Chromium CVE-2021-21119: Use after free in Media

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Microsoft Word Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example, the...

February 2020 Adobe Flash Security Update

This security update addresses the following vulnerability, which is described in Adobe Security Bulletin APSB20-06: CVE-2020-3757. Please note that in the event of any discrepancies. the definitive source of information for example, vulnerability severity and impact is the Adobe Flash bulletin a...

Chromium: CVE-2026-13969 Uninitialized Use in UI

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-14066 Insufficient validation of untrusted input in Chrome for iOS

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Windows Kernel Information Disclosure Vulnerability

...

Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability

...

Microsoft Message Queuing Information Disclosure Vulnerability

...

Microsoft SharePoint Server Information Disclosure Vulnerability

...

Microsoft Office Visio Remote Code Execution Vulnerability

...

Windows Workstation Service Elevation of Privilege Vulnerability

...

Chromium: CVE-2022-1232 Type Confusion in V8

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Visual Studio Code Elevation of Privilege Vulnerability

...

Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability

...

Microsoft SharePoint Server Information Disclosure Vulnerability

...

Windows Hyper-V Remote Code Execution Vulnerability

...

VP9 Video Extensions Remote Code Execution Vulnerability

...

Microsoft Dataverse Information Disclosure Vulnerability

...

Chromium CVE-2021-21141: Insufficient policy enforcement in File System API

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Windows Remote Desktop Gateway RD Gateway when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. This vulnerability is pre-authentication and requires no user interaction. An attacker who...

Linux Kernel TCP SACK Denial of Service Vulnerability

Executive Summary Known vulnerabilities exist in the Linux kernel. These vulnerabilities are documented by the following CVEs: CVE-2019-11477, CVE-2019-11478, and CVE-2019-11479. The purpose of this advisory is to explain the various effects of these vulnerabilities and to provide links to more...

FFC-DH Peer Validation Uses Attacker-Supplied q

...

Chromium: CVE-2026-13987 Incorrect security UI in Mobile

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-14128 Insufficient data validation in Chrome for iOS

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-13983 Incorrect security UI in Chrome for iOS

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-13998 Incorrect security UI in File Input

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Windows KDC Proxy Remote Code Execution Vulnerability

...

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

...

Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability

...

Microsoft Guidance for Addressing Security Feature Bypass in Trend Micro EFI Modules

Trend Micro has released CVE-2023-28005 to address a secure boot bypass. Subsequently Microsoft has released the July Windows security updates to block the vulnerable UEFI modules by using the DBX UEFI Secure Boot Forbidden Signature Database disallow list. To exploit this vulnerability, an...

Azure Network Watcher Agent Security Feature Bypass Vulnerability

...

Chromium: CVE-2022-2156 Use after free in Base

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2022-1875 Inappropriate implementation in PDF

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Microsoft Exchange Server Remote Code Execution Vulnerability

...

Microsoft Word Remote Code Execution Vulnerability

...

Windows Print Spooler Elevation of Privilege Vulnerability

...

Windows Kernel Elevation of Privilege Vulnerability

...

Microsoft Exchange Server Elevation of Privilege Vulnerability

...

Microsoft SharePoint Server Spoofing Vulnerability

...

Chromium: CVE-2021-21226 Use after free in navigation

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2021-21225 Out of bounds memory access in V8

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2021-21195 Use after free in V8

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Microsoft Excel Remote Code Execution Vulnerability

...

Microsoft Excel Information Disclosure Vulnerability

...

.NET Framework Remote Code Execution Vulnerability

A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative us...

Windows Update Delivery Optimization Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows Update Delivery Optimization does not properly enforce file share permissions. An attacker who successfully exploited the vulnerability could overwrite files that require higher privileges than what the attacker already has. To explo...

Windows Kernel Information Disclosure Vulnerability

An information disclosure vulnerability exists when certain central processing units CPU speculatively access memory. An attacker who successfully exploited the vulnerability could read privileged data across trust boundaries. To exploit this vulnerability, an attacker would have to log on to an...

Chromium: CVE-2026-13980 Incorrect security UI in Chrome for iOS

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-13842 Incorrect security UI in Chrome for iOS

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-12444 Out of bounds read in Chromoting

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...