Search threats, CVEs… ⌘K
Vendor advisories

Microsoft Security Response Center

Browse 15,972 advisories from this official source. Search by product, CVE, severity, or advisory ID.

Current Checked 4 hours ago Checked every 6 hours
All vendor sources Official source

15,972 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2024-24791
HighCVSS 7.5

Denial of service due to improper 100-continue handling in net/http

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 golang 1.22.5-1 on Azure Linux 3.0, azl3 golang 1.27.0-1 on Azure Linux 3.0
Fixed versions1.22.5-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-24791
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-61725
HighCVSS 7.5

Excessive CPU consumption in ParseAddress in net/mail

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 golang 1.22.7-5 on CBL Mariner 2.0, azl3 golang 1.25.3-1 on Azure Linux 3.0, azl3 golang 1.25.5-1 on Azure Linux 3.0, azl3 golang 1.25.6-1 on Azure Linux 3.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2025-61725
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-4673
MediumCVSS 6.8

Sensitive headers not cleared on cross-origin redirect in net/http

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscm2 msft-golang 1.24.1-3 on CBL Mariner 2.0, azl3 golang 1.23.10-1 on Azure Linux 3.0, cbl2 golang 1.18.8-8 on CBL Mariner 2.0, cbl2 golang 1.22.7-4 on CBL Mariner 2.0
Fixed versions1.24.1-3, 1.23.10-1, 1.18.8-9, 1.22.7-5
Vendor guidance

CBL-Mariner Releases

CVE-2025-4673
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-58183
MediumCVSS 6.6

Unbounded allocation when parsing GNU sparse map in archive/tar

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 cri-o 1.22.3-16 on CBL Mariner 2.0, azl3 containerized-data-importer 1.57.0-16 on Azure Linux 3.0, cbl2 msft-golang 1.24.8-1 on CBL Mariner 2.0, cbl2 skopeo 1.14.2-12 on CBL Mariner 2.0
Fixed versions1.22.3-17, 1.57.0-17, 1.14.2-13, 2.62.0-10
Vendor guidance

CBL-Mariner Releases

CVE-2025-58183
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-58187
HighCVSS 7.5

Quadratic complexity when checking name constraints in crypto/x509

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 golang 1.25.5-1 on Azure Linux 3.0, cbl2 golang 1.18.8-10 on CBL Mariner 2.0, cbl2 golang 1.22.7-5 on CBL Mariner 2.0, cbl2 msft-golang 1.24.8-1 on CBL Mariner 2.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2025-58187
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-24540
CriticalCVSS 9.8

Improper handling of JavaScript whitespace in html/template

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 golang 1.18.8-7 on CBL Mariner 2.0, cbl2 golang 1.17.13-2 on CBL Mariner 2.0, cbl2 golang 1.21.6-1 on CBL Mariner 2.0, cbl2 msft-golang 1.20.11-1 on CBL Mariner 2.0
Fixed versions1.21.6-1, 1.20.11-1
Vendor guidance

CBL-Mariner Releases

CVE-2023-24540
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-89161
HighCVSS 7.4

In PCRE2 before 10.48, pcre2_jit_match mishandles a previously copied subject being passed in as a context. An incorrect free operation can occur.

Mariner

Affected productsazl3 rust 1.75.0-31 on Azure Linux 3.0, azl3 php 8.3.33-1 on Azure Linux 3.0, azl3 qtbase 6.6.3-5 on Azure Linux 3.0, azl3 rust 1.96.1-1 on Azure Linux 3.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2026-89161
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-85880
HighCVSS 7.8

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725
Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-85880
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-52676
MediumCVSS 5.5

bpf: Guard stack limits against 32bit overflow

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2023-52676
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-36898
HighCVSS 7.8

gpiolib: cdev: fix uninitialised kfifo

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2024-36898
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-27389
MediumCVSS 5.5

pstore: inode: Only d_invalidate() is needed

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2024-27389
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-41079
MediumCVSS 5.5

nvmet: always initialize cqe.result

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2024-41079
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-69321
HighCVSS 5.5

Windows Power Dependency Coordinator Tampering Vulnerability

Missing authentication for critical function in Windows Power Dependency Coordinator allows an authorized attacker to perform tampering locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725
Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-69321
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-55053
HighCVSS 7.8

Microsoft Excel Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Affected productsMicrosoft Office 365 for Mac, Office Online Server, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions
Fixed versions16.111.26071215, 16.0.10417.20175, https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001
Vendor guidance

Release Notes Click to Run Install KB5002884. Install KB5002886.

CVE-2026-55053
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources