Multiple vulnerabilities in Microsoft Browser

Description

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service.

Below is a complete list of vulnerabilities:

1. Use after free vulnerability in Dawn can be exploited to cause denial of service or execute arbitrary code.
2. Use after free vulnerability in Compositing can be exploited to cause denial of service or execute arbitrary code.
3. Use after free vulnerability in Navigation can be exploited to cause denial of service or execute arbitrary code.
4. Implementation vulnerability in WebGL can be exploited to cause denial of service.
5. Use after free vulnerability in WebCodecs can be exploited to cause denial of service or execute arbitrary code.
6. Use after free vulnerability in WebGL can be exploited to cause denial of service or execute arbitrary code.
7. Out of bounds read vulnerability in WebCodecs can be exploited to cause denial of service.
8. Heap buffer overflow vulnerability in ANGLE can be exploited to cause denial of service.
9. Integer overflow vulnerability in Codecs can be exploited to cause execute arbitrary code and denial of service.
10. Implementation vulnerability in ANGLE can be exploited to cause denial of service.
11. Integer overflow vulnerability in ANGLE can be exploited to cause execute arbitrary code and denial of service.
12. Memory safety vulnerability in V8 can be exploited to execute arbitrary code.
13. Use after free vulnerability in PDF can be exploited to cause denial of service or execute arbitrary code.
14. Policy enforcement vulnerability in WebUSB can be exploited to cause denial of service.
15. Use after free vulnerability in CSS can be exploited to cause denial of service or execute arbitrary code.
16. Heap buffer overflow vulnerability in GPU can be exploited to cause denial of service.

Original advisories

• CVE-2026-5284

• CVE-2026-5290
• CVE-2026-5289
• CVE-2026-5291
• CVE-2026-5280
• CVE-2026-5285
• CVE-2026-5292
• CVE-2026-5275
• CVE-2026-5274
• CVE-2026-5283
• CVE-2026-5277
• CVE-2026-5279
• CVE-2026-5287
• CVE-2026-5286
• CVE-2026-5281
• CVE-2026-5276
• CVE-2026-5273
• CVE-2026-5272

Exploitation

Public exploits exist for this vulnerability.

Related products

• Microsoft-Edge

CVE list

• CVE-2026-5272
  critical
• CVE-2026-5273
  high
• CVE-2026-5274
  critical
• CVE-2026-5275
  critical
• CVE-2026-5276
  high
• CVE-2026-5277
  critical
• CVE-2026-5279
  critical
• CVE-2026-5280
  critical
• CVE-2026-5281
  critical
• CVE-2026-5283
  high
• CVE-2026-5284
  critical
• CVE-2026-5285
  critical
• CVE-2026-5286
  critical
• CVE-2026-5287
  critical
• CVE-2026-5289
  critical
• CVE-2026-5290
  critical
• CVE-2026-5291
  high
• CVE-2026-5292
  critical

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com