Search threats, CVEs… ⌘K
Vendor advisories

Microsoft Security Response Center

Browse 15,547 advisories from this official source. Search by product, CVE, severity, or advisory ID.

Current Checked 6 hours ago Checked every 6 hours
All vendor sources Official source

15,547 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2026-95289
MediumCVSS 4.3

Chromium CVE-2026-95289: Incorrect authorization in Scroll

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)
Fixed versions154.0.4258.37, 154.0.4258.38
Vendor guidance

Release Notes

CVE-2026-95289
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-95287
MediumCVSS 5.4

Chromium CVE-2026-95287: Missing authorization in Navigation

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)
Fixed versions154.0.4258.37, 154.0.4258.38
Vendor guidance

Release Notes

CVE-2026-95287
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-95278
LowCVSS 8.4

Chromium CVE-2026-95278: Missing authorization in WakeLock

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)
Fixed versions154.0.4258.37, 154.0.4258.38
Vendor guidance

Release Notes

CVE-2026-95278
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-95275
MediumCVSS 6.5

Chromium CVE-2026-95275: Incorrect reference resolution in MediaStream

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)
Fixed versions154.0.4258.37, 154.0.4258.38
Vendor guidance

Release Notes

CVE-2026-95275
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21969
MediumCVSS 8.8

Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
Fixed versions6.6.85.1-2
Vendor guidance

Release Notes CBL-Mariner Releases

CVE-2025-21969
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21714
MediumCVSS 7.8

RDMA/mlx5: Fix implicit ODP use after free

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.96.2-2 on Azure Linux 3.0, azl3 kernel 6.6.104.2-4 on Azure Linux 3.0, azl3 kernel 6.6.112.1-2 on Azure Linux 3.0, azl3 kernel 6.6.117.1-1 on Azure Linux 3.0
Vendor guidance

Release Notes

CVE-2025-21714
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-91403
CriticalCVSS 9.1

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u511, 8u511-perf, 11.0.33, 17.0.21, 21.0.13, 25.0.5, 27.0.1; Oracle GraalVM for JDK: 17.0.21 and 21.0.13; Oracle GraalVM Enterprise Edition: 21.3.20. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in th

Mariner

Affected productsazl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0
Vendor guidance

Release Notes

CVE-2026-91403
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-114148
High

ASP.NET Core Elevation of Privilege Vulnerability

Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.

Affected products.NET 8.0 installed on Windows, .NET 8.0 installed on Linux, .NET 8.0 installed on Mac OS, .NET 9.0 installed on Windows
Fixed versions8.0.427, 9.0.320, 10.0.403, 11.0.100-rc.3
Vendor guidance

Release Notes Install KB5133964. Install KB5133965. Install KB5133966.

CVE-2026-114148
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-70197
HighCVSS 8.1

.NET and Visual Studio Remote Code Execution Vulnerability

Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.

Affected productsMicrosoft Visual Studio 2026 version 18.10, Microsoft Visual Studio 2022 version 17.14, .NET 10.0 runtime installed on Windows, .NET 8.0 runtime installed on Windows
Fixed versions18.10.4, 17.14.43, 10.0.13, 8.0.32
Vendor guidance

Release Notes Install KB5130036. Install KB5130034. Install KB5130035. Install KB5133964. Install KB5133965. Install KB5133966.

CVE-2026-70197
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources