Microsoft Security Center Center News

Subscribe to Microsoft Security Center Center News feed
Updated: 35 min 13 sec ago

Chromium CVE-2026-87441: Missing authorization in Downloads

Tue, 09/15/2026 - 00:51
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Chromium CVE-2026-87440: Out of bounds read in Media

Tue, 09/15/2026 - 00:51
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Chromium CVE-2026-87439: Information leak in ServiceWorker

Tue, 09/15/2026 - 00:51
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Chromium CVE-2026-87437: Information leak in Frames

Tue, 09/15/2026 - 00:51
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Chromium CVE-2026-87436: Incomplete cleanup in Browser

Tue, 09/15/2026 - 00:51
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Chromium CVE-2026-87435: Information leak in ControlledFrame

Tue, 09/15/2026 - 00:51
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Chromium CVE-2026-87434: Missing authorization in CORS

Tue, 09/15/2026 - 00:51
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Chromium CVE-2026-87433: Race condition in FileAPI

Tue, 09/15/2026 - 00:51
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Chromium CVE-2026-87432: Incorrect authorization in Navigation

Tue, 09/15/2026 - 00:51
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Chromium CVE-2026-87431: Missing authorization in Extensions

Tue, 09/15/2026 - 00:51
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Chromium CVE-2026-87430: Buffer overflow in WebRTC

Tue, 09/15/2026 - 00:51
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Chromium CVE-2026-87429: Missing authorization in ServiceWorker

Tue, 09/15/2026 - 00:51
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

CVE-2026-85921 Windows Secure Kernel Mode Elevation of Privilege Vulnerability

Mon, 09/14/2026 - 14:00

Double free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

Categories: Microsoft

Chromium CVE-2026-87491: Out of bounds write in V8

Sat, 09/12/2026 - 04:56
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Google is aware that an exploit for CVE-2026-87491 exists in the wild.
Categories: Microsoft

Chromium CVE-2026-76023: Improper resource control in Linux Toolkit Theming

Sat, 09/12/2026 - 01:02
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Chromium CVE-2026-76022: Buffer overflow in Network

Sat, 09/12/2026 - 01:01
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Chromium CVE-2026-76021: Use after free in DOM

Sat, 09/12/2026 - 01:01
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Chromium CVE-2026-76019: Incorrect authorization in Workers

Sat, 09/12/2026 - 01:01
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Chromium CVE-2026-76018: Privilege elevation in Import

Sat, 09/12/2026 - 01:01
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Chromium CVE-2026-76017: Use after free in Chromoting

Sat, 09/12/2026 - 01:01
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Pages