Summary
Ein Angreifer kann mehrere Schwachstellen in Microsoft Edge ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Spoofing-Angriffe durchzuführen, Daten zu manipulieren oder offenzulegen oder einen Denial-of-Service-Zustand herbeizuführen.
Product
Edge ist ein Web Browser von Microsoft.
Vulnerabilities 8
-
High 8.8
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
-
High 8.5
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.
-
Medium 6.5
Microsoft Edge (Chromium-based) Spoofing Vulnerability
External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
-
Medium 5.4
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Incorrect authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
-
Medium 5.4
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Improper neutralization of parameter/argument delimiters in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
-
Medium 5.4
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.
-
Medium 4.4
Copilot Chat (Microsoft Edge) Information Disclosure Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Copilot Chat (Microsoft Edge) allows an authorized attacker to disclose information over a network.
-
Medium 4.3
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
Revision history
-
#2
Referenz(en) aufgenommen: EUVD-2026-76143
-
#1
Initiale Fassung
References
-
Microsoft Edge Security Release Notes vom 2026-08-30
https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security#august-27-2026
-
Microsoft Security Update Guide vom 2026-08-30
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58616
-
Microsoft Security Update Guide vom 2026-08-30
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62904
-
Microsoft Security Update Guide vom 2026-08-30
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66323
-
Microsoft Security Update Guide vom 2026-08-30
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66324
-
Microsoft Security Update Guide vom 2026-08-30
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66798
-
Microsoft Security Update Guide vom 2026-08-30
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70341
-
Microsoft Security Update Guide vom 2026-08-30
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72984
-
Microsoft Security Update Guide vom 2026-08-30
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70309