Multiple vulnerabilities in Microsoft Browser

Description

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. Denial of service vulnerability in CORS can be exploited remotely to cause denial of service.
2. A remote code execution vulnerability in WebGL can be exploited remotely to execute arbitrary code.
3. Denial of service vulnerability in Media can be exploited remotely to cause denial of service.
4. Security vulnerability can be exploited to bypass security restrictions.
5. Denial of service vulnerability in V8 can be exploited remotely to cause denial of service.
6. A remote code execution vulnerability in Browser can be exploited remotely to execute arbitrary code.
7. Information disclosure vulnerability in Skia can be exploited to obtain sensitive information.
8. A remote code execution vulnerability in USB can be exploited remotely to execute arbitrary code.

Original advisories

• CVE-2026-76033

• CVE-2026-76034
• CVE-2026-76035
• CVE-2026-76037
• CVE-2026-76038
• CVE-2026-76040
• CVE-2026-76041
• CVE-2026-76042
• CVE-2026-76043
• CVE-2026-76044
• CVE-2026-76045
• CVE-2026-76047

Exploitation

Public exploits exist for this vulnerability.

Related products

• Microsoft-Edge

CVE list

• CVE-2026-76033
  warning
• CVE-2026-76034
  critical
• CVE-2026-76035
  critical
• CVE-2026-76037
  critical
• CVE-2026-76038
  critical
• CVE-2026-76040
  critical
• CVE-2026-76041
  warning
• CVE-2026-76042
  warning
• CVE-2026-76043
  critical
• CVE-2026-76044
  critical
• CVE-2026-76045
  critical
• CVE-2026-76047
  critical

KB list

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com