Chromium: CVE-2026-17857 Inappropriate implementation in Network

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-14126 Incorrect security UI in UI

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-13992 Inappropriate implementation in UI

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Windows KDC Proxy Remote Code Execution Vulnerability

...

Visual C++ Redistributable Installer Elevation of Privilege Vulnerability

...

Microsoft SQL Server Remote Code Execution Vulnerability

...

Azure DevOps Server Remote Code Execution Vulnerability

...

Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability

...

Chromium: CVE-2022-4174 Type Confusion in V8

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Microsoft Office Information Disclosure Vulnerability

...

Microsoft Office Graphics Remote Code Execution Vulnerability

...

Windows Kernel Elevation of Privilege Vulnerability

...

Microsoft Word Remote Code Execution Vulnerability

...

Chromium: CVE-2021-21207 Use after free in IndexedDB

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Microsoft Color Management Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that the Color Management Module ICM32.dll handles objects in memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data;...

Microsoft Browser Information Disclosure Vulnerability

An information disclosure vulnerability exists when affected Microsoft scripting engines do not properly handle objects in memory. The vulnerability could allow an attacker to detect specific files on the user's computer. In a web-based attack scenario, an attacker could host a website that is us...

Windows Graphics Component Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context. In a local attack scenario, an attacker could exploit this vulnerability b...

Chromium: CVE-2026-17720 Insufficient policy enforcement in Passwords

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-17870 Insufficient validation of untrusted input in Cast

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-17934 Insufficient validation of untrusted input in DevTools

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-15124 Insufficient policy enforcement in Passwords

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-15108 Integer overflow in Extensions API

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-13946 Inappropriate implementation in ScriptInjections

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-13782 Use after free in Browser

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Remote Desktop Client Remote Code Execution Vulnerability

Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

Windows Secure Kernel Mode Elevation of Privilege Vulnerability

...

Windows USB Print Driver Elevation of Privilege Vulnerability

...

Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability

...

Chromium: CVE-2023-4357 Insufficient validation of untrusted input in XML

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

...

SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability

...

Xbox Live Save Service Elevation of Privilege Vulnerability

...

Windows Clustered Shared Volume Information Disclosure Vulnerability

...

Microsoft Exchange Server Elevation of Privilege Vulnerability

...

DiskUsage.exe Remote Code Execution Vulnerability

...

Microsoft SharePoint Server Spoofing Vulnerability

...

Chromium: CVE-2022-0803 Inappropriate implementation in Permissions

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Windows Encrypting File System (EFS) Remote Code Execution Vulnerability

...

Microsoft Jet Red Database Engine and Access Connectivity Engine Elevation of Privilege Vulnerability

...

Chromium: CVE-2021-30541 Use after free in V8

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Microsoft SharePoint Server Remote Code Execution Vulnerability

...

Chromium CVE-2021-21146: Use after free in Navigation

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Microsoft Exchange Remote Code Execution Vulnerability

...

Azure SDK for C Security Feature Bypass Vulnerability

...

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows Ancillary Function Driver for WinSock improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevat...

Windows Remote Procedure Call Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Windows Remote Procedure Call RPC runtime improperly initializes objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an...

Chromium: CVE-2026-17910 Insufficient policy enforcement in NFC

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-17809 Insufficient validation of untrusted input in Extensions

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-15130 Insufficient policy enforcement in Navigation

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Windows USB Audio Class Driver Information Disclosure Vulnerability

Out-of-bounds read in Windows USB Audio Class driver usbaudio.sys allows an unauthorized attacker to disclose information with a physical attack...