● Live advisory feed

Security Advisory Fusion for CSIRTs, SOCs & Defenders

Security advisories from 24 sources — CISA, CERT-EU, NCSC-UK, BSI, CERT-FR, NCSC-NL, JPCERT/CC, JVN, HKCERT, the Canadian Cyber Centre, NVD, GitHub, Microsoft, Cisco, Fortinet, Palo Alto Networks and more — normalized, translated to English and flagged against the CISA KEV catalog. One global feed for CSIRTs, SOCs and defenders.

Daily Briefings IntelFusions

Advisories tracked

21,246

Known exploited

1,786

Sources online

Last sync

4H AGO

9,461 records · page 81 / 190 · nvd firehose hidden — show all

CVE-2026-64249: fpga: region: fix use-after-free in child_regions_with_firmware()

highCVSS 8.4CVE-2026-64249 msrc2026-07-14

CVE-2026-17878: Chromium: CVE-2026-17878 Inappropriate implementation in CSS

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-17878 msrc2026-07-14

CVE-2026-58602: Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

Use after free in Windows Kernel Mode Driver allows an authorized attacker to elevate privileges locally.

highCVSS 7.8CVE-2026-58602 msrc2026-07-14

CVE-2026-58279: Azure CycleCloud Elevation of Privilege Vulnerability

Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network.

mediumCVSS 6.5CVE-2026-58279 msrc2026-07-14

CVE-2026-17869: Chromium: CVE-2026-17869 Out of bounds read in WebXR

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-17869 msrc2026-07-14

CVE-2026-66373: Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code execution via a RESTORE payload where the same NACK (pending entry) is referenced by more than one consumer, because deleting both consumers via XGROUP DELCONSUMER leads to a double free. NOTE: this issue exists because of an incomplete fix for CVE-2026-25243.

highCVSS 7.5CVE-2026-66373 msrc2026-07-14

CVE-2026-13813: Chromium: CVE-2026-13813 Insufficient validation of untrusted input in Chrome for iOS

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-13813 msrc2026-07-14

CVE-2026-64484: ALSA: es1938: check snd_ctl_new1() return value

mediumCVSS 5.5CVE-2026-64484 msrc2026-07-14

CVE-2026-64266: fuse: re-lock request before returning from fuse_ref_folio()

highCVSS 7.8CVE-2026-64266 msrc2026-07-14

CVE-2026-64346: usb: gadget: udc: Fix use-after-free in gadget_match_driver

mediumCVSS 5.5CVE-2026-64346 msrc2026-07-14

CVE-2026-13808: Chromium: CVE-2026-13808 Insufficient data validation in Chrome for iOS

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-13808 msrc2026-07-14

CVE-2026-64437: ksmbd: fix use-after-free of a deferred file_lock on SMB2_CLOSE then SMB2_CANCEL

highCVSS 7.8CVE-2026-64437 msrc2026-07-14

CVE-2026-13803: Chromium: CVE-2026-13803 Type Confusion in Chrome Tabs

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-13803 msrc2026-07-14

CVE-2026-17855: Chromium: CVE-2026-17855 Race in DevTools

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-17855 msrc2026-07-14

CVE-2026-13788: Chromium: CVE-2026-13788 Use after free in Fullscreen

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-13788 msrc2026-07-14

CVE-2026-13887: Chromium: CVE-2026-13887 Insufficient policy enforcement in NFC

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-13887 msrc2026-07-14

CVE-2026-13903: Chromium: CVE-2026-13903 Insufficient policy enforcement in Bluetooth

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-13903 msrc2026-07-14

CVE-2026-13957: Chromium: CVE-2026-13957 Incorrect security UI in Extensions

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-13957 msrc2026-07-14

CVE-2026-13949: Chromium: CVE-2026-13949 Insufficient policy enforcement in Payments

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-13949 msrc2026-07-14

CVE-2026-14114: Chromium: CVE-2026-14114 Inappropriate implementation in WebAppInstalls

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-14114 msrc2026-07-14

CVE-2026-14079: Chromium: CVE-2026-14079 Policy bypass in Network

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-14079 msrc2026-07-14

CVE-2026-17985: Chromium: CVE-2026-17985 Insufficient policy enforcement in Speech

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-17985 msrc2026-07-14

CVE-2026-14026: Chromium: CVE-2026-14026 Incorrect security UI in SplitView

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-14026 msrc2026-07-14

CVE-2026-14090: Chromium: CVE-2026-14090 Out of bounds read in CameraCapture

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-14090 msrc2026-07-14

CVE-2026-17967: Chromium: CVE-2026-17967 Use after free in Chrome for iOS

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-17967 msrc2026-07-14

CVE-2026-14102: Chromium: CVE-2026-14102 Use after free in Passwords

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-14102 msrc2026-07-14

CVE-2026-14103: Chromium: CVE-2026-14103 Use after free in SSL

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-14103 msrc2026-07-14

CVE-2026-14390: Chromium: CVE-2026-14390 Use after free in ANGLE

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-14390 msrc2026-07-14

CVE-2026-14133: Chromium: CVE-2026-14133 Race in History Embeddings

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-14133 msrc2026-07-14

CVE-2026-17865: Chromium: CVE-2026-17865 Inappropriate implementation in Crypto

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-17865 msrc2026-07-14

CVE-2026-17868: Chromium: CVE-2026-17868 Insufficient policy enforcement in USB

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-17868 msrc2026-07-14

CVE-2026-17703: Chromium: CVE-2026-17703 Policy bypass in Chrome for iOS

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-17703 msrc2026-07-14

CVE-2026-63835: batman-adv: v: prevent OGM aggregation on disabled hardif

mediumCVSS 4.4CVE-2026-63835 msrc2026-07-14

CVE-2026-17709: Chromium: CVE-2026-17709 Race in Downloads

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-17709 msrc2026-07-14

CVE-2026-17711: Chromium: CVE-2026-17711 Race in Downloads

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-17711 msrc2026-07-14

CVE-2026-17713: Chromium: CVE-2026-17713 Insufficient validation of untrusted input in Accessibility

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-17713 msrc2026-07-14

CVE-2026-17716: Chromium: CVE-2026-17716 Use after free in Updater

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-17716 msrc2026-07-14

CVE-2026-17741: Chromium: CVE-2026-17741 Insufficient validation of untrusted input in WebView

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-17741 msrc2026-07-14

CVE-2026-17738: Chromium: CVE-2026-17738 Insufficient validation of untrusted input in Payments

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-17738 msrc2026-07-14

CVE-2026-17743: Chromium: CVE-2026-17743 Insufficient policy enforcement in ControlledFrame

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-17743 msrc2026-07-14

CVE-2026-17745: Chromium: CVE-2026-17745 Out of bounds read in Skia

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-17745 msrc2026-07-14

CVE-2026-64452: 6lowpan: fix NHC entry use-after-free on error path

mediumCVSS 5.5CVE-2026-64452 msrc2026-07-14

CVE-2026-64482: ALSA: gus: check snd_ctl_new1() return value

mediumCVSS 5.5CVE-2026-64482 msrc2026-07-14

CVE-2026-17755: Chromium: CVE-2026-17755 Incorrect security UI in Extensions

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-17755 msrc2026-07-14

CVE-2026-17757: Chromium: CVE-2026-17757 Uninitialized Use in Skia

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-17757 msrc2026-07-14

CVE-2026-17758: Chromium: CVE-2026-17758 Heap buffer overflow in Dawn

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-17758 msrc2026-07-14

CVE-2026-56163: Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability

Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.

criticalCVSS 10CVE-2026-56163 msrc2026-07-14

CVE-2026-17763: Chromium: CVE-2026-17763 Inappropriate implementation in GPU

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-17763 msrc2026-07-14

CVE-2026-44509: Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-43619. Reason: This candidate is a duplicate of CVE-2026-43619. Notes: All CVE users should reference CVE-2026-43619 instead of this candidate.

unknownCVE-2026-44509 msrc2026-07-14

CVE-2026-17769: Chromium: CVE-2026-17769 Insufficient validation of untrusted input in Cast

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

unknownCVE-2026-17769 msrc2026-07-14