Chromium: CVE-2026-12016 Insufficient validation of untrusted input DevTools
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/search/label/Desktop%20Update) for more information.
Categories: Microsoft
Chromium: CVE-2026-12015 Use after free Autofill
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/search/label/Desktop%20Update) for more information.
Categories: Microsoft
Chromium: CVE-2026-12014 Use after free Cast
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/search/label/Desktop%20Update) for more information.
Categories: Microsoft
Chromium: CVE-2026-12013 Use after free Media
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/search/label/Desktop%20Update) for more information.
Categories: Microsoft
Chromium: CVE-2026-12012 Use after free Network
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/search/label/Desktop%20Update) for more information.
Categories: Microsoft
Chromium: CVE-2026-12011 Use after free WebMIDI
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/search/label/Desktop%20Update) for more information.
Categories: Microsoft
Chromium: CVE-2026-12010 Heap buffer overflow GPU
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/search/label/Desktop%20Update) for more information.
Categories: Microsoft
Chromium: CVE-2026-12009 Insufficient validation of untrusted input Accessibility
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/search/label/Desktop%20Update) for more information.
Categories: Microsoft
Chromium: CVE-2026-12008 Use after free DigitalCredentials
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/search/label/Desktop%20Update) for more information.
Categories: Microsoft
Chromium: CVE-2026-12007 Use after free Core
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/search/label/Desktop%20Update) for more information.
Categories: Microsoft
CVE-2026-11526 GD versions before 2.86 for Perl allow OS command injection and file overwrite via a 2-arg open() of filename arguments in _make_filehandle
Information published.
Categories: Microsoft
CVE-2026-40034 gitoxide - Command Injection via Partial .gitmodules Override in gix-submodule
Information published.
Categories: Microsoft
CVE-2026-5222 Cargo can be coerced to share credentials between registries
Information published.
Categories: Microsoft
CVE-2026-5223 Crates in third party registries can override the cached source of other crates
Information published.
Categories: Microsoft
CVE-2026-6429 netrc credential leak with reused proxy connection
Information published.
Categories: Microsoft
CVE-2026-6276 stale custom cookie host causes cookie leak
Information published.
Categories: Microsoft
CVE-2026-6253 proxy credentials leak over redirect-to proxy
Information published.
Categories: Microsoft
CVE-2023-5678 Excessive time spent in DH check / generation with large Q parameter value
Information published.
Categories: Microsoft
