ConnexionCVE-2026-85921 Windows Secure Kernel Mode Elevation of Privilege Vulnerability
14 septembre 2026 à 16:00
Double free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
Vue normale
-
MSRC Security Update Guide
- CVE-2026-85921 Windows Secure Kernel Mode Elevation of Privilege Vulnerability
-
- CVE-2026-62721 Windows User-Mode Power Service (UMPS) Elevation of Privilege Vulnerability
CVE-2026-62721 Windows User-Mode Power Service (UMPS) Elevation of Privilege Vulnerability
14 septembre 2026 à 16:00
The CVE was updated with links to security updates for Windows 11, version 26H1, 25H2, and 24H2 to address a missed fix. Microsoft recommends installing these updates as soon as possible.
Chromium CVE-2026-87491: Out of bounds write in V8
12 septembre 2026 à 06:56
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. Google is aware that an exploit for CVE-2026-87491 exists in the wild.
-
- CVE-2026-85892 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2026-85892 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
11 septembre 2026 à 16:00
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges locally.
-
- Chromium CVE-2026-76023: Improper resource control in Linux Toolkit Theming
Chromium CVE-2026-76023: Improper resource control in Linux Toolkit Theming
12 septembre 2026 à 03:02
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium CVE-2026-76022: Buffer overflow in Network
12 septembre 2026 à 03:01
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium CVE-2026-76021: Use after free in DOM
12 septembre 2026 à 03:01
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium CVE-2026-76019: Incorrect authorization in Workers
12 septembre 2026 à 03:01
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium CVE-2026-76018: Privilege elevation in Import
12 septembre 2026 à 03:01
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium CVE-2026-76017: Use after free in Chromoting
12 septembre 2026 à 03:01
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium CVE-2026-76039: Incorrect reference resolution in Core
12 septembre 2026 à 01:49
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium CVE-2026-76036: Buffer overflow in Dawn
12 septembre 2026 à 01:49
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium CVE-2026-85053: Improper resource exposure in CacheStorage
12 septembre 2026 à 01:49
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium CVE-2026-85052: Out of bounds read in CrashReporting
12 septembre 2026 à 01:49
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium CVE-2026-85051: Type confusion in Compositing
12 septembre 2026 à 01:49
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium CVE-2026-85049: Use after free in Skia
12 septembre 2026 à 01:49
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium CVE-2026-85048: Use after free in Compositing
12 septembre 2026 à 01:49
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium CVE-2026-85045: Race condition in V8
12 septembre 2026 à 01:49
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium CVE-2026-85043: Incomplete cleanup in Network
12 septembre 2026 à 01:49
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium CVE-2026-85042: Use after free in DevTools
12 septembre 2026 à 01:49
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium: CVE-2026-84333 Use after free in Dawn
11 septembre 2026 à 16:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium: CVE-2026-84330 UI misrepresentation in FullScreen
11 septembre 2026 à 16:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
Chromium: CVE-2026-84352 Use after free in WebGL
11 septembre 2026 à 16:00
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
CVE-2026-77490 Microsoft Edge (Chromium-based) Spoofing Vulnerability
11 septembre 2026 à 16:00
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-69461 Windows NTFS Remote Code Execution Vulnerability
11 septembre 2026 à 16:00
Updated an acknowledgement. This is an informational change only.
-
- CVE-2026-69468 Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability
CVE-2026-69468 Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability
11 septembre 2026 à 16:00
Updated an acknowledgement. This is an informational change only.
-
- CVE-2026-69732 Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability
CVE-2026-69732 Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability
11 septembre 2026 à 16:00
Updated an acknowledgement. This is an informational change only.
-
- CVE-2026-69860 Windows Imaging Component Remote Code Execution Vulnerability
CVE-2026-69860 Windows Imaging Component Remote Code Execution Vulnerability
11 septembre 2026 à 16:00
Updated an acknowledgement. This is an informational change only.
-
- CVE-2026-71336 Windows Work Folder Service Remote Code Execution Vulnerability
CVE-2026-71336 Windows Work Folder Service Remote Code Execution Vulnerability
11 septembre 2026 à 16:00
Updated an acknowledgement. This is an informational change only.
CVE-2026-77499 Windows DHCP Server Denial of Service Vulnerability
11 septembre 2026 à 16:00
Updated an acknowledgement. This is an informational change only.
-
- CVE-2026-81355 Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability
CVE-2026-81355 Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability
11 septembre 2026 à 16:00
Updated an acknowledgement. This is an informational change only.
CVE-2026-81379 Visual Studio Code Security Feature Bypass Vulnerability
11 septembre 2026 à 16:00
Updated an acknowledgement. This is an informational change only.
-
- CVE-2026-68894 Windows Error Reporting Elevation of Privilege Vulnerability
CVE-2026-68894 Windows Error Reporting Elevation of Privilege Vulnerability
11 septembre 2026 à 16:00
Updated an acknowledgement. This is an informational change only.
-
- CVE-2026-69314 Windows Device Association Broker Service Elevation of Privilege Vulnerability
CVE-2026-69314 Windows Device Association Broker Service Elevation of Privilege Vulnerability
11 septembre 2026 à 16:00
Updated an acknowledgement. This is an informational change only.
CVE-2026-69405 Windows DHCP Server Denial of Service Vulnerability
11 septembre 2026 à 16:00
Updated an acknowledgement. This is an informational change only.
CVE-2026-73016 DirectWrite Remote Code Execution Vulnerability
11 septembre 2026 à 16:00
Updated an acknowledgement. This is an informational change only.
CVE-2026-80080 Microsoft Office Word Remote Code Execution Vulnerability
11 septembre 2026 à 16:00
Updated an acknowledgement. This is an informational change only.
CVE-2026-81963 Windows Update Stack Elevation of Privilege Vulnerability
11 septembre 2026 à 16:00
Updated an acknowledgement. This is an informational change only.
-
- CVE-2026-61349 Windows Work Folder Service Elevation of Privilege Vulnerability
CVE-2026-61349 Windows Work Folder Service Elevation of Privilege Vulnerability
11 septembre 2026 à 16:00
Updated an acknowledgement. This is an informational change only.
CVE-2026-62799 Windows SMB Client Elevation of Privilege Vulnerability
11 septembre 2026 à 16:00
Updated an acknowledgement. This is an informational change only.
