Section

Advisories

Vendor PSIRT bulletins, CERT notes, CISA and partner-agency alerts, and distribution security notices.

905 matching records, 1 with confirmed exploitation.

1. 80
   CISA alert CISA 28d ago

   CISA Adds Two Known Exploited Vulnerabilities to Catalog

   CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-96951 Microsoft Windows Command Injection Vulnerability CVE-2026-104935 Ivanti…

   Exploited EPSS 0.89 CVE-2026-96951CVE-2026-104935 Microsoft Ivanti Operating system
2. 47
   Advisory MSRC 4h ago

   Windows Remote Desktop Client Information Disclosure Vulnerability

   Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

   CVE-2026-108419 Microsoft Operating system
3. 47
   Advisory MSRC 4h ago

   Windows Remote Desktop Client Information Disclosure Vulnerability

   Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

   CVE-2026-108418 Microsoft Operating system
4. 47
   Advisory MSRC 4h ago

   Windows Remote Desktop Client Information Disclosure Vulnerability

   Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

   CVE-2026-108417 Microsoft Operating system
5. 47
   Advisory MSRC 4h ago

   Windows Active Directory Certificate Services Security Feature Bypass

   Improper certificate validation in Windows Active Directory Certificate Services allows an authorized attacker to bypass a security feature over a network.

   CVE-2026-105590 Microsoft Identity
6. 42
   CISA alert CISA 20d ago

   Critical Vulnerabilities in PHP Require Immediate Patching

   Update October 23, 2026 : CISA has updated this Alert to: (1) provide a SIGMA detection rule to help identify potentially suspicious activity; (2) incorporate partner resources; and (3) reinforce existing mitigation guidance.…

   EPSS 1.00 Fix available CVE-2026-109618CVE-2026-109619 Microsoft
7. 41
   Advisory MSRC 4h ago

   Remote Desktop Client Remote Code Execution Vulnerability

   Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

   CVE-2026-95964 Microsoft Remote access
8. 41
   Advisory MSRC 4h ago

   Windows Remote Desktop Services Remote Code Execution Vulnerability

   Use after free in Remote Desktop Gateway Service allows an authorized attacker to execute code locally.

   CVE-2026-69565 Microsoft Operating system
9. 41
   Advisory MSRC 4h ago

   Windows Kerberos Denial of Service Vulnerability

   Out-of-bounds read in Windows Kerberos allows an authorized attacker to deny service over a network.

   CVE-2026-96082 Microsoft Operating system
10. 41
    Advisory MSRC 4h ago

    Windows Remote Desktop Services Remote Code Execution Vulnerability

    Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code locally.

    CVE-2026-69327 Microsoft Operating system
11. 41
    Advisory MSRC 4h ago

    Windows Active Directory Certificate Services Information Disclosure Vulnerability

    Buffer over-read in Windows Active Directory Certificate Services allows an authorized attacker to disclose information over a network.

    CVE-2026-95884 Microsoft Identity
12. 41
    Advisory MSRC 4h ago

    Windows Hyper-V Denial of Service Vulnerability

    Use after free in Windows Hyper-V allows an unauthorized attacker to deny service over a network.

    CVE-2026-95913 Microsoft Operating system
13. 41
    Advisory MSRC 4h ago

    Windows Kerberos Denial of Service Vulnerability

    Missing release of memory after effective lifetime in Windows Kerberos allows an unauthorized attacker to deny service over a network.

    CVE-2026-70240 Microsoft Operating system
14. 41
    Advisory MSRC 4h ago

    Windows Hyper-V Denial of Service Vulnerability

    Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.

    CVE-2026-96965 Microsoft Operating system
15. 40
    Advisory MSRC 4h ago

    Microsoft Office SharePoint Spoofing Vulnerability

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

    CVE-2026-109456 Microsoft Collaboration
16. 40
    Advisory MSRC 4h ago

    Azure CLI Remote Code Execution Vulnerability

    Improper neutralization of special elements used in an os command ('os command injection') in Azure CLI allows an authorized attacker to execute code over a network.

    CVE-2026-109457 Microsoft Cloud platform
17. 40
    Advisory MSRC 4h ago

    Microsoft Office SharePoint Spoofing Vulnerability

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

    CVE-2026-109454 Microsoft Collaboration
18. 40
    Advisory MSRC 4h ago

    Microsoft Office SharePoint Information Disclosure Vulnerability

    Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

    CVE-2026-109455 Microsoft Collaboration
19. 40
    Advisory MSRC 4h ago

    Windows Kernel Elevation of Privilege Vulnerability

    Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

    CVE-2026-108403 Microsoft Operating system
20. 40
    Advisory MSRC 4h ago

    HEVC Video Extensions Remote Code Execution Vulnerability

    Integer underflow (wrap or wraparound) in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.

    CVE-2026-114164 Microsoft Operating system
21. 40
    Advisory MSRC 4h ago

    HEVC Video Extensions Remote Code Execution Vulnerability

    Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.

    CVE-2026-114165 Microsoft Operating system
22. 40
    Advisory MSRC 4h ago

    HEVC Video Extensions Remote Code Execution Vulnerability

    Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.

    CVE-2026-114167 Microsoft Operating system
23. 40
    Advisory MSRC 4h ago

    Azure Local Elevation of Privilege Vulnerability

    Incorrect permission assignment for critical resource in Azure Local allows an authorized attacker to elevate privileges locally.

    CVE-2026-105734 Microsoft Cloud platform
24. 40
    Advisory MSRC 4h ago

    Azure CycleCloud Elevation of Privilege Vulnerability

    Improper neutralization of special elements used in an os command ('os command injection') in Azure CycleCloud allows an authorized attacker to elevate privileges over a network.

    CVE-2026-102224 Microsoft Cloud platform
25. 40
    Advisory MSRC 4h ago

    Visual Studio Code Security Feature Bypass Vulnerability

    Improper restriction of rendered ui layers or frames in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

    CVE-2026-102236 Microsoft Developer platform
26. 40
    Advisory MSRC 4h ago

    Microsoft Office Word Remote Code Execution Vulnerability

    Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

    CVE-2026-109491 Microsoft Collaboration
27. 40
    Advisory MSRC 4h ago

    Microsoft 365 Agents SDK Information Disclosure Vulnerability

    Server-side request forgery (ssrf) in Microsoft 365 Agents SDK allows an authorized attacker to disclose information over a network.

    CVE-2026-109485 Microsoft Collaboration
28. 40
    Advisory MSRC 4h ago

    Microsoft PowerPoint Remote Code Execution Vulnerability

    Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

    CVE-2026-109487 Microsoft Collaboration
29. 40
    Advisory MSRC 4h ago

    ASP.NET Core Denial of Service Vulnerability

    Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.

    CVE-2026-109478 Microsoft Developer platform
30. 40
    Advisory MSRC 4h ago

    ASP.NET Core Elevation of Privilege Vulnerability

    Cross-site request forgery (csrf) in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.

    CVE-2026-109481 Microsoft Developer platform
31. 40
    Advisory MSRC 4h ago

    Microsoft Office SharePoint Remote Code Execution Vulnerability

    Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

    CVE-2026-109472 Microsoft Collaboration
32. 40
    Advisory MSRC 4h ago

    Azure Firmware Security Feature Bypass Vulnerability

    Improper check for certificate revocation in Azure Firmware allows an authorized attacker to bypass a security feature locally.

    CVE-2026-109462 Microsoft Cloud platform
33. 40
    Advisory MSRC 4h ago

    ASP.NET Core Information Disclosure Vulnerability

    Improper encoding or escaping of output in ASP.NET Core allows an unauthorized attacker to disclose information over a network.

    CVE-2026-109476 Microsoft Developer platform
34. 40
    Advisory MSRC 4h ago

    Azure DevOps Server Remote Code Execution Vulnerability

    Improper authentication in Azure DevOps allows an authorized attacker to execute code over a network.

    CVE-2026-109467 Microsoft Developer platform
35. 40
    Advisory MSRC 4h ago

    Microsoft Office SharePoint Elevation of Privilege Vulnerability

    Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over an adjacent network.

    CVE-2026-109466 Microsoft Collaboration
36. 40
    Advisory MSRC 4h ago

    Microsoft Office SharePoint Remote Code Execution Vulnerability

    Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

    CVE-2026-109464 Microsoft Collaboration
37. 40
    Advisory MSRC 4h ago

    Windows Kernel Elevation of Privilege Vulnerability

    Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

    CVE-2026-114170 Microsoft Operating system
38. 40
    Advisory MSRC 4h ago

    Windows NTFS Tampering Vulnerability

    Time-of-check time-of-use (toctou) race condition in Windows NTFS allows an authorized attacker to perform tampering locally.

    CVE-2026-102200 Microsoft Operating system
39. 40
    Advisory MSRC 4h ago

    Windows Shell Information Disclosure Vulnerability

    Exposure of sensitive system information to an unauthorized control sphere in Windows Shell allows an authorized attacker to disclose information locally.

    CVE-2026-102868 Microsoft Operating system
40. 40
    Advisory MSRC 4h ago

    Windows NTFS Elevation of Privilege Vulnerability

    An elevation of privilege vulnerability exists when reparse points are created by sandboxed processes allowing sandbox escape. An attacker who successfully exploited the vulnerability could use the sandbox escape to elevate…

    CVE-2026-100223 Microsoft Operating system
41. 40
    Advisory MSRC 4h ago

    Windows DHCP Server Elevation of Privilege Vulnerability

    Missing authentication for critical function in Windows DHCP Server allows an authorized attacker to elevate privileges locally.

    CVE-2026-105588 Microsoft Operating system
42. 40
    Advisory MSRC 4h ago

    Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability

    Null pointer dereference in Microsoft Windows SCSI Class System File allows an authorized attacker to elevate privileges locally.

    CVE-2026-105586 Microsoft Operating system
43. 40
    Ubuntu notice Ubuntu 11h ago

    Linux kernel (Azure) vulnerabilities

    It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an…

    CVE-2023-20585CVE-2024-52560CVE-2024-53056+57 more Canonical Microsoft Cloud platform
44. 38
    Advisory MSRC 6d ago

    Chromium CVE-2026-76028: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-76028 Microsoft Google Browser
45. 38
    Advisory MSRC 6d ago

    Chromium CVE-2026-76029: Memory corruption

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-76029 Microsoft Google Browser
46. 38
    Advisory MSRC 6d ago

    Chromium CVE-2026-76024: Memory corruption

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-76024 Microsoft Google Browser
47. 38
    Advisory MSRC 6d ago

    Chromium CVE-2026-76025: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-76025 Microsoft Google Browser
48. 38
    Advisory MSRC 6d ago

    Chromium CVE-2026-76031: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-76031 Microsoft Google Browser
49. 38
    Advisory MSRC 6d ago

    Chromium CVE-2026-76026: Memory corruption

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-76026 Microsoft Google Browser
50. 38
    Advisory MSRC 6d ago

    Chromium CVE-2026-76030: Memory corruption

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-76030 Microsoft Google Browser
51. 38
    Advisory MSRC 6d ago

    Chromium CVE-2026-76027: Memory corruption

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-76027 Microsoft Google Browser
52. 38
    Advisory MSRC 6d ago

    Chromium CVE-2026-118321: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118321 Microsoft Google Browser
53. 38
    Advisory MSRC 6d ago

    Chromium CVE-2026-119268: Integer overflow

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119268 Microsoft Google Browser
54. 38
    Advisory MSRC 6d ago

    Chromium CVE-2026-119269: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119269 Microsoft Google Browser
55. 38
    Advisory MSRC 6d ago

    Chromium CVE-2026-119264: Memory corruption

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119264 Microsoft Google Browser
56. 38
    Advisory MSRC 6d ago

    Chromium CVE-2026-119265: Memory corruption

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119265 Microsoft Google Browser
57. 38
    Advisory MSRC 6d ago

    Chromium CVE-2026-119266: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119266 Microsoft Google Browser
58. 38
    Advisory MSRC 6d ago

    Chromium CVE-2026-119267: Memory corruption

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119267 Microsoft Google Browser
59. 38
    Advisory MSRC 6d ago

    Chromium CVE-2026-119260: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119260 Microsoft Google Browser
60. 38
    Advisory MSRC 6d ago

    Chromium CVE-2026-119261: Improper input validation

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119261 Microsoft Google Browser
61. 38
    Advisory MSRC 6d ago

    Chromium CVE-2026-119262: Improper input validation

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119262 Microsoft Google Browser
62. 38
    Advisory MSRC 6d ago

    Chromium CVE-2026-119263: Memory corruption

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119263 Microsoft Google Browser
63. 38
    Advisory MSRC 6d ago

    Chromium CVE-2026-119272: Out of bounds read

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119272 Microsoft Google Browser
64. 38
    Advisory MSRC 6d ago

    Chromium CVE-2026-119271: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119271 Microsoft Google Browser
65. 38
    Advisory MSRC 6d ago

    Chromium CVE-2026-119270: Improper input validation

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119270 Microsoft Google Browser
66. 38
    Advisory MSRC 25d ago

    CVE-2026-108131 Active Directory Federation Services (AD FS) Spoofing Vulnerability

    CWE added. Informational change only.

    CVE-2026-108131 Microsoft Identity
67. 38
    Advisory MSRC 28d ago

    CVE-2026-105733 Windows Hyper-V Remote Code Execution Vulnerability

    Improper access control in Windows Hyper-V allows an authorized attacker to execute code locally.

    CVE-2026-105733 Microsoft Operating system
68. 38
    Advisory MSRC 28d ago

    CVE-2026-108399 Windows Hyper-V Elevation of Privilege Vulnerability

    Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

    CVE-2026-108399 Microsoft Operating system
69. 36
    Advisory MSRC 10d ago

    Chromium: CVE-2026-118304 Improper input validation in SVG

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118304 Microsoft Google Browser
70. 36
    Advisory MSRC 10d ago

    Chromium: CVE-2026-118305 Memory corruption in Turbolev

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118305 Microsoft Google Browser
71. 36
    Advisory MSRC 10d ago

    Chromium: CVE-2026-118306 Memory corruption in FileSystem

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118306 Microsoft Google Browser
72. 36
    Advisory MSRC 10d ago

    Chromium: CVE-2026-118307 Use after free in Paint

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118307 Microsoft Google Browser
73. 36
    Advisory MSRC 10d ago

    Chromium: CVE-2026-118317 Memory corruption in HTML

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118317 Microsoft Google Browser
74. 36
    Advisory MSRC 10d ago

    Chromium: CVE-2026-118316 Improper input validation in V8

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118316 Microsoft Google Browser
75. 36
    Advisory MSRC 10d ago

    Chromium: CVE-2026-118313 Use after free in Video

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118313 Microsoft Google Browser
76. 36
    Advisory MSRC 10d ago

    Chromium: CVE-2026-118328 Improper input validation in WebRTC

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118328 Microsoft Google Browser
77. 36
    Advisory MSRC 10d ago

    Chromium: CVE-2026-118311 Memory corruption in Media

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118311 Microsoft Google Browser
78. 36
    Advisory MSRC 10d ago

    Chromium: CVE-2026-118329 Improper input validation in ANGLE

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118329 Microsoft Google Browser
79. 36
    Advisory MSRC 10d ago

    Chromium: CVE-2026-118310 Improper input validation in Views

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118310 Microsoft Google Browser
80. 36
    Advisory MSRC 10d ago

    Chromium: CVE-2026-118322 Memory corruption in ANGLE

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118322 Microsoft Google Browser
81. 36
    Advisory MSRC 10d ago

    Chromium: CVE-2026-118320 Memory corruption in V8

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118320 Microsoft Google Browser
82. 36
    Advisory MSRC 10d ago

    Chromium: CVE-2026-118318 Improper access control in V8

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118318 Microsoft Google Browser
83. 36
    Advisory MSRC 10d ago

    Chromium: CVE-2026-118327 Memory corruption in Media

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118327 Microsoft Google Browser
84. 36
    Advisory MSRC 10d ago

    Chromium: CVE-2026-118348 Improper input validation in Skia

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118348 Microsoft Google Browser
85. 36
    Advisory MSRC 10d ago

    Chromium: CVE-2026-118349 Memory corruption in Payments

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118349 Microsoft Google Browser
86. 36
    Advisory MSRC 10d ago

    Chromium: CVE-2026-118359 Memory corruption in V8

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118359 Microsoft Google Browser
87. 36
    Advisory MSRC 10d ago

    Chromium: CVE-2026-118358 Memory corruption in WebAudio

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118358 Microsoft Google Browser
88. 36
    Advisory MSRC 10d ago

    Chromium: CVE-2026-118340 Memory corruption in Skia

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118340 Microsoft Google Browser
89. 36
    Advisory MSRC 10d ago

    Chromium: CVE-2026-118339 Use after free in Animation

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118339 Microsoft Google Browser
90. 36
    Advisory MSRC 10d ago

    Chromium: CVE-2026-118342 Out of bounds write in Editing

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118342 Microsoft Google Browser
91. 36
    Advisory MSRC 10d ago

    Chromium: CVE-2026-118343 Improper input validation in ReadingList

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118343 Microsoft Google Browser
92. 36
    Advisory MSRC 10d ago

    Chromium: CVE-2026-118353 Use after free in Paint

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118353 Microsoft Google Browser
93. 36
    Advisory MSRC 10d ago

    Chromium: CVE-2026-118344 Use after free in Layout

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118344 Microsoft Google Browser
94. 36
    Advisory MSRC 10d ago

    Chromium: CVE-2026-118352 Memory corruption in Cache

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118352 Microsoft Google Browser
95. 36
    Advisory MSRC 10d ago

    Chromium: CVE-2026-118345 Use after free in PDFium

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118345 Microsoft Google Browser
96. 36
    Advisory MSRC 10d ago

    Chromium: CVE-2026-118351 Memory corruption in Skia

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118351 Microsoft Google Browser
97. 36
    Advisory MSRC 10d ago

    Chromium: CVE-2026-118346 Use after free in Compositing

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118346 Microsoft Google Browser
98. 36
    Advisory MSRC 10d ago

    Chromium: CVE-2026-118350 Use after free in Turbolev

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118350 Microsoft Google Browser
99. 36
    Advisory MSRC 10d ago

    Chromium: CVE-2026-118334 Use after free in ImageCapture

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118334 Microsoft Google Browser
100. 36
     Advisory MSRC 10d ago

     Chromium: CVE-2026-118357 Use after free in FileSystem

     This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

     Fix available CVE-2026-118357 Microsoft Google Browser

Same filters as JSON: /api/items?category=advisory&window=30d&vendor=Microsoft&limit=100. RSS for this section: feed.xml.