Microsoft Security Response Center Blog Alerts

Chromium: CVE-2026-3940 Insufficient policy enforcement in DevTools

Published March 14, 2026

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2021) for more information.

CVE-2026-27171 zlib before 1.3.2 allows CPU consumption via crc32_combine64 and crc32_combine_gen64 because x2nmodp can do right shifts within a loop that has no termination condition.

Published March 14, 2026

Information published.

CVE-2026-3381 Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib

Published March 14, 2026

Information published.

CVE-2026-31802 node-tar Symlink Path Traversal via Drive-Relative Linkpath

Published March 14, 2026

Information published.

Chromium: CVE-2026-3910 Inappropriate implementation in V8

Published March 14, 2026

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2021) for more information. Google is aware that an exploit for CVE-2026-3910 exists in the wild.

Chromium: CVE-2026-3942 Incorrect security UI in PictureInPicture

Published March 14, 2026

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2021) for more information.

CVE-2026-3805 use after free in SMB connection reuse

Published March 13, 2026

Information published.

CVE-2026-3904

Published March 13, 2026

Information published.

CVE-2026-26133 M365 Copilot Information Disclosure Vulnerability

Published March 13, 2026

Ai command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.

CVE-2026-26030 GitHub: CVE-2026-26030 Microsoft Semantic Kernel InMemoryVectorStore filter functionality vulnerable

Published March 13, 2026

Acknowledgement added. This is an informational change only.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

AbuseIPDB Contributor Badge

© 2026, Network Services Group |  216.73.216.174
Contributor,  Detroit Internet Exchange