Log in
CVE-2026-59134 Remote Desktop Client Remote Code Execution Vulnerability
Acknowledgement Updated
Lees weergave
CVE-2026-64899 Microsoft Office Information Disclosure Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-65775 Windows Win32k Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-65776 Windows Win32k Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-62823 Windows DHCP Server Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-62889 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-49177 Windows TCP/IP Information Disclosure Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-55134 Microsoft Word Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-50448 Windows NTFS Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-50344 Windows OLE Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-26174 Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-68821 Windows Package Manager Elevation of Privilege Vulnerability
Changes made to the security updates links and information. This is an informational change only.
CVE-2026-65813 Microsoft Exchange Server Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-70337 Microsoft PowerShell Remote Code Execution Vulnerability
Acknowledgement Updated
CVE-2026-70331 Microsoft Edge for iOS Spoofing Vulnerability
Improper neutralization of input used for llm prompting in Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-58616 Copilot Chat (Microsoft Edge) Information Disclosure Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Copilot Chat (Microsoft Edge) allows an authorized attacker to disclose information over a network.
CVE-2026-62904 Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Incorrect authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
CVE-2026-66323 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Improper neutralization of parameter/argument delimiters in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
CVE-2026-66324 Microsoft Edge (Chromium-based) Spoofing Vulnerability
External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-66798 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
CVE-2026-70341 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.
CVE-2026-72984 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
Chromium: CVE-2026-78891 Buffer overflow in WebRTC
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium: CVE-2026-78892 Incorrect authorization in Chromoting
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium: CVE-2026-78893 Information leak in QUIC
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium: CVE-2026-78894 Race condition in Payments
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium: CVE-2026-78895 Information leak in Paint
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium: CVE-2026-78896 Information leak in StorageAccessAPI
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium: CVE-2026-78897 Missing authorization in BrowserTag
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
