Common Vulnerabilities and Exposures (CVE)

CVE-2026-40422

Sep 2, 2026 17:53:37 UTC

Use of uninitialized resource in Windows File Explorer allows an authorized attacker to disclose information locally.

CVE-2026-34328

Sep 2, 2026 17:53:37 UTC

Exposure of sensitive information to an unauthorized actor in Windows Audio Service allows an authorized attacker to disclose information locally.

CVE-2026-33842

Sep 2, 2026 17:53:36 UTC

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.

CVE-2026-66316

Sep 2, 2026 17:53:36 UTC

Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-66315

Sep 2, 2026 17:53:35 UTC

Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

CVE-2026-66314

Sep 2, 2026 17:53:35 UTC

Time-of-check time-of-use (toctou) race condition in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

CVE-2026-66313

Sep 2, 2026 17:53:34 UTC

Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering locally.

CVE-2026-66312

Sep 2, 2026 17:53:33 UTC

Buffer over-read in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.

CVE-2026-66310

Sep 2, 2026 17:53:33 UTC

External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally.

CVE-2026-57990

Sep 2, 2026 17:53:32 UTC

Files or directories accessible to external parties in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

CVE-2026-57978

Sep 2, 2026 17:53:32 UTC

Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-57980

Sep 2, 2026 17:53:31 UTC

Authentication bypass using an alternate path or channel in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering over a network.

CVE-2026-58598

Sep 2, 2026 17:53:31 UTC

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backup Engine allows an authorized attacker to elevate privileges locally.

CVE-2026-58643

Sep 2, 2026 17:53:30 UTC

Improper neutralization of input during web page generation ('cross-site scripting') in Windows Admin Center allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-50653

Sep 2, 2026 17:53:29 UTC

Loop with unreachable exit condition ('infinite loop') in Azure Active Directory allows an unauthorized attacker to deny service over a network.