Search threats, CVEs… ⌘K
Vendor advisories

Microsoft Security Response Center

Browse 15,972 advisories from this official source. Search by product, CVE, severity, or advisory ID.

Current Checked 6 hours ago Checked every 6 hours
All vendor sources Official source

15,972 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2025-38331
MediumCVSS 5.5

net: ethernet: cortina: Use TOE/TSO on all TCP

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.92.2-2 on Azure Linux 3.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1
Fixed versions6.6.96.1-1
Vendor guidance

CBL-Mariner Releases Release Notes

CVE-2025-38331
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-85046
Severity not listed

Chromium: CVE-2026-85046 Type confusion in V8

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Google is aware that an exploit for CVE-2026-85046 exists in the wild.

Affected productsMicrosoft Edge (Chromium-based)
Fixed versions152.0.4191.62
Vendor guidance

Release Notes

CVE-2026-85046
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-55554
MediumCVSS 5.3

pytorch v2.8.0 was discovered to contain an integer overflow in the component torch.nan_to_num-.long().

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 pytorch 2.0.0-9 on CBL Mariner 2.0, azl3 pytorch 2.2.2-9 on Azure Linux 3.0, cbl2 pytorch 2.0.0-12 on CBL Mariner 2.0, cbl2 pytorch 2.0.0-14 on CBL Mariner 2.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2025-55554
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-46394
LowCVSS 3.2

In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 busybox 1.36.1-14 on Azure Linux 3.0, azl3 busybox 1.36.1-15 on Azure Linux 3.0, azl3 busybox 1.36.1-17 on Azure Linux 3.0, azl3 busybox 1.36.1-18 on Azure Linux 3.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2025-46394
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-1180
LowCVSS 3.1

GNU Binutils ld elf-eh-frame.c _bfd_elf_write_section_eh_frame memory corruption

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 gdb 11.2-6 on CBL Mariner 2.0, cbl2 binutils 2.37-15 on CBL Mariner 2.0, cbl2 binutils 2.37-16 on CBL Mariner 2.0, azl3 gdb 13.2-5 on Azure Linux 3.0
Fixed versions8.0.4-5, 8.0.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2025-1180
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-73024
HighCVSS 7.8

Windows Services for NFS ONCRPC XDR Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725
Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-73024
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-69777
HighCVSS 8.0

Windows DHCP Client Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network.

Affected productsWindows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems
Fixed versions10.0.26200.9445, 10.0.26100.9445, 10.0.28000.2954
Vendor guidance

Install KB5124008. Install KB5124012.

CVE-2026-69777
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-69508
HighCVSS 7.8

Windows MIDI Service Module Elevation of Privileges Vulnerability

Stack-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

Affected productsWindows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 version 26H1 for x64-based Systems
Fixed versions10.0.26200.9445, 10.0.26100.9445, 10.0.28000.2954
Vendor guidance

Install KB5124008. Install KB5124012.

CVE-2026-69508
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-69492
HighCVSS 7.0

Windows Partition Management Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725
Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-69492
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-64901
HighCVSS 8.8

Microsoft SharePoint Server Remote Code Execution Vulnerability

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Affected productsMicrosoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition
Fixed versions16.0.5565.1001, 16.0.10417.20198, 16.0.19725.20522
Vendor guidance

Install KB5002905. Install KB5002906. Install KB5002894. Install KB5002896. Install KB5002893.

CVE-2026-64901
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-62693
HighCVSS 7.0

Windows MIDI Service Module Elevation of Privileges Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

Affected productsWindows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems
Fixed versions10.0.26200.9168, 10.0.26200.9106, 10.0.26100.9168, 10.0.26100.9106
Vendor guidance

Install KB5121003. Install KB5120994. Install KB5121000.

CVE-2026-62693
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-28960
HighCVSS 8.2

An issue was discovered in Mbed TLS 2.18.0 through 2.28.x before 2.28.8 and 3.x before 3.6.0 and Mbed Crypto. The PSA Crypto API mishandles shared memory.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 hvloader 1.0.1-6 on CBL Mariner 2.0, cbl2 hvloader 1.0.1-5 on CBL Mariner 2.0, cbl2 hvloader 1.0.1-5 on CBL-Mariner 2.0
Fixed versions1.0.1-6
Vendor guidance

CBL-Mariner Releases

CVE-2024-28960
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources