# CERT-FR flags Microsoft Edge flaws

Published: 2026-10-23 · Severity: elevated
Canonical: https://vorant.io/reports/f4ccdcff-4fae-5752-bf54-2ed28451be43/cert-fr-flags-microsoft-edge-flaws

> CERT-FR advisory lists multiple unspecified vulnerabilities in Microsoft Edge versions prior to 156.0.4314.42; patch required.

CERT-FR published a bulletin referencing numerous CVEs affecting Microsoft Edge versions earlier than 156.0.4314.42. The advisory does not specify the nature of the risk (e.g., RCE, information disclosure, privilege escalation) and instead directs readers to the individual Microsoft Security Response Center (MSRC) bulletins for technical details on each CVE. No exploitation in the wild is mentioned in the advisory text provided.

Defenders should treat this as a standard browser patch advisory: update all Microsoft Edge installations to version 156.0.4314.42 or later as soon as possible, following standard patch management processes. Given the large number of CVEs bundled into a single release and lack of severity detail from CERT-FR, organizations should consult the linked MSRC pages for each CVE to determine specific impact (e.g., remote code execution, sandbox escape) and prioritize accordingly. No indicators of compromise, threat actors, or malware were identified in this advisory.

## Mentioned in this report

- Vulnerabilities: CVE-2026-112992, CVE-2026-112993, CVE-2026-112994, CVE-2026-112995, CVE-2026-112996, CVE-2026-112997, CVE-2026-112998, CVE-2026-112999, CVE-2026-113000, CVE-2026-113001, CVE-2026-113002, CVE-2026-113003, CVE-2026-113004, CVE-2026-113005, CVE-2026-113006, CVE-2026-113007, CVE-2026-113008, CVE-2026-113009, CVE-2026-113010, CVE-2026-113011, CVE-2026-113012, CVE-2026-113013, CVE-2026-113014, CVE-2026-113015, CVE-2026-113016, CVE-2026-113017, CVE-2026-113018, CVE-2026-113019, CVE-2026-113020, CVE-2026-113021, CVE-2026-113022, CVE-2026-113023, CVE-2026-113024, CVE-2026-113025, CVE-2026-113026, CVE-2026-113027, CVE-2026-113028, CVE-2026-113029, CVE-2026-113030

Source reporting: https://www.cert.cyber.gouv.fr/avis/CERTFR-2026-AVI-1371

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/f4ccdcff-4fae-5752-bf54-2ed28451be43/cert-fr-flags-microsoft-edge-flaws.
In the app the same report carries live profiles of the CVEs it names. The paid plans add the security research and news reporting the free tier leaves out. Slack alerts on the vendors, sectors and countries a reader follows come with the paid plans too. A new account starts with a three-day trial, no card: https://vorant.io/signup