CVE-2026-69414 - Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Micros

CVE-2026-50523 - Improper neutralization of special elements used in a command ('command injection') in Microsoft Pow

CVE-2026-72970 - Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to exe

CVE-2026-45659 - Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to ex

CVE-2026-42901 - Origin validation error in Microsoft Entra ID allows an unauthorized attacker to elevate privileges

CVE-2026-41104 - Deserialization of untrusted data in Microsoft Planetary Computer Pro allows an unauthorized attacke

CVE-2026-41090 - Improper neutralization of special elements used in a command ('command injection') in Microsoft Cop

CVE-2026-33843 - Authentication bypass using an alternate path or channel in Microsoft Azure Active Directory B2C all

CVE-2026-23652 - Improper neutralization of special elements used in a command ('command injection') in Microsoft Pow

CVE-2026-45584 - Heap-based buffer overflow in Microsoft Defender allows an unauthorized attacker to execute code ove

CVE-2026-45498 - Microsoft Defender Denial of Service Vulnerability

CVE-2026-41091 - Improper link resolution before file access ('link following') in Microsoft Defender allows an autho

CVE-2026-45585 - Microsoft is aware of a security feature bypass vulnerability in Windows publicly referred to as &qu

CVE-2026-45495 - Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

CVE-2026-45494 - Microsoft Edge (Chromium-based) Spoofing Vulnerability

CVE-2026-45492 - Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypa