Multiple vulnerabilities in Microsoft Browser

Description

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. Denial of service vulnerability in V8 can be exploited remotely to cause denial of service.
2. Security vulnerability can be exploited to bypass security restrictions.
3. Denial of service vulnerability in GPU can be exploited remotely to cause denial of service.
4. A remote code execution vulnerability in V8 can be exploited remotely to execute arbitrary code.
5. A remote code execution vulnerability in Passwords can be exploited remotely to execute arbitrary code.
6. A remote code execution vulnerability in Bluetooth can be exploited remotely to execute arbitrary code.
7. A remote code execution vulnerability in Views can be exploited remotely to execute arbitrary code.
8. A remote code execution vulnerability in FullScreen can be exploited remotely to execute arbitrary code.
9. Denial of service vulnerability in WebGL can be exploited remotely to cause denial of service.
10. A remote code execution vulnerability in PictureInPicture can be exploited remotely to execute arbitrary code.
11. Cross-site scripting (XSS) vulnerability in WebUI can be exploited to perform cross-site scripting attack.
12. A remote code execution vulnerability in ANGLE can be exploited remotely to execute arbitrary code.
13. A remote code execution vulnerability in Compositing can be exploited remotely to execute arbitrary code.
14. A remote code execution vulnerability in SVG can be exploited remotely to execute arbitrary code.
15. A remote code execution vulnerability in MediaStream can be exploited remotely to execute arbitrary code.
16. A remote code execution vulnerability in Contextual Tasks can be exploited remotely to execute arbitrary code.
17. Information disclosure vulnerability in SVG can be exploited to obtain sensitive information.
18. A remote code execution vulnerability in Skia can be exploited remotely to execute arbitrary code.
19. A remote code execution vulnerability in FedCM can be exploited remotely to execute arbitrary code.
20. A remote code execution vulnerability in WebRTC can be exploited remotely to execute arbitrary code.
21. Information disclosure vulnerability in Mobile can be exploited to obtain sensitive information.
22. Denial of service vulnerability in Mobile can be exploited remotely to cause denial of service.
23. A remote code execution vulnerability in Chrome Tabs can be exploited remotely to execute arbitrary code.
24. A remote code execution vulnerability in CustomTabs can be exploited remotely to execute arbitrary code.
25. A remote code execution vulnerability in DOM can be exploited remotely to execute arbitrary code.
26. A remote code execution vulnerability in Workers can be exploited remotely to execute arbitrary code.
27. Denial of service vulnerability in Desktop can be exploited remotely to cause denial of service.
28. A remote code execution vulnerability in Core can be exploited remotely to execute arbitrary code.
29. A remote code execution vulnerability in Prerender can be exploited remotely to execute arbitrary code.
30. A security feature bypass vulnerability in Microsoft Edge for Android can be exploited remotely to bypass security restrictions.
31. An elevation of privilege vulnerability in Microsoft Edge (Chromium-based) can be exploited remotely to gain privileges.
32. An information disclosure vulnerability in Microsoft Edge (Chromium-based) can be exploited remotely to obtain sensitive information.
33. A remote code execution vulnerability in Microsoft Edge (Chromium-based) can be exploited remotely to execute arbitrary code.

Original advisories

• CVE-2026-102299

• CVE-2026-102300
• CVE-2026-102301
• CVE-2026-102302
• CVE-2026-102303
• CVE-2026-102304
• CVE-2026-102305
• CVE-2026-102306
• CVE-2026-102307
• CVE-2026-102308
• CVE-2026-102309
• CVE-2026-102310
• CVE-2026-102311
• CVE-2026-102312
• CVE-2026-102313
• CVE-2026-102314
• CVE-2026-102315
• CVE-2026-102316
• CVE-2026-102317
• CVE-2026-102318
• CVE-2026-102319
• CVE-2026-102320
• CVE-2026-102321
• CVE-2026-102323
• CVE-2026-102324
• CVE-2026-102325
• CVE-2026-102326
• CVE-2026-102327
• CVE-2026-102328
• CVE-2026-102329
• CVE-2026-102330
• CVE-2026-102331
• CVE-2026-103621
• CVE-2026-103622
• CVE-2026-103623
• CVE-2026-103624
• CVE-2026-103625
• CVE-2026-103626
• CVE-2026-103627
• CVE-2026-103628
• CVE-2026-103629
• CVE-2026-103630
• CVE-2026-103631
• CVE-2026-106192
• CVE-2026-106206
• CVE-2026-106209
• CVE-2026-106221
• CVE-2026-106223
• CVE-2026-106254
• CVE-2026-106282
• CVE-2026-106290
• CVE-2026-106296
• CVE-2026-106298
• CVE-2026-106305
• CVE-2026-106313
• CVE-2026-106317
• CVE-2026-106320
• CVE-2026-106326
• CVE-2026-106337
• CVE-2026-106353
• CVE-2026-106361
• CVE-2026-106366
• CVE-2026-106367
• CVE-2026-106368
• CVE-2026-106372
• CVE-2026-106380
• CVE-2026-106387
• CVE-2026-106395
• CVE-2026-106397
• CVE-2026-106400
• CVE-2026-106405
• CVE-2026-106406
• CVE-2026-106408
• CVE-2026-106414
• CVE-2026-106419
• CVE-2026-106427
• CVE-2026-110158
• CVE-2026-110913
• CVE-2026-110914
• CVE-2026-110915
• CVE-2026-110916
• CVE-2026-110917
• CVE-2026-110918
• CVE-2026-110919
• CVE-2026-110920
• CVE-2026-110921
• CVE-2026-110922
• CVE-2026-85330
• CVE-2026-85899
• CVE-2026-88077
• CVE-2026-88090
• CVE-2026-96187
• CVE-2026-96192
• CVE-2026-96203

Exploitation

Public exploits exist for this vulnerability.

Related products

• Microsoft-Edge

CVE list

• CVE-2026-102299
  critical
• CVE-2026-102300
  warning
• CVE-2026-102301
  critical
• CVE-2026-102302
  critical
• CVE-2026-102303
  warning
• CVE-2026-102304
  critical
• CVE-2026-102305
  high
• CVE-2026-102306
  critical
• CVE-2026-102307
  warning
• CVE-2026-102308
  critical
• CVE-2026-102309
  critical
• CVE-2026-102310
  high
• CVE-2026-102311
  warning
• CVE-2026-102312
  warning
• CVE-2026-102313
  warning
• CVE-2026-102314
  high
• CVE-2026-102315
  warning
• CVE-2026-102316
  critical
• CVE-2026-102317
  critical
• CVE-2026-102318
  warning
• CVE-2026-102319
  warning
• CVE-2026-102320
  high
• CVE-2026-102321
  critical
• CVE-2026-102323
  critical
• CVE-2026-102324
  critical
• CVE-2026-102325
  warning
• CVE-2026-102326
  critical
• CVE-2026-102327
  critical
• CVE-2026-102328
  critical
• CVE-2026-102329
  high
• CVE-2026-102330
  high
• CVE-2026-102331
  critical
• CVE-2026-103621
  warning
• CVE-2026-103622
  critical
• CVE-2026-103623
  critical
• CVE-2026-103624
  critical
• CVE-2026-103625
  critical
• CVE-2026-103626
  critical
• CVE-2026-103627
  high
• CVE-2026-103628
  critical
• CVE-2026-103629
  warning
• CVE-2026-103630
  critical
• CVE-2026-103631
  critical
• CVE-2026-106254
  high
• CVE-2026-106282
  high
• CVE-2026-106290
  warning
• CVE-2026-106296
  high
• CVE-2026-106298
  critical
• CVE-2026-106305
  high
• CVE-2026-106313
  high
• CVE-2026-106317
  high
• CVE-2026-106320
  warning
• CVE-2026-106326
  warning
• CVE-2026-106337
  high
• CVE-2026-106353
  high
• CVE-2026-106361
  high
• CVE-2026-106366
  high
• CVE-2026-106367
  critical
• CVE-2026-106368
  high
• CVE-2026-106372
  critical
• CVE-2026-106380
  high
• CVE-2026-106387
  critical
• CVE-2026-106395
  warning
• CVE-2026-106397
  high
• CVE-2026-106400
  high
• CVE-2026-106405
  high
• CVE-2026-106406
  high
• CVE-2026-106408
  high
• CVE-2026-106414
  critical
• CVE-2026-106427
  high
• CVE-2026-106192
  warning
• CVE-2026-106206
  high
• CVE-2026-106209
  high
• CVE-2026-106221
  critical
• CVE-2026-106223
  warning
• CVE-2026-106419
  critical
• CVE-2026-110158
  critical
• CVE-2026-110913
  critical
• CVE-2026-110914
  critical
• CVE-2026-110915
  critical
• CVE-2026-110916
  critical
• CVE-2026-110917
  warning
• CVE-2026-110918
  warning
• CVE-2026-110919
  critical
• CVE-2026-110920
  critical
• CVE-2026-110921
  critical
• CVE-2026-110922
  critical
• CVE-2026-85330
  warning
• CVE-2026-85899
  critical
• CVE-2026-88077
  critical
• CVE-2026-88090
  high
• CVE-2026-96187
  high
• CVE-2026-96192
  critical
• CVE-2026-96203
  critical

KB list

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com