Chromium CVE-2026-95374: Incorrect authorization in Network

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-95381: Improper input validation in Printing

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Security Bulletin: Multiple vulnerabilities in IBM Semeru affect IBM Sterling Connect:Direct for Microsoft Windows

Summary There are vulnerabilities in IBM Semeru Runtime version 17 used by IBM Sterling Connect:Direct for Microsoft Windows. IBM Sterling Connect:Direct for Microsoft Windows has addressed the applicable CVEs CVE-2026-61308, CVE-2026-70907, CVE-2026-60589, CVE-2026-16440 Vulnerability Details...

PT-2026-99080

Name of the Vulnerable Software and Affected Versions Zammad versions prior to 7.1.2 Description When creating or updating an email signature, the system processes inline images in the signature body. If an HTML img tag points to an existing attachment, the system copies that attachment into a ne...

PT-2026-99083

Name of the Vulnerable Software and Affected Versions Zammad versions prior to 7.1.2 Description When a Microsoft Graph request fails, the system logs the error including the authentication token used to access the mailbox. Although the system attempts to mask the token, the process is incomplete...

CVE-2026-100208: Integer Overflow or Wraparound

Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...

CVE-2026-84458: Improper Authentication

Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, when the "Automatic account link on initial logon" setting is enabled, Zammad binds an incoming third-party SSO identity to an existing local account by matching the email address the identity provider reports,...

CVE-2026-63208: Improper Encoding or Escaping of Output

Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, when a Microsoft Graph request fails, Zammad logs the error including the authentication token used to access the mailbox. The system attempts to hide this token in the log, but the masking is incomplete: for the...

KLA91322 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Security vulnerability can be...

KLA91307 ACE vulnerability in Microsoft Office

A remote code execution vulnerability was found in Microsoft Office. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2026-100208 Exploitation Related products Microsoft-Outlook CVE list CVE-2026-100208 unknown Solution Install necessary updates fr...

PT-2026-99098

Name of the Vulnerable Software and Affected Versions Microsoft Office Outlook affected versions not specified Description An integer overflow or wraparound occurs in Microsoft Office Outlook, which could allow an unauthorized attacker to execute code remotely over a network. This issue requires...

Microsoft SharePoint Code Injection Vulnerability

Microsoft SharePoint contains a code injection vulnerability which could allow an authorized attacker to execute code over a network...

Microsoft Password Reset Portal Can Leak Account Verification Details

LevelBlue found Microsoft’s password reset portal can reveal valid accounts, recovery methods and likely administrator accounts without user authentication...

​​​​​​​​What’s new in Microsoft Security: September 2026​​

AI agents are now running on employee devices, cloud platforms, and across developer workflows. Security teams need to see those agents, govern what they can reach, and contain them when something goes wrong. This month's updates help you discover and control local AI agents, extend Zero Trust to...

TeamFiltration Campaign Compromises Seven Microsoft 365 Accounts Using Default Passwords

Cybersecurity researchers have disclosed details of an active TeamFiltration campaign codenamed UNKCondorFiltration that has targeted over 5,700 accounts across 28 Microsoft 365 tenants. According to Proofpoint, the activity has primarily focused on Chilean retail and financial institutions. It...

EUVD-2026-85727

Microsoft Outlook Remote Code Execution Vulnerability...

[SECURITY] Fedora 45 Update: evolution-ews-3.62.0-1.fc45

This package allows Evolution to interact with Microsoft Exchange servers, versions 2007 and later, through its Exchange Web Services EWS interface...

VulnCheck KEV: CVE-2026-65660

Microsoft SharePoint contains a code injection vulnerability which could allow an authorized attacker to execute code over a network...

CVE-2026-70125

Microsoft Office Outlook Remote Code Execution Vulnerability...

CVE-2026-70125

A Remote Code Execution (RCE) vulnerability exists in Microsoft Office Outlook . An attacker could exploit this flaw to execute arbitrary code or commands on the vulnerable machine or process. Affected products include Microsoft 365 Apps for Enterprise (32-bit and 64-bit systems), Microsoft Offic...