Chromium: CVE-2025-12727 Inappropriate implementation in V8
Chromium: CVE-2025-12433 Inappropriate implementation in V8
CVE-2026-54986 Windows Win32k Elevation of Privilege Vulnerability
CVE-2026-50677 Windows Media Elevation of Privilege Vulnerability
CVE-2026-50441 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
CVE-2026-58528 Windows USB Audio Class Driver Information Disclosure Vulnerability
CVE-2026-69435 Azure SRE Agent Elevation of Privilege Vulnerability
CVE-2026-77900 Azure App Service Remote Code Execution Vulnerability
Missing authentication for critical function in Azure App Service allows an unauthorized attacker to execute code over a network.
CVE-2026-83943 Azure API Center Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Azure API Center allows an unauthorized attacker to disclose information over a network.
CVE-2026-83947 Azure Event Grid Spoofing Vulnerability
Missing authorization in Azure Event Grid allows an authorized attacker to perform spoofing over a network.
CVE-2026-88131 Microsoft Dataverse Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Dataverse allows an unauthorized attacker to execute code over a network.
CVE-2026-94510 Microsoft Bookings Elevation of Privilege Vulnerability
Authorization bypass through user-controlled key in Microsoft Bookings allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-96207 Microsoft Partner Center Elevation of Privilege Vulnerability
Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network.


