Multiple vulnerabilities in Microsoft Browser

Description

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, cause denial of service, spoof user interface, bypass security restrictions, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. An elevation of privilege vulnerability in Microsoft Edge (Chromium-based) can be exploited remotely to gain privileges.
2. A remote code execution vulnerability in GPU can be exploited remotely to execute arbitrary code.
3. A spoofing vulnerability in Microsoft Edge (Chromium-based) for Android can be exploited remotely to spoof user interface.
4. Denial of service vulnerability in iOS can be exploited remotely to cause denial of service.
5. Security vulnerability in DevTools can be exploited to bypass security restrictions.
6. An information disclosure vulnerability in Microsoft Edge (Chromium-based) can be exploited remotely to obtain sensitive information.
7. Denial of service vulnerability in GPU can be exploited remotely to cause denial of service.
8. A remote code execution vulnerability in Mobile can be exploited remotely to execute arbitrary code.
9. Denial of service vulnerability in DevTools can be exploited remotely to cause denial of service.
10. Denial of service vulnerability in Payments can be exploited remotely to cause denial of service.
11. Denial of service vulnerability in Mobile can be exploited remotely to cause denial of service.
12. Denial of service vulnerability in Media can be exploited remotely to cause denial of service.

Original advisories

• CVE-2026-42838

• CVE-2026-7912
• CVE-2026-42891
• CVE-2026-35429
• CVE-2026-40416
• CVE-2026-7931
• CVE-2026-7913
• CVE-2026-41107
• CVE-2026-8020
• CVE-2026-7897
• CVE-2026-7915
• CVE-2026-7993
• CVE-2026-7941
• CVE-2026-7905

Exploitation

Related products

• Microsoft-Edge

CVE list

• CVE-2026-7897
  critical
• CVE-2026-7905
  critical
• CVE-2026-7912
  warning
• CVE-2026-7913
  critical
• CVE-2026-7915
  warning
• CVE-2026-7931
  high
• CVE-2026-7941
  warning
• CVE-2026-7993
  warning
• CVE-2026-8020
  high
• CVE-2026-42838
  high
• CVE-2026-42891
  high
• CVE-2026-35429
  warning
• CVE-2026-40416
  warning
• CVE-2026-41107
  high

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com