Multiple vulnerabilities in Microsoft Browser

Description

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. Security vulnerability can be exploited to bypass security restrictions.
2. Denial of service vulnerability in Skia can be exploited remotely to cause denial of service.
3. A remote code execution vulnerability in Views can be exploited remotely to execute arbitrary code.
4. A remote code execution vulnerability in Prerender can be exploited remotely to execute arbitrary code.
5. A remote code execution vulnerability in CSS can be exploited remotely to execute arbitrary code.
6. Denial of service vulnerability in ANGLE can be exploited remotely to cause denial of service.
7. Information disclosure vulnerability in Compositing can be exploited to obtain sensitive information.
8. A remote code execution vulnerability in Mobile can be exploited remotely to execute arbitrary code.
9. Denial of service vulnerability in V8 can be exploited remotely to cause denial of service.
10. A remote code execution vulnerability in Printing can be exploited remotely to execute arbitrary code.
11. Information disclosure vulnerability in PrivateTokens can be exploited to obtain sensitive information.
12. A remote code execution vulnerability in DOM can be exploited remotely to execute arbitrary code.
13. Information disclosure vulnerability in Network can be exploited to obtain sensitive information.
14. A remote code execution vulnerability in PDFium can be exploited remotely to execute arbitrary code.
15. A remote code execution vulnerability in TabStrip can be exploited remotely to execute arbitrary code.
16. Denial of service vulnerability in Shopping can be exploited remotely to cause denial of service.
17. A remote code execution vulnerability in Paint can be exploited remotely to execute arbitrary code.
18. A remote code execution vulnerability in SVG can be exploited remotely to execute arbitrary code.
19. A remote code execution vulnerability in Controls can be exploited remotely to execute arbitrary code.
20. Denial of service vulnerability in Prerender can be exploited remotely to cause denial of service.
21. A remote code execution vulnerability in Canvas can be exploited remotely to execute arbitrary code.
22. Information disclosure vulnerability in ServiceWorker can be exploited to obtain sensitive information.
23. A remote code execution vulnerability in Core can be exploited remotely to execute arbitrary code.
24. A remote code execution vulnerability in WebAudio can be exploited remotely to execute arbitrary code.
25. A remote code execution vulnerability in Scheduling can be exploited remotely to execute arbitrary code.
26. A remote code execution vulnerability in WebRTC can be exploited remotely to execute arbitrary code.
27. Information disclosure vulnerability in V8 can be exploited to obtain sensitive information.
28. Denial of service vulnerability in DevTools can be exploited remotely to cause denial of service.
29. A remote code execution vulnerability in Animation can be exploited remotely to execute arbitrary code.
30. A remote code execution vulnerability in Autofill can be exploited remotely to execute arbitrary code.
31. A remote code execution vulnerability in Geometry can be exploited remotely to execute arbitrary code.
32. Denial of service vulnerability in Media can be exploited remotely to cause denial of service.
33. A remote code execution vulnerability in PowerBookmarks can be exploited remotely to execute arbitrary code.
34. A remote code execution vulnerability in Passwords can be exploited remotely to execute arbitrary code.
35. A remote code execution vulnerability in Streaming can be exploited remotely to execute arbitrary code.
36. A remote code execution vulnerability in GPU can be exploited remotely to execute arbitrary code.
37. A remote code execution vulnerability in ANGLE can be exploited remotely to execute arbitrary code.
38. Denial of service vulnerability in CacheStorage can be exploited remotely to cause denial of service.
39. Information disclosure vulnerability in Paint can be exploited to obtain sensitive information.
40. Denial of service vulnerability in Network can be exploited remotely to cause denial of service.
41. A remote code execution vulnerability in Source can be exploited remotely to execute arbitrary code.
42. Information disclosure vulnerability in Core can be exploited to obtain sensitive information.
43. Denial of service vulnerability in Variations can be exploited remotely to cause denial of service.
44. Denial of service vulnerability in WebPackaging can be exploited remotely to cause denial of service.
45. Information disclosure vulnerability in Frames can be exploited to obtain sensitive information.
46. A remote code execution vulnerability in Extensions can be exploited remotely to execute arbitrary code.
47. Information disclosure vulnerability in Select can be exploited to obtain sensitive information.
48. A remote code execution vulnerability in Layout can be exploited remotely to execute arbitrary code.
49. A remote code execution vulnerability in Media can be exploited remotely to execute arbitrary code.
50. A remote code execution vulnerability in V8 can be exploited remotely to execute arbitrary code.
51. A remote code execution vulnerability in Modularization can be exploited remotely to execute arbitrary code.
52. Denial of service vulnerability in Performance can be exploited remotely to cause denial of service.
53. Denial of service vulnerability in Internals can be exploited remotely to cause denial of service.
54. Denial of service vulnerability in Editing can be exploited remotely to cause denial of service.
55. A remote code execution vulnerability in Dawn can be exploited remotely to execute arbitrary code.
56. Information disclosure vulnerability in BackgroundFetch can be exploited to obtain sensitive information.

Original advisories

• CVE-2026-120930

• CVE-2026-121029
• CVE-2026-121030
• CVE-2026-121031
• CVE-2026-121032
• CVE-2026-121034
• CVE-2026-121035
• CVE-2026-121036
• CVE-2026-121037
• CVE-2026-121038
• CVE-2026-121039
• CVE-2026-121050
• CVE-2026-121094
• CVE-2026-121095
• CVE-2026-121096
• CVE-2026-121097
• CVE-2026-121098
• CVE-2026-121099
• CVE-2026-121100
• CVE-2026-121101
• CVE-2026-121102
• CVE-2026-121103
• CVE-2026-121104
• CVE-2026-121105
• CVE-2026-121107
• CVE-2026-121108
• CVE-2026-121109
• CVE-2026-121111
• CVE-2026-121113
• CVE-2026-121114
• CVE-2026-121115
• CVE-2026-121117
• CVE-2026-121118
• CVE-2026-121119
• CVE-2026-121120
• CVE-2026-121121
• CVE-2026-121122
• CVE-2026-121123
• CVE-2026-121124
• CVE-2026-121125
• CVE-2026-121126
• CVE-2026-121127
• CVE-2026-121128
• CVE-2026-121129
• CVE-2026-121130
• CVE-2026-121131
• CVE-2026-121132
• CVE-2026-121133
• CVE-2026-121134
• CVE-2026-121135
• CVE-2026-121136
• CVE-2026-121137
• CVE-2026-121138
• CVE-2026-121193
• CVE-2026-121194
• CVE-2026-121195
• CVE-2026-121197
• CVE-2026-121198
• CVE-2026-121199
• CVE-2026-121200
• CVE-2026-121201
• CVE-2026-121202
• CVE-2026-121203
• CVE-2026-121204
• CVE-2026-121205
• CVE-2026-121206
• CVE-2026-121207
• CVE-2026-121208
• CVE-2026-121209
• CVE-2026-121210
• CVE-2026-121211
• CVE-2026-121212
• CVE-2026-121213
• CVE-2026-121214
• CVE-2026-121215
• CVE-2026-121216
• CVE-2026-121217
• CVE-2026-121218
• CVE-2026-121219
• CVE-2026-121220
• CVE-2026-121221
• CVE-2026-121222
• CVE-2026-121223
• CVE-2026-121224
• CVE-2026-121226
• CVE-2026-121227
• CVE-2026-121228
• CVE-2026-121230
• CVE-2026-121231
• CVE-2026-121232
• CVE-2026-121233
• CVE-2026-121235
• CVE-2026-121236
• CVE-2026-121237
• CVE-2026-121238
• CVE-2026-121239
• CVE-2026-121240
• CVE-2026-121242
• CVE-2026-121243
• CVE-2026-121244
• CVE-2026-121245
• CVE-2026-121248
• CVE-2026-121249
• CVE-2026-121250
• CVE-2026-121251
• CVE-2026-121252
• CVE-2026-121253
• CVE-2026-121254
• CVE-2026-121255
• CVE-2026-121256
• CVE-2026-121257
• CVE-2026-121040
• CVE-2026-121041
• CVE-2026-121043
• CVE-2026-121044
• CVE-2026-121045
• CVE-2026-121046
• CVE-2026-121047
• CVE-2026-121048
• CVE-2026-121049
• CVE-2026-121052
• CVE-2026-121053
• CVE-2026-121054
• CVE-2026-121055
• CVE-2026-121057
• CVE-2026-121059
• CVE-2026-121060
• CVE-2026-121061
• CVE-2026-121062
• CVE-2026-121063
• CVE-2026-121064
• CVE-2026-121065
• CVE-2026-121066
• CVE-2026-121140
• CVE-2026-121141
• CVE-2026-121142
• CVE-2026-121143
• CVE-2026-121148
• CVE-2026-121156
• CVE-2026-121157
• CVE-2026-121158
• CVE-2026-121159
• CVE-2026-121160
• CVE-2026-121161
• CVE-2026-121162

Exploitation

Public exploits exist for this vulnerability.

Related products

• Microsoft-Edge

CVE list

• CVE-2026-121029
  warning
• CVE-2026-121030
  critical
• CVE-2026-121031
  high
• CVE-2026-121032
  high
• CVE-2026-121034
  critical
• CVE-2026-121035
  critical
• CVE-2026-121036
  critical
• CVE-2026-121037
  critical
• CVE-2026-121038
  high
• CVE-2026-121039
  high
• CVE-2026-121040
  critical
• CVE-2026-121041
  high
• CVE-2026-121043
  high
• CVE-2026-121044
  critical
• CVE-2026-121045
  high
• CVE-2026-121046
  warning
• CVE-2026-121047
  critical
• CVE-2026-121048
  critical
• CVE-2026-121049
  warning
• CVE-2026-121050
  critical
• CVE-2026-121052
  critical
• CVE-2026-121053
  high
• CVE-2026-121054
  critical
• CVE-2026-121055
  high
• CVE-2026-121057
  critical
• CVE-2026-121059
  high
• CVE-2026-121060
  critical
• CVE-2026-121061
  critical
• CVE-2026-121062
  high
• CVE-2026-121063
  critical
• CVE-2026-121064
  critical
• CVE-2026-121065
  critical
• CVE-2026-121066
  high
• CVE-2026-121094
  critical
• CVE-2026-121095
  high
• CVE-2026-121096
  high
• CVE-2026-121097
  critical
• CVE-2026-121098
  critical
• CVE-2026-121099
  high
• CVE-2026-121100
  critical
• CVE-2026-121101
  unknown
• CVE-2026-121102
  critical
• CVE-2026-121103
  high
• CVE-2026-121104
  critical
• CVE-2026-121105
  high
• CVE-2026-121107
  critical
• CVE-2026-121108
  critical
• CVE-2026-121109
  critical
• CVE-2026-121111
  warning
• CVE-2026-121113
  critical
• CVE-2026-121114
  critical
• CVE-2026-121115
  high
• CVE-2026-121117
  critical
• CVE-2026-121118
  critical
• CVE-2026-121119
  critical
• CVE-2026-121120
  critical
• CVE-2026-121121
  high
• CVE-2026-121122
  high
• CVE-2026-121123
  critical
• CVE-2026-121124
  critical
• CVE-2026-121125
  high
• CVE-2026-121126
  critical
• CVE-2026-121127
  critical
• CVE-2026-121128
  critical
• CVE-2026-121129
  critical
• CVE-2026-121130
  high
• CVE-2026-121131
  critical
• CVE-2026-121132
  high
• CVE-2026-121133
  critical
• CVE-2026-121134
  critical
• CVE-2026-121135
  critical
• CVE-2026-121136
  high
• CVE-2026-121137
  critical
• CVE-2026-121138
  high
• CVE-2026-121140
  critical
• CVE-2026-121141
  high
• CVE-2026-121142
  high
• CVE-2026-121143
  high
• CVE-2026-121148
  critical
• CVE-2026-121156
  critical
• CVE-2026-121157
  critical
• CVE-2026-121158
  high
• CVE-2026-121159
  warning
• CVE-2026-121160
  high
• CVE-2026-121161
  high
• CVE-2026-121162
  high
• CVE-2026-121193
  high
• CVE-2026-121194
  high
• CVE-2026-121195
  critical
• CVE-2026-121197
  high
• CVE-2026-121198
  critical
• CVE-2026-121199
  high
• CVE-2026-121200
  critical
• CVE-2026-121201
  critical
• CVE-2026-121202
  critical
• CVE-2026-121203
  critical
• CVE-2026-121204
  critical
• CVE-2026-121205
  critical
• CVE-2026-121206
  high
• CVE-2026-121207
  high
• CVE-2026-121208
  critical
• CVE-2026-121209
  warning
• CVE-2026-121210
  critical
• CVE-2026-121211
  critical
• CVE-2026-121212
  critical
• CVE-2026-121213
  high
• CVE-2026-121214
  critical
• CVE-2026-121215
  high
• CVE-2026-121216
  high
• CVE-2026-121217
  critical
• CVE-2026-121218
  critical
• CVE-2026-121219
  critical
• CVE-2026-121220
  critical
• CVE-2026-121221
  critical
• CVE-2026-121222
  critical
• CVE-2026-121223
  high
• CVE-2026-121224
  critical
• CVE-2026-121226
  critical
• CVE-2026-121227
  high
• CVE-2026-121228
  critical
• CVE-2026-121230
  critical
• CVE-2026-121231
  high
• CVE-2026-121232
  high
• CVE-2026-121233
  critical
• CVE-2026-121235
  high
• CVE-2026-121236
  critical
• CVE-2026-121237
  high
• CVE-2026-121238
  critical
• CVE-2026-121239
  high
• CVE-2026-121240
  warning
• CVE-2026-121242
  high
• CVE-2026-121243
  high
• CVE-2026-121244
  high
• CVE-2026-121245
  high
• CVE-2026-121248
  high
• CVE-2026-121249
  critical
• CVE-2026-121250
  critical
• CVE-2026-121251
  critical
• CVE-2026-121252
  critical
• CVE-2026-121253
  high
• CVE-2026-121254
  high
• CVE-2026-121255
  high
• CVE-2026-121256
  critical
• CVE-2026-121257
  critical
• CVE-2026-120930
  high

KB list

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com