ConnexionChromium: CVE-2025-10502 Heap buffer overflow in ANGLE
3 octobre 2026 à 11:05
Information published.
Vue normale
Reçu — 3 octobre 2026
⏭
MSRC Security Update Guide
Reçu — 2 octobre 2026
⏭
MSRC Security Update Guide
-
MSRC Security Update Guide
- CVE-2026-96940 Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2026-96940 Microsoft Exchange Server Elevation of Privilege Vulnerability
2 octobre 2026 à 16:00
Weak authorization in Microsoft Exchange Server allows an authenticated attacker to elevate privileges over a network.
Reçu — 30 septembre 2026
⏭
MSRC Security Update Guide
-
- CVE-2026-69451 Windows Management Instrumentation Elevation of Privilege Vulnerability
CVE-2026-69451 Windows Management Instrumentation Elevation of Privilege Vulnerability
30 septembre 2026 à 16:00
Updated an acknowledgement. This is an informational change only.
-
- CVE-2026-69605 Microsoft Install Service Elevation of Privilege Vulnerability
CVE-2026-69605 Microsoft Install Service Elevation of Privilege Vulnerability
30 septembre 2026 à 16:00
Updated an acknowledgement. This is an informational change only.
-
- CVE-2026-70562 Windows Audio Service Elevation of Privilege Vulnerability
CVE-2026-70562 Windows Audio Service Elevation of Privilege Vulnerability
30 septembre 2026 à 16:00
Updated an acknowledgement. This is an informational change only.
-
- CVE-2026-62699 Windows Universal Disk Format File System Driver (UDFS) Remote Code Execution Vulnerability
CVE-2026-62699 Windows Universal Disk Format File System Driver (UDFS) Remote Code Execution Vulnerability
30 septembre 2026 à 16:00
Updated an acknowledgement. This is an informational change only.
-
- CVE-2026-62758 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
CVE-2026-62758 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
30 septembre 2026 à 16:00
Updated an acknowledgement. This is an informational change only.
-
- CVE-2026-62784 Microsoft Local Security Authority Server (lsasrv) Remote Code Execution Vulnerability
CVE-2026-62784 Microsoft Local Security Authority Server (lsasrv) Remote Code Execution Vulnerability
30 septembre 2026 à 16:00
Updated an acknowledgement. This is an informational change only.
-
- CVE-2026-66804 Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability
CVE-2026-66804 Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability
30 septembre 2026 à 16:00
Updated an acknowledgement. This is an informational change only.
-
- CVE-2026-70125 Microsoft Office Outlook Remote Code Execution Vulnerability
CVE-2026-70125 Microsoft Office Outlook Remote Code Execution Vulnerability
30 septembre 2026 à 16:00
CWE added. Informational change only.
CVE-2026-69504 Windows NTFS Information Disclosure Vulnerability
30 septembre 2026 à 16:00
Updated an acknowledgement. This is an informational change only.
-
- CVE-2026-69712 Windows Key Distribution Center Remote Code Execution Vulnerability
CVE-2026-69712 Windows Key Distribution Center Remote Code Execution Vulnerability
30 septembre 2026 à 16:00
Updated an acknowledgement. This is an informational change only.
CVE-2026-69288 Windows GDI+ Information Disclosure Vulnerability
30 septembre 2026 à 16:00
Updated an acknowledgement. This is an informational change only.
CVE-2026-69328 Windows Storage Elevation of Privilege Vulnerability
30 septembre 2026 à 16:00
Updated an acknowledgement. This is an informational change only.
CVE-2026-69586 Microsoft Windows PDF Remote Code Execution Vulnerability
30 septembre 2026 à 16:00
Updated an acknowledgement. This is an informational change only.
-
- CVE-2026-62722 Microsoft Brokering File System Elevation of Privilege Vulnerability
CVE-2026-62722 Microsoft Brokering File System Elevation of Privilege Vulnerability
30 septembre 2026 à 16:00
Updated an acknowledgement. This is an informational change only.
-
- CVE-2026-65787 Desktop Window Manager Elevation of Privilege Vulnerability
CVE-2026-65787 Desktop Window Manager Elevation of Privilege Vulnerability
30 septembre 2026 à 16:00
Updated an acknowledgement. This is an informational change only.
CVE-2026-61938 Windows Installer Elevation of Privilege Vulnerability
30 septembre 2026 à 16:00
Updated an acknowledgement. This is an informational change only.
-
- CVE-2026-49800 Windows Web Proxy Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability
CVE-2026-49800 Windows Web Proxy Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability
30 septembre 2026 à 16:00
Updated an acknowledgement. This is an informational change only.
-
- CVE-2026-69522 .NET and Visual Studio Remote Code Execution Vulnerability
CVE-2026-69522 .NET and Visual Studio Remote Code Execution Vulnerability
29 septembre 2026 à 16:00
Security Updates table updated.
Reçu — 29 septembre 2026
⏭
MSRC Security Update Guide
CVE-2026-62694 Windows Installer Elevation of Privilege Vulnerability
29 septembre 2026 à 16:00
Updated an acknowledgement. This is an informational change only.
-
- CVE-2026-69307 Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability
CVE-2026-69307 Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability
29 septembre 2026 à 16:00
Updated an acknowledgement. This is an informational change only.
-
- CVE-2026-56172 Windows VHD miniport driver Elevation of Privilege Vulnerability
CVE-2026-56172 Windows VHD miniport driver Elevation of Privilege Vulnerability
29 septembre 2026 à 16:00
Updated an acknowledgement. This is an informational change only.
CVE-2026-68880 Windows Win32k Elevation of Privilege Vulnerability
29 septembre 2026 à 16:00
Updated an acknowledgement. This is an informational change only.
CVE-2026-61930 Windows Kernel Elevation of Privilege Vulnerability
29 septembre 2026 à 16:00
Updated an acknowledgement. This is an informational change only.
-
- CVE-2026-62688 Windows MIDI Service Module Elevation of Privileges Vulnerability
CVE-2026-62688 Windows MIDI Service Module Elevation of Privileges Vulnerability
29 septembre 2026 à 16:00
Updated an acknowledgement. This is an informational change only.
CVE-2026-62755 Windows DHCP Client Elevation of Privilege Vulnerability
29 septembre 2026 à 16:00
Updated an acknowledgement. This is an informational change only.
CVE-2026-50332 Windows Kernel Elevation of Privilege Vulnerability
29 septembre 2026 à 16:00
Updated an acknowledgement. This is an informational change only.
-
- CVE-2026-50400 Windows App Package Installer Elevation of Privilege Vulnerability
CVE-2026-50400 Windows App Package Installer Elevation of Privilege Vulnerability
29 septembre 2026 à 16:00
Updated an acknowledgement. This is an informational change only.
-
- CVE-2026-50357 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
CVE-2026-50357 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
29 septembre 2026 à 16:00
Updated an acknowledgement. This is an informational change only.
-
- CVE-2026-50375 DirectX Graphics Kernel Elevation of Privilege Vulnerability
CVE-2026-50375 DirectX Graphics Kernel Elevation of Privilege Vulnerability
29 septembre 2026 à 16:00
Updated an acknowledgement. This is an informational change only.
CVE-2026-50414 Windows Media Elevation of Privilege Vulnerability
29 septembre 2026 à 16:00
Updated an acknowledgement. This is an informational change only.
CVE-2026-57095 Win32k Elevation of Privilege Vulnerability
29 septembre 2026 à 16:00
Updated an acknowledgement. This is an informational change only.
Chromium CVE-2026-91728: Integer overflow
29 septembre 2026 à 10:46
Information published.
Chromium CVE-2026-91745: Use after free
29 septembre 2026 à 10:46
Information published.
Reçu — 28 septembre 2026
⏭
MSRC Security Update Guide
-
- CVE-2026-81355 Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability
CVE-2026-81355 Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability
28 septembre 2026 à 16:00
Updated an acknowledgement. This is an informational change only.
Reçu — 26 septembre 2026
⏭
MSRC Security Update Guide
-
- CVE-2026-69522 .NET and Visual Studio Remote Code Execution Vulnerability
CVE-2026-69522 .NET and Visual Studio Remote Code Execution Vulnerability
25 septembre 2026 à 16:00
Security Updates table updated provide links to the KB articles and download center updates. Microsoft recommends installing the updates.
-
- CVE-2026-78510 Microsoft Outlook and Word Remote Code Execution Vulnerability
CVE-2026-78510 Microsoft Outlook and Word Remote Code Execution Vulnerability
25 septembre 2026 à 16:00
Updated CVE title and CVSS Score. This is an informational change only.
Chromium CVE-2026-95274: Improper output encoding in DevTools
25 septembre 2026 à 16:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium CVE-2026-95275: Incorrect reference resolution in MediaStream
25 septembre 2026 à 16:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
