Multiple vulnerabilities in Microsoft Browser

Description

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service.

Below is a complete list of vulnerabilities:

1. Integer overflow vulnerability in ANGLE can be exploited to cause execute arbitrary code and denial of service.
2. Implementation vulnerability in CSS can be exploited to cause denial of service.
3. Data validation vulnerability in Navigation can be exploited to cause denial of service.
4. Integer overflow vulnerability in Skia can be exploited to cause execute arbitrary code and denial of service.
5. Heap buffer overflow vulnerability in WebCodecs can be exploited to cause denial of service.
6. Implementation vulnerability in WebAssembly can be exploited to cause denial of service.
7. Memory safety vulnerability in DevTools can be exploited to execute arbitrary code.
8. Implementation vulnerability in WebAudio can be exploited to cause denial of service.
9. Implementation vulnerability in V8 can be exploited to cause denial of service.

Original advisories

• CVE-2026-3536

• CVE-2026-3541
• CVE-2026-3545
• CVE-2026-3538
• CVE-2026-3544
• CVE-2026-3542
• CVE-2026-3539
• CVE-2026-3540
• CVE-2026-3543

Exploitation

Public exploits exist for this vulnerability.

Related products

• Microsoft-Edge

CVE list

• CVE-2026-3536
  critical
• CVE-2026-3538
  critical
• CVE-2026-3539
  critical
• CVE-2026-3540
  critical
• CVE-2026-3541
  critical
• CVE-2026-3542
  critical
• CVE-2026-3543
  critical
• CVE-2026-3544
  critical
• CVE-2026-3545
  critical

KB list

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com