CERT-FR: 25 vulnerabilities in Microsoft Edge fixed in version 156.0.4314.58 (Microsoft bulletins of 4 November 2026)
The CERT-FR advisory CERTFR-2026-AVI-1466 relays Microsoft security bulletins dated 4 November 2026 for Microsoft Edge. It covers 25 CVEs affecting Edge versions before 156.0.4314.58. CERT-FR says the flaws let an attacker breach data confidentiality and cause a security issue the vendor did not specify. The advisory gives no CVSS scores, no technical detail, no prerequisites and no mention of exploitation in the wild.
Entenda a falha
A vulnerabilidade
CERT-FR advisory CERTFR-2026-AVI-1466 relays Microsoft bulletins of 4 November 2026 covering 25 CVEs in Microsoft Edge, including CVE-2026-118309, CVE-2026-118314, CVE-2026-118321, CVE-2026-119260 to CVE-2026-119272, CVE-2026-122518 and CVE-2026-76024 to CVE-2026-76031. Affected versions are all Edge releases before 156.0.4314.58, which is the fixed version. CERT-FR says the flaws let an attacker breach data confidentiality and cause a security issue the vendor did not specify. The advisory gives no CVSS scores, bug classes, components, prerequisites (network reach, authentication, user interaction) or ranking by severity, so the CVEs cannot be told apart here.
Como foi descoberta
The CERT-FR advisory says only that multiple vulnerabilities were discovered in Microsoft Edge. It does not say who found them or how they were reported. Microsoft published the individual bulletins in its Update Guide on 4 November 2026, and CERT-FR published its advisory on 5 November 2026. The advisory does not mention exploitation in the wild.
Explicação gerada por IA a partir da matéria e dos artigos, em 06/11/2026 12:27.
Detalhes técnicos
The CERT-FR page lists the CVEs and links to the MSRC Update Guide entries, but it does not describe the bug classes or components. The impact is given only as "atteinte à la confidentialité des données" and an unspecified security issue.
Remediação
Update Microsoft Edge to 156.0.4314.58 or later. CERT-FR refers readers to the Microsoft bulletins (msrc.microsoft.com) for the fixes.
Linha do tempo
-
CERT-FR: 25 vulnerabilities in Microsoft Edge fixed in version 156.0.4314.58 (Microsoft bulletins of 4 November 2026)
ler a análise desta fonte ocultar
The CERT-FR advisory CERTFR-2026-AVI-1466 relays Microsoft security bulletins dated 4 November 2026 for Microsoft Edge. It covers 25 CVEs affecting Edge versions before 156.0.4314.58. CERT-FR says the flaws let an attacker breach data confidentiality and cause a security issue the vendor did not specify. The advisory gives no CVSS scores, no technical detail, no prerequisites and no mention of exploitation in the wild.
Technical Details
The CERT-FR page lists the CVEs and links to the MSRC Update Guide entries, but it does not describe the bug classes or components. The impact is given only as "atteinte à la confidentialité des données" and an unspecified security issue.
Remediation
Update Microsoft Edge to 156.0.4314.58 or later. CERT-FR refers readers to the Microsoft bulletins (msrc.microsoft.com) for the fixes.