Multiple vulnerabilities have been reported in Apple products which could allow an attacker to disclose sensitive information, gain elevated privileges, bypass security restrictions, execute arbitrary code, perform cross-origin data exfiltration, and cause a denial-of-service (DoS) condition on the targeted system.

Software Affected:

Apple iOS versions before 26.5.2

Apple iPadOS versions before 26.5.2

Apple macOS Tahoe versions before 26.5.2

Apple Safari versions before 26.5.2

Apply appropriate updates as mentioned below:

https://support.apple.com/en-us/127594

https://support.apple.com/en-us/127595

https://support.apple.com/en-us/127685

A vulnerability has been reported in Microsoft Edge, which could allow a remote attacker to execute arbitrary code on the targeted system.

Software Affected:

Microsoft Edge versions before 149.0.4022.68

Apply appropriate updates as mentioned below:

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50521

Multiple vulnerabilities have been reported in Microsoft Edge, which could allow a remote attacker to execute arbitrary code, gain elevated privileges, obtain sensitive information, bypass security restrictions, or cause a denial-of-service (DoS) condition on the targeted system.

Software Affected:

Microsoft Edge versions before 149.0.4022.53

Apply appropriate updates as mentioned below:

https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security#june-8-2026

A vulnerability has been reported in Samsung¿s KNOX security framework, which could allow a local attacker to execute arbitrary code on the targeted system.

Software Affected:

Samsung Mobile Devices running software versions before SMR Jan-2026 Release 1 in Android 13, 14, 15, 16

Apply appropriate updates as mentioned below:

https://security.samsungmobile.com/securityUpdate.smsb?year=2026&month=01

Multiple vulnerabilities have been reported in Google Chrome, which could allow a remote attacker to execute arbitrary code, obtain sensitive information, bypass security restrictions, perform spoofing attacks, or cause denial of service (DoS) conditions on the targeted system.

Software Affected:

Google Chrome versions before 149.0.7827.155 for Linux

Google Chrome versions before 149.0.7827.155/156 for Windows and Mac

Apply appropriate updates as mentioned below:

https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_01750511403.html

A vulnerability has been reported in Microsoft 365 Copilot (M365 Copilot), which could allow an unauthorized attacker to disclose sensitive information over a network.

Software Affected:

Microsoft 365 Copilot

Apply appropriate updates as mentioned below:

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54130

A vulnerability has been reported in the browser-based version of Cisco Webex App, which could allow an unauthenticated, remote attacker to redirect users to a malicious webpage

Software Affected:

Cisco Webex App

Apply appropriate updates as mentioned below:

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-app-redirect-KOyxhffH

Multiple vulnerabilities have been reported in Google Chrome, which could allow a remote attacker to execute arbitrary code, obtain sensitive information, bypass security restrictions, or cause a Denial-of-Service (DoS) condition on the targeted system.

Software Affected:

Google Chrome versions before 149.0.7827.102/103 for Windows and Mac

Google Chrome versions before 149.0.7827.102 for Linux

Apply appropriate updates as mentioned below:

https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0153744567.html

Multiple vulnerabilities have been reported in Google Chrome, which could allow a remote attacker to execute arbitrary code, obtain sensitive information, bypass security restrictions, perform spoofing attacks, or cause denial of service (DoS) conditions on the targeted system.

Software Affected:

Google Chrome versions before 149.0.7827.114 for Linux

Google Chrome versions before 149.0.7827.114/115 for Windows and Mac

Apply appropriate updates as mentioned below:

https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_01962725236.html

Multiple vulnerabilities have been reported in Microsoft products and cloud services, which could allow attackers to execute arbitrary code, disclose sensitive information, bypass security controls, elevate privileges, or compromise affected services.

Software Affected:

Microsoft Graph

Microsoft Copilot

Microsoft 365 Copilot

Copilot Chat (Microsoft Edge)

Microsoft Cloud

Apply appropriate updates as mentioned below:

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48579

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47655

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47644

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45497

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42824

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48567

Multiple vulnerabilities have been reported in Microsoft products that could allow an attacker to gain elevated privileges, obtain or modify information, conduct remote code execution, spoof, bypass security features, or cause denial-of-service conditions on the targeted system.

Software Affected:

Microsoft Apps

Extended Security Updates (ESU)

Windows

Developer Tools

Microsoft Office

Azure

System Center

Server Software

Microsoft Dynamics

Browser

Linux kernel - Microsoft MANA Network Driver

Nuance PowerScribe One

Nuance PowerScribe 360

Apply appropriate updates as mentioned below:

https://msrc.microsoft.com/update-guide/releaseNote/2026-Jun

Multiple vulnerabilities have been reported in Google Chrome, which could allow a remote attacker to execute arbitrary code, obtain sensitive information, bypass security restrictions, or cause a Denial-of-Service (DoS) condition on the targeted system.

Software Affected:

Google Chrome version before 149.0.7827.53/54 for Windows and Mac

Google Chrome version before 149.0.7827.53 for Linux.

Apply appropriate updates as mentioned below:

https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html

Multiple vulnerabilities have been reported in Google Chrome, which could allow a remote attacker to execute arbitrary code, cause denial of service (DoS), leak sensitive information, or bypass security restrictions on the targeted system.

Software Affected:

Google Chrome versions before 148.0.7778.215 for Linux

Google Chrome versions before 148.0.7778.215/216 for Mac

Google Chrome versions before 148.0.7778.216/217 for Windows

Apply appropriate updates as mentioned below:

https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html

Multiple vulnerabilities have been reported in Notepad++, which could be exploited by an attacker to execute arbitrary code or cause the application to crash.

Software Affected:

Notepad++ versions before 8.9.6.1

Apply appropriate updates as mentioned below:

https://notepad-plus-plus.org/news/v8961-released/

A vulnerability has been reported in Microsoft Office that could allow an attacker to execute arbitrary code in the current user's context on the affected system.

Software Affected:

Microsoft Office

Apply appropriate updates as mentioned below:

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45659

Multiple vulnerabilities have been reported in Microsoft products, which could allow an attacker to execute arbitrary code, conduct input validation, elevate privileges, disclose sensitive information, or cause denial of services on the affected systems.

Software Affected:

Microsoft 365 Copilot for iOS

Microsoft 365 Copilot

Apply appropriate updates as mentioned below:

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41090

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42827

Multiple vulnerabilities have been reported in Google Chrome, which could allow a remote attacker to execute arbitrary code, bypass security restrictions, obtain sensitive information, heap-based buffer overflow, or cause Denial of Service (DoS) conditions on the targeted system.

Software Affected:

Google Chrome versions before 148.0.7778.178 for Linux

Google Chrome versions before 148.0.7778.178/179 for Windows and Mac

Apply appropriate updates as mentioned below:

https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0841193308.html

Multiple vulnerabilities have been reported in Mozilla products, which could be exploited by a remote attacker to execute arbitrary code, obtain sensitive information, perform a spoofing attack, bypass security restrictions, or cause a Denial of Service (DoS) condition on the targeted system.

Software Affected:

Mozilla Firefox versions before 151

Mozilla Firefox ESR versions before 115.36

Mozilla Firefox ESR versions before 140.11

Mozilla Firefox for iOS versions before 151.0

Mozilla Thunderbird versions before 140.11

Mozilla Thunderbird versions before 151

Apply appropriate updates as mentioned below:

https://www.mozilla.org/en-US/security/advisories/mfsa2026-51/

https://www.mozilla.org/en-US/security/advisories/mfsa2026-50/

https://www.mozilla.org/en-US/security/advisories/mfsa2026-49/

https://www.mozilla.org/en-US/security/advisories/mfsa2026-48/

https://www.mozilla.org/en-US/security/advisories/mfsa2026-47/

https://www.mozilla.org/en-US/security/advisories/mfsa2026-46/

Multiple vulnerabilities have been reported in Microsoft products, which could allow an attacker to execute arbitrary code, elevate privileges, disclose sensitive information, bypass security features, or cause denial of service on the affected systems.

Software Affected:

Windows 10: Versions 1607, 1809, 21H2, and 22H2.

Windows 11: Versions 23H2, 24H2, and 25H2.

Windows Server: 2012, 2012 R2, 2016, 2019, 2022, 2022 (23H2 Edition), and 2025.

Microsoft Office (various supported versions).

Microsoft SharePoint Server.

Microsoft Edge (Chromium-based)

Apply appropriate updates as mentioned below:

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42834

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45584

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41091

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45498

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45585

A vulnerability has been reported in the Linux Kernel that could allow a local attacker to access sensitive information on the targeted system.

Software Affected:

Linux kernel version 4.10

Apply appropriate updates as mentioned below:

https://git.kernel.org/stable/c/93d4ba49d18e3d7fb41a9927c2d0cca5e9dfefd6

https://git.kernel.org/stable/c/15b828a46f305ae9f05a7c16914b3ce273474205

https://git.kernel.org/stable/c/4709234fd1b95136ceb789f639b1e7ea5de1b181

https://git.kernel.org/stable/c/8f907d345bae8f4b3f004c5abc56bf2dfb851ea7

https://git.kernel.org/stable/c/6e5b51e74a40d377bcd3081dd33fbaa0e1aa7e3d

https://git.kernel.org/stable/c/2a93a4fac7b6051d3be7cd1b015fe7320cd0404d

https://git.kernel.org/stable/c/01363cb3fbd0238ffdeb09f53e9039c9edf8a730

https://git.kernel.org/stable/c/31e62c2ebbfdc3fe3dbdf5e02c92a9dc67087a3a

A vulnerability in Microsoft Authenticator could allow an unauthenticated remote attacker to disclose sensitive information over the network.

Software Affected:

Microsoft Authenticator for Android version 6.0.0 before 6.2605.2973

Microsoft Authenticator for iOS version 6.0.0 before 6.8.47

Apply appropriate updates as mentioned below:

https://msrc.microsoft.com/update-guide

Multiple vulnerabilities have been reported in Google Chrome that could allow a remote attacker to execute arbitrary code, obtain sensitive information, bypass security restrictions, spoof addresses, or cause denial-of-service (DoS) conditions on the targeted system.

Software Affected:

Google Chrome versions before 148.0.7778.167/168 for Windows and Mac

Google Chrome versions before 148.0.7778.167 for Linux

Apply appropriate updates as mentioned below:

https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_12.html

Multiple vulnerabilities have been reported in Google Chrome, which could allow a remote attacker to execute arbitrary code, obtain sensitive information, bypass security restrictions, or cause denial of service (DoS) conditions on the targeted system.

Software Affected:

Google Chrome versions before 148.0.7778.96 for Linux

Google Chrome versions before 148.0.7778.96/97 for Windows and Mac

Apply appropriate updates as mentioned below:

https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop.html

Multiple vulnerabilities have been reported in Mozilla products, which could be exploited by a remote attacker to execute arbitrary code on the targeted system.

Software Affected:

Mozilla Firefox versions before 150.0.3

Apply appropriate updates as mentioned below:

https://www.mozilla.org/en-US/security/advisories/mfsa2026-45/

Multiple vulnerabilities have been reported in Zoom products that could be exploited by an attacker to gain elevated privileges or obtain sensitive information on the targeted system.

Software Affected:

Zoom Workplace for iOS before version 7.0.0

Zoom Workplace VDI Plugin version 6.6.10

Zoom Rooms for Windows before version 7.0.0

Apply appropriate updates as mentioned below:

https://www.zoom.com/en/trust/security-bulletin/

Multiple vulnerabilities have been identified in Microsoft cloud and AI-integrated service, Azure, Microsoft 365, Teams, Copilot, and Edge. These vulnerabilities could allow attackers to execute arbitrary code, perform insufficient input validation, disclose sensitive information, or perform spoofing attacks, potentially leading to the compromise of the system.

Software Affected:

Windows 10: Versions 21H2 and 22H2

Windows 11Versions 23H2, 24H2, and 25H2

Windows Server: 2016, 2019, 2022, 2022 (23H2 Edition), and 2025

Microsoft Office / Microsoft 365 Apps

Microsoft Edge (Chromium-based)

ASP.NET Core

Azure DevOps Server / Services

SharePoint Server

Microsoft Azure cloud components

Apply appropriate updates as mentioned below:

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42826

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35428

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35435

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34327

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33844

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33823

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32207

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40379

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33109

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33111

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41105

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26129

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26164

Multiple vulnerabilities have been reported in Microsoft products that could allow an attacker to gain elevated privileges, obtain sensitive information, execute arbitrary code remotely, bypass security restrictions, conduct spoofing attacks, perform tampering of data or system processes, or cause denial-of-service (DoS) conditions.

Software Affected:

Microsoft Windows

Microsoft Office

SQL Server

Extended Security Updates (ESU) for legacy Microsoft products

Azure

Apps

Apply appropriate updates as mentioned below:

https://msrc.microsoft.com/update-guide/releaseNote/2026-May

Multiple vulnerabilities have been reported in Apple products, which could allow an attacker to execute arbitrary code, gain elevated privileges, disclose sensitive information, bypass security restrictions o, or cause a denial of service condition on the targeted system.

Software Affected:

Apple iOS and iPadOS versions before 26.5

Apple iOS and iPadOS versions before 18.7.9

Apple iPadOS versions before 17.7.11

Apple iOS and iPadOS versions before 16.7.16

Apple iOS and iPadOS versions before 15.8.8

Apple macOS Tahoe versions before 26.5

Apple macOS Sequoia versions before 15.7.7

Apple macOS Sonoma versions before 14.8.7

Apple tvOS versions before 26.5

Apple watchOS versions before 26.5

Apple visionOS versions before 26.5

Apply appropriate updates as mentioned below:

https://support.apple.com/en-us/127110

https://support.apple.com/en-us/127111

https://support.apple.com/en-us/127112

https://support.apple.com/en-us/127113

https://support.apple.com/en-us/127114

https://support.apple.com/en-us/127115

https://support.apple.com/en-us/127116

https://support.apple.com/en-us/127117

https://support.apple.com/en-us/127118

https://support.apple.com/en-us/127119

https://support.apple.com/en-us/127120

Multiple vulnerabilities have been reported in Mozilla Firefox and Firefox ESR, which could allow a remote attacker to execute arbitrary code on the targeted system.

Software Affected:

Mozilla Firefox ESR versions before 140.10.2

Mozilla Firefox ESR versions before 115.35.2

Mozilla Firefox ESR versions before 150.0.2

Apply appropriate updates as mentioned below:

https://www.mozilla.org/en-US/security/advisories/mfsa2026-40/

https://www.mozilla.org/en-US/security/advisories/mfsa2026-41/

https://www.mozilla.org/en-US/security/advisories/mfsa2026-42/

A vulnerability has been reported in Android OS, which could allow a remote attacker to execute arbitrary code on the targeted system.

Software Affected:

Android 14, 15, 16

Android 16-QPR2

Apply appropriate updates as mentioned below:

https://source.android.com/docs/security/bulletin/2026/2026-05-01

Windows Shell Spoofing is a vulnerability component of Microsoft Windows that allows an attacker to perform spoofing on the targeted system.

Software Affected:

Windows Shell from 10.0.14393.9060 after 10.0.14393.0

Apply appropriate updates as mentioned below:

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32202

A vulnerability has been reported in the Linux kernel that could allow a local attacker with low privileges to escalate privileges and access or modify sensitive files on the targeted system

Software Affected:

Linux kernel versions from 4.14 up to 5.10.254

Linux kernel versions from 5.11 up to 5.15.204

Linux kernel versions from 5.16 up to 6.1.170

Linux kernel versions from 6.2 up to 6.6.137

Linux kernel versions from 6.7 up to 6.12.85

Linux kernel versions from 6.13 up to 6.18.22

Linux kernel versions from 6.19 up to 6.19.12

Apply the latest kernel updates provided by your Linux distribution or upstream maintainers:

https://git.kernel.org/stable/c/893d22e0135fa394db81df88697fba6032747667

https://git.kernel.org/stable/c/19d43105a97be0810edbda875f2cd03f30dc130c

https://git.kernel.org/stable/c/961cfa271a918ad4ae452420e7c303149002875b

https://git.kernel.org/stable/c/3115af9644c342b356f3f07a4dd1c8905cd9a6fc

https://git.kernel.org/stable/c/8b88d99341f139e23bdeb1027a2a3ae10d341d82

https://git.kernel.org/stable/c/fafe0fa2995a0f7073c1c358d7d3145bcc9aedd8

https://git.kernel.org/stable/c/ce42ee423e58dffa5ec03524054c9d8bfd4f6237

https://git.kernel.org/stable/c/a664bf3d603dc3bdcf9ae47cc21e0daec706d7a5

Multiple vulnerabilities have been reported in Mozilla Firefox and Firefox ESR, which could allow a remote attacker to execute arbitrary code on the targeted system.

Software Affected:

Mozilla Firefox ESR versions before 140.10.1

Mozilla Firefox ESR versions before 115.35.1

Mozilla Firefox versions before 150.0.1

Apply appropriate updates as mentioned below:

https://www.mozilla.org/en-US/security/advisories/mfsa2026-37/

https://www.mozilla.org/en-US/security/advisories/mfsa2026-36/

https://www.mozilla.org/en-US/security/advisories/mfsa2026-35/

A vulnerability has been reported in Apple products, which could allow a remote attacker to potentially view sensitive information on the targeted system.

Software Affected:

Apple iOS versions before 18.7.8 & 26.4.2

Apple iPadOS versions before 18.7.8 & 26.4.2

Apply appropriate updates as mentioned below:

https://support.apple.com/en-us/127002

https://support.apple.com/en-us/127003

Multiple vulnerabilities have been reported in Google Chrome that could allow a remote attacker to execute arbitrary code, obtain sensitive information or cause denial of service (DoS) condition on the targeted system.

Software Affected:

Google Chrome versions before 147.0.7727.137 for Linux

Google Chrome versions before 147.0.7727.137/138 for Windows and Mac

Apply appropriate updates as mentioned below:

https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_28.html

Multiple vulnerabilities have been reported in Microsoft products, which could allow an attacker to execute arbitrary code, elevate privileges, disclose sensitive information, or cause denial of service on the affected systems.

Software Affected:

Windows 10: Versions 1607, 1809, 21H2, and 22H2.

Windows 11: Versions 23H2, 24H2, and 25H2.

Windows Server: 2012, 2012 R2, 2016, 2019, 2022, 2022 (23H2 Edition), and 2025.

Microsoft Office (various supported versions).

Microsoft Edge (Chromium-based)

Apply appropriate updates as mentioned below:

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21515

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35431

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-24303

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26150

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33819

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33102

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32210

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32172

Multiple vulnerabilities have been reported in Mozilla products, which could be exploited by a remote attacker to execute arbitrary code, perform a spoofing attack, bypass security restrictions, or cause a Denial of Service (DoS) condition on the targeted system.

Software Affected:

Mozilla Firefox versions before 150

Apply appropriate updates as mentioned below:

https://www.mozilla.org/en-US/security/advisories/mfsa2026-30/

A vulnerability has been identified in Microsoft Defender, which could allow an authenticated local attacker to gain elevated privileges on the targeted system.

Software Affected:

Microsoft Defender Antimalware Platform version 4.18.26020.6 and below.

Apply appropriate updates as mentioned below:

https://msrc.microsoft.com/update-guide

Multiple vulnerabilities have been reported in Mozilla products, which could allow a remote attacker to execute arbitrary code, cause a denial-of-service (DoS) condition, or gain unauthorized access to sensitive information on the targeted system.

Software Affected:

Mozilla Firefox versions before 149.0.2

Apply appropriate updates as mentioned below:

https://www.mozilla.org/en-US/security/advisories/mfsa2026-25/

https://www.mozilla.org/en-US/security/advisories/mfsa2026-26/

https://www.mozilla.org/en-US/security/advisories/mfsa2026-27/

https://www.mozilla.org/en-US/security/advisories/mfsa2026-28/

https://www.mozilla.org/en-US/security/advisories/mfsa2026-29/

Multiple vulnerabilities have been reported in Adobe products, which an attacker could exploit to execute arbitrary code, bypass security restrictions, access sensitive information, or cause cross-site scripting (DOM-based XSS) attacks or a denial-of-service (DoS) condition on the targeted system.

Software Affected:

Photoshop 2026 27.4 and earlier versions

Illustrator 2025 29.8.5 & 2026 30.2 and earlier

Apply appropriate updates as mentioned below:

https://helpx.adobe.com/security.html

Multiple vulnerabilities have been reported in Google Chrome, which could allow a remote attacker to execute arbitrary code, bypass security restrictions, and obtain sensitive information on the targeted system.

Software Affected:

Google Chrome versions before 147.0.7727.101 for Linux

Google Chrome versions before 147.0.7727.101/102 for Windows and Mac

Apply appropriate updates as mentioned below:

https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_15.html

Multiple vulnerabilities have been reported in Microsoft products that could allow an attacker to gain elevated privileges, obtain sensitive information, execute arbitrary code remotely, bypass security restrictions, conduct spoofing attacks, perform tampering of data or system processes, or cause denial-of-service (DoS) conditions.

Software Affected:

Microsoft Windows

Microsoft Office

Extended Security Updates (ESU) for legacy Microsoft products

Azure

Apply appropriate updates as mentioned below:

https://msrc.microsoft.com/update-guide/releaseNote/2026-Apr

Multiple vulnerabilities have been reported in Google Chrome that could allow a remote attacker to execute arbitrary code, bypass security restrictions, obtain sensitive information, and cause a denial-of-service (DoS) condition on the targeted system.

Software Affected:

Google Chrome versions before 147.0.7727.55/56 for Windows/Mac

Google Chrome versions before 147.0.7727.55 for Linux

Apply appropriate updates as mentioned below:

https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html

Multiple vulnerabilities have been reported in Microsoft Azure and Bing, which may allow a remote attacker to elevate privileges, access sensitive information, and compromise system integrity.

Software Affected:

Microsoft Azure

Microsoft Bing

Apply appropriate updates as mentioned below:

https://msrc.microsoft.com/update-guide/vulnerability

Multiple vulnerabilities have been identified in Android, which could be exploited by an attacker to execute arbitrary code, causing denial of service, privilege escalation, or disclosure of sensitive information on the targeted system.

Software Affected:

Android 14

Android 15

Android 16

Android 16-QPR2

Apply appropriate updates as mentioned below:

https://source.android.com/docs/security/bulletin/2026/2026-04-01

Multiple vulnerabilities have been reported in Google Chrome, which could allow a remote attacker to execute arbitrary code, bypass security restrictions, or disclose sensitive information on the targeted system.

Software Affected:

Google Chrome versions before 146.0.7680.177 for Linux

Google Chrome versions before 146.0.7680.177/178 for Windows and Mac

Apply appropriate updates as mentioned below:

https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_31.html

Multiple vulnerabilities have been reported in Google Chrome, which could allow a remote attacker to execute arbitrary code, obtain sensitive information and cause denial of sevice(DoS) conditions on the targeted system.

Software Affected:

Google Chrome versions before 146.0.7680.164/165 for Windows/Mac

Google Chrome versions before 146.0.7680.164 for Linux

Apply appropriate updates as mentioned below:

https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_23.html

Multiple vulnerabilities have been reported in Mozilla products which could be exploited by a remote attacker to execute arbitrary code, perform spoofing attack, bypass security restriction or cause Denial of service (DoS) condition on the targeted system.

Software Affected:

Mozilla Firefox versions before 149

Mozilla Firefox ESR versions before 115.34

Mozilla Firefox ESR versions before 140.9

Mozilla Thunderbird versions before 140.9

Mozilla Thunderbird versions before 149

Apply appropriate updates as mentioned below:

https://www.mozilla.org/en-US/security/advisories/mfsa2026-20/

https://www.mozilla.org/en-US/security/advisories/mfsa2026-21/

https://www.mozilla.org/en-US/security/advisories/mfsa2026-22/

https://www.mozilla.org/en-US/security/advisories/mfsa2026-23/

https://www.mozilla.org/en-US/security/advisories/mfsa2026-24/

Multiple vulnerabilities have been reported in Apple Products which could allow an attacker to execute arbitrary code, gain elevated privileges, disclose sensitive information, bypass security restrictions or cause denial of service conditions on the targeted system.

Software Affected:

Apple iOS and iPadOS versions before 26.4

Apple iOS and iPadOS versions before 18.7.7

Apple macOS Tahoe versions before 26.4

Apple macOS Sequoia versions before 15.7.5

Apple macOS Sonoma versions before 14.8.5

Apple Safari versions before 26.4

Apply appropriate updates as mentioned below:

https://support.apple.com/en-in/126792

https://support.apple.com/en-in/126793

https://support.apple.com/en-in/126794

https://support.apple.com/en-in/126795

https://support.apple.com/en-in/126796

https://support.apple.com/en-in/126797

Multiple vulnerabilities have been reported in Microsoft Products, which could allow an attacker to execute remote code, gain elevated privileges, perform Server-side request forgery (SSRF) attacks, and potentially view sensitive information on the targeted system.

Software Affected:

Azure Data Factory

Microsoft 365 Copilot

Microsoft Bing

Microsoft Copilot

Microsoft 365 Copilot's Business Chat

Microsoft Bing Images

Apply appropriate updates as mentioned below:

https://msrc.microsoft.com/update-guide/

A vulnerability has been reported in Ubuntu Linux, which could allow a local attacker to escalate privileges to root on the targeted system.

Software Affected:

Ubuntu 16.04 LTS - snapd versions before 2.61.4ubuntu0.16.04.1+esm2

Ubuntu 18.04 LTS - snapd versions before 2.61.4ubuntu0.18.04.1+esm2

Ubuntu 20.04 LTS - snapd versions before 2.67.1+20.04ubuntu1~esm1

Ubuntu 22.04 LTS - snapd versions before 2.73+ubuntu22.04.1

Ubuntu 24.04 LTS - snapd versions before 2.73+ubuntu24.04.2

Ubuntu 25.10 LTS - snapd versions before 2.73+ubuntu25.10.1

Apply appropriate updates as mentioned below:

https://ubuntu.com/security/CVE-2026-3888

Multiple vulnerabilities have been reported in Apple products, which could allow an attacker to execute arbitrary code and potentially cause memory corruption on the targeted system.

Software Affected:

macOS affected before 13.5

macOS affected before 14.2

macOS affected before 14.3

iOS and iPadOS affected before 15.8.7

iOS, iPadOS, and Safari affected before 16.6

iOS and iPadOS affected before 16.7.5

iOS and iPadOS affected before 16.7.15

iOS and iPadOS affected before 17

iOS, iPadOS and tvOS affected before 17.3

iOS, iPadOS and Safari affected before 17.2

Apply appropriate security updates as mentioned in the Apple Security Updates:

https://support.apple.com/en-in/126646

A vulnerability has been reported in Microsoft M365 Copilot, which could allow a remote attacker to potentially view sensitive information or make limited changes to disclosed information on the targeted system.

Software Affected:

Microsoft Word, Excel, Teams, Edge, Outlook, OneNote, PowerPoint, Power BI,365 Copilot for Android

Microsoft Word, Excel, Teams, Edge, Outlook, OneNote, PowerPoint, Power BI, Loop, 365 Copilot for iOS

Microsoft Outlook for Mac

Apply appropriate updates as mentioned below:

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26133

Multiple vulnerabilities have been reported in Google Chrome that could allow a remote attacker to execute arbitrary code on the target system.

Software Affected:

Google Chrome versions before 146.0.7680.80 for Windows/Mac

Google Chrome versions before 146.0.7680.80 for Linux

Apply appropriate updates as mentioned below:

https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_12.html

https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_13.html

Multiple vulnerabilities have been reported in Zoom products that an attacker could exploit to gain elevated privileges on the targeted system.

Software Affected:

Zoom Workplace for Windows before version 6.6.0

Zoom Workplace VDI Client for Windows version 6.6.10 and earlier; all versions before 6.4.17 and 6.5.15 in their respective branch

Zoom Rooms for Windows before version 6.6.5

Zoom Workplace for Windows before version 6.6.11 in the 6.6.x branch

Zoom Meeting SDK for Windows before version 6.6.11 in the 6.6.x branch

Apply appropriate updates as mentioned below:

https://www.zoom.com/en/trust/security-bulletin/zsb-26005/?ampDeviceId=95a6e736-e8fe-469e-b84f-6c743a8150d5&SessionId=1773122794664

https://www.zoom.com/en/trust/security-bulletin/zsb-26004/?ampDeviceId=95a6e736-e8fe-469e-b84f-6c743a8150d5&SessionId=1773122794664

https://www.zoom.com/en/trust/security-bulletin/zsb-26003/?ampDeviceId=95a6e736-e8fe-469e-b84f-6c743a8150d5&SessionId=1773122794664

https://www.zoom.com/en/trust/security-bulletin/zsb-26002/?ampDeviceId=95a6e736-e8fe-469e-b84f-6c743a8150d5&SessionId=1773122794664

Multiple vulnerabilities have been reported in Microsoft Products, which could allow an attacker to gain elevated privileges, obtain sensitive information, conduct remote code execution attacks, bypass security restrictions, conduct spoofing attacks, or cause denial of service conditions.

Software Affected:

Microsoft Windows

Microsoft Office

Developer Tools

SQL Server

System Center

Extended Security Updates (ESU) for legacy Microsoft products

Apps

Azure

Open Source Software

Apply appropriate updates as mentioned below:

https://msrc.microsoft.com/update-guide/releaseNote/2026-Mar

Multiple Vulnerabilities have been reported in Google Chrome for Desktop, which could be exploited by a remote attacker to bypass security restrictions, execute arbitrary code or obtain access to sensitive information on the target system.

Software Affected:

Google Chrome versions before 145.0.7632.159/160 for Windows/ Mac

Google Chrome versions before 145.0.7632.159 for Linux

Apply appropriate updates as mentioned below:

https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop.html

Multiple vulnerabilities have been reported in Google Chrome for Desktop, which could be exploited by a remote attacker to execute arbitrary code, bypass security restrictions and sensitive information disclosure on the targeted system.

Software Affected:

Google Chrome versions before 145.0.7632.116/117 for Windows

Google Chrome versions before 145.0.7632.116/117 for Mac

Google Chrome versions before 145.0.7632.116 for Linux

Apply appropriate updates as mentioned below:

https://chromereleases.googleblog.com/2026/02/stable-channel-update-for-desktop_23.html

Multiple vulnerabilities have been reported in Google Chrome for Desktop that could be exploited by a remote attacker to execute arbitrary code, cause memory corruption, or trigger a denial-of-service (DoS) condition on the targeted system.

Software Affected:

Google Chrome versions before 145.0.7632.109/110 for Windows

Google Chrome versions before 145.0.7632.109/110 for Mac

Apple macOS Tahoe versions before 26.3

Apply appropriate updates as mentioned below:

https://chromereleases.googleblog.com/2026/02/stable-channel-update-for-desktop_18.html

Multiple vulnerabilities have been reported in Apple Products which could allow an attacker to execute arbitrary code, gain elevated privileges, disclose sensitive information, bypass security restrictions, or cause a denial of service condition on the targeted system.

Software Affected:

Apple iOS and iPadOS versions before 26.3

Apple iOS and iPadOS versions before 18.7.5

Apple macOS Tahoe versions before 26.3

Apple macOS Sequoia versions before 15.7.4

Apple macOS Sonoma versions before 14.8.4

Apple Safari versions before 26.3

Apple tvOS versions before 26.3

Apple watchOS versions before 26.3

Apple visionOS versions before 26.3

Apply appropriate patches as mentioned below:

https://support.apple.com/en-in/126347

https://support.apple.com/en-in/126346

https://support.apple.com/en-in/126348

https://support.apple.com/en-in/126354

https://support.apple.com/en-in/126349

https://support.apple.com/en-in/126350

https://support.apple.com/en-in/126351

https://support.apple.com/en-in/126352

https://support.apple.com/en-in/126353

Multiple vulnerabilities have been reported in Microsoft Products, which could allow an attacker to gain elevated privileges, obtain sensitive information, conduct remote code execution attacks, bypass security restrictions, conduct spoofing attacks, or cause denial of service conditions.

Software Affected:

Microsoft Windows

Microsoft Office

Extended Security Updates (ESU) for legacy Microsoft products

Apps

Azure

Apply the security updates released by Microsoft:

https://msrc.microsoft.com/update-guide/releaseNote/2026-Feb

A vulnerability has been reported in Microsoft Edge (Chromium-based), which could allow a remote attacker to obtain sensitive information on the targeted system.

Software Affected:

Microsoft Edge versions before 144.0.3719.104

Apply the security updates released by Microsoft:

https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security#january-29-2026

Multiple vulnerabilities have been reported in Google Chrome, which could allow a remote attacker to bypass security restrictions and execute arbitrary code on the targeted system.

Software Affected:

Google Chrome versions before 144.0.7559.132/.133 for Windows/Mac

Google Chrome versions before 144.0.7559.132 for Linux

Apply appropriate security updates as mentioned below:

https://chromereleases.googleblog.com/2026/02/stable-channel-update-for-desktop.html

A vulnerability has been reported in Microsoft Edge, which could allow a remote attacker to execute arbitrary code on the targeted system.

Software Affected:

Microsoft Edge versions before 144.0.3719.92

Apply appropriate fixes/patches as mentioned below:

https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security#january-23-2026

A vulnerability has been reported in Zoom Node Multimedia Router (MMR) that could be exploited by an attacker to execute arbitrary commands on the targeted system.

Software Affected:

Zoom Node Meetings Hybrid (ZMH) MMR module versions before 5.2.1716.0

Zoom Node Meeting Connector (MC) MMR module versions before 5.2.1716.0

Apply appropriate updates as mentioned below:

https://www.zoom.com/en/trust/security-bulletin/zsb-26001/

A vulnerability has been reported in Google Chrome, which could allow a remote attacker to execute arbitrary code on the targeted system.

Software Affected:

Google Chrome versions before 144.0.7559.109/.110 for Windows/Mac

Google Chrome versions before 144.0.7559.109 for Linux

Apply appropriate security updates as mentioned below:

https://chromereleases.googleblog.com/2026/01/stable-channel-update-for-desktop_27.html

Multiple vulnerabilities have been reported in Microsoft Edge, which could allow a remote attacker to execute arbitrary code, bypass security restrictions, and gain elevated privileges on the targeted system.

Software Affected:

Microsoft Edge versions before 144.0.3719.82

Apply appropriate security updates as mentioned below:

https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security#january-14-2026

A vulnerability has been reported in Google Chrome, which could allow a remote attacker to execute arbitrary code on the targeted system.

Software Affected:

Google Chrome versions before 144.0.7559.96/.97 for Windows/Mac

Google Chrome versions before 144.0.7559.96 for Linux

Apply appropriate security updates as mentioned below:

https://chromereleases.googleblog.com/2026/01/stable-channel-update-for-desktop_20.html

A vulnerability has been reported in Microsoft Word, which could allow an unauthorized attacker to execute arbitrary code locally on the targeted system.

Software Affected:

Microsoft Office LTSC for Mac 2024

Microsoft Office LTSC for Mac 2021

Microsoft 365 Apps for Enterprise for 64-bit Systems

Microsoft 365 Apps for Enterprise for 32-bit System

Apply appropriate security updates as mentioned below:

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20944

Multiple vulnerabilities have been reported in Mozilla products, which could be exploited by a remote attacker to execute arbitrary code, perform a spoofing attack, or cause a Denial of Service (DoS) condition on the targeted system.

Software Affected:

Mozilla Firefox for ESR versions before 115.32

Mozilla Firefox for ESR versions before 140.7

Mozilla Firefox versions before 147

Apply appropriate security updates as mentioned below:

https://www.mozilla.org/en-US/security/advisories/

https://www.mozilla.org/en-US/security/advisories/mfsa2026-01/

https://www.mozilla.org/en-US/security/advisories/mfsa2026-02/

https://www.mozilla.org/en-US/security/advisories/mfsa2026-03/

Multiple vulnerabilities have been reported in Google Chrome, which could allow a remote attacker to execute arbitrary code and bypass security restrictions on the targeted system.

Software Affected:

Google Chrome versions before 144.0.7559.59/60 for Windows

Google Chrome versions before 144.0.7559.59/60 for Mac

Google Chrome versions before 144.0.7559.59 for Linux

Apply appropriate security updates as mentioned below:

https://chromereleases.googleblog.com/2026/01/stable-channel-update-for-desktop_13.html

Multiple vulnerabilities have been reported in Microsoft Office, which could allow an attacker to execute arbitrary code in the context of the current user on the affected system.

Software Affected:

Microsoft Office

Apply appropriate security updates as mentioned below:

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20952

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20953

A vulnerability has been reported in Google Chrome, which could allow a remote attacker to bypass security restrictions on the targeted system.

Software Affected:

Google Chrome before 143.0.7499.192 (Linux)

Google Chrome before 143.0.7499.192/.193 (Mac)

Google Chrome before 143.0.7499.192/.193 (Windows)

Apply appropriate security updates as mentioned below:

https://chromereleases.googleblog.com/2026/01/stable-channel-update-for-desktop.html

An information disclosure vulnerability has been reported in the Desktop Window Manager component of Microsoft Windows, which could allow an authenticated local attacker to disclose sensitive information on the affected system.

Software Affected:

Windows 10: Versions 1607, 1809, 21H2, and 22H2.

Windows 11: Versions 23H2, 24H2, and 25H2.

Windows Server: 2012, 2012 R2, 2016, 2019, 2022, 2022 (23H2 Edition), and 2025.

Apply appropriate updates as mentioned below:

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20805

These vulnerabilities exist in Microsoft Excel due to memory handling flaws. A remote attacker could exploit these vulnerabilities by enticing the target user to execute a specially crafted Excel file. Successful exploitation of these vulnerabilities could allow the attacker to execute arbitrary code, resulting in system compromise or data theft.

Software Affected:

Microsoft Office

Apply appropriate security updates as mentioned below:

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20955

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20957

A vulnerability has been reported in Windows Secure Boot, which could allow an attacker to bypass security restrictions on the affected system.

Software Affected:

Windows 10 Version 1607 for 32-bit Systems, x64-based Systems

Windows 10 Version 1809 for 32-bit Systems, x64-based Systems

Windows 10 Version 21H2 for 32-bit Systems, x64-based Systems, ARM64-based Systems

Windows 10 Version 22H2 for 32-bit Systems, x64-based Systems, ARM64-based Systems

Windows 11 Version 23H2 for x64-based Systems, ARM64-based Systems

Windows 11 Version 24H2 for x64-based Systems, ARM64-based Systems

Windows 11 Version 25H2 for x64-based Systems, ARM64-based Systems

Windows Server 2012

Windows Server 2012 R2

Windows Server 2016

Windows Server 2019

Windows Server 2022

Windows Server 2025

Windows Server 2012 (Server Core installation)

Windows Server 2012 R2 (Server Core installation)

Windows Server 2016 (Server Core installation)

Windows Server 2019 (Server Core installatio0n)

Windows Server 2022 (Server Core installation)

Windows Server 2022, 23H2 Edition (Server Core installation)

Windows Server 2025 (Server Core installation)

Microsoft certificates in the UEFI KEK and DB

Apply appropriate updates as mentioned in:

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21265

A vulnerability has been reported in Google Android, which could allow a remote attacker to execute arbitrary code on the targeted system.

Software Affected:

Android Dolby UDC 4.5 through 4.13

Apply appropriate updates as mentioned in:

https://source.android.com/docs/security/bulletin/2026/2026-01-01

Multiple vulnerabilities have been reported in Microsoft Products, which could allow an attacker to gain elevated privileges, obtain sensitive information, conduct remote code execution attacks, perform spoofing attacks, or cause denial-of-service conditions on the targeted system.

Software Affected:

Microsoft Office

Windows

Extended Security Updates (ESU)

Azure

Developer Tools

SQL Server

Apply the security updates released by Microsoft:

https://msrc.microsoft.com/update-guide/releaseNote/2026-Jan

A vulnerability has been reported in Microsoft Edge (Chromium-based), which could allow a remote attacker to bypass security restrictions on the targeted system.

Software Affected:

Microsoft Edge (Chromium-based) version before 143.0.3650.139

Apply appropriate updates as mentioned in:

https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security#january-9-2026

Multiple vulnerabilities have been reported in Google ChromeOS, which could allow a remote attacker to execute arbitrary code on the targeted system

Software Affected:

Google ChromeOS version before 138.0.7204.300 (Platform Version: 16295.85.0)

Apply appropriate updates as mentioned in:

https://chromereleases.googleblog.com/2026/01/long-term-support-channel-update-for.html