Microsoft Security Response CenterCVE-2026-63954
MediumCVSS 5.5
hpfs: fix a crash if hpfs_map_dnode_bitmap fails
Mariner
Affected productsazl3 kernel 6.6.144.1-1 on Azure Linux 3.0
Microsoft Security Response Center
Browse 17,705 advisories from this official source. Search by product, CVE, severity, or advisory ID.
17,705 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
Microsoft Security Response CenterCVE-2026-63959
CriticalCVSS 9.8
usb: typec: tcpm/tcpci_maxim: validate header NDO against RX_BYTE_CNT
Mariner
Affected productsazl3 kernel 6.6.144.1-1 on Azure Linux 3.0
Microsoft Security Response CenterCVE-2026-64133
HighCVSS 7.1
ALSA: asihpi: Fix potential OOB array access at reading cache
Mariner
Affected productsazl3 kernel 6.6.144.1-1 on Azure Linux 3.0
Microsoft Security Response CenterCVE-2026-63832
HighCVSS 7.8
wifi: mt76: add wcid publish check in mt76_sta_add
Mariner
Affected productsazl3 kernel 6.6.144.1-1 on Azure Linux 3.0
Microsoft Security Response CenterCVE-2026-53375
HighCVSS 7.5
drm/amdgpu/vce: Prevent partial address patches
Mariner
Affected productsazl3 kernel 6.6.144.1-1 on Azure Linux 3.0
Microsoft Security Response CenterCVE-2026-63826
HighCVSS 7.1
fbdev: fix use-after-free in store_modes()
Mariner
Affected productsazl3 kernel 6.6.144.1-1 on Azure Linux 3.0
Microsoft Security Response CenterCVE-2026-63833
CriticalCVSS 9.8
ntfs3: reject direct userspace writes to reserved $LX* xattrs
Mariner
Affected productsazl3 kernel 6.6.144.1-1 on Azure Linux 3.0
Microsoft Security Response CenterCVE-2026-53376
CriticalCVSS 9.8
drm/amdkfd: Add upper bound check for num_of_nodes
Mariner
Affected productsazl3 kernel 6.6.144.1-1 on Azure Linux 3.0
Microsoft Security Response CenterCVE-2026-53403
CriticalCVSS 9.8
fbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_var
Mariner
Affected productsazl3 kernel 6.6.144.1-1 on Azure Linux 3.0
Microsoft Security Response CenterCVE-2026-63793
HighCVSS 7.5
ntfs: serialize volume label accesses
Mariner
Affected productsazl3 kernel 6.6.144.1-1 on Azure Linux 3.0
Microsoft Security Response CenterCVE-2026-53374
CriticalCVSS 9.8
drm/amdgpu: zero-initialize GART table on allocation
Mariner
Affected productsazl3 kernel 6.6.144.1-1 on Azure Linux 3.0
Microsoft Security Response CenterCVE-2024-35248
HighCVSS 7.3
Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability
According to the CVSS metrics, successful exploitation of this vulnerability could lead to some loss of confidentiality (C:L), integrity (I:L) and availability (A:L). What does that mean for this vulnerability? While we cannot rule out the impact to Confidentiality, Integrity,...
Affected productsMicrosoft Dynamics 365 Business Central 2023 Release Wave 1, Microsoft Dynamics 365 Business Central 2023 Release Wave 2, Microsoft Dynamics 365 Business Central 2024 Release Wave 1
Fixed versions23.0.18933, 24.0.19487
Vendor guidance
Install KB5038529. Install KB5038530. Install KB5038531.
Microsoft Security Response CenterCVE-2026-50650
HighCVSS 7.8
.NET Framework Elevation of Privilege Vulnerability
Improper control of generation of code ('code injection') in .NET Framework allows an unauthorized attacker to elevate privileges locally.
Affected productsMicrosoft .NET Framework 4.8 on Windows Server 2012, Microsoft .NET Framework 4.8 on Windows Server 2012 (Server Core installation), Microsoft .NET Framework 4.8 on Windows Server 2012 R2, Microsoft .NET Framework 4.8 on Windows Server 2016 (Server Core installation)
Fixed versions4.8.4803.0, 2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0, 2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0, 2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0
Vendor guidance
Release Notes Install KB5101009. Install KB5101011. Install KB5101007. Install KB5101008. Install KB5101010. Install KB5101006. Install KB5100989. Install KB5099535. Install KB5100990. Install KB5100991. Install KB510...
Microsoft Security Response CenterCVE-2026-50648
HighCVSS 7.5
.NET Framework Denial of Service Vulnerability
Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network.
Affected products.NET 8.0 runtime installed on Linux, .NET 8.0 runtime installed on Mac OS, .NET 10.0 runtime installed on Linux, .NET 8.0 runtime installed on Windows
Fixed versions8.0.29, 10.0.10, 9.0.18, 17.12.22
Vendor guidance
Release Notes Install KB5104032. Install KB5104034. Install KB5104033. Install KB5101007. Install KB5101009. Install KB5101011. Install KB5101008. Install KB5101010. Install KB5101006. Install KB5100989. Install KB509...
Microsoft Security Response CenterCVE-2026-50646
HighCVSS 7.8
.NET Framework Remote Code Execution Vulnerability
Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally.
Affected productsMicrosoft .NET Framework 4.8 on Windows Server 2012, Microsoft .NET Framework 4.8 on Windows Server 2016 (Server Core installation), Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for x64-based Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 22H2 for ARM64-based Systems
Fixed versions4.8.4803.0, 2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0, 2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0, 2.0.50727.8983 & 3.0.30729.8978 & 4.7.4143.0
Vendor guidance
Release Notes Install KB5101009. Install KB5101007. Install KB5101008. Install KB5101006. Install KB5099535. Install KB5100991. Install KB5100990. Install KB5101000. Install KB5101004. Install KB5101001. Install KB510...
Microsoft Security Response CenterCVE-2026-50527
HighCVSS 7.5
.NET Framework Denial of Service Vulnerability
Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network.
Affected productsMicrosoft .NET Framework 4.8 on Windows Server 2016, Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for 32-bit Systems, Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for x64-based Systems, Microsoft .NET Framework 4.8 on Windows Server 2016 (Server Core installation)
Fixed versions4.8.4803.0, 2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0, 2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0, 2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0
Vendor guidance
Release Notes Install KB5101007. Install KB5101009. Install KB5101011. Install KB5101008. Install KB5101010. Install KB5101006. Install KB5100989. Install KB5099535. Install KB5100990. Install KB5100991. Install KB510...
Microsoft Security Response CenterCVE-2026-47302
HighCVSS 7.5
.NET Denial of Service Vulnerability
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.
Affected products.NET 10.0 runtime installed on Windows, .NET 8.0 runtime installed on Windows, .NET 8.0 runtime installed on Mac OS, .NET 8.0 runtime installed on Linux
Fixed versions10.0.10, 8.0.29, 4.8.4803.0, 2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0
Vendor guidance
Release Notes Install KB5104034. Install KB5104032. Install KB5101007. Install KB5101011. Install KB5101008. Install KB5101009. Install KB5101010. Install KB5101006. Install KB5100989. Install KB5099535. Install KB510...
Microsoft Security Response CenterCVE-2026-15905
Severity not listed
Chromium: CVE-2026-15905 Use after free in Aura
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Affected productsMicrosoft Edge (Chromium-based)
Fixed versions150.0.4078.83
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-15904
Severity not listed
Chromium: CVE-2026-15904 Use after free in Ozone
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Affected productsMicrosoft Edge (Chromium-based)
Fixed versions150.0.4078.83
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-15903
Severity not listed
Chromium: CVE-2026-15903 Out of bounds read and write in V8
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Affected productsMicrosoft Edge (Chromium-based)
Fixed versions150.0.4078.83
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-15902
Severity not listed
Chromium: CVE-2026-15902 Use after free in Cast
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Affected productsMicrosoft Edge (Chromium-based)
Fixed versions150.0.4078.83
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-15901
Severity not listed
Chromium: CVE-2026-15901 Use after free in Network
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Affected productsMicrosoft Edge (Chromium-based)
Fixed versions150.0.4078.83
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-15900
Severity not listed
Chromium: CVE-2026-15900 Use after free in GPU
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Affected productsMicrosoft Edge (Chromium-based)
Fixed versions150.0.4078.83
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-15899
Severity not listed
Chromium: CVE-2026-15899 Use after free in CameraCapture
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Affected productsMicrosoft Edge (Chromium-based)
Fixed versions150.0.4078.83
Vendor guidance
Release Notes
Before you act
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.