Vendor advisories

Microsoft Security Response Center

Browse 4,355 advisories from this official source. Search by product, CVE, severity, or advisory ID.

Current Checked 3 hours ago Checked every 6 hours

4,355 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results

Microsoft Security Response CenterCVE-2026-62836

Published Aug 6, 2026

CriticalCVSS 8.7

Azure SQL Managed Instance Elevation of Privilege Vulnerability

Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network.

Affected productsAzure SQL Managed Instance

CVE-2026-62836

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-62896

Published Aug 6, 2026

CriticalCVSS 9.6

Microsoft Teams Elevation of Privilege Vulnerability

Improper authentication in Microsoft Teams allows an authorized attacker to elevate privileges over a network.

Affected productsMicrosoft Teams

CVE-2026-62896

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-18019

Published Jul 31, 2026

Severity not listed

Chromium: CVE-2026-18019 Side-channel information leakage in Media

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions151.0.4129.59

Vendor guidance

Release Notes

CVE-2026-18019

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-18018

Published Jul 31, 2026

Severity not listed

Chromium: CVE-2026-18018 Inappropriate implementation in Updater

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions151.0.4129.59

Vendor guidance

Release Notes

CVE-2026-18018

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-18017

Published Jul 31, 2026

Severity not listed

Chromium: CVE-2026-18017 Use after free in Dawn

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions151.0.4129.59

Vendor guidance

Release Notes

CVE-2026-18017

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-18016

Published Jul 31, 2026

Severity not listed

Chromium: CVE-2026-18016 Insufficient policy enforcement in Chrome for iOS

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions151.0.4129.59

Vendor guidance

Release Notes

CVE-2026-18016

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-18015

Published Jul 31, 2026

Severity not listed

Chromium: CVE-2026-18015 Inappropriate implementation in Tint

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions151.0.4129.59

Vendor guidance

Release Notes

CVE-2026-18015

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-18014

Published Jul 31, 2026

Severity not listed

Chromium: CVE-2026-18014 Insufficient validation of untrusted input in DevTools

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions151.0.4129.59

Vendor guidance

Release Notes

CVE-2026-18014

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-18013

Published Jul 31, 2026

Severity not listed

Chromium: CVE-2026-18013 Inappropriate implementation in Chrome for iOS

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions151.0.4129.59

Vendor guidance

Release Notes

CVE-2026-18013

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-18012

Published Jul 31, 2026

Severity not listed

Chromium: CVE-2026-18012 Use after free in PDFium

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions151.0.4129.59

Vendor guidance

Release Notes

CVE-2026-18012

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-18011

Published Jul 31, 2026

Severity not listed

Chromium: CVE-2026-18011 Inappropriate implementation in Chrome for iOS

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions151.0.4129.59

Vendor guidance

Release Notes

CVE-2026-18011

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-18010

Published Jul 31, 2026

Severity not listed

Chromium: CVE-2026-18010 Inappropriate implementation in Passwords

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions151.0.4129.59

Vendor guidance

Release Notes

CVE-2026-18010

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-18009

Published Jul 31, 2026

Severity not listed

Chromium: CVE-2026-18009 Insufficient validation of untrusted input in Passwords

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions151.0.4129.59

Vendor guidance

Release Notes

CVE-2026-18009

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-18008

Published Jul 31, 2026

Severity not listed

Chromium: CVE-2026-18008 Inappropriate implementation in Settings

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions151.0.4129.59

Vendor guidance

Release Notes

CVE-2026-18008

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-18007

Published Jul 31, 2026

Severity not listed

Chromium: CVE-2026-18007 Inappropriate implementation in Input

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions151.0.4129.59

Vendor guidance

Release Notes

CVE-2026-18007

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-18006

Published Jul 31, 2026

Severity not listed

Chromium: CVE-2026-18006 Inappropriate implementation in Google Lens

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions151.0.4129.59

Vendor guidance

Release Notes

CVE-2026-18006

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-18005

Published Jul 31, 2026

Severity not listed

Chromium: CVE-2026-18005 Inappropriate implementation in WebXR

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions151.0.4129.59

Vendor guidance

Release Notes

CVE-2026-18005

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-18004

Published Jul 31, 2026

Severity not listed

Chromium: CVE-2026-18004 Insufficient policy enforcement in Speech

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions151.0.4129.59

Vendor guidance

Release Notes

CVE-2026-18004

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-18003

Published Jul 31, 2026

Severity not listed

Chromium: CVE-2026-18003 Inappropriate implementation in Chrome for iOS

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions151.0.4129.59

Vendor guidance

Release Notes

CVE-2026-18003

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-18002

Published Jul 31, 2026

Severity not listed

Chromium: CVE-2026-18002 Insufficient validation of untrusted input in Google Lens

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions151.0.4129.59

Vendor guidance

Release Notes

CVE-2026-18002

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-18001

Published Jul 31, 2026

Severity not listed

Chromium: CVE-2026-18001 Inappropriate implementation in WebGL

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions151.0.4129.59

Vendor guidance

Release Notes

CVE-2026-18001

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-18000

Published Jul 31, 2026

Severity not listed

Chromium: CVE-2026-18000 Insufficient policy enforcement in USB

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions151.0.4129.59

Vendor guidance

Release Notes

CVE-2026-18000

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-17999

Published Jul 31, 2026

Severity not listed

Chromium: CVE-2026-17999 Incorrect security UI in PictureInPicture

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions151.0.4129.59

Vendor guidance

Release Notes

CVE-2026-17999

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-17998

Published Jul 31, 2026

Severity not listed

Chromium: CVE-2026-17998 Incorrect security UI in Extensions

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions151.0.4129.59

Vendor guidance

Release Notes

CVE-2026-17998

Read the vendor advisory Watch this product

Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

Read how SecurityAlert collects and checks threat intelligence.