Chromium: CVE-2026-14395 Out of bounds write in V8
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2025) for more information.
Categories: Microsoft
Chromium: CVE-2026-14394 Use after free in V8
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2025) for more information.
Categories: Microsoft
Chromium: CVE-2026-14393 Use after free in V8
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2025) for more information.
Categories: Microsoft
Chromium: CVE-2026-14392 Out of bounds write in Tint
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2025) for more information.
Categories: Microsoft
Chromium: CVE-2026-14391 Integer overflow in ANGLE
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2025) for more information.
Categories: Microsoft
Chromium: CVE-2026-14390 Use after free in ANGLE
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2025) for more information.
Categories: Microsoft
CVE-2026-58281 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
Categories: Microsoft
CVE-2024-7598 Network restriction bypass via race condition during namespace termination
Information published.
Categories: Microsoft
CVE-2026-58209 NATS Server: MQTT retained and QoS replay bypass subscribe deny filters
Information published.
Categories: Microsoft
CVE-2026-58252 NATS Server: Subscribe Authz Bypass via Wildcard-Overlap
Information published.
Categories: Microsoft
CVE-2026-58250 NATS Server: Pre-auth server crash via double INFO in leafnode handshake
Information published.
Categories: Microsoft
CVE-2026-58208 NATS Server: MQTT-over-WebSocket Path Can Crash WebSocket-Only JetStream Servers Before MQTT Is Enabled
Information published.
Categories: Microsoft
CVE-2026-58251 NATS Server: Queue Subscribe Authz Bypass
Information published.
Categories: Microsoft
CVE-2026-58207 NATS Server: Remote crash via integer overflow in Connz pagination
Information published.
Categories: Microsoft
CVE-2026-59869 js-yaml: YAML merge-key chains can force quadratic CPU consumption
Information published.
Categories: Microsoft
CVE-2026-59890 setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) on macOS APFS/HFS+
Information published.
Categories: Microsoft
CVE-2026-59930 Mistune toc / TableOfContents directive: heading IDs use predictable `toc_N` numbering with no slugification, allowing collision with attacker-controlled `id="toc_N"` content
Information published.
Categories: Microsoft
CVE-2026-59922 Mistune plugins/formatting: quadratic-time parsing on long runs of `~~x~~`, `==x==`, and `^^x^^` markers (strikethrough / mark / insert)
Information published.
Categories: Microsoft
CVE-2026-59925 inline_parser: quadratic-time parsing on long runs of `**x**` and `***x***` emphasis pairs
Information published.
Categories: Microsoft