vulnerability management

Microsoft has published CVE-2026-34349, but the verified facts available to this article do not yet provide the details Windows administrators need to identify exposed devices or deploy a specific remediation. The identifier and title confirm that Microsoft has created a vulnerability record...

Microsoft’s record identifies CVE-2026-42982 as the “Windows Secure Kernel Mode Elevation of Privilege Vulnerability” and gives a publication timestamp of July 14, 2026, at 7:00 a.m. UTC-7. The supplied material also explains Microsoft’s technical-details confidence metric. It does not, however...

Microsoft published CVE-2026-48561, titled “Microsoft Copilot Remote Code Execution Vulnerability,” on July 14, 2026, at 7:00 a.m. Pacific time. The advisory is available at Security Update Guide - Microsoft Security Response Center. From the advisory data verified for this article, no affected...

Chrome for iOS Before 150.0.7871.47: Update and Verify; Chrome on Windows Is Not Listed as Affected The published affected range for CVE-2026-14136 is Chrome for iOS versions earlier than 150.0.7871.47. Chromium rates the UI-spoofing issue Low, while CISA-ADP contributes a CVSS 3.1 score of 4.3...

Google Chrome on Android versions earlier than 150.0.7871.47 contain CVE-2026-14126, a security-interface flaw that can allow a remote attacker to use a crafted HTML page to spoof a domain when user interaction is involved. Chromium rates the issue Low, while CISA-ADP assigns it a 4.3 Medium...

CVE-2026-14096 is a Google Chrome for Android information-disclosure flaw that can let an attacker with an already-compromised renderer leak cross-origin data through crafted HTML on versions earlier than 150.0.7871.47. Google labels the Chromium security severity Low, while CISA-ADP’s CVSS 3.1...

Google disclosed CVE-2026-14099 on June 30, 2026, a use-after-free flaw affecting Chrome for iOS before version 150.0.7871.47 that could let a remote attacker, after inducing specific user-interface gestures on a crafted HTML page, corrupt heap memory on an iPhone running the vulnerable browser...

Chrome for iOS Use-After-Free Pits Chromium’s Low Rating Against a CISA-ADP CVSS 3.1 Score of 8.8 Chrome for iOS versions below 150.0.7871.47 are affected by CVE-2026-14067. Update the application, then open Chrome and verify that the installed version shown under More > Settings > Google Chrome...

CVE-2026-14066 is an input-validation vulnerability in Chrome on iOS that can allow a remote attacker to bypass navigation restrictions through a crafted HTML page. The NVD description records Chromium security severity as Low, while the CISA-ADP CVSS 3.1 contribution produces a 4.3 Medium...

Google Chrome on Android versions earlier than 150.0.7871.47 are affected by CVE-2026-14005, a use-after-free vulnerability in the Omnibox. According to the Chrome-sourced description presented by the National Vulnerability Database, a remote attacker could use a crafted HTML page and persuade a...

Chrome on iOS versions before 150.0.7871.47 are affected by CVE-2026-14028. Chrome on Windows is not established as affected by the available record. Administrators should update affected iPhones, confirm that Chrome is at version 150.0.7871.47 or later, and validate the platform context of any...

Google Chrome on macOS versions earlier than 150.0.7871.47 are affected by CVE-2026-13998, a Medium-severity flaw described as incorrect security UI in file input. A remote attacker can use crafted HTML to perform UI spoofing after persuading a user to complete specific gestures. The supplied...

Google Chrome on Android versions before 150.0.7871.47 are affected by CVE-2026-13997, an incorrect-security-UI vulnerability in the browser’s Extensions component. According to the National Vulnerability Database record, a remote attacker can use crafted HTML and specific user gestures to...

CVE-2026-13987 is a Google Chrome vulnerability affecting Chrome on Android before version 150.0.7871.47. According to the Chrome-originated description, a remote attacker can use a crafted HTML page to perform security-interface spoofing after obtaining required user interaction. The flaw is...

Google fixed CVE-2026-13991, a medium-severity Chrome for iOS input-validation flaw affecting versions before 150.0.7871.47. According to the supplied NVD record, a remote attacker can use a crafted HTML page to produce UI spoofing after user interaction. The record does not describe browser...

Google Chrome on Android versions earlier than 150.0.7871.47 contains CVE-2026-13969, a medium-severity information-disclosure flaw involving uninitialized use in the browser’s UI component. The published description requires an already-compromised renderer and says crafted HTML may expose...

Google Chrome on Android versions earlier than 150.0.7871.47 are vulnerable to CVE-2026-13936, a Medium-severity flaw that can let a remote attacker use crafted HTML to obtain potentially sensitive information from browser process memory after user interaction. The vulnerability is associated...

Chrome on Android releases before 150.0.7871.47 are affected by CVE-2026-13929. Update affected Android devices and verify that the complete installed Chrome version is 150.0.7871.47 or later. The supplied record does not establish that this CVE affects Chrome on Windows or Microsoft Edge. For...

Chrome on Android versions below 150.0.7871.47 are affected by CVE-2026-13923. Update Chrome to version 150.0.7871.47 or later and verify the installed app version. The documented exposure is a crafted-HTML-triggered potential disclosure of sensitive information from browser process memory, not...

Affected: Chrome for iOS versions earlier than 150.0.7871.47 are affected by CVE-2026-13917. Action: Update or require Chrome for iOS 150.0.7871.47 or later, then use current application inventory to verify that managed devices crossed the fixed-version threshold. Google describes CVE-2026-13917...