Vendor advisories

Microsoft Security Response Center

Browse 17,705 advisories from this official source. Search by product, CVE, severity, or advisory ID.

Current Checked 20 minutes ago Checked every 6 hours

17,705 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results

Microsoft Security Response CenterCVE-2026-13841

Published Jul 3, 2026

Severity not listed

Chromium: CVE-2026-13841 Integer overflow in Skia

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions150.0.4078.48

Vendor guidance

Release Notes

CVE-2026-13841

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-14108

Published Jul 3, 2026

Severity not listed

Chromium: CVE-2026-14108 Use after free in PDFium

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions150.0.4078.48

Vendor guidance

Release Notes

CVE-2026-14108

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-14052

Published Jul 3, 2026

Severity not listed

Chromium: CVE-2026-14052 Insufficient policy enforcement in FileSystem

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Vendor guidance

Release Notes

CVE-2026-14052

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-13999

Published Jul 3, 2026

Severity not listed

Chromium: CVE-2026-13999 Inappropriate implementation in Extensions

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions150.0.4078.48

Vendor guidance

Release Notes

CVE-2026-13999

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-13921

Published Jul 3, 2026

Severity not listed

Chromium: CVE-2026-13921 Insufficient validation of untrusted input in DeviceBoundSessionCredentials

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions150.0.4078.48

Vendor guidance

Release Notes

CVE-2026-13921

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-13883

Published Jul 3, 2026

Severity not listed

Chromium: CVE-2026-13883 Type Confusion in ANGLE

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions150.0.4078.48

Vendor guidance

Release Notes

CVE-2026-13883

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-13840

Published Jul 3, 2026

Severity not listed

Chromium: CVE-2026-13840 Insufficient policy enforcement in Canvas

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions150.0.4078.48

Vendor guidance

Release Notes

CVE-2026-13840

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-14107

Published Jul 3, 2026

Severity not listed

Chromium: CVE-2026-14107 Use after free in Scheduling

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions150.0.4078.48

Vendor guidance

Release Notes

CVE-2026-14107

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-14051

Published Jul 3, 2026

Severity not listed

Chromium: CVE-2026-14051 Uninitialized Use in GamepadAPI

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Vendor guidance

Release Notes

CVE-2026-14051

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-13867

Published Jul 3, 2026

Severity not listed

Chromium: CVE-2026-13867 Inappropriate implementation in Geolocation

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions150.0.4078.48

Vendor guidance

Release Notes

CVE-2026-13867

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-14106

Published Jul 3, 2026

Severity not listed

Chromium: CVE-2026-14106 Insufficient validation of untrusted input in Text

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions150.0.4078.48

Vendor guidance

Release Notes

CVE-2026-14106

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-14050

Published Jul 3, 2026

Severity not listed

Chromium: CVE-2026-14050 Insufficient policy enforcement in Passwords

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Vendor guidance

Release Notes

CVE-2026-14050

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-13996

Published Jul 3, 2026

Severity not listed

Chromium: CVE-2026-13996 Incorrect security UI in Permissions

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions150.0.4078.48

Vendor guidance

Release Notes

CVE-2026-13996

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-13920

Published Jul 3, 2026

Severity not listed

Chromium: CVE-2026-13920 Insufficient validation of untrusted input in Media

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions150.0.4078.48

Vendor guidance

Release Notes

CVE-2026-13920

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-13845

Published Jul 3, 2026

Severity not listed

Chromium: CVE-2026-13845 Use after free in DOM

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions150.0.4078.48

Vendor guidance

Release Notes

CVE-2026-13845

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-13839

Published Jul 3, 2026

Severity not listed

Chromium: CVE-2026-13839 Inappropriate implementation in CSS

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions150.0.4078.48

Vendor guidance

Release Notes

CVE-2026-13839

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-13993

Published Jul 3, 2026

Severity not listed

Chromium: CVE-2026-13993 Incorrect security UI in WebAppInstalls

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions150.0.4078.48

Vendor guidance

Release Notes

CVE-2026-13993

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-13919

Published Jul 3, 2026

Severity not listed

Chromium: CVE-2026-13919 Insufficient data validation in Extensions

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions150.0.4078.48

Vendor guidance

Release Notes

CVE-2026-13919

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-13838

Published Jul 3, 2026

Severity not listed

Chromium: CVE-2026-13838 Inappropriate implementation in CSS

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions150.0.4078.48

Vendor guidance

Release Notes

CVE-2026-13838

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-13990

Published Jul 3, 2026

Severity not listed

Chromium: CVE-2026-13990 Insufficient validation of untrusted input in DataTransfer

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions150.0.4078.48

Vendor guidance

Release Notes

CVE-2026-13990

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-13911

Published Jul 3, 2026

Severity not listed

Chromium: CVE-2026-13911 Insufficient data validation in Spellcheck

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions150.0.4078.48

Vendor guidance

Release Notes

CVE-2026-13911

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-13837

Published Jul 3, 2026

Severity not listed

Chromium: CVE-2026-13837 Inappropriate implementation in CSS

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions150.0.4078.48

Vendor guidance

Release Notes

CVE-2026-13837

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-13832

Published Jul 3, 2026

Severity not listed

Chromium: CVE-2026-13832 Use after free in Headless

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions150.0.4078.48

Vendor guidance

Release Notes

CVE-2026-13832

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-14104

Published Jul 3, 2026

Severity not listed

Chromium: CVE-2026-14104 Insufficient validation of untrusted input in WebAppInstalls

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions150.0.4078.48

Vendor guidance

Release Notes

CVE-2026-14104

Read the vendor advisory Watch this product

Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources