32226 matches found
Chromium CVE-2026-91713: Missing authorization
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releaseshttps://chromereleases.googleblog.com/2026 for more information...
Chromium CVE-2026-91712: Race condition
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releaseshttps://chromereleases.googleblog.com/2026 for more information...
Chromium CVE-2026-91711: Out of bounds write
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releaseshttps://chromereleases.googleblog.com/2026 for more information...
Chromium CVE-2026-91710: Use after free
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releaseshttps://chromereleases.googleblog.com/2026 for more information...
Chromium CVE-2026-91709: Type confusion
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releaseshttps://chromereleases.googleblog.com/2026 for more information...
Chromium CVE-2026-91708: Race condition
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releaseshttps://chromereleases.googleblog.com/2026 for more information...
Azure AI Foundry Elevation of Privilege Vulnerability
Server-side request forgery ssrf in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network...
Azure Logic Apps Elevation of Privilege Vulnerability
Improper limitation of a pathname to a restricted directory 'path traversal' in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network...
Microsoft 365 Copilot Elevation of Privilege Vulnerability
Improper neutralization of special elements used in a command 'command injection' in M365 Copilot allows an authorized attacker to elevate privileges over a network...
Azure Billing Elevation of Privilege Vulnerability
Insufficient verification of data authenticity in Azure Billing allows an unauthorized attacker to elevate privileges over a network...
Azure Database for PostgreSQL Elevation of Privilege Vulnerability
Improper authorization in Azure Database for PostgreSQL allows an authorized attacker to elevate privileges over a network...
M365 Copilot Information Disclosure Vulnerability
Incorrect permission assignment for critical resource in M365 Copilot allows an authorized attacker to disclose information over a network...
Microsoft Fabric Elevation of Privilege Vulnerability
Authentication bypass by spoofing in Microsoft Fabric allows an unauthorized attacker to elevate privileges over a network...
Azure Machine Learning Information Disclosure Vulnerability
Incorrect authorization in Azure Machine Learning allows an unauthorized attacker to disclose information over a network...
Azure Arc Elevation of Privilege Vulnerability
Unintended proxy or intermediary in Azure Arc allows an authorized attacker to elevate privileges over a network...
Microsoft Container Registry Elevation of Privilege Vulnerability
Authorization bypass through user-controlled key in Microsoft Container Registry allows an unauthorized attacker to elevate privileges over a network...
Microsoft Copilot Information Disclosure Vulnerability
Ai command injection in Microsoft Copilot allows an unauthorized attacker to disclose information over a network...
Microsoft 365 Copilot Business Chat Information Disclosure Vulnerability
Improper neutralization of special elements used in a command 'command injection' in Microsoft 365 Copilot's Business Chat allows an unauthorized attacker to disclose information over a network...
Azure Portal Spoofing Vulnerability
Improper neutralization of input during web page generation 'cross-site scripting' in Azure Portal allows an unauthorized attacker to perform spoofing over a network...
Azure AI Foundry Elevation of Privilege Vulnerability
Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network...
Azure Cosmos DB Elevation of Privilege Vulnerability
Improper neutralization of special elements in output used by a downstream component 'injection' in Azure Cosmos DB allows an authorized attacker to elevate privileges over a network...
Azure Logic Apps Elevation of Privilege Vulnerability
Improper access control in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network...
Microsoft Dataverse Elevation of Privilege Vulnerability
Authentication bypass by spoofing in Microsoft Dataverse allows an unauthorized attacker to elevate privileges over a network...
Azure Arc Elevation of Privilege Vulnerability
Improper limitation of a pathname to a restricted directory 'path traversal' in Azure Arc allows an unauthorized attacker to elevate privileges over a network...
'serve-expired' can bypass Unbound 'wait-limit'
...
scsi: qla2xxx: Zero SFP DMA buffer in FRU/I2C bsg handlers
...
Use-after-free in DoH stream cleanup code path
...
Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY
...
scsi: qla2xxx: Fix cs84xx use-after-free on host teardown
...
Retrap: Novel Vulnerabilities to launch Algorithmic Complexity Attacks on DNSSEC
...
net: skbuff: don't skb_tx_error() the source skb in skb_zerocopy()
...
Use-after-free in DoQ stream output buffer on reset re-transmission
...
gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free
...
CNAME synthesis could lead to heap corruption
...
batman-adv: bla: fix freeing of claims on meshif deletion
...
ftrace: Take trace_array reference before accessing its ftrace_ops
...
drm/amdkfd: Add TLB flush after MES queue eviction/suspension
...
USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl()
...
media: go7007: defer the ALSA v4l2 put until card release
...
powerpc/kexec_file: Prevent kexec range truncation
...
scsi: qla2xxx: Reject non-SCSI SRB on status IOCB fast path
...
f2fs: fix to avoid potential deadloop in f2fs_fsync_node_pages()
...
staging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr()
...
scsi: qla2xxx: Don't query firmware state while chip is down
...
perf/x86/intel: Fix kernel address leakages in LBR stack
...
media: video-i2c: fix kthread error pointer left in kthread_vid_cap on failure
...
scsi: qla2xxx: Avoid req_q_map double-read in qla2x00_error_entry()
...
usb: gadget: f_midi2: fix use-after-free in string attribute show path
...