Microsoft Edge (Chromium) < 150.0.4078.48 多个漏洞
critical Nessus 插件 ID 325025
语言：
简介
远程主机上安装的网页浏览器受到多个漏洞的影响。描述
远程 Windows 主机上安装的 Microsoft Edge 版本低于 150.0.4078.48。因此，它受到 2026 年 7 月 11 日公告中提及的多个漏洞影响。- Google Chrome 150.0.7871.46 之前版本的 ANGLE 中存在未充分验证不受信任的输入漏洞，远程攻击者可能通过构建的 HTML 页面来发动沙盒逃逸。（Chromium 安全严重性：高）(CVE-2026-14382)
- Android 版 Google Chrome 150.0.7871.47 之前版本的 Fullscreen 中存在释放后使用问题，使远程攻击者可通过构建的 HTML 页面，执行任意代码。（Chromium 安全严重性：危急）(CVE-2026-13788)
- Android 版的 Google Chrome 150.0.7871.47 之前版本的 CORS 中存在不受信任的输入验证不足漏洞，远程攻击者可利用此漏洞，通过构建的 HTML 页面泄漏跨源数据。（Chromium 安全严重性：高）(CVE-2026-13816)
- 在 Android 版的 Google Chrome 150.0.7871.47 之前版本中，Extensions 中存在实现不当漏洞，允许已诱骗用户安装恶意扩展程序的攻击者通过构建的 Chrome 扩展程序绕过同源策略。（Chromium 安全严重性：高）(CVE-2026-13822)
- Google Chrome 150.0.7871.47 之前版本的 Dawn 中存在未初始化使用漏洞，使远程攻击者可能通过构建的 HTML 页面来利用堆损坏。（Chromium 安全严重性：高）(CVE-2026-13825)
请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。
解决方案
升级到 Microsoft Edge 150.0.4078.48 或更高版本。另见
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13788
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13816
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13822
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13825
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13826
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13851
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13852
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13856
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13863
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13866
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13868
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13870
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13872
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13885
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13887
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13910
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13923
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13924
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13926
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13927
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13929
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13932
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13936
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13939
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13943
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13949
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13955
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13964
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13969
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13987
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13994
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13995
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-13997
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14005
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14067
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14075
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14096
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14099
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14114
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14123
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14126
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14128
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14136
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14137
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14382
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-14428
插件详情
严重性: Critical
ID: 325025
文件名: microsoft_edge_chromium_150_0_4078_48.nasl
版本: 1.7
类型: Local
代理: windows
系列: Windows
发布时间: 2026/7/3
最近更新时间: 2026/8/7
支持的传感器: Frictionless Assessment Agent, Frictionless Assessment AWS, Frictionless Assessment Azure, Nessus Agent, Tenable Cloud Security, Tenable Self-Hosted Container Security, Nessus
风险信息
VPR
风险因素: Medium
分数: 6.9
百分位: 96.62
CVSS v2
风险因素: Critical
基本分数: 10
时间分数: 7.4
矢量: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS 分数来源: CVE-2026-14382
CVSS v3
风险因素: Critical
基本分数: 9.6
时间分数: 8.3
矢量: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
时间矢量: CVSS:3.0/E:U/RL:O/RC:C
漏洞信息
CPE: cpe:/a:microsoft:edge
必需的 KB 项: installed_sw/Microsoft Edge (Chromium), SMB/Registry/Enumerated
易利用性: No known exploits are available
补丁发布日期: 2026/7/2
漏洞发布日期: 2026/7/3
参考资料信息
CVE: CVE-2026-13788, CVE-2026-13816, CVE-2026-13822, CVE-2026-13825, CVE-2026-13826, CVE-2026-13851, CVE-2026-13852, CVE-2026-13856, CVE-2026-13863, CVE-2026-13866, CVE-2026-13868, CVE-2026-13870, CVE-2026-13872, CVE-2026-13885, CVE-2026-13887, CVE-2026-13910, CVE-2026-13923, CVE-2026-13924, CVE-2026-13926, CVE-2026-13927, CVE-2026-13929, CVE-2026-13932, CVE-2026-13936, CVE-2026-13939, CVE-2026-13943, CVE-2026-13949, CVE-2026-13955, CVE-2026-13964, CVE-2026-13969, CVE-2026-13987, CVE-2026-13994, CVE-2026-13995, CVE-2026-13997, CVE-2026-14005, CVE-2026-14067, CVE-2026-14075, CVE-2026-14096, CVE-2026-14099, CVE-2026-14114, CVE-2026-14123, CVE-2026-14126, CVE-2026-14128, CVE-2026-14136, CVE-2026-14137, CVE-2026-14382, CVE-2026-14428
IAVA: 2026-A-0658