Multiple vulnerabilities in Microsoft Browser

Description

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code.

Below is a complete list of vulnerabilities:

1. A remote code execution vulnerability in Network can be exploited remotely to execute arbitrary code.
2. Denial of service vulnerability in ServiceWorker can be exploited remotely to cause denial of service.
3. A remote code execution vulnerability in WebAppInstalls can be exploited remotely to execute arbitrary code.
4. A remote code execution vulnerability in Extensions can be exploited remotely to execute arbitrary code.
5. Security vulnerability can be exploited to bypass security restrictions.
6. A remote code execution vulnerability in Auth can be exploited remotely to execute arbitrary code.
7. A remote code execution vulnerability in Core can be exploited remotely to execute arbitrary code.
8. A remote code execution vulnerability in Internals can be exploited remotely to execute arbitrary code.
9. A remote code execution vulnerability in Input can be exploited remotely to execute arbitrary code.
10. Denial of service vulnerability in WebGL can be exploited remotely to cause denial of service.
11. A remote code execution vulnerability in V8 can be exploited remotely to execute arbitrary code.
12. A remote code execution vulnerability in DigitalCredentials can be exploited remotely to execute arbitrary code.
13. Denial of service vulnerability in Compositing can be exploited remotely to cause denial of service.
14. A remote code execution vulnerability in DOM can be exploited remotely to execute arbitrary code.
15. A remote code execution vulnerability in PDF can be exploited remotely to execute arbitrary code.
16. Denial of service vulnerability in ANGLE can be exploited remotely to cause denial of service.
17. Denial of service vulnerability in CacheStorage can be exploited remotely to cause denial of service.
18. A remote code execution vulnerability in PlatformIntegration can be exploited remotely to execute arbitrary code.
19. A remote code execution vulnerability in Compositing can be exploited remotely to execute arbitrary code.
20. A remote code execution vulnerability in Skia can be exploited remotely to execute arbitrary code.
21. A remote code execution vulnerability in Workers can be exploited remotely to execute arbitrary code.

Original advisories

• CVE-2026-91708

• CVE-2026-91709
• CVE-2026-91710
• CVE-2026-91711
• CVE-2026-91712
• CVE-2026-91713
• CVE-2026-91714
• CVE-2026-91715
• CVE-2026-91716
• CVE-2026-91717
• CVE-2026-91718
• CVE-2026-91719
• CVE-2026-91720
• CVE-2026-91721
• CVE-2026-91722
• CVE-2026-91723
• CVE-2026-91724
• CVE-2026-91725
• CVE-2026-91726
• CVE-2026-91727
• CVE-2026-91728
• CVE-2026-91729
• CVE-2026-91730
• CVE-2026-91731
• CVE-2026-91733
• CVE-2026-91734
• CVE-2026-91735
• CVE-2026-91736
• CVE-2026-91737
• CVE-2026-91738
• CVE-2026-91739
• CVE-2026-91740
• CVE-2026-91741
• CVE-2026-91742
• CVE-2026-91743
• CVE-2026-91744
• CVE-2026-91745
• CVE-2026-91746
• CVE-2026-91747
• CVE-2026-91748
• CVE-2026-91749

Exploitation

Public exploits exist for this vulnerability.

Related products

• Microsoft-Edge

CVE list

• CVE-2026-91708
  unknown
• CVE-2026-91709
  unknown
• CVE-2026-91710
  unknown
• CVE-2026-91711
  unknown
• CVE-2026-91712
  unknown
• CVE-2026-91713
  unknown
• CVE-2026-91714
  unknown
• CVE-2026-91715
  unknown
• CVE-2026-91716
  unknown
• CVE-2026-91717
  unknown
• CVE-2026-91718
  unknown
• CVE-2026-91719
  unknown
• CVE-2026-91720
  unknown
• CVE-2026-91721
  unknown
• CVE-2026-91722
  unknown
• CVE-2026-91723
  unknown
• CVE-2026-91724
  unknown
• CVE-2026-91725
  unknown
• CVE-2026-91726
  unknown
• CVE-2026-91727
  unknown
• CVE-2026-91728
  unknown
• CVE-2026-91729
  unknown
• CVE-2026-91730
  unknown
• CVE-2026-91731
  unknown
• CVE-2026-91733
  unknown
• CVE-2026-91734
  unknown
• CVE-2026-91735
  unknown
• CVE-2026-91736
  unknown
• CVE-2026-91737
  unknown
• CVE-2026-91738
  unknown
• CVE-2026-91739
  unknown
• CVE-2026-91740
  unknown
• CVE-2026-91741
  unknown
• CVE-2026-91742
  warning
• CVE-2026-91743
  unknown
• CVE-2026-91744
  unknown
• CVE-2026-91745
  unknown
• CVE-2026-91746
  unknown
• CVE-2026-91747
  unknown
• CVE-2026-91748
  unknown
• CVE-2026-91749
  critical

KB list

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com