[ CVE-2026-88078 · Published 29 Oct 2026 ]
Vulnerability in Microsoft Edge (Chromium-based)
CVSS 4.3
EPSS <1%2 agency advisoriesFix available
[ Description ]Official description
Improper verification of cryptographic signature in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
[ Fixes ]Fixes and patches
- Security bulletin: Microsoft Edge CVE-2026-20942Vendor patch or bulletin · CERT-FR · msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20942, cited by CERT-FR CERTFR-2026-AVI-1405
- Security bulletin: Microsoft Edge CVE-2026-96196Vendor patch or bulletin · CERT-FR · msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96196, cited by CERT-FR CERTFR-2026-AVI-1405
- Security bulletin: Microsoft Edge CVE-2026-88078Vendor patch or bulletin · CERT-FR · msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88078, cited by CERT-FR CERTFR-2026-AVI-1405
- Security bulletin: Microsoft Edge CVE-2026-62765Vendor patch or bulletin · CERT-FR · msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62765, cited by CERT-FR CERTFR-2026-AVI-1405
[ Advisories ]Government CERT advisories
-
CERT-FRCERTFR-2026-AVI-1405
Multiple vulnerabilities in Microsoft Edge Translated from French
Multiple vulnerabilities have been discovered in Microsoft Edge. They allow an attacker to cause remote arbitrary code execution and a security policy bypass.
-
BSI CERT-BundWID-SEC-2026-4204
Microsoft Edge: Multiple vulnerabilities Translated from German
[ References ]References
- msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88078PatchVendor Advisory