Kaspersky ID:
KLA90894
Detect Date:
02/17/2026
Updated:
02/18/2026

Description

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to obtain sensitive information, cause denial of service, execute arbitrary code.

Below is a complete list of vulnerabilities:

  1. Information disclosure vulnerability can be exploited to obtain sensitive information.
  2. Implementation vulnerability in PictureInPicture can be exploited to cause denial of service.
  3. Implementation vulnerability in Downloads can be exploited to cause denial of service.
  4. Use-after-free vulnerability in CSS can be exploited to cause denial of service or execute arbitrary code.
  5. Implementation vulnerability in File input can be exploited to cause denial of service.
  6. Implementation vulnerability in Animation can be exploited to cause denial of service.
  7. Use after free vulnerability in CSS can be exploited to cause denial of service or execute arbitrary code.

Original advisories

Exploitation

Public exploits exist for this vulnerability.

Related products

CVE list

  • CVE-2026-2313
    critical
  • CVE-2026-2317
    high
  • CVE-2026-2318
    high
  • CVE-2026-2320
    high
  • CVE-2026-2323
    warning
  • CVE-2026-2441
    critical
  • CVE-2026-0102
    warning

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com

Found an inaccuracy in the description of this vulnerability? Let us know!
Kaspersky Next
Let’s go Next: redefine your business’s cybersecurity
Learn more
New Kaspersky!
Your digital life deserves complete protection!
Learn more
Do you want to save your changes?
Your message has been sent successfully.