.5, published 4 Aug 2026) - [CVE-2026-66313: Microsoft Edge origin validation error allows local tampering](https://junglewise.ai/threats/cve-2026-66313-microsoft-edge-origin-validation-error-allows-local-tampering) (medium, CVSS 6.8, published 4 Aug 2026) ## Most severe Microsoft Edge Chromium vulnerabilities - [CVE-2025-14174: Google Chromium out of bounds memory access in ANGLE](https://junglewise.ai/threats/cve-2025-14174-google-chromium-out-of-bounds-memory-access-in-angle) (critical, exploited in the wild, CVSS 8.8, published 12 Dec 2025) - [CVE-2025-5419: Google Chromium V8 out-of-bounds read and write](https://junglewise.ai/threats/cve-2025-5419-google-chromium-v8-out-of-bounds-read-and-write) (critical, exploited in the wild, CVSS 8.8, published 5 Jun 2025) - [CVE-2024-7965: Google Chromium V8 Inappropriate Implementation Vulnerability](https://junglewise.ai/threats/cve-2024-7965-google-chromium-v8-inappropriate-implementation-vulnerability) (critical, exploited in the wild, CVSS 8.8, published 28 Aug 2024) - [CVE-2026-85893: Microsoft Edge use-after-free in Chromium](https://junglewise.ai/threats/cve-2026-85893-microsoft-edge-use-after-free-in-chromium) (high, CVSS 8.8, published 15 Sep 2026) - [CVE-2026-69486: Microsoft Edge heap-based buffer overflow](https://junglewise.ai/threats/cve-2026-69486-microsoft-edge-heap-based-buffer-overflow) (high, CVSS 8.8, published 15 Sep 2026) - [CVE-2026-72984: Microsoft Edge type confusion in resource access](https://junglewise.ai/threats/cve-2026-72984-microsoft-edge-type-confusion-in-resource-access) (high, CVSS 8.8, published 28 Aug 2026) - [CVE-2026-72970: Microsoft Edge heap-based buffer overflow](https://junglewise.ai/threats/cve-2026-72970-microsoft-edge-heap-based-buffer-overflow) (high, CVSS 8.3, published 14 Aug 2026) - [CVE-2026-66318: Microsoft Edge origin validation error allows information disclosure](https://junglewise.ai/threats/cve-2026-66318-microsoft-edge-origin-validation-error-allows-information) (high, CVSS 8.1, published 4 Aug 2026) - [CVE-2026-88097: Microsoft Edge use after free privilege escalation](https://junglewise.ai/threats/cve-2026-88097-use-after-free-in-microsoft-edge-chromium-based-allows-an) (high, CVSS 8.1, published 18 Sep 2026) - [CVE-2026-85892: Microsoft Edge race condition in shared resource synchronization](https://junglewise.ai/threats/cve-2026-85892-microsoft-edge-race-condition-in-shared-resource-synchronization) (high, CVSS 7.8, published 14 Sep 2026) ## Vulnerabilities per week Nothing in the last four weeks, down from 4 vulnerabilities in the four before. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 8 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 1 | 0 | 0 | | 14 Sep 2026 | 4 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other Microsoft technologies - [Microsoft Windows](https://junglewise.ai/threats/technologies/windows): 2,362 vulnerabilities - [Microsoft Windows 10](https://junglewise.ai/threats/technologies/windows-10): 589 vulnerabilities - [Microsoft Windows 11 24h2](https://junglewise.ai/threats/technologies/windows-11-24h2): 565 vulnerabilities - [Microsoft Windows 11 25h2](https://junglewise.ai/threats/technologies/windows-11-25h2): 534 vulnerabilities - [Microsoft Windows Server 2025](https://junglewise.ai/threats/technologies/windows-server-2025): 534 vulnerabilities - [Microsoft Windows Server 2022](https://junglewise.ai/threats/technologies/windows-server-2022): 528 vulnerabilities - [Microsoft Windows Server 2019](https://junglewise.ai/threats/technologies/windows-server-2019): 521 vulnerabilities - [Microsoft Windows Server 2012](https://junglewise.ai/threats/technologies/windows-server-2012): 517 vulnerabilities - [Microsoft Windows 11](https://junglewise.ai/threats/technologies/windows-11): 494 vulnerabilities - [Microsoft Windows Server 2016](https://junglewise.ai/threats/technologies/windows-server-2016): 476 vulnerabilities - [Microsoft Windows 10 1809](https://junglewise.ai/threats/technologies/windows-10-1809): 380 vulnerabilities - [Microsoft Windows 10 21h2](https://junglewise.ai/threats/technologies/windows-10-21h2): 373 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Microsoft Edge Chromium vulnerabilities", https://junglewise.ai/threats/technologies/edge-chromium, 13 November 2026.