HKCERT published a bulletin on 9 November 2026 about several security flaws in Microsoft Edge. It said a remote attacker, meaning one acting over the network, could exploit some of them against a target system. The listed results are denial of service (making a system unusable), bypassing security limits, exposing sensitive information, and remote code execution (running an attacker's code from afar). HKCERT named Edge versions before 157.0.4341.42 as affected.
The bulletin leaves a lot open. It does not say how many flaws there are or give their identifiers. It does not rate their severity or say whether anyone is already attacking them. It also does not say which flaw leads to which result, only that some of them could. HKCERT tells readers to check the vendor's website for details. It links to Microsoft's Edge security release notes.
Anyone who manages Edge on staff computers or servers can compare installed versions against 157.0.4341.42. Per HKCERT, builds older than that are in the affected range. Microsoft's release notes are the place to confirm the specific flaws and the fix.