Microsoft Security Center Center News

Subscribe to Microsoft Security Center Center News feed
Updated: 47 min 24 sec ago

Chromium: CVE-2025-12727 Inappropriate implementation in V8

Mon, 10/12/2026 - 09:24
Information published.
Categories: Microsoft

Chromium: CVE-2025-12433 Inappropriate implementation in V8

Mon, 10/12/2026 - 08:44
Information published.
Categories: Microsoft

Chromium: CVE-2025-12441 Out of bounds read in V8

Mon, 10/12/2026 - 08:44
Information published.
Categories: Microsoft

Chromium: CVE-2025-12432 Race in V8

Mon, 10/12/2026 - 08:44
Information published.
Categories: Microsoft

CVE-2026-54986 Windows Win32k Elevation of Privilege Vulnerability

Fri, 10/09/2026 - 14:00
Updated an acknowledgement. This is an informational change only.
Categories: Microsoft

CVE-2026-50677 Windows Media Elevation of Privilege Vulnerability

Fri, 10/09/2026 - 14:00
Updated an acknowledgement. This is an informational change only.
Categories: Microsoft

CVE-2026-50441 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

Thu, 10/08/2026 - 14:00
Updated an acknowledgement. This is an informational change only.
Categories: Microsoft

CVE-2026-58528 Windows USB Audio Class Driver Information Disclosure Vulnerability

Thu, 10/08/2026 - 14:00
Updated an acknowledgement. This is an informational change only.
Categories: Microsoft

CVE-2026-69435 Azure SRE Agent Elevation of Privilege Vulnerability

Thu, 10/08/2026 - 14:00
Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.
Categories: Microsoft

CVE-2026-77900 Azure App Service Remote Code Execution Vulnerability

Thu, 10/08/2026 - 14:00

Missing authentication for critical function in Azure App Service allows an unauthorized attacker to execute code over a network.

Categories: Microsoft

CVE-2026-83943 Azure API Center Information Disclosure Vulnerability

Thu, 10/08/2026 - 14:00

Exposure of sensitive information to an unauthorized actor in Azure API Center allows an unauthorized attacker to disclose information over a network.

Categories: Microsoft

CVE-2026-83947 Azure Event Grid Spoofing Vulnerability

Thu, 10/08/2026 - 14:00

Missing authorization in Azure Event Grid allows an authorized attacker to perform spoofing over a network.

Categories: Microsoft

CVE-2026-88131 Microsoft Dataverse Remote Code Execution Vulnerability

Thu, 10/08/2026 - 14:00

Deserialization of untrusted data in Microsoft Dataverse allows an unauthorized attacker to execute code over a network.

Categories: Microsoft

CVE-2026-94510 Microsoft Bookings Elevation of Privilege Vulnerability

Thu, 10/08/2026 - 14:00

Authorization bypass through user-controlled key in Microsoft Bookings allows an unauthorized attacker to elevate privileges over a network.

Categories: Microsoft

CVE-2026-96207 Microsoft Partner Center Elevation of Privilege Vulnerability

Thu, 10/08/2026 - 14:00

Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network.

Categories: Microsoft

Chromium: CVE-2025-11215 Off by one error in V8

Thu, 10/08/2026 - 08:51
Information published.
Categories: Microsoft

Chromium: CVE-2025-11219 Use after free in V8

Thu, 10/08/2026 - 08:50
Information published.
Categories: Microsoft

Chromium: CVE-2025-0611 Object corruption in V8

Wed, 10/07/2026 - 08:48
Information published.
Categories: Microsoft

CVE-2026-54128 Windows DHCP Client Remote Code Execution Vulnerability

Tue, 10/06/2026 - 14:00
Updated an acknowledgement. This is an informational change only.
Categories: Microsoft

Chromium: CVE-2025-10502 Heap buffer overflow in ANGLE

Sat, 10/03/2026 - 09:05
Information published.
Categories: Microsoft

Pages