Chromium: CVE-2026-8537 Insufficient policy enforcement in ViewTransitions
CVE-2026-8537
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
#msrc
共收录 2178 条相关情报。
← 返回所有主题Chromium: CVE-2026-8536 Insufficient validation of untrusted input in ReadingMode
CVE-2026-8536
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-8535 Out of bounds read in Media
CVE-2026-8535
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Microsoft Exchange Server Spoofing Vulnerability
CVE-2026-42897
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows
Microsoft Authenticator Information Disclosure Vulnerability
CVE-2026-41615
Exposure of sensitive information to an unauthorized actor in Microsoft Authenticator allows an unauthorized attacker to
Microsoft Outlook for iOS Tampering Vulnerability
CVE-2026-42893
Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthoriz
AMD: CVE-2025-54518 CPU OP Cache Corruption
CVE-2025-54518
This vulnerability was found and addressed by AMD. We are documenting it in the Security Update Guide to encourage custo
Microsoft SSO Plugin for Jira & Confluence Elevation of Privilege Vulnerability
CVE-2026-41103
Incorrect implementation of authentication algorithm in Microsoft SSO Plugin for Jira & Confluence allows an unauthorize
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVE-2026-34337
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVE-2026-33835
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
CVE-2026-42833
Execution with unnecessary privileges in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute c
Microsoft Office Spoofing Vulnerability
CVE-2026-42832
Improper access control in Microsoft Office allows an unauthorized attacker to perform spoofing locally.
Azure Monitor Agent Metrics Extension Elevation of Privilege Vulnerability
CVE-2026-42830
Untrusted search path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.
Azure Logic Apps Elevation of Privilege Vulnerability
CVE-2026-42823
Improper access control in Azure Logic Apps allows an authorized attacker to elevate privileges over a network.
Visual Studio Code Elevation of Privilege Vulnerability
CVE-2026-41613
Session fixation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network.
Azure Connected Machine Agent Elevation of Privilege Vulnerability
CVE-2026-40381
Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.
Secure Boot Security Feature Bypass Vulnerability
CVE-2026-41097
Reliance on a component that is not updateable in Windows Secure Boot allows an authorized attacker to bypass a security
Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability
CVE-2026-41086
Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network.
Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
CVE-2026-40420
Improper access control in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
CVE-2026-35436
Insufficient granularity of access control in Microsoft Office Click-To-Run allows an authorized attacker to elevate pri