Multiple vulnerabilities in Microsoft Browser

Description

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, spoof user interface.

Below is a complete list of vulnerabilities:

1. Out of bounds read vulnerability in Web Speech can be exploited to cause denial of service.
2. Use after free vulnerability in WebMIDI can be exploited to cause denial of service or execute arbitrary code.
3. Policy enforcement vulnerability in DevTools can be exploited to cause denial of service.
4. Inappropriate implementation in V8 can be exploited to cause denial of service or execute arbitrary code.
5. Policy enforcement vulnerability in Clipboard can be exploited to cause denial of service.
6. Heap buffer overflow vulnerability in WebML can be exploited to cause denial of service.
7. Policy enforcement vulnerability in PDF can be exploited to cause denial of service.
8. A spoofing vulnerability in Microsoft Edge (Chromium-based) for Android can be exploited remotely to spoof user interface.
9. Use after free vulnerability in TextEncoding can be exploited to cause denial of service or execute arbitrary code.
10. Use after free vulnerability in Extensions can be exploited to cause denial of service or execute arbitrary code.
11. Security UI vulnerability in LookalikeChecks can be exploited to spoof user interface.
12. Policy enforcement vulnerability in ChromeDriver can be exploited to cause denial of service.
13. Use after free vulnerability in WebMCP can be exploited to cause denial of service or execute arbitrary code.
14. Security UI vulnerability in WebAppInstalls can be exploited to spoof user interface.
15. Heap buffer overflow vulnerability in Skia can be exploited to cause denial of service.
16. Use after free vulnerability in WebView can be exploited to cause denial of service or execute arbitrary code.
17. Security UI vulnerability in PictureInPicture can be exploited to spoof user interface.
18. Use after free vulnerability in MediaStream can be exploited to cause denial of service or execute arbitrary code.
19. Heap buffer overflow vulnerability in ResourceTiming can be exploited to cause denial of service.
20. Out of bounds read vulnerability in V8 can be exploited to cause denial of service.
21. Heap buffer overflow vulnerability in Navigation can be exploited to cause denial of service.
22. Use after free vulnerability in Agents can be exploited to cause denial of service or execute arbitrary code.
23. Integer overflow vulnerability in WebML can be exploited to cause execute arbitrary code and denial of service.
24. Security UI vulnerability in Downloads can be exploited to spoof user interface.
25. Use after free vulnerability in WindowDialog can be exploited to cause denial of service or execute arbitrary code.
26. Policy enforcement vulnerability in Extensions can be exploited to cause denial of service.
27. Out of bounds memory access vulnerability in WebML can be exploited to cause denial of service.

Original advisories

• CVE-2026-3916

• CVE-2026-3923
• CVE-2026-3941
• CVE-2026-3910
• CVE-2026-3938
• CVE-2026-3915
• CVE-2026-3932
• CVE-2026-0385
• CVE-2026-3921
• CVE-2026-3913
• CVE-2026-3919
• CVE-2026-3939
• CVE-2026-3925
• CVE-2026-3934
• CVE-2026-3918
• CVE-2026-3935
• CVE-2026-3931
• CVE-2026-3936
• CVE-2026-3942
• CVE-2026-3922
• CVE-2026-3929
• CVE-2026-3940
• CVE-2026-3926
• CVE-2026-3930
• CVE-2026-3927
• CVE-2026-3917
• CVE-2026-3914
• CVE-2026-3937
• CVE-2026-3924
• CVE-2026-3928
• CVE-2026-3920

Exploitation

Public exploits exist for this vulnerability.

Related products

• Microsoft-Edge

CVE list

• CVE-2026-3913
  critical
• CVE-2026-3914
  critical
• CVE-2026-3915
  critical
• CVE-2026-3916
  critical
• CVE-2026-3917
  critical
• CVE-2026-3918
  critical
• CVE-2026-3919
  critical
• CVE-2026-3920
  critical
• CVE-2026-3921
  critical
• CVE-2026-3922
  critical
• CVE-2026-3923
  critical
• CVE-2026-3924
  critical
• CVE-2026-3925
  warning
• CVE-2026-3926
  critical
• CVE-2026-3927
  warning
• CVE-2026-3928
  unknown
• CVE-2026-3929
  warning
• CVE-2026-3930
  unknown
• CVE-2026-3931
  critical
• CVE-2026-3932
  unknown
• CVE-2026-3934
  unknown
• CVE-2026-3935
  unknown
• CVE-2026-3936
  critical
• CVE-2026-3937
  unknown
• CVE-2026-3938
  unknown
• CVE-2026-3939
  unknown
• CVE-2026-3940
  unknown
• CVE-2026-3941
  warning
• CVE-2026-3942
  warning
• CVE-2026-3910
  critical
• CVE-2026-0385
  warning

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com