# Multiple vulnerabilities in Microsoft Edge

Published: 2026-06-22 · Severity: routine
Canonical: https://vorant.io/reports/e9414400-a34a-591e-b4f3-d2800a633946/multiple-vulnerabilities-in-microsoft-edge
Vorant's rating weighs the evidence in the report: confirmed exploitation, victims claimed, CVSS and EPSS, and how many sources agree. It rates the report, not your assets.

> Microsoft Edge versions below 149.0.4022.80 contain multiple unspecified security vulnerabilities requiring immediate patching.

Source: cert.ssi.gouv.fr — https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0791

## What to check

- Applies to: The 28 CVEs named below. Whether you run an affected version is not assessed: check the versions the source lists.
- Exploitation: No exploitation in the wild and no public exploit is recorded for the CVEs named.

CERT-FR has published an advisory covering multiple vulnerabilities discovered in Microsoft Edge affecting all versions prior to 149.0.4022.80. The advisory lists 32 CVEs published on 19 June 2026, though Microsoft has not publicly specified the exact nature or impact of these flaws beyond stating they allow attackers to cause unspecified security issues. The vulnerabilities span CVE-2026-12437 through CVE-2026-12468 with gaps in the numbering sequence. Organizations running Microsoft Edge should prioritize updating to version 149.0.4022.80 or later. No information is provided regarding active exploitation, attack vectors, or detailed impact assessment. Defenders should treat this as a standard patch advisory and deploy updates according to their change management procedures.

## Mentioned in this report

- Vulnerabilities: CVE-2026-12437, CVE-2026-12439, CVE-2026-12440, CVE-2026-12441, CVE-2026-12443, CVE-2026-12444, CVE-2026-12445, CVE-2026-12446, CVE-2026-12447, CVE-2026-12449, CVE-2026-12451, CVE-2026-12452, CVE-2026-12453, CVE-2026-12454, CVE-2026-12455, CVE-2026-12456, CVE-2026-12457, CVE-2026-12458, CVE-2026-12459, CVE-2026-12460, CVE-2026-12461, CVE-2026-12462, CVE-2026-12463, CVE-2026-12464, CVE-2026-12465, CVE-2026-12466, CVE-2026-12467, CVE-2026-12468

Source reporting: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0791

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/e9414400-a34a-591e-b4f3-d2800a633946/multiple-vulnerabilities-in-microsoft-edge.
In the app the same report carries live profiles of the CVEs it names. The paid plans add the security research and news reporting the free tier leaves out. Slack alerts on the vendors, sectors and countries a reader follows come with the paid plans too. A new account starts with a three-day trial, no card: https://vorant.io/signup