Kaspersky ID:
KLA91237
Дата обнаружения:
20/08/2026
Обновлено:
10/09/2026

Описание

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information.

Below is a complete list of vulnerabilities:

  1. Denial of service vulnerability in CORS can be exploited remotely to cause denial of service.
  2. A remote code execution vulnerability in WebGL can be exploited remotely to execute arbitrary code.
  3. Denial of service vulnerability in Media can be exploited remotely to cause denial of service.
  4. Security vulnerability can be exploited to bypass security restrictions.
  5. Denial of service vulnerability in V8 can be exploited remotely to cause denial of service.
  6. A remote code execution vulnerability in Browser can be exploited remotely to execute arbitrary code.
  7. Information disclosure vulnerability in Skia can be exploited to obtain sensitive information.
  8. A remote code execution vulnerability in USB can be exploited remotely to execute arbitrary code.

Первичный источник обнаружения

Эксплуатация

Public exploits exist for this vulnerability.

Связанные продукты

Список CVE

  • CVE-2026-76033
    unknown
  • CVE-2026-76034
    unknown
  • CVE-2026-76035
    unknown
  • CVE-2026-76037
    unknown
  • CVE-2026-76038
    unknown
  • CVE-2026-76040
    unknown
  • CVE-2026-76041
    unknown
  • CVE-2026-76042
    unknown
  • CVE-2026-76043
    unknown
  • CVE-2026-76044
    unknown
  • CVE-2026-76045
    unknown
  • CVE-2026-76047
    unknown

Список KB

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com

Нашли неточность в описании этой уязвимости? Дайте нам знать!
Kaspersky IT Security Calculator:
Оцените ваш профиль кибербезопасности
Узнать больше
Встречай новый Kaspersky!
Каждая минута твоей онлайн-жизни заслуживает топовой защиты.
Узнать больше
Do you want to save your changes?
Your message has been sent successfully.