Search threats, CVEs… ⌘K
Vendor advisories

Microsoft Security Response Center

Browse 15,972 advisories from this official source. Search by product, CVE, severity, or advisory ID.

Current Checked about an hour ago Checked every 6 hours
All vendor sources Official source

15,972 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2026-31615
MediumCVSS 5.5

usb: gadget: renesas_usb3: validate endpoint index in standard request handlers

Mariner

Affected productsazl3 kernel 6.6.130.1-3 on Azure Linux 3.0, azl3 kernel 6.6.134.1-2 on Azure Linux 3.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
Fixed versions6.6.137.1-1
Vendor guidance

CBL-Mariner Releases Release Notes

CVE-2026-31615
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-35238
MediumCVSS 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Mariner

Affected productscbl2 mysql 8.0.45-3 on CBL-Mariner 2.0, azl3 mysql 8.0.45-2 on Azure Linux 3.0, cbl2 mysql 8.0.45-3 on CBL Mariner 2.0
Fixed versions8.0.46-1
Vendor guidance

Release Notes CBL-Mariner Releases

CVE-2026-35238
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-35237
MediumCVSS 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Mariner

Affected productscbl2 mysql 8.0.45-3 on CBL Mariner 2.0, cbl2 mysql 8.0.45-3 on CBL-Mariner 2.0, azl3 mysql 8.0.45-2 on Azure Linux 3.0
Fixed versions8.0.46-1
Vendor guidance

CBL-Mariner Releases Release Notes

CVE-2026-35237
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-35236
MediumCVSS 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Mariner

Affected productscbl2 mysql 8.0.45-3 on CBL-Mariner 2.0, azl3 mysql 8.0.45-2 on Azure Linux 3.0, cbl2 mysql 8.0.45-3 on CBL Mariner 2.0
Fixed versions8.0.46-1
Vendor guidance

Release Notes CBL-Mariner Releases

CVE-2026-35236
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-25645
MediumCVSS 4.4

Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function

Mariner

Affected productscbl2 python-requests 2.27.1-8 on CBL-Mariner 2.0, azl3 python-requests 2.31.0-3 on Azure Linux 3.0, cbl2 python-requests 2.27.1-8 on CBL Mariner 2.0, azl3 python-requests 2.31.0-4 on Azure Linux 3.0
Fixed versions2.27.1-9, 2.31.0-4
Vendor guidance

Release Notes CBL-Mariner Releases

CVE-2026-25645
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-34308
MediumCVSS 6.5

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: JSON). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Mariner

Affected productscbl2 mysql 8.0.45-3 on CBL Mariner 2.0, cbl2 mysql 8.0.45-3 on CBL-Mariner 2.0, azl3 mysql 8.0.45-2 on Azure Linux 3.0
Fixed versions8.0.46-1
Vendor guidance

CBL-Mariner Releases Release Notes

CVE-2026-34308
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-29111
MediumCVSS 5.5

systemd: Local unprivileged user can trigger an assert

Mariner

Affected productscbl2 systemd-bootstrap 250.3-13 on CBL Mariner 2.0, azl3 systemd-bootstrap 250.3-18 on Azure Linux 3.0, cbl2 systemd-bootstrap 250.3-14 on CBL Mariner 2.0, azl3 systemd-bootstrap 250.3-19 on Azure Linux 3.0
Fixed versions250.3-14, 250.3-19
Vendor guidance

CBL-Mariner Releases Release Notes

CVE-2026-29111
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-34304
MediumCVSS 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Mariner

Affected productsazl3 mysql 8.0.45-2 on Azure Linux 3.0, cbl2 mysql 8.0.45-3 on CBL Mariner 2.0, cbl2 mysql 8.0.45-3 on CBL-Mariner 2.0
Fixed versions8.0.46-1
Vendor guidance

CBL-Mariner Releases Release Notes

CVE-2026-34304
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-34303
MediumCVSS 6.5

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Mariner

Affected productsazl3 mysql 8.0.45-2 on Azure Linux 3.0, cbl2 mysql 8.0.45-3 on CBL-Mariner 2.0, cbl2 mysql 8.0.45-3 on CBL Mariner 2.0
Fixed versions8.0.46-1
Vendor guidance

CBL-Mariner Releases Release Notes

CVE-2026-34303
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-34293
MediumCVSS 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.0-8.0.45. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Mariner

Affected productscbl2 mysql 8.0.45-3 on CBL Mariner 2.0, cbl2 mysql 8.0.45-3 on CBL-Mariner 2.0, azl3 mysql 8.0.45-2 on Azure Linux 3.0
Fixed versions8.0.46-1
Vendor guidance

CBL-Mariner Releases Release Notes

CVE-2026-34293
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-33055
Medium

tar-rs incorrectly ignores PAX size headers if header size is nonzero

Mariner

Affected productscbl2 kata-containers 3.2.0.azl2-7 on CBL Mariner 2.0, cbl2 kata-containers-cc 3.2.0.azl2-8 on CBL Mariner 2.0, azl3 kata-containers-cc 3.15.0.aks0-7 on Azure Linux 3.0, cbl2 rpm-ostree 2022.1-8 on CBL Mariner 2.0
Fixed versions2022.1-9, 0.22.0-1, 1.72.0-16, 1.75.0-28
Vendor guidance

CBL-Mariner Releases Release Notes

CVE-2026-33055
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-34278
MediumCVSS 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Mariner

Affected productscbl2 mysql 8.0.45-3 on CBL Mariner 2.0, azl3 mysql 8.0.45-2 on Azure Linux 3.0, cbl2 mysql 8.0.45-3 on CBL-Mariner 2.0
Fixed versions8.0.46-1
Vendor guidance

CBL-Mariner Releases Release Notes

CVE-2026-34278
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-34276
MediumCVSS 6.5

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Mariner

Affected productsazl3 mysql 8.0.45-2 on Azure Linux 3.0, cbl2 mysql 8.0.45-3 on CBL Mariner 2.0, cbl2 mysql 8.0.45-3 on CBL-Mariner 2.0
Fixed versions8.0.46-1
Vendor guidance

CBL-Mariner Releases Release Notes

CVE-2026-34276
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-33056
Medium

tar-rs: unpack_in can chmod arbitrary directories by following symlinks

Mariner

Affected productsazl3 kata-containers-cc 3.15.0.aks0-7 on Azure Linux 3.0, azl3 rpm-ostree 2024.4-6 on Azure Linux 3.0, azl3 rust 1.90.0-4 on Azure Linux 3.0, azl3 kata-containers-cc 3.15.0.aks0-8 on Azure Linux 3.0
Fixed versions1.72.0-16, 1.75.0-28, 1.90.0-7, 1.5.2-2
Vendor guidance

CBL-Mariner Releases Release Notes

CVE-2026-33056
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources