Log inCVE-2026-85921 Windows Secure Kernel Mode Elevation of Privilege Vulnerability
14 September 2026 om 16:00
Double free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
Normale weergave
Ontvangen — 14 September 2026
⏭
Microsoft Security
-
Microsoft Security
- CVE-2026-62721 Windows User-Mode Power Service (UMPS) Elevation of Privilege Vulnerability
CVE-2026-62721 Windows User-Mode Power Service (UMPS) Elevation of Privilege Vulnerability
14 September 2026 om 16:00
The CVE was updated with links to security updates for Windows 11, version 26H1, 25H2, and 24H2 to address a missed fix. Microsoft recommends installing these updates as soon as possible.
Ontvangen — 12 September 2026
⏭
Microsoft Security
Chromium CVE-2026-87491: Out of bounds write in V8
12 September 2026 om 06:56
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Google is aware that an exploit for CVE-2026-87491 exists in the wild.
-
- CVE-2026-85892 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2026-85892 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
11 September 2026 om 16:00
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges locally.
Ontvangen — 11 September 2026
⏭
Microsoft Security
Chromium CVE-2026-76023: Improper resource control in Linux Toolkit Theming
12 September 2026 om 03:02
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium CVE-2026-76022: Buffer overflow in Network
12 September 2026 om 03:01
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium CVE-2026-76021: Use after free in DOM
12 September 2026 om 03:01
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium CVE-2026-76019: Incorrect authorization in Workers
12 September 2026 om 03:01
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium CVE-2026-76018: Privilege elevation in Import
12 September 2026 om 03:01
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium CVE-2026-76017: Use after free in Chromoting
12 September 2026 om 03:01
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium CVE-2026-76039: Incorrect reference resolution in Core
12 September 2026 om 01:49
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium CVE-2026-76036: Buffer overflow in Dawn
12 September 2026 om 01:49
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium CVE-2026-85053: Improper resource exposure in CacheStorage
12 September 2026 om 01:49
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium CVE-2026-85052: Out of bounds read in CrashReporting
12 September 2026 om 01:49
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium CVE-2026-85051: Type confusion in Compositing
12 September 2026 om 01:49
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium CVE-2026-85049: Use after free in Skia
12 September 2026 om 01:49
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium CVE-2026-85048: Use after free in Compositing
12 September 2026 om 01:49
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium CVE-2026-85045: Race condition in V8
12 September 2026 om 01:49
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium CVE-2026-85043: Incomplete cleanup in Network
12 September 2026 om 01:49
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium CVE-2026-85042: Use after free in DevTools
12 September 2026 om 01:49
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium: CVE-2026-84333 Use after free in Dawn
11 September 2026 om 16:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium: CVE-2026-84330 UI misrepresentation in FullScreen
11 September 2026 om 16:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium: CVE-2026-84352 Use after free in WebGL
11 September 2026 om 16:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
CVE-2026-77490 Microsoft Edge (Chromium-based) Spoofing Vulnerability
11 September 2026 om 16:00
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-69461 Windows NTFS Remote Code Execution Vulnerability
11 September 2026 om 16:00
Updated an acknowledgement. This is an informational change only.
-
- CVE-2026-69468 Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability
CVE-2026-69468 Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability
11 September 2026 om 16:00
Updated an acknowledgement. This is an informational change only.
-
- CVE-2026-69732 Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability
CVE-2026-69732 Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability
11 September 2026 om 16:00
Updated an acknowledgement. This is an informational change only.
CVE-2026-69860 Windows Imaging Component Remote Code Execution Vulnerability
11 September 2026 om 16:00
Updated an acknowledgement. This is an informational change only.
CVE-2026-71336 Windows Work Folder Service Remote Code Execution Vulnerability
11 September 2026 om 16:00
Updated an acknowledgement. This is an informational change only.
CVE-2026-77499 Windows DHCP Server Denial of Service Vulnerability
11 September 2026 om 16:00
Updated an acknowledgement. This is an informational change only.
