Chromium CVE-2026-87482: Cleartext transmission of sensitive data in HttpsUpgrades

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-93387: Improper state validation in Skia

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-93383: Information leak in Permissions

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-93382: Use after free in PDFium

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-93381: Buffer overflow in PDFium

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-93379: Incorrect authorization in ORB

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-93378: Missing authorization in Storage

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-93375: Incorrect reference resolution in Tracing

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-93374: Use after free in Dawn

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Microsoft Windows dxgkrnl Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the dxgkrnl.sys...

Microsoft Edge (Chromium) < 154.0.4258.48 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 154.0.4258.48. It is, therefore, affected by multiple vulnerabilities as referenced in the September 30, 2026 advisory. - Missing authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a...

Hop-Decayed Influence: New Vulnerabilities of Structural Auxiliary Indexing in GraphRAG Pipelines with LLM

GraphRAG pipelines construct auxiliary structures during offline indexing--semantic summaries, hierarchical edges, and pre-computed scores--that determine how retrieval is prioritised at query time. Prior attacks target only instance-level components nodes, edges, triples, overlooking these...

Backup Logs Periodically Is Not Supported for More Than One Database Engine per Job Object (Veeam Agents and Plug-ins)

Challenge When saving Guest Processing settings for a Veeam Agents backup job with periodic transaction log backup enabled for more than one database engine Microsoft SQL Server, Oracle, or PostgreSQL on the same job object, the following error occurs: Concurrent transaction log backup is not...

...[ More ]

This Metasploit module exploits CVE-2000-0979, an information disclosure vulnerability in the share-level password authentication of Microsoft Windows 9x/Me SMB servers. The server validates passwords one character at a time, allowing an attacker to enumerate the correct password byte-by-byte bas...

​​Secure what’s next: Your guide to Microsoft Security at Microsoft Ignite 2026

In this article 1. Why you should attend Microsoft Ignite 2. Make the most of your time at Microsoft Ignite 3. Explore the Security sessions at Microsoft Ignite 2026 4. Build your schedule In the agentic era, the stakes are higher: AI agents now act with real access to your identities, your data,...

US-Focused CSuite Phishing Steals Microsoft 365 Sessions and Deploys RMM Tools for Remote Access

ANY.RUN researchers traced a US-focused CSuite phishing campaign across 351 sandbox analyses, with 51% of submissions coming from the United States. Technology, manufacturing, government, and consulting organizations showed the highest exposure. By combining Microsoft 365 session theft with...

China-nexus UAT-11587 targets government and policy organizations across Asia with Antino backdoor

Cisco Talos uncovered a cluster of activity we track as UAT-11587 targeting government and policy organizations across Asia, including in Taiwan, India, the Philippines, and Cambodia, to deliver a previously undocumented backdoor referred to as "Antino" in developer artifacts. Talos first observe...

CVE-2026-97955

A flaw was found in the Microsoft Azure Network Adapter MANA driver in the Linux kernel. A local user with network administrative privileges can cause a denial of service DoS or potentially execute arbitrary code due to a use-after-free vulnerability. When attaching an eXpress Data Path XDP progr...

The vulnerability of Microsoft Exchange Server’s mail server, related to insufficient validation of requests on the server side, allows attackers to increase their privileges.

The vulnerability of Microsoft Exchange Server is related to insufficient validation of requests on the server side. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

The vulnerability of Microsoft Word, Microsoft Office suites, and Microsoft 365 Apps for Enterprise lies in buffer overflows in dynamic memory, allowing attackers to execute arbitrary code.

The vulnerability of Microsoft Word, the Microsoft Office suite, and Microsoft 365 Apps for Enterprise is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...