# Multiple vulnerabilities in Microsoft Edge

Published: 2026-07-27 · Severity: routine
Canonical: https://vorant.io/reports/eb19cd42-b935-58ae-be26-a2c98b9eee66/multiple-vulnerabilities-in-microsoft-edge

> Seven vulnerabilities in Microsoft Edge versions before 150.0.4078.99 allow data disclosure and security policy bypass.

CERT-FR has published an advisory covering seven vulnerabilities in Microsoft Edge that affect versions prior to 150.0.4078.99. These vulnerabilities enable attackers to compromise data confidentiality, bypass security policies, and exploit unspecified security issues within the browser. The vulnerabilities were disclosed on 24–25 July 2026 across two batches of CVE identifiers.

Defenders should prioritize updating all Microsoft Edge installations to version 150.0.4078.99 or later. The advisory references Microsoft's official security bulletins for each CVE, which contain the technical details and patch information necessary for remediation. No active exploitation in the wild is mentioned in the advisory, but given the severity range and nature of the flaws, prompt patching is recommended as a precaution.

## Mentioned in this report

- Vulnerabilities: CVE-2026-16804, CVE-2026-16805, CVE-2026-16806, CVE-2026-16807, CVE-2026-57978, CVE-2026-57989, CVE-2026-57990

Source reporting: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0937

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/eb19cd42-b935-58ae-be26-a2c98b9eee66/multiple-vulnerabilities-in-microsoft-edge.
In the app the same report carries its extracted indicators, its detections (Splunk SPL already written, plus Elastic and Microsoft KQL where they apply), live profiles of the actors and CVEs it names, and the vendor research on the same campaign. Slack alerts fire on the vendors, sectors and countries a reader follows. A new account starts with three days of all of it, no card: https://vorant.io/signup