146784 matches found
When checking the URL isn’t enough: a Device Code Phishing attack via a Microsoft website
One of the most common pieces of anti-phishing advice is to double-check the website's domain name before providing your credentials. Typically, a fraudulent domain stands out to the trained eye, differing from the official URL by at least a few characters. Recently, however, we encountered a...
CVE-2026-58296
creationtimestamp| type| source ---|---|--- 2026-07-06 07:50:22+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260706 2026-07-14 22:02:54+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15...
CVE-2026-58278
creationtimestamp| type| source ---|---|--- 2026-07-06 07:49:39+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260706 2026-07-14 22:02:52+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15...
CVE-2026-57993
creationtimestamp| type| source ---|---|--- 2026-07-06 07:49:32+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260706 2026-07-14 22:02:52+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15...
CVE-2026-57988
creationtimestamp| type| source ---|---|--- 2026-07-06 07:49:24+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260706 2026-07-14 22:02:46+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15...
CVE-2026-57987
creationtimestamp| type| source ---|---|--- 2026-07-06 07:49:19+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260706 2026-07-14 22:02:51+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15...
CVE-2026-57977
creationtimestamp| type| source ---|---|--- 2026-07-06 07:49:04+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260706 2026-07-14 22:02:52+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15...
CVE-2026-56646
creationtimestamp| type| source ---|---|--- 2026-07-06 07:48:54+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260706 2026-07-14 22:02:52+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15...
CVE-2026-55945
creationtimestamp| type| source ---|---|--- 2026-07-06 07:48:49+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260706 2026-07-14 22:05:04+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15...
CVE-2026-45488
creationtimestamp| type| source ---|---|--- 2026-07-06 07:48:45+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260706 2026-07-14 22:05:04+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15...
ipv6: account for fraggap on the paged allocation path
...
ext/openssl: Memory corruption in openssl_encrypt with AES-WRAP-PAD
...
password leak with netrc and user in URL
...
HTTP/2 stream-dependency tree UAF
...
wrong STARTTLS connection reuse
...
proto-default skips SSH verification
...
wrong reuse for different services
...
cross-origin Digest auth state leak
...