M
CVE-2026-55129 Microsoft Office Remote Code Execution Vulnerability
Acknowledgement Updated
M
CVE-2026-66803 Azure Cosmos DB Remote Code Execution Vulnerability
Improper access control in Azure Cosmos DB allows an unauthorized attacker to execute code over a network.
M
CVE-2026-24304 Azure Cosmos DB Remote Code Execution Vulnerability
Improper access control in Azure Cosmos DB allows an unauthorized attacker to execute code over a network.
M
CVE-2026-54128 Windows DHCP Client Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only.
M
CVE-2026-56197 Windows Admin Center (WAC) Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only.
M
Chromium: CVE-2026-13037 Use after free in WebView
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
M
Chromium: CVE-2026-13032 Use after free in WebGL
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
M
Chromium: CVE-2026-13030 Uninitialized Use in GPU
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
M
Chromium: CVE-2026-13028 Use after free in WebGL
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
M
CVE-2026-47301 Configuration Manager Elevation of Privilege Vulnerability
Corrected Build Number in the Security Updates table. This is an informational change only.
M
CVE-2026-50422 Windows NTFS Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only.
M
CVE-2026-59117 Windows Terminal Remote Code Execution Vulnerability
Change the name of the affected software from **Microsoft Power Apps** to **Microsoft Power Apps Desktop Client**. This is an informational change only.
M
CVE-2026-50343 Microsoft Install Service Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only.
M
CVE-2026-50333 Windows Spaceport.sys Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only.
M
CVE-2026-56159 DHCP Server Service Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only.
M
CVE-2026-50697 Windows Common Log File System Driver Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only.
M
M
M
CVE-2026-64530 net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle
Information published.
M
CVE-2024-14040 net: nexthop: Increase weight to u16
Information published.
M
CVE-2026-16277 Rpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbaddrlist()
Information published.
M
Chromium: CVE-2026-16807 Out of bounds write in Codecs
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
M
Chromium: CVE-2026-16806 Use after free in WebMCP
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
M
Chromium: CVE-2026-16805 Use after free in Blink
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
M
Chromium: CVE-2026-16804 Use after free in Input
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
M
CVE-2026-48561 Microsoft Edge Copilot Remote Code Execution Vulnerability
Corrected the CVE description and title. This is an informational change only.
M
CVE-2026-64600 xfs: resample the data fork mapping after cycling ILOCK
Information published.
M
CVE-2026-59677 Process Kill Attack Vector in killall() in seunshare
Information published.
M
CVE-2026-59676 Local File Deletion Attack Vector in rm_rf() in seunshare
Information published.
M
CVE-2026-62835 Online Services Information Disclosure Vulnerability
Improper authorization in Online Services allows an unauthorized attacker to disclose information over a network.