{"schema_version":1,"title":"Microsoft Edge vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 187 vulnerabilities in Microsoft Edge: 1 in the last 7 days and 33 in the last 90 days, 81 of them critical and 80 exploited in the wild. The most recent, CVE-2026-122518, was published on 10 November 2026. 16 vulnerabilities in the last four weeks, up 300% on the four before (4).","url":"https://junglewise.ai/threats/technologies/edge","json_url":"https://junglewise.ai/threats/technologies/edge.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/edge","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":true,"counts":{"high":63,"all_time":187,"critical":81,"exploited":80,"last_7_days":1,"last_30_days":17,"last_90_days":33,"last_365_days":114},"latest":[{"cve":"CVE-2026-122518","cvss":6.5,"slug":"cve-2026-122518-out-of-bounds-read-in-microsoft-edge-chromium-based-allows-an","title":"Microsoft Edge out-of-bounds read information disclosure","severity":"medium","exploited":false,"published_at":"2026-11-10T19:20:37.59+00:00","url":"https://junglewise.ai/threats/cve-2026-122518-out-of-bounds-read-in-microsoft-edge-chromium-based-allows-an"},{"cve":"CVE-2026-69446","cvss":4.4,"slug":"cve-2026-69446-incorrect-authorization-in-microsoft-edge-chromium-based-allows","title":"Microsoft Edge privilege escalation via incorrect authorization","severity":"medium","exploited":false,"published_at":"2026-10-30T18:18:07.587+00:00","url":"https://junglewise.ai/threats/cve-2026-69446-incorrect-authorization-in-microsoft-edge-chromium-based-allows"},{"cve":"CVE-2026-96203","cvss":8.8,"slug":"cve-2026-96203-use-after-free-in-microsoft-edge-chromium-based-allows-an","title":"Microsoft Edge use-after-free privilege elevation","severity":"high","exploited":false,"published_at":"2026-10-29T16:20:09.003+00:00","url":"https://junglewise.ai/threats/cve-2026-96203-use-after-free-in-microsoft-edge-chromium-based-allows-an"},{"cve":"CVE-2026-96199","cvss":8.8,"slug":"cve-2026-96199-heap-based-buffer-overflow-in-microsoft-edge-chromium-based","title":"Microsoft Edge heap-based buffer overflow","severity":"high","exploited":false,"published_at":"2026-10-29T16:20:08.737+00:00","url":"https://junglewise.ai/threats/cve-2026-96199-heap-based-buffer-overflow-in-microsoft-edge-chromium-based"},{"cve":"CVE-2026-96198","cvss":8.8,"slug":"cve-2026-96198-heap-based-buffer-overflow-in-microsoft-edge-chromium-based","title":"Microsoft Edge heap-based buffer overflow","severity":"high","exploited":false,"published_at":"2026-10-29T16:20:08.607+00:00","url":"https://junglewise.ai/threats/cve-2026-96198-heap-based-buffer-overflow-in-microsoft-edge-chromium-based"},{"cve":"CVE-2026-96196","cvss":8.8,"slug":"cve-2026-96196-incomplete-list-of-disallowed-inputs-in-microsoft-edge-chromium","title":"Microsoft Edge incomplete input validation bypass","severity":"high","exploited":false,"published_at":"2026-10-29T16:20:08.477+00:00","url":"https://junglewise.ai/threats/cve-2026-96196-incomplete-list-of-disallowed-inputs-in-microsoft-edge-chromium"},{"cve":"CVE-2026-96187","cvss":7.4,"slug":"cve-2026-96187-access-of-resource-using-incompatible-type-type-confusion-in","title":"Microsoft Edge type confusion allows information disclosure","severity":"high","exploited":false,"published_at":"2026-10-29T16:20:08.143+00:00","url":"https://junglewise.ai/threats/cve-2026-96187-access-of-resource-using-incompatible-type-type-confusion-in"},{"cve":"CVE-2026-88090","cvss":5.4,"slug":"cve-2026-88090-access-of-resource-using-incompatible-type-type-confusion-in","title":"Microsoft Edge type confusion vulnerability in resource access","severity":"medium","exploited":false,"published_at":"2026-10-29T16:19:54.28+00:00","url":"https://junglewise.ai/threats/cve-2026-88090-access-of-resource-using-incompatible-type-type-confusion-in"},{"cve":"CVE-2026-88078","cvss":4.3,"slug":"cve-2026-88078-improper-verification-of-cryptographic-signature-in-microsoft","title":"Microsoft Edge cryptographic signature verification bypass","severity":"medium","exploited":false,"published_at":"2026-10-29T16:19:53.44+00:00","url":"https://junglewise.ai/threats/cve-2026-88078-improper-verification-of-cryptographic-signature-in-microsoft"},{"cve":"CVE-2026-88077","cvss":8.8,"slug":"cve-2026-88077-integer-overflow-or-wraparound-in-microsoft-edge-chromium-based","title":"Microsoft Edge integer overflow in Chromium","severity":"high","exploited":false,"published_at":"2026-10-29T16:19:52.807+00:00","url":"https://junglewise.ai/threats/cve-2026-88077-integer-overflow-or-wraparound-in-microsoft-edge-chromium-based"},{"cve":"CVE-2026-85899","cvss":8.1,"slug":"cve-2026-85899-use-after-free-in-microsoft-edge-chromium-based-allows-an","title":"Microsoft Edge use-after-free privilege escalation","severity":"high","exploited":false,"published_at":"2026-10-29T16:19:45.41+00:00","url":"https://junglewise.ai/threats/cve-2026-85899-use-after-free-in-microsoft-edge-chromium-based-allows-an"},{"cve":"CVE-2026-85897","cvss":8.8,"slug":"cve-2026-85897-heap-based-buffer-overflow-in-microsoft-edge-chromium-based","title":"Microsoft Edge heap-based buffer overflow","severity":"high","exploited":false,"published_at":"2026-10-29T16:19:45.22+00:00","url":"https://junglewise.ai/threats/cve-2026-85897-heap-based-buffer-overflow-in-microsoft-edge-chromium-based"},{"cve":"CVE-2026-85890","cvss":8.8,"slug":"cve-2026-85890-double-free-in-microsoft-edge-chromium-based-allows-an","title":"Microsoft Edge double free vulnerability allows code execution","severity":"high","exploited":false,"published_at":"2026-10-29T16:19:45.017+00:00","url":"https://junglewise.ai/threats/cve-2026-85890-double-free-in-microsoft-edge-chromium-based-allows-an"},{"cve":"CVE-2026-20942","cvss":4.3,"slug":"cve-2026-20942-improper-restriction-of-rendered-ui-layers-or-frames-in-microsoft","title":"Microsoft Edge UI layer spoofing vulnerability","severity":"medium","exploited":false,"published_at":"2026-10-29T16:18:08.593+00:00","url":"https://junglewise.ai/threats/cve-2026-20942-improper-restriction-of-rendered-ui-layers-or-frames-in-microsoft"},{"cve":"CVE-2026-62765","cvss":7.5,"slug":"cve-2026-62765-access-of-resource-using-incompatible-type-type-confusion-in","title":"Microsoft Edge type confusion vulnerability","severity":"high","exploited":false,"published_at":"2026-10-27T22:17:29.267+00:00","url":"https://junglewise.ai/threats/cve-2026-62765-access-of-resource-using-incompatible-type-type-confusion-in"},{"cve":"CVE-2026-85898","cvss":8.8,"slug":"cve-2026-85898-access-of-resource-using-incompatible-type-type-confusion-in","title":"Microsoft Edge type confusion vulnerability","severity":"high","exploited":false,"published_at":"2026-10-27T21:19:34.117+00:00","url":"https://junglewise.ai/threats/cve-2026-85898-access-of-resource-using-incompatible-type-type-confusion-in"},{"cve":"CVE-2026-83831","cvss":8.8,"slug":"cve-2026-83831-double-free-in-microsoft-edge-chromium-based-allows-an","title":"Microsoft Edge double free vulnerability","severity":"high","exploited":false,"published_at":"2026-10-27T21:19:08.03+00:00","url":"https://junglewise.ai/threats/cve-2026-83831-double-free-in-microsoft-edge-chromium-based-allows-an"},{"cve":"CVE-2026-88097","cvss":8.1,"epss":0.0026,"slug":"cve-2026-88097-use-after-free-in-microsoft-edge-chromium-based-allows-an","title":"Microsoft Edge use after free privilege escalation","severity":"high","exploited":false,"published_at":"2026-09-18T21:18:45.913+00:00","url":"https://junglewise.ai/threats/cve-2026-88097-use-after-free-in-microsoft-edge-chromium-based-allows-an"},{"cve":"CVE-2026-85893","cvss":8.8,"epss":0.0084,"slug":"cve-2026-85893-microsoft-edge-use-after-free-in-chromium","title":"Microsoft Edge use-after-free in Chromium","severity":"high","exploited":false,"published_at":"2026-09-15T23:19:12.11+00:00","url":"https://junglewise.ai/threats/cve-2026-85893-microsoft-edge-use-after-free-in-chromium"},{"cve":"CVE-2026-69486","cvss":8.8,"epss":0.0084,"slug":"cve-2026-69486-microsoft-edge-heap-based-buffer-overflow","title":"Microsoft Edge heap-based buffer overflow","severity":"high","exploited":false,"published_at":"2026-09-15T23:17:41.633+00:00","url":"https://junglewise.ai/threats/cve-2026-69486-microsoft-edge-heap-based-buffer-overflow"},{"cve":"CVE-2026-85892","cvss":7.8,"epss":0.0021,"slug":"cve-2026-85892-microsoft-edge-race-condition-in-shared-resource-synchronization","title":"Microsoft Edge race condition in shared resource synchronization","severity":"high","exploited":false,"published_at":"2026-09-14T18:20:19.343+00:00","url":"https://junglewise.ai/threats/cve-2026-85892-microsoft-edge-race-condition-in-shared-resource-synchronization"},{"cve":"CVE-2026-77490","cvss":6.1,"epss":0.0042,"slug":"cve-2026-77490-microsoft-edge-cross-site-scripting-in-page-generation","title":"Microsoft Edge cross-site scripting in page generation","severity":"medium","exploited":false,"published_at":"2026-09-11T20:18:45.403+00:00","url":"https://junglewise.ai/threats/cve-2026-77490-microsoft-edge-cross-site-scripting-in-page-generation"},{"cve":"CVE-2026-70341","cvss":8.5,"epss":0.0066,"slug":"cve-2026-70341-microsoft-edge-use-after-free-vulnerability","title":"Microsoft Edge use-after-free vulnerability","severity":"high","exploited":false,"published_at":"2026-09-11T16:17:46.08+00:00","url":"https://junglewise.ai/threats/cve-2026-70341-microsoft-edge-use-after-free-vulnerability"},{"cve":"CVE-2026-87491","cvss":8.8,"epss":0.0314,"slug":"cve-2026-87491-google-chromium-v8-out-of-bounds-write-in-javascript-engine","title":"Google Chromium V8 out-of-bounds write in JavaScript engine","severity":"critical","exploited":true,"published_at":"2026-09-09T01:17:05.887+00:00","url":"https://junglewise.ai/threats/cve-2026-87491-google-chromium-v8-out-of-bounds-write-in-javascript-engine"},{"cve":"CVE-2026-85046","cvss":8.8,"epss":0.4888,"slug":"cve-2026-85046-google-chromium-v8-type-confusion-vulnerability","title":"Google Chromium V8 type confusion vulnerability","severity":"critical","exploited":true,"published_at":"2026-09-03T20:17:24.21+00:00","url":"https://junglewise.ai/threats/cve-2026-85046-google-chromium-v8-type-confusion-vulnerability"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":8},{"week":"2026-08-31","critical":1,"exploited":1,"vulnerabilities":1},{"week":"2026-09-07","critical":1,"exploited":1,"vulnerabilities":3},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":4},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":16},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":1}],"related":[{"name":"Microsoft Windows","slug":"windows","vulnerabilities":2362,"url":"https://junglewise.ai/threats/technologies/windows"},{"name":"Microsoft Windows 10","slug":"windows-10","vulnerabilities":589,"url":"https://junglewise.ai/threats/technologies/windows-10"},{"name":"Microsoft Windows 11 24h2","slug":"windows-11-24h2","vulnerabilities":565,"url":"https://junglewise.ai/threats/technologies/windows-11-24h2"},{"name":"Microsoft Windows 11 25h2","slug":"windows-11-25h2","vulnerabilities":534,"url":"https://junglewise.ai/threats/technologies/windows-11-25h2"},{"name":"Microsoft Windows Server 2025","slug":"windows-server-2025","vulnerabilities":534,"url":"https://junglewise.ai/threats/technologies/windows-server-2025"},{"name":"Microsoft Windows Server 2022","slug":"windows-server-2022","vulnerabilities":528,"url":"https://junglewise.ai/threats/technologies/windows-server-2022"},{"name":"Microsoft Windows Server 2019","slug":"windows-server-2019","vulnerabilities":521,"url":"https://junglewise.ai/threats/technologies/windows-server-2019"},{"name":"Microsoft Windows Server 2012","slug":"windows-server-2012","vulnerabilities":517,"url":"https://junglewise.ai/threats/technologies/windows-server-2012"},{"name":"Microsoft Windows 11","slug":"windows-11","vulnerabilities":494,"url":"https://junglewise.ai/threats/technologies/windows-11"},{"name":"Microsoft Windows Server 2016","slug":"windows-server-2016","vulnerabilities":476,"url":"https://junglewise.ai/threats/technologies/windows-server-2016"},{"name":"Microsoft Windows 10 1809","slug":"windows-10-1809","vulnerabilities":380,"url":"https://junglewise.ai/threats/technologies/windows-10-1809"},{"name":"Microsoft Windows 10 21h2","slug":"windows-10-21h2","vulnerabilities":373,"url":"https://junglewise.ai/threats/technologies/windows-10-21h2"}],"technology":{"hub":true,"name":"Microsoft Edge","slug":"edge","vendor":{"hub":true,"name":"Microsoft","slug":"microsoft","url":"https://junglewise.ai/threats/vendors/microsoft"},"aliases":["edge-chromium-based"],"category":"web-browser","description":"Web browser developed by Microsoft.","url":"https://junglewise.ai/threats/technologies/edge"},"most_severe":[{"cve":"CVE-2014-1776","cvss":9.8,"slug":"cve-2014-1776-microsoft-internet-explorer-memory-corruption-vulnerability","title":"Microsoft Internet Explorer Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2022-01-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2014-1776-microsoft-internet-explorer-memory-corruption-vulnerability"},{"cve":"CVE-2024-7971","cvss":9.6,"slug":"cve-2024-7971-google-chromium-v8-type-confusion-vulnerability","title":"Google Chromium V8 Type Confusion Vulnerability","severity":"critical","exploited":true,"published_at":"2024-08-26T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-7971-google-chromium-v8-type-confusion-vulnerability"},{"cve":"CVE-2024-5274","cvss":9.6,"slug":"cve-2024-5274-google-chromium-v8-type-confusion-vulnerability","title":"Google Chromium V8 Type Confusion Vulnerability","severity":"critical","exploited":true,"published_at":"2024-05-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-5274-google-chromium-v8-type-confusion-vulnerability"},{"cve":"CVE-2024-4671","cvss":9.6,"slug":"cve-2024-4671-google-chromium-visuals-use-after-free-vulnerability","title":"Google Chromium Visuals Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2024-05-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-4671-google-chromium-visuals-use-after-free-vulnerability"},{"cve":"CVE-2022-3075","cvss":9.6,"slug":"cve-2022-3075-google-chromium-mojo-insufficient-data-validation-vulnerability","title":"Google Chromium Mojo Insufficient Data Validation Vulnerability","severity":"critical","exploited":true,"published_at":"2022-09-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-3075-google-chromium-mojo-insufficient-data-validation-vulnerability"},{"cve":"CVE-2021-37973","cvss":9.6,"slug":"cve-2021-37973-google-chromium-portals-use-after-free-vulnerability","title":"Google Chromium Portals Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-37973-google-chromium-portals-use-after-free-vulnerability"},{"cve":"CVE-2021-30633","cvss":9.6,"slug":"cve-2021-30633-google-chromium-indexed-db-api-use-after-free-vulnerability","title":"Google Chromium Indexed DB API Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-30633-google-chromium-indexed-db-api-use-after-free-vulnerability"},{"cve":"CVE-2010-3962","cvss":9.3,"epss":0.8891,"slug":"cve-2010-3962-microsoft-internet-explorer-use-after-free-in-css-processing","title":"Microsoft Internet Explorer use-after-free in CSS processing","severity":"critical","exploited":true,"published_at":"2025-10-06T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2010-3962-microsoft-internet-explorer-use-after-free-in-css-processing"},{"cve":"CVE-2013-3893","cvss":8.8,"epss":0.8261,"slug":"cve-2013-3893-microsoft-internet-explorer-use-after-free-in-mshtml-dll","title":"Microsoft Internet Explorer use after free in mshtml.dll","severity":"critical","exploited":true,"published_at":"2025-08-12T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2013-3893-microsoft-internet-explorer-use-after-free-in-mshtml-dll"},{"cve":"CVE-2026-85046","cvss":8.8,"epss":0.4888,"slug":"cve-2026-85046-google-chromium-v8-type-confusion-vulnerability","title":"Google Chromium V8 type confusion vulnerability","severity":"critical","exploited":true,"published_at":"2026-09-03T20:17:24.21+00:00","url":"https://junglewise.ai/threats/cve-2026-85046-google-chromium-v8-type-confusion-vulnerability"}],"generated_at":"2026-11-13T03:07:00.155039+00:00"}