Vendor advisories

Microsoft Security Response Center

Browse 15,547 advisories from this official source. Search by product, CVE, severity, or advisory ID.

Current Checked 5 hours ago Checked every 6 hours

15,547 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results

Microsoft Security Response CenterCVE-2026-95360

Updated Oct 26, 2026

MediumCVSS 5.3

Chromium CVE-2026-95360: Race condition in Editing

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions154.0.4258.37, 154.0.4258.38

Vendor guidance

Release Notes

CVE-2026-95360

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-95359

Updated Oct 26, 2026

MediumCVSS 3.4

Chromium CVE-2026-95359: Uninitialized resource in GPU

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions154.0.4258.37, 154.0.4258.38

Vendor guidance

Release Notes

CVE-2026-95359

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-95358

Updated Oct 26, 2026

MediumCVSS 4.4

Chromium CVE-2026-95358: Incorrect authorization in Mobile

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions154.0.4258.37, 154.0.4258.38

Vendor guidance

Release Notes

CVE-2026-95358

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-95354

Updated Oct 26, 2026

MediumCVSS 8.3

Chromium CVE-2026-95354: Use after free in Verifier

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions154.0.4258.37, 154.0.4258.38

Vendor guidance

Release Notes

CVE-2026-95354

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-95353

Updated Oct 26, 2026

MediumCVSS 8.8

Chromium CVE-2026-95353: Use after free in Bindings

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions154.0.4258.37, 154.0.4258.38

Vendor guidance

Release Notes

CVE-2026-95353

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-95352

Updated Oct 26, 2026

LowCVSS 5.4

Chromium CVE-2026-95352: Incorrect authorization in DevTools

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions154.0.4258.37, 154.0.4258.38

Vendor guidance

Release Notes

CVE-2026-95352

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-95342

Updated Oct 26, 2026

LowCVSS 4.3

Chromium CVE-2026-95342: Missing authorization in V8

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions154.0.4258.37, 154.0.4258.38

Vendor guidance

Release Notes

CVE-2026-95342

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-95341

Updated Oct 26, 2026

MediumCVSS 8.3

Chromium CVE-2026-95341: Improper input validation in Desktop

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions154.0.4258.37, 154.0.4258.38

Vendor guidance

Release Notes

CVE-2026-95341

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-95340

Updated Oct 26, 2026

LowCVSS 4.3

Chromium CVE-2026-95340: Incorrect authorization in PictureInPicture

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions154.0.4258.37, 154.0.4258.38

Vendor guidance

Release Notes

CVE-2026-95340

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-95337

Updated Oct 26, 2026

MediumCVSS 5.4

Chromium CVE-2026-95337: UI misrepresentation in Messages

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions154.0.4258.37, 154.0.4258.38

Vendor guidance

Release Notes

CVE-2026-95337

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-95336

Updated Oct 26, 2026

MediumCVSS 6.5

Chromium CVE-2026-95336: Information leak in Transactions Platform

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions154.0.4258.37, 154.0.4258.38

Vendor guidance

Release Notes

CVE-2026-95336

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-95334

Updated Oct 26, 2026

LowCVSS 8.3

Chromium CVE-2026-95334: Incorrect reference resolution in WebProtect

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions154.0.4258.37, 154.0.4258.38

Vendor guidance

Release Notes

CVE-2026-95334

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-95333

Updated Oct 26, 2026

MediumCVSS 8.1

Chromium CVE-2026-95333: Use after free in Metrics

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions154.0.4258.37, 154.0.4258.38

Vendor guidance

Release Notes

CVE-2026-95333

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-95330

Updated Oct 26, 2026

MediumCVSS 6.5

Chromium CVE-2026-95330: Improper state validation in Downloads

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions154.0.4258.37, 154.0.4258.38

Vendor guidance

Release Notes

CVE-2026-95330

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-95328

Updated Oct 26, 2026

LowCVSS 6.5

Chromium CVE-2026-95328: Confused deputy in Mobile

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions154.0.4258.37, 154.0.4258.38

Vendor guidance

Release Notes

CVE-2026-95328

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-95327

Updated Oct 26, 2026

LowCVSS 6.5

Chromium CVE-2026-95327: Information leak in Networking

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions154.0.4258.37, 154.0.4258.38

Vendor guidance

Release Notes

CVE-2026-95327

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-95326

Updated Oct 26, 2026

LowCVSS 8.4

Chromium CVE-2026-95326: Incomplete cleanup in Bluetooth

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions154.0.4258.37, 154.0.4258.38

Vendor guidance

Release Notes

CVE-2026-95326

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-95325

Updated Oct 26, 2026

MediumCVSS 9.6

Chromium CVE-2026-95325: Use after free in ANGLE

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions154.0.4258.37, 154.0.4258.38

Vendor guidance

Release Notes

CVE-2026-95325

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-95320

Updated Oct 26, 2026

MediumCVSS 5.4

Chromium CVE-2026-95320: Missing authorization in Navigation

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions154.0.4258.37, 154.0.4258.38

Vendor guidance

Release Notes

CVE-2026-95320

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-95314

Updated Oct 26, 2026

MediumCVSS 8.1

Chromium CVE-2026-95314: Incorrect authorization in HID

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions154.0.4258.37, 154.0.4258.38

Vendor guidance

Release Notes

CVE-2026-95314

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-95309

Updated Oct 26, 2026

LowCVSS 5.4

Chromium CVE-2026-95309: UI misrepresentation in Mobile

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions154.0.4258.37, 154.0.4258.38

Vendor guidance

Release Notes

CVE-2026-95309

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-95308

Updated Oct 26, 2026

LowCVSS 3.4

Chromium CVE-2026-95308: Integer overflow in Metrics

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions154.0.4258.37, 154.0.4258.38

Vendor guidance

Release Notes

CVE-2026-95308

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-95302

Updated Oct 26, 2026

MediumCVSS 2.9

Chromium CVE-2026-95302: Incorrect authorization in WebAPKs

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions154.0.4258.37, 154.0.4258.38

Vendor guidance

Release Notes

CVE-2026-95302

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-95300

Updated Oct 26, 2026

MediumCVSS 4.8

Chromium CVE-2026-95300: Missing authorization in DevTools

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions154.0.4258.37, 154.0.4258.38

Vendor guidance

Release Notes

CVE-2026-95300

Read the vendor advisory Watch this product

Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources