# Microsoft Edge zero-day CVE-2026-87491 exploited

Published: 2026-09-14 · Severity: high · Sectors: technology
Canonical: https://vorant.io/reports/b8fa0ce2-2ee1-5180-9432-30c47f77d579/microsoft-edge-zero-day-cve-2026-87491-exploited

> CERT-FR warns of multiple Microsoft Edge vulnerabilities, including CVE-2026-87491 which is actively exploited in the wild.

CERT-FR has issued an advisory covering multiple vulnerabilities in Microsoft Edge affecting versions prior to 151.0.4129.107 and 152.0.4191.66. The flaws allow an attacker to bypass security policy controls and trigger other security issues not further specified by the vendor. Microsoft has confirmed that one of the vulnerabilities, CVE-2026-87491, is being actively exploited in the wild, making it the highest priority item in this batch for defenders.

The advisory bundles 20 CVEs disclosed via Microsoft's security bulletin on 11 September 2026, all affecting the Edge browser. No further technical detail on exploitation vectors, affected components, or IOCs is provided by CERT-FR; organizations are directed to Microsoft's official update guide for patch details. Given the active exploitation of CVE-2026-87491 and the widespread deployment of Microsoft Edge, organizations should prioritize patching to the fixed versions without delay.

## Mentioned in this report

- Vulnerabilities: CVE-2026-76017, CVE-2026-76018, CVE-2026-76019, CVE-2026-76021, CVE-2026-76022, CVE-2026-76023, CVE-2026-76036, CVE-2026-76039, CVE-2026-77490, CVE-2026-84330, CVE-2026-84333, CVE-2026-84352, CVE-2026-85042, CVE-2026-85043, CVE-2026-85045, CVE-2026-85048, CVE-2026-85049, CVE-2026-85051, CVE-2026-85052, CVE-2026-85053, CVE-2026-87491 (KEV)

Source reporting: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1171

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/b8fa0ce2-2ee1-5180-9432-30c47f77d579/microsoft-edge-zero-day-cve-2026-87491-exploited.
Full IOC sets, deployable detections, the entity graph, TAXII 2.1 feed and real-time alerts: https://vorant.io/signup