Microsoft March 2026 Security Updates

Microsoft March 2026 Early Security Updates

Microsoft February 2026 Security Updates

Microsoft January 2026 Security Updates

Microsoft December 2025 Security Updates

Microsoft December 2025 Early Security Updates

Microsoft November 2025 Security Updates

Microsoft October 2025 Security Updates

Microsoft September 2025 Security Updates

Microsoft August 2025 Security Updates

Microsoft August Early 2025 Security Updates

Microsoft July 2025 Security Updates

Microsoft June 2025 Security Updates

Microsoft June Early 2025 Security Updates

Microsoft May 2025 Security Updates

Microsoft May Early 2025 Security Updates

Microsoft April 2025 Security Updates

Microsoft March 2025 Security Updates

Microsoft March 2025 Early Security Updates

Microsoft February 2025 Security Updates

Microsoft February 2025 Early Security Updates

Microsoft January 2025 Security Updates

Microsoft January 2025 Early Security Updates

Microsoft December 2024 Security Updates

Microsoft November 2024 Security Updates

Microsoft October 2024 Security Updates

Microsoft September 2024 Security Updates

Microsoft August 2024 Security Updates

Microsoft July 2024 Security Updates

Microsoft June 2024 Security Updates

Microsoft May 2024 Security Updates

Microsoft April 2024 Security Updates

Microsoft March 2024 Security Updates

Microsoft February 2024 Security Updates

Microsoft January 2024 Security Updates

chrome

edge_chromium

Use After Free

Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

Chrome

Google

Use-after-free vulnerability in the Dawn GPU component of Google Chrome. An attacker who has compromised the renderer process can execute arbitrary code through a crafted HTML page.

Github Advisory

chromereleases.googleblog.com

Google Chrome chrome-146.0.7680.177

Microsoft

azure_kubernetes_service

Improper Authorization

Improper authorization in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.

Improper authorization in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.

Azure Kubernetes Service

Accessing Functionality Not Properly Constrained by ACLs

Cross Zone Scripting

Directory Indexing

Subverting Environment Variable Values

Using Malicious Files

Manipulating Opaque Client-based Data Tokens

Bypassing ATA Password Security

Buffer Overflow via Symbolic Links

Blue Boxing

Poison Web Service Registry

Session Credential Falsification through Prediction

Reusing Session IDs (aka Session Replay)

Collect Data from Registries

Key Negotiation of Bluetooth Attack (KNOB)

Manipulating Web Input to File System Calls

Manipulating User-Controlled Variables

Forceful Browsing

Services File Permissions Weakness

File and Directory Discovery

Impair Command History Logging

Dynamic Linker Hijacking

Path Interception by PATH Environment Variable

Create Process with Token

Web Session Cookie

Credentials in Registry

Data from Local System

Improper authorization in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.


azure_ai_foundry

Improper authorization in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.

Improper authorization in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.

Azure AI Foundry

Improper authorization in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.


azure_databricks

Server-Side Request Forgery (SSRF)

Server-side request forgery (ssrf) in Azure Databricks allows an unauthorized attacker to elevate privileges over a network.

Server-side request forgery (ssrf) in Azure Databricks allows an unauthorized attacker to elevate privileges over a network.

Azure Databricks

Server-side request forgery (SSRF) vulnerability in Azure Databricks that allows an unauthorized attacker to elevate privileges over a network.

Server Side Request Forgery

Server-side request forgery (ssrf) in Azure Databricks allows an unauthorized attacker to elevate privileges over a network.


azure_custom_locations_resource_provider

azure

Server-side request forgery (ssrf) in Azure Custom Locations Resource Provider (RP) allows an authorized attacker to elevate privileges over a network.

Server-side request forgery (ssrf) in Azure Custom Locations Resource Provider (RP) allows an authorized attacker to elevate privileges over a network.

Azure Custom Locations Resource Provider

Server-side request forgery (SSRF) in Azure Custom Locations Resource Provider (RP) allows an authorized attacker to elevate privileges over a network.

Server-side request forgery (ssrf) in Azure Custom Locations Resource Provider (RP) allows an authorized attacker to elevate privileges over a network.


azure_sre_agent_gateway_signalR_hub

Improper Authentication

Improper authentication in Azure SRE Agent allows an unauthorized attacker to disclose information over a network.

Improper authentication in Azure SRE Agent allows an unauthorized attacker to disclose information over a network.

Azure SRE Agent Gateway - SignalR Hub

Authentication Abuse

Authentication Bypass

Identity Spoofing

Fake the Source of Data

Exploiting Trust in Client

Utilizing REST's Trust in the System Resource to Obtain Sensitive Data

Session Hijacking

Token Impersonation

Upload a Web Shell to a Web Server

Adversary in the Middle (AiTM)

Abuse Elevation Control Mechanism

Application Access Token

Access Token Manipulation

Web Shell

Adversary-in-the-Middle

Improper authentication in Azure SRE Agent allows an unauthorized attacker to disclose information over a network.


integrated_management_controller

Improper Input Validation

A vulnerability in the change password functionality of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to bypass authentication and gain access to the system as&nbsp;Admin.

This vulnerability is due to incorrect handling of password change requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to bypass authentication, alter the passwords of any user on the system, including an&nbsp;Admin user, and gain access to the system as that user.

Cisco Enterprise NFV Infrastructure Software

Cisco Unified Computing System (Standalone)

Cisco Unified Computing System E-Series Software (UCSE)

Cisco

A vulnerability in the change password functionality of Cisco Integrated Management Controller (IMC) allows improper input validation. An unauthenticated, remote attacker can exploit this vulnerability by sending a crafted HTTP request to an affected device, bypassing authentication and altering passwords of any user on the system, including Admin users, to gain full system access.

Buffer Overflow via Environment Variables

Server Side Include (SSI) Injection

Command Line Execution through SQL Injection

Object Relational Mapping Injection

SQL Injection through SOAP Parameter Tampering

Double Encoding

Format String Injection

LDAP Injection

Client-side Injection-induced Buffer Overflow

Input Data Manipulation

Flash Injection

XSS Using MIME Type Mismatch

File Content Injection

Serialized Data with Nested Payloads

Oversized Serialized Data Payloads

Filter Failure through Buffer Overflow

XML Injection

azure_web_apps

Missing Authentication for Critical Function

Missing authentication for critical function in Azure MCP Server allows an unauthorized attacker to disclose information over a network.

Missing authentication for critical function in Azure MCP Server allows an unauthorized attacker to disclose information over a network.

Azure Web Apps

Missing authentication for critical function in Azure MCP Server allows an unauthorized attacker to disclose information over a network. Affected product: Azure Web Apps.

Choosing Message Identifier

Force the System to Reset Values

Using Unpublished Interfaces

Cross Site Request Forgery

Missing authentication for critical function in Azure MCP Server allows an unauthorized attacker to disclose information over a network.


Search CVEs by ID

Trending Vulnerabilities

Latest Patch Tuesday Reports

March 2026 Patch Tuesday: 10 Critical Vulnerabilities Amid 96 CVEs

March 2026 Early Security Update: 2 Critical Vulnerabilities Amid 5 CVEs

February 2026 Patch Tuesday: 10 Critical Vulnerabilities Amid 61 CVEs

Browse

Be the first to know about critical vulnerabilities