<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"><channel><title>Security advisories · Threat Recap</title><link>./</link><description>Security advisories</description><lastBuildDate>Mon, 19 Oct 2026 12:28:44 GMT</lastBuildDate>
<item><title>Orphaned VBA Projects Inside DWG Files: YARA Rule, (Sun, Oct 18th)</title><link>https://isc.sans.edu/diary/rss/33434</link><guid isPermaLink="false">14bhbmg</guid><pubDate>Sun, 18 Oct 2026 12:59:30 GMT</pubDate><description>SANS ISC. Here is the YARA rule I used to detect &quot; Orphaned VBA Projects Inside DWG Files &quot;.</description><category>Advisory</category></item>
<item><title>CVE-2026-0307 GlobalProtect App: Local Privilege Escalation Vulnerabilities (Severity: MEDIUM)</title><link>https://security.paloaltonetworks.com/CVE-2026-0307</link><guid isPermaLink="false">k04wc6</guid><pubDate>Sat, 17 Oct 2026 00:55:00 GMT</pubDate><description>Palo Alto Networks Advisories. </description><category>Advisory</category><category>Vulnerability</category></item>
<item><title>Two Hawks in a Pod: one Android RAT behind a flock of fake Japanese brands</title><link>https://starlabs.sg/blog/2026/10-two-hawks-in-a-pod-one-android-rat-behind-a-flock-of-fake-japanese-brands/</link><guid isPermaLink="false">1ew2k5i</guid><pubDate>Fri, 16 Oct 2026 23:59:26 GMT</pubDate><description>0dayfans. Over the past month we collected and analysed 64 Android samples (first seen 2026-09-15 to 2026-10-16) that are all the same thing: a thin dropper that installs a packed second-stage WebSocket RAT. The operators run a web control panel that brands itself with…</description><category>Advisory</category><category>Malware</category></item>
<item><title>CVE-2026-16756 - Allocation of resources without limits in the default aws-smithy-http-server serve() path allows unauthenticated Slowloris denial of service</title><link>https://aws.amazon.com/security/security-bulletins/rss/2026-064-aws/</link><guid isPermaLink="false">12dxi99</guid><pubDate>Fri, 16 Oct 2026 17:37:32 GMT</pubDate><description>AWS Security Bulletins. </description><category>Advisory</category><category>Vulnerability</category></item>
<item><title>Incomplete fix for CVE-2025-4318 code injection in Amazon &amp;commat;aws-amplify/codegen-ui-react</title><link>https://aws.amazon.com/security/security-bulletins/rss/2026-066-aws/</link><guid isPermaLink="false">v6jgfb</guid><pubDate>Fri, 16 Oct 2026 17:37:32 GMT</pubDate><description>AWS Security Bulletins. </description><category>Advisory</category><category>Vulnerability</category></item>
<item><title>CVE-2026-16317 and CVE-2026-16318: Issues with s2n-tls: an open-source implementation of the TLS/SSL protocols</title><link>https://aws.amazon.com/security/security-bulletins/rss/2026-062-aws/</link><guid isPermaLink="false">hlf7wb</guid><pubDate>Fri, 16 Oct 2026 17:37:32 GMT</pubDate><description>AWS Security Bulletins. </description><category>Advisory</category><category>Vulnerability</category></item>
<item><title>CVE-2026-18394 - Incorrect authorization in Strands Agents Tools http_request tool</title><link>https://aws.amazon.com/security/security-bulletins/rss/2026-069-aws/</link><guid isPermaLink="false">1owua0i</guid><pubDate>Fri, 16 Oct 2026 17:37:32 GMT</pubDate><description>AWS Security Bulletins. </description><category>Advisory</category><category>Vulnerability</category></item>
<item><title>CVE-2026-102551 &amp; CVE-2026-102552 - Issue with FreeRTOS-Plus-TCP</title><link>https://aws.amazon.com/security/security-bulletins/rss/2026-139-aws/</link><guid isPermaLink="false">1fn42wg</guid><pubDate>Fri, 16 Oct 2026 17:34:49 GMT</pubDate><description>AWS Security Bulletins. Bulletin ID: 2026-139-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/16/2026 10:15 AM PDT Description: FreeRTOS-Plus-TCP is an open-source, thread-safe TCP/IP stack for the FreeRTOS kernel, distributed by Amazon for use on…</description><category>Advisory</category><category>Vulnerability</category></item>
<item><title>CVE-2026-105008 Windows Schannel Spoofing Vulnerability</title><link>https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105008</link><guid isPermaLink="false">bwfj2e</guid><pubDate>Fri, 16 Oct 2026 14:00:00 GMT</pubDate><description>Microsoft Security Update Guide. CWE added. Informational change only.</description><category>Advisory</category><category>Vulnerability</category></item>
<item><title>CVE-2026-96044 Microsoft Office SharePoint Elevation of Privilege Vulnerability</title><link>https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96044</link><guid isPermaLink="false">e046qn</guid><pubDate>Fri, 16 Oct 2026 14:00:00 GMT</pubDate><description>Microsoft Security Update Guide. CWE added. Informational change only.</description><category>Advisory</category><category>Vulnerability</category></item>
<item><title>CVE-2026-108471 Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability</title><link>https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108471</link><guid isPermaLink="false">1xy0p9f</guid><pubDate>Fri, 16 Oct 2026 14:00:00 GMT</pubDate><description>Microsoft Security Update Guide. CWE added. Informational change only.</description><category>Advisory</category><category>Vulnerability</category></item>
<item><title>CVE-2026-83518 RPC Runtime Elevation of Privilege Vulnerability</title><link>https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83518</link><guid isPermaLink="false">1i4uj9j</guid><pubDate>Fri, 16 Oct 2026 14:00:00 GMT</pubDate><description>Microsoft Security Update Guide. Updated an acknowledgement. This is an informational change only.</description><category>Advisory</category><category>Vulnerability</category></item>
<item><title>CVE-2026-108465 Windows Update Delivery Optimization Elevation of Privilege Vulnerability</title><link>https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108465</link><guid isPermaLink="false">14wmc2</guid><pubDate>Fri, 16 Oct 2026 14:00:00 GMT</pubDate><description>Microsoft Security Update Guide. Updated an acknowledgement. This is an informational change only.</description><category>Advisory</category><category>Vulnerability</category></item>
<item><title>CVE-2026-83831 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability</title><link>https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83831</link><guid isPermaLink="false">loe5e9</guid><pubDate>Fri, 16 Oct 2026 14:00:00 GMT</pubDate><description>Microsoft Security Update Guide. Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.</description><category>Advisory</category><category>Vulnerability</category></item>
<item><title>CVE-2026-85890 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability</title><link>https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85890</link><guid isPermaLink="false">15zig02</guid><pubDate>Fri, 16 Oct 2026 14:00:00 GMT</pubDate><description>Microsoft Security Update Guide. Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.</description><category>Advisory</category><category>Vulnerability</category></item>
<item><title>CVE-2026-85897 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability</title><link>https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85897</link><guid isPermaLink="false">14lkfj7</guid><pubDate>Fri, 16 Oct 2026 14:00:00 GMT</pubDate><description>Microsoft Security Update Guide. Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.</description><category>Advisory</category><category>Vulnerability</category></item>
<item><title>CVE-2026-85898 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability</title><link>https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85898</link><guid isPermaLink="false">187f9ju</guid><pubDate>Fri, 16 Oct 2026 14:00:00 GMT</pubDate><description>Microsoft Security Update Guide. Access of resource using incompatible type (&#39;type confusion&#39;) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.</description><category>Advisory</category><category>Vulnerability</category></item>
<item><title>CVE-2026-96198 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability</title><link>https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96198</link><guid isPermaLink="false">ntimut</guid><pubDate>Fri, 16 Oct 2026 14:00:00 GMT</pubDate><description>Microsoft Security Update Guide. Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.</description><category>Advisory</category><category>Vulnerability</category></item>
<item><title>CVE-2026-96199 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability</title><link>https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96199</link><guid isPermaLink="false">njj15u</guid><pubDate>Fri, 16 Oct 2026 14:00:00 GMT</pubDate><description>Microsoft Security Update Guide. Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.</description><category>Advisory</category><category>Vulnerability</category></item>
<item><title>Chromium CVE-2026-106287: Information loss</title><link>https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106287</link><guid isPermaLink="false">1fw1riu</guid><pubDate>Fri, 16 Oct 2026 14:00:00 GMT</pubDate><description>Microsoft Security Update Guide. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.</description><category>Advisory</category><category>Vulnerability</category></item>
<item><title>Chromium CVE-2026-106288: Missing authorization</title><link>https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106288</link><guid isPermaLink="false">1ixxe5j</guid><pubDate>Fri, 16 Oct 2026 14:00:00 GMT</pubDate><description>Microsoft Security Update Guide. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.</description><category>Advisory</category><category>Vulnerability</category></item>
<item><title>Chromium CVE-2026-106289: Missing authorization</title><link>https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106289</link><guid isPermaLink="false">1inxsgk</guid><pubDate>Fri, 16 Oct 2026 14:00:00 GMT</pubDate><description>Microsoft Security Update Guide. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.</description><category>Advisory</category><category>Vulnerability</category></item>
<item><title>Chromium CVE-2026-106291: Use after free</title><link>https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106291</link><guid isPermaLink="false">1fbzemx</guid><pubDate>Fri, 16 Oct 2026 14:00:00 GMT</pubDate><description>Microsoft Security Update Guide. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.</description><category>Advisory</category><category>Vulnerability</category></item>
<item><title>Chromium CVE-2026-106292: Buffer overflow</title><link>https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106292</link><guid isPermaLink="false">1ei0lk0</guid><pubDate>Fri, 16 Oct 2026 14:00:00 GMT</pubDate><description>Microsoft Security Update Guide. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.</description><category>Advisory</category><category>Vulnerability</category></item>
<item><title>Chromium CVE-2026-106412: Race condition</title><link>https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106412</link><guid isPermaLink="false">1tdyuhq</guid><pubDate>Fri, 16 Oct 2026 14:00:00 GMT</pubDate><description>Microsoft Security Update Guide. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.</description><category>Advisory</category><category>Vulnerability</category></item>
<item><title>Chromium CVE-2026-106293: Type confusion</title><link>https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106293</link><guid isPermaLink="false">1es078z</guid><pubDate>Fri, 16 Oct 2026 14:00:00 GMT</pubDate><description>Microsoft Security Update Guide. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.</description><category>Advisory</category><category>Vulnerability</category></item>
<item><title>Chromium CVE-2026-106413: Race condition</title><link>https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106413</link><guid isPermaLink="false">1tnyg6p</guid><pubDate>Fri, 16 Oct 2026 14:00:00 GMT</pubDate><description>Microsoft Security Update Guide. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.</description><category>Advisory</category><category>Vulnerability</category></item>
<item><title>Chromium CVE-2026-106294: Incomplete cleanup</title><link>https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106294</link><guid isPermaLink="false">1g5y7pu</guid><pubDate>Fri, 16 Oct 2026 14:00:00 GMT</pubDate><description>Microsoft Security Update Guide. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.</description><category>Advisory</category><category>Vulnerability</category></item>
<item><title>Chromium CVE-2026-106415: Information leak</title><link>https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106415</link><guid isPermaLink="false">1u7xnkn</guid><pubDate>Fri, 16 Oct 2026 14:00:00 GMT</pubDate><description>Microsoft Security Update Guide. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.</description><category>Advisory</category><category>Vulnerability</category><category>Breach</category></item>
<item><title>Chromium CVE-2026-106295: Incorrect authorization</title><link>https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106295</link><guid isPermaLink="false">1gfxtet</guid><pubDate>Fri, 16 Oct 2026 14:00:00 GMT</pubDate><description>Microsoft Security Update Guide. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.</description><category>Advisory</category><category>Vulnerability</category></item>
<item><title>Chromium CVE-2026-106416: Code injection</title><link>https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106416</link><guid isPermaLink="false">1uhx99m</guid><pubDate>Fri, 16 Oct 2026 14:00:00 GMT</pubDate><description>Microsoft Security Update Guide. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.</description><category>Advisory</category><category>Vulnerability</category></item>
<item><title>Chromium CVE-2026-106297: Incorrect authorization</title><link>https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106297</link><guid isPermaLink="false">1fvym0v</guid><pubDate>Fri, 16 Oct 2026 14:00:00 GMT</pubDate><description>Microsoft Security Update Guide. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.</description><category>Advisory</category><category>Vulnerability</category></item>
<item><title>Chromium CVE-2026-106417: Integer overflow</title><link>https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106417</link><guid isPermaLink="false">1urwuyl</guid><pubDate>Fri, 16 Oct 2026 14:00:00 GMT</pubDate><description>Microsoft Security Update Guide. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.</description><category>Advisory</category><category>Vulnerability</category></item>
<item><title>Chromium CVE-2026-106299: Improper input validation</title><link>https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106299</link><guid isPermaLink="false">1hjw86p</guid><pubDate>Fri, 16 Oct 2026 14:00:00 GMT</pubDate><description>Microsoft Security Update Guide. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.</description><category>Advisory</category><category>Vulnerability</category></item>
<item><title>Chromium CVE-2026-106418: Missing authorization</title><link>https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106418</link><guid isPermaLink="false">1qm2tk0</guid><pubDate>Fri, 16 Oct 2026 14:00:00 GMT</pubDate><description>Microsoft Security Update Guide. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.</description><category>Advisory</category><category>Vulnerability</category></item>
<item><title>Chromium CVE-2026-106300: Race condition</title><link>https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106300</link><guid isPermaLink="false">m24558</guid><pubDate>Fri, 16 Oct 2026 14:00:00 GMT</pubDate><description>Microsoft Security Update Guide. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.</description><category>Advisory</category><category>Vulnerability</category></item>
<item><title>Chromium CVE-2026-106420: Incorrect calculation</title><link>https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106420</link><guid isPermaLink="false">pfvqpf</guid><pubDate>Fri, 16 Oct 2026 14:00:00 GMT</pubDate><description>Microsoft Security Update Guide. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.</description><category>Advisory</category><category>Vulnerability</category></item>
<item><title>Chromium CVE-2026-106301: Confused deputy</title><link>https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106301</link><guid isPermaLink="false">mc3qu7</guid><pubDate>Fri, 16 Oct 2026 14:00:00 GMT</pubDate><description>Microsoft Security Update Guide. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.</description><category>Advisory</category><category>Vulnerability</category></item>
<item><title>Chromium CVE-2026-106421: Use after free</title><link>https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106421</link><guid isPermaLink="false">p5w50g</guid><pubDate>Fri, 16 Oct 2026 14:00:00 GMT</pubDate><description>Microsoft Security Update Guide. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.</description><category>Advisory</category><category>Vulnerability</category></item>
<item><title>Chromium CVE-2026-106302: UI misrepresentation</title><link>https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106302</link><guid isPermaLink="false">mm3cj6</guid><pubDate>Fri, 16 Oct 2026 14:00:00 GMT</pubDate><description>Microsoft Security Update Guide. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.</description><category>Advisory</category><category>Vulnerability</category></item>
<item><title>Chromium CVE-2026-106422: Incorrect authorization</title><link>https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106422</link><guid isPermaLink="false">pzuy3d</guid><pubDate>Fri, 16 Oct 2026 14:00:00 GMT</pubDate><description>Microsoft Security Update Guide. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.</description><category>Advisory</category><category>Vulnerability</category></item>
<item><title>Chromium CVE-2026-106303: Observable discrepancy</title><link>https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106303</link><guid isPermaLink="false">mw2y85</guid><pubDate>Fri, 16 Oct 2026 14:00:00 GMT</pubDate><description>Microsoft Security Update Guide. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.</description><category>Advisory</category><category>Vulnerability</category></item>
<item><title>Chromium CVE-2026-106423: Use after free</title><link>https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106423</link><guid isPermaLink="false">ppvcee</guid><pubDate>Fri, 16 Oct 2026 14:00:00 GMT</pubDate><description>Microsoft Security Update Guide. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.</description><category>Advisory</category><category>Vulnerability</category></item>
<item><title>Chromium CVE-2026-106304: Out of bounds read</title><link>https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106304</link><guid isPermaLink="false">ky5qdc</guid><pubDate>Fri, 16 Oct 2026 14:00:00 GMT</pubDate><description>Microsoft Security Update Guide. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.</description><category>Advisory</category><category>Vulnerability</category></item>
<item><title>Chromium CVE-2026-106424: Information leak</title><link>https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106424</link><guid isPermaLink="false">qju5hb</guid><pubDate>Fri, 16 Oct 2026 14:00:00 GMT</pubDate><description>Microsoft Security Update Guide. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.</description><category>Advisory</category><category>Vulnerability</category><category>Breach</category></item>
<item><title>Chromium CVE-2026-106306: Incorrect authorization</title><link>https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106306</link><guid isPermaLink="false">li4xra</guid><pubDate>Fri, 16 Oct 2026 14:00:00 GMT</pubDate><description>Microsoft Security Update Guide. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.</description><category>Advisory</category><category>Vulnerability</category></item>
<item><title>Chromium CVE-2026-106425: Missing authorization</title><link>https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106425</link><guid isPermaLink="false">q9ujsc</guid><pubDate>Fri, 16 Oct 2026 14:00:00 GMT</pubDate><description>Microsoft Security Update Guide. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.</description><category>Advisory</category><category>Vulnerability</category></item>
<item><title>Chromium CVE-2026-106307: Incorrect authorization</title><link>https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106307</link><guid isPermaLink="false">ls4jg9</guid><pubDate>Fri, 16 Oct 2026 14:00:00 GMT</pubDate><description>Microsoft Security Update Guide. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.</description><category>Advisory</category><category>Vulnerability</category></item>
<item><title>Chromium CVE-2026-106426: Race condition</title><link>https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106426</link><guid isPermaLink="false">r3tcv9</guid><pubDate>Fri, 16 Oct 2026 14:00:00 GMT</pubDate><description>Microsoft Security Update Guide. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.</description><category>Advisory</category><category>Vulnerability</category></item>
<item><title>Chromium CVE-2026-106308: Incorrect reference resolution</title><link>https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106308</link><guid isPermaLink="false">oa0yp0</guid><pubDate>Fri, 16 Oct 2026 14:00:00 GMT</pubDate><description>Microsoft Security Update Guide. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.</description><category>Advisory</category><category>Vulnerability</category></item>
<item><title>Chromium CVE-2026-106309: Incorrect authorization</title><link>https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106309</link><guid isPermaLink="false">ok0kdz</guid><pubDate>Fri, 16 Oct 2026 14:00:00 GMT</pubDate><description>Microsoft Security Update Guide. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.</description><category>Advisory</category><category>Vulnerability</category></item>
<item><title>Chromium CVE-2026-106310: Use of released resource</title><link>https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106310</link><guid isPermaLink="false">1n8q1lh</guid><pubDate>Fri, 16 Oct 2026 14:00:00 GMT</pubDate><description>Microsoft Security Update Guide. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.</description><category>Advisory</category><category>Vulnerability</category></item>
<item><title>Chromium CVE-2026-106311: Clickjacking</title><link>https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106311</link><guid isPermaLink="false">1myqfwi</guid><pubDate>Fri, 16 Oct 2026 14:00:00 GMT</pubDate><description>Microsoft Security Update Guide. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.</description><category>Advisory</category><category>Vulnerability</category></item>
<item><title>Chromium CVE-2026-106312: Missing authorization</title><link>https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106312</link><guid isPermaLink="false">1moqu7j</guid><pubDate>Fri, 16 Oct 2026 14:00:00 GMT</pubDate><description>Microsoft Security Update Guide. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.</description><category>Advisory</category><category>Vulnerability</category></item>
<item><title>Chromium CVE-2026-106314: Incorrect authorization</title><link>https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106314</link><guid isPermaLink="false">1m4rmtl</guid><pubDate>Fri, 16 Oct 2026 14:00:00 GMT</pubDate><description>Microsoft Security Update Guide. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.</description><category>Advisory</category><category>Vulnerability</category></item>
<item><title>Chromium CVE-2026-106315: Use after free</title><link>https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106315</link><guid isPermaLink="false">1lus14m</guid><pubDate>Fri, 16 Oct 2026 14:00:00 GMT</pubDate><description>Microsoft Security Update Guide. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.</description><category>Advisory</category><category>Vulnerability</category></item>
<item><title>Chromium CVE-2026-106316: UI misrepresentation</title><link>https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106316</link><guid isPermaLink="false">1lksffn</guid><pubDate>Fri, 16 Oct 2026 14:00:00 GMT</pubDate><description>Microsoft Security Update Guide. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.</description><category>Advisory</category><category>Vulnerability</category></item>
<item><title>Chromium CVE-2026-106318: Use after free</title><link>https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106318</link><guid isPermaLink="false">1pgmv59</guid><pubDate>Fri, 16 Oct 2026 14:00:00 GMT</pubDate><description>Microsoft Security Update Guide. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.</description><category>Advisory</category><category>Vulnerability</category></item>
<item><title>Chromium CVE-2026-106321: Information leak</title><link>https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106321</link><guid isPermaLink="false">1p6qey9</guid><pubDate>Fri, 16 Oct 2026 14:00:00 GMT</pubDate><description>Microsoft Security Update Guide. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.</description><category>Advisory</category><category>Vulnerability</category><category>Breach</category></item>
<item><title>Chromium CVE-2026-106322: Open redirect</title><link>https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106322</link><guid isPermaLink="false">1ocrlvc</guid><pubDate>Fri, 16 Oct 2026 14:00:00 GMT</pubDate><description>Microsoft Security Update Guide. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.</description><category>Advisory</category><category>Vulnerability</category></item>
</channel></rss>
