Enterprise Patching
The latest Enterprise Patching coverage — news, analysis, and updates from the WindowsNews.AI desk.
CVE-2026-40367: Patch All Office Apps, Not Just Word, Microsoft Warns
Microsoft’s May 12, 2026 security updates addressed a critical remote code execution vulnerability in Microsoft Word tracked as CVE-2026-40367, but the patch deployment is unlike a typical Office...
Windows 11 Enterprise 24H2 Hotpatch Eliminates Monthly Security Reboots
Microsoft has formally introduced Hotpatch support for Windows 11 Enterprise version 24H2, a move that promises to slash the number of mandatory restarts for security updates. According to the...
Chrome 148.0.7778.96+ Patches Aura Use-After-Free Enabling Sandbox Escape
Google shipped Chrome 148.0.7778.96 to the stable channel on May 6, 2026, patching a high-severity use-after-free vulnerability in the Aura UI framework that could permit a sandbox escape after...
TopChrome UAF in Chrome 148.0.7778.96 — Patch Now for RCE Risk
Google and Microsoft have jointly disclosed a critical use-after-free vulnerability in the Chromium browser engine, tracked as CVE-2026-7970, that affects all Chromium-based browsers including Google...
CVE-2026-8008: Low-Severity Chrome DevTools UI Spoofing Vulnerability Raises Enterprise Patching Concerns
Google has rolled out a patch for a newly disclosed vulnerability in Chrome’s DevTools, tracked as CVE-2026-8008, which enables user interface spoofing. While assigned a low severity score, the...
Chrome Zero-Day CVE-2026-8018 Lets Attackers Bypass DevTools Policies, Escape Sandbox
Google Chrome version 148.0.7778.96 fixes CVE-2026-8018, a vulnerability that allows an attacker to bypass DevTools policies and potentially escape the browser’s sandbox. Disclosed on May 6, 2026,...
CVE-2026-6299: Critical Chrome Prerender Use-After-Free Vulnerability Patched
Google has patched CVE-2026-6299, a critical use-after-free vulnerability in Chrome's prerendering component that received the highest severity rating in Chromium's security framework. The...
CVE-2026-6304: Chrome's Graphite Use-After-Free Vulnerability and Sandbox Escape Risk Explained
Google has patched a critical vulnerability in Chrome that could allow attackers to escape the browser's security sandbox and execute arbitrary code on vulnerable systems. CVE-2026-6304, a...
Chrome 147.0.7727.101/102 Patches Critical CVE-2026-6303 Codec Flaw
Google has released Chrome 147.0.7727.101 for Windows and Mac, and 147.0.7727.102 for Linux, addressing a critical use-after-free vulnerability in the browser's codec components. CVE-2026-6303...
Google rushes Chrome 126.0.6478.126 to fix CVE-2026-6360 FileSystem RCE flaw
Google has patched a high-severity use-after-free vulnerability in Chrome's FileSystem component, designated CVE-2026-6360. This security flaw could allow remote attackers to execute arbitrary code...
CVE-2026-6310: Critical Dawn Use-After-Free Vulnerability Patched in Chrome 147
Google has patched a critical use-after-free vulnerability in the Dawn WebGPU implementation, designated CVE-2026-6310, with the release of Chrome 147.0.7727.101. The company's security advisory...
Patch Chrome now: CVE-2026-6364 Skia flaw fixed in version 147.0.7727.101
Google has released Chrome 147.0.7727.101 to address CVE-2026-6364, a Skia graphics engine vulnerability that allows out-of-bounds memory reads. This security patch affects all Chrome installations...