Browse 17,705 advisories from this official source. Search by product, CVE, severity, or advisory ID.
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
Improper authentication in Azure Key Vault allows an unauthorized attacker to elevate privileges over a network.
Improper access control in Azure App Service allows an unauthorized attacker to elevate privileges over a network.
Missing authorization in Azure DNS allows an unauthorized attacker to elevate privileges over a network.
Server-side request forgery (ssrf) in Data Quality allows an unauthorized attacker to elevate privileges over a network.
Improper authentication in Microsoft Exchange Online allows an unauthorized attacker to perform tampering over a network.
Server-side request forgery (ssrf) in Azure AI Search allows an authorized attacker to elevate privileges over a network.
Heap-based buffer overflow in Microsoft Account allows an unauthorized attacker to execute code over a network.
Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.
Improper authorization in Azure Red Hat OpenShift (ARO) allows an authorized attacker to elevate privileges over a network.
Improper input validation in Microsoft Surface allows an authorized attacker to execute code over a network.
Deserialization of untrusted data in M365 Copilot allows an authorized attacker to execute code over a network.
Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose information over a network.
Improper access control in Azure API Management (APIM) allows an authorized attacker to execute code over a network.
Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.
Install KB5099536. Install KB5101650. Install KB5101649.
Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.
Install KB5099538. Install KB5099540. Install KB5099539. Install KB5099536. Install KB5101650. Install KB5101649. Install KB5099535.
Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.
Install KB5099538. Install KB5099540. Install KB5099539. Install KB5099536. Install KB5101650. Install KB5099535. Install KB5101649.
Mariner
CBL-Mariner Releases
Mariner
CBL-Mariner Releases
Mariner
CBL-Mariner Releases
Mariner
CBL-Mariner Releases
Mariner
CBL-Mariner Releases
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
Install KB5099538. Install KB5099540. Install KB5099539. Install KB5099536. Install KB5101650. Install KB5099414. Install KB5101649. Install KB5099535. Install KB5099445. Install KB5099444.
Loop with unreachable exit condition ('infinite loop') in Azure Active Directory allows an unauthorized attacker to deny service over a network.
Release Notes Install KB5101014. Install KB5101002. Install KB5101007. Install KB5101009. Install KB5101011. Install KB5101008. Install KB5101010. Install KB5101006. Install KB5100989. Install KB5099535. Install KB510...
Deserialization of untrusted data in Azure Active Directory allows an unauthorized attacker to deny service over a network.
Release Notes Install KB5101014. Install KB5101002. Install KB5101007. Install KB5101009. Install KB5101011. Install KB5101008. Install KB5101010. Install KB5101006. Install KB5100989. Install KB5099535. Install KB510...
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.