on August 28, 2026 at 2:00 pm — CVE-2026-62904 Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Incorrect authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
on August 28, 2026 at 2:00 pm — CVE-2026-66323 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Improper neutralization of parameter/argument delimiters in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
on August 28, 2026 at 2:00 pm — CVE-2026-66324 Microsoft Edge (Chromium-based) Spoofing Vulnerability
External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
on August 28, 2026 at 2:00 pm — CVE-2026-70331 Microsoft Edge for iOS Spoofing Vulnerability
Improper neutralization of input used for llm prompting in Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network.
on August 28, 2026 at 2:00 pm — CVE-2026-58616 Copilot Chat (Microsoft Edge) Information Disclosure Vulnerability
Concurrent execution using shared resource with improper synchronization (‘race condition’) in Copilot Chat (Microsoft Edge) allows an authorized attacker to disclose information over a network.
on August 27, 2026 at 2:00 pm — CVE-2026-65660 Microsoft SharePoint Server Remote Code Execution Vulnerability
Updated Impact in the Security Updates table, CVE Title, and FAQs. This is an informational change only.