Connexion
Chromium CVE-2026-87564: Type confusion in V8
Information published.
Vue lecture
Chromium CVE-2026-87587: Use after free in V8
Information published.
Chromium CVE-2026-87612: Type confusion in V8
Information published.
Chromium CVE-2026-87489: Memory corruption in V8
Information published.
Chromium CVE-2026-87536: Use after free in V8
Information published.
Chromium CVE-2026-87625: Use after free in V8
Information published.
Chromium CVE-2026-87601: Race condition in V8
Information published.
CVE-2026-57099 ASP.NET Core Denial of Service Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-77886 Windows DHCP Server Denial of Service Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-68824 Connected User Experiences and Telemetry Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-69498 Windows Win32k Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-69572 Windows SMB Client Information Disclosure Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-69620 Windows DHCP Server Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-55134 Microsoft Word Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-57091 Windows File History Service Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-68825 Windows Bind Filter Driver Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-78517 Microsoft Office Word Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-77901 Microsoft Office Word Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-78524 Microsoft Office Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-78526 Microsoft Office Word Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-83498 Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-63516 Microsoft SharePoint Server Spoofing Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-62871 .NET Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-63532 Microsoft Office Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-68798 Microsoft Excel Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-68804 Microsoft Excel Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-40400 Windows PowerShell Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-55039 Microsoft Excel Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-55123 Microsoft PowerPoint Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-88097 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges locally.
Chromium: CVE-2026-0899 Out of bounds memory access in V8
Information published.
CVE-2026-55946 Microsoft Copilot Information Disclosure Vulnerability
Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to disclose information over a network.
CVE-2026-70009 Azure Arc Elevation of Privilege Vulnerability
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Arc allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-69865 Microsoft Container Registry Elevation of Privilege Vulnerability
Authorization bypass through user-controlled key in Microsoft Container Registry allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-77903 Microsoft Dataverse Elevation of Privilege Vulnerability
Authentication bypass by spoofing in Microsoft Dataverse allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-69399 Azure Arc Elevation of Privilege Vulnerability
Information published.
CVE-2026-68791 Azure Machine Learning Information Disclosure Vulnerability
Incorrect authorization in Azure Machine Learning allows an unauthorized attacker to disclose information over a network.
CVE-2026-85885 Microsoft 365 Copilot Elevation of Privilege Vulnerability
Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an authorized attacker to elevate privileges over a network.
CVE-2026-83944 Azure Logic Apps Elevation of Privilege Vulnerability
Improper access control in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-78501 Microsoft 365 Copilot Business Chat Information Disclosure Vulnerability
Improper neutralization of special elements used in a command ('command injection') in Microsoft 365 Copilot's Business Chat allows an unauthorized attacker to disclose information over a network.
