Live · 98 sources · updated 3m ago

· 14:04 UTC

The Security Standard

A daily wire for defenders: vulnerabilities, advisories, research, standards.

Section

Advisories

Vendor PSIRT bulletins, CERT notes, CISA and partner-agency alerts, and distribution security notices.

1,135 matching records, 4 with confirmed exploitation.

  1. 67
    CISA alert CISA

    CISA Adds Four Known Exploited Vulnerabilities to Catalog

    CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-102895 GPUStack Improper Authentication Vulnerability CVE-2026-116779 SignalWire…

    Exploited EPSS 0.19 CVE-2026-102895CVE-2026-116779CVE-2026-123158+1 more OpenSSH IBM Remote access
  2. 66
    Ivanti advisory Ivanti

    November 2026 Patch Tuesday

    What's happened since October Patch Tuesday The weeks leading up to November Patch Tuesday gave defenders three clear tests of how fast they can move. PHP2Shell (CVE-2026-109618 and CVE-2026-109619) was exploited before PHP…

    Exploited CVSS 6.5 Fix available CVE-2026-109618CVE-2026-109619CVE-2026-111497+10 more Ivanti PHP Web platform
  3. 61
    ICS advisory CISA ICS

    Siemens RUGGEDCOM APE1808

    Palo Alto Networks has published information on a vulnerability in PAN-OS related to the Node2Shell vulnerability. This advisory lists the related Siemens Industrial products affected by this vulnerability. Customers are advised…

    EPSS 0.83 CVE-2026-111497 Palo Alto Networks Siemens Edge / VPN / firewall
  4. 61
    ICS advisory CISA ICS

    Siemens RUGGEDCOM APE1808

    Palo Alto Networks has published information on vulnerabilities in PAN-OS related to PHP2Shell vulnerabilities. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Customers are advised…

    EPSS 1.00 CVE-2026-109618CVE-2026-109619 Palo Alto Networks PHP Edge / VPN / firewall
  5. 53
    CISA alert CISA

    CISA Adds Two Known Exploited Vulnerabilities to Catalog

    CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-114713 UnrealIRCd Improper Neutralization of Delimiters Vulnerability…

    Exploited CVE-2026-114713CVE-2026-123039 Check Point
  6. 53
    ICS advisory CISA ICS

    Siemens Desigo, Gridscale

    On October 21, 2026, the Node.js project released security updates addressing a critical vulnerability in the Brotli decoder bundled with Node.js, commonly referred to as "Node2Shell" (tracked as CVE-2026-111497). The…

    EPSS 0.83 Fix available CVE-2026-111497 Node.js Siemens Developer platform
  7. 51
    Advisory MSRC

    Chromium CVE-2026-126868: Type confusion

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126868 Microsoft Google Browser
  8. 51
    Advisory MSRC

    Chromium CVE-2026-126869: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126869 Microsoft Google Browser
  9. 51
    Advisory MSRC

    Chromium CVE-2026-126864: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126864 Microsoft Google Browser
  10. 51
    Advisory MSRC

    Chromium CVE-2026-126865: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126865 Microsoft Google Browser
  11. 51
    Advisory MSRC

    Chromium CVE-2026-126879: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126879 Microsoft Google Browser
  12. 51
    Advisory MSRC

    Chromium CVE-2026-126889: Off-by-one error

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126889 Microsoft Google Browser
  13. 51
    Advisory MSRC

    Chromium CVE-2026-126866: Incorrect authorization

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126866 Microsoft Google Browser
  14. 51
    Advisory MSRC

    Chromium CVE-2026-126878: Information leak

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126878 Microsoft Google Browser
  15. 51
    Advisory MSRC

    Chromium CVE-2026-126886: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126886 Microsoft Google Browser
  16. 51
    Advisory MSRC

    Chromium CVE-2026-126887: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126887 Microsoft Google Browser
  17. 51
    Advisory MSRC

    Chromium CVE-2026-126876: Integer overflow

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126876 Microsoft Google Browser
  18. 51
    Advisory MSRC

    Chromium CVE-2026-126884: Out of bounds read

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126884 Microsoft Google Browser
  19. 51
    Advisory MSRC

    Chromium CVE-2026-126875: Missing authorization

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126875 Microsoft Google Browser
  20. 51
    Advisory MSRC

    Chromium CVE-2026-126885: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126885 Microsoft Google Browser
  21. 51
    Advisory MSRC

    Chromium CVE-2026-126874: Type confusion

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126874 Microsoft Google Browser
  22. 51
    Advisory MSRC

    Chromium CVE-2026-126863: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126863 Microsoft Google Browser
  23. 51
    Advisory MSRC

    Chromium CVE-2026-126873: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126873 Microsoft Google Browser
  24. 51
    Advisory MSRC

    Chromium CVE-2026-126883: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126883 Microsoft Google Browser
  25. 51
    Advisory MSRC

    Chromium CVE-2026-126872: Incorrect authorization

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126872 Microsoft Google Browser
  26. 51
    Advisory MSRC

    Chromium CVE-2026-126880: Type confusion

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126880 Microsoft Google Browser
  27. 51
    Advisory MSRC

    Chromium CVE-2026-126871: Out of bounds read

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126871 Microsoft Google Browser
  28. 51
    Advisory MSRC

    Chromium CVE-2026-126881: Improper initialization

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126881 Microsoft Google Browser
  29. 51
    Advisory MSRC

    Chromium CVE-2026-126870: Uninitialized resource

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126870 Microsoft Google Browser
  30. 51
    Advisory MSRC

    Chromium CVE-2026-126843: Type confusion

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126843 Microsoft Google Browser
  31. 51
    Advisory MSRC

    Chromium CVE-2026-126907: Uninitialized resource

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126907 Microsoft Google Browser
  32. 51
    Advisory MSRC

    Chromium CVE-2026-126840: Out of bounds write

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126840 Microsoft Google Browser
  33. 51
    Advisory MSRC

    Chromium CVE-2026-126841: Out of bounds read

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126841 Microsoft Google Browser
  34. 51
    Advisory MSRC

    Chromium CVE-2026-126854: Incorrect authorization

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126854 Microsoft Google Browser
  35. 51
    Advisory MSRC

    Chromium CVE-2026-125344: Type confusion

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-125344 Microsoft Google Browser
  36. 51
    Advisory MSRC

    Chromium CVE-2026-126847: Type confusion

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126847 Microsoft Google Browser
  37. 51
    Advisory MSRC

    Chromium CVE-2026-126857: Out of bounds read

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126857 Microsoft Google Browser
  38. 51
    Advisory MSRC

    Chromium CVE-2026-126903: Improper state validation

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126903 Microsoft Google Browser
  39. 51
    Advisory MSRC

    Chromium CVE-2026-126844: Uninitialized resource

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126844 Microsoft Google Browser
  40. 51
    Advisory MSRC

    Chromium CVE-2026-126856: Incomplete cleanup

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126856 Microsoft Google Browser
  41. 51
    Advisory MSRC

    Chromium CVE-2026-126845: Uninitialized resource

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126845 Microsoft Google Browser
  42. 51
    Advisory MSRC

    Chromium CVE-2026-126851: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126851 Microsoft Google Browser
  43. 51
    Advisory MSRC

    Chromium CVE-2026-126901: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126901 Microsoft Google Browser
  44. 51
    Advisory MSRC

    Chromium CVE-2026-126900: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126900 Microsoft Google Browser
  45. 51
    Advisory MSRC

    Chromium CVE-2026-126853: Uninitialized resource

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126853 Microsoft Google Browser
  46. 51
    Advisory MSRC

    Chromium CVE-2026-126848: Uninitialized resource

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126848 Microsoft Google Browser
  47. 51
    Advisory MSRC

    Chromium CVE-2026-126852: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126852 Microsoft Google Browser
  48. 51
    Advisory MSRC

    Chromium CVE-2026-125342: Uninitialized resource

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-125342 Microsoft Google Browser
  49. 51
    Advisory MSRC

    Chromium CVE-2026-126849: Type confusion

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126849 Microsoft Google Browser
  50. 51
    Advisory MSRC

    Chromium CVE-2026-126859: Link following

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126859 Microsoft Google Browser
  51. 51
    Advisory MSRC

    Chromium CVE-2026-126858: Uninitialized resource

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126858 Microsoft Google Browser
  52. 51
    Advisory MSRC

    Chromium CVE-2026-125348: Out of bounds write

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-125348 Microsoft Google Browser
  53. 51
    Advisory MSRC

    Chromium CVE-2026-126919: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126919 Microsoft Google Browser
  54. 51
    Advisory MSRC

    Chromium CVE-2026-126891: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126891 Microsoft Google Browser
  55. 51
    Advisory MSRC

    Chromium CVE-2026-126916: Integer overflow

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126916 Microsoft Google Browser
  56. 51
    Advisory MSRC

    Chromium CVE-2026-126910: Type confusion

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126910 Microsoft Google Browser
  57. 51
    Advisory MSRC

    Chromium CVE-2026-126895: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126895 Microsoft Google Browser
  58. 51
    Advisory MSRC

    Chromium CVE-2026-126911: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126911 Microsoft Google Browser
  59. 51
    Advisory MSRC

    Chromium CVE-2026-126912: Buffer overflow

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126912 Microsoft Google Browser
  60. 51
    Advisory MSRC

    Chromium CVE-2026-126896: Missing authorization

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126896 Microsoft Google Browser
  61. 51
    Advisory MSRC

    Chromium CVE-2026-126898: Uninitialized resource

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126898 Microsoft Google Browser
  62. 49
    CISA alert CISA

    CISA Adds Six Known Exploited Vulnerabilities to Catalog

    CISA has added six new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-20320 Cisco BroadWorks Improper Restriction of XML External Entity Reference…

    Exploited CVE-2026-20320CVE-2026-111560CVE-2026-111793+3 more Cisco Barracuda
  63. 48
    ICS advisory CISA ICS

    Siemens Building Automation and Energy Products

    On October 21, 2026, the PHP project and security researchers disclosed two critical, unauthenticated remote code execution vulnerabilities in the core PHP language runtime known as "php2shell" (tracked as CVE-2026-109618 and…

    EPSS 1.00 No fix yet CVE-2026-109618CVE-2026-109619 PHP Siemens Web platform
  64. 48
    ICS advisory CISA ICS

    Siemens Industrial Edge Management

    Siemens is currently assessing the impact of Node2Shell (CVE-2026-111497) on Industrial Edge. Please check your Industrial Edge Management (IEM) setup: - No Management Applications installed: No action is required. Although the…

    EPSS 0.83 No fix yet CVE-2026-111497 Siemens OT / ICS
  65. 47
    Advisory MSRC

    Remote Desktop Services Remote Code Execution Vulnerability

    Updated an acknowledgement. This is an informational change only.

    CVE-2026-108401 Microsoft Remote access
  66. 47
    Advisory MSRC

    Windows NTLM Spoofing Vulnerability

    Added Microsoft Office software to the Security Updates table. Customers that are running supported version of Microsoft Office are encouraged to update to the indicated version to be protected from this vulnerability.

    CVE-2026-121680 Microsoft Collaboration
  67. 46
    Advisory MSRC

    Microsoft Windows Codecs Library Remote Code Execution Vulnerability

    Added Microsoft Office software to the Security Updates table. Customers that are running supported version of Microsoft Office are encouraged to update to the indicated version to be protected from this vulnerability.

    CVE-2026-113749 Microsoft Operating system
  68. 46
    Advisory MSRC

    Windows Kernel Elevation of Privilege Vulnerability

    Updated an acknowledgement. This is an informational change only.

    CVE-2026-109473 Microsoft Operating system
  69. 46
    Advisory Fortinet PSIRT

    Authentication bypass by primary weakness

    CVSSv3 Score: 9.3 An Authentication Bypass by Primary Weakness vulnerability [cwe-305] in FortiOS and FortiSASE ospf daemon may allow an unauthenticated attacker to broadcast LSA via specially crafted request Revised on…

    CVSS 9.3 Fortinet Edge / VPN / firewall
  70. 46
    Advisory Fortinet PSIRT

    Incorrect authorization

    CVSSv3 Score: 9.1 An Incorrect Authorization vulnerability [CWE-863] in FortiAuthenticator may allow an attacker to bypass authentication and gain unauthorized access. Revised on 2026-11-10 00:00:00

    CVSS 9.1 Fortinet Identity
  71. 46
    Advisory Fortinet PSIRT

    Authorization bypass through user-controlled key

    CVSSv3 Score: 9.1 An Authorization Bypass Through User-Controlled Key vulnerability [CWE-639] in FortiMail may allow an unauthenticated remote attacker to take over an arbitrary IBE recipient account via crafted HTTP requests.…

    CVSS 9.1 Fortinet Email
  72. 46
    Advisory Fortinet PSIRT

    Authentication bypass

    CVSSv3 Score: 9.0 A Use of Hard-coded Password [CWE-259] vulnerability in FortiAuthenticator may allow an unauthenticated attacker to bypass credential validation in certain circumstances outside of the attacker's control and…

    CVSS 9.0 Fortinet Identity
  73. 46
    Advisory Fortinet PSIRT

    Numeric truncation error

    CVSSv3 Score: 9.6 A Numeric Truncation Error vulnerability [cwe-197] in FortiOS and FortiSASE bgp daemon may allow a configured ibgp neighbor to send malicious/malformed attributes to all connected routers via a specially crafted…

    CVSS 9.6 Fortinet Edge / VPN / firewall
  74. 46
    Advisory Fortinet PSIRT

    Incorrect authorization

    CVSSv3 Score: 9.1 An Incorrect Authorization vulnerability [CWE-863] in FortiMail may allow an unauthenticated remote attacker to obtain an authenticated IBE webmail session as any IBE recipient and read or send their encrypted…

    CVSS 9.1 Fortinet Email
  75. 46
    Advisory Fortinet PSIRT

    Improper neutralization of special elements used in an os command

    CVSSv3 Score: 9.8 An Improper neutralization of special elements used in a command ('command injection') [CWE-77] in FortiMail may allow an unauthenticated attacker to execute unauthorized code or commands via crafted HA…

    CVSS 9.8 Fortinet Email
  76. 46
    Advisory Fortinet PSIRT

    Improper limitation of a pathname to a restricted directory

    CVSSv3 Score: 9.8 An Improper limitation of a pathname to a restricted directory ('path traversal') vulnerability [CWE-22] in FortiMail may allow an unauthenticated attacker to execute unauthorized code or commands via crafted…

    CVSS 9.8 Fortinet Email
  77. 46
    Advisory Fortinet PSIRT

    Improper neutralization of special elements used in an SQL command

    CVSSv3 Score: 9.4 An Improper neutralization of special elements used in an SQL command ('SQL injection') [CWE-89] in FortiMail may allow an unauthenticated attacker to execute unauthorized code or commands via crafted requests.…

    CVSS 9.4 Fortinet Email
  78. 45
    Advisory MSRC

    Chromium CVE-2026-126888: Buffer overflow

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126888 Microsoft Google Browser
  79. 45
    Advisory MSRC

    Chromium CVE-2026-126921: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126921 Microsoft Google Browser
  80. 45
    Advisory MSRC

    Chromium CVE-2026-126920: Information leak

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126920 Microsoft Google Browser
  81. 45
    Advisory MSRC

    Chromium CVE-2026-126922: Out of bounds read

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126922 Microsoft Google Browser
  82. 45
    Advisory MSRC

    Chromium CVE-2026-126908: Type confusion

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126908 Microsoft Google Browser
  83. 45
    Advisory MSRC

    Chromium CVE-2026-126906: Race condition

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126906 Microsoft Google Browser
  84. 45
    Advisory MSRC

    Chromium CVE-2026-126905: Incomplete cleanup

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126905 Microsoft Google Browser
  85. 45
    Advisory MSRC

    Chromium CVE-2026-126902: Incorrect reference resolution

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126902 Microsoft Google Browser
  86. 45
    Advisory MSRC

    Chromium CVE-2026-126918: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126918 Microsoft Google Browser
  87. 45
    Advisory MSRC

    Chromium CVE-2026-126914: Uninitialized resource

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126914 Microsoft Google Browser
  88. 45
    Advisory MSRC

    Chromium CVE-2026-126893: Out of bounds write

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126893 Microsoft Google Browser
  89. 45
    Advisory MSRC

    Chromium CVE-2026-126917: Memory corruption

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126917 Microsoft Google Browser
  90. 45
    Advisory MSRC

    Chromium CVE-2026-126892: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126892 Microsoft Google Browser
  91. 45
    Advisory MSRC

    Chromium CVE-2026-126894: Out of bounds read

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126894 Microsoft Google Browser
  92. 45
    Advisory MSRC

    Chromium CVE-2026-126897: Type confusion

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126897 Microsoft Google Browser
  93. 45
    Advisory MSRC

    Chromium CVE-2026-126913: Out of bounds read

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-126913 Microsoft Google Browser
  94. 40
    Advisory MSRC

    Windows Graphics Kernel Elevation of Privilege Vulnerability

    Added Microsoft Office software to the Security Updates table. Customers that are running supported version of Microsoft Office are encouraged to update to the indicated version to be protected from this vulnerability.

    CVE-2026-95948 Microsoft Operating system
  95. 40
    Advisory MSRC

    Windows Print Spooler Components Elevation of Privilege Vulnerability

    Updated an acknowledgement. This is an informational change only.

    CVE-2026-112765 Microsoft Operating system
  96. 40
    Advisory MSRC

    Windows SMB Remote Code Execution Vulnerability

    Updated an acknowledgement. This is an informational change only.

    CVE-2026-119988 Microsoft Operating system
  97. 40
    Advisory MSRC

    Win32k Information Disclosure Vulnerability

    Added Microsoft Office software to the Security Updates table. Customers that are running supported version of Microsoft Office are encouraged to update to the indicated version to be protected from this vulnerability.

    CVE-2026-119856 Microsoft Operating system
  98. 40
    Advisory MSRC

    Windows Graphics Kernel Information Disclosure Vulnerability

    Added Microsoft Office software to the Security Updates table. Customers that are running supported version of Microsoft Office are encouraged to update to the indicated version to be protected from this vulnerability.

    CVE-2026-88217 Microsoft Operating system
  99. 40
    Advisory MSRC

    Windows Graphics Kernel Elevation of Privilege Vulnerability

    Added Microsoft Office software to the Security Updates table. Customers that are running supported version of Microsoft Office are encouraged to update to the indicated version to be protected from this vulnerability.

    CVE-2026-95932 Microsoft Operating system
  100. 40
    CCCS advisory CCCS

    N-able security advisory (AV26-1143)

    CVE-2026-125883 N-able Remote access

Reuse this view

Same filters as JSON: /api/items?category=advisory&window=7d&limit=100. RSS for this section: feed.xml.

Keyboard

j / k
Next / previous item
o or Enter
Open the original source
i
Open the item page
s
Save or unsave for later
/
Focus search
g then f v a r n s
Go to front, vulnerabilities, advisories, research, news, standards
t
Toggle theme
?
This help