Microsoft Edge RCE flaw patched
ANSSI advisory warns of a remote code execution vulnerability in Microsoft Edge affecting all major platforms prior to version 152.0.4191.52.
The French CERT (ANSSI) issued an advisory covering a remote code execution vulnerability in Microsoft Edge, tracked as CVE-2026-70341. The flaw affects Microsoft Edge across all supported platforms — Android, iOS, Linux, macOS, and Windows — in versions prior to 152.0.4191.52. Successful exploitation would allow an attacker to execute arbitrary code on the affected system, though the advisory does not detail the exact attack vector or confirm active exploitation in the wild.
The advisory directs administrators to Microsoft's official security bulletin for patch details and recommends updating to version 152.0.4191.52 or later across all platforms. As with most browser RCE advisories of this type, organizations should prioritize patching given the wide deployment of Edge and the remote code execution impact, though no in-the-wild exploitation has been reported at this time.
Mentioned in this report
Source reporting: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1144
This is the public brief
Subscribers see the full picture: extracted IOCs, ready-to-deploy detections (Sigma, Splunk, KQL, Elastic, YARA, Suricata), the entity graph, TAXII 2.1 feed and real-time alerts matched to your sectors.
Start free