Edge Chromium

Vendor:

First CVE: Nov 3, 2020 · Active for 5 years

278

Total CVEs

More Total CVEs than 100% of tracked products

39.7

Avg CVEs / Year

Higher CVE frequency than 99% of tracked products

7.0

Avg CVSS

Higher Avg CVSS than 41% of tracked products

3.2%

KEV Rate

Higher KEV Rate than 97% of tracked products

Trends Over Time

The number and severity of CVEs published that impact Edge Chromium over time

Volume of CVEsAvg CVSS Base Score

First CVE

Nov 3, 2020

5 years ago

Most Recent CVE

Jul 17, 2026

8 days ago

CVE Severity & Scoring

Edge Chromium278 CVEs

43%

49%

All CVEs352,427 CVEs

45%

40%

11%

LowMediumHighCritical

Attack Vector

Local30 (10.8%)

Network248 (89.2%)

Unknown0 (0.0%)

Physical0 (0.0%)

Adjacent Network0 (0.0%)

Attack Complexity

Low192 (69.1%)

High86 (30.9%)

Unknown0 (0.0%)

User Interaction

None35 (12.6%)

Unknown0 (0.0%)

Required243 (87.4%)

Privileges Required

Low10 (3.6%)

High1 (0.4%)

None267 (96.0%)

Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (278 CVEs).

278 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2023-4863HIGH Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML pag	Sep 12, 2023	8.8	96	YES	NO
CVE-2023-5217HIGH Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a cra	Sep 28, 2023	8.8	87	YES	NO
CVE-2020-16009HIGH Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	Nov 3, 2020	8.8	85	YES	NO
CVE-2022-4135CRITICAL Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via	Nov 25, 2022	9.6	84	YES	NO
CVE-2023-4762HIGH Type Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)	Sep 5, 2023	8.8	83	YES	NO
CVE-2025-14174HIGH Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chro	Dec 12, 2025	8.8	82	YES	NO
CVE-2023-6345CRITICAL Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a m	Nov 29, 2023	9.6	78	YES	NO
CVE-2024-7965HIGH Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium secur	Aug 21, 2024	8.8	77	YES	NO
CVE-2025-5419HIGH Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium secur	Jun 3, 2025	8.8	71	YES	NO
CVE-2023-6702HIGH Type confusion in V8 in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity:	Dec 14, 2023	8.8	49	NO	NO

View all 278 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (278 CVEs).

CISA KEV

9 CVEs

3.2% of CVEs· 97th percentile

Metasploit

0 CVEs

0.0% of CVEs· Bottom 1%

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

3 CVEs

1.1% of CVEs· 87th percentile

Social Chatter

Signals from CVEs in this product scope (278 CVEs).

Media Mentions

Signals from CVEs in this product scope (278 CVEs).

Top CNAs Publishing CVEs For Edge Chromium

Top CWEs

Versions

Version	CVE Count	Avg CVSS	Avg EPSS	KEV
117.0.5938.132	1	8.8	49.0%	1
116.0.5845.229	1	8.8	49.0%	1
105.0.1343.25	1	7.7	0.8%	0