Microsoft Security Response Center Blog Alerts

Chromium: CVE-2026-6302 Use after free in Video

Published April 19, 2026

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

Chromium: CVE-2026-6301 Type Confusion in Turbofan

Published April 19, 2026

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

Chromium: CVE-2026-6300 Use after free in CSS

Published April 19, 2026

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

Chromium: CVE-2026-6299 Use after free in Prerender

Published April 19, 2026

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

CVE-2026-27143 Missing bound checks can lead to memory corruption in safe Go in cmd/compile

Published April 17, 2026

Information published.

CVE-2026-35201 Discount has an Out-of-bounds Read in rdiscount

Published April 17, 2026

Information published.

CVE-2026-32282 TOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unix

Published April 17, 2026

Information published.

CVE-2026-40179 Prometheus: Stored XSS via metric names and label values in web UI tooltips and metrics explorer

Published April 17, 2026

Information published.

CVE-2025-14821 Libssh: libssh: insecure default configuration leads to local man-in-the-middle attacks on windows

Published April 17, 2026

Information published.

CVE-2026-39956 jq: Missing runtime type checks for _strindices lead to crash and limited memory disclosure

Published April 17, 2026

Information published.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

AbuseIPDB Contributor Badge

© 2026, Network Services Group |  216.73.216.247
Contributor,  Detroit Internet Exchange