CVE-2026-58291 Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

...

CVE-2026-45489 Microsoft Edge (Chromium-based) Spoofing Vulnerability

...

CVE-2026-58597 Microsoft Edge (Chromium-based) Spoofing Vulnerability

...

CVE-2026-58524 Microsoft Edge (Chromium-based) Spoofing Vulnerability

...

CVE-2026-58298 Microsoft Edge (Chromium-based) Spoofing Vulnerability

...

CVE-2026-58300 Microsoft Edge for Android Information Disclosure Vulnerability

...

CVE-2026-58297 Microsoft Edge for Android Information Disclosure Vulnerability

...

CVE-2026-58296 Microsoft Edge for Android Information Disclosure Vulnerability

...

CVE-2026-58295 Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

...

CVE-2026-58293 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

CVE-2026-58294 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

CVE-2026-58290 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

CVE-2026-58292 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

CVE-2026-58289 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

CVE-2026-58288 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

CVE-2026-58286 Microsoft Edge (Chromium-based) Spoofing Vulnerability

...

CVE-2026-58285 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

CVE-2026-58276 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

CVE-2026-58284 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

CVE-2026-58278 Microsoft Edge (Chromium-based) Spoofing Vulnerability

...

CVE-2026-57991 Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

...

CVE-2026-57986 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

CVE-2026-57981 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

CVE-2026-57977 Microsoft Edge (Chromium-based) Spoofing Vulnerability

...

CVE-2026-57974 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

CVE-2026-45488 Microsoft Edge (Chromium-based) Spoofing Vulnerability

...

CVE-2026-58522 Microsoft Edge for Android Information Disclosure Vulnerability

...

CVE-2026-58287 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

CVE-2026-58299 Microsoft Edge for Android Remote Code Execution Vulnerability

...

CVE-2026-58283 Microsoft Edge (Chromium-based) Spoofing Vulnerability

...

CVE-2026-58282 Microsoft Edge (Chromium-based) Spoofing Vulnerability

...

CVE-2026-56646 Microsoft Edge (Chromium-based) Spoofing Vulnerability

...

CVE-2026-57993 Microsoft Edge (Chromium-based) Spoofing Vulnerability

...

CVE-2026-57992 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

CVE-2026-57988 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

CVE-2026-57987 Microsoft Edge (Chromium-based) Spoofing Vulnerability

...

CVE-2026-57985 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

CVE-2026-57984 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

CVE-2026-57983 Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

...

CVE-2026-57975 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

CVE-2026-56645 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

CVE-2026-55945 Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

...

CVE-2026-28744 Gitea Git smart HTTP bypasses repository token scopes for bearer tokens

Gitea versions up to and including 1.26.1 allow Git smart HTTP requests authenticated with bearer tokens to bypass repository token scope checks...

CVE-2026-28737 Gitea 3D file viewer allows stored XSS through glTF extensionsRequired

Gitea versions from 1.25.0 before 1.26.0 allow stored cross-site scripting through the extensionsRequired field in glTF files rendered by the 3D file viewer...

CVE-2026-28705 Gitea repository dumps write release assets using unsafe path names

Gitea versions before 1.25.5 use release tag names and asset names as filesystem path components when dumping release assets, allowing specially crafted names to affect dump output paths...

CVE-2026-28740 Gitea LFS object reuse bypasses Code-unit authorization

Gitea versions up to and including 1.26.2 allow Git LFS object reuse to authorize private source objects for users who have repository access but lack Code-unit access...

CVE-2026-27783 Gitea issue-template APIs bypass repository unit authorization

Gitea versions up to and including 1.26.1 do not enforce repository-unit authorization on issue-template API endpoints...

CVE-2026-28699 Gitea Basic Auth bypasses OAuth2 access token scopes

Gitea versions up to and including 1.26.1 allow OAuth2 access token scope enforcement to be bypassed through HTTP Basic authentication...

CVE-2026-27779 Gitea forwarded-proto handling allows public URL spoofing

Gitea versions before 1.25.5 accept malformed or injected forwarded-proto values when detecting public URLs, allowing spoofed canonical URL generation...

CVE-2026-27780 Gitea pre-receive hook can miss branch-protection checks after scanner errors

Gitea versions before 1.26.0 do not fail closed on bufio.Scanner errors while processing pre-receive hook input, allowing oversized input to bypass branch-protection checks...