vulnerabilityvia Microsoft Security Update Guide
Chromium: CVE-2026-78960 Information leak in Extensions
Information published.
Oct 28, 2026 UTC
Vulnerability news
Stories are attributed to their original publishers and reviewed by an editor before they appear here. Always read the original source.
vulnerabilityvia Microsoft Security Update Guide
Chromium: CVE-2026-78961 Incorrect authorization in Core
Information published.
Oct 28, 2026 UTC
vulnerabilityvia Microsoft Security Update Guide
Chromium: CVE-2026-78962 Uninitialized resource in WebXR
Information published.
Oct 28, 2026 UTC
vulnerabilityvia Microsoft Security Update Guide
CVE-2026-62740 Windows Imaging Component Information Disclosure Vulnerability
Added supported editions of Microsoft Office to the Security Updates table because they are affected by this vulnerability. Microsoft recommends that customers running any of these...
Oct 28, 2026 UTC
vulnerabilityvia Microsoft Security Update Guide
CVE-2026-62877 Windows Win32k Elevation of Privilege Vulnerability
Added supported editions of Microsoft Office to the Security Updates table because they are affected by this vulnerability. Microsoft recommends that customers running any of these...
Oct 28, 2026 UTC
vulnerabilityvia Microsoft Security Update Guide
CVE-2026-19175 Use after free in Payments
Information published.
Oct 29, 2026 UTC
vulnerabilityvia Microsoft Security Update Guide
Chromium: CVE-2026-78891 Buffer overflow in WebRTC
Information published.
Oct 28, 2026 UTC
vulnerabilityvia Microsoft Security Update Guide
Chromium: CVE-2026-78892 Incorrect authorization in Chromoting
Information published.
Oct 28, 2026 UTC
vulnerabilityvia Microsoft Security Update Guide
Chromium: CVE-2026-78893 Information leak in QUIC
Information published.
Oct 28, 2026 UTC
vulnerabilityvia Microsoft Security Update Guide
Chromium: CVE-2026-78894 Race condition in Payments
Information published.
Oct 28, 2026 UTC
vulnerabilityvia Cisco Talos Intelligence
Inside KeyDrift: Analyzing historical UAT-11473 activity on Cisco SD-WAN
Talos has identified UAT-11473, a highly sophisticated APT, who exploited CVE-2026-20127, an authentication bypass vulnerability in Cisco SD-WAN Catalyst Controller instances to by...
Oct 28, 2026 UTC
vulnerabilityvia The Hacker News
Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns
The China-nexus cyber espionage group known as Volt Typhoon has been attributed to a now-disrupted covert access network dubbed Silent Train that has been put to use for zero-day e...
Oct 28, 2026 UTC