Multiple vulnerabilities in Microsoft Browser

Description

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code.

Below is a complete list of vulnerabilities:

1. Denial of service vulnerability in SVG can be exploited remotely to cause denial of service.
2. A remote code execution vulnerability in Turbolev can be exploited remotely to execute arbitrary code.
3. A remote code execution vulnerability in FileSystem can be exploited remotely to execute arbitrary code.
4. A remote code execution vulnerability in Paint can be exploited remotely to execute arbitrary code.
5. A remote code execution vulnerability in SVG can be exploited remotely to execute arbitrary code.
6. Denial of service vulnerability in Views can be exploited remotely to cause denial of service.
7. A remote code execution vulnerability in Media can be exploited remotely to execute arbitrary code.
8. A remote code execution vulnerability in Video can be exploited remotely to execute arbitrary code.
9. Denial of service vulnerability in V8 can be exploited remotely to cause denial of service.
10. A remote code execution vulnerability in HTML can be exploited remotely to execute arbitrary code.
11. Security vulnerability in V8 can be exploited to bypass security restrictions.
12. A remote code execution vulnerability in Skia can be exploited remotely to execute arbitrary code.
13. A remote code execution vulnerability in V8 can be exploited remotely to execute arbitrary code.
14. A remote code execution vulnerability in ANGLE can be exploited remotely to execute arbitrary code.
15. Denial of service vulnerability in WebRTC can be exploited remotely to cause denial of service.
16. Denial of service vulnerability in ANGLE can be exploited remotely to cause denial of service.
17. A remote code execution vulnerability in Browser can be exploited remotely to execute arbitrary code.
18. Denial of service vulnerability in FileAPI can be exploited remotely to cause denial of service.
19. Denial of service vulnerability in Compositing can be exploited remotely to cause denial of service.
20. Security vulnerability can be exploited to bypass security restrictions.
21. A remote code execution vulnerability in ImageCapture can be exploited remotely to execute arbitrary code.
22. Denial of service vulnerability in Metrics can be exploited remotely to cause denial of service.
23. Denial of service vulnerability in Headless can be exploited remotely to cause denial of service.
24. Security vulnerability in Forms can be exploited to bypass security restrictions.
25. A remote code execution vulnerability in Animation can be exploited remotely to execute arbitrary code.
26. A remote code execution vulnerability in Modularization can be exploited remotely to execute arbitrary code.
27. Denial of service vulnerability in Editing can be exploited remotely to cause denial of service.
28. Denial of service vulnerability in ReadingList can be exploited remotely to cause denial of service.
29. A remote code execution vulnerability in Layout can be exploited remotely to execute arbitrary code.
30. A remote code execution vulnerability in PDFium can be exploited remotely to execute arbitrary code.
31. A remote code execution vulnerability in Compositing can be exploited remotely to execute arbitrary code.
32. Denial of service vulnerability in Skia can be exploited remotely to cause denial of service.
33. A remote code execution vulnerability in Payments can be exploited remotely to execute arbitrary code.
34. A remote code execution vulnerability in Cache can be exploited remotely to execute arbitrary code.
35. Denial of service vulnerability in Command can be exploited remotely to cause denial of service.
36. A remote code execution vulnerability in WTF can be exploited remotely to execute arbitrary code.
37. A remote code execution vulnerability in WebAudio can be exploited remotely to execute arbitrary code.

Original advisories

• CVE-2026-118304

• CVE-2026-118305
• CVE-2026-118306
• CVE-2026-118307
• CVE-2026-118308
• CVE-2026-118310
• CVE-2026-118311
• CVE-2026-118312
• CVE-2026-118313
• CVE-2026-118315
• CVE-2026-118316
• CVE-2026-118317
• CVE-2026-118318
• CVE-2026-118319
• CVE-2026-118320
• CVE-2026-118322
• CVE-2026-118327
• CVE-2026-118328
• CVE-2026-118329
• CVE-2026-118330
• CVE-2026-118331
• CVE-2026-118332
• CVE-2026-118333
• CVE-2026-118334
• CVE-2026-118335
• CVE-2026-118336
• CVE-2026-118337
• CVE-2026-118338
• CVE-2026-118339
• CVE-2026-118340
• CVE-2026-118341
• CVE-2026-118342
• CVE-2026-118343
• CVE-2026-118344
• CVE-2026-118345
• CVE-2026-118346
• CVE-2026-118347
• CVE-2026-118348
• CVE-2026-118349
• CVE-2026-118350
• CVE-2026-118351
• CVE-2026-118352
• CVE-2026-118353
• CVE-2026-118354
• CVE-2026-118355
• CVE-2026-118356
• CVE-2026-118357
• CVE-2026-118358
• CVE-2026-118359
• CVE-2026-91732

Exploitation

Public exploits exist for this vulnerability.

Related products

• Microsoft-Edge

CVE list

• CVE-2026-91732
  critical
• CVE-2026-118304
  critical
• CVE-2026-118305
  critical
• CVE-2026-118306
  critical
• CVE-2026-118307
  critical
• CVE-2026-118308
  critical
• CVE-2026-118310
  critical
• CVE-2026-118311
  critical
• CVE-2026-118312
  critical
• CVE-2026-118313
  critical
• CVE-2026-118315
  critical
• CVE-2026-118316
  critical
• CVE-2026-118317
  critical
• CVE-2026-118318
  warning
• CVE-2026-118319
  warning
• CVE-2026-118320
  critical
• CVE-2026-118322
  warning
• CVE-2026-118327
  critical
• CVE-2026-118328
  critical
• CVE-2026-118329
  critical
• CVE-2026-118330
  critical
• CVE-2026-118331
  critical
• CVE-2026-118332
  critical
• CVE-2026-118333
  critical
• CVE-2026-118334
  critical
• CVE-2026-118335
  critical
• CVE-2026-118336
  critical
• CVE-2026-118337
  critical
• CVE-2026-118338
  critical
• CVE-2026-118339
  critical
• CVE-2026-118340
  critical
• CVE-2026-118341
  critical
• CVE-2026-118342
  critical
• CVE-2026-118343
  critical
• CVE-2026-118344
  critical
• CVE-2026-118345
  critical
• CVE-2026-118346
  critical
• CVE-2026-118347
  critical
• CVE-2026-118348
  critical
• CVE-2026-118349
  critical
• CVE-2026-118350
  critical
• CVE-2026-118351
  critical
• CVE-2026-118352
  critical
• CVE-2026-118353
  critical
• CVE-2026-118354
  critical
• CVE-2026-118355
  critical
• CVE-2026-118356
  critical
• CVE-2026-118357
  critical
• CVE-2026-118358
  critical
• CVE-2026-118359
  critical

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com