Skip to content
Threat Feed
Subscribe
high advisory

Microsoft Edge: Multiple Vulnerabilities

Multiple vulnerabilities in Microsoft Edge allow for remote code execution, privilege escalation, and unauthorized data access, requiring immediate updates to patched versions.

CVE search metadata

CVE search record: CVE-2026-102299. KEV: no. Product: Edge (< 155.0.4283.62), Edge (< 154.0.4258.62). Brief: Microsoft Edge: Multiple Vulnerabilities. Brief link: https://feed.craftedsignal.io/briefs/2026-10-microsoft-edge-vulnerabilities/

CVE search record: CVE-2026-102300. KEV: no. Product: Edge (< 155.0.4283.62), Edge (< 154.0.4258.62). Brief: Microsoft Edge: Multiple Vulnerabilities. Brief link: https://feed.craftedsignal.io/briefs/2026-10-microsoft-edge-vulnerabilities/

CVE search record: CVE-2026-102301. KEV: no. Product: Edge (< 155.0.4283.62), Edge (< 154.0.4258.62). Brief: Microsoft Edge: Multiple Vulnerabilities. Brief link: https://feed.craftedsignal.io/briefs/2026-10-microsoft-edge-vulnerabilities/

CVE search record: CVE-2026-102302. KEV: no. Product: Edge (< 155.0.4283.62), Edge (< 154.0.4258.62). Brief: Microsoft Edge: Multiple Vulnerabilities. Brief link: https://feed.craftedsignal.io/briefs/2026-10-microsoft-edge-vulnerabilities/

CVE search record: CVE-2026-102303. KEV: no. Product: Edge (< 155.0.4283.62), Edge (< 154.0.4258.62). Brief: Microsoft Edge: Multiple Vulnerabilities. Brief link: https://feed.craftedsignal.io/briefs/2026-10-microsoft-edge-vulnerabilities/

CVE search record: CVE-2026-102304. Severity: critical. CVSS: 9.6. EPSS: 0.32%. KEV: no. Product: Edge (< 155.0.4283.62), Edge (< 154.0.4258.62). Brief: Microsoft Edge: Multiple Vulnerabilities. Brief link: https://feed.craftedsignal.io/briefs/2026-10-microsoft-edge-vulnerabilities/

CVE search record: CVE-2026-102305. KEV: no. Product: Edge (< 155.0.4283.62), Edge (< 154.0.4258.62). Brief: Microsoft Edge: Multiple Vulnerabilities. Brief link: https://feed.craftedsignal.io/briefs/2026-10-microsoft-edge-vulnerabilities/

CVE search record: CVE-2026-102306. Severity: critical. CVSS: 9.6. EPSS: 0.38%. KEV: no. Product: Edge (< 155.0.4283.62), Edge (< 154.0.4258.62). Brief: Microsoft Edge: Multiple Vulnerabilities. Brief link: https://feed.craftedsignal.io/briefs/2026-10-microsoft-edge-vulnerabilities/

CVE search record: CVE-2026-102307. KEV: no. Product: Edge (< 155.0.4283.62), Edge (< 154.0.4258.62). Brief: Microsoft Edge: Multiple Vulnerabilities. Brief link: https://feed.craftedsignal.io/briefs/2026-10-microsoft-edge-vulnerabilities/

CVE search record: CVE-2026-102308. KEV: no. Product: Edge (< 155.0.4283.62), Edge (< 154.0.4258.62). Brief: Microsoft Edge: Multiple Vulnerabilities. Brief link: https://feed.craftedsignal.io/briefs/2026-10-microsoft-edge-vulnerabilities/

CVE search record: CVE-2026-102309. KEV: no. Product: Edge (< 155.0.4283.62), Edge (< 154.0.4258.62). Brief: Microsoft Edge: Multiple Vulnerabilities. Brief link: https://feed.craftedsignal.io/briefs/2026-10-microsoft-edge-vulnerabilities/

CVE search record: CVE-2026-102310. Severity: medium. CVSS: 6.5. EPSS: 0.24%. KEV: no. Product: Edge (< 155.0.4283.62), Edge (< 154.0.4258.62). Brief: Microsoft Edge: Multiple Vulnerabilities. Brief link: https://feed.craftedsignal.io/briefs/2026-10-microsoft-edge-vulnerabilities/

CVE search record: CVE-2026-102311. KEV: no. Product: Edge (< 155.0.4283.62), Edge (< 154.0.4258.62). Brief: Microsoft Edge: Multiple Vulnerabilities. Brief link: https://feed.craftedsignal.io/briefs/2026-10-microsoft-edge-vulnerabilities/

CVE search record: CVE-2026-102312. KEV: no. Product: Edge (< 155.0.4283.62), Edge (< 154.0.4258.62). Brief: Microsoft Edge: Multiple Vulnerabilities. Brief link: https://feed.craftedsignal.io/briefs/2026-10-microsoft-edge-vulnerabilities/

CVE search record: CVE-2026-102313. Severity: medium. CVSS: 4.7. EPSS: 0.28%. KEV: no. Product: Edge (< 155.0.4283.62), Edge (< 154.0.4258.62). Brief: Microsoft Edge: Multiple Vulnerabilities. Brief link: https://feed.craftedsignal.io/briefs/2026-10-microsoft-edge-vulnerabilities/

CVE search record: CVE-2026-102314. KEV: no. Product: Edge (< 155.0.4283.62), Edge (< 154.0.4258.62). Brief: Microsoft Edge: Multiple Vulnerabilities. Brief link: https://feed.craftedsignal.io/briefs/2026-10-microsoft-edge-vulnerabilities/

CVE search record: CVE-2026-102315. KEV: no. Product: Edge (< 155.0.4283.62), Edge (< 154.0.4258.62). Brief: Microsoft Edge: Multiple Vulnerabilities. Brief link: https://feed.craftedsignal.io/briefs/2026-10-microsoft-edge-vulnerabilities/

CVE search record: CVE-2026-102316. KEV: no. Product: Edge (< 155.0.4283.62), Edge (< 154.0.4258.62). Brief: Microsoft Edge: Multiple Vulnerabilities. Brief link: https://feed.craftedsignal.io/briefs/2026-10-microsoft-edge-vulnerabilities/

CVE search record: CVE-2026-102317. Severity: high. CVSS: 8.6. EPSS: 0.11%. KEV: no. Product: Edge (< 155.0.4283.62), Edge (< 154.0.4258.62). Brief: Microsoft Edge: Multiple Vulnerabilities. Brief link: https://feed.craftedsignal.io/briefs/2026-10-microsoft-edge-vulnerabilities/

CVE search record: CVE-2026-83831. KEV: no. Product: Edge (< 155.0.4283.62), Edge (< 154.0.4258.62). Brief: Microsoft Edge: Multiple Vulnerabilities. Brief link: https://feed.craftedsignal.io/briefs/2026-10-microsoft-edge-vulnerabilities/

CVE search record: CVE-2026-85898. KEV: no. Product: Edge (< 155.0.4283.62), Edge (< 154.0.4258.62). Brief: Microsoft Edge: Multiple Vulnerabilities. Brief link: https://feed.craftedsignal.io/briefs/2026-10-microsoft-edge-vulnerabilities/

Triage facts

Revision 1
Applicability
Edge (< 155.0.4283.62), Edge (< 154.0.4258.62)
Evidence
Unknown
Severity
High
Action
Elevated
Sources
22 public sources
Freshness
Revision 1Oct 27, 17:38 UTC
Vulnerabilities
21 CVEs
Source quality
A1Likely

The French cybersecurity agency (ANSSI/CERT-FR) has published an advisory detailing multiple security vulnerabilities affecting Microsoft Edge. These vulnerabilities include remote code execution (RCE), privilege escalation, and information disclosure. The affected versions are Microsoft Edge versions 155.x prior to 155.0.4283.62 and versions prior to 154.0.4258.62.

Impact

Successful exploitation may allow attackers to execute arbitrary code with the privileges of the browser process, escalate privileges on the host system, or bypass security policies to access sensitive user data.

Recommendation

  • Update all instances of Microsoft Edge to version 155.0.4283.62 or 154.0.4258.62 immediately.
  • Inventory browser versions across the enterprise to identify endpoints running affected builds.
  • Prioritize the update on internet-facing systems and workstations used for high-value tasks.

Mitigations

Upgrade Microsoft Edge to 155.0.4283.62 or 154.0.4258.62

immediate IT Operations

All CVEs listed in the advisory