Vulnerability in Microsoft Edge (Chromium-based)

[ Description ]Official description

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

[ Fixes ]Fixes and patches

• Security bulletin: Microsoft Edge CVE-2026-20942Vendor patch or bulletin · CERT-FR · msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20942, cited by CERT-FR CERTFR-2026-AVI-1405
• Security bulletin: Microsoft Edge CVE-2026-96196Vendor patch or bulletin · CERT-FR · msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96196, cited by CERT-FR CERTFR-2026-AVI-1405
• Security bulletin: Microsoft Edge CVE-2026-88078Vendor patch or bulletin · CERT-FR · msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88078, cited by CERT-FR CERTFR-2026-AVI-1405
• Security bulletin: Microsoft Edge CVE-2026-62765Vendor patch or bulletin · CERT-FR · msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62765, cited by CERT-FR CERTFR-2026-AVI-1405

[ Advisories ]Government CERT advisories

• CERT-FR28 Oct 2026CERTFR-2026-AVI-1405

  Multiple vulnerabilities in Microsoft Edge Translated from French

  Multiple vulnerabilities have been discovered in Microsoft Edge. They allow an attacker to cause remote arbitrary code execution and a security policy bypass.

  CVE-2026-88078CVE-2026-20942CVE-2026-62765+1 more CVEs
• BSI CERT-Bund27 Oct 2026WID-SEC-2026-4204

  Microsoft Edge: Multiple vulnerabilities Translated from German

  CVE-2026-88077CVE-2026-96203CVE-2026-96196+8 more CVEs

[ References ]References

• msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62765PatchVendor Advisory