Kaspersky ID:
KLA91276
Дата обнаружения:
11/09/2026
Обновлено:
06/10/2026

Описание

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface.

Below is a complete list of vulnerabilities:

  1. A remote code execution vulnerability in Chromoting can be exploited remotely to execute arbitrary code.
  2. Security vulnerability can be exploited to bypass security restrictions.
  3. A remote code execution vulnerability in DOM can be exploited remotely to execute arbitrary code.
  4. A remote code execution vulnerability in Network can be exploited remotely to execute arbitrary code.
  5. A remote code execution vulnerability in Dawn can be exploited remotely to execute arbitrary code.
  6. A spoofing vulnerability in Microsoft Edge (Chromium-based) can be exploited remotely to spoof user interface.
  7. A remote code execution vulnerability in WebGL can be exploited remotely to execute arbitrary code.
  8. A remote code execution vulnerability in DevTools can be exploited remotely to execute arbitrary code.
  9. A remote code execution vulnerability in V8 can be exploited remotely to execute arbitrary code.
  10. A remote code execution vulnerability in Compositing can be exploited remotely to execute arbitrary code.
  11. A remote code execution vulnerability in Skia can be exploited remotely to execute arbitrary code.
  12. Denial of service vulnerability in Compositing can be exploited remotely to cause denial of service.
  13. Denial of service vulnerability in CrashReporting can be exploited remotely to cause denial of service.
  14. Information disclosure vulnerability in CacheStorage can be exploited to obtain sensitive information.
  15. An elevation of privilege vulnerability in Microsoft Edge (Chromium-based) can be exploited remotely to gain privileges.
  16. Denial of service vulnerability in V8 can be exploited remotely to cause denial of service.

Первичный источник обнаружения

Эксплуатация

Public exploits exist for this vulnerability.

Связанные продукты

Список CVE

  • CVE-2026-76036
    critical
  • CVE-2026-76039
    high
  • CVE-2026-76017
    critical
  • CVE-2026-76018
    critical
  • CVE-2026-76019
    critical
  • CVE-2026-76021
    critical
  • CVE-2026-76022
    critical
  • CVE-2026-76023
    critical
  • CVE-2026-84330
    high
  • CVE-2026-84333
    critical
  • CVE-2026-84352
    critical
  • CVE-2026-85042
    critical
  • CVE-2026-85043
    critical
  • CVE-2026-85045
    critical
  • CVE-2026-85048
    critical
  • CVE-2026-85049
    critical
  • CVE-2026-85051
    critical
  • CVE-2026-85052
    warning
  • CVE-2026-85053
    critical
  • CVE-2026-87491
    critical
  • CVE-2026-87536
    unknown
  • CVE-2026-77490
    high
  • CVE-2026-85892
    critical

Список KB

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com

Нашли неточность в описании этой уязвимости? Дайте нам знать!
Kaspersky IT Security Calculator:
Оцените ваш профиль кибербезопасности
Узнать больше
Встречай новый Kaspersky!
Каждая минута твоей онлайн-жизни заслуживает топовой защиты.
Узнать больше
Do you want to save your changes?
Your message has been sent successfully.