Multiple vulnerabilities in Microsoft Browser

Description

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, spoof user interface.

Below is a complete list of vulnerabilities:

1. A remote code execution vulnerability in Ozone can be exploited remotely to execute arbitrary code.
2. Denial of service vulnerability in Skia can be exploited remotely to cause denial of service.
3. Security vulnerability in HTML-in-Canvas can be exploited to bypass security restrictions.
4. Denial of service vulnerability in Linux Toolkit Theming can be exploited remotely to cause denial of service.
5. Denial of service vulnerability in V8 can be exploited remotely to cause denial of service.
6. Denial of service vulnerability in Media can be exploited remotely to cause denial of service.
7. A remote code execution vulnerability in GPU can be exploited remotely to execute arbitrary code.
8. A remote code execution vulnerability in Core can be exploited remotely to execute arbitrary code.
9. A remote code execution vulnerability in Skia can be exploited remotely to execute arbitrary code.
10. Security vulnerability in V8 can be exploited to bypass security restrictions.
11. A remote code execution vulnerability in UI can be exploited remotely to execute arbitrary code.
12. Denial of service vulnerability in Navigation can be exploited remotely to cause denial of service.
13. A tampering vulnerability in Microsoft Edge (Chromium-based) can be exploited remotely to spoof user interface.

Original advisories

• CVE-2026-15764

• CVE-2026-15765
• CVE-2026-15766
• CVE-2026-15768
• CVE-2026-15769
• CVE-2026-15770
• CVE-2026-15771
• CVE-2026-15772
• CVE-2026-15773
• CVE-2026-15774
• CVE-2026-15775
• CVE-2026-15776
• CVE-2026-15777
• CVE-2026-15778
• CVE-2026-57980

Exploitation

CVE list

• CVE-2026-15764
  unknown
• CVE-2026-15765
  unknown
• CVE-2026-15766
  unknown
• CVE-2026-15768
  unknown
• CVE-2026-15769
  unknown
• CVE-2026-15770
  unknown
• CVE-2026-15771
  unknown
• CVE-2026-15772
  unknown
• CVE-2026-15773
  unknown
• CVE-2026-15774
  unknown
• CVE-2026-15775
  unknown
• CVE-2026-15776
  unknown
• CVE-2026-15777
  unknown
• CVE-2026-15778
  unknown
• CVE-2026-57980
  unknown

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com