ANSSI flags multiple Microsoft Edge vulnerabilities

ANSSI advisory lists numerous Microsoft Edge vulnerabilities allowing privilege escalation; users should update to the latest patched versions.

ANSSI (CERT-FR) published an advisory summarizing a large batch of vulnerabilities affecting Microsoft Edge versions prior to 152.0.4191.66 and 153.0.4234.32. The advisory does not detail specific exploitation techniques but states that the vulnerabilities allow an attacker to achieve privilege escalation and cause an unspecified security issue, as characterized by the vendor. No information is provided in the advisory regarding active exploitation in the wild.

The advisory enumerates a very large number of individual CVE identifiers (well over 100), each linked to a corresponding Microsoft Security Response Center (MSRC) bulletin dated September 11 and September 14, 2026. Given the volume, defenders should prioritize patching by referring directly to the MSRC update guide entries for full technical details on each CVE, including affected components and exploitability assessments, rather than relying solely on this consolidated advisory.

Remediation is straightforward: update Microsoft Edge to version 152.0.4191.66 or later (or 153.0.4234.32 or later, depending on release channel) as soon as possible. Organizations managing Edge deployments via enterprise policy should verify update compliance across their fleet, particularly given the scale of this patch batch, which suggests a routine but substantial monthly security update cycle for the browser.

Source reporting: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1173