Vulnerability-Lookup

CVE-2026-32187 (GCVE-0-2026-32187)

Vulnerability from cvelistv5 – Published: 2026-03-27 20:42 – Updated: 2026-04-15 20:45

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Show details on NVD website

{
  "containers": {
    "cna": {
      "providerMetadata": {
        "dateUpdated": "2026-04-15T20:45:55.522Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "rejectedReasons": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."
            }
          ],
          "value": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."
        }
      ],
      "x_generator": {
        "engine": "Vulnogram 1.0.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2026-32187",
    "datePublished": "2026-03-27T20:42:05.339Z",
    "dateRejected": "2026-04-15T20:45:55.522Z",
    "dateReserved": "2026-03-11T00:26:53.426Z",
    "dateUpdated": "2026-04-15T20:45:55.522Z",
    "state": "REJECTED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-32187",
      "date": "2026-04-15",
      "epss": "0.00041",
      "percentile": "0.12354"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-32187\",\"sourceIdentifier\":\"secure@microsoft.com\",\"published\":\"2026-03-27T21:17:22.950\",\"lastModified\":\"2026-04-15T21:17:04.647\",\"vulnStatus\":\"Rejected\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.\"}],\"metrics\":{},\"references\":[]}}",
    "vulnrichment": {
      "containers": "{\"cna\": {\"providerMetadata\": {\"orgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"shortName\": \"microsoft\", \"dateUpdated\": \"2026-04-15T20:45:55.522Z\"}, \"rejectedReasons\": [{\"lang\": \"en\", \"value\": \"This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.\", \"supportingMedia\": [{\"type\": \"text/html\", \"base64\": false, \"value\": \"This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.\"}]}], \"x_generator\": {\"engine\": \"Vulnogram 1.0.1\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2026-32187\", \"assignerOrgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"state\": \"REJECTED\", \"assignerShortName\": \"microsoft\", \"dateReserved\": \"2026-03-11T00:26:53.426Z\", \"datePublished\": \"2026-03-27T20:42:05.339Z\", \"dateUpdated\": \"2026-04-15T20:45:55.522Z\", \"dateRejected\": \"2026-04-15T20:45:55.522Z\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

CERTFR-2026-AVI-0375

Vulnerability from certfr_avis - Published: 2026-03-30 - Updated: 2026-03-30

De multiples vulnérabilités ont été découvertes dans Microsoft Edge. Elles permettent à un attaquant de provoquer un contournement de la politique de sécurité et un problème de sécurité non spécifié par l'éditeur.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

	Vendor	Product	Description
	Microsoft	Edge	Microsoft Edge versions antérieures à 146.0.3856.84

References

Title

Publication Time

Tags

Bulletin de sécurité Microsoft Edge CVE-2026-32187	2026-03-27	vendor-advisory
Bulletin de sécurité Microsoft Edge CVE-2026-4674	2026-03-27	vendor-advisory
Bulletin de sécurité Microsoft Edge CVE-2026-4680	2026-03-27	vendor-advisory
Bulletin de sécurité Microsoft Edge CVE-2026-4673	2026-03-27	vendor-advisory
Bulletin de sécurité Microsoft Edge CVE-2026-4459	2026-03-20	vendor-advisory
Bulletin de sécurité Microsoft Edge CVE-2026-4677	2026-03-27	vendor-advisory
Bulletin de sécurité Microsoft Edge CVE-2026-4679	2026-03-27	vendor-advisory
Bulletin de sécurité Microsoft Edge CVE-2026-4442	2026-03-27	vendor-advisory
Bulletin de sécurité Microsoft Edge CVE-2026-4675	2026-03-27	vendor-advisory
Bulletin de sécurité Microsoft Edge CVE-2026-4453	2026-03-20	vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Microsoft Edge versions ant\u00e9rieures \u00e0 146.0.3856.84",
      "product": {
        "name": "Edge",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-32187",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-32187"
    },
    {
      "name": "CVE-2026-4673",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4673"
    },
    {
      "name": "CVE-2026-4442",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4442"
    },
    {
      "name": "CVE-2026-4675",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4675"
    },
    {
      "name": "CVE-2026-4679",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4679"
    },
    {
      "name": "CVE-2026-4674",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4674"
    },
    {
      "name": "CVE-2026-4680",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4680"
    },
    {
      "name": "CVE-2026-4677",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4677"
    },
    {
      "name": "CVE-2026-4459",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4459"
    },
    {
      "name": "CVE-2026-4453",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4453"
    }
  ],
  "initial_release_date": "2026-03-30T00:00:00",
  "last_revision_date": "2026-03-30T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-0375",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-03-30T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Microsoft Edge. Elles permettent \u00e0 un attaquant de provoquer un contournement de la politique de s\u00e9curit\u00e9 et un probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Microsoft Edge",
  "vendor_advisories": [
    {
      "published_at": "2026-03-27",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2026-32187",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32187"
    },
    {
      "published_at": "2026-03-27",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2026-4674",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4674"
    },
    {
      "published_at": "2026-03-27",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2026-4680",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4680"
    },
    {
      "published_at": "2026-03-27",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2026-4673",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4673"
    },
    {
      "published_at": "2026-03-20",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2026-4459",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4459"
    },
    {
      "published_at": "2026-03-27",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2026-4677",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4677"
    },
    {
      "published_at": "2026-03-27",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2026-4679",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4679"
    },
    {
      "published_at": "2026-03-27",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2026-4442",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4442"
    },
    {
      "published_at": "2026-03-27",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2026-4675",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4675"
    },
    {
      "published_at": "2026-03-20",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2026-4453",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-4453"
    }
  ]
}

FKIE_CVE-2026-32187

Vulnerability from fkie_nvd - Published: 2026-03-27 21:17 - Updated: 2026-04-15 21:17

Severity ?

Summary

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

References

	URL	Tags

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."
    }
  ],
  "id": "CVE-2026-32187",
  "lastModified": "2026-04-15T21:17:04.647",
  "metrics": {},
  "published": "2026-03-27T21:17:22.950",
  "references": [],
  "sourceIdentifier": "secure@microsoft.com",
  "vulnStatus": "Rejected"
}

MSRC_CVE-2026-32187

Vulnerability from csaf_microsoft - Published: 2026-03-10 07:00 - Updated: 2026-04-14 07:00

Summary

Microsoft Edge (Chromium-based) Defense in Depth Vulnerability - Rejected

Severity

Low

Notes

Additional Resources: To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle

Disclaimer: The information provided in the Microsoft Knowledge Base is provided \"as is\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.

Customer Action: Required. The vulnerability documented by this CVE requires customer action to resolve.

CVE-2026-32187

0.0 (None)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:N/E:U/RL:O/RC:C

Vendor Fix 146.0.3856.84:Security Update:https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security https://docs.microsoft.com/en-us/DeployEdge/micro…

References

URL

Category

	https://msrc.microsoft.com/update-guide/vulnerabi…	self
	https://msrc.microsoft.com/csaf/advisories/2026/m…	self
	https://www.microsoft.com/en-us/msrc/exploitabili…	external
	https://support.microsoft.com/lifecycle	external
	https://www.first.org/cvss	external
	https://msrc.microsoft.com/update-guide/vulnerabi…	self
	https://msrc.microsoft.com/csaf/advisories/2026/m…	self

Acknowledgments

tiebuchen

JSON

To clipboard

{
  "document": {
    "acknowledgments": [
      {
        "names": [
          "tiebuchen"
        ]
      }
    ],
    "aggregate_severity": {
      "namespace": "https://www.microsoft.com/en-us/msrc/security-update-severity-rating-system",
      "text": "Low"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Public",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "general",
        "text": "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
        "title": "Disclaimer"
      },
      {
        "category": "general",
        "text": "Required. The vulnerability documented by this CVE requires customer action to resolve.",
        "title": "Customer Action"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "secure@microsoft.com",
      "name": "Microsoft Security Response Center",
      "namespace": "https://msrc.microsoft.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "CVE-2026-32187 Microsoft Edge (Chromium-based) Defense in Depth Vulnerability - Rejected - HTML",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32187"
      },
      {
        "category": "self",
        "summary": "CVE-2026-32187 Microsoft Edge (Chromium-based) Defense in Depth Vulnerability - Rejected - CSAF",
        "url": "https://msrc.microsoft.com/csaf/advisories/2026/msrc_cve-2026-32187.json"
      },
      {
        "category": "external",
        "summary": "Microsoft Exploitability Index",
        "url": "https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1"
      },
      {
        "category": "external",
        "summary": "Microsoft Support Lifecycle",
        "url": "https://support.microsoft.com/lifecycle"
      },
      {
        "category": "external",
        "summary": "Common Vulnerability Scoring System",
        "url": "https://www.first.org/cvss"
      }
    ],
    "title": "Microsoft Edge (Chromium-based) Defense in Depth Vulnerability - Rejected",
    "tracking": {
      "current_release_date": "2026-04-14T07:00:00.000Z",
      "generator": {
        "date": "2026-04-14T16:35:26.060Z",
        "engine": {
          "name": "MSRC Generator",
          "version": "1.0"
        }
      },
      "id": "msrc_CVE-2026-32187",
      "initial_release_date": "2026-03-10T07:00:00.000Z",
      "revision_history": [
        {
          "date": "2026-03-27T07:00:00.000Z",
          "legacy_version": "1",
          "number": "1",
          "summary": "Information published."
        },
        {
          "date": "2026-04-14T07:00:00.000Z",
          "legacy_version": "1.1",
          "number": "2",
          "summary": "Microsoft has changed the status of this CVE to Rejected as we have determined that this is not a vulnerability."
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c146.0.3856.84",
            "product": {
              "name": "Microsoft Edge (Chromium-based) \u003c146.0.3856.84",
              "product_id": "1"
            }
          },
          {
            "category": "product_version",
            "name": "146.0.3856.84",
            "product": {
              "name": "Microsoft Edge (Chromium-based) 146.0.3856.84",
              "product_id": "11655"
            }
          }
        ],
        "category": "product_name",
        "name": "Microsoft Edge (Chromium-based)"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-32187",
      "notes": [
        {
          "category": "general",
          "text": "Microsoft",
          "title": "Assigning CNA"
        },
        {
          "category": "faq",
          "text": "Successful exploitation of this vulnerability requires an attacker to manipulate system operations in a specific manner.",
          "title": "According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?"
        },
        {
          "category": "faq",
          "text": "An attacker who successfully exploited this vulnerability could view sensitive information, (Confidentiality), and make some changes to disclosed information (Integrity), but they would not be able to affect Availability.",
          "title": "According to the CVSS metrics, successful exploitation of this vulnerability could lead to major loss of confidentiality (C:H), and some loss of integrity (I:L), but no loss of availability (A:N). What does that mean for this vulnerability?"
        },
        {
          "category": "faq",
          "text": "The user would have to click on a specially crafted URL to be compromised by the attacker.",
          "title": "According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?"
        },
        {
          "category": "faq",
          "text": "146.0.3856.84: 146.0.3856.84, 03/27/2026: 03/27/2026, 146.0.7680.166: 146.0.7680.166",
          "title": "What is the version information for this release?"
        }
      ],
      "product_status": {
        "fixed": [
          "11655"
        ],
        "known_affected": [
          "1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-32187 Microsoft Edge (Chromium-based) Defense in Depth Vulnerability - Rejected - HTML",
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32187"
        },
        {
          "category": "self",
          "summary": "CVE-2026-32187 Microsoft Edge (Chromium-based) Defense in Depth Vulnerability - Rejected - CSAF",
          "url": "https://msrc.microsoft.com/csaf/advisories/2026/msrc_cve-2026-32187.json"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-03-27T07:00:00.000Z",
          "details": "146.0.3856.84:Security Update:https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security",
          "product_ids": [
            "1"
          ],
          "url": "https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 0.0,
            "baseSeverity": "NONE",
            "confidentialityImpact": "NONE",
            "environmentalsScore": 0.0,
            "exploitCodeMaturity": "UNPROVEN",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "remediationLevel": "OFFICIAL_FIX",
            "reportConfidence": "CONFIRMED",
            "scope": "UNCHANGED",
            "temporalScore": 0.0,
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:N/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Defense in Depth"
        },
        {
          "category": "exploit_status",
          "details": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely"
        }
      ],
      "title": "Microsoft Edge (Chromium-based) Defense in Depth Vulnerability - Rejected"
    }
  ]
}

GHSA-PPF8-9FMV-Q7VM

Vulnerability from github – Published: 2026-03-27 21:31 – Updated: 2026-03-27 21:31

Details

Microsoft Edge (Chromium-based) Defense in Depth Vulnerability

Severity ?

4.2 (Medium)


                  
                    CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2026-32187"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-1021"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-03-27T21:17:22Z",
    "severity": "MODERATE"
  },
  "details": "Microsoft Edge (Chromium-based) Defense in Depth Vulnerability",
  "id": "GHSA-ppf8-9fmv-q7vm",
  "modified": "2026-03-27T21:31:37Z",
  "published": "2026-03-27T21:31:37Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32187"
    },
    {
      "type": "WEB",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32187"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N",
      "type": "CVSS_V3"
    }
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CVE-2026-32187 (GCVE-0-2026-32187)

CERTFR-2026-AVI-0375

Solutions

FKIE_CVE-2026-32187

MSRC_CVE-2026-32187

GHSA-PPF8-9FMV-Q7VM

Tags

Sightings

Nomenclature