Threat video1:00
CVE-2026-91732 Edge, Visual Studio: Detection & IOCs
Microsoft Edge below 156.0.4314.58 and Visual Studio 2017 to 2026 carry three flaws: 9 detection rules, 13 IOCs and a free Splunk SPL rule.
Read the full threat intel for CVE-2026-91732 Edge, Visual Studio: Detection & IOCs →
Chapters
- 0:00The hook3 vulnerabilities in Microsoft Edge and Studio
- 0:05The storyHK GovCERT issued the alert.
- 0:11Attack pathRemote attackers exploit vulnerabilities via crafted content.
- 0:26AttributionNo threat actor is attributed.
- 0:31Indicators of compromise7 indicators to hunt: 7 package names.
- 0:37MITRE ATT&CK techniques4 ATT&CK techniques, from execution to credential access.
- 0:42Remediation2 steps now: Update Microsoft Edge to version.
- 0:50Detection rules9 detection rules, in SPL, KQL and Sigma.
Transcript
0:003 vulnerabilities in Microsoft Edge and Studio
0:05HK GovCERT issued the alert.
0:07No wild attacks yet.
0:12Remote attackers exploit vulnerabilities via crafted content.
0:16Bypassing trust controls and security policies.
0:19Enabling remote code execution and spoofing.
0:26No threat actor is attributed. Confidence: low.
0:317 indicators to hunt: 7 package names.
0:374 ATT&CK techniques, from execution to credential access.
0:422 steps now: Update Microsoft Edge to version.
0:509 detection rules, in SPL, KQL and Sigma.
0:56Threadlinqs. The unified security engineering platform.