Chromium: CVE-2026-8521 Use after free in Tab Groups
CVE-2026-8521
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
#windows
共收录 2186 条相关情报。
← 返回所有主题Chromium: CVE-2026-8520 Race in Payments
CVE-2026-8520
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Azure Virtual Network Gateway Remote Code Execution Vulnerability
CVE-2026-40411
Azure Virtual Network Gateway 是 Azure 云平台中用于建立站点到站点 VPN 或点到站点 VPN 连接的关键网络组件。该漏洞（CVE-2026-40411）源于网关对特定网络请求的输入验证不足，导致已获得
Azure Privileged Identity Management (PIM) Elevation of Privilege Vulnerability
CVE-2026-35430
Authorization bypass through user-controlled key in Azure Privileged Identity Management (PIM) allows an authorized atta
Microsoft Global Secure Access (GSA) Information Disclosure Vulnerability
CVE-2026-23663
Improper privilege management in Azure Entra ID allows an unauthorized attacker to elevate privileges over a network.
Microsoft Entra ID Elevation of Privilege Vulnerability
CVE-2026-42901
Origin validation error in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network.
Microsoft Planetary Computer Pro Information Disclosure Vulnerability
CVE-2026-41104
Deserialization of untrusted data in Microsoft Planetary Computer Pro allows an unauthorized attacker to disclose inform
Microsoft SharePoint Remote Code Execution Vulnerability
CVE-2026-45659
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a ne
Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability
CVE-2026-33843
Authentication bypass using an alternate path or channel in Microsoft Azure Active Directory B2C allows an unauthorized
Azure Stack HCI Information Disclosure Vulnerability
CVE-2026-26147
Improper input validation in Azure Compute Gallery allows an authorized attacker to disclose information over a network.
Microsoft Copilot Tampering Vulnerability
CVE-2026-41090
Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unaut
M365 Copilot Information Disclosure Vulnerability
CVE-2026-42827
Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthoriz
Azure Resource Manager Elevation of Privilege Vulnerability
CVE-2026-47280
Improper authentication in Azure Resource Manager (ARM) allows an unauthorized attacker to elevate privileges over a net
Microsoft Power Pages Remote Code Execution Vulnerability
CVE-2026-23652
Improper neutralization of special elements used in a command ('command injection') in Microsoft Power Pages allows an u
Azure Orbital Spatio Remote Code Execution Vulnerability
CVE-2026-40412
Unrestricted upload of file with dangerous type in Azure Orbital Spatio allows an unauthorized attacker to execute code
Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability
CVE-2026-42834
Improper link resolution before file access ('link following') in Azure Portal Windows Admin Center allows an authorized
Microsoft Defender Remote Code Execution Vulnerability
CVE-2026-45584
Heap-based buffer overflow in Microsoft Defender allows an unauthorized attacker to execute code over a network.
Microsoft Defender Elevation of Privilege Vulnerability
CVE-2026-41091
Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to el
Microsoft Defender Denial of Service Vulnerability
CVE-2026-45498
Microsoft Defender Denial of Service Vulnerability
Windows BitLocker Security Feature Bypass Vulnerability
CVE-2026-45585
Microsoft is aware of a security feature bypass vulnerability in Windows publicly referred to as "YellowKey". The proof