Search threats, CVEs… ⌘K
Vendor advisories

Microsoft Security Response Center

Browse 17,484 advisories from this official source. Search by product, CVE, severity, or advisory ID.

Current Checked 3 hours ago Checked every 6 hours
All vendor sources Official source

17,484 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2026-17669
Severity not listed

Chromium: CVE-2026-17669 Inappropriate implementation in Chrome for iOS

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)
Fixed versions151.0.4129.59
Vendor guidance

Release Notes

CVE-2026-17669
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-17664
Severity not listed

Chromium: CVE-2026-17664 Insufficient validation of untrusted input in Loader

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)
Fixed versions151.0.4129.59
Vendor guidance

Release Notes

CVE-2026-17664
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-17663
Severity not listed

Chromium: CVE-2026-17663 Insufficient validation of untrusted input in GPU

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)
Fixed versions151.0.4129.59
Vendor guidance

Release Notes

CVE-2026-17663
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-17662
Severity not listed

Chromium: CVE-2026-17662 Insufficient policy enforcement in Prefetch

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)
Fixed versions151.0.4129.59
Vendor guidance

Release Notes

CVE-2026-17662
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-17660
Severity not listed

Chromium: CVE-2026-17660 Insufficient validation of untrusted input in Network

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)
Fixed versions151.0.4129.59
Vendor guidance

Release Notes

CVE-2026-17660
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-17659
Severity not listed

Chromium: CVE-2026-17659 Inappropriate implementation in SiteIsolation

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)
Fixed versions151.0.4129.59
Vendor guidance

Release Notes

CVE-2026-17659
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-17655
Severity not listed

Chromium: CVE-2026-17655 Insufficient validation of untrusted input in ANGLE

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)
Fixed versions151.0.4129.59
Vendor guidance

Release Notes

CVE-2026-17655
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-17651
Severity not listed

Chromium: CVE-2026-17651 Insufficient validation of untrusted input in Dawn

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)
Fixed versions151.0.4129.59
Vendor guidance

Release Notes

CVE-2026-17651
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-55129
CriticalCVSS 7.8

Microsoft Office Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

Affected productsMicrosoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems
Fixed versionshttps://aka.ms/OfficeSecurityReleases, 16.111.26071215, 16.0.5561.1000
Vendor guidance

Click to Run Release Notes Install KB5002887.

CVE-2026-55129
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources