Microsoft update

KB5078738

IE Cumulative

Fixed in

TI-2026-19066 CVE-2026-23674 · GHSA-4432-c732-m42m

MEDIUM 42

Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01388 Published 2026-03-10 Fixed in 10.0.14393.8957, 10.0.17763.8511 +11 CWE-41