Vendor advisories
Microsoft Security Response Center
Browse 17,484 advisories from this official source. Search by product, CVE, severity, or advisory ID.
Checked 3 hours ago
Checked every 6 hours
17,484 advisories Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
RSS for these results
Microsoft Security Response Center CVE-2026-40691
Published Jul 23, 2026
Medium CVSS 7.5
Mariner
Affected products azl3 unbound 1.25.1-1 on Azure Linux 3.0
Fixed versions 1.25.2-1
Microsoft Security Response Center CVE-2026-55717
Published Jul 23, 2026
Medium CVSS 5.9
Mariner
Affected products azl3 unbound 1.25.1-1 on Azure Linux 3.0
Fixed versions 1.25.2-1
Microsoft Security Response Center CVE-2026-44621
Published Jul 23, 2026
Medium CVSS 5.9
Mariner
Affected products azl3 unbound 1.25.1-1 on Azure Linux 3.0
Fixed versions 1.25.2-1
Microsoft Security Response Center CVE-2026-56416
Published Jul 23, 2026
Medium CVSS 4.8
Mariner
Affected products azl3 unbound 1.25.1-1 on Azure Linux 3.0
Fixed versions 1.25.2-1
Microsoft Security Response Center CVE-2026-52863
Published Jul 23, 2026
Medium CVSS 5.9
Mariner
Affected products azl3 unbound 1.25.1-1 on Azure Linux 3.0
Fixed versions 1.25.2-1
Microsoft Security Response Center CVE-2026-55708
Published Jul 23, 2026
Low CVSS 3.1
Mariner
Affected products azl3 unbound 1.25.1-1 on Azure Linux 3.0
Fixed versions 1.25.2-1
Microsoft Security Response Center CVE-2026-44690
Published Jul 23, 2026
Medium CVSS 7.5
Mariner
Affected products azl3 unbound 1.25.1-1 on Azure Linux 3.0
Fixed versions 1.25.2-1
Microsoft Security Response Center CVE-2026-50248
Published Jul 23, 2026
Medium CVSS 6.5
Mariner
Affected products azl3 unbound 1.25.1-1 on Azure Linux 3.0
Fixed versions 1.25.2-1
Microsoft Security Response Center CVE-2026-50045
Published Jul 23, 2026
Medium CVSS 5.3
Mariner
Affected products azl3 unbound 1.25.1-1 on Azure Linux 3.0
Fixed versions 1.25.2-1
Microsoft Security Response Center CVE-2026-44687
Published Jul 23, 2026
Low CVSS 3.7
Mariner
Affected products azl3 unbound 1.25.1-1 on Azure Linux 3.0
Fixed versions 1.25.2-1
Microsoft Security Response Center CVE-2026-55973
Published Jul 23, 2026
Medium CVSS 7.5
Mariner
Affected products azl3 unbound 1.25.1-1 on Azure Linux 3.0
Fixed versions 1.25.2-1
Microsoft Security Response Center CVE-2026-62825
Published Jul 23, 2026
Critical CVSS 10.0
Improper authentication in Azure Key Vault allows an unauthorized attacker to elevate privileges over a network.
Affected products Azure Key Vault
Microsoft Security Response Center CVE-2026-58630
Published Jul 23, 2026
Critical CVSS 10.0
Improper access control in Azure App Service allows an unauthorized attacker to elevate privileges over a network.
Affected products Azure App Service for Linux
Microsoft Security Response Center CVE-2026-58275
Published Jul 23, 2026
Critical CVSS 10.0
Missing authorization in Azure DNS allows an unauthorized attacker to elevate privileges over a network.
Affected products Azure DNS
Microsoft Security Response Center CVE-2026-57106
Published Jul 23, 2026
Critical CVSS 10.0
Server-side request forgery (ssrf) in Data Quality allows an unauthorized attacker to elevate privileges over a network.
Affected products Microsoft Purview Data Governance
Microsoft Security Response Center CVE-2026-56191
Published Jul 23, 2026
Critical CVSS 10.0
Improper authentication in Microsoft Exchange Online allows an unauthorized attacker to perform tampering over a network.
Affected products Microsoft Exchange Online
Microsoft Security Response Center CVE-2026-56167
Published Jul 23, 2026
Critical CVSS 8.5
Server-side request forgery (ssrf) in Azure AI Search allows an authorized attacker to elevate privileges over a network.
Affected products Azure AI Search
Microsoft Security Response Center CVE-2026-56165
Published Jul 23, 2026
Critical CVSS 9.8
Heap-based buffer overflow in Microsoft Account allows an unauthorized attacker to execute code over a network.
Affected products Microsoft Account
Microsoft Security Response Center CVE-2026-56163
Published Jul 23, 2026
Critical CVSS 10.0
Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.
Affected products Azure Kubernetes Service
Microsoft Security Response Center CVE-2026-56160
Published Jul 23, 2026
Critical
Improper authorization in Azure Red Hat OpenShift (ARO) allows an authorized attacker to elevate privileges over a network.
Affected products Azure Red Hat OpenShift (ARO)
Microsoft Security Response Center CVE-2026-54120
Published Jul 23, 2026
Critical CVSS 9.9
Improper input validation in Microsoft Surface allows an authorized attacker to execute code over a network.
Affected products Surface Management Services
Microsoft Security Response Center CVE-2026-50517
Published Jul 23, 2026
Critical CVSS 9.9
Deserialization of untrusted data in M365 Copilot allows an authorized attacker to execute code over a network.
Affected products Microsoft 365 Copilot
Microsoft Security Response Center CVE-2026-49159
Published Jul 23, 2026
Critical CVSS 6.5
Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose information over a network.
Affected products Microsoft Graph
Microsoft Security Response Center CVE-2026-35425
Published Jul 23, 2026
Critical CVSS 8.0
Improper access control in Azure API Management (APIM) allows an authorized attacker to execute code over a network.
Affected products Azure API Management (APIM)
Before you act
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.
How we check our sources →