The security updates for Powershell have been updated.

Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "ShieldBreak ". We are working to provide a high quality security update that addresses this vulnerability. We will provide information in this CVE when the update is available.

The security updates for Powershell have been updated.

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2025) for more information.

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2025) for more information.

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2025) for more information.

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2025) for more information.

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2025) for more information.

FortiVoice 7.2.5 B0526 and release notes are available for download from the Support site : https://support.fortinet.com

Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

Acknowledgement Updated

The security updates for Powershell have been updated.

The security updates for Powershell have been updated.

The security updates for Powershell have been updated.

Acknowledgement Updated

Acknowledgement Updated

Acknowledgement Updated

Acknowledgement Updated

Acknowledgement Updated

Acknowledgement Updated

Acknowledgement Updated

Acknowledgement Updated

Acknowledgement Updated

Acknowledgement Updated

Acknowledgement Updated

This CVE has been discovered to be an Elevation of Privilege and not an Information Disclosure. The CVE's Impact has been updated.

FortiSandbox 5.0.7 B0172 and release notes are available for download from the Support site : https://support.fortinet.com

FortiSandbox 5.2.1 B0295 and release notes are available for download from the Support site : https://support.fortinet.com

FortiWeb 7.6.10 B1142 and release notes are available for download from the Support site : https://support.fortinet.com

Removed Linux and macOS products from the Affected Software table. This is an informational change only.

Removed Linux and macOS products from the Affected Software table. This is an informational change only.

Removed Linux and macOS products from the Affected Software table. This is an informational change only.

Acknowledgement Updated

Updated the CVE title, changed the security impact from Denial of Service to Remote Code Execution, changed the severity from Important to Critical, updated the CVSS score from 5.9 to 8.1, and corrected the severity and impact entries in the Security Updates table. These are informational changes only. Customers who have successfully installed the update do not need to take any further action.

Acknowledgement Updated

Removed Linux and macOS products from the Affected Software table. This is an informational change only.

Removed Linux and macOS products from the Affected Software table. This is an informational change only.

Removed Linux and macOS products from the Affected Software table. This is an informational change only.

Acknowledgement Updated

Acknowledgement Updated