Vendor advisories

Microsoft Security Response Center

Browse 4,355 advisories from this official source. Search by product, CVE, severity, or advisory ID.

Current Checked 2 hours ago Checked every 6 hours

4,355 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results

Microsoft Security Response CenterCVE-2026-63959

Published Jul 21, 2026

CriticalCVSS 9.8

usb: typec: tcpm/tcpci_maxim: validate header NDO against RX_BYTE_CNT

Mariner

Affected productsazl3 kernel 6.6.144.1-1 on Azure Linux 3.0

CVE-2026-63959

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-64133

Published Jul 21, 2026

HighCVSS 7.1

ALSA: asihpi: Fix potential OOB array access at reading cache

Mariner

Affected productsazl3 kernel 6.6.144.1-1 on Azure Linux 3.0

CVE-2026-64133

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-63832

Published Jul 20, 2026

HighCVSS 7.8

wifi: mt76: add wcid publish check in mt76_sta_add

Mariner

Affected productsazl3 kernel 6.6.144.1-1 on Azure Linux 3.0

CVE-2026-63832

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-53375

Published Jul 20, 2026

HighCVSS 7.5

drm/amdgpu/vce: Prevent partial address patches

Mariner

Affected productsazl3 kernel 6.6.144.1-1 on Azure Linux 3.0

CVE-2026-53375

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-63826

Published Jul 20, 2026

HighCVSS 7.1

fbdev: fix use-after-free in store_modes()

Mariner

Affected productsazl3 kernel 6.6.144.1-1 on Azure Linux 3.0

CVE-2026-63826

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-63833

Published Jul 20, 2026

CriticalCVSS 9.8

ntfs3: reject direct userspace writes to reserved $LX* xattrs

Mariner

Affected productsazl3 kernel 6.6.144.1-1 on Azure Linux 3.0

CVE-2026-63833

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-53376

Published Jul 20, 2026

CriticalCVSS 9.8

drm/amdkfd: Add upper bound check for num_of_nodes

Mariner

Affected productsazl3 kernel 6.6.144.1-1 on Azure Linux 3.0

CVE-2026-53376

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-53403

Published Jul 20, 2026

CriticalCVSS 9.8

fbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_var

Mariner

Affected productsazl3 kernel 6.6.144.1-1 on Azure Linux 3.0

CVE-2026-53403

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-63793

Published Jul 20, 2026

HighCVSS 7.5

ntfs: serialize volume label accesses

Mariner

Affected productsazl3 kernel 6.6.144.1-1 on Azure Linux 3.0

CVE-2026-63793

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-53374

Published Jul 20, 2026

CriticalCVSS 9.8

drm/amdgpu: zero-initialize GART table on allocation

Mariner

Affected productsazl3 kernel 6.6.144.1-1 on Azure Linux 3.0

CVE-2026-53374

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-47302

Updated Jul 20, 2026

HighCVSS 7.5

.NET Denial of Service Vulnerability

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.

Affected products.NET 10.0 installed on Windows, .NET 8.0 installed on Windows, .NET 8.0 installed on Mac OS, .NET 8.0 installed on Linux

Fixed versions10.0.10, 8.0.29, 4.8.4803.0, 2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0

Vendor guidance

Release Notes Install KB5104034. Install KB5104032. Install KB5101007. Install KB5101011. Install KB5101008. Install KB5101009. Install KB5101010. Install KB5101006. Install KB5100989. Install KB5099535. Install KB510...

CVE-2026-47302

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-15905

Published Jul 17, 2026

Severity not listed

Chromium: CVE-2026-15905 Use after free in Aura

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions150.0.4078.83

Vendor guidance

Release Notes

CVE-2026-15905

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-15904

Published Jul 17, 2026

Severity not listed

Chromium: CVE-2026-15904 Use after free in Ozone

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions150.0.4078.83

Vendor guidance

Release Notes

CVE-2026-15904

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-15903

Published Jul 17, 2026

Severity not listed

Chromium: CVE-2026-15903 Out of bounds read and write in V8

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions150.0.4078.83

Vendor guidance

Release Notes

CVE-2026-15903

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-15902

Published Jul 17, 2026

Severity not listed

Chromium: CVE-2026-15902 Use after free in Cast

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions150.0.4078.83

Vendor guidance

Release Notes

CVE-2026-15902

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-15901

Published Jul 17, 2026

Severity not listed

Chromium: CVE-2026-15901 Use after free in Network

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions150.0.4078.83

Vendor guidance

Release Notes

CVE-2026-15901

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-15900

Published Jul 17, 2026

Severity not listed

Chromium: CVE-2026-15900 Use after free in GPU

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions150.0.4078.83

Vendor guidance

Release Notes

CVE-2026-15900

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-15899

Published Jul 17, 2026

Severity not listed

Chromium: CVE-2026-15899 Use after free in CameraCapture

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions150.0.4078.83

Vendor guidance

Release Notes

CVE-2026-15899

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-15709

Published Jul 17, 2026

HighCVSS 7.5

Soupwebsocketextensiondeflate: libsoup: libsoup: websocket permessage-deflate unbounded decompression remote denial of service

Mariner

Affected productsazl3 libsoup 3.4.4-16 on Azure Linux 3.0

CVE-2026-15709

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-15712

Published Jul 17, 2026

MediumCVSS 5.9

Soupclientmessageiohttp2: libsoup3: libsoup: http/2 goaway frame parsing heap buffer over-read via invalid nul-termination assumption

Mariner

Affected productsazl3 libsoup 3.4.4-16 on Azure Linux 3.0

CVE-2026-15712

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-15714

Published Jul 17, 2026

MediumCVSS 6.5

Libsoup: soupmultipartinputstream: libsoup: out-of-bounds read in soup_multipart_input_stream_read_headers via an oversized multipart boundary string

Mariner

Affected productsazl3 libsoup 3.4.4-16 on Azure Linux 3.0

CVE-2026-15714

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-15713

Published Jul 17, 2026

MediumCVSS 5.9

Libsoup: soupcache: libsoup: http/2 frame window exhaustion remote denial of service via memory leak

Mariner

Affected productsazl3 libsoup 3.4.4-16 on Azure Linux 3.0

CVE-2026-15713

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-15711

Published Jul 17, 2026

HighCVSS 7.5

Libsoup: soupwebsocketconnection: libsoup: websocket remote denial of service via oversized control frame protocol violation

Mariner

Affected productsazl3 libsoup 3.4.4-16 on Azure Linux 3.0

CVE-2026-15711

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-15776

Published Jul 16, 2026

Severity not listed

Chromium: CVE-2026-15776 Type Confusion in V8

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions150.0.4078.80

Vendor guidance

Release Notes

CVE-2026-15776

Read the vendor advisory Watch this product

Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

Read how SecurityAlert collects and checks threat intelligence.