Summary
Ein Angreifer kann mehrere Schwachstellen in Microsoft Edge ausnutzen, um beliebigen Programmcode auszuführen und erweiterte Berechtigungen zu erlangen.
Product
Edge ist ein Web Browser von Microsoft.
Vulnerabilities 3
-
High 8.8
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.
-
High 7.8
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges locally.
Revision history
-
#1
Initiale Fassung
References
-
Microsoft Security Update Guide vom 2026-09-15
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69486
-
Microsoft Security Update Guide vom 2026-09-15
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85892
-
Microsoft Security Update Guide vom 2026-09-15
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85893