# Microsoft Edge patch addresses 139 vulnerabilities

Published: 2026-07-15 · Severity: routine
Canonical: https://vorant.io/reports/b529768f-6620-5835-bcfa-15d49531ea17/microsoft-edge-patch-addresses-139-vulnerabilities

> Microsoft patched 139 vulnerabilities in Edge including RCE and privilege escalation flaws; update to version 150.0.4078.48.

CERT-FR issued an advisory documenting 139 security vulnerabilities in Microsoft Edge versions prior to 150.0.4078.48. The vulnerabilities span multiple impact categories: remote code execution allowing arbitrary code execution, privilege escalation permitting elevated access, and undisclosed security issues. The vulnerabilities were patched in Edge version 150.0.4078.48, released in July 2026. Affected organizations running versions before the patch release require immediate update deployment. The advisory references individual CVE bulletins from Microsoft's Security Response Center for detailed technical information on each flaw.

## Mentioned in this report

- Vulnerabilities: CVE-2026-13777, CVE-2026-13778, CVE-2026-13785, CVE-2026-13788, CVE-2026-13791, CVE-2026-13792, CVE-2026-13795, CVE-2026-13805, CVE-2026-13807, CVE-2026-13808, CVE-2026-13809, CVE-2026-13812, CVE-2026-13813, CVE-2026-13816, CVE-2026-13819, CVE-2026-13822, CVE-2026-13825, CVE-2026-13826, CVE-2026-13827, CVE-2026-13833, CVE-2026-13842, CVE-2026-13843, CVE-2026-13846, CVE-2026-13847, CVE-2026-13850, CVE-2026-13851, CVE-2026-13852, CVE-2026-13856, CVE-2026-13862, CVE-2026-13863, CVE-2026-13866, CVE-2026-13868, CVE-2026-13870, CVE-2026-13872, CVE-2026-13878, CVE-2026-13880, CVE-2026-13885, CVE-2026-13887, CVE-2026-14090

Source reporting: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0867

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/b529768f-6620-5835-bcfa-15d49531ea17/microsoft-edge-patch-addresses-139-vulnerabilities.
In the app the same report carries its extracted indicators, its detections (Splunk SPL already written, plus Elastic and Microsoft KQL where they apply), live profiles of the actors and CVEs it names, and the vendor research on the same campaign. Slack alerts fire on the vendors, sectors and countries a reader follows. A new account starts with three days of all of it, no card: https://vorant.io/signup