Kaspersky База Угроз

Описание

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code.

Below is a complete list of vulnerabilities:

Use after free vulnerability in Payments can be exploited by a local attacker with physical access to potentially exploit heap corruption, causing denial of service or executing arbitrary code.
Use after free vulnerability in AdFilter can be exploited remotely via a crafted HTML page to execute arbitrary code.
A remote code execution vulnerability in IndexedDB can be exploited remotely to execute arbitrary code.
A remote code execution vulnerability in Extensions API can be exploited remotely to execute arbitrary code.
Denial of service vulnerability in ANGLE can be exploited remotely to cause denial of service.
A remote code execution vulnerability in Extensions can be exploited remotely to execute arbitrary code.
A remote code execution vulnerability in Views can be exploited remotely to execute arbitrary code.
A remote code execution vulnerability in Ozone can be exploited remotely to execute arbitrary code.
A remote code execution vulnerability in Autofill can be exploited remotely to execute arbitrary code.
A remote code execution vulnerability in Codecs can be exploited remotely to execute arbitrary code.
Denial of service vulnerability in WebAppInstalls can be exploited remotely to cause denial of service.
A remote code execution vulnerability in Actor can be exploited remotely to execute arbitrary code.
A remote code execution vulnerability in Payments can be exploited remotely to execute arbitrary code.
A remote code execution vulnerability in Input can be exploited remotely to execute arbitrary code.
Denial of service vulnerability in GetUserMedia can be exploited remotely to cause denial of service.
A remote code execution vulnerability in Core can be exploited remotely to execute arbitrary code.
A remote code execution vulnerability in WebRTC can be exploited remotely to execute arbitrary code.
Denial of service vulnerability in Codecs can be exploited remotely to cause denial of service.
Denial of service vulnerability in DOM can be exploited remotely to cause denial of service.
Security vulnerability in Passwords can be exploited to bypass security restrictions.
Denial of service vulnerability in Forms can be exploited remotely to cause denial of service.
A remote code execution vulnerability in Forms can be exploited remotely to execute arbitrary code.
Denial of service vulnerability in WebGL can be exploited remotely to cause denial of service.
Security vulnerability in Navigation can be exploited to bypass security restrictions.
Denial of service vulnerability in Navigation can be exploited remotely to cause denial of service.
Denial of service vulnerability in V8 can be exploited remotely to cause denial of service.
A remote code execution vulnerability in InterestGroups can be exploited remotely to execute arbitrary code.
A remote code execution vulnerability in libyuv can be exploited remotely to execute arbitrary code.

Первичный источник обнаружения

Эксплуатация

Список CVE

CVE-2026-13282
unknown
CVE-2026-13283
unknown
CVE-2026-15107
unknown
CVE-2026-15108
unknown
CVE-2026-15109
unknown
CVE-2026-15110
unknown
CVE-2026-15111
unknown
CVE-2026-15112
unknown
CVE-2026-15113
unknown
CVE-2026-15114
unknown
CVE-2026-15115
unknown
CVE-2026-15116
unknown
CVE-2026-15117
unknown
CVE-2026-15118
unknown
CVE-2026-15119
unknown
CVE-2026-15120
unknown
CVE-2026-15121
unknown
CVE-2026-15122
unknown
CVE-2026-15123
unknown
CVE-2026-15124
unknown
CVE-2026-15125
unknown
CVE-2026-15126
unknown
CVE-2026-15127
unknown
CVE-2026-15128
unknown
CVE-2026-15129
unknown
CVE-2026-15130
unknown
CVE-2026-15131
unknown
CVE-2026-15132
unknown
CVE-2026-15133
unknown
CVE-2026-15767
unknown

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com

Нашли неточность в описании этой уязвимости? Дайте нам знать!