Log inCVE-2026-109461 Microsoft Authentication Library (MSAL) for Node.js Information Disclosure Vulnerability
16 Oktober 2026 om 16:00
Corrected fix build number. Informational change only.
Normale weergave
Ontvangen — 16 Oktober 2026
⏭
Microsoft Security
-
Microsoft Security
- CVE-2026-109461 Microsoft Authentication Library (MSAL) for Node.js Information Disclosure Vulnerability
-
- CVE-2026-108465 Windows Update Delivery Optimization Elevation of Privilege Vulnerability
CVE-2026-108465 Windows Update Delivery Optimization Elevation of Privilege Vulnerability
16 Oktober 2026 om 16:00
Updated an acknowledgement. This is an informational change only.
-
- CVE-2026-83831 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2026-83831 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
16 Oktober 2026 om 16:00
Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
-
- CVE-2026-85890 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2026-85890 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
16 Oktober 2026 om 16:00
Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
-
- CVE-2026-85897 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2026-85897 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
16 Oktober 2026 om 16:00
Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
-
- CVE-2026-85898 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2026-85898 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
16 Oktober 2026 om 16:00
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
-
- CVE-2026-96198 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2026-96198 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
16 Oktober 2026 om 16:00
Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
-
- CVE-2026-96199 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2026-96199 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
16 Oktober 2026 om 16:00
Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
Chromium CVE-2026-106287: Information loss
16 Oktober 2026 om 16:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium CVE-2026-106288: Missing authorization
16 Oktober 2026 om 16:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium CVE-2026-106289: Missing authorization
16 Oktober 2026 om 16:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium CVE-2026-106291: Use after free
16 Oktober 2026 om 16:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium CVE-2026-106292: Buffer overflow
16 Oktober 2026 om 16:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium CVE-2026-106412: Race condition
16 Oktober 2026 om 16:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium CVE-2026-106293: Type confusion
16 Oktober 2026 om 16:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium CVE-2026-106413: Race condition
16 Oktober 2026 om 16:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium CVE-2026-106294: Incomplete cleanup
16 Oktober 2026 om 16:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium CVE-2026-106415: Information leak
16 Oktober 2026 om 16:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium CVE-2026-106295: Incorrect authorization
16 Oktober 2026 om 16:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium CVE-2026-106416: Code injection
16 Oktober 2026 om 16:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium CVE-2026-106297: Incorrect authorization
16 Oktober 2026 om 16:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium CVE-2026-106417: Integer overflow
16 Oktober 2026 om 16:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium CVE-2026-106299: Improper input validation
16 Oktober 2026 om 16:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium CVE-2026-106418: Missing authorization
16 Oktober 2026 om 16:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium CVE-2026-106300: Race condition
16 Oktober 2026 om 16:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium CVE-2026-106420: Incorrect calculation
16 Oktober 2026 om 16:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium CVE-2026-106301: Confused deputy
16 Oktober 2026 om 16:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium CVE-2026-106421: Use after free
16 Oktober 2026 om 16:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium CVE-2026-106302: UI misrepresentation
16 Oktober 2026 om 16:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium CVE-2026-106422: Incorrect authorization
16 Oktober 2026 om 16:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
