Microsoft Security Center Center News

Subscribe to Microsoft Security Center Center News feed
URL: https://msrc.microsoft.com/update-guide/
Updated: 57 min 10 sec ago

CVE-2026-83947 Azure Event Grid Spoofing Vulnerability

Thu, 10/08/2026 - 14:00

Missing authorization in Azure Event Grid allows an authorized attacker to perform spoofing over a network.

Categories: Microsoft

CVE-2026-88131 Microsoft Dataverse Remote Code Execution Vulnerability

Thu, 10/08/2026 - 14:00

Deserialization of untrusted data in Microsoft Dataverse allows an unauthorized attacker to execute code over a network.

Categories: Microsoft

CVE-2026-94510 Microsoft Bookings Elevation of Privilege Vulnerability

Thu, 10/08/2026 - 14:00

Authorization bypass through user-controlled key in Microsoft Bookings allows an unauthorized attacker to elevate privileges over a network.

Categories: Microsoft

CVE-2026-96207 Microsoft Partner Center Elevation of Privilege Vulnerability

Thu, 10/08/2026 - 14:00

Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network.

Categories: Microsoft

Chromium: CVE-2025-11215 Off by one error in V8

Thu, 10/08/2026 - 08:51
Information published.
Categories: Microsoft

Chromium: CVE-2025-11219 Use after free in V8

Thu, 10/08/2026 - 08:50
Information published.
Categories: Microsoft

Chromium: CVE-2025-0611 Object corruption in V8

Wed, 10/07/2026 - 08:48
Information published.
Categories: Microsoft

CVE-2026-54128 Windows DHCP Client Remote Code Execution Vulnerability

Tue, 10/06/2026 - 14:00
Updated an acknowledgement. This is an informational change only.
Categories: Microsoft

Chromium: CVE-2025-10502 Heap buffer overflow in ANGLE

Sat, 10/03/2026 - 09:05
Information published.
Categories: Microsoft

CVE-2026-96940 Microsoft Exchange Server Elevation of Privilege Vulnerability

Fri, 10/02/2026 - 14:00
Weak authorization in Microsoft Exchange Server allows an authenticated attacker to elevate privileges over a network.
Categories: Microsoft

CVE-2026-49800 Windows Web Proxy Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability

Wed, 09/30/2026 - 14:00
Updated an acknowledgement. This is an informational change only.
Categories: Microsoft

CVE-2026-50332 Windows Kernel Elevation of Privilege Vulnerability

Tue, 09/29/2026 - 14:00
Updated an acknowledgement. This is an informational change only.
Categories: Microsoft

CVE-2026-50400 Windows App Package Installer Elevation of Privilege Vulnerability

Tue, 09/29/2026 - 14:00
Updated an acknowledgement. This is an informational change only.
Categories: Microsoft

CVE-2026-50375 DirectX Graphics Kernel Elevation of Privilege Vulnerability

Tue, 09/29/2026 - 14:00
Updated an acknowledgement. This is an informational change only.
Categories: Microsoft

CVE-2026-50414 Windows Media Elevation of Privilege Vulnerability

Tue, 09/29/2026 - 14:00
Updated an acknowledgement. This is an informational change only.
Categories: Microsoft

CVE-2026-57095 Win32k Elevation of Privilege Vulnerability

Tue, 09/29/2026 - 14:00
Updated an acknowledgement. This is an informational change only.
Categories: Microsoft

Chromium CVE-2026-91728: Integer overflow

Tue, 09/29/2026 - 08:46
Information published.
Categories: Microsoft

Chromium CVE-2026-91745: Use after free

Tue, 09/29/2026 - 08:46
Information published.
Categories: Microsoft

Chromium CVE-2026-95274: Improper output encoding in DevTools

Fri, 09/25/2026 - 14:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Chromium CVE-2026-95275: Incorrect reference resolution in MediaStream

Fri, 09/25/2026 - 14:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Pages