Kaspersky ID:
KLA91409
Дата обнаружения:
05/11/2026
Обновлено:
12/11/2026

Описание

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information.

Below is a complete list of vulnerabilities:

  1. Security vulnerability can be exploited to bypass security restrictions.
  2. Denial of service vulnerability in Skia can be exploited remotely to cause denial of service.
  3. A remote code execution vulnerability in Views can be exploited remotely to execute arbitrary code.
  4. A remote code execution vulnerability in Prerender can be exploited remotely to execute arbitrary code.
  5. A remote code execution vulnerability in CSS can be exploited remotely to execute arbitrary code.
  6. Denial of service vulnerability in ANGLE can be exploited remotely to cause denial of service.
  7. Information disclosure vulnerability in Compositing can be exploited to obtain sensitive information.
  8. A remote code execution vulnerability in Mobile can be exploited remotely to execute arbitrary code.
  9. Denial of service vulnerability in V8 can be exploited remotely to cause denial of service.
  10. A remote code execution vulnerability in Printing can be exploited remotely to execute arbitrary code.
  11. Information disclosure vulnerability in PrivateTokens can be exploited to obtain sensitive information.
  12. A remote code execution vulnerability in DOM can be exploited remotely to execute arbitrary code.
  13. Information disclosure vulnerability in Network can be exploited to obtain sensitive information.
  14. A remote code execution vulnerability in PDFium can be exploited remotely to execute arbitrary code.
  15. A remote code execution vulnerability in TabStrip can be exploited remotely to execute arbitrary code.
  16. Denial of service vulnerability in Shopping can be exploited remotely to cause denial of service.
  17. A remote code execution vulnerability in Paint can be exploited remotely to execute arbitrary code.
  18. A remote code execution vulnerability in SVG can be exploited remotely to execute arbitrary code.
  19. A remote code execution vulnerability in Controls can be exploited remotely to execute arbitrary code.
  20. Denial of service vulnerability in Prerender can be exploited remotely to cause denial of service.
  21. A remote code execution vulnerability in Canvas can be exploited remotely to execute arbitrary code.
  22. Information disclosure vulnerability in ServiceWorker can be exploited to obtain sensitive information.
  23. A remote code execution vulnerability in Core can be exploited remotely to execute arbitrary code.
  24. A remote code execution vulnerability in WebAudio can be exploited remotely to execute arbitrary code.
  25. A remote code execution vulnerability in Scheduling can be exploited remotely to execute arbitrary code.
  26. A remote code execution vulnerability in WebRTC can be exploited remotely to execute arbitrary code.
  27. Information disclosure vulnerability in V8 can be exploited to obtain sensitive information.
  28. Denial of service vulnerability in DevTools can be exploited remotely to cause denial of service.
  29. A remote code execution vulnerability in Animation can be exploited remotely to execute arbitrary code.
  30. A remote code execution vulnerability in Autofill can be exploited remotely to execute arbitrary code.
  31. A remote code execution vulnerability in Geometry can be exploited remotely to execute arbitrary code.
  32. Denial of service vulnerability in Media can be exploited remotely to cause denial of service.
  33. A remote code execution vulnerability in PowerBookmarks can be exploited remotely to execute arbitrary code.
  34. A remote code execution vulnerability in Passwords can be exploited remotely to execute arbitrary code.
  35. A remote code execution vulnerability in Streaming can be exploited remotely to execute arbitrary code.
  36. A remote code execution vulnerability in GPU can be exploited remotely to execute arbitrary code.
  37. A remote code execution vulnerability in ANGLE can be exploited remotely to execute arbitrary code.
  38. Denial of service vulnerability in CacheStorage can be exploited remotely to cause denial of service.
  39. Information disclosure vulnerability in Paint can be exploited to obtain sensitive information.
  40. Denial of service vulnerability in Network can be exploited remotely to cause denial of service.
  41. A remote code execution vulnerability in Source can be exploited remotely to execute arbitrary code.
  42. Information disclosure vulnerability in Core can be exploited to obtain sensitive information.
  43. Denial of service vulnerability in Variations can be exploited remotely to cause denial of service.
  44. Denial of service vulnerability in WebPackaging can be exploited remotely to cause denial of service.
  45. Information disclosure vulnerability in Frames can be exploited to obtain sensitive information.
  46. A remote code execution vulnerability in Extensions can be exploited remotely to execute arbitrary code.
  47. Information disclosure vulnerability in Select can be exploited to obtain sensitive information.
  48. A remote code execution vulnerability in Layout can be exploited remotely to execute arbitrary code.
  49. A remote code execution vulnerability in Media can be exploited remotely to execute arbitrary code.
  50. A remote code execution vulnerability in V8 can be exploited remotely to execute arbitrary code.
  51. A remote code execution vulnerability in Modularization can be exploited remotely to execute arbitrary code.
  52. Denial of service vulnerability in Performance can be exploited remotely to cause denial of service.
  53. Denial of service vulnerability in Internals can be exploited remotely to cause denial of service.
  54. Denial of service vulnerability in Editing can be exploited remotely to cause denial of service.
  55. A remote code execution vulnerability in Dawn can be exploited remotely to execute arbitrary code.
  56. Information disclosure vulnerability in BackgroundFetch can be exploited to obtain sensitive information.

Первичный источник обнаружения

Эксплуатация

Public exploits exist for this vulnerability.

Связанные продукты

Список CVE

  • CVE-2026-121029
    warning
  • CVE-2026-121030
    critical
  • CVE-2026-121031
    high
  • CVE-2026-121032
    high
  • CVE-2026-121034
    critical
  • CVE-2026-121035
    critical
  • CVE-2026-121036
    critical
  • CVE-2026-121037
    critical
  • CVE-2026-121038
    high
  • CVE-2026-121039
    high
  • CVE-2026-121040
    critical
  • CVE-2026-121041
    high
  • CVE-2026-121043
    high
  • CVE-2026-121044
    critical
  • CVE-2026-121045
    high
  • CVE-2026-121046
    warning
  • CVE-2026-121047
    critical
  • CVE-2026-121048
    critical
  • CVE-2026-121049
    warning
  • CVE-2026-121050
    critical
  • CVE-2026-121052
    critical
  • CVE-2026-121053
    high
  • CVE-2026-121054
    critical
  • CVE-2026-121055
    high
  • CVE-2026-121057
    critical
  • CVE-2026-121059
    high
  • CVE-2026-121060
    critical
  • CVE-2026-121061
    critical
  • CVE-2026-121062
    high
  • CVE-2026-121063
    critical
  • CVE-2026-121064
    critical
  • CVE-2026-121065
    critical
  • CVE-2026-121066
    high
  • CVE-2026-121094
    critical
  • CVE-2026-121095
    high
  • CVE-2026-121096
    high
  • CVE-2026-121097
    critical
  • CVE-2026-121098
    critical
  • CVE-2026-121099
    high
  • CVE-2026-121100
    critical
  • CVE-2026-121101
    unknown
  • CVE-2026-121102
    critical
  • CVE-2026-121103
    high
  • CVE-2026-121104
    critical
  • CVE-2026-121105
    high
  • CVE-2026-121107
    critical
  • CVE-2026-121108
    critical
  • CVE-2026-121109
    critical
  • CVE-2026-121111
    warning
  • CVE-2026-121113
    critical
  • CVE-2026-121114
    critical
  • CVE-2026-121115
    high
  • CVE-2026-121117
    critical
  • CVE-2026-121118
    critical
  • CVE-2026-121119
    critical
  • CVE-2026-121120
    critical
  • CVE-2026-121121
    high
  • CVE-2026-121122
    high
  • CVE-2026-121123
    critical
  • CVE-2026-121124
    critical
  • CVE-2026-121125
    high
  • CVE-2026-121126
    critical
  • CVE-2026-121127
    critical
  • CVE-2026-121128
    critical
  • CVE-2026-121129
    critical
  • CVE-2026-121130
    high
  • CVE-2026-121131
    critical
  • CVE-2026-121132
    high
  • CVE-2026-121133
    critical
  • CVE-2026-121134
    critical
  • CVE-2026-121135
    critical
  • CVE-2026-121136
    high
  • CVE-2026-121137
    critical
  • CVE-2026-121138
    high
  • CVE-2026-121140
    critical
  • CVE-2026-121141
    high
  • CVE-2026-121142
    high
  • CVE-2026-121143
    high
  • CVE-2026-121148
    critical
  • CVE-2026-121156
    critical
  • CVE-2026-121157
    critical
  • CVE-2026-121158
    high
  • CVE-2026-121159
    warning
  • CVE-2026-121160
    high
  • CVE-2026-121161
    high
  • CVE-2026-121162
    high
  • CVE-2026-121193
    high
  • CVE-2026-121194
    high
  • CVE-2026-121195
    critical
  • CVE-2026-121197
    high
  • CVE-2026-121198
    critical
  • CVE-2026-121199
    high
  • CVE-2026-121200
    critical
  • CVE-2026-121201
    critical
  • CVE-2026-121202
    critical
  • CVE-2026-121203
    critical
  • CVE-2026-121204
    critical
  • CVE-2026-121205
    critical
  • CVE-2026-121206
    high
  • CVE-2026-121207
    high
  • CVE-2026-121208
    critical
  • CVE-2026-121209
    warning
  • CVE-2026-121210
    critical
  • CVE-2026-121211
    critical
  • CVE-2026-121212
    critical
  • CVE-2026-121213
    high
  • CVE-2026-121214
    critical
  • CVE-2026-121215
    high
  • CVE-2026-121216
    high
  • CVE-2026-121217
    critical
  • CVE-2026-121218
    critical
  • CVE-2026-121219
    critical
  • CVE-2026-121220
    critical
  • CVE-2026-121221
    critical
  • CVE-2026-121222
    critical
  • CVE-2026-121223
    high
  • CVE-2026-121224
    critical
  • CVE-2026-121226
    critical
  • CVE-2026-121227
    high
  • CVE-2026-121228
    critical
  • CVE-2026-121230
    critical
  • CVE-2026-121231
    high
  • CVE-2026-121232
    high
  • CVE-2026-121233
    critical
  • CVE-2026-121235
    high
  • CVE-2026-121236
    critical
  • CVE-2026-121237
    high
  • CVE-2026-121238
    critical
  • CVE-2026-121239
    high
  • CVE-2026-121240
    warning
  • CVE-2026-121242
    high
  • CVE-2026-121243
    high
  • CVE-2026-121244
    high
  • CVE-2026-121245
    high
  • CVE-2026-121248
    high
  • CVE-2026-121249
    critical
  • CVE-2026-121250
    critical
  • CVE-2026-121251
    critical
  • CVE-2026-121252
    critical
  • CVE-2026-121253
    high
  • CVE-2026-121254
    high
  • CVE-2026-121255
    high
  • CVE-2026-121256
    critical
  • CVE-2026-121257
    critical
  • CVE-2026-120930
    high

Список KB

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com

Нашли неточность в описании этой уязвимости? Дайте нам знать!
Kaspersky IT Security Calculator:
Оцените ваш профиль кибербезопасности
Узнать больше
Встречай новый Kaspersky!
Каждая минута твоей онлайн-жизни заслуживает топовой защиты.
Узнать больше
Do you want to save your changes?
Your message has been sent successfully.