Summary
Ein Angreifer kann mehrere Schwachstellen in Microsoft Edge ausnutzen, um beliebigen Programmcode auszuführen, erweiterte Berechtigungen zu erlangen, Sicherheitsmaßnahmen zu umgehen, Spoofing-Angriffe durchzuführen sowie Daten zu manipulieren oder offenzulegen.
Product
Edge ist ein Web Browser von Microsoft.
Vulnerabilities 11
-
High 8.8
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.
-
High 8.8
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Use after free in Microsoft Edge for iOS allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Incomplete list of disallowed inputs in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.
-
High 8.8
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.
-
High 8.1
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges over a network.
-
High 7.5
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
-
High 7.4
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
-
Medium 5.4
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.
-
Medium 4.3
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Improper restriction of rendered ui layers or frames in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
-
Medium 4.3
Microsoft Edge for Android Security Feature Bypass Vulnerability
Incorrect authorization in Microsoft Edge for Android allows an unauthorized attacker to bypass a security feature over a network.
-
Medium 4.3
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Improper verification of cryptographic signature in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
Revision history
-
#2
Referenz(en) aufgenommen: EUVD-2026-112940, EUVD-2026-112939, EUVD-2026-112938, EUVD-2026-112937, EUVD-2026-112936, EUVD-2026-113164, EUVD-2026-112935, EUVD-2026-113162, EUVD-2026-113160, EUVD-2026-113161
-
#1
Initiale Fassung
References
-
Microsoft Security Update Guide vom 2026-10-27
https://msrc.microsoft.com/update-guide/vulnerability/
-
Microsoft Security Update Guide vom 2026-10-27
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20942
-
Microsoft Security Update Guide vom 2026-10-27
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62765
-
Microsoft Security Update Guide vom 2026-10-27
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85330
-
Microsoft Security Update Guide vom 2026-10-27
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85899
-
Microsoft Security Update Guide vom 2026-10-27
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88077
-
Microsoft Security Update Guide vom 2026-10-27
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88078
-
Microsoft Security Update Guide vom 2026-10-27
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88090
-
Microsoft Security Update Guide vom 2026-10-27
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96187
-
Microsoft Security Update Guide vom 2026-10-27
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96192
-
Microsoft Security Update Guide vom 2026-10-27
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96196
-
Microsoft Security Update Guide vom 2026-10-27
https://msrc.microsoft.com/update-guide/vulnerability/CVE:CVE-2026-96203