Microsoft Security Center Center News

Subscribe to Microsoft Security Center Center News feed
Updated: 46 min 54 sec ago

CVE-2026-96940 Microsoft Exchange Server Elevation of Privilege Vulnerability

Fri, 10/02/2026 - 14:00
Weak authorization in Microsoft Exchange Server allows an authenticated attacker to elevate privileges over a network.
Categories: Microsoft

CVE-2026-49800 Windows Web Proxy Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability

Wed, 09/30/2026 - 14:00
Updated an acknowledgement. This is an informational change only.
Categories: Microsoft

CVE-2026-50332 Windows Kernel Elevation of Privilege Vulnerability

Tue, 09/29/2026 - 14:00
Updated an acknowledgement. This is an informational change only.
Categories: Microsoft

CVE-2026-50400 Windows App Package Installer Elevation of Privilege Vulnerability

Tue, 09/29/2026 - 14:00
Updated an acknowledgement. This is an informational change only.
Categories: Microsoft

CVE-2026-50375 DirectX Graphics Kernel Elevation of Privilege Vulnerability

Tue, 09/29/2026 - 14:00
Updated an acknowledgement. This is an informational change only.
Categories: Microsoft

CVE-2026-50414 Windows Media Elevation of Privilege Vulnerability

Tue, 09/29/2026 - 14:00
Updated an acknowledgement. This is an informational change only.
Categories: Microsoft

CVE-2026-57095 Win32k Elevation of Privilege Vulnerability

Tue, 09/29/2026 - 14:00
Updated an acknowledgement. This is an informational change only.
Categories: Microsoft

Chromium CVE-2026-91728: Integer overflow

Tue, 09/29/2026 - 08:46
Information published.
Categories: Microsoft

Chromium CVE-2026-91745: Use after free

Tue, 09/29/2026 - 08:46
Information published.
Categories: Microsoft

Chromium CVE-2026-95274: Improper output encoding in DevTools

Fri, 09/25/2026 - 14:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Chromium CVE-2026-95275: Incorrect reference resolution in MediaStream

Fri, 09/25/2026 - 14:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Chromium CVE-2026-95276: Improper input validation in Themes

Fri, 09/25/2026 - 14:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Chromium CVE-2026-95277: Use after free in Views

Fri, 09/25/2026 - 14:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Chromium CVE-2026-95278: Missing authorization in WakeLock

Fri, 09/25/2026 - 14:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Chromium CVE-2026-95279: UI misrepresentation in Omnibox

Fri, 09/25/2026 - 14:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Chromium CVE-2026-95280: Race condition in V8

Fri, 09/25/2026 - 14:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Chromium CVE-2026-95281: Buffer overflow in ANGLE

Fri, 09/25/2026 - 14:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Chromium CVE-2026-95282: Use after free in Platform

Fri, 09/25/2026 - 14:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Chromium CVE-2026-95283: Buffer overflow in Tint

Fri, 09/25/2026 - 14:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Chromium CVE-2026-95284: Buffer overflow in ANGLE

Fri, 09/25/2026 - 14:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Pages