# Multiple vulnerabilities in Microsoft Edge

Published: 2026-06-10 · Severity: routine
Canonical: https://vorant.io/reports/de264bec-77e8-5cea-be47-b2b4127a4798/multiple-vulnerabilities-in-microsoft-edge
Vorant's rating weighs the evidence in the report: confirmed exploitation, victims claimed, CVSS and EPSS, and how many sources agree. It rates the report, not your assets.

> Patch Microsoft Edge to 149.0.4022.53 or later to fix multiple security bypasses and unspecified issues.

Source: cert.ssi.gouv.fr — https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0726

## What to check

- Applies to: The 40 CVEs named below. Whether you run an affected version is not assessed: check the versions the source lists.
- Exploitation: No exploitation in the wild and no public exploit is recorded for the CVEs named.

CERT-FR has published an advisory covering multiple vulnerabilities discovered in Microsoft Edge versions prior to 149.0.4022.53. The vulnerabilities allow attackers to bypass security policy controls and trigger unspecified additional security issues. The advisory lists 45 individual CVEs identified and patched in the June 9, 2026 Microsoft Edge security update. Defenders should upgrade all instances of Microsoft Edge to version 149.0.4022.53 or later to address these flaws. The advisory provides references to Microsoft's official security bulletins for each CVE and does not indicate active exploitation in the wild at the time of publication, though the breadth of fixes suggests these are routine monthly patching activities. Specific technical details on individual vulnerability classes are not disclosed in this advisory, requiring reference to Microsoft's MSRC update guides for granular impact assessment.

## Mentioned in this report

- Vulnerabilities: CVE-2026-10883, CVE-2026-10892, CVE-2026-10923, CVE-2026-10929, CVE-2026-10934, CVE-2026-10953, CVE-2026-10959, CVE-2026-10967, CVE-2026-10984, CVE-2026-11007, CVE-2026-11010, CVE-2026-11012, CVE-2026-11019, CVE-2026-11029, CVE-2026-11034, CVE-2026-11035, CVE-2026-11045, CVE-2026-11064, CVE-2026-11065, CVE-2026-11072, CVE-2026-11077, CVE-2026-11080, CVE-2026-11082, CVE-2026-11097, CVE-2026-11108, CVE-2026-11119, CVE-2026-11127, CVE-2026-11131, CVE-2026-11145, CVE-2026-11148, CVE-2026-11163, CVE-2026-11167, CVE-2026-11172, CVE-2026-11175, CVE-2026-11178, CVE-2026-11188, CVE-2026-11215, CVE-2026-11226, CVE-2026-11247, CVE-2026-11263

Source reporting: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0726

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/de264bec-77e8-5cea-be47-b2b4127a4798/multiple-vulnerabilities-in-microsoft-edge.
In the app the same report carries live profiles of the CVEs it names. The paid plans add the security research and news reporting the free tier leaves out. Slack alerts on the vendors, sectors and countries a reader follows come with the paid plans too. A new account starts with a three-day trial, no card: https://vorant.io/signup