Chromium: CVE-2026-7975 Use after free in DevTools

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-7959 Inappropriate implementation in Navigation

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-7967 Insufficient validation of untrusted input in Navigation

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Apache HTTP Server: mod_auth_digest timing attack

...

SUSE CVE-2026-43094

In the Linux kernel, the following vulnerability has been resolved: ixgbevf: add missing negotiatefeatures op to Hyper-V ops table Commit a7075f501bd3 "ixgbevf: fix mailbox API compatibility by negotiating supported features" added the .negotiatefeatures callback to ixgbemacoperations and populat...

Open Redirect

Overview microsoft-kiota-http is a python HTTP implementation with HTTPX library. Affected versions of this package are vulnerable to Open Redirect in the RedirectHandler function. An attacker can obtain sensitive information such as session cookies, proxy credentials, and API keys by inducing a...

PT-2026-38579

Name of the Vulnerable Software and Affected Versions Microsoft Teams affected versions not specified Description Improper authorization in Microsoft Teams allows an authorized attacker to disclose information over a network. Recommendations At the moment, there is no information about a newer...

Microsoft 365 Copilot BizChat 注入漏洞

Microsoft 365 Copilot BizChat is an AI chat software developed by Microsoft Corporation. There is a vulnerability in Microsoft 365 Copilot BizChat, which stems from improper neutralization of special elements in the output of downstream components. This vulnerability could allow unauthorized...

Microsoft Teams 授权问题漏洞

Microsoft Teams is a software product developed by the American company Microsoft, used for online meetings, chatting, and cloud storage functions. There is an authorization issue vulnerability in Microsoft Teams. This vulnerability stems from improper authorization procedures, which may allow...

PT-2026-38583

Name of the Vulnerable Software and Affected Versions Azure AI Foundry M365 published agents affected versions not specified Description Improper access control in Azure AI Foundry M365 published agents allows an unauthorized attacker to elevate privileges over a network. Recommendations At the...

Microsoft Partner Center 安全漏洞

The Microsoft Partner Center is an online platform operated by Microsoft Corporation in the United States. There is a security vulnerability in the Microsoft Partner Center, which stems from cross-domain resource references controlled by external parties. This vulnerability could allow unauthoriz...

Microsoft Copilot Chat 命令注入漏洞

Microsoft Copilot Chat is an intelligent dialogue assistant feature integrated into the browser by Microsoft Corporation. Microsoft Copilot Chat has a command injection vulnerability, which stems from improper neutralization of special elements within commands. This vulnerability could allow...

PT-2026-38574

Name of the Vulnerable Software and Affected Versions M365 Copilot affected versions not specified Description Improper neutralization of special elements in Copilot Business Chat allows an unauthorized attacker to disclose information over a network. Recommendations At the moment, there is no...

KLA91028 OSI vulnerability in Microsoft Developer Tools

An information disclosure vulnerability was found in Microsoft Developer Tools. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories CVE-2026-42826 Exploitation Related products Microsoft-Azure CVE list CVE-2026-42826 critical Solution Install...

KLA91033 PE vulnerability in Microsoft Dynamics

An elevation of privilege vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2026-33821 Exploitation Related products Microsoft-Dynamics-365 Microsoft-365 CVE list CVE-2026-33821 critical KB list Solution Insta...

KLA91030 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, bypass security restrictions, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Azur...

Microsoft 365 Copilot Business Chat 安全漏洞

Microsoft 365 Copilot Business Chat is an AI chat software developed by Microsoft Corporation in the United States. There is a security vulnerability in Microsoft 365 Copilot Business Chat, which stems from improper neutralization of special elements. This vulnerability could allow unauthorized...

PT-2026-38578

Name of the Vulnerable Software and Affected Versions Microsoft Edge Copilot Chat affected versions not specified Description Improper neutralization of special elements used in a command, known as command injection, allows an unauthorized attacker to disclose information over a network...

Microsoft Azure AI Foundry M365 published agents 访问控制错误漏洞

Microsoft Azure AI Foundry M365 Published Agents are a series of enterprise-level intelligent agents provided by the American company Microsoft. There is an access control vulnerability in Microsoft Azure AI Foundry M365 Published Agents. This vulnerability stems from improper access control, whi...

KLA91029 OSI vulnerability in Microsoft Office

An information disclosure vulnerability was found in Microsoft Office. Malicious users can exploit this vulnerability to obtain sensitive information, bypass security restrictions. Original advisories CVE-2026-33823 Exploitation Related products Microsoft-Teams-for-Desktop CVE list CVE-2026-33823...