QCS Security Advisory Desk
Security Advisory Desk.
Monitor network-edge vulnerabilities, known exploitation, affected products, mitigations, and vendor patch guidance without waiting for a weekly editorial cycle.
QCS pathSource-to-action path
- 01Official sourceMonitor vendors and trusted authorities.
- 02Verify contextCheck products, exposure, and evidence.
- 03Set prioritySeparate urgent action from useful reading.
- 04Act or learnPatch, mitigate, investigate, or prepare.
Live intelligence
See the items that can change today's patch or mitigation plan.
Priority combines source severity, known exploitation, remote attack conditions, recency, and network-edge relevance.
unrated Exploitation reported
Google Cloud / Priority 70
GCP-2026-054
A security flaw was found in the Trusted Computing Group's TPM 2.0 reference implementation code, affecting all known versions. TPMs (Trusted Platform Modules) ensure the security of devices by managing cryptographic keys and sensitive operations. This vulnerability could put the integrity of these security functions at risk. Google Cloud will address this issue by updating systems automatically during planned maintenance, so customers don't need to take any action.
- Published
- 8 Sep 2026
- CVSS
- Not scored
- Verified
- 11 Sep 2026
unrated Exploitation reported
Microsoft / Priority 70
CVE-2026-85046: Chromium: CVE-2026-85046 Type confusion in V8
A security flaw called CVE-2026-85046 was found in the V8 JavaScript engine used by Chromium-based browsers, including Microsoft Edge. This flaw involves confusion in how types are handled in memory, which can cause software errors. Google knows this flaw is being exploited by attackers. Microsoft has fixed this issue in a recent Edge update to keep users safe.
- Published
- 8 Sep 2026
- CVSS
- Not scored
- Verified
- 11 Sep 2026
unrated Exploitation reported
Microsoft / Priority 70
CVE-2026-87491: Chromium CVE-2026-87491: Out of bounds write in V8
A security flaw called CVE-2026-87491 was discovered in the Chromium browser engine, specifically in its V8 JavaScript engine. This flaw can cause a program to write data outside its allowed memory boundaries, which may lead to crashes or allow attackers to run harmful code. Microsoft Edge, which is built on Chromium, has integrated the fix from Chromium to address this issue. An exploit for this vulnerability is known to exist in the wild, so users should update their browsers to the latest version to stay protected.
- Published
- 8 Sep 2026
- CVSS
- Not scored
- Verified
- 13 Sep 2026
unrated Exploitation reported
Microsoft / Priority 70
CVE-2026-76023: Chromium CVE-2026-76023: Improper resource control in Linux Toolkit Theming
A security issue called CVE-2026-76023 was found in the Linux Toolkit Theming component of Chromium, the open-source browser engine behind Google Chrome and Microsoft Edge (Chromium-based). Microsoft Edge includes Chromium, and the latest Edge version 151.0.4129.107 contains the fix for this vulnerability, so users should update to this version to stay protected.
- Published
- 8 Sep 2026
- CVSS
- Not scored
- Verified
- 13 Sep 2026
unrated Exploitation reported
Microsoft / Priority 70
CVE-2026-76022: Chromium CVE-2026-76022: Buffer overflow in Network
A security flaw known as CVE-2026-76022 was found in the Chromium browser engine, which can cause a buffer overflow in its network component. Since Microsoft Edge (Chromium-based) uses Chromium, this vulnerability also affected Edge. Microsoft updated Edge to a version that includes Chromium’s fix, making Edge safe from this issue.
- Published
- 8 Sep 2026
- CVSS
- Not scored
- Verified
- 13 Sep 2026
unrated
Microsoft / Priority 70
CVE-2026-76021: Chromium CVE-2026-76021: Use after free in DOM
A security issue known as CVE-2026-76021 involves a "use after free" bug in the Document Object Model (DOM) of the Chromium browser engine. Microsoft Edge, which uses Chromium, has incorporated a Chromium update that fixes this problem. Users should update Microsoft Edge to version 151.0.4129.107 or later to be protected.
- Published
- 8 Sep 2026
- CVSS
- Not scored
- Verified
- 13 Sep 2026
unrated Exploitation reported
Microsoft / Priority 70
CVE-2026-76019: Chromium CVE-2026-76019: Incorrect authorization in Workers
A security flaw was found and fixed in the Chromium open-source browser engine, which Microsoft Edge (Chromium-based) uses. This flaw involved incorrect permission checks in a feature that runs background scripts, called Workers. The latest version of Microsoft Edge includes the fix, so users should update to stay protected.
- Published
- 8 Sep 2026
- CVSS
- Not scored
- Verified
- 13 Sep 2026
unrated Exploitation reported
Microsoft / Priority 70
CVE-2026-76018: Chromium CVE-2026-76018: Privilege elevation in Import
A security issue in Chromium, assigned CVE-2026-76018, could let attackers gain higher privileges through its import functionality. Microsoft Edge, which uses Chromium technology, has included the fix in its latest update, so users are recommended to update to the fixed version to stay protected.
- Published
- 8 Sep 2026
- CVSS
- Not scored
- Verified
- 13 Sep 2026
unrated
Microsoft / Priority 70
CVE-2026-76017: Chromium CVE-2026-76017: Use after free in Chromoting
A security vulnerability called CVE-2026-76017 was found in Chromium, the open-source project behind Google Chrome and Microsoft Edge's web engine. This vulnerability involves a "use after free" error in the remote desktop component called Chromoting. Microsoft Edge (Chromium-based) has incorporated the Chromium updates that fix this issue. Users should update to the latest Microsoft Edge version 151.0.4129.107 or later to be protected.
- Published
- 8 Sep 2026
- CVSS
- Not scored
- Verified
- 13 Sep 2026
unrated
Microsoft / Priority 70
CVE-2026-76039: Chromium CVE-2026-76039: Incorrect reference resolution in Core
A security issue called CVE-2026-76039 was found in Chromium, the open-source software behind Microsoft Edge (Chromium-based). This issue involves incorrect reference resolution in the core of Chromium, which could affect how the software manages certain internal references. Microsoft Edge has incorporated a Chromium update that fixes this problem. Users should update their Microsoft Edge browser to the latest version to be protected against this vulnerability.
- Published
- 8 Sep 2026
- CVSS
- Not scored
- Verified
- 13 Sep 2026
unrated Exploitation reported
Ubuntu / Priority 70
USN-8729-1: Linux kernel vulnerabilities
Multiple security vulnerabilities were found in the Linux kernel used by Ubuntu systems. These flaws affect many core components and drivers, potentially allowing attackers to compromise the system. The issues have been addressed by updating the Linux kernel to improved versions, which users should install and then reboot their systems to activate the fixes.
- Published
- 7 Sep 2026
- CVSS
- Not scored
- Verified
- 8 Sep 2026
unrated Exploitation reported
Ubuntu / Priority 70
USN-8728-1: Linux kernel (GCP) vulnerabilities
Multiple security holes were found in the Linux kernel used by Ubuntu on Google Cloud Platform (GCP). Some Arm processors could incorrectly invalidate memory permissions, letting a local attacker write to memory after access was revoked, risking privilege escalation (CVE-2025-10263). Some AMD Zen 2 processors had cache issues allowing attackers to corrupt higher-level instructions, also risking privilege escalation (CVE-2025-54518). Numerous other Linux kernel subsystems had vulnerabilities that could allow attackers to compromise systems.
- Published
- 7 Sep 2026
- CVSS
- Not scored
- Verified
- 8 Sep 2026