PT-2026-60451

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified AWS Cognito affected versions not specified Microsoft Entra ID affected versions not specified Description One issue exists in the Linux kernel where the ECSPI is incorrectly configured when a DMA...

ROS-20260716-73-0060

The vulnerability of Microsoft Edge and Google Chrome is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to compromise data integrity through a specially created HTML page...

KLA91157 Multiple vulnerability in Microsoft Apps

Multiple vulnerability was found in Microsoft Apps. Malicious users can exploit this vulnerability to bypass security restrictions, execute arbitrary code. Original advisories CVE-2026-59117 Exploitation CVE list CVE-2026-59117 critical KB list Solution Install necessary updates from the KB...

PT-2026-60489

Name of the Vulnerable Software and Affected Versions Kiota versions prior to 1.32.5 Description Kiota is an OpenAPI based HTTP Client code generator. The kiota plugin add and kiota plugin generate using the -t APIPlugin flag functions fail to validate paths in static template.file values sourced...

KLA91158 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability...

KLA91159 PE vulnerability in Microsoft Products (ESU)

Privilege escalation vulnerability was found in Microsoft Products ESU. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2026-58598 Exploitation CVE list CVE-2026-58598 high KB list 5099539 Solution Install necessary updates from the KB section, that are...

Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

Microsoft SharePoint contains a deserialization of untrusted data vulnerability that allows an unauthorized attacker to execute code over a network...

EUVD-2026-44709

Microsoft AVML before 0.17.0 could follow a symlink when opening a destination output path on Unix, allowing truncation/overwrite of the symlink target. The destructive effect is performed at open-time via OTRUNC, and can happen before full input validation completes “truncation-before-validation...

July 2026 Patch Tuesday fixes 622 Microsoft CVEs, including three zero-days

Just one month ago, June 2026 Patch Tuesday broke Microsoft’s previous record with 206 CVEs and three zero‑days. July now triples that count, reinforcing that the era of “small” Patch Tuesdays may be over as AI‑driven vulnerability discovery ramps up. The update includes 59 critical...

Perl versions through 5.43.10 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpack

...

Microsoft Office Out-of-Bounds Reading Vulnerability (CNVD-2026-31555)

Microsoft Office is a suite of office software that provides functions such as document processing, spreadsheet calculations, and presentation creation. Microsoft Office has a out-of-bounds read vulnerability, which stems from an inability to properly validate memory boundaries, resulting in...

CVE-2026-61371

Microsoft AVML before 0.17.0 is affected. On Unix, it could follow a symlink when opening a destination output path, allowing truncation/overwrite of the symlink target at open-time via O_TRUNC and potentially before full input validation. This is described as a truncation-before-validation issue...

Microsoft Office Out-of-Bounds Reading Vulnerability (CNVD-2026-31556)

Microsoft Office is a suite of office software that provides features such as document processing, spreadsheet calculations, presentation creation, and collaboration. Microsoft Office has a out-of-bounds read vulnerability, which stems from the program’s failure to properly validate memory...

Microsoft Office buffer overflow vulnerability (CNVD-2026-31554)

Microsoft Office is a suite of office software that primarily provides features for document editing, spreadsheet processing, presentation creation, and enterprise collaboration. There is a buffer overflow vulnerability in Microsoft Office. This vulnerability stems from an improper validation of...

Microsoft Excel heap buffer overflow vulnerability (CNVD-2026-31553)

Microsoft Excel is a spreadsheet processing component within the Microsoft Office suite, primarily used for data calculation, analysis, and visualization. Microsoft Excel has a heap buffer overflow vulnerability, which stems from improper handling of certain data, leading to out-of-bound writes t...

Microsoft Word resource management error vulnerability (CNVD-2026-31550)

Microsoft Office Word is a word processing software within the Microsoft Office suite, widely used for document editing and formatting. There is a resource management vulnerability in Microsoft Office Word; this vulnerability stems from objects not being properly handled after being released...

Microsoft and Adobe Patch Tuesday, July 2026 Security Update Review

Microsoft's July 2026 Patch Tuesday delivers security updates for a broad range of products and services, including several vulnerabilities that pose significant risks to enterprise environments. As attackers continue to target unpatched systems, the timely deployment of these updates remains one...

CVE-2026-47301

Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network...

CVE-2026-49170

creationtimestamp| type| source ---|---|--- 2026-07-14 19:01:55+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231 2026-07-14 22:04:51+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15 01:01:35+00:00| seen|...

CVE-2026-57091

creationtimestamp| type| source ---|---|--- 2026-07-14 19:01:55+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231 2026-07-14 22:03:53+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15 01:01:35+00:00| seen|...