Multiple vulnerabilities in Microsoft Browser

Description

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code.

Below is a complete list of vulnerabilities:

1. Denial of service vulnerability in ANGLE can be exploited remotely to cause denial of service.
2. Denial of service vulnerability in Chromecast can be exploited remotely to cause denial of service.
3. Denial of service vulnerability in Extensions can be exploited remotely to cause denial of service.
4. A remote code execution vulnerability in Chromecast can be exploited remotely to execute arbitrary code.
5. Denial of service vulnerability in Skia can be exploited remotely to cause denial of service.
6. A remote code execution vulnerability in V8 can be exploited remotely to execute arbitrary code.
7. A remote code execution vulnerability in ANGLE can be exploited remotely to execute arbitrary code.
8. Denial of service vulnerability in WebAudio can be exploited remotely to cause denial of service.
9. Denial of service vulnerability in Certificate can be exploited remotely to cause denial of service.
10. A remote code execution vulnerability in UI can be exploited remotely to execute arbitrary code.
11. A remote code execution vulnerability in GPU can be exploited remotely to execute arbitrary code.
12. A remote code execution vulnerability in Microsoft Surface can be exploited remotely to execute arbitrary code.

Original advisories

• CVE-2026-16413

• CVE-2026-16414
• CVE-2026-16415
• CVE-2026-16416
• CVE-2026-16417
• CVE-2026-16418
• CVE-2026-16419
• CVE-2026-16420
• CVE-2026-16421
• CVE-2026-16422
• CVE-2026-16423
• CVE-2026-16424
• CVE-2026-54120

Exploitation

Related products

• Microsoft-Edge
• Microsoft-Surface

CVE list

• CVE-2026-16413
  unknown
• CVE-2026-16414
  critical
• CVE-2026-16415
  unknown
• CVE-2026-16416
  critical
• CVE-2026-16417
  unknown
• CVE-2026-16418
  unknown
• CVE-2026-16419
  unknown
• CVE-2026-16420
  unknown
• CVE-2026-16421
  unknown
• CVE-2026-16422
  unknown
• CVE-2026-16423
  unknown
• CVE-2026-16424
  unknown
• CVE-2026-54120
  critical

KB list

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com