Skip to content
OpenAdvisories
Medium WID-SEC-2026-1425 3 CVEs

Microsoft Edge: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff

Published May 7, 2026 · Updated May 12, 2026 · Revision 2 · de-DE

Vendor: Microsoft Product: Edge Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Microsoft Edge ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.

Product

Edge ist ein Web Browser von Microsoft.

Vulnerabilities 3

  • High 7.4
    CVE-2026-41107

    Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

    External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

    Microsoft Microsoft Edge (Chromium-based) Browsers
  • Medium 5.4
    CVE-2026-42838

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

    Improper neutralization of special elements in output used by a downstream component ('injection') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

    Microsoft Microsoft Edge (Chromium-based) Browsers
  • Medium 4.3
    CVE-2026-40416

    Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

    User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

    Microsoft Microsoft Edge (Chromium-based) Browsers

Revision history

  1. #2

    Referenz(en) aufgenommen: EUVD-2026-29714, EUVD-2026-29690, EUVD-2026-29673

  2. #1

    Initiale Fassung

References