Skip to main content

Microsoft security briefs

3324 published alerts for Microsoft products and services.

Microsoft MSRC

CVE-2026-14143

Incorrect security UI in Passwords in Microsoft Edge vulnerability

Incorrect security UI in Passwords in Microsoft Edge vulnerability (CVE-2026-14143) was added to Microsoft’s security update guidance. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. If you need help checking exposure, call (864) 335-9223.

Microsoft MSRC

CVE-2026-14142

Inappropriate implementation in Extensions in Microsoft Edge vulnerability

Inappropriate implementation in Extensions in Microsoft Edge vulnerability (CVE-2026-14142) was added to Microsoft’s security update guidance. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. If you need help checking exposure, call (864) 335-9223.

Microsoft MSRC

CVE-2026-14141

Incorrect security UI in Document Picture-in-Picture in Microsoft Edge vulnerability

Incorrect security UI in Document Picture-in-Picture in Microsoft Edge vulnerability (CVE-2026-14141) was added to Microsoft’s security update guidance. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. If you need help checking exposure, call (864) 335-9223.

Microsoft MSRC

CVE-2026-14140

Insufficient validation of untrusted input in Input in Microsoft Edge vulnerability

Insufficient validation of untrusted input in Input in Microsoft Edge vulnerability (CVE-2026-14140) was added to Microsoft’s security update guidance. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. If you need help checking exposure, call (864) 335-9223.

Microsoft MSRC

CVE-2026-14139

Inappropriate implementation in TabStrip in Microsoft Edge vulnerability

Inappropriate implementation in TabStrip in Microsoft Edge vulnerability (CVE-2026-14139) was added to Microsoft’s security update guidance. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. If you need help checking exposure, call (864) 335-9223.

Microsoft MSRC

CVE-2026-14138

Inappropriate implementation in WebAppInstalls in Microsoft Edge vulnerability

Inappropriate implementation in WebAppInstalls in Microsoft Edge vulnerability (CVE-2026-14138) was added to Microsoft’s security update guidance. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. If you need help checking exposure, call (864) 335-9223.

Microsoft MSRC

CVE-2026-14135

Insufficient validation of untrusted input in Network in Microsoft Edge vulnerability

Insufficient validation of untrusted input in Network in Microsoft Edge vulnerability (CVE-2026-14135) was added to Microsoft’s security update guidance. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. If you need help checking exposure, call (864) 335-9223.

Microsoft MSRC

CVE-2026-14134

Inappropriate implementation in Autofill in Microsoft Edge vulnerability

Inappropriate implementation in Autofill in Microsoft Edge vulnerability (CVE-2026-14134) was added to Microsoft’s security update guidance. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. If you need help checking exposure, call (864) 335-9223.

Microsoft MSRC

CVE-2026-14133

Race in History Embeddings in Microsoft Edge vulnerability

Race in History Embeddings in Microsoft Edge vulnerability (CVE-2026-14133) was added to Microsoft’s security update guidance. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. If you need help checking exposure, call (864) 335-9223.

Microsoft MSRC

CVE-2026-14132

Inappropriate implementation in WebXR in Microsoft Edge vulnerability

Inappropriate implementation in WebXR in Microsoft Edge vulnerability (CVE-2026-14132) was added to Microsoft’s security update guidance. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. If you need help checking exposure, call (864) 335-9223.

Microsoft MSRC

CVE-2026-14131

Insufficient validation of untrusted input in WebAppInstalls in Microsoft Edge vulnerability

Insufficient validation of untrusted input in WebAppInstalls in Microsoft Edge vulnerability (CVE-2026-14131) was added to Microsoft’s security update guidance. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. If you need help checking exposure, call (864) 335-9223.

Microsoft MSRC

CVE-2026-14130

Incorrect security UI in Omnibox in Microsoft Edge vulnerability

Incorrect security UI in Omnibox in Microsoft Edge vulnerability (CVE-2026-14130) was added to Microsoft’s security update guidance. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. If you need help checking exposure, call (864) 335-9223.

Microsoft MSRC

CVE-2026-14129

Incorrect security UI in PreviewTab in Microsoft Edge vulnerability

Incorrect security UI in PreviewTab in Microsoft Edge vulnerability (CVE-2026-14129) was added to Microsoft’s security update guidance. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. If you need help checking exposure, call (864) 335-9223.

Microsoft MSRC

CVE-2026-14127

Inappropriate implementation in Printing in Microsoft Edge vulnerability

Inappropriate implementation in Printing in Microsoft Edge vulnerability (CVE-2026-14127) was added to Microsoft’s security update guidance. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. If you need help checking exposure, call (864) 335-9223.

Microsoft MSRC

CVE-2026-14125

Uninitialized Use in ANGLE in Microsoft Edge vulnerability

Uninitialized Use in ANGLE in Microsoft Edge vulnerability (CVE-2026-14125) was added to Microsoft’s security update guidance. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. If you need help checking exposure, call (864) 335-9223.

Microsoft MSRC

CVE-2026-14124

Inappropriate implementation in CredentialProvider in Microsoft Edge vulnerability

Inappropriate implementation in CredentialProvider in Microsoft Edge vulnerability (CVE-2026-14124) was added to Microsoft’s security update guidance. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. If you need help checking exposure, call (864) 335-9223.

Microsoft MSRC

CVE-2026-14122

Insufficient validation of untrusted input in WebAppInstalls in Microsoft Edge vulnerability

Insufficient validation of untrusted input in WebAppInstalls in Microsoft Edge vulnerability (CVE-2026-14122) was added to Microsoft’s security update guidance. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. If you need help checking exposure, call (864) 335-9223.

Microsoft MSRC

CVE-2026-14121

Use after free in Chromoting in Microsoft Edge vulnerability

Use after free in Chromoting in Microsoft Edge vulnerability (CVE-2026-14121) was added to Microsoft’s security update guidance. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. If you need help checking exposure, call (864) 335-9223.

Microsoft MSRC

CVE-2026-14120

Inappropriate implementation in DevTools in Microsoft Edge vulnerability

Inappropriate implementation in DevTools in Microsoft Edge vulnerability (CVE-2026-14120) was added to Microsoft’s security update guidance. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. If you need help checking exposure, call (864) 335-9223.

Microsoft MSRC

CVE-2026-14119

Type Confusion in Bluetooth in Microsoft Edge vulnerability

Type Confusion in Bluetooth in Microsoft Edge vulnerability (CVE-2026-14119) was added to Microsoft’s security update guidance. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. If you need help checking exposure, call (864) 335-9223.

Microsoft MSRC

CVE-2026-14118

Insufficient data validation in DevTools in Microsoft Edge vulnerability

Insufficient data validation in DevTools in Microsoft Edge vulnerability (CVE-2026-14118) was added to Microsoft’s security update guidance. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. If you need help checking exposure, call (864) 335-9223.

Microsoft MSRC

CVE-2026-14117

Insufficient validation of untrusted input in DevTools in Microsoft Edge vulnerability

Insufficient validation of untrusted input in DevTools in Microsoft Edge vulnerability (CVE-2026-14117) was added to Microsoft’s security update guidance. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. If you need help checking exposure, call (864) 335-9223.

Microsoft MSRC

CVE-2026-14116

Insufficient validation of untrusted input in DevTools in Microsoft Edge vulnerability

Insufficient validation of untrusted input in DevTools in Microsoft Edge vulnerability (CVE-2026-14116) was added to Microsoft’s security update guidance. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. If you need help checking exposure, call (864) 335-9223.

Microsoft MSRC

CVE-2026-14115

Insufficient validation of untrusted input in Cast in Microsoft Edge vulnerability

Insufficient validation of untrusted input in Cast in Microsoft Edge vulnerability (CVE-2026-14115) was added to Microsoft’s security update guidance. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information. If you need help checking exposure, call (864) 335-9223.