Microsoft Security Center Center News

Subscribe to Microsoft Security Center Center News feed
Updated: 58 sec ago

Chromium CVE-2026-95357: Out of bounds write in GPU

Fri, 09/25/2026 - 14:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Chromium CVE-2026-95358: Incorrect authorization in Mobile

Fri, 09/25/2026 - 14:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Chromium CVE-2026-95359: Uninitialized resource in GPU

Fri, 09/25/2026 - 14:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Chromium CVE-2026-95360: Race condition in Editing

Fri, 09/25/2026 - 14:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Chromium CVE-2026-95361: Confused deputy in DevTools

Fri, 09/25/2026 - 14:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Chromium CVE-2026-95362: Cross-site request forgery in DevTools

Fri, 09/25/2026 - 14:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Chromium CVE-2026-95363: UI misrepresentation in FileSystem

Fri, 09/25/2026 - 14:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Chromium CVE-2026-95364: Improper input validation in Passwords

Fri, 09/25/2026 - 14:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Chromium CVE-2026-95365: Type confusion in IndexedDB

Fri, 09/25/2026 - 14:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Chromium CVE-2026-95366: Use of released resource in Core

Fri, 09/25/2026 - 14:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Chromium CVE-2026-95367: Information leak in DataTransfer

Fri, 09/25/2026 - 14:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Chromium CVE-2026-95368: Incorrect authorization in DevTools

Fri, 09/25/2026 - 14:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Chromium CVE-2026-95369: Inappropriate implementation in XML

Fri, 09/25/2026 - 14:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Chromium CVE-2026-95370: Inappropriate implementation in NFC

Fri, 09/25/2026 - 14:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Chromium CVE-2026-95371: Missing authorization in Views

Fri, 09/25/2026 - 14:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Chromium CVE-2026-95372: Use after free in Chromecast

Fri, 09/25/2026 - 14:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

Chromium CVE-2026-95373: Use after free in DevTools

Fri, 09/25/2026 - 14:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Categories: Microsoft

CVE-2026-100208 Microsoft Office Outlook Remote Code Execution Vulnerability

Fri, 09/25/2026 - 14:00
Information published. This CVE was addressed by updates that were released in August 2026, but the CVE was inadvertently omitted from the August 2026 Security Updates. This is an informational change only. Customers who have already installed the August 2026 updates do not need to take any further action.
Categories: Microsoft

CVE-2026-100206 Microsoft Office Information Disclosure Vulnerability

Fri, 09/25/2026 - 14:00
Information published. This CVE was addressed by updates that were released in July 2026, but the CVE was inadvertently omitted from the July 2026 Security Updates. This is an informational change only. Customers who have already installed the July 2026 updates do not need to take any further action.
Categories: Microsoft

CVE-2026-32157 Remote Desktop Client Remote Code Execution Vulnerability

Fri, 09/25/2026 - 14:00
Updated product information in the Software Update table. This is an informational change only.
Categories: Microsoft

Pages