Chromium: CVE-2026-84331 Incorrect authorization in Actor
Chromium: CVE-2026-84329 Confused deputy in CredentialProvider
Chromium: CVE-2026-84328 Missing authorization in FileSystem
Chromium: CVE-2026-84327 Incorrect authorization in Autofill
Chromium: CVE-2026-84326 Uninitialized resource in V8
Chromium: CVE-2026-84325 Improper input validation in DataTransfer
Chromium: CVE-2026-84324 Use after free in Proxy
Chromium: CVE-2026-84323 Missing authorization in FileSystem
New - NetScaler VPX Release (Maintenance Phase) 13.1 Build 64.22
New - NetScaler SDX Bundle (Maintenance Phase) 13.1-64.22
New - NetScaler Release (Maintenance Phase) 13.1 Build 64.22
New - Netscaler BLX image (Maintenance Phase) 13.1 Build 64.22
New - NetScaler CPX Release (Maintenance Phase) 13.1 Build 64.22
New - Citrix Virtual Delivery Agent for macOS 2607
CVE-2026-62906 Microsoft Discovery Studio Information Disclosure Vulnerability
Improper neutralization of special elements in data query logic in Microsoft Discovery Studio allows an unauthorized attacker to disclose information over a network.
CVE-2026-70178 Microsoft Fabric Elevation of Privilege Vulnerability
Missing authorization in Microsoft Fabric allows an authorized attacker to elevate privileges over a network.
CVE-2026-70352 Azure AI Language Elevation of Privilege Vulnerability
Missing authentication for critical function in Azure AI Language allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-80098 Copilot Studio Elevation of Privilege Vulnerability
Improper verification of cryptographic signature in Copilot Studio allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-83711 Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability
Authorization bypass through user-controlled key in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-69857 Azure Cosmos DB Spoofing Vulnerability
Authorization bypass through user-controlled key in Azure Cosmos DB allows an authorized attacker to perform spoofing over a network.


