Cert-In-Advisories

[CIVN-2026-0044] Multiple Vulnerabilities in Microsoft Edge

By TeamwinPublished On: January 24, 2026

—–BEGIN PGP SIGNED MESSAGE—–

Hash: SHA256

Multiple Vulnerabilities in Microsoft Edge

Indian – Computer Emergency Response Team (https://www.cert-in.org.in)

Severity Rating: HIGH

Software Affected

Microsoft Edge versions prior to 144.0.3719.82

Overview

Multiple vulnerabilities have been reported in Microsoft Edge which could allow a remote attacker to execute arbitrary code, bypass security restriction and gain elevated privileges on the targeted system.

Target Audience:

All end user organizations and individuals using Microsoft Edge.

Risk Assessment:

High risk of unauthorized access to sensitive data, system compromise, service unavailability.

Impact Assessment:

Potential for remote code execution, sensitive data exposure, service disruption.

Description

Microsoft Edge is a web browser developed by Microsoft using the chromium engine, offering fast performance, enhanced Security and compatibility with modern web standards while integrating with Microsooft services.

Multiple vulnerabilities exist in Microsoft Edge due to Out of bounds memory access in V8, Inappropriate implementation in V8 and Blink, Insufficient validation of untrusted input in Downloads, Incorrect security UI in Digital Credentials, Insufficient policy enforcement in Network, Incorrect security UI in Split View, Use after free in ANGLE. A remote attacker could exploit these vulnerabilities by persuading a victim to visit a specially crafted web page.

Successful exploitation of these vulnerabilities could allow a remote attacker to execute arbitrary code, bypass security restriction and gain elevated privileges on the targeted system.

Solution

Apply appropriate fix/patches as mentioned:

https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security#january-14-2026

Vendor Information

Microsoft

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-0899

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-0900

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-0901

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-0902

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-0903

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-0904

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-0905

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-0906

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-0907

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-0908

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21223

References