Product

Windows

Made by Microsoft. 172 of its vulnerabilities are known to have been exploited.

Coverage

Severity: ElevatedAction: Be aware

Chrome Dev for Desktop Update

The Dev channel has been updated to 157.0.8081.0 for Windows, Mac and Linux. A partial list of changes is available in the Git log . Interested in switching release channels? Find out how . If you find a new issue, please let us know by filing a bug . The community help forum is also a great place to reach out for help or learn about common issues. Chrome Release Team Google Chrome…

Severity: ElevatedAction: Be aware

Extended Stable Update for Desktop

The Extended Stable channel has been updated to 152.0.7977.152 for Windows and Mac which will roll out over the coming days/weeks. A full list of changes in this build is available in the log . Interested in switching release channels? Find out how here . If you find a new issue, please let us know by filing a bug . The community help forum is also a great place to reach out for help or learn about common…

Severity: ElevatedAction: Patch

Chrome for Android Update

Hi, everyone! We've just released Chrome 154 (154.0.8037.126) for Android. It'll become available on Google Play over the next few days. This release includes stability and performance improvements. You can see a full list of the changes in the Git log . If you find a new issue, please let us know by filing a bug . Android releases contain the same security fixes as their corresponding Desktop releases (Windows &…

Severity: ElevatedAction: Be aware

Stable Channel Update for Desktop

The Stable channel has been updated to 154.0.8037.97/.98 for Windows and Mac and 154.0.8037.97 to Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log Security changes will be updated shortly Interested in switching release channels? Find out how here . If you find a new issue, please let us know by filing a bug . The community help forum is also a…

Severity: Informational

Microsoft enables Windows settings backup by default for orgs

Microsoft announced that Windows settings backup and restore is now enabled by default on all Microsoft Entra-joined or Microsoft Entra hybrid-joined enterprise systems upgraded to Windows 11 26H2.

Severity: ElevatedAction: Be aware

Early Stable Update for Desktop

The Stable channel has been updated to 155.0.8059.26/.27 for Windows and Mac a s part of our early stable release to a small percentage of users. A full list of changes in this build is available in the log . You can find more details about early Stable releases here . Interested in switching release channels? Find out how here . If you find a new issue, please let us know by filing a bug . The community help…

Severity: ElevatedAction: Be aware

Chrome Beta for Desktop Update

The Chrome team is excited to announce the promotion of Chrome 156 to the Beta channel for Windows, Mac and Linux. Chrome 156.0.8078.4 contains our usual under-the-hood performance and stability tweaks, but there are also some cool new features to explore - please head to the Chromium blog to learn more! A partial list of changes is available in the Git log . Interested in switching release channels? Find out how…

Severity: ElevatedAction: Patch

Chrome for Android Update

Hi, everyone! We've just released Chrome 154 (154.0.8037.92) for Android. It'll become available on Google Play over the next few days. This release includes stability and performance improvements. You can see a full list of the changes in the Git log . If you find a new issue, please let us know by filing a bug . Android releases contain the same security fixes as their corresponding Desktop releases (Windows &…

Severity: ElevatedAction: Be aware

Chrome Dev for Desktop Update

The Dev channel has been updated to 156.0.8072.0 for Windows, Mac and Linux. A partial list of changes is available in the Git log . Interested in switching release channels? Find out how . If you find a new issue, please let us know by filing a bug . The community help forum is also a great place to reach out for help or learn about common issues. Chrome Release Team Google Chrome…

Severity: Informational

EDR Evasion Stack Helps Process Injection Slip Past Defenses

A process parameter-poisoning technique evades EDR by injecting code into process initialization structures without using the Windows APIs that EDR tools typically watch out for.

Severity: ElevatedAction: Be aware

Early Stable Update for Desktop

The Stable channel has been updated to 155.0.8059.12/.13 for Windows and Mac a s part of our early stable release to a small percentage of users. A full list of changes in this build is available in the log . You can find more details about early Stable releases here . Interested in switching release channels? Find out how here . If you find a new issue, please let us know by filing a bug . The community help…

Severity: ElevatedAction: Be aware

Chrome Beta for Desktop Update

The Beta channel has been updated to 155.0.8059.12 for Windows, Mac and Linux. A partial list of changes is available in the Git log . Interested in switching release channels? Find out how . If you find a new issue, please let us know by filing a bug . The community help forum is also a great place to reach out for help or learn about common issues. Chrome Release Team Google Chrome…

Severity: ElevatedAction: Patch

Chrome for Android Update

Hi, everyone! We've just released Chrome 154 (154.0.8037.57) for Android. It'll become available on Google Play over the next few days. This release includes stability and performance improvements. You can see a full list of the changes in the Git log . If you find a new issue, please let us know by filing a bug . Android releases contain the same security fixes as their corresponding Desktop releases (Windows &…

Severity: ElevatedAction: Be aware

Extended Stable Update for Desktop

The Extended Stable channel has been updated to 152.0.7977.140 for Windows and Mac which will roll out over the coming days/weeks. A full list of changes in this build is available in the log . Interested in switching release channels? Find out how here . If you find a new issue, please let us know by filing a bug . The community help forum is also a great place to reach out for help or learn about common…

Severity: CriticalAction: Patch

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 154 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 154.0.8037.57 (Linux) 154.0.8037.57/.58 Windows/Mac contains a number of fixes and improvements -- a list of changes is available in the log . Watch out for upcoming Chrome and Chromium blog posts about new features and big efforts delivered in…

Patch

Apply the vendor's security update for Windows, Chrome and Linux.

Severity: HighAction: Patch

Windows Exploitation Techniques: Dangling COM Object Registrations

This short blog post is about abusing a privilege escalation bug that Microsoft recently fixed in Windows, CVE-2026-66804, that I and 14 others reported. This issue is an incomplete fix for CVE-2026-50343, a bug dubbed “Dark Elevator” by Calif. The root cause of the bug was a dangling COM object registration for the CrossDevice COM object with the CLSID {E9F83CF2-E0C0-4CA7-AF01-E90C70BEF496}. A COM registration…

Patch

Apply the vendor's security update for Windows.

Recent intelligence

The latest developments from the last 30 days, newest first.

  1. Coverage

    Chrome Dev for Desktop Update

    Basis: Google Chrome Releases (vendor advisory)

  2. Coverage

    Extended Stable Update for Desktop

    Basis: Google Chrome Releases (vendor advisory)

  3. Coverage

    Chrome for Android Update

    Basis: Google Chrome Releases (vendor advisory)

  4. Coverage

    Stable Channel Update for Desktop

    Basis: Google Chrome Releases (vendor advisory)

  5. Coverage

    Microsoft enables Windows settings backup by default for orgs

    Basis: Reporting by BleepingComputer

  6. Coverage

    Early Stable Update for Desktop

    Basis: Google Chrome Releases (vendor advisory)

  7. Coverage

    Chrome Beta for Desktop Update

    Basis: Google Chrome Releases (vendor advisory)

  8. Coverage

    Chrome for Android Update

    Basis: Google Chrome Releases (vendor advisory)

Actively exploited

Microsoft Windows

Microsoft Windows Link Following Vulnerability

Added Sep 8, 2026Fed. due Sep 22, 2026

Microsoft Windows

Microsoft Windows Heap-Based Buffer Overflow Vulnerability

Added Sep 8, 2026Fed. due Sep 22, 2026

Microsoft Windows

Microsoft Windows Buffer Overflow Vulnerability

Added May 20, 2026Fed. due Jun 3, 2026

Microsoft Windows

Microsoft Windows Protection Mechanism Failure Vulnerability

Added Apr 28, 2026Fed. due May 12, 2026

Microsoft Windows

Microsoft Windows Out-of-Bounds Read Vulnerability

Added Apr 13, 2026Fed. due Apr 27, 2026
CVE-2025-60710RansomwareCVSS 7.8

Microsoft Windows

Microsoft Windows Link Following Vulnerability

Added Apr 13, 2026Fed. due Apr 27, 2026

Microsoft Windows

Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability

Added Feb 17, 2026Fed. due Mar 10, 2026

Microsoft Windows

Microsoft Windows Shell Protection Mechanism Failure Vulnerability

Added Feb 10, 2026Fed. due Mar 3, 2026

Microsoft Windows

Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability

Added Feb 10, 2026Fed. due Mar 3, 2026

Microsoft Windows

Microsoft Windows Type Confusion Vulnerability

Added Feb 10, 2026Fed. due Mar 3, 2026

Microsoft Windows

Microsoft Windows Improper Privilege Management Vulnerability

Added Feb 10, 2026Fed. due Mar 3, 2026

Microsoft Windows

Microsoft Windows NULL Pointer Dereference Vulnerability

Added Feb 10, 2026Fed. due Mar 3, 2026

Microsoft Windows

Microsoft Windows Information Disclosure Vulnerability

Added Jan 13, 2026Fed. due Feb 3, 2026

Microsoft Windows

Microsoft Windows Use After Free Vulnerability

Added Dec 9, 2025Fed. due Dec 30, 2025

Microsoft Windows

Microsoft Windows Race Condition Vulnerability

Added Nov 12, 2025Fed. due Dec 3, 2025

Microsoft Windows

Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability

Added Oct 24, 2025Fed. due Nov 14, 2025

Microsoft Windows

Microsoft Windows SMB Client Improper Access Control Vulnerability

Added Oct 20, 2025Fed. due Nov 10, 2025

Microsoft Windows

Microsoft Windows Untrusted Pointer Dereference Vulnerability

Added Oct 14, 2025Fed. due Nov 4, 2025

Microsoft Windows

Microsoft Windows Improper Access Control Vulnerability

Added Oct 14, 2025Fed. due Nov 4, 2025

Microsoft Windows

Microsoft Windows Remote Code Execution Vulnerability

Added Oct 6, 2025Fed. due Oct 27, 2025