162972 matches found
Security Updates for Microsoft Office Online Server (September 2026)
The Microsoft Office Online Server or Office Web Apps installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. CVE-2026-81947...
Security Updates for Microsoft Access Products C2R (September 2026)
The Microsoft Access Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. CVE-2026-69529, CVE-2026-69778 - Stack-based buffer overflow ...
ROS-20260910-73-0097
The vulnerability of the Network component in Google Chrome and Microsoft Edge is related to a lack of data security mechanisms. Exploiting this vulnerability allows an attacker to compromise data integrity through a specially created HTML page...
ROS-20260910-73-0033
The vulnerability of the Glic component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
Security Updates for Microsoft Publisher Products C2R (September 2026)
The Microsoft Publisher Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Integer overflow or wraparound in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network. CVE-2026-69742 - Deserialization of untrusted data ...
ROS-20260910-73-1153
The vulnerability of the Paint component in Google Chrome and Microsoft Edge relates to the user interfaceās false representation of critical information. Exploiting this vulnerability allows a remote attacker to compromise data integrity through a specially created HTML page...
Chromium: CVE-2026-85046 Type confusion in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Google is aware that an exploit for CVE-2026-85046 exists in the wild...
Threat matrix: Mapping threats across cloud web applications
In this article 1. Overview 2. Technique Catalog 3. Privilege Escalation 4. Mitigation and protection guidance 5. References 6. Learn more Microsoft introduces the cloud web applications threat matrix, a MITRE ATT &CK-aligned framework that helps defenders understand, prioritize, and mitigate...
Passkey-themed social engineering leads to identity and cloud compromise
In this article 1. Attack chain overview 2. Attribution 3. Mitigation and protection guidance 4. Learn more Microsoft Security Research is tracking active cloud-based intrusions spanning multiple accounts in which unusual sign-ins were followed by threat actor-added authentication methods,...
Passkey-themed social engineering leads to identity and cloud compromise
In this article 1. Attack chain overview 2. Attribution 3. Mitigation and protection guidance 4. Learn more Microsoft Security Research is tracking active cloud-based intrusions spanning multiple accounts in which unusual sign-ins were followed by threat actor-added authentication methods,...
Microsoft fixes record 964 flaws, including 2 exploited zero-days
Microsoftās September 2026 Patch Tuesday addresses 964 CVEs, including 104 rated Critical and 860 rated Important, making it the companyās largest Patch Tuesday release on record. Microsoft lists 974 CVEs in its full September security release. However, 10 of those affect cloud services or involv...
Vulnerabilities in Microsoft Windows
Microsoft has identified 666 vulnerabilities in Windows. Malicious actors can exploit these vulnerabilities to carry out attacks that can cause various types of damage, as listed in the table below. Microsoft has identified 666 vulnerabilities in Windows. The 32 most severe vulnerabilities are...
September Microsoft Patch Tuesday
September Microsoft Patch Tuesday. A total of 973 vulnerabilities were addressed - more than twice as many as in August. Seven products had 20 or more vulnerabilities fixed: Windows Biometric Service 64, Microsoft SQL Server 54, Windows DHCP Server 36, Microsoft Office Word 35, Windows NTFS 29,...
Researcher Drops New Microsoft Defender PoC Showing ShieldBreak Patch Can Be Bypassed
The security researcher known as Chaotic Eclipse has dropped a proof-of-concept PoC for yet another zero-day in Microsoft Defender. The vulnerability, codenamed ShieldCrash , is assessed to be a patch bypass for CVE-2026-69414 CVSS score: 7.8, also called ShieldBreak, which the researcher reporte...
Microsoft Patches Record 974 Flaws, Including Two Exploited Windows Zero-Days
Microsoft on Tuesday broke Patch Tuesday records by addressing an earth-shattering 974 vulnerabilities spanning its software portfolio, including two flaws that it said have been actively exploited in the wild. These include 723 flaws in Windows, 111 in Office and Office 2016, 62 in SQL, and 22 i...
Exploit for Improper Authorization in Microsoft
certighost-oneclick CVE-2026-54121 Certighost ā One-Click...
ROS-20260909-73-0111
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...
ROS-20260909-73-0151
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge relates to reading data beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to access confidential data through a specially created HTML page...
ROS-20260909-73-0122
The vulnerability of the PDFium component in Google Chrome and Microsoft Edge relates to the false representation of critical information to the user interface. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created PDF file...
ROS-20260909-73-0160
The vulnerability of the CSS component in Google Chrome and Microsoft Edge is related to type conversion errors. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...