Search threats, CVEs… ⌘K
Vendor advisories

Microsoft Security Response Center

Browse 15,547 advisories from this official source. Search by product, CVE, severity, or advisory ID.

Current Checked 3 hours ago Checked every 6 hours
All vendor sources Official source

15,547 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2026-95311
HighCVSS 9.6

Chromium CVE-2026-95311: Free of non-heap memory in Fonts

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)
Fixed versions154.0.4258.37, 154.0.4258.38
Vendor guidance

Release Notes

CVE-2026-95311
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-95274
HighCVSS 8.3

Chromium CVE-2026-95274: Improper output encoding in DevTools

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)
Fixed versions154.0.4258.37, 154.0.4258.38
Vendor guidance

Release Notes

CVE-2026-95274
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-68894
HighCVSS 8.0

Windows Error Reporting Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725
Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-68894
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-68877
HighCVSS 7.8

Windows Storage Spaces Controller Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725
Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099.

CVE-2026-68877
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-70338
HighCVSS 7.8

Microsoft PowerShell Security Feature Bypass Vulnerability

Improper control of generation of code ('code injection') in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally.

Affected productsPowerShell 7.4, PowerShell 7.5, PowerShell 7.6
Fixed versions7.4.19.0, 7.5.10.0, 7.6.5
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2026-70338
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-85330
MediumCVSS 4.3

Microsoft Edge for Android Security Feature Bypass Vulnerability

What kind of security feature could be bypassed by successfully exploiting this vulnerability? An attacker who successfully exploited this vulnerability could smuggle another HTTP request and bypass front-end security controls or hijack other users' credentials.

Affected productsMicrosoft Edge (Chromium-based)
Fixed versions155.0.4283.45
Vendor guidance

Release Notes

CVE-2026-85330
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources