Multiple serious vulnerabilities have been found in Microsoft browsers. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions or obtain sensitive information.

Below is a complete list of vulnerabilities:

1. An incorrect file marking mechanism in Microsoft Edge can be exploited remotely via a specially designed website to obtain sensitive information;
2. An improper handling of objects in memory in Microsoft Internet explorer can be exploited remotely via a specially designed website to execute arbitrary code;
3. Multiple incorrect handling of objects in memory vulnerabilities in Microsoft Edge can be exploited remotely via a specially designed website to execute arbitrary code;
4. A security bypass vulnerability in Internet Explorer can be exploited remotely via a specially designed website to bypass security restrictions;
5. Memory corruption vulnerability in ChakraCore component of Microsoft Edge scripting engine can be exploited remotely via unspecified attack vector to execute arbitrary code;
6. Multiple incorrect handling of objects in memory vulnerabilities in Microsoft Edge can be exploited remotely via a specially designed website to obtain sensitive information;
7. An incorrect handling of requests in Microsoft Edge can be exploited remotely via a specially designed website to bypass security restrictions.

Technical details

Vulnerability (4) allows to bypass Mark of the Web Tagging (MOTW).

Internet Explorer 10
Internet Explorer 11
Internet Explorer 9
Microsoft Edge

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

4284860
4284874
4284826
4284835
4284880
4284819
4230450
4284855
4284815