CVE-2026-55946: Improper Neutralization of Special Elements used in a Command

Ai command injection in Microsoft Copilot allows an unauthorized attacker to disclose information over a network...

PT-2026-95172

Name of the Vulnerable Software and Affected Versions Microsoft 365 Copilot affected versions not specified Description Microsoft 365 Copilot's Business Chat contains a command injection flaw, which occurs when special elements used in a command are not properly neutralized. This allows an...

PT-2026-95181

Name of the Vulnerable Software and Affected Versions Microsoft Fabric affected versions not specified Description An authentication bypass by spoofing exists in Microsoft Fabric. This issue allows an unauthenticated remote attacker to provide crafted identity assertions that are accepted as...

Microsoft WebP Image Extension < 1.2.31.0 RCE (CVE-2026-70351) (September 2026)

The version of the Microsoft WebP Image Extension app installed on the remote Windows host is prior to 1.2.31.0. It is, therefore, affected by a remote code execution vulnerability: - Integer overflow or wraparound in Microsoft WebP Image Extension allows an unauthorized attacker to execute code...

Three Threat Groups Target Russian Enterprises With Backdoors, Ransomware, and Wipers

Enterprises in Russia have emerged as the target of three threat activity clusters tracked as NightEagle , Hacking Cat , and Toy Ghouls , according to multiple reports from Kaspersky. The cybersecurity vendor said it has identified attacks mounted by NightEagle aka APT-Q-95, a threat actor known ...

NightEagle targets Russian companies

Over the past year, our Global Emergency Response Team GERT has investigated several incidents involving the NightEagle group also tracked as APT-Q-95. This group has been active since at least 2023 and originally focused on organizations in Asia. We have now identified attacks by the group...

CVE-2026-77490

creationtimestamp| type| source ---|---|--- 2026-09-16 04:46:48+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260916...

CVE-2026-76019

creationtimestamp| type| source ---|---|--- 2026-09-16 04:46:37+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260916...

CVE-2026-76018

creationtimestamp| type| source ---|---|--- 2026-09-16 04:46:35+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260916...

Exploit for Heap-based Buffer Overflow in Microsoft

!Rulehttps://img.shields.io/badge/RULE-SOC335-00FF41?style=fo...

EUVD-2026-80050

Heap-based buffer overflow in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

EUVD-2026-80051

Use after free in Microsoft Edge Chromium-based allows an unauthorized attacker to elevate privileges over a network...

(0Day) Microsoft Windows HTTP Proxy Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of...

VulnCheck KEV: CVE-2026-32996

This vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation...

Security Updates for Microsoft Office Products (September 2026) (macOS)

The version of Microsoft Office for Mac installed on the remote host is affected by multiple vulnerabilities as referenced in the september-16-2026 advisory. - Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. CVE-2026-69678,...

CVE-2026-85893

Use after free in Microsoft Edge Chromium-based allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-69486

Heap-based buffer overflow in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

CVE-2026-85893

Microsoft Edge (Chromium-based) contains a use-after-free vulnerability that allows an unauthorized attacker to achieve elevation of privileges over a network. The CVSS 3.1 base score is 8.8 (High) , with an attack vector of network, low complexity, no required privileges, but user interaction is...

CVE-2026-69486

CVE-2026-69486 is a heap-based buffer overflow in Microsoft Edge (Chromium-based) that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.8 (HIGH) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating that exploitation requires user inte...

CVE-2026-92237

Insertion of sensitive information into log file in the slow query logging feature in Devolutions PowerShell Universal 2026.2.5 and earlier allows an authenticated user with log read permission to obtain application tokens, data protection key material and other stored credentials via SQL paramet...