Patch Day month

May 2026 vulnerabilities

A defender-focused view of 1,473 vulnerabilities across 2,584 returned patch records from 4 vendors. Filter the complete month, or browse the static page trail without JavaScript.

2,584all patch recordsClear filters 143criticalShow these records 3Microsoft exploitation detectedShow these records 4Microsoft in CISA KEVShow these records 549tracked hereShow these records

Red Hat 1,436 Microsoft 1,128 Cisco 19 Android 1

Narrow the complete month

Filters use every patch record in this month, including records on later static pages.

Clear all

Microsoft-only signal filters exclude records without Microsoft signal data as unknown, report them separately, and never count them as “no.” “Tracked here” covers both Microsoft and cross-vendor records.

Loading the complete-month filter index…

#patch-filter-form, #patch-filter-loading { display: none !important; } Complete-month filters require JavaScript. The responsive records and ordinary page links below remain complete and usable.

An EPSS percentage is the global 30-day exploitation probability in the wild, not specific to you.

Page 13 of 13 · records 2,401–2,584 of 2,584

Microsoft Security Response Center

CVEDateProductMSRC severityOut-of-bandEPSSTitle

CVE-2026-8556 ↗2026-05-15Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8556 Inappropriate implementation in ANGLE

CVE-2026-8554 ↗2026-05-15Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8554 Type Confusion in ANGLE

CVE-2026-8553 ↗2026-05-15Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8553 Use after free in GPU

CVE-2026-8552 ↗2026-05-15Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8552 Heap buffer overflow in GPU

CVE-2026-8551 ↗2026-05-15Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8551 Use after free in Downloads

CVE-2026-8550 ↗2026-05-15Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8550 Use after free in Google Lens

CVE-2026-8549 ↗2026-05-15Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8549 Use after free in Media

CVE-2026-8548 ↗2026-05-15Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8548 Out of bounds write in Media

CVE-2026-8547 ↗2026-05-15Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8547 Insufficient policy enforcement in Passwords

CVE-2026-8546 ↗2026-05-15Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8546 Out of bounds read in GPU

CVE-2026-8545 ↗2026-05-15Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8545 Object corruption in Compositing

CVE-2026-8544 ↗2026-05-15Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8544 Use after free in Media

CVE-2026-8543 ↗2026-05-15Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8543 Out of bounds read in FileSystem

CVE-2026-8542 ↗2026-05-15Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8542 Use after free in Core

CVE-2026-8541 ↗2026-05-15Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8541 Out of bounds read in UI

CVE-2026-8540 ↗2026-05-15Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8540 Type Confusion in V8

CVE-2026-8539 ↗2026-05-15Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8539 Script injection in SanitizerAPI

CVE-2026-8538 ↗2026-05-15Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8538 Insufficient validation of untrusted input in GPU

CVE-2026-8537 ↗2026-05-15Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8537 Insufficient policy enforcement in ViewTransitions

CVE-2026-8536 ↗2026-05-15Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8536 Insufficient validation of untrusted input in ReadingMode

CVE-2026-8535 ↗2026-05-15Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8535 Out of bounds read in Media

CVE-2026-8534 ↗2026-05-15Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8534 Integer overflow in GPU

CVE-2026-8533 ↗2026-05-15Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8533 Use after free in Accessibility

CVE-2026-8532 ↗2026-05-15Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8532 Integer overflow in XML

CVE-2026-8531 ↗2026-05-15Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8531 Heap buffer overflow in WebML

CVE-2026-8530 ↗2026-05-15Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8530 Use after free in Network

CVE-2026-8529 ↗2026-05-15Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8529 Heap buffer overflow in Codecs

CVE-2026-8528 ↗2026-05-15Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8528 Insufficient validation of untrusted input in SiteIsolation

CVE-2026-8527 ↗2026-05-15Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8527 Insufficient validation of untrusted input in Downloads

CVE-2026-8526 ↗2026-05-15Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8526 Out of bounds write in WebRTC

CVE-2026-8525 ↗2026-05-15Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8525 Heap buffer overflow in ANGLE

CVE-2026-8524 ↗2026-05-15Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8524 Out of bounds write in WebAudio

CVE-2026-8523 ↗2026-05-15Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8523 Use after free in Mojo

CVE-2026-8519 ↗2026-05-15Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8519 Integer overflow in ANGLE

CVE-2026-8518 ↗2026-05-15Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8518 Use after free in Blink

CVE-2026-8517 ↗2026-05-15Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8517 Object lifecycle issue in WebShare

CVE-2026-8516 ↗2026-05-15Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8516 Insufficient validation of untrusted input in DataTransfer

CVE-2026-8514 ↗2026-05-15Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8514 Use after free in Aura

CVE-2026-8515 ↗2026-05-15Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8515 Use after free in HID

CVE-2026-8513 ↗2026-05-15Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8513 Use after free in Input

CVE-2026-8512 ↗2026-05-15Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8512 Use after free in FileSystem

CVE-2026-8511 ↗2026-05-15Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8511 Use after free in UI

CVE-2026-8510 ↗2026-05-15Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8510 Integer overflow in Skia

CVE-2026-8509 ↗2026-05-15Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8509 Heap buffer overflow in WebML

CVE-2026-7897 ↗2026-05-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7897 Use after free in Mobile

CVE-2026-7905 ↗2026-05-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7905 Insufficient validation of untrusted input in Media

CVE-2026-7912 ↗2026-05-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7912 Integer overflow in GPU

CVE-2026-7913 ↗2026-05-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7913 Insufficient policy enforcement in DevTools

CVE-2026-7915 ↗2026-05-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7915 Insufficient data validation in DevTools

CVE-2026-7931 ↗2026-05-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7931 Insufficient validation of untrusted input in iOS

CVE-2026-7941 ↗2026-05-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7941 Insufficient validation of untrusted input in Mobile

CVE-2026-7993 ↗2026-05-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7993 Insufficient validation of untrusted input in Payments

CVE-2026-8020 ↗2026-05-11Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8020 Uninitialized Use in GPU

CVE-2026-7896 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7896 Integer overflow in Blink

CVE-2026-7898 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7898 Use after free in Chromoting

CVE-2026-7899 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7899 Out of bounds read and write in V8

CVE-2026-7900 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7900 Heap buffer overflow in ANGLE

CVE-2026-7901 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7901 Use after free in ANGLE

CVE-2026-7902 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7902 Out of bounds memory access in V8

CVE-2026-7903 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7903 Integer overflow in ANGLE

CVE-2026-7904 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7904 Out of bounds read in Fonts

CVE-2026-7906 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7906 Use after free in SVG

CVE-2026-7907 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7907 Use after free in DOM

CVE-2026-7908 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7908 Use after free in Fullscreen

CVE-2026-7909 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7909 Inappropriate implementation in ServiceWorker

CVE-2026-7910 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7910 Use after free in Views

CVE-2026-7911 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7911 Use after free in Aura

CVE-2026-7914 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7914 Type Confusion in Accessibility

CVE-2026-7916 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7916 Insufficient data validation in InterestGroups

CVE-2026-7917 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7917 Use after free in Fullscreen

CVE-2026-7918 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7918 Use after free in GPU

CVE-2026-7919 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7919 Use after free in Aura

CVE-2026-7920 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7920 Use after free in Skia

CVE-2026-7921 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7921 Use after free in Passwords

CVE-2026-7922 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7922 Use after free in ServiceWorker

CVE-2026-7923 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7923 Out of bounds write in Skia

CVE-2026-7924 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7924 Uninitialized Use in Dawn

CVE-2026-7925 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7925 Use after free in Chromoting

CVE-2026-7926 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7926 Use after free in PresentationAPI

CVE-2026-7927 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7927 Type Confusion in Runtime

CVE-2026-7928 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7928 Use after free in WebRTC

CVE-2026-7929 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7929 Use after free in MediaRecording

CVE-2026-7930 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band—Chromium: CVE-2026-7930 Insufficient validation of untrusted input in Cookies

CVE-2026-7932 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7932 Insufficient policy enforcement in Downloads

CVE-2026-7933 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7933 Out of bounds read in WebCodecs

CVE-2026-7934 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7934 Insufficient validation of untrusted input in Popup Blocker

CVE-2026-7935 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7935 Inappropriate implementation in Speech

CVE-2026-7936 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band—Chromium: CVE-2026-7936 Object lifecycle issue in V8

CVE-2026-7937 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7937 Insufficient policy enforcement in DevTools

CVE-2026-7938 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7938 Use after free in CSS

CVE-2026-7939 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7939 Inappropriate implementation in SanitizerAPI

CVE-2026-7940 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7940 Use after free in V8

CVE-2026-7942 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7942 Integer overflow in ANGLE

CVE-2026-7943 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7943 Insufficient validation of untrusted input in ANGLE

CVE-2026-7944 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7944 Insufficient validation of untrusted input in Persistent Cache

CVE-2026-7945 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7945 Insufficient validation of untrusted input in COOP

CVE-2026-7946 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7946 Insufficient policy enforcement in WebUI

CVE-2026-7947 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7947 Insufficient validation of untrusted input in Network

CVE-2026-7948 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7948 Race in Chromoting

CVE-2026-7949 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7949 Out of bounds read in Skia

CVE-2026-7950 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7950 Out of bounds read and write in GFX

CVE-2026-7951 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7951 Out of bounds write in WebRTC

CVE-2026-7952 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7952 Insufficient policy enforcement in Extensions

CVE-2026-7953 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7953 Insufficient validation of untrusted input in Omnibox

CVE-2026-7954 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7954 Race in Shared Storage

CVE-2026-7955 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7955 Uninitialized Use in GPU

CVE-2026-7956 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7956 Use after free in Navigation

CVE-2026-7957 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7957 Out of bounds write in Media

CVE-2026-7958 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7958 Inappropriate implementation in ServiceWorker

CVE-2026-7959 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7959 Inappropriate implementation in Navigation

CVE-2026-7960 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7960 Race in Speech

CVE-2026-7961 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7961 Insufficient validation of untrusted input in Permissions

CVE-2026-7962 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7962 Insufficient policy enforcement in DirectSockets

CVE-2026-7963 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7963 Inappropriate implementation in ServiceWorker

CVE-2026-7964 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7964 Insufficient validation of untrusted input in FileSystem

CVE-2026-7965 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7965 Insufficient validation of untrusted input in DevTools

CVE-2026-7966 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7966 Insufficient validation of untrusted input in SiteIsolation

CVE-2026-7967 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7967 Insufficient validation of untrusted input in Navigation

CVE-2026-7968 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7968 Insufficient validation of untrusted input in CORS

CVE-2026-7969 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7969 Integer overflow in Network

CVE-2026-7970 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7970 Use after free in TopChrome

CVE-2026-7971 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7971 Inappropriate implementation in ORB

CVE-2026-7972 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7972 Uninitialized Use in GPU

CVE-2026-7973 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7973 Integer overflow in Dawn

CVE-2026-7974 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7974 Use after free in Blink

CVE-2026-7975 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7975 Use after free in DevTools

CVE-2026-7976 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7976 Use after free in Views

CVE-2026-7977 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7977 Inappropriate implementation in Canvas

CVE-2026-7978 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7978 Inappropriate implementation in Companion

CVE-2026-7979 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7979 Inappropriate implementation in Media

CVE-2026-7980 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7980 Use after free in WebAudio

CVE-2026-7981 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7981 Out of bounds read in Codecs

CVE-2026-7982 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7982 Uninitialized Use in WebCodecs

CVE-2026-7983 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7983 Out of bounds read in Dawn

CVE-2026-7984 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7984 Use after free in ReadingMode

CVE-2026-7985 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7985 Use after free in GPU

CVE-2026-7986 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7986 Insufficient policy enforcement in Autofill

CVE-2026-7987 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7987 Use after free in WebRTC

CVE-2026-7988 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7988 Type Confusion in WebRTC

CVE-2026-7989 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7989 Insufficient data validation in DataTransfer

CVE-2026-7990 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7990 Insufficient validation of untrusted input in Updater

CVE-2026-7991 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7991 Use after free in UI

CVE-2026-7992 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7992 Insufficient validation of untrusted input in UI

CVE-2026-7994 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7994 Inappropriate implementation in Chromoting

CVE-2026-7995 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7995 Out of bounds read in AdFilter

CVE-2026-7996 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7996 Insufficient validation of untrusted input in SSL

CVE-2026-7997 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7997 Insufficient validation of untrusted input in Updater

CVE-2026-7998 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7998 Insufficient validation of untrusted input in Dialog

CVE-2026-7999 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-7999 Inappropriate implementation in V8

CVE-2026-8000 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8000 Insufficient validation of untrusted input in ChromeDriver

CVE-2026-8001 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8001 Use after free in Printing

CVE-2026-8002 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8002 Use after free in Audio

CVE-2026-8003 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8003 Insufficient validation of untrusted input in TabGroups

CVE-2026-8004 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8004 Insufficient policy enforcement in DevTools

CVE-2026-8005 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8005 Insufficient validation of untrusted input in Cast

CVE-2026-8006 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8006 Insufficient policy enforcement in DevTools

CVE-2026-8007 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8007 Insufficient validation of untrusted input in Cast

CVE-2026-8008 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8008 Inappropriate implementation in DevTools

CVE-2026-8009 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8009 Inappropriate implementation in Cast

CVE-2026-8010 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8010 Insufficient validation of untrusted input in SiteIsolation

CVE-2026-8011 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8011 Insufficient policy enforcement in Search

CVE-2026-8012 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8012 Inappropriate implementation in MHTML

CVE-2026-8013 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8013 Insufficient validation of untrusted input in FedCM

CVE-2026-8014 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8014 Inappropriate implementation in Preload

CVE-2026-8015 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8015 Inappropriate implementation in Media

CVE-2026-8016 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8016 Use after free in WebRTC

CVE-2026-8017 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8017 Side-channel information leakage in Media

CVE-2026-8018 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8018 Insufficient policy enforcement in DevTools

CVE-2026-8019 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8019 Insufficient policy enforcement in WebApp

CVE-2026-8021 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8021 Script injection in UI

CVE-2026-8022 ↗2026-05-07Microsoft Edge (Chromium-based)N/AOut-of-band0%Chromium: CVE-2026-8022 Inappropriate implementation in MHTML

CVE-2026-46242 ↗2026-05-31azl3 kernel 6.6.139.1-1 on Azure Linux 3.0N/AOut-of-band—eventpoll: fix ep_remove struct eventpoll / struct file UAF

CVE-2026-43421 ↗2026-05-09azl3 kernel 6.6.137.1-2 on Azure Linux 3.0N/AOut-of-band—usb: gadget: f_ncm: Fix net_device lifecycle with device_move

CVE-2026-43398 ↗2026-05-09azl3 kernel 6.6.137.1-2 on Azure Linux 3.0N/AOut-of-band—drm/amdgpu: add upper bound check on user inputs in wait ioctl

CVE-2026-43400 ↗2026-05-09azl3 kernel 6.6.137.1-2 on Azure Linux 3.0N/AOut-of-band—drm/amdgpu: add upper bound check on user inputs in signal ioctl

CVE-2026-43317 ↗2026-05-09azl3 kernel 6.6.138.1-1 on Azure Linux 3.0N/AOut-of-band—most: core: fix leak on early registration failure

CVE-2026-43443 ↗2026-05-09azl3 kernel 6.6.137.1-2 on Azure Linux 3.0N/AOut-of-band—ASoC: amd: acp-mach-common: Add missing error check for clock acquisition

CVE-2026-43320 ↗2026-05-09azl3 kernel 6.6.137.1-2 on Azure Linux 3.0N/AOut-of-band—drm/amd/display: Fix dsc eDP issue

CVE-2025-71302 ↗2026-05-09azl3 kernel 6.6.137.1-2 on Azure Linux 3.0N/AOut-of-band—drm/panthor: fix for dma-fence safe access rules

CVE-2026-43474 ↗2026-05-09azl3 kernel 6.6.137.1-2 on Azure Linux 3.0N/AOut-of-band—fs: init flags_valid before calling vfs_fileattr_get

CVE-2026-43045 ↗2026-05-02azl3 kernel 6.6.134.1-2 on Azure Linux 3.0N/AOut-of-band—mshv: Fix error handling in mshv_region_pin

CVE-2026-43021 ↗2026-05-02azl3 kernel 6.6.134.1-2 on Azure Linux 3.0N/AOut-of-band—Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails

CVE-2026-43022 ↗2026-05-02azl3 kernel 6.6.134.1-2 on Azure Linux 3.0N/AOut-of-band—Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists

CVE-2026-31769 ↗2026-05-02azl3 kernel 6.6.134.1-2 on Azure Linux 3.0N/AOut-of-band—gpib: fix use-after-free in IO ioctl handlers

Narrow the complete month

Microsoft Security Response Center

Cross-vendor patches

Microsoft Security Response Center