Vendor advisories

Microsoft Security Response Center

Browse 17,776 advisories from this official source. Search by product, CVE, severity, or advisory ID.

Current Checked 3 hours ago Checked every 6 hours

17,776 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results

Microsoft Security Response CenterCVE-2026-11184

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-11184 Insufficient policy enforcement in Actor

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-11184

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-11132

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-11132 Policy bypass in Paint

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-11132

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-11024

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-11024 Stack buffer overflow in Skia

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-11024

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-10971

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-10971 Insufficient validation of untrusted input in Printing

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-10971

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-10919

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-10919 Use after free in ANGLE

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-10919

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-11294

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-11294 Inappropriate implementation in Passwords

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-11294

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-11238

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-11238 Inappropriate implementation in DevTools

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-11238

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-11076

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-11076 Type Confusion in CSS

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-11076

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-10970

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-10970 Insufficient validation of untrusted input in InterestGroups

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-10970

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-10918

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-10918 Use after free in Viz

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-10918

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-11293

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-11293 Use after free in Input

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-11293

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-11237

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-11237 Insufficient validation of untrusted input in Media

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-11237

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-11182

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-11182 Inappropriate implementation in SVG

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-11182

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-11130

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-11130 Use after free in Media

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-11130

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-11075

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-11075 Out of bounds read in V8

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-11075

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-11023

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-11023 Insufficient validation of untrusted input in WebAppInstalls

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-11023

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-10969

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-10969 Insufficient validation of untrusted input in Extensions

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-10969

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-10917

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-10917 Insufficient validation of untrusted input in Media

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-10917

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-11292

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-11292 Policy bypass in Blink

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-11292

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-11236

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-11236 Insufficient policy enforcement in Web Bluetooth

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-11236

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-11181

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-11181 Inappropriate implementation in Media Session

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-11181

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-11129

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-11129 Inappropriate implementation in Extensions

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-11129

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-11074

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-11074 Use after free in WebRTC

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-11074

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-11022

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-11022 Insufficient validation of untrusted input in DevTools

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-11022

Read the vendor advisory Watch this product

Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources