Browse 15,972 advisories from this official source. Search by product, CVE, severity, or advisory ID.
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network.
Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally.
Click to Run Release Notes Install KB5002897.
Heap-based buffer overflow in Universal Plug and Play (upnp.dll) allows an authorized attacker to elevate privileges locally.
Install KB5099538. Install KB5099540. Install KB5099539. Install KB5099536. Install KB5101650. Install KB5101649.
Use after free in Windows Brokering File System allows an authorized attacker to elevate privileges locally.
Install KB5099536. Install KB5101650. Install KB5101649.
Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network.
Install KB5099538. Install KB5099540. Install KB5099539. Install KB5099536. Install KB5101650. Install KB5099414. Install KB5099535. Install KB5099445. Install KB5099444. Install KB5101649.
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Release Notes Click to Run Install KB5002884. Install KB5002903.
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Release Notes
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Release Notes
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Release Notes
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Release Notes
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Release Notes
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Release Notes
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Release Notes
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Release Notes
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Release Notes
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Release Notes
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Release Notes
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Release Notes
Mariner
Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network.
Install KB5102339. Install KB5102336. Install KB5102334. Install KB5102337. Install KB5102335. Install KB5101347. Install KB5102333. Install KB5101346. Install KB5102340. Install KB5102338.
Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network.
Install KB5102333. Install KB5101346.
Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.
The following mitigating factors might be helpful in your situation: Customers who cannot immediately install the security update can take one of the following actions, depending on their environment: Block inbound tr...
Server-side request forgery (ssrf) in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network.
Server-side request forgery (ssrf) in Microsoft Copilot in Azure allows an authorized attacker to disclose information over a network.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.