Multiple vulnerabilities in Microsoft Edge (August 12, 2026)

unknownCVE-2026-19165 CVE-2026-19155 CVE-2026-19150 CVE-2026-19157 CVE-2026-19156 CVE-2026-19161

Multiple vulnerabilities have been discovered in Microsoft Edge. They allow an attacker to cause remote arbitrary code execution and a security issue not specified by the publisher.

CSIRTS triage

vendor: Microsoft product: Edge Remote code executionOther

What: Multiple vulnerabilities in Microsoft Edge enable remote code execution and unspecified security issues.
Who is affected: Microsoft Edge browser users on all platforms affected by the listed CVEs.
Urgency: Highly urgent; browser RCE vulnerabilities enable arbitrary code execution in client environments.
Action: Update Microsoft Edge to the latest patched version immediately.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch Edge

Get an email when a new Edge advisory drops — max one per day, one-click unsubscribe.

Details

Source: CERT-FR Avis de sécurité (FR · national-cert · site)
Severity: unknown
Published: 2026-08-12
Exploitation: Not in CISA KEV at last sync
Language: Machine-translated to English — verify against the original

Original advisory: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0999/

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Low exploitation riskCVE-2026-191650.23% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 15% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-191550.27% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 19% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-191500.44% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 37% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-191570.32% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 24% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-191560.22% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 13% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-191610.24% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 15% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-191710.29% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 22% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-703390.24% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 15% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-191380.29% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 22% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-191450.35% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 28% of all EPSS-scored CVEs.

Referenced CVEs

CVE	CSIRTS overview	External
CVE-2026-19165	coverage & exploitation status	NVD · CVE.org
CVE-2026-19155	coverage & exploitation status	NVD · CVE.org
CVE-2026-19150	coverage & exploitation status	NVD · CVE.org
CVE-2026-19157	coverage & exploitation status	NVD · CVE.org
CVE-2026-19156	coverage & exploitation status	NVD · CVE.org
CVE-2026-19161	coverage & exploitation status	NVD · CVE.org
CVE-2026-19171	coverage & exploitation status	NVD · CVE.org
CVE-2026-70339	coverage & exploitation status	NVD · CVE.org
CVE-2026-19138	coverage & exploitation status	NVD · CVE.org
CVE-2026-19145	coverage & exploitation status	NVD · CVE.org
CVE-2026-19176	coverage & exploitation status	NVD · CVE.org
CVE-2026-19163	coverage & exploitation status	NVD · CVE.org
CVE-2026-19167	coverage & exploitation status	NVD · CVE.org
CVE-2026-19142	coverage & exploitation status	NVD · CVE.org
CVE-2026-19168	coverage & exploitation status	NVD · CVE.org
CVE-2026-19173	coverage & exploitation status	NVD · CVE.org
CVE-2026-19146	coverage & exploitation status	NVD · CVE.org
CVE-2026-19149	coverage & exploitation status	NVD · CVE.org
CVE-2026-19144	coverage & exploitation status	NVD · CVE.org
CVE-2026-19177	coverage & exploitation status	NVD · CVE.org
CVE-2026-19148	coverage & exploitation status	NVD · CVE.org
CVE-2026-19151	coverage & exploitation status	NVD · CVE.org
CVE-2026-19164	coverage & exploitation status	NVD · CVE.org
CVE-2026-19137	coverage & exploitation status	NVD · CVE.org
CVE-2026-19139	coverage & exploitation status	NVD · CVE.org
CVE-2026-19162	coverage & exploitation status	NVD · CVE.org
CVE-2026-19160	coverage & exploitation status	NVD · CVE.org
CVE-2026-19174	coverage & exploitation status	NVD · CVE.org
CVE-2026-19152	coverage & exploitation status	NVD · CVE.org
CVE-2026-19166	coverage & exploitation status	NVD · CVE.org
CVE-2026-19147	coverage & exploitation status	NVD · CVE.org
CVE-2026-19170	coverage & exploitation status	NVD · CVE.org
CVE-2026-19159	coverage & exploitation status	NVD · CVE.org
CVE-2026-19169	coverage & exploitation status	NVD · CVE.org
CVE-2026-19175	coverage & exploitation status	NVD · CVE.org
CVE-2026-19158	coverage & exploitation status	NVD · CVE.org
CVE-2026-19153	coverage & exploitation status	NVD · CVE.org
CVE-2026-19140	coverage & exploitation status	NVD · CVE.org
CVE-2026-19172	coverage & exploitation status	NVD · CVE.org

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

high[NEW] [high] Google Chrome: Multiple vulnerabilitiescert-bund
medium[NEW] [medium] Microsoft Edge: Vulnerability Enables Code Executioncert-bund
mediumCVE-2026-70339: Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-base…nvd
mediumCVE-2026-70339: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerabilitymsrc
unknownCVE-2026-19157: CVE-2026-19157 Out of bounds write in ANGLEmsrc
unknownCVE-2026-19137: CVE-2026-19137 Use after free in WebGLmsrc
unknownCVE-2026-19138: CVE-2026-19138 Heap buffer overflow in CrashReportingmsrc
unknownCVE-2026-19146: CVE-2026-19146 Uninitialized Use in GPUmsrc
unknownCVE-2026-19152: CVE-2026-19152 Inappropriate implementation in Navigationmsrc
unknownCVE-2026-19162: CVE-2026-19162 Out of bounds write in V8msrc
unknownCVE-2026-19175: CVE-2026-19175 Use after free in Paymentsmsrc
unknownCVE-2026-19144: CVE-2026-19144 Use after free in HTMLmsrc