ThreatCluster

Multiple Vulnerabilities in Microsoft Edge Chromium-based Browser Announced

First seen 15 Sep 2026, 09:40 UTC • •61

Article Content

1 / 380

Browse articles

ThreatCluster •September 16, 2026 at 09:01 UTC

•Multiple vulnerabilities in Microsoft Edge (Chromium-based) disclosed, including CVE-2026-77490.
•Vulnerabilities include spoofing and multiple 'use after free' issues, affecting user data confidentiality.
•Users are urged to update their browsers immediately to mitigate the risks.

A series of vulnerabilities affecting Microsoft Edge (Chromium-based) have been disclosed, including CVE-2026-77490, a spoofing vulnerability, and several 'use after free' vulnerabilities (CVE-2026-87460, CVE-2026-87578, CVE-2026-87609, CVE-2026-87542, CVE-2026-87502, CVE-2026-87514, CVE-2026-87512, CVE-2026-87628, CVE-2026-87533, CVE-2026-87526, CVE-2026-87556, CVE-2026-87449, CVE-2026-87507, CVE-2026-87540, CVE-2026-87441, CVE-2026-87457, CVE-2026-87468, CVE-2026-87549, CVE-2026-87560, CVE-2026-87593, CVE-2026-87548, CVE-2026-87569, CVE-2026-87451, CVE-2026-87495). These vulnerabilities could lead to unauthorized access and information leakage. The vulnerabilities were published between September 9 and September 15, 2026, with some requiring user interaction for exploitation. Microsoft has released updates to mitigate these vulnerabilities, and users are urged to update their browsers immediately.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 54d ago How this analysis works

Timeline

2026-09-09

Multiple CVEs published

A series of vulnerabilities affecting Microsoft Edge were disclosed, including CVE-2026-87506 and CVE-2026-87475.

Api.Msrc.Microsoft

2026-09-09

CVE-2026-87502 published

Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.

2026-09-09

CVE-2026-87533 published

Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.

More articles in this cluster (379)

Following this threat?

Track CVE-2026-77490 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

Volt Typhoon's Silent Train Network Targets US Critical Infrastructure The Chinese state-sponsored hacking group Volt Typhoon has been linked to a covert network called Silent Train, which has exploited at least four zero-day vulnerabilities over three years. This network utilizes rapidly rotating chains of compromised SOHO routers, IoT devices, and enterprise infrastructure to access…

GitLab Issues Emergency Patch for Critical RCE Vulnerability GitLab has released emergency patches for a critical remote code execution vulnerability, CVE-2026-97229, affecting its Community and Enterprise Editions. This flaw, stemming from an integer overflow in the CI/CD regular expression compiler, allows unauthenticated attackers to execute arbitrary code via specially…