Search threats, CVEs… ⌘K
Vendor advisories

Microsoft Security Response Center

Browse 17,484 advisories from this official source. Search by product, CVE, severity, or advisory ID.

Current Checked 32 minutes ago Checked every 6 hours
All vendor sources Official source

17,484 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2026-62870
HighCVSS 8.8

Microsoft Excel Remote Code Execution Vulnerability

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Affected productsMicrosoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems
Fixed versionshttps://aka.ms/OfficeSecurityReleases, 16.0.5561.1001
Vendor guidance

Click to Run Install KB5002886.

CVE-2026-62870
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-18019
Severity not listed

Chromium: CVE-2026-18019 Side-channel information leakage in Media

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)
Fixed versions151.0.4129.59
Vendor guidance

Release Notes

CVE-2026-18019
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-18018
Severity not listed

Chromium: CVE-2026-18018 Inappropriate implementation in Updater

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)
Fixed versions151.0.4129.59
Vendor guidance

Release Notes

CVE-2026-18018
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-18016
Severity not listed

Chromium: CVE-2026-18016 Insufficient policy enforcement in Chrome for iOS

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)
Fixed versions151.0.4129.59
Vendor guidance

Release Notes

CVE-2026-18016
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-18014
Severity not listed

Chromium: CVE-2026-18014 Insufficient validation of untrusted input in DevTools

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)
Fixed versions151.0.4129.59
Vendor guidance

Release Notes

CVE-2026-18014
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-18013
Severity not listed

Chromium: CVE-2026-18013 Inappropriate implementation in Chrome for iOS

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)
Fixed versions151.0.4129.59
Vendor guidance

Release Notes

CVE-2026-18013
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-18011
Severity not listed

Chromium: CVE-2026-18011 Inappropriate implementation in Chrome for iOS

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)
Fixed versions151.0.4129.59
Vendor guidance

Release Notes

CVE-2026-18011
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-18010
Severity not listed

Chromium: CVE-2026-18010 Inappropriate implementation in Passwords

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)
Fixed versions151.0.4129.59
Vendor guidance

Release Notes

CVE-2026-18010
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-18009
Severity not listed

Chromium: CVE-2026-18009 Insufficient validation of untrusted input in Passwords

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)
Fixed versions151.0.4129.59
Vendor guidance

Release Notes

CVE-2026-18009
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-18008
Severity not listed

Chromium: CVE-2026-18008 Inappropriate implementation in Settings

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)
Fixed versions151.0.4129.59
Vendor guidance

Release Notes

CVE-2026-18008
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources