Multiple vulnerabilities in Microsoft Browser

Description

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, gain privileges, inject malicious code, cause denial of service, perform cross-site scripting attack, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. Use after free in Downloads in Google Chrome
2. Inappropriate implementation in Extensions in Google Chrome
3. Use after free in Extensions in Google Chrome
4. Insufficient policy enforcement in File System Access in Google Chrome
5. Use after free in WebShare in Google Chrome
6. Use after free in Web Authentication in Google Chrome
7. Object lifecycle issue in Metrics in Google Chrome
8. Inappropriate implementation in Passwords in Google Chrome
9. Heap buffer overflow in WebRTC in Google Chrome
10. Race in Safe Browsing in Google Chrome
11. Insufficient validation of untrusted input in Input in Google Chrome
12. Inappropriate implementation in Views in Google Chrome
13. Use after free in Tab Strip in Google Chrome
14. Use after free in File Input in Google Chrome
15. Race in Updater in Google Chrome
16. Use after free in Chromoting in Google Chrome
17. Use after free in Browser in Google Chrome
18. Use after free in DigitalCredentials in Google Chrome
19. Out of bounds read in WebRTC in Google Chrome
20. Use after free in Media in Google Chrome
21. Inappropriate implementation in Serial in Google Chrome
22. Use after free in Digital Credentials in Google Chrome
23. Out of bounds read in Chromoting in Google Chrome

Original advisories

• CVE-2026-12452

• CVE-2026-12457
• CVE-2026-12467
• CVE-2026-12460
• CVE-2026-12437
• CVE-2026-12443
• CVE-2026-12465
• CVE-2026-12446
• CVE-2026-12466
• CVE-2026-12456
• CVE-2026-12454
• CVE-2026-12453
• CVE-2026-12463
• CVE-2026-12458
• CVE-2026-12445
• CVE-2026-12455
• CVE-2026-12441
• CVE-2026-12468
• CVE-2026-12449
• CVE-2026-12464
• CVE-2026-12440
• CVE-2026-12461
• CVE-2026-12447
• CVE-2026-12462
• CVE-2026-12459
• CVE-2026-12439
• CVE-2026-12444
• CVE-2026-12451

Exploitation

Related products

• Microsoft-Edge

CVE list

• CVE-2026-12466
  critical
• CVE-2026-12464
  critical
• CVE-2026-12440
  critical
• CVE-2026-12461
  high
• CVE-2026-12458
  unknown
• CVE-2026-12441
  critical
• CVE-2026-12468
  critical
• CVE-2026-12446
  warning
• CVE-2026-12439
  critical
• CVE-2026-12453
  unknown
• CVE-2026-12449
  critical
• CVE-2026-12460
  unknown
• CVE-2026-12454
  critical
• CVE-2026-12462
  critical
• CVE-2026-12445
  critical
• CVE-2026-12455
  critical
• CVE-2026-12451
  critical
• CVE-2026-12444
  high
• CVE-2026-12447
  critical
• CVE-2026-12459
  unknown
• CVE-2026-12465
  critical
• CVE-2026-12443
  critical
• CVE-2026-12463
  warning
• CVE-2026-12437
  critical
• CVE-2026-12467
  critical
• CVE-2026-12452
  critical
• CVE-2026-12456
  unknown
• CVE-2026-12457
  unknown

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com