on January 16, 2026 at 8:00 am — CVE-2026-20960 Microsoft Power Apps Remote Code Execution Vulnerability
Improper authorization in Microsoft Power Apps allows an authorized attacker to execute code over a network.
CyberSecurity
on January 16, 2026 at 8:08 pm — Chromium: CVE-2026-0907 Incorrect security UI in Split View
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2024 ) for more information.
on January 16, 2026 at 8:08 pm — Chromium: CVE-2026-0906 Incorrect security UI
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2024 ) for more information.
on January 16, 2026 at 8:08 pm — Chromium: CVE-2026-0906 Incorrect security UI Read More »
on January 16, 2026 at 8:08 pm — Chromium: CVE-2026-0905 Insufficient policy enforcement in Network
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2024 ) for more information.
on January 13, 2026 at 8:00 am — CVE-2026-0386 Windows Deployment Services Remote Code Execution Vulnerability
Improper access control in Windows Deployment Services allows an unauthorized attacker to execute code over an adjacent network.
on January 13, 2026 at 8:00 am — CVE-2026-20803 Microsoft SQL Server Elevation of Privilege Vulnerability
Missing authentication for critical function in SQL Server allows an authorized attacker to elevate privileges over a network.
on January 13, 2026 at 8:00 am — CVE-2026-20965 Windows Admin Center Elevation of Privilege Vulnerability
Improper verification of cryptographic signature in Windows Admin Center allows an authorized attacker to elevate privileges locally.