Vendor advisories

Microsoft Security Response Center

Browse 17,776 advisories from this official source. Search by product, CVE, severity, or advisory ID.

Current Checked 3 hours ago Checked every 6 hours

17,776 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results

Microsoft Security Response CenterCVE-2026-10968

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-10968 Insufficient validation of untrusted input in Dawn

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-10968

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-10916

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-10916 Insufficient validation of untrusted input in DevTools

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-10916

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-11235

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-11235 Insufficient validation of untrusted input in Compositing

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-11235

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-11128

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-11128 Insufficient validation of untrusted input in Web Share

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-11128

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-11073

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-11073 Use after free in WebGL

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-11073

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-11021

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-11021 Insufficient validation of untrusted input in GPU

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-11021

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-11234

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-11234 Insufficient policy enforcement in FoldableAPIs

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-11234

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-11180

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-11180 Policy bypass in SVG

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-11180

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-11020

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-11020 Inappropriate implementation in Extensions

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-11020

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-10966

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-10966 Insufficient validation of untrusted input in Codecs

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-10966

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-10914

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-10914 Use after free in ANGLE

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-10914

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-11233

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-11233 Insufficient validation of untrusted input in FoldableAPIs

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-11233

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-11179

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-11179 Inappropriate implementation in ORB

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-11179

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-11071

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-11071 Use after free in Base

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-11071

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-10965

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-10965 Integer overflow in DevTools

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-10965

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-10913

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-10913 Use after free in ANGLE

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-10913

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-11289

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-11289 Side-channel information leakage in Paint

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-11289

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-11232

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-11232 Inappropriate implementation in TabGroups

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-11232

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-11126

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-11126 Insufficient validation of untrusted input in DevTools

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-11126

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-11070

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-11070 Insufficient validation of untrusted input in Chromoting

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-11070

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-11018

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-11018 Insufficient policy enforcement in Actor

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-11018

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-10964

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-10964 Integer overflow in V8

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-10964

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-10912

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-10912 Insufficient validation of untrusted input in Extensions

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-10912

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-11288

Published Jun 5, 2026

Severity not listed

Chromium: CVE-2026-11288 Policy bypass in CSS

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.52

Vendor guidance

Release Notes

CVE-2026-11288

Read the vendor advisory Watch this product

Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources