Search threats, CVEs… ⌘K
Vendor advisories

Microsoft Security Response Center

Browse 17,484 advisories from this official source. Search by product, CVE, severity, or advisory ID.

Current Checked 4 hours ago Checked every 6 hours
All vendor sources Official source

17,484 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2026-50648
HighCVSS 7.5

.NET Framework Denial of Service Vulnerability

Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network.

Affected products.NET 8.0 runtime installed on Linux, .NET 8.0 runtime installed on Mac OS, .NET 10.0 runtime installed on Linux, .NET 8.0 runtime installed on Windows
Fixed versions8.0.29, 10.0.10, 9.0.18, 17.12.22
Vendor guidance

Release Notes Install KB5104032. Install KB5104034. Install KB5104033. Install KB5101007. Install KB5101009. Install KB5101011. Install KB5101008. Install KB5101010. Install KB5101006. Install KB5100989. Install KB509...

CVE-2026-50648
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-50646
HighCVSS 7.8

.NET Framework Remote Code Execution Vulnerability

Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally.

Affected productsMicrosoft .NET Framework 4.8 on Windows Server 2012, Microsoft .NET Framework 4.8 on Windows Server 2016 (Server Core installation), Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for x64-based Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 22H2 for ARM64-based Systems
Fixed versions4.8.4803.0, 2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0, 2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0, 2.0.50727.8983 & 3.0.30729.8978 & 4.7.4143.0
Vendor guidance

Release Notes Install KB5101009. Install KB5101007. Install KB5101008. Install KB5101006. Install KB5099535. Install KB5100991. Install KB5100990. Install KB5101000. Install KB5101004. Install KB5101001. Install KB510...

CVE-2026-50646
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-50527
HighCVSS 7.5

.NET Framework Denial of Service Vulnerability

Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network.

Affected productsMicrosoft .NET Framework 4.8 on Windows Server 2016, Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for 32-bit Systems, Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for x64-based Systems, Microsoft .NET Framework 4.8 on Windows Server 2016 (Server Core installation)
Fixed versions4.8.4803.0, 2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0, 2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0, 2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0
Vendor guidance

Release Notes Install KB5101007. Install KB5101009. Install KB5101011. Install KB5101008. Install KB5101010. Install KB5101006. Install KB5100989. Install KB5099535. Install KB5100990. Install KB5100991. Install KB510...

CVE-2026-50527
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-47302
HighCVSS 7.5

.NET Denial of Service Vulnerability

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.

Affected products.NET 10.0 runtime installed on Windows, .NET 8.0 runtime installed on Windows, .NET 8.0 runtime installed on Mac OS, .NET 8.0 runtime installed on Linux
Fixed versions10.0.10, 8.0.29, 4.8.4803.0, 2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0
Vendor guidance

Release Notes Install KB5104034. Install KB5104032. Install KB5101007. Install KB5101011. Install KB5101008. Install KB5101009. Install KB5101010. Install KB5101006. Install KB5100989. Install KB5099535. Install KB510...

CVE-2026-47302
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-15771
Severity not listed

Chromium: CVE-2026-15771 Insufficient validation of untrusted input in Media

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)
Fixed versions150.0.4078.80
Vendor guidance

Release Notes

CVE-2026-15771
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-15769
Severity not listed

Chromium: CVE-2026-15769 Insufficient validation of untrusted input in Linux Toolkit Theming

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)
Vendor guidance

Release Notes

CVE-2026-15769
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-15778
Severity not listed

Chromium: CVE-2026-15778 Insufficient validation of untrusted input in Navigation

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)
Fixed versions150.0.4078.80
Vendor guidance

Release Notes

CVE-2026-15778
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources