Vendor advisories

Microsoft Security Response Center

Browse 15,985 advisories from this official source. Search by product, CVE, severity, or advisory ID.

Current Checked 4 hours ago Checked every 6 hours

15,985 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results

Microsoft Security Response CenterCVE-2026-18012

Published Jul 31, 2026

Severity not listed

Chromium: CVE-2026-18012 Use after free in PDFium

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions151.0.4129.59

Vendor guidance

Release Notes

CVE-2026-18012

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-18011

Published Jul 31, 2026

Severity not listed

Chromium: CVE-2026-18011 Inappropriate implementation in Chrome for iOS

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions151.0.4129.59

Vendor guidance

Release Notes

CVE-2026-18011

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-18010

Published Jul 31, 2026

Severity not listed

Chromium: CVE-2026-18010 Inappropriate implementation in Passwords

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions151.0.4129.59

Vendor guidance

Release Notes

CVE-2026-18010

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-18009

Published Jul 31, 2026

Severity not listed

Chromium: CVE-2026-18009 Insufficient validation of untrusted input in Passwords

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions151.0.4129.59

Vendor guidance

Release Notes

CVE-2026-18009

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-18008

Published Jul 31, 2026

Severity not listed

Chromium: CVE-2026-18008 Inappropriate implementation in Settings

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions151.0.4129.59

Vendor guidance

Release Notes

CVE-2026-18008

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-18007

Published Jul 31, 2026

Severity not listed

Chromium: CVE-2026-18007 Inappropriate implementation in Input

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions151.0.4129.59

Vendor guidance

Release Notes

CVE-2026-18007

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-18006

Published Jul 31, 2026

Severity not listed

Chromium: CVE-2026-18006 Inappropriate implementation in Google Lens

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions151.0.4129.59

Vendor guidance

Release Notes

CVE-2026-18006

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-18005

Published Jul 31, 2026

Severity not listed

Chromium: CVE-2026-18005 Inappropriate implementation in WebXR

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions151.0.4129.59

Vendor guidance

Release Notes

CVE-2026-18005

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-18004

Published Jul 31, 2026

Severity not listed

Chromium: CVE-2026-18004 Insufficient policy enforcement in Speech

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions151.0.4129.59

Vendor guidance

Release Notes

CVE-2026-18004

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-18003

Published Jul 31, 2026

Severity not listed

Chromium: CVE-2026-18003 Inappropriate implementation in Chrome for iOS

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions151.0.4129.59

Vendor guidance

Release Notes

CVE-2026-18003

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-18002

Published Jul 31, 2026

Severity not listed

Chromium: CVE-2026-18002 Insufficient validation of untrusted input in Google Lens

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions151.0.4129.59

Vendor guidance

Release Notes

CVE-2026-18002

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-18001

Published Jul 31, 2026

Severity not listed

Chromium: CVE-2026-18001 Inappropriate implementation in WebGL

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions151.0.4129.59

Vendor guidance

Release Notes

CVE-2026-18001

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-18000

Published Jul 31, 2026

Severity not listed

Chromium: CVE-2026-18000 Insufficient policy enforcement in USB

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions151.0.4129.59

Vendor guidance

Release Notes

CVE-2026-18000

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-17999

Published Jul 31, 2026

Severity not listed

Chromium: CVE-2026-17999 Incorrect security UI in PictureInPicture

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions151.0.4129.59

Vendor guidance

Release Notes

CVE-2026-17999

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-17998

Published Jul 31, 2026

Severity not listed

Chromium: CVE-2026-17998 Incorrect security UI in Extensions

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions151.0.4129.59

Vendor guidance

Release Notes

CVE-2026-17998

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-17997

Published Jul 31, 2026

Severity not listed

Chromium: CVE-2026-17997 Inappropriate implementation in Passwords

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions151.0.4129.59

Vendor guidance

Release Notes

CVE-2026-17997

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-17996

Published Jul 31, 2026

Severity not listed

Chromium: CVE-2026-17996 Inappropriate implementation in Browser

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions151.0.4129.59

Vendor guidance

Release Notes

CVE-2026-17996

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-17995

Published Jul 31, 2026

Severity not listed

Chromium: CVE-2026-17995 Out of bounds read in Dawn

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions151.0.4129.59

Vendor guidance

Release Notes

CVE-2026-17995

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-17994

Published Jul 31, 2026

Severity not listed

Chromium: CVE-2026-17994 Inappropriate implementation in Media

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions151.0.4129.59

Vendor guidance

Release Notes

CVE-2026-17994

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-17993

Published Jul 31, 2026

Severity not listed

Chromium: CVE-2026-17993 Race in Updater

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions151.0.4129.59

Vendor guidance

Release Notes

CVE-2026-17993

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-17992

Published Jul 31, 2026

Severity not listed

Chromium: CVE-2026-17992 Uninitialized Use in Skia

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions151.0.4129.59

Vendor guidance

Release Notes

CVE-2026-17992

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-17991

Published Jul 31, 2026

Severity not listed

Chromium: CVE-2026-17991 Insufficient validation of untrusted input in AI

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions151.0.4129.59

Vendor guidance

Release Notes

CVE-2026-17991

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-17990

Published Jul 31, 2026

Severity not listed

Chromium: CVE-2026-17990 Insufficient validation of untrusted input in WebAuthn

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions151.0.4129.59

Vendor guidance

Release Notes

CVE-2026-17990

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-17989

Published Jul 31, 2026

Severity not listed

Chromium: CVE-2026-17989 Type Confusion in V8

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions151.0.4129.59

Vendor guidance

Release Notes

CVE-2026-17989

Read the vendor advisory Watch this product

Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources