Latest Microsoft CVEs & Security Vulnerabilities

Latest Microsoft CVEs

Every organization faces unique cybersecurity challenges, but successful outcomes require more than technology alone. Our case studies highlight how Gilliam Security works alongside executives, security leaders, and stakeholders to build practical security programs, strengthen governance, manage risk, and achieve critical compliance objectives in complex business environments.

From guiding organizations through leadership transitions and regulatory audits to establishing governance functions for global enterprises and preparing government contractors for CMMC requirements, these engagements demonstrate our commitment to delivering measurable results, sustainable security practices, and long-term business value.

Provided below are the Microsoft CVEs from the last 30 days:

CVE-2026-69451 Windows Management Instrumentation Elevation of Privilege Vulnerability
Published on: September 30, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-69504 Windows NTFS Information Disclosure Vulnerability
Published on: September 30, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-69605 Microsoft Install Service Elevation of Privilege Vulnerability
Published on: September 30, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-69712 Windows Key Distribution Center Remote Code Execution Vulnerability
Published on: September 30, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-70562 Windows Audio Service Elevation of Privilege Vulnerability
Published on: September 30, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-70125 Microsoft Office Outlook Remote Code Execution Vulnerability
Published on: September 30, 2026
CWE added. Informational change only.
Read Details

CVE-2026-69288 Windows GDI+ Information Disclosure Vulnerability
Published on: September 30, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-69328 Windows Storage Elevation of Privilege Vulnerability
Published on: September 30, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-69586 Microsoft Windows PDF Remote Code Execution Vulnerability
Published on: September 30, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-62699 Windows Universal Disk Format File System Driver (UDFS) Remote Code Execution Vulnerability
Published on: September 30, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-62722 Microsoft Brokering File System Elevation of Privilege Vulnerability
Published on: September 30, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-62758 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
Published on: September 30, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-62784 Microsoft Local Security Authority Server (lsasrv) Remote Code Execution Vulnerability
Published on: September 30, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-65787 Desktop Window Manager Elevation of Privilege Vulnerability
Published on: September 30, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-66804 Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability
Published on: September 30, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-61938 Windows Installer Elevation of Privilege Vulnerability
Published on: September 30, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-49800 Windows Web Proxy Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability
Published on: September 30, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-62694 Windows Installer Elevation of Privilege Vulnerability
Published on: September 29, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-69307 Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability
Published on: September 29, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

Chromium CVE-2026-91728: Integer overflow
Published on: September 29, 2026
Information published.
Read Details

Chromium CVE-2026-91745: Use after free
Published on: September 29, 2026
Information published.
Read Details

CVE-2026-56172 Windows VHD miniport driver Elevation of Privilege Vulnerability
Published on: September 29, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-68880 Windows Win32k Elevation of Privilege Vulnerability
Published on: September 29, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-69522 .NET and Visual Studio Remote Code Execution Vulnerability
Published on: September 29, 2026
Security Updates table updated.
Read Details

CVE-2026-61930 Windows Kernel Elevation of Privilege Vulnerability
Published on: September 29, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-62688 Windows MIDI Service Module Elevation of Privileges Vulnerability
Published on: September 29, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-62755 Windows DHCP Client Elevation of Privilege Vulnerability
Published on: September 29, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-50332 Windows Kernel Elevation of Privilege Vulnerability
Published on: September 29, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-50400 Windows App Package Installer Elevation of Privilege Vulnerability
Published on: September 29, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-50357 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
Published on: September 29, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-50375 DirectX Graphics Kernel Elevation of Privilege Vulnerability
Published on: September 29, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-50414 Windows Media Elevation of Privilege Vulnerability
Published on: September 29, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-57095 Win32k Elevation of Privilege Vulnerability
Published on: September 29, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-81355 Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability
Published on: September 28, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-69522 .NET and Visual Studio Remote Code Execution Vulnerability
Published on: September 25, 2026
Security Updates table updated provide links to the KB articles and download center updates. Microsoft recommends installing the updates.
Read Details

CVE-2026-78510 Microsoft Outlook and Word Remote Code Execution Vulnerability
Published on: September 25, 2026
Updated CVE title and CVSS Score. This is an informational change only.
Read Details

CVE-2026-85921 Windows Secure Kernel Mode Elevation of Privilege Vulnerability
Published on: September 25, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

Chromium CVE-2026-87489: Memory corruption in V8
Published on: September 25, 2026
Information published.
Read Details

Chromium CVE-2026-87536: Use after free in V8
Published on: September 25, 2026
Information published.
Read Details

Chromium CVE-2026-87601: Race condition in V8
Published on: September 25, 2026
Information published.
Read Details

Chromium CVE-2026-87612: Type confusion in V8
Published on: September 25, 2026
Information published.
Read Details

Chromium CVE-2026-87625: Use after free in V8
Published on: September 25, 2026
Information published.
Read Details

Chromium CVE-2026-95274: Improper output encoding in DevTools
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95275: Incorrect reference resolution in MediaStream
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95276: Improper input validation in Themes
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95277: Use after free in Views
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95278: Missing authorization in WakeLock
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95279: UI misrepresentation in Omnibox
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95280: Race condition in V8
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95281: Buffer overflow in ANGLE
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95282: Use after free in Platform
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95283: Buffer overflow in Tint
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95284: Buffer overflow in ANGLE
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95285: Missing authorization in WebView
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95286: Type confusion in Bindings
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95287: Missing authorization in Navigation
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95288: UI misrepresentation in Mobile
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95289: Incorrect authorization in Scroll
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95290: Missing authorization in NFC
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95291: UI misrepresentation in SecurityIndicators
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95292: Incorrect authorization in Safebrowsing
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95293: Uninitialized resource in GPU
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95294: UI misrepresentation in Browser
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95295: Information leak in Mobile
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95296: Missing authorization in Core
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95297: Missing authorization in Contextual Tasks
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95298: Use after free in Browser
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95374: Incorrect authorization in Network
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95375: Incorrect authorization in BrowserTag
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95376: Externally controlled reference in DevTools
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95380: Type confusion in V8
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95381: Improper input validation in Printing
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95382: Improper input validation in Auth
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95384: Race condition in Transactions Platform
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95385: Inappropriate implementation in PlatformIntegration
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

CVE-2026-69439 .NET and Visual Studio Elevation of Privilege Vulnerability
Published on: September 25, 2026
Security Updates table updated provide links to the KB articles and download center updates. Microsoft recommends installing the updates.
Read Details

CVE-2026-69304 ASP.NET Core Denial of Service Vulnerability
Published on: September 25, 2026
Security Updates table updated provide links to the KB articles and download center updates. Microsoft recommends installing the updates.
Read Details

CVE-2026-71328 .NET and Visual Studio Remote Code Execution Vulnerability
Published on: September 25, 2026
Security Updates table updated provide links to the KB articles and download center updates. Microsoft recommends installing the updates.
Read Details

CVE-2026-69806 .NET Elevation of Privilege Vulnerability
Published on: September 25, 2026
Security Updates table updated provide links to the KB articles and download center updates. Microsoft recommends installing the updates.
Read Details

Chromium CVE-2026-95299: Use after free in GPU
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95300: Missing authorization in DevTools
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95301: Missing authorization in Extensions
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95302: Incorrect authorization in WebAPKs
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95303: Incomplete cleanup in SmartCard
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95304: Out of bounds write in V8
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95305: UI misrepresentation in Chromoting
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95306: Type confusion in V8
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95307: UI misrepresentation in ExtensionsMenu
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95308: Integer overflow in Metrics
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95309: UI misrepresentation in Mobile
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95310: Use after free in AdFilter
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95311: Free of non-heap memory in Fonts
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95312: Information leak in Passwords
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95313: Use after free in Fullscreen
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95314: Incorrect authorization in HID
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95315: Use after free in Aura
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95316: Unchecked return value in Performance
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95317: Incorrect authorization in MediaCapture
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95318: Buffer overflow in Video
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95319: Use after free in Printing
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95320: Missing authorization in Navigation
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95321: UI misrepresentation in Payments
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95322: Out of bounds write in GPU
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95323: UI misrepresentation in Chromium
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95324: Uninitialized resource in GPU
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95325: Use after free in ANGLE
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95326: Incomplete cleanup in Bluetooth
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95327: Information leak in Networking
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95328: Confused deputy in Mobile
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95329: Out of bounds write in WebGL
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95330: Improper state validation in Downloads
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95331: Out of bounds write in ANGLE
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95332: Use of uninitialized variable in Tint
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95333: Use after free in Metrics
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95334: Incorrect reference resolution in WebProtect
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95335: Use after free in HID
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95336: Information leak in Transactions Platform
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95337: UI misrepresentation in Messages
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95338: Use after free in PDFium
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95339: Use after free in ServiceWorker
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95340: Incorrect authorization in PictureInPicture
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95341: Improper input validation in Desktop
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95342: Missing authorization in V8
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95343: Use after free in WebAudio
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95344: Race condition in DevTools
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95345: Use after free in Actor
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95346: UI misrepresentation in Chromoting
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95347: Use after free in Updater
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95348: Use after free in Bluetooth
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95349: Buffer overflow in WebGL
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95350: Buffer overflow in ANGLE
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95351: Use after free in Views
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95352: Incorrect authorization in DevTools
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95353: Use after free in Bindings
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95354: Use after free in Verifier
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95355: Incorrect authorization in Navigation
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95356: Use after free in WindowDialog
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95357: Out of bounds write in GPU
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95358: Incorrect authorization in Mobile
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95359: Uninitialized resource in GPU
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95360: Race condition in Editing
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95361: Confused deputy in DevTools
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95362: Cross-site request forgery in DevTools
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95363: UI misrepresentation in FileSystem
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95364: Improper input validation in Passwords
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95365: Type confusion in IndexedDB
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95366: Use of released resource in Core
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95367: Information leak in DataTransfer
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95368: Incorrect authorization in DevTools
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95369: Inappropriate implementation in XML
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95370: Inappropriate implementation in NFC
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95371: Missing authorization in Views
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95372: Use after free in Chromecast
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-95373: Use after free in DevTools
Published on: September 25, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

CVE-2026-100208 Microsoft Office Outlook Remote Code Execution Vulnerability
Published on: September 25, 2026
Information published. This CVE was addressed by updates that were released in August 2026, but the CVE was inadvertently omitted from the August 2026 Security Updates. This is an informational change only. Customers who have already installed the August 2026 updates do not need to take any further action.
Read Details

CVE-2026-65660 Microsoft SharePoint Server Remote Code Execution Vulnerability
Published on: September 25, 2026
As of 9/25/2026, Microsoft had reliable evidence of observed attacks against exploitation of this vulnerability.
Read Details

CVE-2026-100206 Microsoft Office Information Disclosure Vulnerability
Published on: September 25, 2026
Information published. This CVE was addressed by updates that were released in July 2026, but the CVE was inadvertently omitted from the July 2026 Security Updates. This is an informational change only. Customers who have already installed the July 2026 updates do not need to take any further action.
Read Details

CVE-2026-32157 Remote Desktop Client Remote Code Execution Vulnerability
Published on: September 25, 2026
Updated product information in the Software Update table. This is an informational change only.
Read Details

Chromium: CVE-2025-2135 Type Confusion in V8
Published on: September 25, 2026
Information published.
Read Details

Chromium: CVE-2026-4450 Out of bounds write in V8
Published on: September 25, 2026
Information published.
Read Details

CVE-2026-69681 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability
Published on: September 24, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-69732 Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability
Published on: September 24, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-71337 Windows Storage Management Provider Elevation of Privilege Vulnerability
Published on: September 24, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-69282 Microsoft Office SharePoint Remote Code Execution Vulnerability
Published on: September 24, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-81357 Visual Studio Code Security Feature Bypass Vulnerability
Published on: September 24, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

Chromium CVE-2026-87564: Type confusion in V8
Published on: September 24, 2026
Information published.
Read Details

CVE-2026-68894 Windows Error Reporting Elevation of Privilege Vulnerability
Published on: September 24, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-69637 Windows DHCP Server Denial of Service Vulnerability
Published on: September 24, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-69803 Windows DHCP Server Information Disclosure Vulnerability
Published on: September 24, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-69409 Microsoft Office SharePoint Information Disclosure Vulnerability
Published on: September 24, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-69590 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Published on: September 24, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-80073 Microsoft Office Outlook Information Disclosure Vulnerability
Published on: September 24, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-81951 Microsoft Excel Remote Code Execution Vulnerability
Published on: September 24, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

Chromium CVE-2026-87587: Use after free in V8
Published on: September 24, 2026
Information published.
Read Details

CVE-2026-59113 Visual Studio Code Remote Code Execution Vulnerability
Published on: September 24, 2026
Updated the fixed version information and download link. The fix was previously believed to be included in Dynamics 365 Server (on-premises) version 6.2; however, it has been confirmed that the fix is included in Dynamics 365 Server v9.1 (on-premises) Update 1.45 (version 9.1.0045.0011). The download link, release notes, and build number has been updated accordingly in the Security Updates table. This is an informational change only.
Read Details

CVE-2026-65675 CoPilot Chat Security Feature Bypass Vulnerability
Published on: September 24, 2026
Updated the fixed version information and download link. The fix was previously believed to be included in Dynamics 365 Server (on-premises) version 6.2; however, it has been confirmed that the fix is included in Dynamics 365 Server v9.1 (on-premises) Update 1.45 (version 9.1.0045.0011). The download link, release notes, and build number has been updated accordingly in the Security Updates table. This is an informational change only.
Read Details

CVE-2026-54981 Visual Studio Code Python Extension Security Feature Bypass Vulnerability
Published on: September 24, 2026
Updated the fixed version information and download link. The fix was previously believed to be included in Dynamics 365 Server (on-premises) version 6.2; however, it has been confirmed that the fix is included in Dynamics 365 Server v9.1 (on-premises) Update 1.45 (version 9.1.0045.0011). The download link, release notes, and build number has been updated accordingly in the Security Updates table. This is an informational change only.
Read Details

CVE-2026-68804 Microsoft Excel Remote Code Execution Vulnerability
Published on: September 24, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

Chromium CVE-2026-87489: Memory corruption in V8
Published on: September 23, 2026
Information published.
Read Details

Chromium CVE-2026-87536: Use after free in V8
Published on: September 23, 2026
Information published.
Read Details

Chromium CVE-2026-87564: Type confusion in V8
Published on: September 23, 2026
Information published.
Read Details

Chromium CVE-2026-87601: Race condition in V8
Published on: September 23, 2026
Information published.
Read Details

Chromium CVE-2026-87612: Type confusion in V8
Published on: September 23, 2026
Information published.
Read Details

Chromium CVE-2026-87625: Use after free in V8
Published on: September 23, 2026
Information published.
Read Details

Chromium CVE-2026-87587: Use after free in V8
Published on: September 23, 2026
Information published.
Read Details

CVE-2026-70125 Microsoft Outlook Remote Code Execution Vulnerability
Published on: September 23, 2026
Information published. This CVE was addressed by updates that were released in September 2026, but the CVE was inadvertently omitted from the September 2026 Security Updates. This is an informational change only. Customers who have already installed the September 2026 updates do not need to take any further action.
Read Details

CVE-2026-57099 ASP.NET Core Denial of Service Vulnerability
Published on: September 22, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-77886 Windows DHCP Server Denial of Service Vulnerability
Published on: September 22, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-68824 Connected User Experiences and Telemetry Elevation of Privilege Vulnerability
Published on: September 22, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-69498 Windows Win32k Elevation of Privilege Vulnerability
Published on: September 22, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-69572 Windows SMB Client Information Disclosure Vulnerability
Published on: September 22, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-69620 Windows DHCP Server Remote Code Execution Vulnerability
Published on: September 22, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-55134 Microsoft Word Remote Code Execution Vulnerability
Published on: September 22, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-57091 Windows File History Service Elevation of Privilege Vulnerability
Published on: September 22, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-68825 Windows Bind Filter Driver Elevation of Privilege Vulnerability
Published on: September 21, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-78517 Microsoft Office Word Remote Code Execution Vulnerability
Published on: September 21, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-77901 Microsoft Office Word Remote Code Execution Vulnerability
Published on: September 21, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-78524 Microsoft Office Remote Code Execution Vulnerability
Published on: September 21, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-78526 Microsoft Office Word Remote Code Execution Vulnerability
Published on: September 21, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-83498 Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
Published on: September 21, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-78510 Microsoft Outlook and Word Remote Code Execution Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-63516 Microsoft SharePoint Server Spoofing Vulnerability
Published on: September 21, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-62871 .NET Elevation of Privilege Vulnerability
Published on: September 21, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-63532 Microsoft Office Remote Code Execution Vulnerability
Published on: September 21, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-68798 Microsoft Excel Remote Code Execution Vulnerability
Published on: September 21, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-68804 Microsoft Excel Remote Code Execution Vulnerability
Published on: September 21, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-40400 Windows PowerShell Remote Code Execution Vulnerability
Published on: September 21, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-55039 Microsoft Excel Remote Code Execution Vulnerability
Published on: September 21, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-55123 Microsoft PowerPoint Remote Code Execution Vulnerability
Published on: September 21, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-88097 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Published on: September 18, 2026
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges locally.
Read Details

Chromium: CVE-2026-0899 Out of bounds memory access in V8
Published on: September 18, 2026
Information published.
Read Details

CVE-2026-55946 Microsoft Copilot Information Disclosure Vulnerability
Published on: September 17, 2026
Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to disclose information over a network.
Read Details

CVE-2026-70009 Azure Arc Elevation of Privilege Vulnerability
Published on: September 17, 2026
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Arc allows an unauthorized attacker to elevate privileges over a network.
Read Details

CVE-2026-69865 Microsoft Container Registry Elevation of Privilege Vulnerability
Published on: September 17, 2026
Authorization bypass through user-controlled key in Microsoft Container Registry allows an unauthorized attacker to elevate privileges over a network.
Read Details

CVE-2026-77903 Microsoft Dataverse Elevation of Privilege Vulnerability
Published on: September 17, 2026
Authentication bypass by spoofing in Microsoft Dataverse allows an unauthorized attacker to elevate privileges over a network.
Read Details

CVE-2026-69399 Azure Arc Elevation of Privilege Vulnerability
Published on: September 17, 2026
Information published.
Read Details

CVE-2026-68791 Azure Machine Learning Information Disclosure Vulnerability
Published on: September 17, 2026
Incorrect authorization in Azure Machine Learning allows an unauthorized attacker to disclose information over a network.
Read Details

CVE-2026-85885 Microsoft 365 Copilot Elevation of Privilege Vulnerability
Published on: September 17, 2026
Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-83944 Azure Logic Apps Elevation of Privilege Vulnerability
Published on: September 17, 2026
Improper access control in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.
Read Details

CVE-2026-78501 Microsoft 365 Copilot Business Chat Information Disclosure Vulnerability
Published on: September 17, 2026
Improper neutralization of special elements used in a command ('command injection') in Microsoft 365 Copilot's Business Chat allows an unauthorized attacker to disclose information over a network.
Read Details

CVE-2026-87701 Azure Cosmos DB Elevation of Privilege Vulnerability
Published on: September 17, 2026
Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Cosmos DB allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-70200 Azure Logic Apps Elevation of Privilege Vulnerability
Published on: September 17, 2026
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.
Read Details

CVE-2026-85889 Azure AI Foundry Elevation of Privilege Vulnerability
Published on: September 17, 2026
Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.
Read Details

CVE-2026-85917 Azure AI Foundry Elevation of Privilege Vulnerability
Published on: September 17, 2026
Server-side request forgery (ssrf) in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.
Read Details

CVE-2026-69671 Microsoft Office Word Remote Code Execution Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-69678 Microsoft Office PowerPoint Remote Code Execution Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-69686 Microsoft Office Word Remote Code Execution Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-69722 Microsoft Office Word Remote Code Execution Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-69734 Microsoft Office Word Information Disclosure Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-69724 Microsoft Office SharePoint Remote Code Execution Vulnerability
Published on: September 17, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-69719 Microsoft Office Word Information Disclosure Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-69739 Microsoft Office Information Disclosure Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-69759 Microsoft Office Word Remote Code Execution Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-69767 Microsoft Office PowerPoint Remote Code Execution Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-69797 Microsoft Office PowerPoint Remote Code Execution Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-77898 Microsoft Office Remote Code Execution Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-78439 Microsoft Office Graphics Component Remote Code Execution Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-78511 Microsoft Office Word Remote Code Execution Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-78502 Microsoft Office Word Information Disclosure Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-78515 Microsoft Office Excel Information Disclosure Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-78505 Microsoft Office Remote Code Execution Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-78513 Microsoft Office PowerPoint Information Disclosure Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-78504 Microsoft Office Word Remote Code Execution Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-78517 Microsoft Office Word Remote Code Execution Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-78509 Microsoft Office Outlook Remote Code Execution Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-78518 Microsoft Office Excel Remote Code Execution Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-69626 Microsoft Office Information Disclosure Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-69632 Microsoft Office Remote Code Execution Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-72972 Microsoft Office Word Remote Code Execution Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-72938 Microsoft Office PowerPoint Information Disclosure Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-72973 Microsoft Office Word Remote Code Execution Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-72974 Microsoft Office Excel Information Disclosure Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-72977 Microsoft Office PowerPoint Information Disclosure Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-72975 Microsoft Office PowerPoint Information Disclosure Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-72976 Microsoft Office Word Information Disclosure Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-77901 Microsoft Office Word Remote Code Execution Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-78507 Microsoft Office Word Remote Code Execution Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-78506 Microsoft Office Word Information Disclosure Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-78512 Microsoft Office Word Remote Code Execution Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-78514 Microsoft Office Word Remote Code Execution Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-78503 Microsoft Office Word Information Disclosure Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-78521 Microsoft Office Word Remote Code Execution Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-78520 Microsoft Office Outlook Information Disclosure Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-78524 Microsoft Office Remote Code Execution Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-80078 Microsoft Office Information Disclosure Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-80076 Microsoft Office Information Disclosure Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-78526 Microsoft Office Word Remote Code Execution Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-78525 Microsoft Office Outlook Remote Code Execution Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-80086 Microsoft Office PowerPoint Information Disclosure Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-80080 Microsoft Office Word Remote Code Execution Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-80087 Microsoft Office Information Disclosure Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-80085 Microsoft Office Word Remote Code Execution Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-80088 Microsoft Office Word Information Disclosure Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-80091 Microsoft Office Information Disclosure Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-80089 Microsoft Office Information Disclosure Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-80090 Microsoft Office Word Information Disclosure Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-80082 Microsoft Office Information Disclosure Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-81398 Microsoft Excel Remote Code Execution Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-81386 Microsoft Excel Remote Code Execution Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-81947 Microsoft Excel Remote Code Execution Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-81387 Microsoft Excel Information Disclosure Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-81954 Microsoft Excel Remote Code Execution Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-81390 Microsoft Excel Information Disclosure Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-81399 Microsoft Excel Information Disclosure Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-81391 Microsoft Excel Information Disclosure Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-81401 Microsoft Excel Information Disclosure Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-81958 Microsoft Excel Information Disclosure Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-81396 Microsoft Excel Remote Code Execution Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-81392 Microsoft Excel Information Disclosure Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-81397 Microsoft Excel Remote Code Execution Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-81956 Microsoft Excel Remote Code Execution Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-81393 Microsoft Excel Information Disclosure Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-81400 Microsoft Excel Information Disclosure Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-81389 Microsoft Excel Remote Code Execution Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-81394 Microsoft Excel Information Disclosure Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-81960 Microsoft Excel Remote Code Execution Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-81395 Microsoft Excel Information Disclosure Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-81957 Microsoft Excel Remote Code Execution Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-81388 Microsoft Excel Remote Code Execution Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-81955 Windows Graphics Component Remote Code Execution Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-81951 Microsoft Excel Remote Code Execution Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-81952 Microsoft Word Remote Code Execution Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-81959 Microsoft Excel Remote Code Execution Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-81953 Microsoft Excel Remote Code Execution Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-81949 Microsoft Excel Remote Code Execution Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-81950 Microsoft Excel Remote Code Execution Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-81948 Microsoft Excel Remote Code Execution Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-85875 Microsoft Office Excel Information Disclosure Vulnerability
Published on: September 17, 2026
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Read Details

CVE-2026-62874 Azure Billing Elevation of Privilege Vulnerability
Published on: September 17, 2026
Insufficient verification of data authenticity in Azure Billing allows an unauthorized attacker to elevate privileges over a network.
Read Details

CVE-2026-85878 Azure Database for PostgreSQL Elevation of Privilege Vulnerability
Published on: September 17, 2026
Improper authorization in Azure Database for PostgreSQL allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-69843 Microsoft Fabric Elevation of Privilege Vulnerability
Published on: September 17, 2026
Authentication bypass by spoofing in Microsoft Fabric allows an unauthorized attacker to elevate privileges over a network.
Read Details

CVE-2026-83946 Azure Portal Spoofing Vulnerability
Published on: September 17, 2026
Improper neutralization of input during web page generation ('cross-site scripting') in Azure Portal allows an unauthorized attacker to perform spoofing over a network.
Read Details

CVE-2026-85887 M365 Copilot Information Disclosure Vulnerability
Published on: September 17, 2026
Incorrect permission assignment for critical resource in M365 Copilot allows an authorized attacker to disclose information over a network.
Read Details

CVE-2026-50311 Windows Server Elevation of Privilege Vulnerability
Published on: September 17, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-55039 Microsoft Excel Remote Code Execution Vulnerability
Published on: September 17, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-56176 Windows Win32k Elevation of Privilege Vulnerability
Published on: September 17, 2026
Added Office software to the Security Updates table. Customers that are running supported version of Office are encouraged to update to the indicated version to be protected from this vulnerability.
Read Details

CVE-2026-55121 Microsoft Office Information Disclosure Vulnerability
Published on: September 17, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-66809 Microsoft Office Graphics Component Information Disclosure Vulnerability
Published on: September 17, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-62819 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Published on: September 17, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-68794 Microsoft Excel Remote Code Execution Vulnerability
Published on: September 17, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-81957 Microsoft Excel Remote Code Execution Vulnerability
Published on: September 17, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-33835 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Published on: September 17, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-85880 Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
Published on: September 16, 2026
CVSS vector modified to correct the temporal Exploit Code Maturity setting. This is an informational change only.
Read Details

CVE-2026-68824 Connected User Experiences and Telemetry Elevation of Privilege Vulnerability
Published on: September 15, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-68841 Windows NTFS Elevation of Privilege Vulnerability
Published on: September 15, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-68847 Connected User Experiences and Telemetry Elevation of Privilege Vulnerability
Published on: September 15, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-69406 Windows Kernel Information Disclosure Vulnerability
Published on: September 15, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-69608 Microsoft Windows Search Component Elevation of Privilege Vulnerability
Published on: September 15, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-69605 Microsoft Install Service Elevation of Privilege Vulnerability
Published on: September 15, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-78517 Microsoft Office Word Remote Code Execution Vulnerability
Published on: September 15, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-80075 Windows Work Folders Elevation of Privilege Vulnerability
Published on: September 15, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-80097 Microsoft Authenticator Elevation of Privilege Vulnerability
Published on: September 15, 2026
Corrected fix build number. Informational change only.
Read Details

CVE-2026-81355 Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability
Published on: September 15, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-69486 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Published on: September 15, 2026
Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69286 Windows USB Audio Class Driver Information Disclosure Vulnerability
Published on: September 15, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-69314 Windows Device Association Broker Service Elevation of Privilege Vulnerability
Published on: September 15, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-69321 Windows Power Dependency Coordinator Tampering Vulnerability
Published on: September 15, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-69416 Windows DHCP Server Denial of Service Vulnerability
Published on: September 15, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-69619 Windows exFAT File System Elevation of Privilege Vulnerability
Published on: September 15, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-69714 Windows Device Association Service Elevation of Privilege Vulnerability
Published on: September 15, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-69559 Microsoft Teams for Android Information Disclosure Vulnerability
Published on: September 15, 2026
Corrected fix build number. Informational change only.
Read Details

CVE-2026-65812 Microsoft Teams for Android Information Disclosure Vulnerability
Published on: September 15, 2026
Corrected fix build number. Informational change only.
Read Details

CVE-2026-73006 DirectWrite Remote Code Execution Vulnerability
Published on: September 15, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-81963 Windows Update Stack Elevation of Privilege Vulnerability
Published on: September 15, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-85893 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Published on: September 15, 2026
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.
Read Details

CVE-2026-61923 Windows Display Enhancement Service Elevation of Privilege Vulnerability
Published on: September 15, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-62753 Windows HTTP.sys Elevation of Privilege Vulnerability
Published on: September 15, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-62772 Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability
Published on: September 15, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-61363 Remote Desktop Client Remote Code Execution Vulnerability
Published on: September 15, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-62717 Windows Message Queuing Elevation of Privilege Vulnerability
Published on: September 15, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-65775 Windows Win32k Elevation of Privilege Vulnerability
Published on: September 15, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-65776 Windows Win32k Elevation of Privilege Vulnerability
Published on: September 15, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-68812 Microsoft Excel Remote Code Execution Vulnerability
Published on: September 15, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-63508 Microsoft Planetary Computer Pro Elevation of Privilege Vulnerability
Published on: September 15, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-50696 Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability
Published on: September 15, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-49805 Win32k Elevation of Privilege Vulnerability
Published on: September 15, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-50351 Windows Audio Compression Manager (ACM) Elevation of Privilege Vulnerability
Published on: September 15, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-50688 Windows Win32k Elevation of Privilege Vulnerability
Published on: September 15, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-50683 Windows DHCP Client Elevation of Privilege Vulnerability
Published on: September 15, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-55053 Microsoft Excel Remote Code Execution Vulnerability
Published on: September 15, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-55121 Microsoft Office Information Disclosure Vulnerability
Published on: September 15, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-85921 Windows Secure Kernel Mode Elevation of Privilege Vulnerability
Published on: September 14, 2026
Double free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
Read Details

Chromium CVE-2026-87454: Information leak in Enterprise
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87455: Use after free in Aura
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87456: Uninitialized resource in Media
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87457: Race condition in Updater
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87458: UI misrepresentation in Geometry
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87480: Use after free in Printing
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87484: UI misrepresentation in Geometry
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87485: Incorrect authorization in CORS
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87487: Missing authorization in FileSystem
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87489: Memory corruption in V8
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87490: Information leak in Transactions Platform
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87492: Incorrect authorization in DevTools
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87493: Missing authorization in FileSystem
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87494: Use after free in Browser
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87495: Information leak in Scroll
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87496: UI misrepresentation in Browser
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87497: Uninitialized resource in Codecs
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87498: Missing authorization in WebUI
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87499: Incorrect authorization in Network
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87500: Improper validation of array index in ANGLE
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87501: UI misrepresentation in Passwords
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87502: Confused deputy in Fullscreen
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87504: Use after free in Core
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87505: Incorrect authorization in FileSystem
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87506: Privilege elevation in WebUI
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87507: UI misrepresentation in Downloads
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87508: Incorrect authorization in Loader
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87509: Incorrect authorization in Updater
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87510: Improper input validation in FileAPI
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87511: Missing authorization in DevTools
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87512: Use after free in ANGLE
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87513: Missing authorization in ControlledFrame
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87514: Use after free in Views
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87515: Incorrect authorization in FileAPI
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87516: Observable discrepancy in Navigation
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87519: Incorrect authorization in Safebrowsing
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87521: Information leak in WebMCP
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87523: Race condition in DataTransfer
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87524: Use after free in Core
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87525: Out of bounds read in Chromoting
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87526: Use after free in Passwords
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87527: Buffer overflow in WebGL
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87528: Type confusion in Rust
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87529: Numeric truncation error in Media
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87530: Uncontrolled search path element in CredentialProvider
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87531: Information leak in CORS
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87532: Improper state validation in Safebrowsing
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87533: Use after free in DevTools
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87535: Information loss or omission in Safebrowsing
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87537: Missing authorization in Extensions
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87538: Clickjacking in Input
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87539: Observable discrepancy in Network
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87540: Incorrect authorization in Isolated
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87541: Information leak in Navigation
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87542: Use after free in Input
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87543: Missing authorization in Core
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87544: Incorrect authorization in Extensions
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87546: Incorrect type conversion or cast in Safebrowsing
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87547: Incorrect reference resolution in FileSystem
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87548: Improper state validation in Installer
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87549: Incomplete cleanup in Downloads
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87550: Improper encoding or escaping of output in CSS
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87551: Improper certificate validation in CORS
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87553: Improper input validation in SiteIsolation
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87554: Race condition in Chromoting
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87556: Missing authorization in Browser
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87557: Missing authorization in LocalNetworkAccess
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87558: Use after free in Payments
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87559: UI misrepresentation in UI
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87560: Missing authorization in Browser
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87561: Incorrect authorization in Web Authentication
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87562: Incorrect reference resolution in Accessibility
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87563: Origin validation error in Paint
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87564: Type confusion in V8
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87565: Information leak in Passwords
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87566: Observable discrepancy in Layout
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87567: UI misrepresentation in UrlFormatting
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87568: Improper input validation in Chromium
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87569: Missing authorization in Views
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87598: Incorrect authorization in ServiceWorker
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87599: Improper input validation in Interstitials
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87600: Improper input validation in Safebrowsing
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87601: Race condition in V8
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87602: Out of bounds read in ANGLE
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87603: Missing authorization in FileSystem
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87604: Out of bounds read in ANGLE
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87605: Missing authorization in Contacts
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87606: Missing authorization in SiteIsolation
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87608: Improper certificate validation in FedCM
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87609: Use after free in Sharing
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87610: Incorrect authorization in Omnibox
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87611: Missing authorization in FileSystem
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87612: Type confusion in V8
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87613: Incorrect reference resolution in Extensions
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87614: Incorrect authorization in ServiceWorker
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87615: Race condition in Payments
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87616: Improper initialization in Views
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87617: Use after free in DevTools
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87618: Incorrect reference resolution in Storage
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87619: Observable discrepancy in Prefetch
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87620: Observable discrepancy in SVG
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87621: Out of bounds write in ANGLE
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87622: Missing authorization in FedCM
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87623: Observable discrepancy in DOM
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87624: UI misrepresentation in Passwords
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87625: Use after free in V8
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87626: Incorrect authorization in DeviceBoundSessionCredentials
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87627: Interpretation conflict in Safebrowsing
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87628: Use after free in Cast
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87629: Incorrect authorization in Sources
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87630: Integer overflow in WebRTC
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87631: Missing authorization in DOM
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87632: Cross-site scripting in SanitizerAPI
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87633: Use after free in Views
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87634: Use after free in WebPackaging
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87635: UI misrepresentation in Payments
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87636: Type confusion in XML
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87637: Use after free in Extensions
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87638: Out of bounds write in Media
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87639: Use after free in WebPackaging
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87641: Race condition in Browser
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87642: Uninitialized resource in WebGL
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87644: Incorrect authorization in Views
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87645: Improper state validation in Safebrowsing
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87646: Use after free in Web Authentication
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87647: Uninitialized resource in GPU
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87648: Use after free in ANGLE
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87649: UI misrepresentation in Downloads
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87650: Out of bounds read in WebGL
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87651: Incorrect authorization in Paint
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87652: Incorrect authorization in PushAPI
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87653: UI misrepresentation in FullScreen
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87654: Buffer overflow in ANGLE
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87655: Clickjacking in Downloads
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87656: Improper state validation in Safebrowsing
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87657: Use after free in V8
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87658: Information leak in Extensions
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87429: Missing authorization in ServiceWorker
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87430: Buffer overflow in WebRTC
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87431: Missing authorization in Extensions
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87432: Incorrect authorization in Navigation
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87433: Race condition in FileAPI
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87434: Missing authorization in CORS
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87435: Information leak in ControlledFrame
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87436: Incomplete cleanup in Browser
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87437: Information leak in Frames
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87439: Information leak in ServiceWorker
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87440: Out of bounds read in Media
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87441: Missing authorization in Downloads
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87442: Confused deputy in Prerender
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87443: Missing authorization in Actor
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87444: Memory corruption in Codecs
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87445: UI misrepresentation in Session
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87446: Incomplete cleanup in Extensions
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87447: Incorrect authorization in Network
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87448: Use after free in DevTools
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87449: Cross-site request forgery in DeviceBoundSessionCredentials
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87450: Incorrect authorization in Permissions
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87451: Information leak in Downloads
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87452: Incorrect authorization in GPU
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87453: Confused deputy in BackgroundFetch
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87459: Observable discrepancy in Select
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87460: Use after free in Platform
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87461: Information leak in Core
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87462: UI misrepresentation in FedCM
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87463: Incorrect authorization in Certificate
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87465: Incorrect authorization in Downloads
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87466: Incorrect authorization in Workers
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87467: Race condition in Updater
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87468: Incorrect authorization in Isolated
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87469: Improper input validation in Extensions
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87470: Improper quantity validation in Tint
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87471: Incorrect authorization in ServiceWorker
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87472: Improper input validation in FedCM
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87473: Incorrect authorization in FileHandling
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87474: Use after free in Payments
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87475: Missing authorization in Omnibox
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87476: Incorrect authorization in Loader
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87477: Information leak in Core
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87478: Observable discrepancy in Autofill
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87479: Insufficient policy enforcement in Extensions
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87570: Incorrect authorization in SiteIsolation
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87571: Improper certificate validation in Loader
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87572: Injection in DevTools
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87573: Improper input validation in Network
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87574: Information leak in ServiceWorker
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87575: Incorrect authorization in Loader
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87577: Incorrect authorization in Isolated
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87578: Use after free in Receiver
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87579: Buffer overflow in WebRTC
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87580: Incorrect authorization in WebAppInstalls
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87581: Use after free in Payments
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87582: Confused deputy in DataTransfer
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87583: UI misrepresentation in Passwords
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87584: Incorrect authorization in WebUI
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87585: Double free in PDFium
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87586: Out of bounds read in ANGLE
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87587: Use after free in V8
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87588: Use after free in Chromecast
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87589: Incorrect authorization in SiteIsolation
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87590: Improper input validation in Passwords
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87591: Incorrect authorization in Extensions
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87592: Out of bounds read in Tint
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87593: Information leak in Editing
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87594: Incorrect authorization in DataTransfer
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87596: Out of bounds read in ANGLE
Published on: September 14, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

CVE-2026-62721 Windows User-Mode Power Service (UMPS) Elevation of Privilege Vulnerability
Published on: September 14, 2026
The CVE was updated with links to security updates for Windows 11, version 26H1, 25H2, and 24H2 to address a missed fix. Microsoft recommends installing these updates as soon as possible.
Read Details

CVE-2026-77490 Microsoft Edge (Chromium-based) Spoofing Vulnerability
Published on: September 11, 2026
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
Read Details

CVE-2026-85892 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Published on: September 11, 2026
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69461 Windows NTFS Remote Code Execution Vulnerability
Published on: September 11, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-69468 Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability
Published on: September 11, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-69732 Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability
Published on: September 11, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-69860 Windows Imaging Component Remote Code Execution Vulnerability
Published on: September 11, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-70334 Visual Studio Code Security Feature Bypass Vulnerability
Published on: September 11, 2026
Acknowledgement Updated
Read Details

CVE-2026-71336 Windows Work Folder Service Remote Code Execution Vulnerability
Published on: September 11, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-77499 Windows DHCP Server Denial of Service Vulnerability
Published on: September 11, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-81355 Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability
Published on: September 11, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-81379 Visual Studio Code Security Feature Bypass Vulnerability
Published on: September 11, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-68894 Windows Error Reporting Elevation of Privilege Vulnerability
Published on: September 11, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-69314 Windows Device Association Broker Service Elevation of Privilege Vulnerability
Published on: September 11, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-69405 Windows DHCP Server Denial of Service Vulnerability
Published on: September 11, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-73016 DirectWrite Remote Code Execution Vulnerability
Published on: September 11, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-80080 Microsoft Office Word Remote Code Execution Vulnerability
Published on: September 11, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-81963 Windows Update Stack Elevation of Privilege Vulnerability
Published on: September 11, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

Chromium: CVE-2026-84330 UI misrepresentation in FullScreen
Published on: September 11, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium: CVE-2026-84333 Use after free in Dawn
Published on: September 11, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium: CVE-2026-84352 Use after free in WebGL
Published on: September 11, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-85042: Use after free in DevTools
Published on: September 11, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-85043: Incomplete cleanup in Network
Published on: September 11, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-85045: Race condition in V8
Published on: September 11, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-85048: Use after free in Compositing
Published on: September 11, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-85049: Use after free in Skia
Published on: September 11, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-85051: Type confusion in Compositing
Published on: September 11, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-85052: Out of bounds read in CrashReporting
Published on: September 11, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-85053: Improper resource exposure in CacheStorage
Published on: September 11, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-76017: Use after free in Chromoting
Published on: September 11, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-76018: Privilege elevation in Import
Published on: September 11, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-76019: Incorrect authorization in Workers
Published on: September 11, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-76021: Use after free in DOM
Published on: September 11, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-76022: Buffer overflow in Network
Published on: September 11, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-76023: Improper resource control in Linux Toolkit Theming
Published on: September 11, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-76036: Buffer overflow in Dawn
Published on: September 11, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-76039: Incorrect reference resolution in Core
Published on: September 11, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium CVE-2026-87491: Out of bounds write in V8
Published on: September 11, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Google is aware that an exploit for CVE-2026-87491 exists in the wild.
Read Details

CVE-2026-61349 Windows Work Folder Service Elevation of Privilege Vulnerability
Published on: September 11, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-62799 Windows SMB Client Elevation of Privilege Vulnerability
Published on: September 11, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-54112 Windows Win32k Elevation of Privilege Vulnerability
Published on: September 11, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-50676 Windows Media Elevation of Privilege Vulnerability
Published on: September 11, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-50679 Windows Search Service Elevation of Privilege Vulnerability
Published on: September 11, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-54124 Windows Terminal Remote Code Execution Vulnerability
Published on: September 11, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

Chromium: CVE-2025-1920 Type Confusion in V8
Published on: September 11, 2026
Information published.
Read Details

Chromium: CVE-2025-2137 Out of bounds read in V8
Published on: September 11, 2026
Information published.
Read Details

Chromium: CVE-2026-85046 Type confusion in V8
Published on: September 09, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Google is aware that an exploit for CVE-2026-85046 exists in the wild.
Read Details

CVE-2026-69777 Windows DHCP Client Elevation of Privilege Vulnerability
Published on: September 09, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-69508 Windows MIDI Service Module Elevation of Privileges Vulnerability
Published on: September 09, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-68877 Windows Storage Spaces Controller Remote Code Execution Vulnerability
Published on: September 09, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-69334 Windows Volume Manager Extension Driver Remote Code Execution Vulnerability
Published on: September 09, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-69492 Windows Partition Management Driver Elevation of Privilege Vulnerability
Published on: September 09, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-73024 Windows Services for NFS ONCRPC XDR Driver Elevation of Privilege Vulnerability
Published on: September 09, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-45499 Azure OpenAI Elevation of Privilege Vulnerability
Published on: September 09, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-62693 Windows MIDI Service Module Elevation of Privileges Vulnerability
Published on: September 09, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-62706 Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-62694 Windows Installer Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-62744 Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-66304 Skype for Business Information Disclosure Vulnerability
Published on: September 08, 2026
Server-side request forgery (ssrf) in Skype for Business allows an unauthorized attacker to disclose information over a network.
Read Details

CVE-2026-66302 Skype for Business Remote Code Execution Vulnerability
Published on: September 08, 2026
External control of file name or path in Skype for Business allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-66306 Skype for Business Information Disclosure Vulnerability
Published on: September 08, 2026
Generation of error message containing sensitive information in Skype for Business allows an unauthorized attacker to disclose information over a network.
Read Details

CVE-2026-66308 Skype for Business and Lync Denial of Service Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Skype for Business allows an authorized attacker to deny service over a network.
Read Details

CVE-2026-62895 Azure Arc SQL Server Extension Elevation of Privilege Vulnerability
Published on: September 08, 2026
Permissive cross-domain policy with untrusted domains in Azure Arc allows an unauthorized attacker to elevate privileges over a network.
Read Details

CVE-2026-69341 Windows Image Acquisition Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69522 .NET and Visual Studio Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-70091 Windows DNS Denial of Service Vulnerability
Published on: September 08, 2026
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an unauthorized attacker to deny service over a network.
Read Details

CVE-2026-69782 Windows DNS Server Remote Code Execution Vulnerability
Published on: September 08, 2026
Concurrent execution using shared resource with improper synchronization ('race condition') in DNS Server allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-62916 Microsoft Entra ID Elevation of Privilege Vulnerability
Published on: September 08, 2026
Authentication bypass using an alternate path or channel in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network.
Read Details

CVE-2026-65818 Power Automate Elevation of Privilege Vulnerability
Published on: September 08, 2026
Server-side request forgery (ssrf) in Power Automate allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-69857 Azure Cosmos DB Spoofing Vulnerability
Published on: September 08, 2026
Authorization bypass through user-controlled key in Azure Cosmos DB allows an authorized attacker to perform spoofing over a network.
Read Details

CVE-2026-70178 Microsoft Fabric Elevation of Privilege Vulnerability
Published on: September 08, 2026
Missing authorization in Microsoft Fabric allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-83941 Entra ID Elevation of Privilege Vulnerability
Published on: September 08, 2026
Missing authorization in Entra ID allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-85360 Windows Kernel Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-77482 Microsoft SQL Server Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-57098 Microsoft Remote Desktop App for Windows Information Disclosure Vulnerability
Published on: September 08, 2026
Improper verification of cryptographic signature in Windows RDP Client allows an unauthorized attacker to disclose information over a network.
Read Details

CVE-2026-62801 Microsoft PowerShell Security Feature Bypass Vulnerability
Published on: September 08, 2026
Improper limitation of a pathname to a restricted directory ('path traversal') in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network.
Read Details

CVE-2026-55007 Microsoft Exchange Server Remote Code Execution Vulnerability
Published on: September 08, 2026
Double free in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-50349 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Published on: September 08, 2026
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-67368 Microsoft SQL Server Elevation of Privilege Vulnerability
Published on: September 08, 2026
Improper link resolution before file access ('link following') in SQL Server allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-67370 Microsoft SQL Server Elevation of Privilege Vulnerability
Published on: September 08, 2026
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-67373 Microsoft SQL Server Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
Read Details

CVE-2026-67629 Microsoft SQL Server Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
Read Details

CVE-2026-67630 Microsoft SQL Server Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
Read Details

CVE-2026-67631 Microsoft SQL Server Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
Read Details

CVE-2026-67633 Microsoft SQL Server Denial of Service Vulnerability
Published on: September 08, 2026
Out-of-bounds read in SQL Server allows an authorized attacker to deny service over a network.
Read Details

CVE-2026-68781 Microsoft SQL Server Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
Read Details

CVE-2026-68784 Microsoft SQL Server Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
Read Details

CVE-2026-68785 Microsoft SQL Server Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
Read Details

CVE-2026-68787 Microsoft SQL Server Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.
Read Details

CVE-2026-68824 Connected User Experiences and Telemetry Elevation of Privilege Vulnerability
Published on: September 08, 2026
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-68830 Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vulnerability
Published on: September 08, 2026
Improper link resolution before file access ('link following') in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to disclose information locally.
Read Details

CVE-2026-68832 Windows NTFS Elevation of Privilege Vulnerability
Published on: September 08, 2026
Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-68833 Windows NTFS Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack.
Read Details

CVE-2026-68835 Windows Print Spooler Components Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-68841 Windows NTFS Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-68847 Connected User Experiences and Telemetry Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-68849 Windows Bluetooth Port Driver Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows Bluetooth Port Driver allows an authorized attacker to disclose information locally.
Read Details

CVE-2026-68845 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-68846 Windows Kernel Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-68851 Windows NTFS Information Disclosure Vulnerability
Published on: September 08, 2026
Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.
Read Details

CVE-2026-68875 Windows NTFS Remote Code Execution Vulnerability
Published on: September 08, 2026
Buffer over-read in Windows NTFS allows an authorized attacker to execute code locally.
Read Details

CVE-2026-68897 Microsoft Standard XPS Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-68878 Windows Fast FAT Driver Elevation of Privilege Vulnerability
Published on: September 08, 2026
Stack-based buffer overflow in Windows Fast FAT Driver allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-68884 Windows Kernel Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-68881 Microsoft Standard XPS Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.
Read Details

CVE-2026-68890 Microsoft Standard XPS Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69271 Microsoft Standard XPS Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-68892 Microsoft Standard XPS Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-68893 Remote Desktop Licensing Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-69281 Windows License Manager Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows License Manager allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69267 Windows Connected User Experiences and Telemetry Information Disclosure Vulnerability
Published on: September 08, 2026
Insufficient granularity of access control in Windows Connected User Experiences and Telemetry allows an authorized attacker to disclose information locally.
Read Details

CVE-2026-69276 Microsoft UxTheme Library (uxtheme.dll) Remote Code Execution Vulnerability
Published on: September 08, 2026
Integer underflow (wrap or wraparound) in Microsoft UxTheme Library (uxtheme.dll) allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69292 Remote Desktop Gateway Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Double free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69307 Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69279 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69296 Windows Device Association Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-69325 Microsoft JScript Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Microsoft JScript allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69336 Microsoft Standard XPS Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-69310 Windows DNS Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows DNS allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69366 Windows Kernel Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-69337 Windows Registry Elevation of Privilege Vulnerability
Published on: September 08, 2026
Double free in Windows Registry allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-69333 Windows Win32k Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69339 Windows MIDI Service Module Information Disclosure Vulnerability
Published on: September 08, 2026
Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally.
Read Details

CVE-2026-69338 Remote Desktop Gateway Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-69347 Windows Fast FAT Driver Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.
Read Details

CVE-2026-69345 Microsoft Standard XPS Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.
Read Details

CVE-2026-69377 Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability
Published on: September 08, 2026
Missing authorization in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69349 Windows Management Instrumentation Information Disclosure Vulnerability
Published on: September 08, 2026
Use of uninitialized resource in Windows Management Instrumentation allows an authorized attacker to disclose information over a network.
Read Details

CVE-2026-69362 Windows Error Reporting Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69359 Active Directory Domain Services Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69367 Microsoft Standard XPS Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.
Read Details

CVE-2026-69389 Windows Storage Management Provider Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69368 Windows Overlay Filter Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69371 Windows Overlay Filter Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-69379 Windows NTFS Elevation of Privilege Vulnerability
Published on: September 08, 2026
Improper link resolution before file access ('link following') in Windows NTFS allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69391 Windows Broker Infrastructure Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Stack-based buffer overflow in Windows Broker Infrastructure Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69404 Windows TCP/IP Elevation of Privilege Vulnerability
Published on: September 08, 2026
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69390 Windows Spaceport.sys Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally.
Read Details

CVE-2026-69406 Windows Kernel Information Disclosure Vulnerability
Published on: September 08, 2026
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.
Read Details

CVE-2026-69401 Audio Video Control Transport Protocol Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Audio Video Control Transport Protocol allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69413 Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69418 Volume Manager Driver Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Volume Manager Driver allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-69408 Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Published on: September 08, 2026
Integer overflow or wraparound in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69457 Windows USB Driver Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows USB Driver allows an authorized attacker to disclose information locally.
Read Details

CVE-2026-69412 Windows DHCP Server Remote Code Execution Vulnerability
Published on: September 08, 2026
Stack-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network.
Read Details

CVE-2026-69415 Windows DHCP Server Elevation of Privilege Vulnerability
Published on: September 08, 2026
Missing authentication for critical function in Windows DHCP Server allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-69420 Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69436 Windows Error Reporting Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69423 Windows USB Video Driver Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-69429 Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows IKE Extension allows an authorized attacker to execute code over a network.
Read Details

CVE-2026-69458 Windows BitLocker Elevation of Privilege Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-69448 Windows Bluetooth Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69432 Volume Manager Driver Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Volume Manager Driver allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69431 Telnet Client Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Telnet Client allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69491 Microsoft DirectMusic Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69513 Windows Error Reporting Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69455 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69532 Windows NTFS Elevation of Privilege Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69451 Windows Management Instrumentation Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-69450 Windows Error Reporting Elevation of Privilege Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69485 Remote Desktop Client Remote Code Execution Vulnerability
Published on: September 08, 2026
Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network.
Read Details

CVE-2026-69461 Windows NTFS Remote Code Execution Vulnerability
Published on: September 08, 2026
Stack-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69463 Windows NTFS Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69472 Windows Devices Human Interface Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Devices Human Interface allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69468 Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69470 Connected User Experiences and Telemetry Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69473 Windows Kernel Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69479 Windows NTFS Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
Read Details

CVE-2026-69481 Windows Enterprise App Management Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-69494 Windows Event Logging Service Remote Code Execution Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69495 Windows Event Logging Service Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69496 Windows Compressed Folder Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Compressed Folder allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69531 Microsoft Windows Speech Tampering Vulnerability
Published on: September 08, 2026
Unintended proxy or intermediary ('confused deputy') in Microsoft Windows Speech allows an authorized attacker to perform tampering locally.
Read Details

CVE-2026-69517 Windows Wireless Networking Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Wireless Networking allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69500 Windows Image Acquisition Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69505 Windows NTFS Elevation of Privilege Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-69504 Windows NTFS Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
Read Details

CVE-2026-69507 Microsoft Windows Search Component Information Disclosure Vulnerability
Published on: September 08, 2026
Insertion of sensitive information into externally-accessible file or directory in Microsoft Windows Search Component allows an authorized attacker to disclose information over a network.
Read Details

CVE-2026-69551 Windows DNS Server Remote Code Execution Vulnerability
Published on: September 08, 2026
Use after free in Windows DNS allows an authorized attacker to execute code over a network.
Read Details

CVE-2026-69514 Remote Desktop Services Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.
Read Details

CVE-2026-69516 Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69621 Role: Windows Fax Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69527 Windows USB Mass Storage Class Driver Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows USB Mass Storage Class Driver allows an authorized attacker to disclose information locally.
Read Details

CVE-2026-69525 Remote Desktop Services Remote Code Execution Vulnerability
Published on: September 08, 2026
Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69539 Remote Desktop Services Remote Code Execution Vulnerability
Published on: September 08, 2026
Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.
Read Details

CVE-2026-69582 Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability
Published on: September 08, 2026
Buffer over-read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69524 Windows Active Directory Domain Services Remote Code Execution Vulnerability
Published on: September 08, 2026
Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69528 Windows Shell Elevation of Privilege Vulnerability
Published on: September 08, 2026
Missing authentication for critical function in Windows Shell allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69534 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Improper neutralization of special elements used in a command ('command injection') in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69574 Windows Device Association Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69540 Windows Audio Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69549 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability
Published on: September 08, 2026
Out-of-bounds read in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69541 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability
Published on: September 08, 2026
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69563 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69553 Windows Hyper-V Elevation of Privilege Vulnerability
Published on: September 08, 2026
Missing authorization in Windows Hyper-V allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-69552 Windows Print Spooler Components Information Disclosure Vulnerability
Published on: September 08, 2026
Generation of error message containing sensitive information in Windows Print Spooler Components allows an authorized attacker to disclose information over a network.
Read Details

CVE-2026-69554 Microsoft Windows Search Component Tampering Vulnerability
Published on: September 08, 2026
Missing authentication for critical function in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally.
Read Details

CVE-2026-69572 Windows SMB Client Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information over a network.
Read Details

CVE-2026-69585 Microsoft Windows Search Component Elevation of Privilege Vulnerability
Published on: September 08, 2026
Incorrect type conversion or cast in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69608 Microsoft Windows Search Component Elevation of Privilege Vulnerability
Published on: September 08, 2026
Integer overflow or wraparound in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69588 Windows TCP/IP Denial of Service Vulnerability
Published on: September 08, 2026
Missing release of memory after effective lifetime in Windows TCP/IP allows an unauthorized attacker to deny service over a network.
Read Details

CVE-2026-69587 Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
Published on: September 08, 2026
Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network.
Read Details

CVE-2026-69609 Win32k Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.
Read Details

CVE-2026-69594 Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69605 Microsoft Install Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Microsoft Install Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69645 Windows Message Queuing Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Message Queuing allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69648 Windows Notification Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Notification allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69684 Windows Error Reporting Information Disclosure Vulnerability
Published on: September 08, 2026
Generation of error message containing sensitive information in Windows Error Reporting allows an authorized attacker to disclose information locally.
Read Details

CVE-2026-69623 Windows HTTP Print Provider Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows HTTP Print Provider allows an authorized attacker to execute code over a network.
Read Details

CVE-2026-69689 Windows Win32k Elevation of Privilege Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-69627 Windows Remote Desktop Licensing Service Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows Remote Desktop Licensing Service allows an authorized attacker to disclose information locally.
Read Details

CVE-2026-69628 Windows iSCSI Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows iSCSI allows an authorized attacker to execute code over a network.
Read Details

CVE-2026-69790 Windows Credential Providers Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69631 Windows DNS Denial of Service Vulnerability
Published on: September 08, 2026
Integer overflow or wraparound in Windows DNS allows an unauthorized attacker to deny service over a network.
Read Details

CVE-2026-69638 Windows NTFS Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
Read Details

CVE-2026-69859 Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability
Published on: September 08, 2026
Time-of-check time-of-use (toctou) race condition in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69693 Windows Device Association Broker Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69729 Windows Credential Providers Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to execute code over a network.
Read Details

CVE-2026-69717 Windows Group Policy Elevation of Privilege Vulnerability
Published on: September 08, 2026
Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-69711 Windows Device Association Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69694 Windows IP Address Management (IPAM) Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Deserialization of untrusted data in Windows IP Address Management (IPAM) Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69875 Windows NTFS Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-69723 Windows Kernel Information Disclosure Vulnerability
Published on: September 08, 2026
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information over a network.
Read Details

CVE-2026-69889 Windows Bluetooth Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69757 Windows TCP/IP Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-69681 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability
Published on: September 08, 2026
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-69896 Windows Error Reporting Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69735 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69741 Windows Spaceport.sys Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally.
Read Details

CVE-2026-69762 Windows Win32k Elevation of Privilege Vulnerability
Published on: September 08, 2026
Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-69819 RPC Runtime Library Remote Code Execution Vulnerability
Published on: September 08, 2026
Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69744 Windows Kerberos Denial of Service Vulnerability
Published on: September 08, 2026
Null pointer dereference in Windows Kerberos allows an unauthorized attacker to deny service over a network.
Read Details

CVE-2026-69862 Windows Wireless Wide Area Network Service Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows Wireless Wide Area Network Service allows an authorized attacker to disclose information locally.
Read Details

CVE-2026-69832 Win32k Information Disclosure Vulnerability
Published on: September 08, 2026
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32K allows an authorized attacker to disclose information locally.
Read Details

CVE-2026-69691 Windows Spaceport.sys Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69838 Windows Print Spooler Components Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69808 Win32k Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.
Read Details

CVE-2026-69839 Windows iSCSI Target Service Denial of Service Vulnerability
Published on: September 08, 2026
Uncaught exception in Windows iSCSI Target Service allows an authorized attacker to deny service over a network.
Read Details

CVE-2026-69772 Windows Network File System Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Network File System allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69775 Windows DWM Core Library Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-69758 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69771 Windows Container Manager Service Security Feature Bypass Vulnerability
Published on: September 08, 2026
Improper link resolution before file access ('link following') in Windows Container Manager Service allows an authorized attacker to bypass a security feature locally.
Read Details

CVE-2026-69822 Windows Kerberos Elevation of Privilege Vulnerability
Published on: September 08, 2026
Numeric truncation error in Windows Kerberos allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69732 Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Link Layer Topology Discovery Protocol allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69770 Windows Spaceport.sys Information Disclosure Vulnerability
Published on: September 08, 2026
Use of uninitialized resource in Windows Spaceport.sys allows an authorized attacker to disclose information locally.
Read Details

CVE-2026-69860 Windows Imaging Component Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69730 Windows DNS Server Remote Code Execution Vulnerability
Published on: September 08, 2026
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69712 Windows Key Distribution Center Remote Code Execution Vulnerability
Published on: September 08, 2026
Use after free in Windows Key Distribution Center allows an authorized attacker to execute code over a network.
Read Details

CVE-2026-69676 Windows Kerberos Remote Code Execution Vulnerability
Published on: September 08, 2026
Authentication bypass by capture-replay in Windows Kerberos allows an authorized attacker to execute code over a network.
Read Details

CVE-2026-69740 Windows Hello Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69890 Windows Virtual Trusted Platform Module Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Virtual Trusted Platform Module allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-63523 Skype for Business Spoofing Vulnerability
Published on: September 08, 2026
Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Business allows an unauthorized attacker to perform spoofing over a network.
Read Details

CVE-2026-66305 Skype for Business Spoofing Vulnerability
Published on: September 08, 2026
Use of client-side authentication in Skype for Business allows an authorized attacker to perform spoofing over a network.
Read Details

CVE-2026-70334 Visual Studio Code Security Feature Bypass Vulnerability
Published on: September 08, 2026
Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
Read Details

CVE-2026-70289 Windows Win32k Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-70342 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Ancillary Function Driver for WinSock allows an unauthorized attacker to elevate privileges over a network.
Read Details

CVE-2026-58600 HEVC Video Extensions Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to elevate privileges locally.
Read Details

CVE-2026-70351 Microsoft WebP Image Extension Remote Code Execution Vulnerability
Published on: September 08, 2026
Integer overflow or wraparound in Microsoft WebP Image Extension allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-70562 Windows Audio Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Double free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-70563 Windows Shell Spoofing Vulnerability
Published on: September 08, 2026
Improper link resolution before file access ('link following') in Windows Shell allows an unauthorized attacker to perform spoofing over a network.
Read Details

CVE-2026-70564 Windows Print Spooler Components Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-70582 Windows Management Instrumentation Elevation of Privilege Vulnerability
Published on: September 08, 2026
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-70584 Windows Core Messaging Elevation of Privilege Vulnerability
Published on: September 08, 2026
Access of resource using incompatible type ('type confusion') in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-70585 Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability
Published on: September 08, 2026
Use after free in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to execute code locally.
Read Details

CVE-2026-70586 Windows Paint Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Paint allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-70587 Windows Remote Desktop Protocol Information Disclosure Vulnerability
Published on: September 08, 2026
Improper null termination in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a network.
Read Details

CVE-2026-71329 Windows NTFS Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack.
Read Details

CVE-2026-71336 Windows Work Folder Service Remote Code Execution Vulnerability
Published on: September 08, 2026
Integer overflow or wraparound in Windows Work Folder Service allows an authorized attacker to execute code over a network.
Read Details

CVE-2026-71330 Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability
Published on: September 08, 2026
Exposure of sensitive system information to an unauthorized control sphere in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to disclose information over a network.
Read Details

CVE-2026-71333 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-71337 Windows Storage Management Provider Elevation of Privilege Vulnerability
Published on: September 08, 2026
Stack-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-71332 Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-71334 Windows NFS Portmapper Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows NFS Portmapper allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-71338 Windows Failover Cluster Elevation of Privilege Vulnerability
Published on: September 08, 2026
Double free in Windows Failover Cluster allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-71340 Windows File History Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-71339 Windows Installer Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-71350 Windows Spaceport.sys Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack.
Read Details

CVE-2026-71348 Windows Spaceport.sys Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack.
Read Details

CVE-2026-72926 Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-71343 Windows Remote Access Connection Manager Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to execute code locally.
Read Details

CVE-2026-71341 Windows Partition Management Driver Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to disclose information locally.
Read Details

CVE-2026-71353 Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability
Published on: September 08, 2026
Double free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-71345 Windows Spaceport.sys Remote Code Execution Vulnerability
Published on: September 08, 2026
Out-of-bounds write in Windows Spaceport.sys allows an authorized attacker to execute code locally.
Read Details

CVE-2026-72929 Windows Installer Elevation of Privilege Vulnerability
Published on: September 08, 2026
Improper validation of integrity check value in Windows Installer allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-71351 Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability
Published on: September 08, 2026
Double free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-72930 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
Published on: September 08, 2026
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to execute code locally.
Read Details

CVE-2026-72935 Windows NTFS Elevation of Privilege Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-72939 Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability
Published on: September 08, 2026
Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to deny service over a network.
Read Details

CVE-2026-72944 Role: Windows Fax Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-72946 Microsoft Storage Port Driver Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Storage Port Driver allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-72943 Windows Deployment Services Remote Code Execution Vulnerability
Published on: September 08, 2026
Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network.
Read Details

CVE-2026-72945 Windows Task Scheduler Information Disclosure Vulnerability
Published on: September 08, 2026
Use of uninitialized resource in Windows Task Scheduler allows an authorized attacker to disclose information locally.
Read Details

CVE-2026-72948 Windows DNS Elevation of Privilege Vulnerability
Published on: September 08, 2026
Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-72958 Windows Credential Guard Elevation of Privilege Vulnerability
Published on: September 08, 2026
Double free in Windows Credential Guard allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-72962 Windows USB Video Driver Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-72963 Windows Modern Execution Server Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Modern Execution Server allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-68825 Windows Bind Filter Driver Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-68837 Windows File History Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-68844 Windows Storage Spaces Controller Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally.
Read Details

CVE-2026-68877 Windows Storage Spaces Controller Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally.
Read Details

CVE-2026-68887 Windows Message Queuing Queue Manager Denial of Service Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to deny service over a network.
Read Details

CVE-2026-69293 Windows Biometric Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69355 Microsoft Exchange Server Remote Code Execution Vulnerability
Published on: September 08, 2026
External control of file name or path in Microsoft Exchange Server allows an authorized attacker to execute code over a network.
Read Details

CVE-2026-69356 Microsoft Exchange Server Spoofing Vulnerability
Published on: September 08, 2026
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
Read Details

CVE-2026-69361 Microsoft Exchange Server Spoofing Vulnerability
Published on: September 08, 2026
Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network.
Read Details

CVE-2026-69375 Microsoft Exchange Server Tampering Vulnerability
Published on: September 08, 2026
Authorization bypass through user-controlled key in Microsoft Exchange Server allows an authorized attacker to perform tampering over a network.
Read Details

CVE-2026-69378 Microsoft Exchange Server Denial of Service Vulnerability
Published on: September 08, 2026
Uncontrolled recursion in Microsoft Exchange Server allows an unauthorized attacker to deny service over a network.
Read Details

CVE-2026-69380 Microsoft Exchange Server Elevation of Privilege Vulnerability
Published on: September 08, 2026
Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-69382 Microsoft Exchange Server Information Disclosure Vulnerability
Published on: September 08, 2026
Use of a broken or risky cryptographic algorithm in Microsoft Exchange Server allows an unauthorized attacker to disclose information over a network.
Read Details

CVE-2026-69383 Windows Shell Elevation of Privilege Vulnerability
Published on: September 08, 2026
External control of file name or path in Windows Shell allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69394 Windows Audio Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69443 Windows Device Health Attestation (DHA) Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows Device Health Attestation (DHA) allows an unauthorized attacker to disclose information over a network.
Read Details

CVE-2026-69469 Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability
Published on: September 08, 2026
Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to elevate privileges with a physical attack.
Read Details

CVE-2026-69501 Windows Secure Kernel Mode Elevation of Privilege Vulnerability
Published on: September 08, 2026
Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69518 Windows Remote Desktop Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69544 Windows SMB Client Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69548 Windows RNDIS Information Disclosure Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack.
Read Details

CVE-2026-69556 Microsoft Office Word Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69583 Windows Biometric Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69589 Windows Biometric Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69580 Windows Biometric Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69576 Graphic Fonts Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Graphic Fonts allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69604 Windows Audio Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69603 Windows Hyper-V Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
Read Details

CVE-2026-69641 Microsoft Exchange Server Elevation of Privilege Vulnerability
Published on: September 08, 2026
Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-69642 Skype for Business Spoofing Vulnerability
Published on: September 08, 2026
Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Business allows an unauthorized attacker to perform spoofing over a network.
Read Details

CVE-2026-69646 Skype for Business Spoofing Vulnerability
Published on: September 08, 2026
Improper verification of cryptographic signature in Skype for Business allows an unauthorized attacker to perform spoofing over an adjacent network.
Read Details

CVE-2026-69649 Raw Image Extension Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69671 Microsoft Office Word Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69678 Microsoft Office PowerPoint Remote Code Execution Vulnerability
Published on: September 08, 2026
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69686 Microsoft Office Word Remote Code Execution Vulnerability
Published on: September 08, 2026
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69722 Microsoft Office Word Remote Code Execution Vulnerability
Published on: September 08, 2026
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69716 Microsoft Office SharePoint Elevation of Privilege Vulnerability
Published on: September 08, 2026
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-69734 Microsoft Office Word Information Disclosure Vulnerability
Published on: September 08, 2026
Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
Read Details

CVE-2026-69742 Microsoft Office Publisher Remote Code Execution Vulnerability
Published on: September 08, 2026
Integer overflow or wraparound in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69724 Microsoft Office SharePoint Remote Code Execution Vulnerability
Published on: September 08, 2026
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
Read Details

CVE-2026-69719 Microsoft Office Word Information Disclosure Vulnerability
Published on: September 08, 2026
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
Read Details

CVE-2026-69690 Microsoft Office SharePoint Spoofing Vulnerability
Published on: September 08, 2026
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
Read Details

CVE-2026-69739 Microsoft Office Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
Read Details

CVE-2026-69683 Microsoft Office SharePoint Information Disclosure Vulnerability
Published on: September 08, 2026
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
Read Details

CVE-2026-69529 Microsoft Office Access Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69759 Microsoft Office Word Remote Code Execution Vulnerability
Published on: September 08, 2026
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69764 Microsoft Office Word Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69778 Microsoft Office Access Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69767 Microsoft Office PowerPoint Remote Code Execution Vulnerability
Published on: September 08, 2026
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69797 Microsoft Office PowerPoint Remote Code Execution Vulnerability
Published on: September 08, 2026
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69804 Microsoft Office SharePoint Remote Code Execution Vulnerability
Published on: September 08, 2026
Time-of-check time-of-use (toctou) race condition in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
Read Details

CVE-2026-69846 Windows Secure Kernel Mode Elevation of Privilege Vulnerability
Published on: September 08, 2026
Integer overflow or wraparound in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69929 Windows DHCP Server Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network.
Read Details

CVE-2026-69930 Windows DHCP Server Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network.
Read Details

CVE-2026-70124 Windows DHCP Server Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network.
Read Details

CVE-2026-70283 Windows Win32k Elevation of Privilege Vulnerability
Published on: September 08, 2026
Incorrect authorization in Windows Win32K allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-72978 Active Directory Federation Services (AD FS) Denial of Service Vulnerability
Published on: September 08, 2026
Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
Read Details

CVE-2026-77495 Windows Imaging Component Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-72979 Windows DHCP Server Remote Code Execution Vulnerability
Published on: September 08, 2026
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-72980 Windows Hello Security Feature Bypass Vulnerability
Published on: September 08, 2026
Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally.
Read Details

CVE-2026-72981 IP Helper Remote Code Execution Vulnerability
Published on: September 08, 2026
Use after free in IP Helper allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-72983 Internet Connection Sharing (ICS) Remote Code Execution Vulnerability
Published on: September 08, 2026
Use after free in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-72982 Windows Netlogon Remote Code Execution Vulnerability
Published on: September 08, 2026
Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69476 Windows Biometric Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69787 Windows Biometric Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-72986 Graphic Fonts Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69579 Windows Message Queuing Remote Code Execution Vulnerability
Published on: September 08, 2026
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-77489 Windows Biometric Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Null pointer dereference in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-77491 Windows GDI Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally.
Read Details

CVE-2026-77492 Windows Storage Port Driver Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally.
Read Details

CVE-2026-77493 Windows Graphics Component Remote Code Execution Vulnerability
Published on: September 08, 2026
Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-77494 Windows DHCP Server Denial of Service Vulnerability
Published on: September 08, 2026
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
Read Details

CVE-2026-77498 Windows DHCP Server Denial of Service Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
Read Details

CVE-2026-77500 Windows Device Association Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Release of invalid pointer or reference in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-77499 Windows DHCP Server Denial of Service Vulnerability
Published on: September 08, 2026
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
Read Details

CVE-2026-77501 Windows DHCP Server Denial of Service Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
Read Details

CVE-2026-77502 Windows DHCP Server Denial of Service Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
Read Details

CVE-2026-77503 Windows NTFS Elevation of Privilege Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.
Read Details

CVE-2026-77887 Windows DHCP Server Remote Code Execution Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally.
Read Details

CVE-2026-77504 Microsoft Office Word Remote Code Execution Vulnerability
Published on: September 08, 2026
Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-77505 Windows DNS Server Remote Code Execution Vulnerability
Published on: September 08, 2026
Use after free in DNS Server allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-77888 Windows DHCP Server Denial of Service Vulnerability
Published on: September 08, 2026
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
Read Details

CVE-2026-77886 Windows DHCP Server Denial of Service Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
Read Details

CVE-2026-77890 Windows DHCP Server Denial of Service Vulnerability
Published on: September 08, 2026
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
Read Details

CVE-2026-77889 Windows DHCP Server Denial of Service Vulnerability
Published on: September 08, 2026
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
Read Details

CVE-2026-77891 Windows DHCP Server Remote Code Execution Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally.
Read Details

CVE-2026-77892 Windows Boot Manager Elevation of Privilege Vulnerability
Published on: September 08, 2026
No cwe for this issue in Windows Boot Manager allows an unauthorized attacker to elevate privileges with a physical attack.
Read Details

CVE-2026-77893 Windows DHCP Server Denial of Service Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
Read Details

CVE-2026-77894 Windows Installer Elevation of Privilege Vulnerability
Published on: September 08, 2026
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-77895 Windows DHCP Server Denial of Service Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
Read Details

CVE-2026-77896 Windows Remote Desktop Client Denial of Service Vulnerability
Published on: September 08, 2026
Integer overflow or wraparound in Remote Desktop Client allows an unauthorized attacker to deny service over a network.
Read Details

CVE-2026-69268 Microsoft Office SharePoint Remote Code Execution Vulnerability
Published on: September 08, 2026
Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
Read Details

CVE-2026-69285 Microsoft Office Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69273 Microsoft Office SharePoint Remote Code Execution Vulnerability
Published on: September 08, 2026
Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
Read Details

CVE-2026-69282 Microsoft Office SharePoint Remote Code Execution Vulnerability
Published on: September 08, 2026
Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
Read Details

CVE-2026-77898 Microsoft Office Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-77899 Windows Security Center Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Security Center allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-77904 Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-77907 Visual Studio Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-77908 Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
Published on: September 08, 2026
Improper control of generation of code ('code injection') in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network.
Read Details

CVE-2026-77909 Azure CycleCloud Information Disclosure Vulnerability
Published on: September 08, 2026
Insufficiently protected credentials in Azure CycleCloud allows an authorized attacker to disclose information over a network.
Read Details

CVE-2026-78439 Microsoft Office Graphics Component Remote Code Execution Vulnerability
Published on: September 08, 2026
Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-78461 Visual Studio Code Security Feature Bypass Vulnerability
Published on: September 08, 2026
Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
Read Details

CVE-2026-67378 Microsoft SQL Server Remote Code Execution Vulnerability
Published on: September 08, 2026
Untrusted pointer dereference in SQL Server allows an authorized attacker to execute code over a network.
Read Details

CVE-2026-78463 Remote Desktop Client Remote Code Execution Vulnerability
Published on: September 08, 2026
Improper control of generation of code ('code injection') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-67376 Microsoft SQL Server Denial of Service Vulnerability
Published on: September 08, 2026
Integer overflow or wraparound in SQL Server allows an unauthorized attacker to deny service over a network.
Read Details

CVE-2026-67379 Microsoft SQL Server Remote Code Execution Vulnerability
Published on: September 08, 2026
Stack-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
Read Details

CVE-2026-67383 Microsoft SQL Server Information Disclosure Vulnerability
Published on: September 08, 2026
Generation of error message containing sensitive information in SQL Server allows an authorized attacker to disclose information over a network.
Read Details

CVE-2026-67384 Microsoft SQL Server Remote Code Execution Vulnerability
Published on: September 08, 2026
Integer overflow or wraparound in SQL Server allows an authorized attacker to execute code over a network.
Read Details

CVE-2026-78511 Microsoft Office Word Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-78502 Microsoft Office Word Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
Read Details

CVE-2026-78515 Microsoft Office Excel Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
Read Details

CVE-2026-78505 Microsoft Office Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-78510 Microsoft Word Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-78508 Windows CD-ROM Driver Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows CD-ROM Driver allows an unauthorized attacker to disclose information with a physical attack.
Read Details

CVE-2026-78513 Microsoft Office PowerPoint Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
Read Details

CVE-2026-78504 Microsoft Office Word Remote Code Execution Vulnerability
Published on: September 08, 2026
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-78517 Microsoft Office Word Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-78509 Microsoft Office Outlook Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-67389 Microsoft SQL Server Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
Read Details

CVE-2026-78518 Microsoft Office Excel Remote Code Execution Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-67636 Microsoft SQL Server Remote Code Execution Vulnerability
Published on: September 08, 2026
Out-of-bounds read in SQL Server allows an authorized attacker to execute code over a network.
Read Details

CVE-2026-67643 Microsoft SQL Server Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
Read Details

CVE-2026-68786 Microsoft SQL Server Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
Read Details

CVE-2026-73029 Microsoft SQL Server Information Disclosure Vulnerability
Published on: September 08, 2026
Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.
Read Details

CVE-2026-65669 Microsoft SQL Server Elevation of Privilege Vulnerability
Published on: September 08, 2026
Improper neutralization of special elements in output used by a downstream component ('injection') in SQL Server allows an unauthorized attacker to elevate privileges over a network.
Read Details

CVE-2026-78523 Windows DNS Server Denial of Service Vulnerability
Published on: September 08, 2026
Use after free in Windows DNS allows an unauthorized attacker to deny service over a network.
Read Details

CVE-2026-80074 Remote Desktop Client Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-80077 Remote Desktop Client Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-80075 Windows Work Folders Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Work Folders allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-80083 Windows Hyper-V Remote Code Execution Vulnerability
Published on: September 08, 2026
Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to execute code locally.
Read Details

CVE-2026-80093 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-80097 Microsoft Authenticator Elevation of Privilege Vulnerability
Published on: September 08, 2026
Improper authentication in Microsoft Authenticator allows an unauthorized attacker to elevate privileges locally.
Read Details

CVE-2026-81349 Azure HDInsight Ambari Elevation of Privilege Vulnerability
Published on: September 08, 2026
Improper neutralization of special elements used in an os command ('os command injection') in Azure HDInsights allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-81355 Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to execute code locally.
Read Details

CVE-2026-81356 Visual Studio Code Security Feature Bypass Vulnerability
Published on: September 08, 2026
Inconsistent interpretation of http requests ('http request/response smuggling') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
Read Details

CVE-2026-81357 Visual Studio Code Security Feature Bypass Vulnerability
Published on: September 08, 2026
Server-side request forgery (ssrf) in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
Read Details

CVE-2026-81376 Visual Studio Code Security Feature Bypass Vulnerability
Published on: September 08, 2026
Incomplete comparison with missing factors in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
Read Details

CVE-2026-81377 Visual Studio Code Tampering Vulnerability
Published on: September 08, 2026
Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to perform tampering over a network.
Read Details

CVE-2026-81378 Visual Studio Code Security Feature Bypass Vulnerability
Published on: September 08, 2026
Interpretation conflict in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
Read Details

CVE-2026-81379 Visual Studio Code Security Feature Bypass Vulnerability
Published on: September 08, 2026
Not failing securely ('failing open') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
Read Details

CVE-2026-81380 GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability
Published on: September 08, 2026
Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network.
Read Details

CVE-2026-81381 GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability
Published on: September 08, 2026
Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network.
Read Details

CVE-2026-70065 Windows DHCP Server Denial of Service Vulnerability
Published on: September 08, 2026
Missing release of memory after effective lifetime in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
Read Details

CVE-2026-83942 Windows Kernel Elevation of Privilege Vulnerability
Published on: September 08, 2026
Missing authorization in Windows Kernel allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-83952 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69989 Windows DNS Server Remote Code Execution Vulnerability
Published on: September 08, 2026
Use after free in DNS Server allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69827 Windows DNS Server Remote Code Execution Vulnerability
Published on: September 08, 2026
Concurrent execution using shared resource with improper synchronization ('race condition') in DNS Server allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-72947 Windows File History Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Integer underflow (wrap or wraparound) in Windows File History Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-72949 Windows SMB Server Network Transport Driver (srvnet.sys) Denial of Service Vulnerability
Published on: September 08, 2026
Null pointer dereference in Windows SMB Server Network Transport Driver (srvnet.sys) allows an unauthorized attacker to deny service over a network.
Read Details

CVE-2026-70019 Windows Compressed Folder Information Disclosure Vulnerability
Published on: September 08, 2026
Windows hard link in Windows Compressed Folder allows an unauthorized attacker to disclose information over a network.
Read Details

CVE-2026-72940 Windows Schannel Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Schannel allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69573 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-72937 Windows Storage Port Driver Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally.
Read Details

CVE-2026-69492 Windows Partition Management Driver Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-83955 Windows Biometric Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-83986 Windows Biometric Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-83969 Windows Biometric Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-83988 Windows Biometric Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-83979 Windows Biometric Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-83974 Windows Biometric Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-83975 Windows Biometric Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-83976 Windows Biometric Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-70290 Win32k Information Disclosure Vulnerability
Published on: September 08, 2026
Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
Read Details

CVE-2026-83991 Windows Cloud Files Mini Filter Driver Tampering Vulnerability
Published on: September 08, 2026
Missing authentication for critical function in Windows Cloud Files Mini Filter Driver allows an authorized attacker to perform tampering locally.
Read Details

CVE-2026-83996 Windows Error Reporting Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
Read Details

Chromium: CVE-2026-84323 Missing authorization in FileSystem
Published on: September 08, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium: CVE-2026-84329 Confused deputy in CredentialProvider
Published on: September 08, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium: CVE-2026-84331 Incorrect authorization in Actor
Published on: September 08, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium: CVE-2026-84334 Incorrect authorization in Chromoting
Published on: September 08, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium: CVE-2026-84335 Incorrect authorization in TabStrip
Published on: September 08, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium: CVE-2026-84348 Information leak in MediaCapture
Published on: September 08, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium: CVE-2026-84350 Use after free in TabStrip
Published on: September 08, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium: CVE-2026-84351 Buffer overflow in GPU
Published on: September 08, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium: CVE-2026-84353 Use after free in Shared Tab Groups
Published on: September 08, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

CVE-2026-83998 Remote Desktop Client Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
Read Details

Chromium: CVE-2026-84354 Incorrect authorization in FileSystem
Published on: September 08, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium: CVE-2026-84357 Improper input validation in Omnibox
Published on: September 08, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

CVE-2026-83999 Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Improper link resolution before file access ('link following') in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-84001 Windows Key Distribution Center Denial of Service Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows Key Distribution Center allows an unauthorized attacker to deny service over a network.
Read Details

CVE-2026-85877 Windows Print Spooler Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Print Spooler Components allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-85880 Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-56177 Windows Server Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Server allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-56198 Microsoft Trace Data Helper Elevation of Privilege Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-58611 Xbox Gaming Services Elevation of Privilege Vulnerability
Published on: September 08, 2026
Improper authorization in XBox Gaming Services allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-62810 Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-62759 Windows Netlogon Spoofing Vulnerability
Published on: September 08, 2026
Authentication bypass by spoofing in Windows Netlogon allows an unauthorized attacker to perform spoofing over an adjacent network.
Read Details

CVE-2026-62762 Windows Active Directory Domain Services Denial of Service Vulnerability
Published on: September 08, 2026
Information published.
Read Details

CVE-2026-62813 Windows Active Directory Domain Services Remote Code Execution Vulnerability
Published on: September 08, 2026
Use after free in Active Directory Domain Services allows an authorized attacker to execute code over a network.
Read Details

CVE-2026-62697 Windows Push Notifications Elevation of Privilege Vulnerability
Published on: September 08, 2026
Acknowledgement Updated
Read Details

CVE-2026-56172 Windows VHD miniport driver Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-66814 Microsoft SQL Server Elevation of Privilege Vulnerability
Published on: September 08, 2026
Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-66816 Microsoft SQL Server Security Feature Bypass Vulnerability
Published on: September 08, 2026
Insufficient logging in SQL Server allows an authorized attacker to bypass a security feature over a network.
Read Details

CVE-2026-66818 Microsoft SQL Server Elevation of Privilege Vulnerability
Published on: September 08, 2026
Improper privilege management in SQL Server allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-66820 SQL Server Elevation of Privilege Vulnerability
Published on: September 08, 2026
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-67380 Microsoft SQL Server Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
Read Details

CVE-2026-67381 Microsoft SQL Server Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-67385 Microsoft SQL Server Remote Code Execution Vulnerability
Published on: September 08, 2026
Use after free in SQL Server allows an authorized attacker to execute code over a network.
Read Details

CVE-2026-67386 Microsoft SQL Server Information Disclosure Vulnerability
Published on: September 08, 2026
Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.
Read Details

CVE-2026-67388 Microsoft SQL Server Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
Read Details

CVE-2026-67390 Microsoft SQL Server Information Disclosure Vulnerability
Published on: September 08, 2026
Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.
Read Details

CVE-2026-67393 Microsoft SQL Server Information Disclosure Vulnerability
Published on: September 08, 2026
Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.
Read Details

CVE-2026-67638 Microsoft SQL Server Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
Read Details

CVE-2026-67639 Microsoft SQL Server Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
Read Details

CVE-2026-67641 Microsoft SQL Server Denial of Service Vulnerability
Published on: September 08, 2026
Integer overflow or wraparound in SQL Server allows an authorized attacker to deny service over a network.
Read Details

CVE-2026-67642 Microsoft SQL Server Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
Read Details

CVE-2026-67648 Microsoft SQL Server Information Disclosure Vulnerability
Published on: September 08, 2026
Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.
Read Details

CVE-2026-68775 Microsoft SQL Server Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
Read Details

CVE-2026-68776 Microsoft SQL Server Information Disclosure Vulnerability
Published on: September 08, 2026
Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.
Read Details

CVE-2026-68777 Microsoft SQL Server Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
Read Details

CVE-2026-68778 Microsoft SQL Server Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
Read Details

CVE-2026-68779 Microsoft SQL Server Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
Read Details

CVE-2026-68780 Microsoft SQL Server Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
Read Details

CVE-2026-68828 Remote Desktop Client Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-68831 Windows Defender Firewall Service Information Disclosure Vulnerability
Published on: September 08, 2026
Files or directories accessible to external parties in Windows Defender Firewall Service allows an authorized attacker to disclose information locally.
Read Details

CVE-2026-68827 Windows GDI+ Elevation of Privilege Vulnerability
Published on: September 08, 2026
Integer underflow (wrap or wraparound) in Windows GDI+ allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-68834 Windows NTFS Elevation of Privilege Vulnerability
Published on: September 08, 2026
Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-68843 Microsoft Office Word Information Disclosure Vulnerability
Published on: September 08, 2026
Use after free in Microsoft Office Word allows an authorized attacker to disclose information locally.
Read Details

CVE-2026-68838 Windows NTFS Elevation of Privilege Vulnerability
Published on: September 08, 2026
Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-68839 Windows USB Mass Storage Class Driver Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-68840 Windows USB Driver Elevation of Privilege Vulnerability
Published on: September 08, 2026
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Driver allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-68848 Windows Print Spooler Components Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-68842 Windows MIDI Service Module Information Disclosure Vulnerability
Published on: September 08, 2026
Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally.
Read Details

CVE-2026-68880 Windows Win32k Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-68876 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-68874 Windows Program Compatibility Assistant Service Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information over a network.
Read Details

CVE-2026-68850 Microsoft Account Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-68852 Microsoft Account Information Disclosure Vulnerability
Published on: September 08, 2026
Use of uninitialized resource in Microsoft Account allows an authorized attacker to disclose information locally.
Read Details

CVE-2026-69265 Windows NTFS Elevation of Privilege Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-68873 Windows Program Compatibility Assistant Service Information Disclosure Vulnerability
Published on: September 08, 2026
Insertion of sensitive information into log file in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information locally.
Read Details

CVE-2026-68885 Microsoft Standard XPS Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-68898 Windows iSCSI Denial of Service Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows iSCSI allows an unauthorized attacker to deny service over a network.
Read Details

CVE-2026-68886 Windows Network Connection Broker Information Disclosure Vulnerability
Published on: September 08, 2026
Use after free in Windows Network Connection Broker allows an authorized attacker to disclose information locally.
Read Details

CVE-2026-68888 Microsoft Standard XPS Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-68889 Microsoft Standard XPS Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-68891 Microsoft Standard XPS Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.
Read Details

CVE-2026-69272 Microsoft Standard XPS Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-69274 Windows Win32k Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-69288 Windows GDI+ Information Disclosure Vulnerability
Published on: September 08, 2026
Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally.
Read Details

CVE-2026-69266 Windows DHCP Server Remote Code Execution Vulnerability
Published on: September 08, 2026
Integer overflow or wraparound in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-68894 Windows Error Reporting Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-68895 Internet Storage Name Service Information Disclosure Vulnerability
Published on: September 08, 2026
Numeric truncation error in Internet Storage Name Service allows an authorized attacker to disclose information locally.
Read Details

CVE-2026-69280 Windows Push Notifications Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69269 Microsoft Standard XPS Elevation of Privilege Vulnerability
Published on: September 08, 2026
Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69270 Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69277 Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability
Published on: September 08, 2026
Stack-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69305 Microsoft Windows Search Component Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-69286 Windows USB Audio Class Driver Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to disclose information locally.
Read Details

CVE-2026-69284 Windows DCOM Server Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows DCOM Server allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69275 Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69299 Microsoft COM for Windows Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69295 Windows USB Driver Elevation of Privilege Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows USB Driver allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69283 Windows CD-ROM Driver Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69297 Windows DHCP Server Information Disclosure Vulnerability
Published on: September 08, 2026
Storing passwords in a recoverable format in Windows DHCP Server allows an authorized attacker to disclose information over a network.
Read Details

CVE-2026-69289 Windows Setup Files Cleanup Elevation of Privilege Vulnerability
Published on: September 08, 2026
Improper link resolution before file access ('link following') in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69294 Microsoft COM for Windows Information Disclosure Vulnerability
Published on: September 08, 2026
Generation of error message containing sensitive information in Microsoft COM for Windows allows an authorized attacker to disclose information locally.
Read Details

CVE-2026-69314 Windows Device Association Broker Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-69300 Windows Push Notifications Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69321 Windows Power Dependency Coordinator Tampering Vulnerability
Published on: September 08, 2026
Missing authentication for critical function in Windows Power Dependency Coordinator allows an authorized attacker to perform tampering locally.
Read Details

CVE-2026-69301 Windows Win32k Elevation of Privilege Vulnerability
Published on: September 08, 2026
Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-69303 Push Message Routing Service Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Push Message Routing Service allows an authorized attacker to disclose information locally.
Read Details

CVE-2026-69313 Microsoft Standard XPS Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-69315 Windows License Manager Information Disclosure Vulnerability
Published on: September 08, 2026
Exposure of sensitive system information to an unauthorized control sphere in Windows License Manager allows an authorized attacker to disclose information locally.
Read Details

CVE-2026-69312 Windows NTFS Elevation of Privilege Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69308 Microsoft Standard XPS Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.
Read Details

CVE-2026-69318 Windows Imaging Component Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally.
Read Details

CVE-2026-69317 Windows Remote Desktop Client Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Remote Desktop Client allows an authorized attacker to disclose information over a network.
Read Details

CVE-2026-69316 Windows Overlay Filter Information Disclosure Vulnerability
Published on: September 08, 2026
Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.
Read Details

CVE-2026-69319 Windows USB Video Driver Elevation of Privilege Vulnerability
Published on: September 08, 2026
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69322 Microsoft Windows Search Component Elevation of Privilege Vulnerability
Published on: September 08, 2026
Double free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-69324 Windows Performance Monitor Elevation of Privilege Vulnerability
Published on: September 08, 2026
Access of resource using incompatible type ('type confusion') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69351 Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vulnerability
Published on: September 08, 2026
Exposure of private personal information to an unauthorized actor in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to disclose information locally.
Read Details

CVE-2026-69329 BranchCache Denial of Service Vulnerability
Published on: September 08, 2026
Out-of-bounds read in BranchCache allows an unauthorized attacker to deny service over a network.
Read Details

CVE-2026-69328 Windows Storage Elevation of Privilege Vulnerability
Published on: September 08, 2026
Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69331 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69332 Windows NTFS Elevation of Privilege Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-69335 Windows Win32k Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69340 Windows NTFS Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-69342 Windows DHCP Server Denial of Service Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
Read Details

CVE-2026-69343 Windows Overlay Filter Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally.
Read Details

CVE-2026-69344 Windows Print Spooler Components Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.
Read Details

CVE-2026-69346 Windows Print Spooler Components Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-69348 Windows Win32k Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69350 Windows Overlay Filter Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69353 Windows Text Shaping Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows Text Shaping allows an authorized attacker to disclose information locally.
Read Details

CVE-2026-69358 Remote Desktop Client Remote Code Execution Vulnerability
Published on: September 08, 2026
Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network.
Read Details

CVE-2026-69357 Windows NDIS Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-69376 Microsoft Standard XPS Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.
Read Details

CVE-2026-69384 Virtual Hard Disk (VHD) Miniport Driver Denial of Service Vulnerability
Published on: September 08, 2026
Information published.
Read Details

CVE-2026-69372 Windows Network File System Denial of Service Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows Network File System allows an authorized attacker to deny service over a network.
Read Details

CVE-2026-69360 Microsoft Office Word Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69365 Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-69364 Windows Print Spooler Components Elevation of Privilege Vulnerability
Published on: September 08, 2026
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-69369 Windows DNS Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally.
Read Details

CVE-2026-69403 Windows SMB Server Information Disclosure Vulnerability
Published on: September 08, 2026
Missing authorization in Windows SMB Server allows an authorized attacker to disclose information locally.
Read Details

CVE-2026-69373 Windows Overlay Filter Elevation of Privilege Vulnerability
Published on: September 08, 2026
Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69374 Windows SMB Server Denial of Service Vulnerability
Published on: September 08, 2026
Allocation of resources without limits or throttling in Windows SMB Server allows an authorized attacker to deny service over a network.
Read Details

CVE-2026-69385 Windows TCP/IP Elevation of Privilege Vulnerability
Published on: September 08, 2026
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69386 Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69388 Windows Bluetooth Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69393 Windows Spaceport.sys Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information over a network.
Read Details

CVE-2026-69396 Windows NDIS Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-69410 Windows Win32k Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69398 Windows Bluetooth Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69421 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
Published on: September 08, 2026
Integer underflow (wrap or wraparound) in Windows Kernel Mode Driver allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69405 Windows DHCP Server Denial of Service Vulnerability
Published on: September 08, 2026
Missing release of memory after effective lifetime in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.
Read Details

CVE-2026-69407 Volume Manager Driver Elevation of Privilege Vulnerability
Published on: September 08, 2026
Integer overflow or wraparound in Volume Manager Driver allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69416 Windows DHCP Server Denial of Service Vulnerability
Published on: September 08, 2026
Buffer over-read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.
Read Details

CVE-2026-69424 Windows Distributed File System (DFS) Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69428 Windows LDAP - Lightweight Directory Access Protocol Denial of Service Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network.
Read Details

CVE-2026-69422 Windows USB Video Driver Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69438 Microsoft JScript Remote Code Execution Vulnerability
Published on: September 08, 2026
Incorrect conversion between numeric types in Microsoft JScript allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69425 Windows NTFS Tampering Vulnerability
Published on: September 08, 2026
Improper link resolution before file access ('link following') in Windows NTFS allows an authorized attacker to perform tampering locally.
Read Details

CVE-2026-69427 Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows VOLSNAP.SYS allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-69475 Windows Remote Desktop Services Elevation of Privilege Vulnerability
Published on: September 08, 2026
Untrusted pointer dereference in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69430 Windows Embedded Mode Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69449 Windows BitLocker Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows BitLocker allows an authorized attacker to execute code locally.
Read Details

CVE-2026-69447 Windows Audio Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69433 Windows Error Reporting Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69434 Windows URL Moniker Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows URL Moniker allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69440 Windows MIDI Service Module Elevation of Privileges Vulnerability
Published on: September 08, 2026
Time-of-check time-of-use (toctou) race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69444 Microsoft Windows Speech Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69466 Windows Kernel Elevation of Privilege Vulnerability
Published on: September 08, 2026
Time-of-check time-of-use (toctou) race condition in Windows Kernel allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69445 Windows Compressed Folder Elevation of Privilege Vulnerability
Published on: September 08, 2026
Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Compressed Folder allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69462 Windows Error Reporting Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-69453 Microsoft Windows Search Component Tampering Vulnerability
Published on: September 08, 2026
Missing authorization in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally.
Read Details

CVE-2026-69456 Microsoft Windows Speech Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69459 Windows Power Dependency Coordinator Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Power Dependency Coordinator allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69460 Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-69467 Microsoft Graphics Component Elevation of Privilege Vulnerability
Published on: September 08, 2026
Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69474 Windows Overlay Filter Information Disclosure Vulnerability
Published on: September 08, 2026
Use after free in Windows Overlay Filter allows an authorized attacker to disclose information over a network.
Read Details

CVE-2026-69482 Windows Error Reporting Tampering Vulnerability
Published on: September 08, 2026
Creation of temporary file in directory with insecure permissions in Windows Error Reporting allows an authorized attacker to perform tampering locally.
Read Details

CVE-2026-69478 Windows Device Association Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69561 Windows CD-ROM Driver Elevation of Privilege Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69480 Windows Partition Management Driver Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69483 Windows Image Acquisition Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows Image Acquisition allows an authorized attacker to disclose information locally.
Read Details

CVE-2026-69578 Windows Kernel Elevation of Privilege Vulnerability
Published on: September 08, 2026
Numeric truncation error in Windows Kernel allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69488 Windows Device Association Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69493 Windows Event Logging Service Remote Code Execution Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69511 Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69497 Windows DHCP Server Denial of Service Vulnerability
Published on: September 08, 2026
Missing release of memory after effective lifetime in Windows DHCP Server allows an authorized attacker to deny service over a network.
Read Details

CVE-2026-69512 Windows Spaceport.sys Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-69498 Windows Win32k Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69503 Windows USB Driver Elevation of Privilege Vulnerability
Published on: September 08, 2026
Stack-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-69508 Windows MIDI Service Module Elevation of Privileges Vulnerability
Published on: September 08, 2026
Stack-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69509 Role: Windows Fax Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69599 Remote Desktop Services Remote Code Execution Vulnerability
Published on: September 08, 2026
Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.
Read Details

CVE-2026-69547 Windows DHCP Server Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network.
Read Details

CVE-2026-69536 Remote Desktop Services Remote Code Execution Vulnerability
Published on: September 08, 2026
Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.
Read Details

CVE-2026-69546 Windows Active Directory Domain Services Remote Code Execution Vulnerability
Published on: September 08, 2026
Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69571 Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69535 Windows Spaceport.sys Elevation of Privilege Vulnerability
Published on: September 08, 2026
Numeric truncation error in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69538 Windows Spaceport.sys Remote Code Execution Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally.
Read Details

CVE-2026-69542 Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69591 Windows NTFS Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information over a network.
Read Details

CVE-2026-69569 Windows Print Spooler Components Denial of Service Vulnerability
Published on: September 08, 2026
Untrusted pointer dereference in Windows Print Spooler Components allows an authorized attacker to deny service over a network.
Read Details

CVE-2026-69581 Windows Device Association Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69586 Microsoft Windows PDF Remote Code Execution Vulnerability
Published on: September 08, 2026
Integer overflow or wraparound in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69612 Windows Error Reporting Elevation of Privilege Vulnerability
Published on: September 08, 2026
Absolute path traversal in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69566 Windows NTFS Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack.
Read Details

CVE-2026-69567 Windows NTFS Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69592 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69584 Windows USB Video Driver Elevation of Privilege Vulnerability
Published on: September 08, 2026
Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69600 Microsoft Windows Search Component Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69606 Windows Shell Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69625 Connected User Experiences and Telemetry Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-69618 Windows SMB Client Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information locally.
Read Details

CVE-2026-69624 Active Directory Certificate Services (AD CS) Tampering Vulnerability
Published on: September 08, 2026
Incomplete list of disallowed inputs in Active Directory Certificate Services (AD CS) allows an authorized attacker to perform tampering over a network.
Read Details

CVE-2026-69597 Windows HTTP.sys Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows HTTP.sys allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-69602 Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-69611 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability
Published on: September 08, 2026
Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69617 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69616 Windows Remote Desktop Services Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to disclose information locally.
Read Details

CVE-2026-69630 Windows Win32k Elevation of Privilege Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69610 Windows Win32k Elevation of Privilege Vulnerability
Published on: September 08, 2026
Buffer over-read in Windows Win32K allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69613 Windows Image Acquisition Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69669 Windows Kernel Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69881 Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
Published on: September 08, 2026
Information published.
Read Details

CVE-2026-69680 Windows DNS Spoofing Vulnerability
Published on: September 08, 2026
Origin validation error in Windows DNS allows an unauthorized attacker to perform spoofing over a network.
Read Details

CVE-2026-69817 Windows Bluetooth Port Driver Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69619 Windows exFAT File System Elevation of Privilege Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows exFAT File System allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-69620 Windows DHCP Server Remote Code Execution Vulnerability
Published on: September 08, 2026
Stack-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69720 Windows MIDI Service Module Elevation of Privileges Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69821 Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability
Published on: September 08, 2026
Improper encoding or escaping of output in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69715 Windows Direct Show Remote Code Execution Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows Direct Show allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69637 Windows DHCP Server Denial of Service Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.
Read Details

CVE-2026-69682 Windows Host Guardian Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69685 Windows Kerberos Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69803 Windows DHCP Server Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network.
Read Details

CVE-2026-69643 Windows Spaceport.sys Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-69687 Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability
Published on: September 08, 2026
Integer underflow (wrap or wraparound) in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69791 Windows Device Association Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69707 Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability
Published on: September 08, 2026
Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69652 Windows Win32k Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69834 Windows ALPC Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69654 Windows Accounts Control Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69816 Windows Accounts Control Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69714 Windows Device Association Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Stack-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-69709 Windows NTFS Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
Read Details

CVE-2026-69844 Windows Win32k Elevation of Privilege Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69679 Windows DHCP Server Denial of Service Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.
Read Details

CVE-2026-69866 Windows Device Association Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69674 Windows Modern Device Management (MDM) Security Feature Bypass Vulnerability
Published on: September 08, 2026
Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to bypass a security feature locally.
Read Details

CVE-2026-69688 Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-69841 Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69727 Windows Biometric Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-69826 Windows Biometric Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-69738 Windows Biometric Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69801 Windows Audio Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69692 Windows Audio Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69814 Windows Credential Providers Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Credential Providers allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69731 HID Class Driver Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69773 Windows Biometric Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-69794 Windows Encrypting File System (EFS) Information Disclosure Vulnerability
Published on: September 08, 2026
Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally.
Read Details

CVE-2026-69706 Windows Win32k Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-69768 Windows RNDIS Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69713 Windows Secure Boot Security Feature Bypass Vulnerability
Published on: September 08, 2026
Dependency on vulnerable third-party component in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
Read Details

CVE-2026-69793 Windows TCP/IP Security Feature Bypass Vulnerability
Published on: September 08, 2026
Improper validation of consistency within input in Windows TCP/IP allows an unauthorized attacker to bypass a security feature over a network.
Read Details

CVE-2026-69921 Windows Print Spooler Components Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69779 Windows Win32k Elevation of Privilege Vulnerability
Published on: September 08, 2026
Time-of-check time-of-use (toctou) race condition in Windows Win32K allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69895 Windows Spaceport.sys Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally.
Read Details

CVE-2026-69672 Windows DNS Information Disclosure Vulnerability
Published on: September 08, 2026
Use of uninitialized resource in Windows DNS allows an authorized attacker to disclose information locally.
Read Details

CVE-2026-69809 Windows Active Directory Domain Services Denial of Service Vulnerability
Published on: September 08, 2026
Missing release of memory after effective lifetime in Active Directory Domain Services allows an unauthorized attacker to deny service over a network.
Read Details

CVE-2026-69792 Windows Win32K Security Feature Bypass Vulnerability
Published on: September 08, 2026
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to bypass a security feature locally.
Read Details

CVE-2026-69853 Win32k Information Disclosure Vulnerability
Published on: September 08, 2026
Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally.
Read Details

CVE-2026-69761 Windows TCP/IP Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-69708 Windows Web Platform Storage Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Web Platform Storage allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69878 Windows DHCP Server Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code locally.
Read Details

CVE-2026-69785 Windows Smart Card Elevation of Privilege Vulnerability
Published on: September 08, 2026
Untrusted search path in Windows Smart Card allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69907 Windows Enterprise App Management Elevation of Privilege Vulnerability
Published on: September 08, 2026
Improper handling of insufficient permissions or privileges in Windows Enterprise App Management allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69818 Windows Win32k Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69900 Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
Published on: September 08, 2026
Untrusted pointer dereference in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69891 Windows Media Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Media allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69847 Windows DHCP Server Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network.
Read Details

CVE-2026-69911 Microsoft Windows Search Component Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69824 Microsoft Standard XPS Remote Code Execution Vulnerability
Published on: September 08, 2026
Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69760 Windows Kerberos Denial of Service Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows Kerberos allows an unauthorized attacker to deny service over a network.
Read Details

CVE-2026-69777 Windows DHCP Client Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network.
Read Details

CVE-2026-69807 PowerShell Elevation of Privilege Vulnerability
Published on: September 08, 2026
Improper limitation of a pathname to a restricted directory ('path traversal') in Windows PowerShell allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-69781 Windows DHCP Client Denial of Service Vulnerability
Published on: September 08, 2026
Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network.
Read Details

CVE-2026-69876 Windows DHCP Server Remote Code Execution Vulnerability
Published on: September 08, 2026
Use after free in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network.
Read Details

CVE-2026-69845 Windows DHCP Server Remote Code Execution Vulnerability
Published on: September 08, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-69829 Windows Shell Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69769 Windows HTTP Print Provider Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows HTTP Print Provider allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69852 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Published on: September 08, 2026
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
Read Details

CVE-2026-69786 Windows Text Shaping Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69799 Windows Hello Elevation of Privilege Vulnerability
Published on: September 08, 2026
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hello allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69813 Windows DNS Server Remote Code Execution Vulnerability
Published on: September 08, 2026
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69710 Windows Hello Elevation of Privilege Vulnerability
Published on: September 08, 2026
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hello allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69858 Windows DNS Server Remote Code Execution Vulnerability
Published on: September 08, 2026
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69874 Windows ALPC Elevation of Privilege Vulnerability
Published on: September 08, 2026
Untrusted pointer dereference in Windows ALPC allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69725 Windows Hello Elevation of Privilege Vulnerability
Published on: September 08, 2026
Double free in Windows Hello allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69864 Windows Hello Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69820 Windows Hello Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69784 Windows Hello Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-58599 HEVC Video Extensions Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.
Read Details

CVE-2026-64918 Microsoft Office Spoofing Vulnerability
Published on: September 08, 2026
Insufficiently protected credentials in Microsoft Office allows an unauthorized attacker to perform spoofing over a network.
Read Details

CVE-2026-47297 Microsoft SQL Server Remote Code Execution Vulnerability
Published on: September 08, 2026
Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-70565 Windows AF_UNIX Socket Provider Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows AF_UNIX Socket Provider allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-70574 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability
Published on: September 08, 2026
Out-of-bounds read in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-70567 Windows Display Enhancement Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Double free in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-70568 Windows Defender Firewall Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-70569 Windows Spaceport.sys Elevation of Privilege Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-70573 Windows Biometric Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-70572 Windows Biometric Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-70575 Windows Schannel Denial of Service Vulnerability
Published on: September 08, 2026
Null pointer dereference in Windows Schannel allows an authorized attacker to deny service over a network.
Read Details

CVE-2026-70581 Windows Biometric Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-70577 Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-70578 Windows Credential Guard Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Credential Guard allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-70579 Windows Mobile Broadband Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows Mobile Broadband allows an unauthorized attacker to disclose information over a network.
Read Details

CVE-2026-70583 Windows Core Messaging Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-71349 Windows Spaceport.sys Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack.
Read Details

CVE-2026-71342 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-71352 Windows Remote Access Connection Manager Remote Code Execution Vulnerability
Published on: September 08, 2026
Integer underflow (wrap or wraparound) in Windows Remote Access Connection Manager allows an authorized attacker to execute code over a network.
Read Details

CVE-2026-72927 Winsock Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Winsock allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-72928 Windows DNS Server Remote Code Execution Vulnerability
Published on: September 08, 2026
Use after free in Windows DNS allows an authorized attacker to execute code over a network.
Read Details

CVE-2026-72931 Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability
Published on: September 08, 2026
Missing release of resource after effective lifetime in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to deny service locally.
Read Details

CVE-2026-72936 Windows SMB Client Remote Code Execution Vulnerability
Published on: September 08, 2026
Use after free in Windows SMB Client allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-72933 Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-72932 Windows Message Queuing Queue Manager Information Disclosure Vulnerability
Published on: September 08, 2026
Buffer over-read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network.
Read Details

CVE-2026-72952 Windows Spaceport.sys Remote Code Execution Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally.
Read Details

CVE-2026-72953 Windows USB Driver Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-72941 Windows Biometric Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-72942 Windows Spaceport.sys Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows Spaceport.sys allows an unauthorized attacker to disclose information over a network.
Read Details

CVE-2026-72957 Windows Deployment Services Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code locally.
Read Details

CVE-2026-72950 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Published on: September 08, 2026
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
Read Details

CVE-2026-72959 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Published on: September 08, 2026
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
Read Details

CVE-2026-72954 Windows Deployment Services Remote Code Execution Vulnerability
Published on: September 08, 2026
Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network.
Read Details

CVE-2026-72960 Windows Media Player Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-72961 Windows Hyper-V Elevation of Privilege Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-72964 Windows Internet Connection Sharing (ICS) Tampering Vulnerability
Published on: September 08, 2026
Missing authentication for critical function in Windows Internet Connection Sharing (ICS) allows an authorized attacker to perform tampering locally.
Read Details

CVE-2026-72966 Windows Remote Access Connection Manager Tampering Vulnerability
Published on: September 08, 2026
Missing authorization in Windows Remote Access Connection Manager allows an authorized attacker to perform tampering locally.
Read Details

CVE-2026-72967 Windows Network Connection Broker Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-68896 Microsoft Windows Search Component Elevation of Privilege Vulnerability
Published on: September 08, 2026
Absolute path traversal in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69287 Windows Remote Desktop Services Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69309 Windows Print Spooler Components Elevation of Privilege Vulnerability
Published on: September 08, 2026
Double free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69290 Windows Storage Spaces Controller Elevation of Privilege Vulnerability
Published on: September 08, 2026
Stack-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69291 Windows Volume Manager Extension Driver Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69334 Windows Volume Manager Extension Driver Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69323 Windows Biometric Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69298 Windows Biometric Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69311 Windows Audio Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69352 Windows Biometric Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69910 Windows Hyper-V Remote Code Execution Vulnerability
Published on: September 08, 2026
Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69392 Windows Shell Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69395 Active Directory Certificate Services (AD CS) Information Disclosure Vulnerability
Published on: September 08, 2026
Use of externally-controlled format string in Active Directory Certificate Services (AD CS) allows an authorized attacker to disclose information over a network.
Read Details

CVE-2026-69397 Microsoft OpenSSH for Windows Remote Code Execution Vulnerability
Published on: September 08, 2026
Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69402 Microsoft Office SharePoint Spoofing Vulnerability
Published on: September 08, 2026
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
Read Details

CVE-2026-69409 Microsoft Office SharePoint Information Disclosure Vulnerability
Published on: September 08, 2026
Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
Read Details

CVE-2026-69417 Microsoft Office SharePoint Spoofing Vulnerability
Published on: September 08, 2026
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
Read Details

CVE-2026-69426 Windows VOLSNAP.SYS Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to execute code locally.
Read Details

CVE-2026-69489 Windows Biometric Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69490 Windows USB Mass Storage Class Driver Elevation of Privilege Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows USB Mass Storage Class Driver allows an unauthorized attacker to elevate privileges with a physical attack.
Read Details

CVE-2026-69499 Windows Imaging Component Remote Code Execution Vulnerability
Published on: September 08, 2026
Integer overflow or wraparound in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69510 Windows DHCP Server Remote Code Execution Vulnerability
Published on: September 08, 2026
Stack-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69559 Microsoft Teams for Android Information Disclosure Vulnerability
Published on: September 08, 2026
Origin validation error in Microsoft Teams for Android allows an authorized attacker to disclose information over a network.
Read Details

CVE-2026-69560 Windows Work Folder Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69564 Windows Online Certificate Status Protocol (OCSP) Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Online Certificate Status Protocol (OCSP) allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69593 Windows Biometric Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69568 Storage Spaces Controller Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows Storage Spaces Controller allows an authorized attacker to disclose information locally.
Read Details

CVE-2026-69575 Windows Storage Spaces Controller Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69607 Windows Deployment Services Remote Code Execution Vulnerability
Published on: September 08, 2026
Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69590 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Published on: September 08, 2026
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
Read Details

CVE-2026-69601 Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69442 Microsoft Office Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69615 Microsoft Office SharePoint Spoofing Vulnerability
Published on: September 08, 2026
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
Read Details

CVE-2026-69464 Microsoft Office SharePoint Elevation of Privilege Vulnerability
Published on: September 08, 2026
Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-69614 Microsoft Office Access Remote Code Execution Vulnerability
Published on: September 08, 2026
Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69636 Microsoft Office SharePoint Information Disclosure Vulnerability
Published on: September 08, 2026
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
Read Details

CVE-2026-69629 Microsoft Office Outlook Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69477 Microsoft Office Access Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Microsoft Office Access allows an authorized attacker to execute code locally.
Read Details

CVE-2026-69626 Microsoft Office Information Disclosure Vulnerability
Published on: September 08, 2026
Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
Read Details

CVE-2026-69632 Microsoft Office Remote Code Execution Vulnerability
Published on: September 08, 2026
Use after free in Microsoft Office allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69439 .NET and Visual Studio Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.
Read Details

CVE-2026-69805 .NET Elevation of Privilege Vulnerability
Published on: September 08, 2026
External control of file name or path in .NET allows an unauthorized attacker to elevate privileges over a network.
Read Details

CVE-2026-58649 .NET Information Disclosure Vulnerability
Published on: September 08, 2026
Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.
Read Details

CVE-2026-69441 Windows Installer Elevation of Privilege Vulnerability
Published on: September 08, 2026
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69904 Microsoft Office SharePoint Information Disclosure Vulnerability
Published on: September 08, 2026
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
Read Details

CVE-2026-69906 Windows Secure Kernel Mode Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-70203 Windows Media Player Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-70296 Windows Imaging Component Remote Code Execution Vulnerability
Published on: September 08, 2026
Out-of-bounds write in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-70570 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Published on: September 08, 2026
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
Read Details

CVE-2026-72956 Microsoft Office PowerPoint Information Disclosure Vulnerability
Published on: September 08, 2026
Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
Read Details

CVE-2026-72972 Microsoft Office Word Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-72938 Microsoft Office PowerPoint Information Disclosure Vulnerability
Published on: September 08, 2026
Access of resource using incompatible type ('type confusion') in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
Read Details

CVE-2026-72973 Microsoft Office Word Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-72974 Microsoft Office Excel Information Disclosure Vulnerability
Published on: September 08, 2026
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
Read Details

CVE-2026-72977 Microsoft Office PowerPoint Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
Read Details

CVE-2026-72975 Microsoft Office PowerPoint Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
Read Details

CVE-2026-72976 Microsoft Office Word Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Microsoft Office Word allows an authorized attacker to disclose information locally.
Read Details

CVE-2026-72985 Volume Shadow Copy Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Volume Shadow Copy allows an unauthorized attacker to elevate privileges with a physical attack.
Read Details

CVE-2026-65772 Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
Published on: September 08, 2026
Deserialization of untrusted data in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network.
Read Details

CVE-2026-65812 Microsoft Teams for Android Information Disclosure Vulnerability
Published on: September 08, 2026
Insertion of sensitive information into sent data in Microsoft Teams for Android allows an authorized attacker to disclose information over a network.
Read Details

CVE-2026-69465 Microsoft Office SharePoint Remote Code Execution Vulnerability
Published on: September 08, 2026
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
Read Details

CVE-2026-69304 ASP.NET Core Denial of Service Vulnerability
Published on: September 08, 2026
Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Read Details

CVE-2026-72989 Windows Failover Cluster Information Disclosure Vulnerability
Published on: September 08, 2026
Use of uninitialized resource in Windows Failover Cluster allows an unauthorized attacker to disclose information over a network.
Read Details

CVE-2026-72987 Windows DNS Remote Code Execution Vulnerability
Published on: September 08, 2026
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-72995 Windows Biometric Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-72988 Windows Biometric Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-72990 Windows Biometric Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-72991 Windows Biometric Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-72992 Windows Biometric Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-72993 Windows Biometric Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-72994 Windows Biometric Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-72996 Windows Biometric Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-72997 Windows Biometric Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-73018 Graphic Fonts Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-73019 Windows URL Moniker Security Feature Bypass Vulnerability
Published on: September 08, 2026
Improper resolution of path equivalence in Windows URL Moniker allows an unauthorized attacker to bypass a security feature over a network.
Read Details

CVE-2026-72999 Windows USB Hub Driver Elevation of Privilege Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows USB Hub Driver allows an unauthorized attacker to elevate privileges with a physical attack.
Read Details

CVE-2026-73002 Windows Biometric Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-73020 Windows Biometric Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-73000 Windows Biometric Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-73001 Windows Biometric Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-73021 Windows Biometric Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-73015 Windows Biometric Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-73003 Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-73022 Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-73011 Windows Biometric Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-73014 Data Sharing Service Client Elevation of Privilege Vulnerability
Published on: September 08, 2026
Missing authorization in Data Sharing Service Client allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-73008 Windows Biometric Service Information Disclosure Vulnerability
Published on: September 08, 2026
Exposure of private personal information to an unauthorized actor in Windows Biometric Service allows an authorized attacker to disclose information locally.
Read Details

CVE-2026-73005 Windows Authentication Methods Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-73024 Windows Services for NFS ONCRPC XDR Driver Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-73007 Windows Biometric Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-73026 Windows Biometric Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-73004 Windows Autopilot Tampering Vulnerability
Published on: September 08, 2026
Missing authentication for critical function in Windows Autopilot allows an authorized attacker to perform tampering locally.
Read Details

CVE-2026-73012 Windows Management Services Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Management Services allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-73009 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
Published on: September 08, 2026
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-73006 DirectWrite Remote Code Execution Vulnerability
Published on: September 08, 2026
Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-73010 Microsoft Failover Cluster Remote Code Execution Vulnerability
Published on: September 08, 2026
Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-73023 Windows Imaging Component Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-73013 Windows Imaging Component Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-73025 Windows iSCSI Security Feature Bypass Vulnerability
Published on: September 08, 2026
Weak authentication in Windows iSCSI allows an unauthorized attacker to bypass a security feature over a network.
Read Details

CVE-2026-73016 DirectWrite Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-73017 Graphics Kernel Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to execute code locally.
Read Details

CVE-2026-71328 .NET and Visual Studio Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-73028 SQL Server Elevation of Privilege Vulnerability
Published on: September 08, 2026
Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-77480 SQL Server Elevation of Privilege Vulnerability
Published on: September 08, 2026
Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-77483 SQL Server Elevation of Privilege Vulnerability
Published on: September 08, 2026
Weak authentication in SQL Server allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-77484 Microsoft SQL Server Remote Code Execution Vulnerability
Published on: September 08, 2026
Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.
Read Details

CVE-2026-77487 SQL Server Elevation of Privilege Vulnerability
Published on: September 08, 2026
Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-77485 SQL Server Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in SQL Server allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-77486 Microsoft SQL Server Remote Code Execution Vulnerability
Published on: September 08, 2026
Integer overflow or wraparound in SQL Server allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-77488 Microsoft SQL Server Information Disclosure Vulnerability
Published on: September 08, 2026
Integer underflow (wrap or wraparound) in SQL Server allows an authorized attacker to disclose information locally.
Read Details

CVE-2026-77901 Microsoft Office Word Remote Code Execution Vulnerability
Published on: September 08, 2026
Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69854 Spring Cloud Azure Elevation of Privilege Vulnerability
Published on: September 08, 2026
Improper authentication in Spring Cloud Azure allows an unauthorized attacker to elevate privileges over a network.
Read Details

CVE-2026-77905 Windows Management Instrumentation Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-77911 Microsoft Office Word Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
Read Details

CVE-2026-69562 Microsoft SQL Server Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over a network.
Read Details

CVE-2026-78442 Windows OLE DB Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-78441 Windows OLE DB Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows OLE DB allows an unauthorized attacker to disclose information over a network.
Read Details

CVE-2026-78445 Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability
Published on: September 08, 2026
Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-78446 Windows Distributed File System (DFS) Denial of Service Vulnerability
Published on: September 08, 2026
Use after free in Windows Distributed File System (DFS) allows an authorized attacker to deny service over a network.
Read Details

CVE-2026-78449 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
Published on: September 08, 2026
Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-78444 Microsoft Failover Cluster Remote Code Execution Vulnerability
Published on: September 08, 2026
Untrusted pointer dereference in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-78450 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
Published on: September 08, 2026
Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-78447 Windows Biometric Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-78448 Windows Biometric Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-78451 Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability
Published on: September 08, 2026
Untrusted pointer dereference in Microsoft Windows SCSI Class System File allows an unauthorized attacker to elevate privileges with a physical attack.
Read Details

CVE-2026-78453 Microsoft Windows SCSI Class System File Information Disclosure Vulnerability
Published on: September 08, 2026
Integer underflow (wrap or wraparound) in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information over a network.
Read Details

CVE-2026-78455 Xbox Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Xbox allows an unauthorized attacker to disclose information with a physical attack.
Read Details

CVE-2026-78452 Microsoft Windows SCSI Class System File Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information with a physical attack.
Read Details

CVE-2026-78454 Windows CD-ROM Driver Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally.
Read Details

CVE-2026-78456 SQL Server Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
Read Details

CVE-2026-78457 Windows Security Health Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Security Health Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-78462 Visual Studio Code Security Feature Bypass Vulnerability
Published on: September 08, 2026
Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
Read Details

CVE-2026-69595 Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability
Published on: September 08, 2026
Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-78464 Windows MIDI Service Module Elevation of Privileges Vulnerability
Published on: September 08, 2026
Time-of-check time-of-use (toctou) race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-66819 Microsoft SQL Server Elevation of Privilege Vulnerability
Published on: September 08, 2026
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-67369 Microsoft SQL Server Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
Read Details

CVE-2026-78507 Microsoft Office Word Remote Code Execution Vulnerability
Published on: September 08, 2026
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-78506 Microsoft Office Word Information Disclosure Vulnerability
Published on: September 08, 2026
Improper null termination in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
Read Details

CVE-2026-78512 Microsoft Office Word Remote Code Execution Vulnerability
Published on: September 08, 2026
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-78514 Microsoft Office Word Remote Code Execution Vulnerability
Published on: September 08, 2026
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-78503 Microsoft Office Word Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
Read Details

CVE-2026-78516 Windows Storage Information Disclosure Vulnerability
Published on: September 08, 2026
Buffer over-read in Windows Storage allows an unauthorized attacker to disclose information with a physical attack.
Read Details

CVE-2026-67624 Microsoft SQL Server Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
Read Details

CVE-2026-67645 Microsoft SQL Server Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
Read Details

CVE-2026-77481 Microsoft SQL Server Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
Read Details

CVE-2026-78519 Microsoft Office Outlook Remote Code Execution Vulnerability
Published on: September 08, 2026
Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-80079 Microsoft Office Word Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
Read Details

CVE-2026-78521 Microsoft Office Word Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-80073 Microsoft Office Outlook Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.
Read Details

CVE-2026-78522 Microsoft Office Word Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
Read Details

CVE-2026-78520 Microsoft Office Outlook Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-78524 Microsoft Office Remote Code Execution Vulnerability
Published on: September 08, 2026
Out-of-bounds write in Microsoft Office allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-80078 Microsoft Office Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
Read Details

CVE-2026-80076 Microsoft Office Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
Read Details

CVE-2026-78526 Microsoft Office Word Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-80084 Microsoft Office Outlook Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.
Read Details

CVE-2026-78525 Microsoft Office Outlook Remote Code Execution Vulnerability
Published on: September 08, 2026
Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-80086 Microsoft Office PowerPoint Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
Read Details

CVE-2026-80080 Microsoft Office Word Remote Code Execution Vulnerability
Published on: September 08, 2026
Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-80087 Microsoft Office Information Disclosure Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to disclose information over a network.
Read Details

CVE-2026-80085 Microsoft Office Word Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-80088 Microsoft Office Word Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
Read Details

CVE-2026-80091 Microsoft Office Information Disclosure Vulnerability
Published on: September 08, 2026
Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information over a network.
Read Details

CVE-2026-80089 Microsoft Office Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
Read Details

CVE-2026-80090 Microsoft Office Word Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
Read Details

CVE-2026-80081 Microsoft Office PowerPoint Remote Code Execution Vulnerability
Published on: September 08, 2026
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-80082 Microsoft Office Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
Read Details

CVE-2026-80096 Windows Remote Desktop Services Elevation of Privilege Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network.
Read Details

CVE-2026-81352 Web Media Extensions Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-81353 HEIF Image Extensions Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.
Read Details

CVE-2026-81354 Windows Hello Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-81383 Visual Studio Code Information Disclosure Vulnerability
Published on: September 08, 2026
Use of incorrectly-resolved name or reference in Visual Studio Code allows an unauthorized attacker to disclose information over a network.
Read Details

CVE-2026-81385 Microsoft Office Publisher Remote Code Execution Vulnerability
Published on: September 08, 2026
Deserialization of untrusted data in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-81398 Microsoft Excel Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Read Details

CVE-2026-81386 Microsoft Excel Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Read Details

CVE-2026-81947 Microsoft Excel Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Read Details

CVE-2026-81387 Microsoft Excel Information Disclosure Vulnerability
Published on: September 08, 2026
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
Read Details

CVE-2026-81954 Microsoft Excel Remote Code Execution Vulnerability
Published on: September 08, 2026
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Read Details

CVE-2026-81390 Microsoft Excel Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
Read Details

CVE-2026-81399 Microsoft Excel Information Disclosure Vulnerability
Published on: September 08, 2026
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
Read Details

CVE-2026-81391 Microsoft Excel Information Disclosure Vulnerability
Published on: September 08, 2026
Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
Read Details

CVE-2026-81401 Microsoft Excel Information Disclosure Vulnerability
Published on: September 08, 2026
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
Read Details

CVE-2026-81958 Microsoft Excel Information Disclosure Vulnerability
Published on: September 08, 2026
Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
Read Details

CVE-2026-81396 Microsoft Excel Remote Code Execution Vulnerability
Published on: September 08, 2026
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Read Details

CVE-2026-81392 Microsoft Excel Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
Read Details

CVE-2026-81397 Microsoft Excel Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Read Details

CVE-2026-81956 Microsoft Excel Remote Code Execution Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Read Details

CVE-2026-81393 Microsoft Excel Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
Read Details

CVE-2026-81400 Microsoft Excel Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
Read Details

CVE-2026-81389 Microsoft Excel Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Read Details

CVE-2026-81394 Microsoft Excel Information Disclosure Vulnerability
Published on: September 08, 2026
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
Read Details

CVE-2026-81960 Microsoft Excel Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Read Details

CVE-2026-81395 Microsoft Excel Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
Read Details

CVE-2026-81957 Microsoft Excel Remote Code Execution Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Read Details

CVE-2026-81388 Microsoft Excel Remote Code Execution Vulnerability
Published on: September 08, 2026
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Read Details

CVE-2026-81955 Windows Graphics Component Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-81951 Microsoft Excel Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Read Details

CVE-2026-81952 Microsoft Word Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-81959 Microsoft Excel Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Read Details

CVE-2026-81953 Microsoft Excel Remote Code Execution Vulnerability
Published on: September 08, 2026
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Read Details

CVE-2026-81949 Microsoft Excel Remote Code Execution Vulnerability
Published on: September 08, 2026
Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Read Details

CVE-2026-81950 Microsoft Excel Remote Code Execution Vulnerability
Published on: September 08, 2026
Double free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Read Details

CVE-2026-81948 Microsoft Excel Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Read Details

CVE-2026-77906 Visual Studio Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-83940 Windows Device Association Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-83939 Windows Secure Kernel Mode Elevation of Privilege Vulnerability
Published on: September 08, 2026
Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-57099 ASP.NET Core Denial of Service Vulnerability
Published on: September 08, 2026
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Read Details

CVE-2026-77897 Microsoft Power Automate Desktop Elevation of Privilege Vulnerability
Published on: September 08, 2026
Relative path traversal in Power Automate allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-83948 Microsoft Azure CLI Remote Code Execution Vulnerability
Published on: September 08, 2026
Improper neutralization of special elements used in a command ('command injection') in Microsoft Azure CLI allows an authorized attacker to execute code over a network.
Read Details

CVE-2026-81963 Windows Update Stack Elevation of Privilege Vulnerability
Published on: September 08, 2026
Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-83951 Microsoft Office Word Information Disclosure Vulnerability
Published on: September 08, 2026
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
Read Details

CVE-2026-83949 Microsoft Office Word Information Disclosure Vulnerability
Published on: September 08, 2026
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
Read Details

CVE-2026-69530 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
Published on: September 08, 2026
Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-69381 Windows Storage Port Driver Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack.
Read Details

CVE-2026-72965 Windows WebClient Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows WebClient Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-69598 Windows iSCSI Remote Code Execution Vulnerability
Published on: September 08, 2026
Incorrect calculation of buffer size in Windows iSCSI allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-83971 Windows Biometric Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-83954 Windows Biometric Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-83967 Windows Biometric Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-83970 Windows Biometric Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-83972 Windows Biometric Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-83968 Windows Biometric Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-70145 Microsoft Windows Search Component Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
Read Details

CVE-2026-83973 Windows Biometric Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-83981 Windows Biometric Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-83977 Windows Biometric Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-83978 Windows Biometric Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-83982 Windows Biometric Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-83980 Windows Biometric Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-83987 Windows Biometric Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-83983 Windows Biometric Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-83985 Windows Biometric Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-83989 Windows Services for NFS ONCRPC XDR Driver Denial of Service Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to deny service over a network.
Read Details

CVE-2026-83990 Microsoft Graphics Component Elevation of Privilege Vulnerability
Published on: September 08, 2026
Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-83992 Windows Imaging Component Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-83995 Windows NTFS Elevation of Privilege Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-83997 Windows Message Queuing Remote Code Execution Vulnerability
Published on: September 08, 2026
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
Read Details

Chromium: CVE-2026-84324 Use after free in Proxy
Published on: September 08, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium: CVE-2026-84325 Improper input validation in DataTransfer
Published on: September 08, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium: CVE-2026-84326 Uninitialized resource in V8
Published on: September 08, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium: CVE-2026-84327 Incorrect authorization in Autofill
Published on: September 08, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium: CVE-2026-84328 Missing authorization in FileSystem
Published on: September 08, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium: CVE-2026-84332 Incorrect authorization in SiteSettings
Published on: September 08, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium: CVE-2026-84347 Use after free in WebRTC
Published on: September 08, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium: CVE-2026-84349 Use after free in Browser
Published on: September 08, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium: CVE-2026-84355 Incorrect authorization in Navigation
Published on: September 08, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium: CVE-2026-84356 UI misrepresentation in FullScreen
Published on: September 08, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

CVE-2026-84000 Microsoft Graphics Component Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to execute code locally.
Read Details

Chromium: CVE-2026-84358 Improper privilege management in Downloads
Published on: September 08, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

Chromium: CVE-2026-84359 Information leak in Skia
Published on: September 08, 2026
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Read Details

CVE-2026-69806 .NET Elevation of Privilege Vulnerability
Published on: September 08, 2026
Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-85875 Microsoft Office Excel Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
Read Details

ADV990001 Latest Servicing Stack Updates
Published on: September 08, 2026
Advisory updated to announce new versions of Servicing Stack Updates are available. Please see the FAQ for details.
Read Details

CVE-2026-83501 Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability
Published on: September 08, 2026
Out-of-bounds read in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to disclose information locally.
Read Details

CVE-2026-83498 Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
Published on: September 08, 2026
Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
Read Details

CVE-2026-84003 Microsoft Authentication Library (MSAL) for Node.js Spoofing Vulnerability
Published on: September 08, 2026
Authentication bypass by capture-replay in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to perform spoofing over a network.
Read Details

CVE-2026-66303 Skype for Business and Lync Denial of Service Vulnerability
Published on: September 08, 2026
Null pointer dereference in Skype for Business allows an authorized attacker to deny service over a network.
Read Details

CVE-2026-66307 Skype for Business and Lync Denial of Service Vulnerability
Published on: September 08, 2026
Integer underflow (wrap or wraparound) in Skype for Business allows an unauthorized attacker to deny service over a network.
Read Details

CVE-2026-62804 Microsoft Word Remote Code Execution Vulnerability
Published on: September 08, 2026
External control of file name or path in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Read Details

CVE-2026-62906 Microsoft Discovery Studio Information Disclosure Vulnerability
Published on: September 08, 2026
Improper neutralization of special elements in data query logic in Microsoft Discovery Studio allows an unauthorized attacker to disclose information over a network.
Read Details

CVE-2026-70352 Azure AI Language Elevation of Privilege Vulnerability
Published on: September 08, 2026
Missing authentication for critical function in Azure AI Language allows an unauthorized attacker to elevate privileges over a network.
Read Details

CVE-2026-80098 Copilot Studio Elevation of Privilege Vulnerability
Published on: September 08, 2026
Improper verification of cryptographic signature in Copilot Studio allows an unauthorized attacker to elevate privileges over a network.
Read Details

CVE-2026-83711 Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability
Published on: September 08, 2026
Authorization bypass through user-controlled key in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a network.
Read Details

CVE-2026-50696 Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability
Published on: September 08, 2026
Acknowledgement Updated
Read Details

CVE-2026-54990 Remote Desktop Client Remote Code Execution Vulnerability
Published on: September 08, 2026
Acknowledgement Updated
Read Details

CVE-2026-50453 Windows USB Audio Class Driver Information Disclosure Vulnerability
Published on: September 08, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-57085 Windows Print Spooler Information Disclosure Vulnerability
Published on: September 08, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-62718 Windows DHCP Server Information Disclosure Vulnerability
Published on: September 08, 2026
Updated software table to remove clients versions because this vulnerability only impacts Windows Servers. This is an informational change only.
Read Details

CVE-2026-62715 Windows DHCP Server Information Disclosure Vulnerability
Published on: September 08, 2026
Updated software table to remove clients versions because this vulnerability only impacts Windows Servers. This is an informational change only.
Read Details

CVE-2026-62716 Windows DHCP Server Information Disclosure Vulnerability
Published on: September 08, 2026
Updated software table to remove clients versions because this vulnerability only impacts Windows Servers. This is an informational change only.
Read Details

CVE-2026-62742 Windows DHCP Server Information Disclosure Vulnerability
Published on: September 08, 2026
Updated software table to remove clients versions because this vulnerability only impacts Windows Servers. This is an informational change only.
Read Details

CVE-2026-62745 Windows DHCP Server Information Disclosure Vulnerability
Published on: September 08, 2026
Updated software table to remove clients versions because this vulnerability only impacts Windows Servers. This is an informational change only.
Read Details

CVE-2026-62787 Windows DNS Server Remote Code Execution Vulnerability
Published on: September 08, 2026
Updated software table to remove clients versions because this vulnerability only impacts Windows Servers. This is an informational change only.
Read Details

CVE-2026-62812 Windows DHCP Server Elevation of Privilege Vulnerability
Published on: September 08, 2026
Updated software table to remove clients versions because this vulnerability only impacts Windows Servers. This is an informational change only.
Read Details

CVE-2026-62817 Windows DNS Server Remote Code Execution Vulnerability
Published on: September 08, 2026
Updated software table to remove clients versions because this vulnerability only impacts Windows Servers. This is an informational change only.
Read Details

CVE-2026-62820 Windows DNS Server Remote Code Execution Vulnerability
Published on: September 08, 2026
Updated software table to remove clients versions because this vulnerability only impacts Windows Servers. This is an informational change only.
Read Details

CVE-2026-62878 Windows DNS Server Remote Code Execution Vulnerability
Published on: September 08, 2026
Updated software table to remove clients versions because this vulnerability only impacts Windows Servers. This is an informational change only.
Read Details

CVE-2026-62893 Windows Deployment Services TFTP Server Remote Code Execution Vulnerability
Published on: September 08, 2026
Updated software table to remove clients versions because this vulnerability only impacts Windows Servers. This is an informational change only.
Read Details

CVE-2026-65789 Windows DNS Server Remote Code Execution Vulnerability
Published on: September 08, 2026
Updated software table to remove clients versions because this vulnerability only impacts Windows Servers. This is an informational change only.
Read Details

CVE-2026-61920 Windows DNS Server Remote Code Execution Vulnerability
Published on: September 08, 2026
Updated software table to remove clients versions because this vulnerability only impacts Windows Servers. This is an informational change only.
Read Details

CVE-2026-62720 Windows DHCP Server Information Disclosure Vulnerability
Published on: September 08, 2026
Updated software table to remove clients versions because this vulnerability only impacts Windows Servers. This is an informational change only.
Read Details

CVE-2026-62714 Windows DHCP Server Information Disclosure Vulnerability
Published on: September 08, 2026
Updated software table to remove clients versions because this vulnerability only impacts Windows Servers. This is an informational change only.
Read Details

CVE-2026-62761 Windows DHCP Server Elevation of Privilege Vulnerability
Published on: September 08, 2026
Updated software table to remove clients versions because this vulnerability only impacts Windows Servers. This is an informational change only.
Read Details

CVE-2026-62776 Windows DHCP Server Elevation of Privilege Vulnerability
Published on: September 08, 2026
Updated software table to remove clients versions because this vulnerability only impacts Windows Servers. This is an informational change only.
Read Details

CVE-2026-62803 Windows DHCP Server Elevation of Privilege Vulnerability
Published on: September 08, 2026
Updated software table to remove clients versions because this vulnerability only impacts Windows Servers. This is an informational change only.
Read Details

CVE-2026-62807 Windows DHCP Server Elevation of Privilege Vulnerability
Published on: September 08, 2026
Updated software table to remove clients versions because this vulnerability only impacts Windows Servers. This is an informational change only.
Read Details

CVE-2026-62814 Windows DHCP Server Information Disclosure Vulnerability
Published on: September 08, 2026
Updated software table to remove clients versions because this vulnerability only impacts Windows Servers. This is an informational change only.
Read Details

CVE-2026-62823 Windows DHCP Server Remote Code Execution Vulnerability
Published on: September 08, 2026
Updated software table to remove clients versions because this vulnerability only impacts Windows Servers. This is an informational change only.
Read Details

CVE-2026-62747 Windows Device Association Service Elevation of Privilege Vulnerability
Published on: September 08, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-42914 Windows Kerberos Denial of Service Vulnerability
Published on: September 08, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-44814 Windows DWM Core Library Information Disclosure Vulnerability
Published on: September 08, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-69845 Windows DHCP Server Remote Code Execution Vulnerability
Published on: September 08, 2026
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
Read Details

CVE-2026-50376 Windows Remote Desktop Client Information Disclosure Vulnerability
Published on: September 04, 2026
Acknowledgment updated
Read Details

CVE-2026-58641 .NET Elevation of Privilege Vulnerability
Published on: September 03, 2026
Added SkiaSharp 4.151.2 to the affected software table.
Read Details

CVE-2026-58612 PowerShell Information Disclosure Vulnerability
Published on: September 03, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-62815 Microsoft QUIC Remote Code Execution Vulnerability
Published on: September 03, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-69414 Microsoft Defender Elevation of Privilege Vulnerability
Published on: September 03, 2026
Microsoft has released an update to the Microsoft Malware Protection Engine that addresses the vulnerability identified by CVE-2026-69414. Please see the FAQ for more information on how to check if the new version has been installed.
Read Details

CVE-2026-58650 Visual Studio Code Security Feature Bypass Vulnerability
Published on: September 02, 2026
Affected software updated with new package information.
Read Details

CVE-2026-59113 Visual Studio Code Remote Code Execution Vulnerability
Published on: September 02, 2026
Affected software updated with new package information.
Read Details

CVE-2026-47285 Visual Studio Code Information Disclosure Vulnerability
Published on: September 02, 2026
Affected software updated with new package information.
Read Details

CVE-2026-65675 CoPilot Chat Security Feature Bypass Vulnerability
Published on: September 02, 2026
Affected software updated with new package information.
Read Details

CVE-2026-69320 Visual Studio Code Remote Code Execution Vulnerability
Published on: September 02, 2026
Affected software updated with new package information.
Read Details

CVE-2026-69278 Visual Studio Code Security Feature Bypass Vulnerability
Published on: September 02, 2026
Affected software updated with new package information.
Read Details

CVE-2026-69306 Visual Studio Code Security Feature Bypass Vulnerability
Published on: September 02, 2026
Affected software updated with new package information.
Read Details

CVE-2026-70335 GitHub Copilot and Visual Studio Code Elevation of Privilege Vulnerability
Published on: September 02, 2026
Affected software updated with new package information.
Read Details

CVE-2026-70336 Visual Studio Code Remote Code Execution Vulnerability
Published on: September 02, 2026
Affected software updated with new package information.
Read Details

CVE-2026-62768 Windows Installer Elevation of Privilege Vulnerability
Published on: September 02, 2026
Acknowledgement added. This is an informational change only.
Read Details

CVE-2026-62880 Windows NTFS Elevation of Privilege Vulnerability
Published on: September 02, 2026
Acknowledgement Updated
Read Details

CVE-2026-50376 Windows Remote Desktop Client Information Disclosure Vulnerability
Published on: September 02, 2026
Acknowledgement added. This is an informational change only.
Read Details

CVE-2026-64899 Microsoft Office Information Disclosure Vulnerability
Published on: August 31, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-65775 Windows Win32k Elevation of Privilege Vulnerability
Published on: August 31, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-65776 Windows Win32k Elevation of Privilege Vulnerability
Published on: August 31, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-62823 Windows DHCP Server Remote Code Execution Vulnerability
Published on: August 31, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-62889 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
Published on: August 31, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-59134 Remote Desktop Client Remote Code Execution Vulnerability
Published on: August 31, 2026
Acknowledgement Updated
Read Details

CVE-2026-49177 Windows TCP/IP Information Disclosure Vulnerability
Published on: August 31, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-55134 Microsoft Word Remote Code Execution Vulnerability
Published on: August 31, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-50448 Windows NTFS Remote Code Execution Vulnerability
Published on: August 31, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-50344 Windows OLE Elevation of Privilege Vulnerability
Published on: August 31, 2026
Updated an acknowledgement. This is an informational change only.
Read Details

CVE-2026-50462 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Published on: August 31, 2026
Acknowledgement Updated
Read Details

CVE-2026-26174 Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability
Published on: August 31, 2026
Updated an acknowledgement. This is an informational change only.
Read Details