Kaspersky ID:
KLA91322
Detect Date:
09/25/2026
Updated:
10/07/2026

Description

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information.

Below is a complete list of vulnerabilities:

  1. Security vulnerability can be exploited to bypass security restrictions.
  2. Denial of service vulnerability in Themes can be exploited remotely to cause denial of service.
  3. A remote code execution vulnerability in Views can be exploited remotely to execute arbitrary code.
  4. A remote code execution vulnerability in V8 can be exploited remotely to execute arbitrary code.
  5. A remote code execution vulnerability in ANGLE can be exploited remotely to execute arbitrary code.
  6. A remote code execution vulnerability in Platform can be exploited remotely to execute arbitrary code.
  7. A remote code execution vulnerability in Tint can be exploited remotely to execute arbitrary code.
  8. Denial of service vulnerability in Bindings can be exploited remotely to cause denial of service.
  9. Information disclosure vulnerability in Mobile can be exploited to obtain sensitive information.
  10. A remote code execution vulnerability in Browser can be exploited remotely to execute arbitrary code.
  11. A remote code execution vulnerability in GPU can be exploited remotely to execute arbitrary code.
  12. Denial of service vulnerability in V8 can be exploited remotely to cause denial of service.
  13. A remote code execution vulnerability in Metrics can be exploited remotely to execute arbitrary code.
  14. A remote code execution vulnerability in AdFilter can be exploited remotely to execute arbitrary code.
  15. Information disclosure vulnerability in Passwords can be exploited to obtain sensitive information.
  16. A remote code execution vulnerability in Fullscreen can be exploited remotely to execute arbitrary code.
  17. A remote code execution vulnerability in Aura can be exploited remotely to execute arbitrary code.
  18. A remote code execution vulnerability in Video can be exploited remotely to execute arbitrary code.
  19. A remote code execution vulnerability in Printing can be exploited remotely to execute arbitrary code.
  20. Denial of service vulnerability in GPU can be exploited remotely to cause denial of service.
  21. Information disclosure vulnerability in Networking can be exploited to obtain sensitive information.
  22. Denial of service vulnerability in WebGL can be exploited remotely to cause denial of service.
  23. Denial of service vulnerability in ANGLE can be exploited remotely to cause denial of service.
  24. A remote code execution vulnerability in HID can be exploited remotely to execute arbitrary code.
  25. Information disclosure vulnerability in Transactions Platform can be exploited to obtain sensitive information.
  26. A remote code execution vulnerability in PDFium can be exploited remotely to execute arbitrary code.
  27. A remote code execution vulnerability in ServiceWorker can be exploited remotely to execute arbitrary code.
  28. Denial of service vulnerability in Desktop can be exploited remotely to cause denial of service.
  29. A remote code execution vulnerability in WebAudio can be exploited remotely to execute arbitrary code.
  30. A remote code execution vulnerability in DevTools can be exploited remotely to execute arbitrary code.
  31. A remote code execution vulnerability in Actor can be exploited remotely to execute arbitrary code.
  32. A remote code execution vulnerability in Updater can be exploited remotely to execute arbitrary code.
  33. A remote code execution vulnerability in Bluetooth can be exploited remotely to execute arbitrary code.
  34. A remote code execution vulnerability in WebGL can be exploited remotely to execute arbitrary code.
  35. A remote code execution vulnerability in Bindings can be exploited remotely to execute arbitrary code.
  36. A remote code execution vulnerability in Verifier can be exploited remotely to execute arbitrary code.
  37. A remote code execution vulnerability in WindowDialog can be exploited remotely to execute arbitrary code.
  38. A remote code execution vulnerability in Editing can be exploited remotely to execute arbitrary code.
  39. Denial of service vulnerability in Passwords can be exploited remotely to cause denial of service.
  40. Denial of service vulnerability in IndexedDB can be exploited remotely to cause denial of service.
  41. Information disclosure vulnerability in DataTransfer can be exploited to obtain sensitive information.
  42. Denial of service vulnerability in XML can be exploited remotely to cause denial of service.
  43. Denial of service vulnerability in NFC can be exploited remotely to cause denial of service.
  44. A remote code execution vulnerability in Chromecast can be exploited remotely to execute arbitrary code.
  45. Denial of service vulnerability in Printing can be exploited remotely to cause denial of service.
  46. Denial of service vulnerability in Auth can be exploited remotely to cause denial of service.
  47. A remote code execution vulnerability in Transactions Platform can be exploited remotely to execute arbitrary code.
  48. Denial of service vulnerability in PlatformIntegration can be exploited remotely to cause denial of service.

Original advisories

Exploitation

Public exploits exist for this vulnerability.

Related products

CVE list

  • CVE-2026-95350
    unknown
  • CVE-2026-95357
    unknown
  • CVE-2026-95339
    unknown
  • CVE-2026-95281
    unknown
  • CVE-2026-95313
    unknown
  • CVE-2026-95349
    unknown
  • CVE-2026-95284
    unknown
  • CVE-2026-95322
    unknown
  • CVE-2026-95329
    unknown
  • CVE-2026-95356
    unknown
  • CVE-2026-95310
    unknown
  • CVE-2026-95301
    unknown
  • CVE-2026-95291
    unknown
  • CVE-2026-95355
    unknown
  • CVE-2026-95315
    unknown
  • CVE-2026-95298
    unknown
  • CVE-2026-95372
    unknown
  • CVE-2026-95324
    unknown
  • CVE-2026-95283
    unknown
  • CVE-2026-95293
    unknown
  • CVE-2026-95274
    unknown
  • CVE-2026-95282
    unknown
  • CVE-2026-95373
    unknown
  • CVE-2026-95277
    unknown
  • CVE-2026-95348
    unknown
  • CVE-2026-95335
    unknown
  • CVE-2026-95338
    unknown
  • CVE-2026-95318
    unknown
  • CVE-2026-95286
    unknown
  • CVE-2026-95365
    unknown
  • CVE-2026-95343
    unknown
  • CVE-2026-95280
    unknown
  • CVE-2026-95304
    unknown
  • CVE-2026-95306
    unknown
  • CVE-2026-95299
    unknown
  • CVE-2026-95351
    unknown
  • CVE-2026-95287
    unknown
  • CVE-2026-95366
    unknown
  • CVE-2026-95382
    unknown
  • CVE-2026-95381
    unknown
  • CVE-2026-95331
    unknown
  • CVE-2026-95297
    unknown
  • CVE-2026-95375
    unknown
  • CVE-2026-95302
    unknown
  • CVE-2026-95362
    unknown
  • CVE-2026-95369
    unknown
  • CVE-2026-95376
    unknown
  • CVE-2026-95359
    unknown
  • CVE-2026-95294
    unknown
  • CVE-2026-95337
    unknown
  • CVE-2026-95346
    unknown
  • CVE-2026-95320
    unknown
  • CVE-2026-95317
    unknown
  • CVE-2026-95345
    unknown
  • CVE-2026-95330
    unknown
  • CVE-2026-95370
    unknown
  • CVE-2026-95303
    unknown
  • CVE-2026-95360
    unknown
  • CVE-2026-95295
    unknown
  • CVE-2026-95276
    unknown
  • CVE-2026-95314
    unknown
  • CVE-2026-95371
    unknown
  • CVE-2026-95353
    unknown
  • CVE-2026-95363
    unknown
  • CVE-2026-95341
    unknown
  • CVE-2026-95354
    unknown
  • CVE-2026-95384
    unknown
  • CVE-2026-95336
    unknown
  • CVE-2026-95290
    unknown
  • CVE-2026-95325
    unknown
  • CVE-2026-95275
    unknown
  • CVE-2026-95374
    unknown
  • CVE-2026-95300
    unknown
  • CVE-2026-95321
    unknown
  • CVE-2026-95323
    unknown
  • CVE-2026-95332
    unknown
  • CVE-2026-95312
    unknown
  • CVE-2026-95344
    unknown
  • CVE-2026-95289
    unknown
  • CVE-2026-95347
    unknown
  • CVE-2026-95311
    unknown
  • CVE-2026-95358
    unknown
  • CVE-2026-95333
    unknown
  • CVE-2026-95307
    unknown
  • CVE-2026-95285
    unknown
  • CVE-2026-95278
    unknown
  • CVE-2026-95327
    unknown
  • CVE-2026-95334
    unknown
  • CVE-2026-95308
    unknown
  • CVE-2026-95292
    unknown
  • CVE-2026-95352
    unknown
  • CVE-2026-95279
    unknown
  • CVE-2026-95367
    unknown
  • CVE-2026-95385
    unknown
  • CVE-2026-95368
    unknown
  • CVE-2026-95319
    unknown
  • CVE-2026-95326
    unknown
  • CVE-2026-95309
    unknown
  • CVE-2026-95361
    unknown
  • CVE-2026-95288
    unknown
  • CVE-2026-95380
    unknown
  • CVE-2026-95342
    unknown
  • CVE-2026-95296
    unknown
  • CVE-2026-95316
    unknown
  • CVE-2026-95328
    unknown
  • CVE-2026-95340
    unknown
  • CVE-2026-95364
    unknown
  • CVE-2026-95305
    unknown

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com

Found an inaccuracy in the description of this vulnerability? Let us know!
Kaspersky Next
Let’s go Next: redefine your business’s cybersecurity
Learn more
New Kaspersky!
Your digital life deserves complete protection!
Learn more
Do you want to save your changes?
Your message has been sent successfully.