Search threats, CVEs… ⌘K
Vendor advisories

Microsoft Security Response Center

Browse 15,972 advisories from this official source. Search by product, CVE, severity, or advisory ID.

Current Checked about an hour ago Checked every 6 hours
All vendor sources Official source

15,972 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2026-34271
MediumCVSS 6.5

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Mariner

Affected productsazl3 mysql 8.0.45-2 on Azure Linux 3.0, cbl2 mysql 8.0.45-3 on CBL Mariner 2.0, cbl2 mysql 8.0.45-3 on CBL-Mariner 2.0
Fixed versions8.0.46-1
Vendor guidance

CBL-Mariner Releases Release Notes

CVE-2026-34271
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-34270
MediumCVSS 6.5

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Mariner

Affected productsazl3 mysql 8.0.45-2 on Azure Linux 3.0, cbl2 mysql 8.0.45-3 on CBL Mariner 2.0, cbl2 mysql 8.0.45-3 on CBL-Mariner 2.0
Fixed versions8.0.46-1
Vendor guidance

CBL-Mariner Releases Release Notes

CVE-2026-34270
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-34267
MediumCVSS 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Mariner

Affected productsazl3 mysql 8.0.45-2 on Azure Linux 3.0, cbl2 mysql 8.0.45-3 on CBL Mariner 2.0, cbl2 mysql 8.0.45-3 on CBL-Mariner 2.0
Fixed versions8.0.46-1
Vendor guidance

CBL-Mariner Releases Release Notes

CVE-2026-34267
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-3219
Medium

pip doesn't reject concatenated ZIP and tar archives

Mariner

Affected productsazl3 python-pip 24.2-6 on Azure Linux 3.0, azl3 python-virtualenv 20.36.1-2 on Azure Linux 3.0, cbl2 python-virtualenv 20.26.6-3 on CBL Mariner 2.0, azl3 python-virtualenv 20.36.1-4 on Azure Linux 3.0
Fixed versions24.2-7, 20.36.1-3, 20.36.1-4, 24.2-8
Vendor guidance

CBL-Mariner Releases Release Notes

CVE-2026-3219
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-4424
HighCVSS 7.5

Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing

Mariner

Affected productscbl2 libarchive 3.6.1-8 on CBL Mariner 2.0, cbl2 libarchive 3.6.1-9 on CBL Mariner 2.0, azl3 libarchive 3.7.7-5 on Azure Linux 3.0, azl3 libarchive 3.7.7-4 on Azure Linux 3.0
Fixed versions3.6.1-10, 3.7.7-6
Vendor guidance

CBL-Mariner Releases Release Notes

CVE-2026-4424
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-4426
MediumCVSS 6.5

Libarchive: libarchive: denial of service via malformed iso file processing

Mariner

Affected productsazl3 libarchive 3.7.7-4 on Azure Linux 3.0, cbl2 libarchive 3.6.1-8 on CBL Mariner 2.0, cbl2 libarchive 3.6.1-9 on CBL Mariner 2.0, azl3 libarchive 3.7.7-5 on Azure Linux 3.0
Fixed versions3.6.1-10, 3.7.7-6
Vendor guidance

CBL-Mariner Releases Release Notes

CVE-2026-4426
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-6409
High

Denial of Service (DoS) vulnerability exists in the Protobuf PHP library during the parsing of untrusted input

Mariner

Affected productsazl3 mysql 8.0.45-2 on Azure Linux 3.0, cbl2 protobuf 3.17.3-5 on CBL Mariner 2.0, azl3 pytorch 2.2.2-12 on Azure Linux 3.0, azl3 protobuf 25.3-6 on Azure Linux 3.0
Fixed versions25.3-7
Vendor guidance

CBL-Mariner Releases Release Notes

CVE-2026-6409
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources