Chromium CVE-2026-91717: Missing authorization

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releaseshttps://chromereleases.googleblog.com/2026 for more information...

Chromium CVE-2026-91716: Use after free

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releaseshttps://chromereleases.googleblog.com/2026 for more information...

Chromium CVE-2026-91715: Type confusion

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releaseshttps://chromereleases.googleblog.com/2026 for more information...

Chromium CVE-2026-91714: Observable discrepancy

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releaseshttps://chromereleases.googleblog.com/2026 for more information...

Chromium CVE-2026-91713: Missing authorization

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releaseshttps://chromereleases.googleblog.com/2026 for more information...

Chromium CVE-2026-91712: Race condition

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releaseshttps://chromereleases.googleblog.com/2026 for more information...

Chromium CVE-2026-91711: Out of bounds write

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releaseshttps://chromereleases.googleblog.com/2026 for more information...

Chromium CVE-2026-91710: Use after free

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releaseshttps://chromereleases.googleblog.com/2026 for more information...

Chromium CVE-2026-91709: Type confusion

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releaseshttps://chromereleases.googleblog.com/2026 for more information...

Chromium CVE-2026-91708: Race condition

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releaseshttps://chromereleases.googleblog.com/2026 for more information...

EUVD-2026-82598

Authentication bypass by spoofing in Microsoft Fabric allows an unauthorized attacker to elevate privileges over a network...

EUVD-2026-82584

Authorization bypass through user-controlled key in Microsoft Container Registry allows an unauthorized attacker to elevate privileges over a network...

EUVD-2026-82590

Improper neutralization of special elements used in a command 'command injection' in Microsoft 365 Copilot's Business Chat allows an unauthorized attacker to disclose information over a network...

EUVD-2026-82585

Authentication bypass by spoofing in Microsoft Dataverse allows an unauthorized attacker to elevate privileges over a network...

EUVD-2026-82582

Improper neutralization of special elements used in a command 'command injection' in Microsoft Copilot allows an unauthorized attacker to disclose information over a network...

CVE-2026-69843

Authentication bypass by spoofing in Microsoft Fabric allows an unauthorized attacker to elevate privileges over a network...

KLA91290 PE vulnerability in Microsoft Browser

Privilege escalation vulnerability was found in Microsoft Browser. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2026-88097 Exploitation Related products Microsoft-Edge CVE list CVE-2026-88097 unknown Solution Install necessary updates from the Setting...

PT-2026-95712

Name of the Vulnerable Software and Affected Versions Microsoft Edge Chromium-based affected versions not specified Description A use after free issue exists that allows an unauthorized attacker to elevate privileges locally and affect the system. Use after free is a memory corruption flaw that...

Microsoft Edge (Chromium) < 153.0.4234.48 (CVE-2026-88097)

The version of Microsoft Edge installed on the remote Windows host is prior to 153.0.4234.48. It is, therefore, affected by a vulnerability as referenced in the September 18, 2026 advisory. - Use after free in Microsoft Edge Chromium-based allows an unauthorized attacker to elevate privileges...

The vulnerability of the Microsoft Authentication Library (MSAL), related to the possibility of bypassing the authentication process, allows attackers to perform spear-phishing attacks.

The vulnerability of the Microsoft Authentication Library MSAL relates to the possibility of bypassing the authentication process. Exploiting this vulnerability could allow a malicious actor to perform spear-phishing attacks remotely...