Alert GCSA-26025 - Vulnerabilita' in Microsoft Edge

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

******************************************************************

Alert ID: GCSA-26025
Data: 20 Febbraio 2026
Titolo: Vulnerabilita' in Microsoft Edge

******************************************************************

:: Descrizione del problema

Sono state identificate vulnerabilita' multiple in Microsoft Edge
che potrebbero essere sfruttate da un attaccante remoto per
eludere restrizioni di sicurezza, rivelare informazioni sensibili,
eseguire codice arbitrario ed innescare condizioni di Denial of Service
su un sistema che sia affetto.

La vulnerabilità CVE-2026-2441 e' attualmente in fase di sfruttamento,
il livello di rischio e' classificato come estremamente elevato.

Maggiori informazioni sono disponibili alla sezione "Riferimenti".


:: Software interessato

Microsoft Edge versioni precedenti alla 145.0.3800.58


:: Impatto

Denial of Service
Remote Code Execution
Information Disclosure
Security Restriction Bypass


:: Soluzioni

Aggiornare il software all'ultima versione disponibile

L'aggiornamento avviene in modo automatico.
E' possibile verificare la versione attualmente in uso
scegliendo dal menu "Impostazioni e altro"
(icona 3 punti verticali in alto a dx) la voce
Guida e feedback -> Informazioni su Microsoft Edge


:: Riferimenti

Security Update Guide
https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security#february-14-2026
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-0102
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-2313
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-2314
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-2316
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-2317
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-2318
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-2319
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-2320
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-2322
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-2323
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-2441

Mitre CVE
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0102
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2313
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2314
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2316
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2317
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2318
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2319
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2320
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2322
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2323
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2441



GARR CERT Security Alert - subscribe/unsubscribe:
http://www.cert.garr.it/alert/ricevi-gli-alert-di-cert
-----BEGIN PGP SIGNATURE-----

iGsEAREIACsWIQTGpdiR5MqstacBGHbBnEyTZRJgQgUCaZgbOw0cY2VydEBnYXJy
Lml0AAoJEMGcTJNlEmBCsNAAoMxHArlrr8lGH/wAbFqXeMA/5UNbAJ9b1nsJiH2Z
bC3tAkgGMmYEUBKrLw==
=B46b
-----END PGP SIGNATURE-----