# Microsoft Edge versions below 149.0.4022.69 patched

Published: 2026-06-16 · Severity: high · Sectors: technology
Canonical: https://vorant.io/reports/1354770b-46d1-5441-a519-e7c26e8ac4f5/microsoft-edge-versions-below-149-0-4022-69-patched

> CERT-FR advisory on multiple unspecified vulnerabilities in Microsoft Edge requiring immediate update to 149.0.4022.69 or later.

CERT-FR has published an advisory detailing multiple vulnerabilities affecting Microsoft Edge versions prior to 149.0.4022.69. The advisory lists 92 distinct CVEs across two ranges (CVE-2026-11628 through CVE-2026-11701, and CVE-2026-12007 through CVE-2026-12019), all dated 15 June 2026. Microsoft has not publicly disclosed the specific impact of each vulnerability; the advisory notes only that attackers could exploit them to cause unspecified security issues.

The primary mitigation is immediate update to Microsoft Edge version 149.0.4022.69 or later. Defenders should prioritize patching all affected Edge installations across their environment. The large number of CVEs in a single release suggests a routine security update addressing multiple classes of vulnerability rather than a targeted exploit campaign, though without individual CVE descriptions the specific attack surface remains opaque. Consult Microsoft's MSRC bulletins for detailed impact assessment of particular CVEs affecting your deployment.

## Mentioned in this report

- Vulnerabilities: CVE-2026-11628, CVE-2026-11629, CVE-2026-11630, CVE-2026-11631, CVE-2026-11632, CVE-2026-11633, CVE-2026-11634, CVE-2026-11635, CVE-2026-11636, CVE-2026-11637, CVE-2026-11638, CVE-2026-11639, CVE-2026-11640, CVE-2026-11641, CVE-2026-11642, CVE-2026-11643, CVE-2026-11644, CVE-2026-11645 (KEV), CVE-2026-11646, CVE-2026-11648, CVE-2026-11649, CVE-2026-11650, CVE-2026-11651, CVE-2026-11652, CVE-2026-11653, CVE-2026-11654, CVE-2026-11655, CVE-2026-11656, CVE-2026-11657, CVE-2026-11658, CVE-2026-11659, CVE-2026-11660, CVE-2026-11661, CVE-2026-11662, CVE-2026-11663, CVE-2026-11664, CVE-2026-11665, CVE-2026-11666, CVE-2026-11667, CVE-2026-11668

Source reporting: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0757

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/1354770b-46d1-5441-a519-e7c26e8ac4f5/microsoft-edge-versions-below-149-0-4022-69-patched.
In the app the same report carries its extracted indicators, its detections (Splunk SPL already written, plus Elastic and Microsoft KQL where they apply), live profiles of the actors and CVEs it names, and the vendor research on the same campaign. Slack alerts fire on the vendors, sectors and countries a reader follows. A new account starts with three days of all of it, no card: https://vorant.io/signup