Multiples vulnérabilités dans Microsoft Edge (03 août 2026)
De multiples vulnérabilités ont été découvertes dans Microsoft Edge. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.
Details
Original advisory: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0960/
Exploitation outlook
EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.
- Low exploitation riskCVE-2026-179830.17% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 7% of all scored CVEs.
- Low exploitation riskCVE-2026-176700.39% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 32% of all scored CVEs.
- Low exploitation riskCVE-2026-176960.29% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 21% of all scored CVEs.
- Low exploitation riskCVE-2026-179880.23% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 14% of all scored CVEs.
- Low exploitation riskCVE-2026-177500.18% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 8% of all scored CVEs.
- Low exploitation riskCVE-2026-180010.18% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 8% of all scored CVEs.
- Low exploitation riskCVE-2026-180130.14% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 4% of all scored CVEs.
- Low exploitation riskCVE-2026-177310.15% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 4% of all scored CVEs.
- Low exploitation riskCVE-2026-178230.15% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 5% of all scored CVEs.
- Low exploitation riskCVE-2026-178600.08% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 0% of all scored CVEs.
Referenced CVEs
+12 more CVEs referenced in this advisory.
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
- high[NEW] [high] Google Chrome: Multiple vulnerabilitiescert-bund
- unknownMicrosoft Edge Multiple Vulnerabilitieshkcert
- unknownDSA-6408-1 chromium - security updatedebian
- unknownGoogle Chrome Multiple Vulnerabilitieshkcert
- criticalCVE-2026-18015: Inappropriate implementation in Tint in Google Chrome on Mac prior to 151.0.7922.72 allowed a …nvd
- mediumCVE-2026-18013: Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 …nvd
- mediumCVE-2026-18007: Inappropriate implementation in Input in Google Chrome on Android prior to 151.0.7922.72 allow…nvd
- mediumCVE-2026-18006: Inappropriate implementation in Google Lens in Google Chrome prior to 151.0.7922.72 allowed a …nvd
- mediumCVE-2026-18004: Insufficient policy enforcement in Speech in Google Chrome prior to 151.0.7922.72 allowed a re…nvd
- mediumCVE-2026-18003: Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 …nvd
- mediumCVE-2026-18001: Inappropriate implementation in WebGL in Google Chrome prior to 151.0.7922.72 allowed a remote…nvd
- lowCVE-2026-18000: Insufficient policy enforcement in USB in Google Chrome on Android prior to 151.0.7922.72 allo…nvd
More from CERT-FR Avis de sécurité
- unknownVulnérabilité dans Microsoft Office (03 août 2026)2026-08-03
- unknownMultiples vulnérabilités dans Papercut (03 août 2026)2026-08-03
- unknownMultiples vulnérabilités dans PHP (31 juillet 2026)2026-07-31
- unknownMultiples vulnérabilités dans le noyau Linux d'Ubuntu (31 juillet 2026)2026-07-31
- unknownMultiples vulnérabilités dans Progress MOVEit Transfer (31 juillet 2026)2026-07-31