Vendor advisories

Microsoft Security Response Center

Browse 17,484 advisories from this official source. Search by product, CVE, severity, or advisory ID.

Current Checked 3 hours ago Checked every 6 hours

17,484 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results

Microsoft Security Response CenterCVE-2026-64318

Updated Jul 27, 2026

MediumCVSS 5.5

partitions: aix: bound the pp_count scan to the ppe array

Mariner

Affected productsazl3 kernel 6.6.144.1-1 on Azure Linux 3.0

Fixed versions6.6.145.2-1

Vendor guidance

CBL-Mariner Releases

CVE-2026-64318

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-64444

Updated Jul 27, 2026

MediumCVSS 5.5

staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop

Mariner

Affected productsazl3 kernel 6.6.144.1-1 on Azure Linux 3.0

Fixed versions6.6.145.2-1

Vendor guidance

CBL-Mariner Releases

CVE-2026-64444

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-64323

Updated Jul 27, 2026

MediumCVSS 5.5

udf: validate VAT header length against the VAT inode size

Mariner

Affected productsazl3 kernel 6.6.144.1-1 on Azure Linux 3.0

Fixed versions6.6.145.2-1

Vendor guidance

CBL-Mariner Releases

CVE-2026-64323

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-64227

Updated Jul 27, 2026

HighCVSS 7.1

ACPI: driver: Check ACPI_COMPANION() against NULL during probe

Mariner

Affected productsazl3 kernel 6.6.144.1-1 on Azure Linux 3.0

CVE-2026-64227

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-64237

Updated Jul 27, 2026

MediumCVSS 5.5

Input: elan_i2c - validate firmware size before use

Mariner

Affected productsazl3 kernel 6.6.144.1-1 on Azure Linux 3.0

CVE-2026-64237

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-64219

Updated Jul 27, 2026

HighCVSS 7.1

drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async

Mariner

Affected productsazl3 kernel 6.6.144.1-1 on Azure Linux 3.0

CVE-2026-64219

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-56159

Updated Jul 27, 2026

CriticalCVSS 9.8

DHCP Server Service Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9020, 10.0.20348.5386, 10.0.26100.33158, 10.0.14393.9339

Vendor guidance

Install KB5099538. Install KB5099540. Install KB5099536. Install KB5099535. Install KB5099445. Install KB5099444.

CVE-2026-56159

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-50697

Updated Jul 27, 2026

HighCVSS 7.8

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9020, 10.0.20348.5386, 10.0.19044.7548, 10.0.19045.7548

Vendor guidance

Install KB5099538. Install KB5099540. Install KB5099539. Install KB5099536. Install KB5101650. Install KB5101649. Install KB5099535. Install KB5099445. Install KB5099444.

CVE-2026-50697

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-50343

Updated Jul 27, 2026

HighCVSS 7.8

Microsoft Install Service Elevation of Privilege Vulnerability

Improper privilege management in Microsoft Install Service allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9020, 10.0.20348.5386, 10.0.19044.7548, 10.0.19045.7548

Vendor guidance

Install KB5099538. Install KB5099540. Install KB5099539. Install KB5099536. Install KB5101650. Install KB5101649.

CVE-2026-50343

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-16461

Updated Jul 27, 2026

MediumCVSS 6.5

Rpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbdump() short-mode version-list formatting

Mariner

Affected productsazl3 rpcbind 1.2.6-1 on Azure Linux 3.0

Fixed versions1.2.9-1

Vendor guidance

CBL-Mariner Releases

CVE-2026-16461

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-8450

Updated Jul 27, 2026

CriticalCVSS 9.1

HTTP::Daemon versions before 6.17 for Perl allow OS command injection via send_file()

Mariner

Affected productsazl3 perl-HTTP-Daemon 6.16-1 on Azure Linux 3.0

Fixed versions6.16-2

Vendor guidance

CBL-Mariner Releases

CVE-2026-8450

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-16277

Updated Jul 27, 2026

MediumCVSS 6.5

Rpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbaddrlist()

Mariner

Affected productsazl3 rpcbind 1.2.6-1 on Azure Linux 3.0

Fixed versions1.2.9-1

Vendor guidance

CBL-Mariner Releases

CVE-2026-16277

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2025-41244

Updated Jul 25, 2026

HighCVSS 7.8

VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)

Mariner

Affected productsazl3 open-vm-tools 12.3.5-2 on Azure Linux 3.0

Fixed versions12.3.5-3

Vendor guidance

CBL-Mariner Releases

CVE-2025-41244 CVE-2025-41245 CVE-2025-41246

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-6390

Published Jul 25, 2026

MediumCVSS 6.8

Nano: gnu nano: arbitrary memory writes, information disclosure, or denial of service via format string vulnerability in error handling.

Mariner

Affected productsazl3 nano 6.4-3 on Azure Linux 3.0

CVE-2026-6390

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-16807

Published Jul 25, 2026

Severity not listed

Chromium: CVE-2026-16807 Out of bounds write in Codecs

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions150.0.4078.99

Vendor guidance

Release Notes

CVE-2026-16807

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-16806

Published Jul 25, 2026

Severity not listed

Chromium: CVE-2026-16806 Use after free in WebMCP

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions150.0.4078.99

Vendor guidance

Release Notes

CVE-2026-16806

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-16805

Published Jul 25, 2026

Severity not listed

Chromium: CVE-2026-16805 Use after free in Blink

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions150.0.4078.99

Vendor guidance

Release Notes

CVE-2026-16805

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-16804

Published Jul 25, 2026

Severity not listed

Chromium: CVE-2026-16804 Use after free in Input

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions150.0.4078.99

Vendor guidance

Release Notes

CVE-2026-16804

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-62835

Updated Jul 24, 2026

CriticalCVSS 9.3

Azure Portal Information Disclosure Vulnerability

Improper authorization in Azure Portal allows an unauthorized attacker to disclose information over a network.

Affected productsAzure Portal

CVE-2026-62835

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-48561

Updated Jul 24, 2026

Critical

Microsoft Edge Copilot Remote Code Execution Vulnerability

Improper neutralization of special elements used in a command ('command injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to execute code over a network.

Affected productsMicrosoft Edge Copilot for Android, Microsoft Edge Copilot for IOS

Vendor guidance

Release Notes

CVE-2026-48561

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-57990

Published Jul 24, 2026

HighCVSS 7.4

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

Files or directories accessible to external parties in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions150.0.4078.99

Vendor guidance

Release Notes

CVE-2026-57990

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-57989

Published Jul 24, 2026

HighCVSS 7.4

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions150.0.4078.99

Vendor guidance

Release Notes

CVE-2026-57989

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-57978

Published Jul 24, 2026

HighCVSS 5.4

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions150.0.4078.99

Vendor guidance

Release Notes

CVE-2026-57978

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-16424

Published Jul 23, 2026

Severity not listed

Chromium: CVE-2026-16424 Use after free in GPU

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions150.0.4078.96

Vendor guidance

Release Notes

CVE-2026-16424

Read the vendor advisory Watch this product

Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources