Multiples vulnérabilités dans Microsoft Edge (04 août 2026)
De multiples vulnérabilités ont été découvertes dans Microsoft Edge. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.
Details
Original advisory: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0967/
Exploitation outlook
EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.
- Low exploitation riskCVE-2026-179440.19% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 9% of all scored CVEs.
- Low exploitation riskCVE-2026-179460.27% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 19% of all scored CVEs.
- Low exploitation riskCVE-2026-178930.17% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 6% of all scored CVEs.
- Low exploitation riskCVE-2026-179070.19% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 9% of all scored CVEs.
- Low exploitation riskCVE-2026-178940.24% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 16% of all scored CVEs.
- Low exploitation riskCVE-2026-178710.17% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 7% of all scored CVEs.
- Low exploitation riskCVE-2026-178780.18% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 7% of all scored CVEs.
- Low exploitation riskCVE-2026-178860.28% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 20% of all scored CVEs.
- Low exploitation riskCVE-2026-179530.22% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 13% of all scored CVEs.
- Low exploitation riskCVE-2026-178720.07% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 0% of all scored CVEs.
Referenced CVEs
+12 more CVEs referenced in this advisory.
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
- mediumCVE-2026-17959: Inappropriate implementation in Network in Google Chrome prior to 151.0.7922.72 allowed a remo…nvd
- highCVE-2026-17956: Inappropriate implementation in Scheduling in Google Chrome prior to 151.0.7922.72 allowed a r…nvd
- mediumCVE-2026-17955: Insufficient validation of untrusted input in Payments in Google Chrome prior to 151.0.7922.72…nvd
- mediumCVE-2026-17953: Insufficient policy enforcement in WebView in Google Chrome on Android prior to 151.0.7922.72 …nvd
- highCVE-2026-17951: Heap buffer overflow in WebRTC in Google Chrome prior to 151.0.7922.72 allowed a remote attack…nvd
- mediumCVE-2026-17949: Uninitialized Use in GPU in Google Chrome on Android prior to 151.0.7922.72 allowed a remote a…nvd
- criticalCVE-2026-17947: Use after free in WebSockets in Google Chrome prior to 151.0.7922.72 allowed a remote attacker…nvd
- mediumCVE-2026-17946: Uninitialized Use in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker wh…nvd
- mediumCVE-2026-17945: Insufficient validation of untrusted input in Navigation in Google Chrome prior to 151.0.7922.…nvd
- mediumCVE-2026-17944: Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 …nvd
- mediumCVE-2026-17943: Inappropriate implementation in Parser in Google Chrome prior to 151.0.7922.72 allowed a remot…nvd
- mediumCVE-2026-17942: Side-channel information leakage in SVG in Google Chrome prior to 151.0.7922.72 allowed a remo…nvd
More from CERT-FR Avis de sécurité
- unknownMultiples vulnérabilités dans les produits Tenable (04 août 2026)2026-08-04
- unknownMultiples vulnérabilités dans Google Android (04 août 2026)2026-08-04
- unknownVulnérabilité dans les produits Check Point (04 août 2026)2026-08-04
- unknownMultiples vulnérabilités dans LibreNMS (04 août 2026)2026-08-04
- unknownMultiples vulnérabilités dans Traefik (04 août 2026)2026-08-04