Skip to main content

Security Briefs

Page 42 of 111.

Alerts tracked

2651

Security flaws we track for Upstate SC businesses.

Known exploited

504

On CISA’s list of vulnerabilities attackers are actively using. Patch these first.

New exploited this month

60

Fresh additions to that CISA list since the first of the month.Feeds last synced Aug 22, 2026, 6:00 AM UTC.

Showing page 42 (24 alerts) of 2651.

Microsoft MSRC

CVE-2026-34349

Windows Media Information Disclosure vulnerability

Windows Media Information Disclosure vulnerability (CVE-2026-34349) was added to Microsoft’s security update guidance. Exposure of sensitive information to an unauthorized actor in Windows Media allows an authorized attacker to disclose information locally. If you need help checking exposure, call (864) 335-9223.

Microsoft MSRC

CVE-2026-34348

Windows Event Logging Service Information Disclosure vulnerability

Windows Event Logging Service Information Disclosure vulnerability (CVE-2026-34348) was added to Microsoft’s security update guidance. Protection mechanism failure in Windows Event Logging Service allows an authorized attacker to disclose information over a network. If you need help checking exposure, call (864) 335-9223.

Microsoft MSRC

CVE-2026-34346

Windows Ancillary Function Driver for WinSock Information Disclosure vulnerability

Windows Ancillary Function Driver for WinSock Information Disclosure vulnerability (CVE-2026-34346) was added to Microsoft’s security update guidance. Cleartext transmission of sensitive information in Windows Ancillary Function Driver for WinSock allows an authorized attacker to disclose information locally. If you need help checking exposure, call (864) 335-9223.

Microsoft MSRC

CVE-2026-34328

Windows Audio Service Information Disclosure vulnerability

Windows Audio Service Information Disclosure vulnerability (CVE-2026-34328) was added to Microsoft’s security update guidance. Exposure of sensitive information to an unauthorized actor in Windows Audio Service allows an authorized attacker to disclose information locally. If you need help checking exposure, call (864) 335-9223.

Microsoft MSRC

CVE-2026-33842

Windows File Explorer Information Disclosure vulnerability

Windows File Explorer Information Disclosure vulnerability (CVE-2026-33842) was added to Microsoft’s security update guidance. Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally. If you need help checking exposure, call (864) 335-9223.

Actively exploited (KEV)Ransomware

CVE-2026-15410

SonicWall SMA1000 Appliances Code Injection Vulnerability

SonicWall SMA1000 Appliances is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2026-15410). SonicWall SMA1000 Appliances contain a code injection vulnerability which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands. CISA remediation due date: 2026-07-17. If you need help checking exposure, call (864) 335-9223.

Actively exploited (KEV)Ransomware

CVE-2026-15409

SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability

SonicWall SMA1000 Appliances is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2026-15409). SonicWall SMA1000 Appliances contain a server-side request forgery vulnerability that could allow a remote unauthenticated attacker to potentially cause the appliance to make requests to unintended location. CISA remediation due date: 2026-07-17. If you need help checking exposure, call (864) 335-9223.

Actively exploited (KEV)

CVE-2008-4128

Cisco IOS Cross-Site Request Forgery Vulnerability

Cisco IOS is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2008-4128). Cisco IOS 12.4 contains multiple cross-site forgery vulnerabilities that allows remote attackers to execute arbitrary commands via (1) a certain "show privilege" command to the /level/15/exec/- URI, and (2) a certain "alias exec" command to the /level/15/exec/-/configure/http URI. CISA remediation due date: 2026-07-16. If you need help checking exposure, call (864) 335-9223.

Microsoft MSRC

CVE-2026-45489

Microsoft Edge (Chromium-based) Spoofing vulnerability

Microsoft Edge (Chromium-based) Spoofing vulnerability (CVE-2026-45489) was added to Microsoft’s security update guidance. CWE added. Informational change only. If you need help checking exposure, call (864) 335-9223.

Microsoft MSRC

CVE-2026-58281

Microsoft Edge (Chromium-based) Remote Code Execution vulnerability

Microsoft Edge (Chromium-based) Remote Code Execution vulnerability (CVE-2026-58281) was added to Microsoft’s security update guidance. Deserialization of untrusted data in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. If you need help checking exposure, call (864) 335-9223.

Microsoft MSRC

CVE-2026-14432

Use after free in V8 in Microsoft Edge vulnerability

Use after free in V8 in Microsoft Edge vulnerability (CVE-2026-14432) was added to Microsoft’s security update guidance. This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2025) for more information. If you need help checking exposure, call (864) 335-9223.

Microsoft MSRC

CVE-2026-14431

Type Confusion in V8 in Microsoft Edge vulnerability

Type Confusion in V8 in Microsoft Edge vulnerability (CVE-2026-14431) was added to Microsoft’s security update guidance. This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2025) for more information. If you need help checking exposure, call (864) 335-9223.

Microsoft MSRC

CVE-2026-14430

Integer overflow in V8 in Microsoft Edge vulnerability

Integer overflow in V8 in Microsoft Edge vulnerability (CVE-2026-14430) was added to Microsoft’s security update guidance. This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2025) for more information. If you need help checking exposure, call (864) 335-9223.

Microsoft MSRC

CVE-2026-14429

Insufficient validation of untrusted input in Skia in Microsoft Edge vulnerability

Insufficient validation of untrusted input in Skia in Microsoft Edge vulnerability (CVE-2026-14429) was added to Microsoft’s security update guidance. This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2025) for more information. If you need help checking exposure, call (864) 335-9223.

Microsoft MSRC

CVE-2026-14428

Insufficient validation of untrusted input in Dawn in Microsoft Edge vulnerability

Insufficient validation of untrusted input in Dawn in Microsoft Edge vulnerability (CVE-2026-14428) was added to Microsoft’s security update guidance. This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2025) for more information. If you need help checking exposure, call (864) 335-9223.

Microsoft MSRC

CVE-2026-14427

Heap buffer overflow in Skia in Microsoft Edge vulnerability

Heap buffer overflow in Skia in Microsoft Edge vulnerability (CVE-2026-14427) was added to Microsoft’s security update guidance. This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2025) for more information. If you need help checking exposure, call (864) 335-9223.

Microsoft MSRC

CVE-2026-14426

Use after free in V8 in Microsoft Edge vulnerability

Use after free in V8 in Microsoft Edge vulnerability (CVE-2026-14426) was added to Microsoft’s security update guidance. This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2025) for more information. If you need help checking exposure, call (864) 335-9223.

Microsoft MSRC

CVE-2026-14425

Use after free in ANGLE in Microsoft Edge vulnerability

Use after free in ANGLE in Microsoft Edge vulnerability (CVE-2026-14425) was added to Microsoft’s security update guidance. This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2025) for more information. If you need help checking exposure, call (864) 335-9223.

Microsoft MSRC

CVE-2026-14424

Use after free in Dawn in Microsoft Edge vulnerability

Use after free in Dawn in Microsoft Edge vulnerability (CVE-2026-14424) was added to Microsoft’s security update guidance. This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2025) for more information. If you need help checking exposure, call (864) 335-9223.

Microsoft MSRC

CVE-2026-14423

Type Confusion in Tint in Microsoft Edge vulnerability

Type Confusion in Tint in Microsoft Edge vulnerability (CVE-2026-14423) was added to Microsoft’s security update guidance. This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2025) for more information. If you need help checking exposure, call (864) 335-9223.

Microsoft MSRC

CVE-2026-14422

Out of bounds read and write in Tint in Microsoft Edge vulnerability

Out of bounds read and write in Tint in Microsoft Edge vulnerability (CVE-2026-14422) was added to Microsoft’s security update guidance. This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2025) for more information. If you need help checking exposure, call (864) 335-9223.

Microsoft MSRC

CVE-2026-14421

Uninitialized Use in Dawn in Microsoft Edge vulnerability

Uninitialized Use in Dawn in Microsoft Edge vulnerability (CVE-2026-14421) was added to Microsoft’s security update guidance. This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2025) for more information. If you need help checking exposure, call (864) 335-9223.

Microsoft MSRC

CVE-2026-14420

Out of bounds read and write in Dawn in Microsoft Edge vulnerability

Out of bounds read and write in Dawn in Microsoft Edge vulnerability (CVE-2026-14420) was added to Microsoft’s security update guidance. This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2025) for more information. If you need help checking exposure, call (864) 335-9223.

Microsoft MSRC

CVE-2026-14419

Use after free in Skia in Microsoft Edge vulnerability

Use after free in Skia in Microsoft Edge vulnerability (CVE-2026-14419) was added to Microsoft’s security update guidance. This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2025) for more information. If you need help checking exposure, call (864) 335-9223.