146600 matches found
PT-2026-42161
Name of the Vulnerable Software and Affected Versions Microsoft Defender Antimalware Platform affected versions not specified Description An issue exists involving uncontrolled resource consumption. Exploitation of this flaw could allow an attacker to cause a denial of service, which is a conditi...
MAL-2026-3876 Malicious code in @antv/dw-random (npm)
Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...
Уязвимость элемента управления Разрешения (Permissions) браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
Уязвимость элемента управления Разрешения Permissions браузеров Google Chrome и Microsoft Edge связана с недостаточной проверкой входных данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить несанкционированный доступ к защищаемой информации...
How Storm-2949 turned a compromised identity into a cloud-wide breach
In this article 1. Attack chain overview 1. Cloud compromise: Microsoft Entra ID and Microsoft 365 2. Initial access and persistence through targeted social engineering and SSPR abuse 3. Directory discovery and persistence 4. Microsoft 365 discovery and exfiltration 5. Cloud compromise: Microsoft...
How Storm-2949 turned a compromised identity into a cloud-wide breach
In this article 1. Attack chain overview 1. Cloud compromise: Microsoft Entra ID and Microsoft 365 2. Initial access and persistence through targeted social engineering and SSPR abuse 3. Directory discovery and persistence 4. Microsoft 365 discovery and exfiltration 5. Cloud compromise: Microsoft...
Infinite loop
Overview Microsoft.AspNetCore.App.Runtime.linux-arm64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Infinite loop in the FormDataReader.ProcessFormKeys...
CVE-2026-45494
Microsoft Edge Chromium-based Spoofing Vulnerability...
CVE-2026-45492
Improper input validation in Microsoft Edge Chromium-based allows an unauthorized attacker to bypass a security feature over a network...
New Reaper Malware Uses Fake Microsoft Domain to Steal macOS Passwords
The newly discovered Reaper malware bypasses Apple's macOS Tahoe 26.4 security updates to steal passwords, crypto assets, and install a permanent backdoor...
CVE-2026-45495 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
...
CVE-2026-45495 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
...
EUVD-2026-30785
Microsoft Edge Chromium-based Remote Code Execution Vulnerability...
CVE-2026-45495
Microsoft Edge (Chromium-based) vulnerability CVE-2026-45495 affects Edge versions prior to 148.0.3967.70. PT-2026-41712 documents an improper input validation flaw in the browser’s rendering pipeline and JavaScript engine, enabling an unauthenticated user to execute arbitrary code with the brows...
CVE-2026-45494 Microsoft Edge (Chromium-based) Spoofing Vulnerability
...
EUVD-2026-30788
Microsoft Edge Chromium-based Spoofing Vulnerability...
CVE-2026-45494
Microsoft Edge Chromium-based Spoofing Vulnerability...
CVE-2026-45494
Technical details for CVE-2026-45494 are not publicly provided in the supplied documents. Monitor for updates from NVD and Microsoft MSRC.
CVE-2026-45494 Microsoft Edge (Chromium-based) Spoofing Vulnerability
...