Description:
Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components. The list of security updates can be found at:
https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security#july-31-2026
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62870
Affected Systems:
- Microsoft Edge version prior to 151.0.4129.59
- Microsoft Office 2019, LTSC 2021, LTSC 2024
- Microsoft Excel 2016
- Microsoft 365 Apps for Enterprise
For detailed information of the affected systems, please refer to the corresponding security advisories at vendor's website.
Impact:
Depending on the vulnerabilities exploited, a successful attack could lead to remote code execution, denial of service, information disclosure, security restriction bypass, spoofing or tampering on an affected system.
Recommendation:
Patches for affected products are available from the Windows Update / Microsoft Update Catalog. Users of affected systems should follow the recommendations provided by the product vendor and take immediate actions to mitigate the risk.
More Information:
- https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security#july-31-2026
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62870
- https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260803
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-17650 (to CVE-2026-18019)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-62870
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-65802
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-65804
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-66311 (to CVE-2026-66318)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-66321 (to CVE-2026-66322)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-66325 (to CVE-2026-66326)