KLA91133 SB vulnerability in Microsoft Browser

Security bypass vulnerability was found in Microsoft Browser. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories CVE-2026-58525 Exploitation CVE list CVE-2026-58525 critical Solution Install necessary updates from the Settings and more menu, that a...

djangogoboot (1.0.2), foodx-devops-tools (>=0.0.0.post65, <=0.12.0) +3 more potentially affected by CVE-2025-14010 via ansible (4.10.0)

ansible PYPI version 4.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - djangogoboot 1.0.2 - foodx-devops-tools =0.0.0.post65, =11.0.0.0rc1, =0.0.1, =0.3.0, =0.7.1 Source cves: CVE-2025-14010 Source advisory:...

GO-2026-5819 Authelia has an Edge Case Access Control Rule Mismatch in github.com/authelia/authelia

Authelia has an Edge Case Access Control Rule Mismatch in github.com/authelia/authelia...

djangogoboot (1.0.2), foodx-devops-tools (>=0.0.0.post65, <=0.12.0) +3 more potentially affected by CVE-2023-5115 via ansible (4.10.0)

ansible PYPI version 4.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - djangogoboot 1.0.2 - foodx-devops-tools =0.0.0.post65, =11.0.0.0rc1, =0.0.1, =0.3.0, =0.7.1 Source cves: CVE-2023-5115 Source advisory:...

TensorFlow vulnerable to assertion fail on MLIR empty edge names

ImpactWhen mlir::tfg::ConvertGenericFunctionToFunctionDef is given empty function attributes, it crashes.cpp// We pre-allocate the array of operands and populate it using the// outputnametoposition and controloutputtoposition populated// previously.SmallVector retvalsfunc.retsize +...

PT-2026-114569

Уязвимость набора инструментов для веб-разработки DevTools браузеров Google Chrome и Microsoft Edge связана с недостаточной проверкой вводимых данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить доступ к защищаемой информации с помощью специально созданной...

PT-2026-114570

Уязвимость набора инструментов для веб-разработки DevTools браузеров Google Chrome и Microsoft Edge связана с ошибками преобразования типов данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании с помощью специально созданной HTML-страницы...

CVE-2026-58296

creationtimestamp| type| source ---|---|--- 2026-07-06 07:50:22+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260706 2026-07-14 22:02:54+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15...

CVE-2026-58278

creationtimestamp| type| source ---|---|--- 2026-07-06 07:49:39+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260706 2026-07-14 22:02:52+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15...

CVE-2026-57993

creationtimestamp| type| source ---|---|--- 2026-07-06 07:49:32+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260706 2026-07-14 22:02:52+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15...

CVE-2026-57991

creationtimestamp| type| source ---|---|--- 2026-07-06 07:49:27+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260706 2026-07-14 22:02:44+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15...

CVE-2026-57988

creationtimestamp| type| source ---|---|--- 2026-07-06 07:49:24+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260706 2026-07-14 22:02:46+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15...

CVE-2026-57987

creationtimestamp| type| source ---|---|--- 2026-07-06 07:49:19+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260706 2026-07-14 22:02:51+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15...

CVE-2026-57977

creationtimestamp| type| source ---|---|--- 2026-07-06 07:49:04+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260706 2026-07-14 22:02:52+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15...

CVE-2026-56646

creationtimestamp| type| source ---|---|--- 2026-07-06 07:48:54+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260706 2026-07-14 22:02:52+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15...

CVE-2026-55945

creationtimestamp| type| source ---|---|--- 2026-07-06 07:48:49+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260706 2026-07-14 22:05:04+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15...

CVE-2026-45488

creationtimestamp| type| source ---|---|--- 2026-07-06 07:48:45+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260706 2026-07-14 22:05:04+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15...

A week in security (June 29 &#8211; July 5)

Last week on Malwarebytes Labs: Verified X ad spreads Mac malware, while ConsentFix steals Microsoft accounts Apple’s Hide My Email doesn’t hide it very well Fake Google and Cloudflare verification pages spread multiple malware families WinRAR flaw could allow attackers to take control of your...

cross-origin Digest auth state leak

...

EUVD-2026-41653

Improper access control in Microsoft Edge for Android allows an unauthorized attacker to bypass a security feature over a network...