Weekly briefing

Updates and guidanceDefender7 source records

Guidance changed · 7 entries

• Defender for Endpoint network connectivity and service URLs

  Guidance changed

  1 removed passage (14 words). The changed wording mentions network endpoints. Review the source to confirm the effect.

  Assessment context

  1 removed passage (14 words). The changed wording mentions network endpoints. Review the source to confirm the effect. · Observed documentation change; policy effect and environment availability need review.

• Defender for Endpoint streamlined connectivity

  Guidance changed

  1 removed passage (about 20 words). The changed wording mentions network endpoints. Review the source to confirm the effect.

  Assessment context

  1 removed passage (about 20 words). The changed wording mentions network endpoints. Review the source to confirm the effect. · Observed documentation change; policy effect and environment availability need review.

• Defender for Identity deployment

  Guidance changed

  1 new passage (about 20 words), 2 edited passages (21 words changed), 1 removed passage (12 words). The changed wording mentions dates and deadlines, prerequisites, supported platforms. Review the source to confirm the effect.

  Assessment context

  1 new passage (about 20 words), 2 edited passages (21 words changed), 1 removed passage (12 words). The changed wording mentions dates and deadlines, prerequisites, supported platforms. Review the source to confirm the effect. · Observed documentation change; policy effect and environment availability need review.

SecurityPalo Alto Networks

SecurityFortinet

SecurityWindows2 source records

CISA KEV deadline · 2 entries

• Microsoft Windows Command Injection Vulnerability

  CISA KEV deadline

  CVE-2026-96951

  Assessment context

  CISA deadline passed 10 days ago

• Windows Raw Image Extension Remote Code Execution Vulnerability

  Published vulnerability

  CVE-2026-96202

  Assessment context

  Microsoft rates the vulnerability Critical · Microsoft states that customer action is required

SecurityMicrosoft Edge7 source records

Published vulnerability · 7 entries

• Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

  Published vulnerability

  CVE-2026-83831

  Assessment context

  Microsoft states that customer action is required

• Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

  Published vulnerability

  CVE-2026-85890

  Assessment context

  Microsoft states that customer action is required

• Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

  Published vulnerability

  CVE-2026-85897

  Assessment context

  Microsoft states that customer action is required

SecurityMicrosoft Security Blog

SecurityAtlassian Jira and Confluence

SecurityASP.NET Core Denial of Service Vulnerability

SecurityFortinet2 source records

Revised by Microsoft · 2 entries

• FortiClient: Heap overflow in kernel driver due to missing size validation

  Revised by Microsoft · Fortinet PSIRT advisories

  Assessment context

  Changed after ChangeIntel first saw it

• FortiManager: HTML injection in WebUI

  Revised by Microsoft · Fortinet PSIRT advisories

  Assessment context

  Changed after ChangeIntel first saw it

SecurityMicrosoft 365 Apps / SharePoint

SecurityMicrosoft 365 Apps29 source records

Published vulnerability · 29 entries

• Microsoft Office Excel Remote Code Execution Vulnerability

  Published vulnerability

  CVE-2026-108446

  Assessment context

  Microsoft states that customer action is required

• Microsoft Office Outlook Remote Code Execution Vulnerability

  Published vulnerability

  CVE-2026-108448

  Assessment context

  Microsoft rates the vulnerability Critical · Microsoft states that customer action is required

• Microsoft Office PowerPoint Information Disclosure Vulnerability

  Published vulnerability

  CVE-2026-108453

  Assessment context

  Microsoft states that customer action is required

SecurityMicrosoft Authentication Library (MSAL) for Node.js Information Disclosure Vulnerability

SecurityMicrosoft Identity Web Elevation of Privilege Vulnerability

Message CenterDefender

SecurityCisco Talos Intelligence

SecurityCisco

SecurityGoogle Chrome

SecurityMicrosoft Edge

SecurityPalo Alto Networks4 source records

Security news · 4 entries

• CVE-2026-0317 PAN-OS: Denial of Service Vulnerability (Severity: LOW)

  Security news · Palo Alto Networks security advisories

• CVE-2026-0320 PAN-OS: Authenticated Admin Command Injection Vulnerability (Severity: MEDIUM)

  Security news · Palo Alto Networks security advisories

• CVE-2026-0321 PAN-OS: Denial of Service (DoS) Vulnerabilities in Network Services (Severity: MEDIUM)

  Security news · Palo Alto Networks security advisories

SecurityCisco3 source records

Cisco · exploited, added to CISA KEV · 3 entries

• Cisco Secure Email Gateway Relative Path Traversal Vulnerability

  Cisco · exploited, added to CISA KEV

  CVE-2026-76519

  Assessment context

  CISA lists it as exploited

• Cisco Secure Email Gateway Arbitrary File Write Vulnerability

  Security news · Cisco security advisories

• Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026

  Security news · Cisco security advisories

SecurityPalo Alto Networks10 source records

Palo Alto Networks · exploited, added to CISA KEV · 10 entries

• Palo Alto Networks PAN-OS Code Injection Vulnerability

  Palo Alto Networks · exploited, added to CISA KEV

  CVE-2026-0322

  Assessment context

  CISA lists it as exploited

• CVE-2026-0311 Checkov by Prisma Cloud: Server-Side Request Forgery Vulnerability (Severity: LOW)

  Security news · Palo Alto Networks security advisories

• CVE-2026-0312 Checkov by Prisma Cloud: Path Traversal Vulnerabilities (Severity: MEDIUM)

  Security news · Palo Alto Networks security advisories

SecurityCisco Talos Intelligence

SecurityCloudflare

SecurityDefender