Description:
Microsoft has released security updates to address multiple vulnerabilities in several Microsoft products or components.
Affected Systems:
- Microsoft Edge prior to version 156.0.4314.58
- Microsoft Visual Studio 2017, 2019, 2022, 2026
For detailed information of the affected systems, please refer to the corresponding security advisories at vendor's website.
Impact:
Successful exploitation of the vulnerabilities could lead to remote code execution, information disclosure, security restriction bypass, spoofing or tampering on an affected system.
Recommendation:
System administrators and users of affected systems should update Microsoft Edge to version 156.0.4314.58 or later to address the issue.
Patches for affected products are available from vendor websites. Users of affected systems should follow the recommendations provided by the product vendor and take immediate actions to mitigate the risk.
More Information:
- https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security#october-30-2026
- https://learn.microsoft.com/en-us/visualstudio/releasenotes/vs2017-relnotes-v15.9
- https://learn.microsoft.com/en-us/visualstudio/releases/2019/release-notes-v16.11
- https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes
- https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91732
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-118147
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-118304 (to CVE-2026-118308)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-118310 (to CVE-2026-118313)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-118315 (to CVE-2026-118320)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-118322
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-118327 (to CVE-2026-118359)
