Microsoft Edge Multiple Vulnerabilities

CSIRTS triage

What

Multiple vulnerabilities have been identified in Microsoft Edge.

Who is affected

Users of Microsoft Edge are affected by these vulnerabilities.

Urgency

Remediation is necessary as these vulnerabilities could potentially be exploited, although no exploitation has been reported yet.

Action

Users should update to the latest version of Microsoft Edge to mitigate these vulnerabilities.

AI-assisted analysis generated from the source advisory — verify against the original.

Details

Source

HKCERT Security Bulletins (HK · national-cert · site)

Severity

unknown

Published

2026-07-27

Exploitation

Not in CISA KEV at last sync

Original advisory: https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260727

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

• Low exploitation riskCVE-2026-168040.25% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 16% of all scored CVEs.
• Low exploitation riskCVE-2026-168050.31% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 24% of all scored CVEs.
• Low exploitation riskCVE-2026-168060.40% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 33% of all scored CVEs.
• Low exploitation riskCVE-2026-168070.26% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 18% of all scored CVEs.
• Low exploitation riskCVE-2026-579780.22% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 12% of all scored CVEs.
• Low exploitation riskCVE-2026-579890.44% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 36% of all scored CVEs.
• Low exploitation riskCVE-2026-579900.94% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 58% of all scored CVEs.

Referenced CVEs

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

• unknownDSA-6408-1 chromium - security updatedebian
• high[NEW] [high] Google Chrome: Multiple vulnerabilities allow unspecified attackcert-bund
• unknownMicrosoft security advisory (AV26-747)cccs
• medium[NEW] [medium] Microsoft Edge: Multiple vulnerabilities allow information disclosure and spoofing attackscert-bund
• unknownMultiple vulnerabilities in Microsoft Edge (July 27, 2026)cert-fr-avis
• highCVE-2026-57990: Files or directories accessible to external parties in Microsoft Edge (Chromium-based) allows …nvd
• highCVE-2026-57989: Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to …nvd
• mediumCVE-2026-57978: Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to …nvd
• unknownGoogle Chrome Multiple Vulnerabilitieshkcert
• unknownMultiple vulnerabilities in Google Chrome (July 24, 2026)cert-fr-avis
• highCVE-2026-16807: Out of bounds write in Codecs in Google Chrome prior to 150.0.7871.186 allowed a remote attack…nvd
• highCVE-2026-16806: Use after free in WebMCP in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to…nvd

More from HKCERT Security Bulletins

• unknownGoogle Chrome Multiple Vulnerabilities2026-07-30
• unknownCisco Secure Firewall Management Center Software Information Disclosure Vulnerability2026-07-30
• unknownIBM WebSphere Products Multiple Vulnerabilities2026-07-30
• unknownNode.js Multiple Vulnerabilities2026-07-30
• unknownXen Multiple Vulnerabilities2026-07-30