Vendor advisories

Microsoft Security Response Center

Browse 17,776 advisories from this official source. Search by product, CVE, severity, or advisory ID.

Current Checked 3 hours ago Checked every 6 hours

17,776 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results

Microsoft Security Response CenterCVE-2026-11136

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-11136 Use after free in Canvas

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-11136

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-11028

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-11028 Use after free in Media

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-11028

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-10974

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-10974 Insufficient validation of untrusted input in ANGLE

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-10974

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-11242

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-11242 Insufficient validation of untrusted input in Plugins

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-11242

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-11187

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-11187 Insufficient policy enforcement in Glic

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-11187

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-11135

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-11135 Insufficient policy enforcement in Autofill

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-11135

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-11079

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-11079 Insufficient validation of untrusted input in Codecs

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-11079

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-11027

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-11027 Insufficient validation of untrusted input in Glic

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-11027

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-10973

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-10973 Uninitialized Use in Dawn

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-10973

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-10922

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-10922 Insufficient validation of untrusted input in DevTools

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-10922

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-11241

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-11241 Insufficient validation of untrusted input in Cast

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-11241

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-11186

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-11186 Inappropriate implementation in CSS

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-11186

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-11134

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-11134 Insufficient data validation in Media

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-11134

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-11133

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-11133 Insufficient policy enforcement in Paint

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-11133

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-11078

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-11078 Insufficient validation of untrusted input in FileSystem

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-11078

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-11026

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-11026 Insufficient policy enforcement in Extensions

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-11026

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-10972

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-10972 Use after free in Ozone

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-10972

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-10921

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-10921 Integer overflow in Dawn

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-10921

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-11296

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-11296 Inappropriate implementation in ImageCapture

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-11296

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-11240

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-11240 Insufficient validation of untrusted input in Loader

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-11240

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-11185

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-11185 Use after free in V8

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-11185

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-11025

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-11025 Insufficient policy enforcement in Navigation

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-11025

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-10920

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-10920 Insufficient validation of untrusted input in WebShare

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-10920

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-11239

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-11239 Insufficient validation of untrusted input in Extensions

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-11239

Read the vendor advisory Watch this product

Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources