Security
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
998Microsoft CVEsreleased Tue 8 Sep
132Critical105 need an update · 27 fixed service-side
2Exploited in the wild
0Publicly disclosed
2In CISA KEV
249Revised since release
Act first · September 2026
Exploited, KEV-listed, or publicly disclosedPatch next · critical, "exploitation more likely", or top 5% EPSS · needs an update154
Showing 3 of 154All critical
| CVE | Vulnerability | Severity | CVSS | EPSS | Impact | Status | Fixed by |
|---|---|---|---|---|---|---|---|
| CVE-2026-69486 | Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityMicrosoft Edge (Chromium-based) | Important | 8.8 | 0.8% | RCENetwork | — | |
| CVE-2026-85893 | Microsoft Edge (Chromium-based) Elevation of Privilege VulnerabilityMicrosoft Edge (Chromium-based) | Important | 8.8 | 0.8% | EoPNetwork | — | |
| CVE-2026-88097 | Microsoft Edge (Chromium-based) Elevation of Privilege VulnerabilityMicrosoft Edge (Chromium-based) | Important | 8.1 | 0.3% | EoPLocal | Revised 26 Oct | — |
| CVE-2026-85892 | Microsoft Edge (Chromium-based) Elevation of Privilege VulnerabilityMicrosoft Edge (Chromium-based) | Important | 7.8 | 0.2% | EoPLocal | — | |
| CVE-2026-77490 | Microsoft Edge (Chromium-based) Spoofing VulnerabilityMicrosoft Edge (Chromium-based) | Moderate | 6.1 | 0.4% | SpoofingNetwork | — |