Multiple vulnerabilities in Microsoft Browser

Description

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code.

Below is a complete list of vulnerabilities:

1. A remote code execution vulnerability in V8 can be exploited remotely to execute arbitrary code.
2. A remote code execution vulnerability in TabStrip can be exploited remotely to execute arbitrary code.
3. A remote code execution vulnerability in Extensions can be exploited remotely to execute arbitrary code.
4. A remote code execution vulnerability in HTML can be exploited remotely to execute arbitrary code.
5. A remote code execution vulnerability in Blink can be exploited remotely to execute arbitrary code.
6. A remote code execution vulnerability in Microsoft Edge (Chromium-based) can be exploited remotely to execute arbitrary code.

Original advisories

• CVE-2026-19556

• CVE-2026-19557
• CVE-2026-19558
• CVE-2026-19559
• CVE-2026-19560
• CVE-2026-72970

Exploitation

Public exploits exist for this vulnerability.

Related products

• Microsoft-Edge

CVE list

• CVE-2026-19556
  critical
• CVE-2026-19557
  critical
• CVE-2026-19558
  critical
• CVE-2026-19559
  critical
• CVE-2026-19560
  critical
• CVE-2026-72970
  critical

KB list

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com