● Live advisory feed

Security Advisory Fusion for CSIRTs, SOCs & Defenders

Security advisories from 24 sources — CISA, CERT-EU, NCSC-UK, BSI, CERT-FR, NCSC-NL, JPCERT/CC, JVN, HKCERT, the Canadian Cyber Centre, NVD, GitHub, Microsoft, Cisco, Fortinet, Palo Alto Networks and more — normalized, translated to English and flagged against the CISA KEV catalog. One global feed for CSIRTs, SOCs and defenders.

Daily Briefings IntelFusions

Advisories tracked

20,973

Known exploited

1,782

Sources online

Last sync

3H AGO

9,410 records · page 56 / 189 · nvd firehose hidden — show all

CVE-2026-50318: Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.

highCVSS 7.8CVE-2026-50318 msrc2026-07-14

CVE-2026-14417: Chromium: CVE-2026-14417 Use after free in Dawn

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-14417 msrc2026-07-14

CVE-2026-17911: Chromium: CVE-2026-17911 Insufficient policy enforcement in SVG

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-17911 msrc2026-07-14

CVE-2026-15899: Chromium: CVE-2026-15899 Use after free in CameraCapture

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-15899 msrc2026-07-14

CVE-2026-17654: Chromium: CVE-2026-17654 Race in Updater

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-17654 msrc2026-07-14

CVE-2026-15128: Chromium: CVE-2026-15128 Inappropriate implementation in Forms

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-15128 msrc2026-07-14

CVE-2026-50012: Squid: Memory corruption in cache_digest reply handling

mediumCVSS 5.5CVE-2026-50012 msrc2026-07-14

CVE-2026-33842: Windows File Explorer Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.

mediumCVSS 5.5CVE-2026-33842 msrc2026-07-14

CVE-2026-57090: Microsoft Windows Media Foundation Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

highCVSS 8.8CVE-2026-57090 msrc2026-07-14

CVE-2026-50423: Windows Kernel Elevation of Privilege Vulnerability

Improper access control in Windows Kernel allows an authorized attacker to elevate privileges locally.

highCVSS 7.8CVE-2026-50423 msrc2026-07-14

CVE-2026-57989: Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

highCVSS 7.4CVE-2026-57989 msrc2026-07-14

CVE-2026-50387: Windows GDI Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges locally.

highCVSS 7.8CVE-2026-50387 msrc2026-07-14

CVE-2026-18005: Chromium: CVE-2026-18005 Inappropriate implementation in WebXR

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-18005 msrc2026-07-14

CVE-2026-62994: CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin

lowCVSS 3.7CVE-2026-62994 msrc2026-07-14

CVE-2026-50352: Windows Cryptographic Services Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information locally.

mediumCVSS 5.5CVE-2026-50352 msrc2026-07-14

CVE-2026-50300: Windows DWM Core Library Information Disclosure Vulnerability

Integer underflow (wrap or wraparound) in Windows Kernel allows an authorized attacker to disclose information locally.

mediumCVSS 5.5CVE-2026-50300 msrc2026-07-14

CVE-2026-49159: Microsoft Graph Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose information over a network.

mediumCVSS 6.5CVE-2026-49159 msrc2026-07-14

CVE-2026-50302: Windows Cryptographic Services Security Feature Bypass Vulnerability

Improper certificate validation in Windows Cryptographic Services allows an unauthorized attacker to bypass a security feature over a network.

mediumCVSS 4.2CVE-2026-50302 msrc2026-07-14

CVE-2026-58596: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Untrusted pointer dereference in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

highCVSS 8.3CVE-2026-58596 msrc2026-07-14

CVE-2026-55024: Microsoft Excel Remote Code Execution Vulnerability

Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

highCVSS 7.8CVE-2026-55024 msrc2026-07-14

CVE-2026-50466: Microsoft Brokering File System Elevation of Privilege Vulnerability

Use after free in Windows Brokering File System allows an authorized attacker to elevate privileges locally.

highCVSS 7.8CVE-2026-50466 msrc2026-07-14

CVE-2026-50435: Windows Overlay Filter Elevation of Privilege Vulnerability

Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

highCVSS 7.8CVE-2026-50435 msrc2026-07-14

CVE-2026-50330: Windows Remote Desktop Client Elevation of Privilege Vulnerability

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to elevate privileges over a network.

highCVSS 7.5CVE-2026-50330 msrc2026-07-14

CVE-2026-50452: Windows Runtime Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an unauthorized attacker to elevate privileges over a network.

highCVSS 7CVE-2026-50452 msrc2026-07-14

CVE-2026-50399: Windows Kernel Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.

highCVSS 7.8CVE-2026-50399 msrc2026-07-14

CVE-2026-50375: DirectX Graphics Kernel Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows DirectX allows an authorized attacker to elevate privileges locally.

mediumCVSS 6.3CVE-2026-50375 msrc2026-07-14

CVE-2026-62309: CoreDNS: proxyproto plugin panics on PPv2 datagram with non-UDP transport — single 28-byte packet remote DoS

highCVSS 7.5CVE-2026-62309 msrc2026-07-14

CVE-2026-58541: Microsoft DWM Core Library Elevation of Privilege Vulnerability

Access of resource using incompatible type ('type confusion') in Windows DWM allows an authorized attacker to elevate privileges locally.

highCVSS 7.8CVE-2026-58541 msrc2026-07-14

CVE-2026-13795: Chromium: CVE-2026-13795 Insufficient policy enforcement in Chrome for iOS

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-13795 msrc2026-07-14

CVE-2026-50449: Windows Runtime Elevation of Privilege Vulnerability

Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally.

highCVSS 7CVE-2026-50449 msrc2026-07-14

CVE-2026-50371: Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows LUAFV allows an authorized attacker to elevate privileges locally.

highCVSS 7CVE-2026-50371 msrc2026-07-14

CVE-2026-50418: Windows System Secure Feature Bypass Vulnerability

Improper access control in Windows System allows an unauthorized attacker to bypass a security feature locally.

mediumCVSS 5.1CVE-2026-50418 msrc2026-07-14

CVE-2026-50046: Possible heap use-after-free in an error path when a DoT forwarded query is jostled out

mediumCVSS 5.9CVE-2026-50046 msrc2026-07-14

CVE-2026-58547: Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability

Heap-based buffer overflow in Universal Plug and Play (upnp.dll) allows an authorized attacker to elevate privileges locally.

mediumCVSS 5.5CVE-2026-58547 msrc2026-07-14

CVE-2026-50401: Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability

Out-of-bounds read in Windows Cloud Files Mini Filter Driver allows an authorized attacker to disclose information locally.

mediumCVSS 5.5CVE-2026-50401 msrc2026-07-14

CVE-2026-13809: Chromium: CVE-2026-13809 Side-channel information leakage in Safe Browsing

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-13809 msrc2026-07-14