Search threats, CVEs… ⌘K
Vendor advisories

Microsoft Security Response Center

Browse 4,344 advisories from this official source. Search by product, CVE, severity, or advisory ID.

Current Checked 2 hours ago Checked every 6 hours
All vendor sources Official source

4,344 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2026-87612
HighCVSS 8.8

Type confusion in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Mariner

Affected productsazl3 nodejs 24.20.0-1 on Azure Linux 3.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2026-87612
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-87536
HighCVSS 8.8

Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Mariner

Affected productsazl3 nodejs 24.20.0-1 on Azure Linux 3.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2026-87536
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-87625
HighCVSS 8.8

Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted Chrome extension. (Chromium security severity: Medium)

Mariner

Affected productsazl3 nodejs 24.20.0-1 on Azure Linux 3.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2026-87625
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-87601
MediumCVSS 7.5

Race condition in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)

Mariner

Affected productsazl3 nodejs 24.20.0-1 on Azure Linux 3.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2026-87601
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-85507
CriticalCVSS 9.8

ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc_info in ipmi-oem/ipmi-oem-dell.c (cmc-info subcommand to dell get-system-info).

Mariner

Affected productsazl3 freeipmi 1.6.18-1 on Azure Linux 3.0
Fixed versions1.6.19-1
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2026-85507
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-85506
CriticalCVSS 9.8

ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _get_dell_system_info_idrac_info in ipmi-oem/ipmi-oem-dell.c (idrac-info subcommand to dell get-system-info).

Mariner

Affected productsazl3 freeipmi 1.6.18-1 on Azure Linux 3.0
Fixed versions1.6.19-1
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2026-85506
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-85505
MediumCVSS 7.5

ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer over-read in ipmi_oem_fujitsu_get_sel_entry_long_text in ipmi-oem/ipmi-oem-fujitsu.c when a BMC provides a short response, a different vulnerability than CVE-2026-50031 (which has different affected versions).

Mariner

Affected productsazl3 freeipmi 1.6.18-1 on Azure Linux 3.0
Fixed versions1.6.19-1
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2026-50031CVE-2026-85505
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-85508
CriticalCVSS 9.8

ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc_ipv6_info in ipmi-oem/ipmi-oem-dell.c (cmc-ipv6-info subcommand to dell get-system-info).

Mariner

Affected productsazl3 freeipmi 1.6.18-1 on Azure Linux 3.0
Fixed versions1.6.19-1
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2026-85508
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-85504
CriticalCVSS 9.8

FreeIPMI before 1.6.19 has a stack-based buffer overflow in _ipmi_sel_oem_fujitsu_get_sel_entry_long_text in libfreeipmi/sel/ipmi-sel-string-fujitsu-irmc-common.c via malformed Fujitsu SEL long-text responses.

Mariner

Affected productsazl3 freeipmi 1.6.18-1 on Azure Linux 3.0
Fixed versions1.6.19-1
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2026-85504
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-75538
High

A Signed Length Overflow in Erlang/OTP's inet TCP Driver Overflows the Receive Buffer Into BEAM VM Memory From an Unauthenticated Peer

Mariner

Affected productsazl3 erlang 26.2.5.21-4 on Azure Linux 3.0, azl3 erlang 26.2.5.21-6 on Azure Linux 3.0
Fixed versions26.2.5.21-6
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2026-75538
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

Read how SecurityAlert collects and checks threat intelligence.