Multiple vulnerabilities in Microsoft Browser

Description

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code.

Below is a complete list of vulnerabilities:

1. A remote code execution vulnerability in V8 can be exploited remotely to execute arbitrary code.
2. A remote code execution vulnerability in TabStrip can be exploited remotely to execute arbitrary code.
3. A remote code execution vulnerability in Extensions can be exploited remotely to execute arbitrary code.
4. A remote code execution vulnerability in HTML can be exploited remotely to execute arbitrary code.
5. A remote code execution vulnerability in Blink can be exploited remotely to execute arbitrary code.
6. A remote code execution vulnerability in Microsoft Edge (Chromium-based) can be exploited remotely to execute arbitrary code.

Original advisories

• CVE-2026-19556

• CVE-2026-19557
• CVE-2026-19558
• CVE-2026-19559
• CVE-2026-19560
• CVE-2026-72970

Exploitation

Related products

• Microsoft-Edge

CVE list

• CVE-2026-19556
  unknown
• CVE-2026-19557
  unknown
• CVE-2026-19558
  unknown
• CVE-2026-19559
  unknown
• CVE-2026-19560
  unknown
• CVE-2026-72970
  unknown

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com