Microsoft security update summary's for September 2026

1 month ago
September 4, 2026
16 replies
142 views

+63

TripleHelix
Moderator

CVEs have been published or revised in the Security Update Guide
September 3, 2026

These common vulnerabilities and exposures (CVEs) were recently published or revised in the Microsoft Security Update Guide:

CVE-2026-62906

Title: Microsoft Discovery Studio Information Disclosure Vulnerability
Version: 1.0
Reason for revision: Information published.
Originally released: September 3, 2026
Last updated: September 3, 2026
Aggregate CVE severity rating: Critical
Customer action required: No

CVE-2026-62916

Title: Microsoft Entra ID Elevation of Privilege Vulnerability
Version: 1.0
Reason for revision: Information published.
Originally released: September 3, 2026
Last updated: September 3, 2026
Aggregate CVE severity rating: Critical
Customer action required: No

CVE-2026-69857

Title: Azure Cosmos DB Spoofing Vulnerability
Version: 1.0
Reason for revision: Information published.
Originally released: September 3, 2026
Last updated: September 3, 2026
Aggregate CVE severity rating: Critical
Customer action required: No

CVE-2026-70178

Title: Microsoft Fabric Elevation of Privilege Vulnerability
Version: 1.0
Reason for revision: Information published.
Originally released: September 3, 2026
Last updated: September 3, 2026
Aggregate CVE severity rating: Critical
Customer action required: No

CVE-2026-70352

Title: Azure AI Language Elevation of Privilege Vulnerability
Version: 1.0
Reason for revision: Information published.
Originally released: September 3, 2026
Last updated: September 3, 2026
Aggregate CVE severity rating: Critical
Customer action required: No

CVE-2026-80098

Title: Copilot Studio Elevation of Privilege Vulnerability
Version: 1.0
Reason for revision: Information published.
Originally released: September 3, 2026
Last updated: September 3, 2026
Aggregate CVE severity rating: Critical
Customer action required: No

CVE-2026-83711

Title: Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability
Version: 1.0
Reason for revision: Information published.
Originally released: September 3, 2026
Last updated: September 3, 2026
Aggregate CVE severity rating: Critical
Customer action required: No

+63

TripleHelix
Author
Moderator
1 month ago
September 8, 2026

Happy Patch Tuesday!

New

September 2026 Security Updates

This release consists of the following 974 Microsoft CVEs:
Product Family Updates per Product/Version Vulnerabilities Addressed Distinct Updates Type of Update
Azure 1 12 4 Individual
Developer Tools 1 22 36 Cumulative
Exchange Server 1 9 4 Cumulative
Office 1 111 11 Cumulative (except 2016)
Office 2016 1 111 18 Individual
Other 1 9 9 Individual
SharePoint Server 1 16 3 Cumulative
Skype for Business 1 10 3 Cumulative
SQL 1 62 1 Cumulative
Windows 1 723 32 Cumulative

Notable CVEs
CVE ID Title Notable Item
CVE-2026-85880 Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability Exploitation Detected
CVE-2026-81963 Windows Update Stack Elevation of Privilege Vulnerability Exploitation Detected

We are republishing 25 non-Microsoft CVEs:
Security Update Guide Blog Posts
Date Blog Post
October 31, 2025 You asked, we delivered: Introducing new features for an improved security experience
October 28, 2025 Understanding CVE-2025-55315: What CISOs, security engineers, and sysadmins should know
October 22, 2025 Toward greater transparency: Introducing machine-readable Vulnerability Exploitability Xchange (VEX) for Azure Linux and beyond
November 12, 2024 Toward greater transparency: Publishing machine-readable CSAF files
June 27, 2024 Toward greater transparency: Unveiling Cloud Service CVEs
April 9, 2024 Toward greater transparency: Security Update Guide now shares CWEs for CVEs

Relevant Resources
The new Hotpatching feature is now generally available. Please see Hotpatching feature for Windows Server Azure Edition virtual machines (VMs) for more information.

Windows 10 and Windows 11 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10 and Windows 11, in addition to non-security updates. The updates are available via the Microsoft Update Catalog. For information on lifecycle and support dates for Windows 10 and Windows 11 operating systems, please see Windows Lifecycle Facts Sheet.

Microsoft is improving Windows Release Notes. For more information, please see What's next for Windows release notes.

A list of the latest servicing stack updates for each operating system can be found in ADV990001. This list will be updated whenever a new servicing stack update is released. It is important to install the latest servicing stack update.

In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.

Customers running Windows Server 2008 R2, or Windows Server 2008 need to purchase the Extended Security Update to continue receiving security updates. See 4522133 for more information.
Known Issues
You can see these in more detail from the Deployments tab by selecting Known Issues column in the Edit Columns panel.

For more information about Windows Known Issues, please see Windows message center (links to currently-supported versions of Windows are in the left pane).

KB Article Applies To
5121608 Microsoft Exchange Server Subscription Edition
5121609 Microsoft Exchange Server 2019
5121610 Microsoft Exchange Server 2019 CU14
5121611 Microsoft Exchange Server 2016 CU23
5122768 Microsoft SQL Server 2022 for x64-based Systems (CU26)
5122769 Microsoft SQL Server 2025 for x64-based Systems (CU
5122770 Microsoft SQL Server 2025 for x64-based Systems (GDR)
5122771 Microsoft SQL Server 2022 for x64-based Systems (GDR)
5122772 Microsoft SQL Server 2019 for x64-based Systems (CU 32)
5122773 SQL Server 2019 GDR (Windows and Linux)
5122774 SQL Server 2017 CU31 (Windows and Linux)
5122775 SQL Server 2017 GDR (Windows and Linux)
5122871 Windows Server 2025
5122882 Windows Server 2022
Released: Sep 8, 2026

September 2026 Security Updates - Release Notes - Security Update Guide - Microsoft

Daniel - Microsoft MVP Consumer Security (2012-2016) Windows 10 Pro x64 22H2 on my Alienware 17R2 and Windows 11 Pro x64 25H2 for Workstations on my Alienware 17R5 Laptops with Webroot SecureAnywhere Complete Beta Tester for PC & Android Samsung Galaxy A16 5G OS 16.

+63

TripleHelix
Author
Moderator
1 month ago
September 8, 2026

My updates for today!

+63

TripleHelix
Author
Moderator
1 month ago
September 9, 2026

CVEs have been published or revised in the Security Update Guide

September 9, 2026

These common vulnerabilities and exposures (CVEs) were recently published or revised in the Microsoft Security Update Guide:

CVE-2026-85046

Title: Chromium: CVE-2026-85046 Type confusion in V8
Version: 1.0
Reason for revision: Information published.
Originally released: September 9, 2026
Last updated: September 9, 2026
Aggregate CVE severity rating:
Customer action required: Yes

+63

TripleHelix
Author
Moderator
1 month ago
September 11, 2026

CVEs have been published or revised in the Security Update Guide

September 11, 2026

These common vulnerabilities and exposures (CVEs) were recently published or revised in the Microsoft Security Update Guide:

CVE-2026-76017

Title: Chromium CVE-2026-76017: Use after free in Chromoting
Version: 1.0
Reason for revision: Information published.
Originally released: September 11, 2026
Last updated: September 11, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-76018

Title: Chromium CVE-2026-76018: Privilege elevation in Import
Version: 1.0
Reason for revision: Information published.
Originally released: September 11, 2026
Last updated: September 11, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-76019

Title: Chromium CVE-2026-76019: Incorrect authorization in Workers
Version: 1.0
Reason for revision: Information published.
Originally released: September 11, 2026
Last updated: September 11, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-76021

Title: Chromium CVE-2026-76021: Use after free in DOM
Version: 1.0
Reason for revision: Information published.
Originally released: September 11, 2026
Last updated: September 11, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-76022

Title: Chromium CVE-2026-76022: Buffer overflow in Network
Version: 1.0
Reason for revision: Information published.
Originally released: September 11, 2026
Last updated: September 11, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-76023

Title: Chromium CVE-2026-76023: Improper resource control in Linux Toolkit Theming
Version: 1.0
Reason for revision: Information published.
Originally released: September 11, 2026
Last updated: September 11, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-76036

Title: Chromium CVE-2026-76036: Buffer overflow in Dawn
Version: 1.0
Reason for revision: Information published.
Originally released: September 11, 2026
Last updated: September 11, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-76039

Title: Chromium CVE-2026-76039: Incorrect reference resolution in Core
Version: 1.0
Reason for revision: Information published.
Originally released: September 11, 2026
Last updated: September 11, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-77490

Title: Microsoft Edge (Chromium-based) Spoofing Vulnerability
Version: 1.0
Reason for revision: Information published.
Originally released: September 11, 2026
Last updated: September 11, 2026
Aggregate CVE severity rating: Moderate
Customer action required: Yes

CVE-2026-84330

Title: Chromium: CVE-2026-84330 UI misrepresentation in FullScreen
Version: 1.0
Reason for revision: Information published.
Originally released: September 11, 2026
Last updated: September 11, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-84333

Title: Chromium: CVE-2026-84333 Use after free in Dawn
Version: 1.0
Reason for revision: Information published.
Originally released: September 11, 2026
Last updated: September 11, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-84352

Title: Chromium: CVE-2026-84352 Use after free in WebGL
Version: 1.0
Reason for revision: Information published.
Originally released: September 11, 2026
Last updated: September 11, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-85042

Title: Chromium CVE-2026-85042: Use after free in DevTools
Version: 1.0
Reason for revision: Information published.
Originally released: September 11, 2026
Last updated: September 11, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-85043

Title: Chromium CVE-2026-85043: Incomplete cleanup in Network
Version: 1.0
Reason for revision: Information published.
Originally released: September 11, 2026
Last updated: September 11, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-85045

Title: Chromium CVE-2026-85045: Race condition in V8
Version: 1.0
Reason for revision: Information published.
Originally released: September 11, 2026
Last updated: September 11, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-85048

Title: Chromium CVE-2026-85048: Use after free in Compositing
Version: 1.0
Reason for revision: Information published.
Originally released: September 11, 2026
Last updated: September 11, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-85049

Title: Chromium CVE-2026-85049: Use after free in Skia
Version: 1.0
Reason for revision: Information published.
Originally released: September 11, 2026
Last updated: September 11, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-85051

Title: Chromium CVE-2026-85051: Type confusion in Compositing
Version: 1.0
Reason for revision: Information published.
Originally released: September 11, 2026
Last updated: September 11, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-85052

Title: Chromium CVE-2026-85052: Out of bounds read in CrashReporting
Version: 1.0
Reason for revision: Information published.
Originally released: September 11, 2026
Last updated: September 11, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-85053

Title: Chromium CVE-2026-85053: Improper resource exposure in CacheStorage
Version: 1.0
Reason for revision: Information published.
Originally released: September 11, 2026
Last updated: September 11, 2026
Aggregate CVE severity rating:
Customer action required: Yes

+63

TripleHelix
Author
Moderator
1 month ago
September 12, 2026

CVEs have been published or revised in the Security Update Guide

September 11, 2026

These common vulnerabilities and exposures (CVEs) were recently published or revised in the Microsoft Security Update Guide:

CVE-2026-87491

Title: Chromium CVE-2026-87491: Out of bounds write in V8
Version: 1.0
Reason for revision: Information published.
Originally released: September 11, 2026
Last updated: September 11, 2026
Aggregate CVE severity rating:
Customer action required: Yes

+63

TripleHelix
Author
Moderator
1 month ago
September 14, 2026

CVEs have been published or revised in the Security Update Guide

September 14, 2026

These common vulnerabilities and exposures (CVEs) were recently published or revised in the Microsoft Security Update Guide:

CVE-2026-69414

Title: Microsoft Defender Elevation of Privilege Vulnerability
Version: 2.0
Reason for revision: Microsoft has released an update to the Microsoft Malware Protection Engine that addresses the vulnerability identified by CVE-2026-69414. Please see the FAQ for more information on how to check if the new version has been installed.
Originally released: August 14, 2026
Last updated: September 3, 2026
Aggregate CVE severity rating: Important
Customer action required: Yes

+63

TripleHelix
Author
Moderator
29 days ago
September 18, 2026

CVEs have been published or revised in the Security Update Guide

September 17, 2026

These common vulnerabilities and exposures (CVEs) were recently published or revised in the Microsoft Security Update Guide:

CVE-2026-55946

Title: Microsoft Copilot Information Disclosure Vulnerability
Version: 1.0
Reason for revision: Information published.
Originally released: September 17, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Critical
Customer action required: No

CVE-2026-62874

Title: Azure Billing Elevation of Privilege Vulnerability
Version: 1.0
Reason for revision: Information published.
Originally released: September 17, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Critical
Customer action required: No

CVE-2026-68791

Title: Azure Machine Learning Information Disclosure Vulnerability
Version: 1.0
Reason for revision: Information published.
Originally released: September 17, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Critical
Customer action required: No

CVE-2026-69399

Title: Azure Arc Elevation of Privilege Vulnerability
Version: 1.0
Reason for revision: Information published.
Originally released: September 17, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Critical
Customer action required: No

CVE-2026-69843

Title: Microsoft Fabric Elevation of Privilege Vulnerability
Version: 1.0
Reason for revision: Information published.
Originally released: September 17, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Critical
Customer action required: No

CVE-2026-69865

Title: Microsoft Container Registry Elevation of Privilege Vulnerability
Version: 1.0
Reason for revision: Information published.
Originally released: September 17, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Critical
Customer action required: No

CVE-2026-70009

Title: Azure Arc Elevation of Privilege Vulnerability
Version: 1.0
Reason for revision: Information published.
Originally released: September 17, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Critical
Customer action required: No

CVE-2026-70200

Title: Azure Logic Apps Elevation of Privilege Vulnerability
Version: 1.0
Reason for revision: Information published.
Originally released: September 17, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Critical
Customer action required: No

CVE-2026-77903

Title: Microsoft Dataverse Elevation of Privilege Vulnerability
Version: 1.0
Reason for revision: Information published.
Originally released: September 17, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Critical
Customer action required: No

CVE-2026-78501

Title: Microsoft 365 Copilot Business Chat Information Disclosure Vulnerability
Version: 1.0
Reason for revision: Information published.
Originally released: September 17, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Critical
Customer action required: No

CVE-2026-83944

Title: Azure Logic Apps Elevation of Privilege Vulnerability
Version: 1.0
Reason for revision: Information published.
Originally released: September 17, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Critical
Customer action required: No

CVE-2026-83946

Title: Azure Portal Spoofing Vulnerability
Version: 1.0
Reason for revision: Information published.
Originally released: September 17, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Critical
Customer action required: No

CVE-2026-85878

Title: Azure Database for PostgreSQL Elevation of Privilege Vulnerability
Version: 1.0
Reason for revision: Information published.
Originally released: September 17, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Critical
Customer action required: No

CVE-2026-85885

Title: Microsoft 365 Copilot Elevation of Privilege Vulnerability
Version: 1.0
Reason for revision: Information published.
Originally released: September 17, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Critical
Customer action required: No

CVE-2026-85887

Title: M365 Copilot Information Disclosure Vulnerability
Version: 1.0
Reason for revision: Information published.
Originally released: September 17, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Critical
Customer action required: No

CVE-2026-85889

Title: Azure AI Foundry Elevation of Privilege Vulnerability
Version: 1.0
Reason for revision: Information published.
Originally released: September 17, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Critical
Customer action required: No

CVE-2026-85917

Title: Azure AI Foundry Elevation of Privilege Vulnerability
Version: 1.0
Reason for revision: Information published.
Originally released: September 17, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Critical
Customer action required: No

CVE-2026-87701

Title: Azure Cosmos DB Elevation of Privilege Vulnerability
Version: 1.0
Reason for revision: Information published.
Originally released: September 17, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Critical
Customer action required: No

+63

TripleHelix
Author
Moderator
29 days ago
September 18, 2026

CVEs have been published or revised in the Security Update Guide

September 17, 2026

These common vulnerabilities and exposures (CVEs) were recently published or revised in the Microsoft Security Update Guide:

CVE-2026-67378

Title: Microsoft SQL Server Remote Code Execution Vulnerability
Version: 1.1
Reason for revision: The CVSS vector string was update to reflect that an attacker does not require any privileges to successfully exploit this vulnerability (PR:N). This is an informational change only.
Originally released: September 8, 2026
Last updated: September 16, 2026
Aggregate CVE severity rating: Critical
Customer action required: Yes

CVE-2026-67631

Title: Microsoft SQL Server Remote Code Execution Vulnerability
Version: 1.1
Reason for revision: The CVSS vector string was update to reflect that an attacker does not require any privileges to successfully exploit this vulnerability (PR:N). This is an informational change only.
Originally released: September 8, 2026
Last updated: September 16, 2026
Aggregate CVE severity rating: Critical
Customer action required: Yes

CVE-2026-67643

Title: Microsoft SQL Server Remote Code Execution Vulnerability
Version: 1.1
Reason for revision: The CVSS vector string was update to reflect that an attacker does not require any privileges to successfully exploit this vulnerability (PR:N). This is an informational change only.
Originally released: September 8, 2026
Last updated: September 16, 2026
Aggregate CVE severity rating: Critical
Customer action required: Yes

CVE-2026-69626

Title: Microsoft Office Information Disclosure Vulnerability
Version: 2.0
Reason for revision: Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Originally released: September 8, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Important
Customer action required: Yes

CVE-2026-69632

Title: Microsoft Office Remote Code Execution Vulnerability
Version: 2.0
Reason for revision: Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Originally released: September 8, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Critical
Customer action required: Yes

CVE-2026-69671

Title: Microsoft Office Word Remote Code Execution Vulnerability
Version: 2.0
Reason for revision: Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Originally released: September 8, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Important
Customer action required: Yes

CVE-2026-69678

Title: Microsoft Office PowerPoint Remote Code Execution Vulnerability
Version: 2.0
Reason for revision: Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Originally released: September 8, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Critical
Customer action required: Yes

CVE-2026-69686

Title: Microsoft Office Word Remote Code Execution Vulnerability
Version: 2.0
Reason for revision: Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Originally released: September 8, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Important
Customer action required: Yes

CVE-2026-69719

Title: Microsoft Office Word Information Disclosure Vulnerability
Version: 2.0
Reason for revision: Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Originally released: September 8, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Important
Customer action required: Yes

CVE-2026-69722

Title: Microsoft Office Word Remote Code Execution Vulnerability
Version: 2.0
Reason for revision: Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Originally released: September 8, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Important
Customer action required: Yes

CVE-2026-69734

Title: Microsoft Office Word Information Disclosure Vulnerability
Version: 2.0
Reason for revision: Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Originally released: September 8, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Important
Customer action required: Yes

CVE-2026-69739

Title: Microsoft Office Information Disclosure Vulnerability
Version: 2.0
Reason for revision: Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Originally released: September 8, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Important
Customer action required: Yes

CVE-2026-69759

Title: Microsoft Office Word Remote Code Execution Vulnerability
Version: 2.0
Reason for revision: Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Originally released: September 8, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Important
Customer action required: Yes

CVE-2026-69767

Title: Microsoft Office PowerPoint Remote Code Execution Vulnerability
Version: 2.0
Reason for revision: Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Originally released: September 8, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Critical
Customer action required: Yes

CVE-2026-69797

Title: Microsoft Office PowerPoint Remote Code Execution Vulnerability
Version: 2.0
Reason for revision: Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Originally released: September 8, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Critical
Customer action required: Yes

CVE-2026-72938

Title: Microsoft Office PowerPoint Information Disclosure Vulnerability
Version: 2.0
Reason for revision: Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Originally released: September 8, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Important
Customer action required: Yes

CVE-2026-72972

Title: Microsoft Office Word Remote Code Execution Vulnerability
Version: 2.0
Reason for revision: Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Originally released: September 8, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Important
Customer action required: Yes

+63

TripleHelix
Author
Moderator
29 days ago
September 18, 2026

CVE-2026-72973

Title: Microsoft Office Word Remote Code Execution Vulnerability
Version: 2.0
Reason for revision: Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Originally released: September 8, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Important
Customer action required: Yes

CVE-2026-72974

Title: Microsoft Office Excel Information Disclosure Vulnerability
Version: 2.0
Reason for revision: Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Originally released: September 8, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Important
Customer action required: Yes

CVE-2026-72975

Title: Microsoft Office PowerPoint Information Disclosure Vulnerability
Version: 2.0
Reason for revision: Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Originally released: September 8, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Important
Customer action required: Yes

CVE-2026-72976

Title: Microsoft Office Word Information Disclosure Vulnerability
Version: 2.0
Reason for revision: Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Originally released: September 8, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Important
Customer action required: Yes

CVE-2026-72977

Title: Microsoft Office PowerPoint Information Disclosure Vulnerability
Version: 2.0
Reason for revision: Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Originally released: September 8, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Important
Customer action required: Yes

CVE-2026-77898

Title: Microsoft Office Remote Code Execution Vulnerability
Version: 2.0
Reason for revision: Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Originally released: September 8, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Critical
Customer action required: Yes

CVE-2026-77901

Title: Microsoft Office Word Remote Code Execution Vulnerability
Version: 2.0
Reason for revision: Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Originally released: September 8, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Important
Customer action required: Yes

CVE-2026-78439

Title: Microsoft Office Graphics Component Remote Code Execution Vulnerability
Version: 2.0
Reason for revision: Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Originally released: September 8, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Critical
Customer action required: Yes

CVE-2026-78502

Title: Microsoft Office Word Information Disclosure Vulnerability
Version: 2.0
Reason for revision: Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Originally released: September 8, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Important
Customer action required: Yes

CVE-2026-78503

Title: Microsoft Office Word Information Disclosure Vulnerability
Version: 2.0
Reason for revision: Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Originally released: September 8, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Important
Customer action required: Yes

CVE-2026-78504

Title: Microsoft Office Word Remote Code Execution Vulnerability
Version: 2.0
Reason for revision: Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Originally released: September 8, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Important
Customer action required: Yes

+63

TripleHelix
Author
Moderator
29 days ago
September 18, 2026

CVE-2026-78506

Title: Microsoft Office Word Information Disclosure Vulnerability
Version: 2.0
Reason for revision: Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Originally released: September 8, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Important
Customer action required: Yes

CVE-2026-78507

Title: Microsoft Office Word Remote Code Execution Vulnerability
Version: 2.0
Reason for revision: Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Originally released: September 8, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Important
Customer action required: Yes

CVE-2026-78509

Title: Microsoft Office Outlook Remote Code Execution Vulnerability
Version: 2.0
Reason for revision: Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Originally released: September 8, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Critical
Customer action required: Yes

CVE-2026-78510

Title: Microsoft Word Remote Code Execution Vulnerability
Version: 2.0
Reason for revision: Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Originally released: September 8, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Critical
Customer action required: Yes

CVE-2026-78511

Title: Microsoft Office Word Remote Code Execution Vulnerability
Version: 2.0
Reason for revision: Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Originally released: September 8, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Important
Customer action required: Yes

CVE-2026-78512

Title: Microsoft Office Word Remote Code Execution Vulnerability
Version: 2.0
Reason for revision: Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Originally released: September 8, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Important
Customer action required: Yes

CVE-2026-78513

Title: Microsoft Office PowerPoint Information Disclosure Vulnerability
Version: 2.0
Reason for revision: Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Originally released: September 8, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Important
Customer action required: Yes

CVE-2026-78514

Title: Microsoft Office Word Remote Code Execution Vulnerability
Version: 2.0
Reason for revision: Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Originally released: September 8, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Important
Customer action required: Yes

CVE-2026-78515

Title: Microsoft Office Excel Information Disclosure Vulnerability
Version: 2.0
Reason for revision: Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Originally released: September 8, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Important
Customer action required: Yes

CVE-2026-78517

Title: Microsoft Office Word Remote Code Execution Vulnerability
Version: 2.0
Reason for revision: Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Originally released: September 8, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Important
Customer action required: Yes

CVE-2026-78518

Title: Microsoft Office Excel Remote Code Execution Vulnerability
Version: 2.0
Reason for revision: Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Originally released: September 8, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Important
Customer action required: Yes

CVE-2026-78520

Title: Microsoft Office Outlook Information Disclosure Vulnerability
Version: 2.0
Reason for revision: Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Originally released: September 8, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Critical
Customer action required: Yes

CVE-2026-78521

Title: Microsoft Office Word Remote Code Execution Vulnerability
Version: 2.0
Reason for revision: Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Originally released: September 8, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Important
Customer action required: Yes

+63

TripleHelix
Author
Moderator
29 days ago
September 18, 2026

CVE-2026-78525

Title: Microsoft Office Outlook Remote Code Execution Vulnerability
Version: 2.0
Reason for revision: Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Originally released: September 8, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Critical
Customer action required: Yes

CVE-2026-78526

Title: Microsoft Office Word Remote Code Execution Vulnerability
Version: 2.0
Reason for revision: Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Originally released: September 8, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Important
Customer action required: Yes

CVE-2026-80076

Title: Microsoft Office Information Disclosure Vulnerability
Version: 2.0
Reason for revision: Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Originally released: September 8, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Important
Customer action required: Yes

CVE-2026-80078

Title: Microsoft Office Information Disclosure Vulnerability
Version: 2.0
Reason for revision: Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Originally released: September 8, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Important
Customer action required: Yes

CVE-2026-80080

Title: Microsoft Office Word Remote Code Execution Vulnerability
Version: 2.0
Reason for revision: Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Originally released: September 8, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Important
Customer action required: Yes

CVE-2026-80082

Title: Microsoft Office Information Disclosure Vulnerability
Version: 2.0
Reason for revision: Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Originally released: September 8, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Important
Customer action required: Yes

CVE-2026-80085

Title: Microsoft Office Word Remote Code Execution Vulnerability
Version: 2.0
Reason for revision: Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Originally released: September 8, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Important
Customer action required: Yes

CVE-2026-80086

Title: Microsoft Office PowerPoint Information Disclosure Vulnerability
Version: 2.0
Reason for revision: Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Originally released: September 8, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Important
Customer action required: Yes

CVE-2026-80087

Title: Microsoft Office Information Disclosure Vulnerability
Version: 2.0
Reason for revision: Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Originally released: September 8, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Important
Customer action required: Yes

CVE-2026-80088

Title: Microsoft Office Word Information Disclosure Vulnerability
Version: 2.0
Reason for revision: Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Originally released: September 8, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Important
Customer action required: Yes

CVE-2026-80089

Title: Microsoft Office Information Disclosure Vulnerability
Version: 2.0
Reason for revision: Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Originally released: September 8, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Important
Customer action required: Yes

CVE-2026-80090

Title: Microsoft Office Word Information Disclosure Vulnerability
Version: 2.0
Reason for revision: Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Originally released: September 8, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Important
Customer action required: Yes

CVE-2026-80091

Title: Microsoft Office Information Disclosure Vulnerability
Version: 2.0
Reason for revision: Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Originally released: September 8, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Important
Customer action required: Yes

CVE-2026-81386

Title: Microsoft Excel Remote Code Execution Vulnerability
Version: 2.0
Reason for revision: Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.
Originally released: September 8, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating: Important
Customer action required: Yes

+63

TripleHelix
Author
Moderator
28 days ago
September 19, 2026

CVEs have been published or revised in the Security Update Guide

September 18, 2026

These common vulnerabilities and exposures (CVEs) were recently published or revised in the Microsoft Security Update Guide:

CVE-2026-88097

Title: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Version: 1.0
Reason for revision: Information published.
Originally released: September 18, 2026
Last updated: September 18, 2026
Aggregate CVE severity rating: Important
Customer action required: Yes

CVE-2026-91708

Title: Chromium CVE-2026-91708: Race condition
Version: 1.0
Reason for revision: Information published.
Originally released: September 17, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-91709

Title: Chromium CVE-2026-91709: Type confusion
Version: 1.0
Reason for revision: Information published.
Originally released: September 17, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-91710

Title: Chromium CVE-2026-91710: Use after free
Version: 1.0
Reason for revision: Information published.
Originally released: September 17, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-91711

Title: Chromium CVE-2026-91711: Out of bounds write
Version: 1.0
Reason for revision: Information published.
Originally released: September 17, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-91712

Title: Chromium CVE-2026-91712: Race condition
Version: 1.0
Reason for revision: Information published.
Originally released: September 17, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-91713

Title: Chromium CVE-2026-91713: Missing authorization
Version: 1.0
Reason for revision: Information published.
Originally released: September 17, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-91714

Title: Chromium CVE-2026-91714: Observable discrepancy
Version: 1.0
Reason for revision: Information published.
Originally released: September 17, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-91715

Title: Chromium CVE-2026-91715: Type confusion
Version: 1.0
Reason for revision: Information published.
Originally released: September 17, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-91716

Title: Chromium CVE-2026-91716: Use after free
Version: 1.0
Reason for revision: Information published.
Originally released: September 17, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-91717

Title: Chromium CVE-2026-91717: Missing authorization
Version: 1.0
Reason for revision: Information published.
Originally released: September 17, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-91718

Title: Chromium CVE-2026-91718: Use after free
Version: 1.0
Reason for revision: Information published.
Originally released: September 17, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-91719

Title: Chromium CVE-2026-91719: Code injection
Version: 1.0
Reason for revision: Information published.
Originally released: September 17, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-91720

Title: Chromium CVE-2026-91720: Uninitialized resource
Version: 1.0
Reason for revision: Information published.
Originally released: September 17, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-91721

Title: Chromium CVE-2026-91721: Use after free
Version: 1.0
Reason for revision: Information published.
Originally released: September 17, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-91722

Title: Chromium CVE-2026-91722: Use after free
Version: 1.0
Reason for revision: Information published.
Originally released: September 17, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-91723

Title: Chromium CVE-2026-91723: Race condition
Version: 1.0
Reason for revision: Information published.
Originally released: September 17, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-91724

Title: Chromium CVE-2026-91724: Use after free
Version: 1.0
Reason for revision: Information published.
Originally released: September 17, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-91725

Title: Chromium CVE-2026-91725: Observable discrepancy
Version: 1.0
Reason for revision: Information published.
Originally released: September 17, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-91726

Title: Chromium CVE-2026-91726: Out of bounds read
Version: 1.0
Reason for revision: Information published.
Originally released: September 17, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-91727

Title: Chromium CVE-2026-91727: Incorrect reference resolution
Version: 1.0
Reason for revision: Information published.
Originally released: September 17, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-91728

Title: Chromium CVE-2026-91728: Integer overflow
Version: 1.0
Reason for revision: Information published.
Originally released: September 17, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-91729

Title: Chromium CVE-2026-91729: Use after free
Version: 1.0
Reason for revision: Information published.
Originally released: September 17, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-91730

Title: Chromium CVE-2026-91730: Incomplete cleanup
Version: 1.0
Reason for revision: Information published.
Originally released: September 17, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-91731

Title: Chromium CVE-2026-91731: Type confusion
Version: 1.0
Reason for revision: Information published.
Originally released: September 17, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-91733

Title: Chromium CVE-2026-91733: Improper state validation
Version: 1.0
Reason for revision: Information published.
Originally released: September 17, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-91734

Title: Chromium CVE-2026-91734: Incorrect authorization
Version: 1.0
Reason for revision: Information published.
Originally released: September 17, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-91735

Title: Chromium CVE-2026-91735: Incorrect authorization
Version: 1.0
Reason for revision: Information published.
Originally released: September 17, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-91736

Title: Chromium CVE-2026-91736: Use after free
Version: 1.0
Reason for revision: Information published.
Originally released: September 17, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating:
Customer action required: Yes

+63

TripleHelix
Author
Moderator
28 days ago
September 19, 2026

CVE-2026-91737

Title: Chromium CVE-2026-91737: Use after free
Version: 1.0
Reason for revision: Information published.
Originally released: September 17, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-91738

Title: Chromium CVE-2026-91738: Improper input validation
Version: 1.0
Reason for revision: Information published.
Originally released: September 17, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-91739

Title: Chromium CVE-2026-91739: Missing authorization
Version: 1.0
Reason for revision: Information published.
Originally released: September 17, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-91740

Title: Chromium CVE-2026-91740: Uninitialized resource
Version: 1.0
Reason for revision: Information published.
Originally released: September 17, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-91741

Title: Chromium CVE-2026-91741: Type confusion
Version: 1.0
Reason for revision: Information published.
Originally released: September 17, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-91742

Title: Chromium CVE-2026-91742: Confused deputy
Version: 1.0
Reason for revision: Information published.
Originally released: September 17, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-91743

Title: Chromium CVE-2026-91743: Race condition
Version: 1.0
Reason for revision: Information published.
Originally released: September 17, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-91744

Title: Chromium CVE-2026-91744: Race condition
Version: 1.0
Reason for revision: Information published.
Originally released: September 17, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-91745

Title: Chromium CVE-2026-91745: Use after free
Version: 1.0
Reason for revision: Information published.
Originally released: September 17, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-91746

Title: Chromium CVE-2026-91746: Integer overflow
Version: 1.0
Reason for revision: Information published.
Originally released: September 17, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-91747

Title: Chromium CVE-2026-91747: Use after free
Version: 1.0
Reason for revision: Information published.
Originally released: September 17, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-91748

Title: Chromium CVE-2026-91748: Race condition
Version: 1.0
Reason for revision: Information published.
Originally released: September 17, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-91749

Title: Chromium CVE-2026-91749: Use after free
Version: 1.0
Reason for revision: Information published.
Originally released: September 17, 2026
Last updated: September 17, 2026
Aggregate CVE severity rating:
Customer action required: Yes

+63

TripleHelix
Author
Moderator
21 days ago
September 26, 2026

CVEs have been published or revised in the Security Update Guide
September 25, 2026

These common vulnerabilities and exposures (CVEs) were recently published or revised in the Microsoft Security Update Guide:

CVE-2026-95274

Title: Chromium CVE-2026-95274: Improper output encoding in DevTools
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95275

Title: Chromium CVE-2026-95275: Incorrect reference resolution in MediaStream
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95276

Title: Chromium CVE-2026-95276: Improper input validation in Themes
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95277

Title: Chromium CVE-2026-95277: Use after free in Views
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95278

Title: Chromium CVE-2026-95278: Missing authorization in WakeLock
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95279

Title: Chromium CVE-2026-95279: UI misrepresentation in Omnibox
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95280

Title: Chromium CVE-2026-95280: Race condition in V8
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95281

Title: Chromium CVE-2026-95281: Buffer overflow in ANGLE
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95282

Title: Chromium CVE-2026-95282: Use after free in Platform
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95283

Title: Chromium CVE-2026-95283: Buffer overflow in Tint
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95284

Title: Chromium CVE-2026-95284: Buffer overflow in ANGLE
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95285

Title: Chromium CVE-2026-95285: Missing authorization in WebView
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95286

Title: Chromium CVE-2026-95286: Type confusion in Bindings
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95287

Title: Chromium CVE-2026-95287: Missing authorization in Navigation
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95288

Title: Chromium CVE-2026-95288: UI misrepresentation in Mobile
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95289

Title: Chromium CVE-2026-95289: Incorrect authorization in Scroll
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95290

Title: Chromium CVE-2026-95290: Missing authorization in NFC
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95291

Title: Chromium CVE-2026-95291: UI misrepresentation in SecurityIndicators
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95292

Title: Chromium CVE-2026-95292: Incorrect authorization in Safebrowsing
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95293

Title: Chromium CVE-2026-95293: Uninitialized resource in GPU
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95294

Title: Chromium CVE-2026-95294: UI misrepresentation in Browser
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95295

Title: Chromium CVE-2026-95295: Information leak in Mobile
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95296

Title: Chromium CVE-2026-95296: Missing authorization in Core
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95297

Title: Chromium CVE-2026-95297: Missing authorization in Contextual Tasks
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95298

Title: Chromium CVE-2026-95298: Use after free in Browser
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95299

Title: Chromium CVE-2026-95299: Use after free in GPU
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95300

Title: Chromium CVE-2026-95300: Missing authorization in DevTools
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95301

Title: Chromium CVE-2026-95301: Missing authorization in Extensions
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95302

Title: Chromium CVE-2026-95302: Incorrect authorization in WebAPKs
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95303

Title: Chromium CVE-2026-95303: Incomplete cleanup in SmartCard
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95304

Title: Chromium CVE-2026-95304: Out of bounds write in V8
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95305

Title: Chromium CVE-2026-95305: UI misrepresentation in Chromoting
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95306

Title: Chromium CVE-2026-95306: Type confusion in V8
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95307

Title: Chromium CVE-2026-95307: UI misrepresentation in ExtensionsMenu
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95308

Title: Chromium CVE-2026-95308: Integer overflow in Metrics
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95309

Title: Chromium CVE-2026-95309: UI misrepresentation in Mobile
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95310

Title: Chromium CVE-2026-95310: Use after free in AdFilter
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95311

Title: Chromium CVE-2026-95311: Free of non-heap memory in Fonts
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95312

Title: Chromium CVE-2026-95312: Information leak in Passwords
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95313

Title: Chromium CVE-2026-95313: Use after free in Fullscreen
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95314

Title: Chromium CVE-2026-95314: Incorrect authorization in HID
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95315

Title: Chromium CVE-2026-95315: Use after free in Aura
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95316

Title: Chromium CVE-2026-95316: Unchecked return value in Performance
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95316

Title: Chromium CVE-2026-95316: Unchecked return value in Performance
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95317

Title: Chromium CVE-2026-95317: Incorrect authorization in MediaCapture
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95318

Title: Chromium CVE-2026-95318: Buffer overflow in Video
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

+63

TripleHelix
Author
Moderator
21 days ago
September 26, 2026

CVE-2026-95319

Title: Chromium CVE-2026-95319: Use after free in Printing
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95320

Title: Chromium CVE-2026-95320: Missing authorization in Navigation
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95321

Title: Chromium CVE-2026-95321: UI misrepresentation in Payments
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95322

Title: Chromium CVE-2026-95322: Out of bounds write in GPU
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95323

Title: Chromium CVE-2026-95323: UI misrepresentation in Chromium
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95324

Title: Chromium CVE-2026-95324: Uninitialized resource in GPU
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95325

Title: Chromium CVE-2026-95325: Use after free in ANGLE
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95326

Title: Chromium CVE-2026-95326: Incomplete cleanup in Bluetooth
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95327

Title: Chromium CVE-2026-95327: Information leak in Networking
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95328

Title: Chromium CVE-2026-95328: Confused deputy in Mobile
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95329

Title: Chromium CVE-2026-95329: Out of bounds write in WebGL
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95330

Title: Chromium CVE-2026-95330: Improper state validation in Downloads
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95331

Title: Chromium CVE-2026-95331: Out of bounds write in ANGLE
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95332

Title: Chromium CVE-2026-95332: Use of uninitialized variable in Tint
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95333

Title: Chromium CVE-2026-95333: Use after free in Metrics
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95334

Title: Chromium CVE-2026-95334: Incorrect reference resolution in WebProtect
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95335

Title: Chromium CVE-2026-95335: Use after free in HID
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95336

Title: Chromium CVE-2026-95336: Information leak in Transactions Platform
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95337

Title: Chromium CVE-2026-95337: UI misrepresentation in Messages
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95338

Title: Chromium CVE-2026-95338: Use after free in PDFium
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95339

Title: Chromium CVE-2026-95339: Use after free in ServiceWorker
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95340

Title: Chromium CVE-2026-95340: Incorrect authorization in PictureInPicture
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95341

Title: Chromium CVE-2026-95341: Improper input validation in Desktop
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95342

Title: Chromium CVE-2026-95342: Missing authorization in V8
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95343

Title: Chromium CVE-2026-95343: Use after free in WebAudio
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95344

Title: Chromium CVE-2026-95344: Race condition in DevTools
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95345

Title: Chromium CVE-2026-95345: Use after free in Actor
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95346

Title: Chromium CVE-2026-95346: UI misrepresentation in Chromoting
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95347

Title: Chromium CVE-2026-95347: Use after free in Updater
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95348

Title: Chromium CVE-2026-95348: Use after free in Bluetooth
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95349

Title: Chromium CVE-2026-95349: Buffer overflow in WebGL
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95350

Title: Chromium CVE-2026-95350: Buffer overflow in ANGLE
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95351

Title: Chromium CVE-2026-95351: Use after free in Views
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95352

Title: Chromium CVE-2026-95352: Incorrect authorization in DevTools
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95353

Title: Chromium CVE-2026-95353: Use after free in Bindings
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95354

Title: Chromium CVE-2026-95354: Use after free in Verifier
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95355

Title: Chromium CVE-2026-95355: Incorrect authorization in Navigation
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95356

Title: Chromium CVE-2026-95356: Use after free in WindowDialog
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95357

Title: Chromium CVE-2026-95357: Out of bounds write in GPU
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95358

Title: Chromium CVE-2026-95358: Incorrect authorization in Mobile
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95359

Title: Chromium CVE-2026-95359: Uninitialized resource in GPU
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

+63

TripleHelix
Author
Moderator
21 days ago
September 26, 2026

CVE-2026-95360

Title: Chromium CVE-2026-95360: Race condition in Editing
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95361

Title: Chromium CVE-2026-95361: Confused deputy in DevTools
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95362

Title: Chromium CVE-2026-95362: Cross-site request forgery in DevTools
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95363

Title: Chromium CVE-2026-95363: UI misrepresentation in FileSystem
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95364

Title: Chromium CVE-2026-95364: Improper input validation in Passwords
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95365

Title: Chromium CVE-2026-95365: Type confusion in IndexedDB
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95366

Title: Chromium CVE-2026-95366: Use of released resource in Core
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95367

Title: Chromium CVE-2026-95367: Information leak in DataTransfer
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95368

Title: Chromium CVE-2026-95368: Incorrect authorization in DevTools
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95369

Title: Chromium CVE-2026-95369: Inappropriate implementation in XML
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95370

Title: Chromium CVE-2026-95370: Inappropriate implementation in NFC
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95371

Title: Chromium CVE-2026-95371: Missing authorization in Views
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95372

Title: Chromium CVE-2026-95372: Use after free in Chromecast
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95373

Title: Chromium CVE-2026-95373: Use after free in DevTools
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95374

Title: Chromium CVE-2026-95374: Incorrect authorization in Network
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95375

Title: Chromium CVE-2026-95375: Incorrect authorization in BrowserTag
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95376

Title: Chromium CVE-2026-95376: Externally controlled reference in DevTools
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95380

Title: Chromium CVE-2026-95380: Type confusion in V8
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95381

Title: Chromium CVE-2026-95381: Improper input validation in Printing
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95382

Title: Chromium CVE-2026-95382: Improper input validation in Auth
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95384

Title: Chromium CVE-2026-95384: Race condition in Transactions Platform
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVE-2026-95385

Title: Chromium CVE-2026-95385: Inappropriate implementation in PlatformIntegration
Version: 1.0
Reason for revision: Information published.
Originally released: September 25, 2026
Last updated: September 25, 2026
Aggregate CVE severity rating:
Customer action required: Yes

CVEs have been published or revised in the Security Update Guide

CVEs have been published or revised in the Security Update Guide

CVEs have been published or revised in the Security Update Guide

CVEs have been published or revised in the Security Update Guide

Sign up

Login to the community