Microsoft Edge Information Disclosure Flaws Span Multiple CVEs
Vulnerability Disclosure · 12 sources · Updated 4mo ago · First seen May 25, 2026
Microsoft has published security advisories for a series of Microsoft Edge (Chromium-based) information disclosure vulnerabilities affecting the browser across multiple release cycles. The referenced issues include CVE-2021-36929, CVE-2023-33145, CVE-2023-36880, CVE-2023-38158, CVE-2024-21423, CVE-2024-29987, CVE-2024-30056, CVE-2024-38103, CVE-2024-38222, CVE-2024-49025, and CVE-2025-49741, all listed by Microsoft as information disclosure vulnerabilities in the Chromium-based Edge browser.
The advisories provide limited public detail, but the volume and recurrence of these CVEs show an ongoing stream of browser security fixes tied to unintended exposure of sensitive information. For defenders, the immediate takeaway is to ensure Microsoft Edge is kept fully updated and to track MSRC guidance for affected versions, as browser-based information disclosure bugs can aid reconnaissance, weaken privacy protections, or support follow-on exploitation when chained with other vulnerabilities.
