Search threats, CVEs… ⌘K
Vendor advisories

Microsoft Security Response Center

Browse 17,776 advisories from this official source. Search by product, CVE, severity, or advisory ID.

Current Checked 2 hours ago Checked every 6 hours
All vendor sources Official source

17,776 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2026-50031
HighCVSS 7.5

ipmi-oem in FreeIPMI before 1.6.18 has exploitable buffer overflows on response messages. The Intelligent Platform Management Interface (IPMI) specification defines a set of interfaces for platform management. It is implemented by a large number of hardware manufacturers to support system management. It is most commonly used for sensor reading (e.g., CPU temperatures through the ipmi-sensors command within FreeIPMI) and remote power control (the ipmipower command). The ipmi-oem client command implements a set of a IPMI OEM commands for specific hardware vendors. If a user has supported hardware, they may wish to use the ipmi-oem command to send a request to a server to retrieve specific information. Two subcommands "ipmi-oem dell get-active-directory-config" and "ipmi-oem fujitsu get-sel-entry-long-text" were found to have exploitable buffer overflows on response messages.

Mariner

Affected productsazl3 freeipmi 1.6.17-1 on Azure Linux 3.0
Fixed versions1.6.18-1
Vendor guidance

CBL-Mariner Releases

CVE-2026-50031
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-11255
Severity not listed

Chromium: CVE-2026-11255 Insufficient validation of untrusted input in Storage Access API

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)
Fixed versions149.0.4022.52
Vendor guidance

Release Notes

CVE-2026-11255
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-11199
Severity not listed

Chromium: CVE-2026-11199 Insufficient validation of untrusted input in WebRTC

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)
Fixed versions149.0.4022.52
Vendor guidance

Release Notes

CVE-2026-11199
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-11092
Severity not listed

Chromium: CVE-2026-11092 Insufficient policy enforcement in DevTools

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)
Fixed versions149.0.4022.52
Vendor guidance

Release Notes

CVE-2026-11092
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-11254
Severity not listed

Chromium: CVE-2026-11254 Inappropriate implementation in Permissions

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)
Fixed versions149.0.4022.52
Vendor guidance

Release Notes

CVE-2026-11254
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-11198
Severity not listed

Chromium: CVE-2026-11198 Insufficient validation of untrusted input in Codecs

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)
Fixed versions149.0.4022.52
Vendor guidance

Release Notes

CVE-2026-11198
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-11146
Severity not listed

Chromium: CVE-2026-11146 Insufficient validation of untrusted input in Chromoting

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)
Fixed versions149.0.4022.52
Vendor guidance

Release Notes

CVE-2026-11146
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources