● Live advisory feed

Security Advisory Fusion for CSIRTs, SOCs & Defenders

Security advisories from 24 sources — CISA, CERT-EU, NCSC-UK, BSI, CERT-FR, NCSC-NL, JPCERT/CC, JVN, HKCERT, the Canadian Cyber Centre, NVD, GitHub, Microsoft, Cisco, Fortinet, Palo Alto Networks and more — normalized, translated to English and flagged against the CISA KEV catalog. One global feed for CSIRTs, SOCs and defenders.

Daily Briefings IntelFusions

Advisories tracked

20,973

Known exploited

1,782

Sources online

Last sync

18M AGO

9,410 records · page 52 / 189 · nvd firehose hidden — show all

CVE-2026-58278: Microsoft Edge (Chromium-based) Spoofing Vulnerability

Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

mediumCVSS 5.4CVE-2026-58278 msrc2026-07-14

CVE-2026-17907: Chromium: CVE-2026-17907 Side-channel information leakage in Network

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-17907 msrc2026-07-14

CVE-2026-46600: Parsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage

highCVSS 7.5CVE-2026-46600 msrc2026-07-14

CVE-2026-17914: Chromium: CVE-2026-17914 Side-channel information leakage in Skia

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-17914 msrc2026-07-14

CVE-2026-13858: Chromium: CVE-2026-13858 Out of bounds read in FFmpeg

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-13858 msrc2026-07-14

CVE-2026-63825: gcov: use atomic counter updates to fix concurrent access crashes

mediumCVSS 5.5CVE-2026-63825 msrc2026-07-14

CVE-2026-56000: xorg-x11-server / xwayland GLX contextTags Use-After-Free in CommonMakeCurrent()

unknownCVE-2026-56000 msrc2026-07-14

CVE-2026-39879: SQL injection in syslog-ng SQL destionation driver

highCVSS 7.1CVE-2026-39879 msrc2026-07-14

CVE-2026-42505: Invoking Encrypted Client Hello privacy leak in crypto/tls

mediumCVSS 5.3CVE-2026-42505 msrc2026-07-14

CVE-2026-48863: Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service

highCVSS 7.5CVE-2026-48863 msrc2026-07-14

CVE-2026-17933: Chromium: CVE-2026-17933 Inappropriate implementation in DOMStorage

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-17933 msrc2026-07-14

CVE-2026-58283: Microsoft Edge (Chromium-based) Spoofing Vulnerability

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

highCVSS 8.1CVE-2026-58283 msrc2026-07-14

CVE-2026-17966: Chromium: CVE-2026-17966 Inappropriate implementation in Views

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-17966 msrc2026-07-14

CVE-2026-64379: smb: client: mask server-provided mode to 07777 in modefromsid

highCVSS 7.1CVE-2026-64379 msrc2026-07-14

CVE-2026-64378: writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs()

mediumCVSS 4.7CVE-2026-64378 msrc2026-07-14

CVE-2026-64298: NFSv4: include MAY_WRITE in open permission mask for O_TRUNC

highCVSS 7.8CVE-2026-64298 msrc2026-07-14

CVE-2026-64254: NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and CONFIG share BAR

highCVSS 8.4CVE-2026-64254 msrc2026-07-14

CVE-2026-64385: smb: client: fix double-free in SMB2_ioctl() replay

highCVSS 7.1CVE-2026-64385 msrc2026-07-14

CVE-2026-64331: usbip: vudc: fix NULL deref in vep_dequeue()

mediumCVSS 5.5CVE-2026-64331 msrc2026-07-14

CVE-2026-13785: Chromium: CVE-2026-13785 Use after free in Bluetooth

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-13785 msrc2026-07-14

CVE-2026-64249: fpga: region: fix use-after-free in child_regions_with_firmware()

highCVSS 8.4CVE-2026-64249 msrc2026-07-14

CVE-2026-64350: usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info()

mediumCVSS 5.5CVE-2026-64350 msrc2026-07-14

CVE-2026-64326: block: skip sync_blockdev() on surprise removal in bdev_mark_dead()

mediumCVSS 5.5CVE-2026-64326 msrc2026-07-14

CVE-2026-64495: iio: gyro: bmg160: bail out when bandwidth/filter is not in table

highCVSS 7.1CVE-2026-64495 msrc2026-07-14

CVE-2026-64507: x86/bugs: Enable IBPB flush on BPF JIT allocation

mediumCVSS 5.5CVE-2026-64507 msrc2026-07-14

CVE-2026-14125: Chromium: CVE-2026-14125 Uninitialized Use in ANGLE

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-14125 msrc2026-07-14

CVE-2026-14135: Chromium: CVE-2026-14135 Insufficient validation of untrusted input in Network

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-14135 msrc2026-07-14

CVE-2026-14144: Chromium: CVE-2026-14144 Incorrect security UI in Views

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-14144 msrc2026-07-14

CVE-2026-13948: Chromium: CVE-2026-13948 Insufficient policy enforcement in Extensions

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-13948 msrc2026-07-14

CVE-2026-17972: Chromium: CVE-2026-17972 Inappropriate implementation in Chrome for iOS

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-17972 msrc2026-07-14

CVE-2026-50369: Windows Remote Desktop Services Elevation of Privilege Vulnerability

Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network.

highpublic exploitCVSS 8.8CVE-2026-50369 msrc2026-07-14

CVE-2026-14120: Chromium: CVE-2026-14120 Inappropriate implementation in DevTools

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-14120 msrc2026-07-14

CVE-2026-13822: Chromium: CVE-2026-13822 Inappropriate implementation in Extensions

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-13822 msrc2026-07-14

CVE-2026-17994: Chromium: CVE-2026-17994 Inappropriate implementation in Media

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-17994 msrc2026-07-14

CVE-2026-14112: Chromium: CVE-2026-14112 Inappropriate implementation in Enterprise

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-14112 msrc2026-07-14

CVE-2026-50417: Windows NTFS Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.

highCVSS 7.8CVE-2026-50417 msrc2026-07-14

CVE-2026-14385: Chromium: CVE-2026-14385 Heap buffer overflow in ANGLE

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-14385 msrc2026-07-14

CVE-2026-56183: Windows MIDI Service Module Elevation of Privileges Vulnerability

Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

highCVSS 7CVE-2026-56183 msrc2026-07-14

CVE-2026-14071: Chromium: CVE-2026-14071 Side-channel information leakage in WebAudio

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-14071 msrc2026-07-14

CVE-2026-17812: Chromium: CVE-2026-17812 Inappropriate implementation in DigitalCredentials

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-17812 msrc2026-07-14

CVE-2026-14407: Chromium: CVE-2026-14407 Inappropriate implementation in V8

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-14407 msrc2026-07-14

CVE-2026-56159: DHCP Server Service Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

criticalCVSS 9.8CVE-2026-56159 msrc2026-07-14

CVE-2026-14070: Chromium: CVE-2026-14070 Uninitialized Use in WebNN

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-14070 msrc2026-07-14

CVE-2026-14424: Chromium: CVE-2026-14424 Use after free in Dawn

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-14424 msrc2026-07-14

CVE-2026-14425: Chromium: CVE-2026-14425 Use after free in ANGLE

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-14425 msrc2026-07-14

CVE-2026-55005: Microsoft Exchange Server Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network.

highCVSS 8.8CVE-2026-55005 msrc2026-07-14

CVE-2026-14426: Chromium: CVE-2026-14426 Use after free in V8

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-14426 msrc2026-07-14

CVE-2026-14065: Chromium: CVE-2026-14065 Insufficient validation of untrusted input in PageInfo

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-14065 msrc2026-07-14

CVE-2026-58643: Windows Admin Center Spoofing Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Windows Admin Center allows an unauthorized attacker to perform spoofing over a network.

unknownCVE-2026-58643 msrc2026-07-14

CVE-2026-17818: Chromium: CVE-2026-17818 Inappropriate implementation in Network

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-17818 msrc2026-07-14