Microsoft Security Center Center News

Subscribe to Microsoft Security Center Center News feed
Updated: 24 min 25 sec ago

Chromium: CVE-2026-84353 Use after free in Shared Tab Groups

Thu, 09/03/2026 - 23:59
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Chromium: CVE-2026-84351 Buffer overflow in GPU

Thu, 09/03/2026 - 23:59
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Chromium: CVE-2026-84350 Use after free in TabStrip

Thu, 09/03/2026 - 23:59
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Chromium: CVE-2026-84349 Use after free in Browser

Thu, 09/03/2026 - 23:58
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Chromium: CVE-2026-84348 Information leak in MediaCapture

Thu, 09/03/2026 - 23:58
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Chromium: CVE-2026-84347 Use after free in WebRTC

Thu, 09/03/2026 - 23:58
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Chromium: CVE-2026-84335 Incorrect authorization in TabStrip

Thu, 09/03/2026 - 23:58
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Chromium: CVE-2026-84334 Incorrect authorization in Chromoting

Thu, 09/03/2026 - 23:58
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Chromium: CVE-2026-84332 Incorrect authorization in SiteSettings

Thu, 09/03/2026 - 23:58
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Chromium: CVE-2026-84331 Incorrect authorization in Actor

Thu, 09/03/2026 - 23:58
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Chromium: CVE-2026-84329 Confused deputy in CredentialProvider

Thu, 09/03/2026 - 23:58
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Chromium: CVE-2026-84328 Missing authorization in FileSystem

Thu, 09/03/2026 - 23:58
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Chromium: CVE-2026-84327 Incorrect authorization in Autofill

Thu, 09/03/2026 - 23:58
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Chromium: CVE-2026-84326 Uninitialized resource in V8

Thu, 09/03/2026 - 23:58
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Chromium: CVE-2026-84325 Improper input validation in DataTransfer

Thu, 09/03/2026 - 23:58
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Chromium: CVE-2026-84324 Use after free in Proxy

Thu, 09/03/2026 - 23:58
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Chromium: CVE-2026-84323 Missing authorization in FileSystem

Thu, 09/03/2026 - 23:58
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

CVE-2026-62906 Microsoft Discovery Studio Information Disclosure Vulnerability

Thu, 09/03/2026 - 14:00

Improper neutralization of special elements in data query logic in Microsoft Discovery Studio allows an unauthorized attacker to disclose information over a network.

Categories: Microsoft

CVE-2026-70178 Microsoft Fabric Elevation of Privilege Vulnerability

Thu, 09/03/2026 - 14:00

Missing authorization in Microsoft Fabric allows an authorized attacker to elevate privileges over a network.

Categories: Microsoft

CVE-2026-70352 Azure AI Language Elevation of Privilege Vulnerability

Thu, 09/03/2026 - 14:00

Missing authentication for critical function in Azure AI Language allows an unauthorized attacker to elevate privileges over a network.

Categories: Microsoft

Pages