Microsoft Security Center Center News

Subscribe to Microsoft Security Center Center News feed
URL: https://msrc.microsoft.com/update-guide/
Updated: 30 sec ago

CVE-2026-58525 Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

Wed, 07/08/2026 - 14:00
Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.
Categories: Microsoft

CVE-2026-9080 UAF after pause in socket callback

Tue, 07/07/2026 - 08:43
Information published.
Categories: Microsoft

CVE-2026-8926 password leak with netrc and user in URL

Tue, 07/07/2026 - 08:43
Information published.
Categories: Microsoft

CVE-2026-10536 HTTP/2 stream-dependency tree UAF

Tue, 07/07/2026 - 08:42
Information published.
Categories: Microsoft

CVE-2026-8286 wrong STARTTLS connection reuse

Tue, 07/07/2026 - 08:42
Information published.
Categories: Microsoft

CVE-2026-8458 wrong reuse for different services

Tue, 07/07/2026 - 08:42
Information published.
Categories: Microsoft

CVE-2026-8924 trailing dot domain super cookie

Tue, 07/07/2026 - 08:41
Information published.
Categories: Microsoft

CVE-2026-8932 incomplete mTLS config matching in conn reuse

Tue, 07/07/2026 - 08:41
Information published.
Categories: Microsoft

CVE-2026-9545 exposing HTTP/3 early data

Tue, 07/07/2026 - 08:41
Information published.
Categories: Microsoft

CVE-2026-14647 onnx onnxruntime old.cc convPoolShapeInference_opset19 out-of-bounds

Tue, 07/07/2026 - 08:01
Information published.
Categories: Microsoft

CVE-2026-12480 Arbitrary HDF5 File Read via Virtual Dataset Bypass in keras-team/keras

Tue, 07/07/2026 - 08:01
Information published.
Categories: Microsoft

CVE-2026-54891 Plaintext APPLICATION_DATA injected during TLS handshake delivered to client application post-handshake in ssl

Tue, 07/07/2026 - 08:01
Information published.
Categories: Microsoft

CVE-2026-54886 SSH SFTP server denial of service via extended channel data infinite loop

Tue, 07/07/2026 - 08:01
Information published.
Categories: Microsoft

CVE-2026-55952 TLS 1.3 server denial of service via malformed ClientHello pre-shared key extension

Tue, 07/07/2026 - 08:01
Information published.
Categories: Microsoft

CVE-2026-53223 net: guard timestamp cmsgs to real error queue skbs

Sat, 07/04/2026 - 08:03
Information published.
Categories: Microsoft

Chromium: CVE-2026-13874 Inappropriate implementation in DataTransfer

Fri, 07/03/2026 - 14:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Chromium: CVE-2026-13953 Inappropriate implementation in SplitView

Fri, 07/03/2026 - 14:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Chromium: CVE-2026-14142 Inappropriate implementation in Extensions

Fri, 07/03/2026 - 14:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Chromium: CVE-2026-14131 Insufficient validation of untrusted input in WebAppInstalls

Fri, 07/03/2026 - 14:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Chromium: CVE-2026-14020 Insufficient validation of untrusted input in WebXR

Fri, 07/03/2026 - 14:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Pages