Chromium CVE-2026-95368: Incorrect authorization in DevTools
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft
Chromium CVE-2026-95369: Inappropriate implementation in XML
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft
Chromium CVE-2026-95370: Inappropriate implementation in NFC
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft
Chromium CVE-2026-95371: Missing authorization in Views
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft
Chromium CVE-2026-95372: Use after free in Chromecast
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft
Chromium CVE-2026-95373: Use after free in DevTools
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft
CVE-2026-100208 Microsoft Office Outlook Remote Code Execution Vulnerability
Information published. This CVE was addressed by updates that were released in August 2026, but the CVE was inadvertently omitted from the August 2026 Security Updates. This is an informational change only. Customers who have already installed the August 2026 updates do not need to take any further action.
Categories: Microsoft
CVE-2026-100206 Microsoft Office Information Disclosure Vulnerability
Information published. This CVE was addressed by updates that were released in July 2026, but the CVE was inadvertently omitted from the July 2026 Security Updates. This is an informational change only. Customers who have already installed the July 2026 updates do not need to take any further action.
Categories: Microsoft
CVE-2026-32157 Remote Desktop Client Remote Code Execution Vulnerability
Updated product information in the Software Update table. This is an informational change only.
Categories: Microsoft
CVE-2026-70125 Microsoft Outlook Remote Code Execution Vulnerability
Information published. This CVE was addressed by updates that were released in September 2026, but the CVE was inadvertently omitted from the September 2026 Security Updates. This is an informational change only. Customers who have already installed the September 2026 updates do not need to take any further action.
Categories: Microsoft
CVE-2026-57091 Windows File History Service Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only.
Categories: Microsoft
CVE-2026-55123 Microsoft PowerPoint Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only.
Categories: Microsoft
CVE-2026-88097 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges locally.
Categories: Microsoft
Chromium: CVE-2026-0899 Out of bounds memory access in V8
Information published.
Categories: Microsoft
CVE-2026-50311 Windows Server Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only.
Categories: Microsoft
CVE-2026-55039 Microsoft Excel Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only.
Categories: Microsoft
CVE-2026-56176 Windows Win32k Elevation of Privilege Vulnerability
Added Office software to the Security Updates table. Customers that are running supported version of Office are encouraged to update to the indicated version to be protected from this vulnerability.
Categories: Microsoft