Microsoft Security Center Center News

Subscribe to Microsoft Security Center Center News feed
Updated: 14 min 16 sec ago

Chromium: CVE-2026-19558 Use after free in Extensions

Fri, 08/14/2026 - 23:37
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2025) for more information.
Categories: Microsoft

Chromium: CVE-2026-19557 Use after free in TabStrip

Fri, 08/14/2026 - 23:37
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2025) for more information.
Categories: Microsoft

Chromium: CVE-2026-19556 Use after free in V8

Fri, 08/14/2026 - 23:37
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2025) for more information.
Categories: Microsoft

CVE-2026-50313 Windows NTFS Remote Code Execution Vulnerability

Fri, 08/14/2026 - 14:00
Acknowledgement Updated
Categories: Microsoft

CVE-2026-48566 Windows DWM Core Library Information Disclosure Vulnerability

Fri, 08/14/2026 - 14:00
This CVE has been discovered to be an Elevation of Privilege and not an Information Disclosure. The CVE's Impact has been updated.
Categories: Microsoft

CVE-2026-72970 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Fri, 08/14/2026 - 14:00

Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

Categories: Microsoft

CVE-2026-50523 Microsoft PowerShell Remote Code Execution Vulnerability

Fri, 08/14/2026 - 14:00
The security updates for Powershell have been updated.
Categories: Microsoft

CVE-2026-69414 Microsoft Defender Elevation of Privilege Vulnerability

Fri, 08/14/2026 - 14:00
Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "ShieldBreak ". We are working to provide a high quality security update that addresses this vulnerability. We will provide information in this CVE when the update is available.
Categories: Microsoft

CVE-2026-32153 Windows Speech Runtime Elevation of Privilege Vulnerability

Fri, 08/14/2026 - 14:00
Acknowledgement Updated
Categories: Microsoft

CVE-2026-49162 Microsoft Brokering File System Elevation of Privilege Vulnerability

Thu, 08/13/2026 - 14:00
Added acknowledgements. This is an informational change only.
Categories: Microsoft

CVE-2026-49798 Windows Kernel Elevation of Privilege Vulnerability

Thu, 08/13/2026 - 14:00
Acknowledgement Updated
Categories: Microsoft

CVE-2026-50342 Windows MIDI Service Module Elevation of Privileges Vulnerability

Thu, 08/13/2026 - 14:00
Acknowledgement Updated
Categories: Microsoft

CVE-2026-50298 Windows Spaceport.sys Elevation of Privilege Vulnerability

Thu, 08/13/2026 - 14:00
Acknowledgement Updated
Categories: Microsoft

CVE-2026-50387 Windows GDI Elevation of Privilege Vulnerability

Thu, 08/13/2026 - 14:00
Acknowledgement Updated
Categories: Microsoft

CVE-2026-50383 Windows Print Spooler Information Disclosure Vulnerability

Thu, 08/13/2026 - 14:00
Acknowledgement Updated
Categories: Microsoft

CVE-2026-50461 Windows NTFS Remote Code Execution Vulnerability

Thu, 08/13/2026 - 14:00
Acknowledgement Updated
Categories: Microsoft

CVE-2026-45592 Windows Internet (wininet.dll) Elevation of Privilege Vulnerability

Thu, 08/13/2026 - 14:00
Updated an acknowledgement. This is an informational change only.
Categories: Microsoft

CVE-2026-45593 Windows SDK Elevation of Privilege Vulnerability

Thu, 08/13/2026 - 14:00
Acknowledgement Updated
Categories: Microsoft

Pages