Log in
CVE-2026-50422 Windows NTFS Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only.
Lees weergave
CVE-2026-56159 DHCP Server Service Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-50697 Windows Common Log File System Driver Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-50343 Microsoft Install Service Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-50333 Windows Spaceport.sys Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-64530 net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle
Information published.
CVE-2024-14040 net: nexthop: Increase weight to u16
Information published.
Chromium: CVE-2026-16807 Out of bounds write in Codecs
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium: CVE-2026-16806 Use after free in WebMCP
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium: CVE-2026-16805 Use after free in Blink
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium: CVE-2026-16804 Use after free in Input
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
CVE-2026-48561 Microsoft Edge Copilot Remote Code Execution Vulnerability
Corrected the CVE description and title. This is an informational change only.
CVE-2026-62835 Azure Portal Information Disclosure Vulnerability
Corrected the CVE description and title. This is an informational change only.
CVE-2026-64600 xfs: resample the data fork mapping after cycling ILOCK
Information published.
CVE-2026-59677 Process Kill Attack Vector in killall() in seunshare
Information published.
CVE-2026-59676 Local File Deletion Attack Vector in rm_rf() in seunshare
Information published.
CVE-2026-56167 Azure AI Search Elevation of Privilege Vulnerability
Server-side request forgery (ssrf) in Azure AI Search allows an authorized attacker to elevate privileges over a network.
CVE-2026-56163 Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability
Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-56165 Microsoft Account Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Account allows an unauthorized attacker to execute code over a network.
CVE-2026-54120 Microsoft Surface Remote Code Execution Vulnerability
Improper input validation in Microsoft Surface allows an authorized attacker to execute code over a network.
CVE-2026-56160 Azure Red Hat OpenShift (ARO) Elevation of Privilege Vulnerability
Improper authorization in Azure Red Hat OpenShift (ARO) allows an authorized attacker to elevate privileges over a network.
CVE-2026-35425 Azure API Management (APIM) Remote Code Execution Vulnerability
Improper access control in Azure API Management (APIM) allows an authorized attacker to execute code over a network.
CVE-2026-49159 Microsoft Graph Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose information over a network.
CVE-2026-50517 Microsoft M365 Copilot Remote Code Execution Vulnerability
Deserialization of untrusted data in M365 Copilot allows an authorized attacker to execute code over a network.
CVE-2026-56191 Microsoft Exchange Online Tampering Vulnerability
Improper authentication in Microsoft Exchange Online allows an unauthorized attacker to perform tampering over a network.
CVE-2026-57106 Data Quality Elevation of Privilege Vulnerability
Server-side request forgery (ssrf) in Data Quality allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-62825 Azure Key Vault Elevation of Privilege Vulnerability
Improper authentication in Azure Key Vault allows an unauthorized attacker to elevate privileges over a network.
