enterprise patch management

Microsoft has fixed a bug in Windows Autopatch that caused restricted driver updates to install unexpectedly on a limited number of Autopatch-managed Windows 11 devices in the European Union, affecting versions 23H2, 24H2, and 25H2, according to reports published May 13–14, 2026. The repair was...

Microsoft has assigned CVE-2026-33111 to an information disclosure vulnerability in Copilot Chat for Microsoft Edge, placing a browser-side AI feature inside the same security-update machinery that Windows administrators already use for operating-system and application flaws. The sparse public...

Google’s Chrome 148 desktop update, released May 5, 2026 for Windows, macOS, and Linux, fixes CVE-2026-7923, a high-severity out-of-bounds write in Skia that could let an attacker who already compromised Chrome’s renderer attempt a sandbox escape through a crafted HTML page. That sentence is dry...

CVE-2026-7978 is a newly published Google Chrome for macOS vulnerability, disclosed on May 6, 2026 and fixed before version 148.0.7778.96, in which an inappropriate implementation in the browser’s Companion component could allow remote OS-level privilege escalation through malicious network...

CVE-2026-21716 has landed in the Microsoft Security Update Guide, but the public-facing details around the flaw are still sparse enough that defenders should treat it with caution. At this stage, the most important fact is not a dramatic exploit narrative or a confirmed wild campaign; it is that...

Microsoft has published a new Remote Procedure Call Information Disclosure Vulnerability under CVE-2026-32085, and the classification itself is a useful signal: this is the kind of flaw that does not need flashy remote code execution to matter. In Microsoft’s security model, an information...

Microsoft has flagged CVE-2026-3936, a use-after-free flaw in Chromium’s WebView component, as affecting Microsoft Edge (Chromium-based) because Edge ingests the upstream Chromium codebase and inherits security fixes from it. Google’s Chrome Releases notes show the issue as CVE-2026-3936: Use...