Microsoft Edge Multiple Vulnerabilities

Release Date: 20 Feb 2026

RISK: Extremely High Risk

TYPE: Clients - Browsers

Multiple vulnerabilities were identified in Microsoft Edge. A remote attacker could exploit some of these vulnerabilities to trigger sensitive information disclosure, denial of service condition, security restriction bypass and remote code execution on the targeted system.

Note:

CVE-2026-2441 is being exploited in the wild. A remote attacker could exploit this vulnerability to execute arbitrary code inside a sandbox via a crafted HTML page. Hence, the risk level is rated as Extremely High Risk.

Impact

Denial of Service
Remote Code Execution
Information Disclosure
Security Restriction Bypass

System / Technologies affected

Microsoft Edge version prior to 145.0.3800.58

Solutions

Before installation of the software, please visit the software vendor web-site for more details.

Apply fixes issued by the vendor:

Update to version 145.0.3800.58 or later

Vulnerability Identifier

Source

Microsoft Edge

2026年2月20日星期五