● Live advisory feed

Security Advisory Fusion for CSIRTs, SOCs & Defenders

Security advisories from 24 sources — CISA, CERT-EU, NCSC-UK, BSI, CERT-FR, NCSC-NL, JPCERT/CC, JVN, HKCERT, the Canadian Cyber Centre, NVD, GitHub, Microsoft, Cisco, Fortinet, Palo Alto Networks and more — normalized, translated to English and flagged against the CISA KEV catalog. One global feed for CSIRTs, SOCs and defenders.

Daily Briefings IntelFusions

Advisories tracked

21,246

Known exploited

1,786

Sources online

Last sync

2H AGO

9,461 records · page 79 / 190 · nvd firehose hidden — show all

CVE-2026-17947: Chromium: CVE-2026-17947 Use after free in WebSockets

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-17947 msrc2026-07-14

CVE-2026-17942: Chromium: CVE-2026-17942 Side-channel information leakage in SVG

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-17942 msrc2026-07-14

CVE-2026-17936: Chromium: CVE-2026-17936 Inappropriate implementation in DevTools

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-17936 msrc2026-07-14

CVE-2026-56193: Microsoft Office Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

highCVSS 7.1CVE-2026-56193 msrc2026-07-14

CVE-2026-17926: Chromium: CVE-2026-17926 Insufficient validation of untrusted input in DevTools

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-17926 msrc2026-07-14

CVE-2026-13779: Chromium: CVE-2026-13779 Use after free in Chromoting

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-13779 msrc2026-07-14

CVE-2026-17912: Chromium: CVE-2026-17912 Inappropriate implementation in Chrome for iOS

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-17912 msrc2026-07-14

CVE-2026-17909: Chromium: CVE-2026-17909 Insufficient validation of untrusted input in Isolated Web Apps

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-17909 msrc2026-07-14

CVE-2026-17689: Chromium: CVE-2026-17689 Uninitialized Use in ANGLE

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-17689 msrc2026-07-14

CVE-2026-17907: Chromium: CVE-2026-17907 Side-channel information leakage in Network

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-17907 msrc2026-07-14

CVE-2026-17694: Chromium: CVE-2026-17694 Use after free in DOM

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-17694 msrc2026-07-14

CVE-2026-13971: Chromium: CVE-2026-13971 Uninitialized Use in Skia

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-13971 msrc2026-07-14

CVE-2026-17993: Chromium: CVE-2026-17993 Race in Updater

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-17993 msrc2026-07-14

CVE-2026-18013: Chromium: CVE-2026-18013 Inappropriate implementation in Chrome for iOS

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-18013 msrc2026-07-14

CVE-2026-18006: Chromium: CVE-2026-18006 Inappropriate implementation in Google Lens

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-18006 msrc2026-07-14

CVE-2026-18002: Chromium: CVE-2026-18002 Insufficient validation of untrusted input in Google Lens

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-18002 msrc2026-07-14

CVE-2026-13973: Chromium: CVE-2026-13973 Inappropriate implementation in UI

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-13973 msrc2026-07-14

CVE-2026-56171: Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

Exposure of private personal information to an unauthorized actor in Windows RDP allows an unauthorized attacker to disclose information over a network.

highCVSS 7.1CVE-2026-56171 msrc2026-07-14

CVE-2026-58630: Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability

Improper access control in Azure App Service allows an unauthorized attacker to elevate privileges over a network.

criticalCVSS 10CVE-2026-58630 msrc2026-07-14

CVE-2026-14000: Chromium: CVE-2026-14000 Inappropriate implementation in XML

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-14000 msrc2026-07-14

CVE-2026-16807: Chromium: CVE-2026-16807 Out of bounds write in Codecs

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-16807 msrc2026-07-14

CVE-2026-56000: xorg-x11-server / xwayland GLX contextTags Use-After-Free in CommonMakeCurrent()

unknownCVE-2026-56000 msrc2026-07-14

CVE-2026-14013: Chromium: CVE-2026-14013 Inappropriate implementation in SVG

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-14013 msrc2026-07-14

CVE-2026-17774: Chromium: CVE-2026-17774 Insufficient validation of untrusted input in Variations

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-17774 msrc2026-07-14

CVE-2026-14030: Chromium: CVE-2026-14030 Incorrect security UI in SplitView

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-14030 msrc2026-07-14

CVE-2026-63806: KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned()

highCVSS 7.3CVE-2026-63806 msrc2026-07-14

CVE-2026-53375: drm/amdgpu/vce: Prevent partial address patches

highCVSS 7.5CVE-2026-53375 msrc2026-07-14

CVE-2026-53393: nfsd: reset write verifier on deferred writeback errors

mediumCVSS 5.9CVE-2026-53393 msrc2026-07-14

CVE-2026-63803: hdlc_ppp: sync per-proto timers before freeing hdlc state

highCVSS 8.4CVE-2026-63803 msrc2026-07-14

CVE-2026-14047: Chromium: CVE-2026-14047 Insufficient policy enforcement in Extensions

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-14047 msrc2026-07-14

CVE-2026-53391: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr

mediumCVSS 5.5CVE-2026-53391 msrc2026-07-14

CVE-2026-14060: Chromium: CVE-2026-14060 Insufficient validation of untrusted input in Chromoting

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-14060 msrc2026-07-14

CVE-2026-63822: wifi: ath11k: fix warning when unbinding

criticalCVSS 9.8CVE-2026-63822 msrc2026-07-14

CVE-2026-53382: media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si

mediumCVSS 5.5CVE-2026-53382 msrc2026-07-14

CVE-2026-64192: bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized

highCVSS 7.8CVE-2026-64192 msrc2026-07-14

CVE-2026-64188: net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink()

mediumCVSS 5.5CVE-2026-64188 msrc2026-07-14

CVE-2026-63140: Reachable Assertion in Elasticsearch Leading to Denial of Service

mediumCVSS 6.5CVE-2026-63140 msrc2026-07-14

CVE-2026-14061: Chromium: CVE-2026-14061 Inappropriate implementation in Dawn

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-14061 msrc2026-07-14

CVE-2026-55973: 'dns-error-reporting: yes' leads to stack buffer overflow

highCVSS 7.5CVE-2026-55973 msrc2026-07-14

CVE-2026-14064: Chromium: CVE-2026-14064 Use after free in PageInfo

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-14064 msrc2026-07-14

CVE-2026-14068: Chromium: CVE-2026-14068 Inappropriate implementation in Omnibox

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-14068 msrc2026-07-14

CVE-2026-64219: drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async

highCVSS 7.1CVE-2026-64219 msrc2026-07-14

CVE-2026-64323: udf: validate VAT header length against the VAT inode size

mediumCVSS 5.5CVE-2026-64323 msrc2026-07-14

CVE-2026-16806: Chromium: CVE-2026-16806 Use after free in WebMCP

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-16806 msrc2026-07-14

CVE-2026-17746: Chromium: CVE-2026-17746 Use after free in GPU

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-17746 msrc2026-07-14