Vendor advisories

Microsoft Security Response Center

Browse 17,903 advisories from this official source. Search by product, CVE, severity, or advisory ID.

Current Checked 2 hours ago Checked every 6 hours

17,903 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results

Microsoft Security Response CenterCVE-2026-6475

Updated May 17, 2026

HighCVSS 8.8

PostgreSQL pg_basebackup and pg_rewind can overwrite unrelated files of origin superuser choice

Mariner

Affected productsazl3 postgresql 16.12-1 on Azure Linux 3.0

Fixed versions16.14-1

Vendor guidance

CBL-Mariner Releases

CVE-2026-6475

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-6638

Updated May 17, 2026

LowCVSS 3.7

PostgreSQL REFRESH PUBLICATION allows SQL injection via table name

Mariner

Affected productsazl3 postgresql 16.12-1 on Azure Linux 3.0

Fixed versions16.14-1

Vendor guidance

CBL-Mariner Releases

CVE-2026-6638

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-6478

Updated May 17, 2026

MediumCVSS 6.5

PostgreSQL discloses MD5-hashed passwords via covert timing channel

Mariner

Affected productsazl3 postgresql 16.12-1 on Azure Linux 3.0

Fixed versions16.14-1

Vendor guidance

CBL-Mariner Releases

CVE-2026-6478

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-8587

Published May 15, 2026

Severity not listed

Chromium: CVE-2026-8587 Use after free in Extensions

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions148.0.3967.70

Vendor guidance

Release Notes

CVE-2026-8587

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-8586

Published May 15, 2026

Severity not listed

Chromium: CVE-2026-8586 Inappropriate implementation in Chromoting

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions148.0.3967.70

Vendor guidance

Release Notes

CVE-2026-8586

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-8585

Published May 15, 2026

Severity not listed

Chromium: CVE-2026-8585 Inappropriate implementation in Media

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions148.0.3967.70

Vendor guidance

Release Notes

CVE-2026-8585

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-8584

Published May 15, 2026

Severity not listed

Chromium: CVE-2026-8584 Inappropriate implementation in Views

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions148.0.3967.70

Vendor guidance

Release Notes

CVE-2026-8584

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-8583

Published May 15, 2026

Severity not listed

Chromium: CVE-2026-8583 Insufficient policy enforcement in WebXR

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions148.0.3967.70

Vendor guidance

Release Notes

CVE-2026-8583

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-8582

Published May 15, 2026

Severity not listed

Chromium: CVE-2026-8582 Object lifecycle issue in Dawn

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions148.0.3967.70

Vendor guidance

Release Notes

CVE-2026-8582

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-8581

Published May 15, 2026

Severity not listed

Chromium: CVE-2026-8581 Use after free in GPU

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions148.0.3967.70

Vendor guidance

Release Notes

CVE-2026-8581

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-8580

Published May 15, 2026

Severity not listed

Chromium: CVE-2026-8580 Use after free in Mojo

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions148.0.3967.70

Vendor guidance

Release Notes

CVE-2026-8580

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-8579

Published May 15, 2026

Severity not listed

Chromium: CVE-2026-8579 Insufficient validation of untrusted input in Skia

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions148.0.3967.70

Vendor guidance

Release Notes

CVE-2026-8579

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-8578

Published May 15, 2026

Severity not listed

Chromium: CVE-2026-8578 Out of bounds read in GPU

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions148.0.3967.70

Vendor guidance

Release Notes

CVE-2026-8578

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-8577

Published May 15, 2026

Severity not listed

Chromium: CVE-2026-8577 Integer overflow in Fonts

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions148.0.3967.70

Vendor guidance

Release Notes

CVE-2026-8577

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-8576

Published May 15, 2026

Severity not listed

Chromium: CVE-2026-8576 Inappropriate implementation in CORS

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions148.0.3967.70

Vendor guidance

Release Notes

CVE-2026-8576

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-8575

Published May 15, 2026

Severity not listed

Chromium: CVE-2026-8575 Use after free in UI

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions148.0.3967.70

Vendor guidance

Release Notes

CVE-2026-8575

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-8574

Published May 15, 2026

Severity not listed

Chromium: CVE-2026-8574 Use after free in Core

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions148.0.3967.70

Vendor guidance

Release Notes

CVE-2026-8574

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-8573

Published May 15, 2026

Severity not listed

Chromium: CVE-2026-8573 Integer overflow in Codecs

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions148.0.3967.70

Vendor guidance

Release Notes

CVE-2026-8573

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-8572

Published May 15, 2026

Severity not listed

Chromium: CVE-2026-8572 Insufficient policy enforcement in Network

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions148.0.3967.70

Vendor guidance

Release Notes

CVE-2026-8572

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-8571

Published May 15, 2026

Severity not listed

Chromium: CVE-2026-8571 Insufficient policy enforcement in GPU

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions148.0.3967.70

Vendor guidance

Release Notes

CVE-2026-8571

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-8570

Published May 15, 2026

Severity not listed

Chromium: CVE-2026-8570 Type Confusion in V8

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions148.0.3967.70

Vendor guidance

Release Notes

CVE-2026-8570

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-8569

Published May 15, 2026

Severity not listed

Chromium: CVE-2026-8569 Out of bounds write in Codecs

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions148.0.3967.70

Vendor guidance

Release Notes

CVE-2026-8569

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-8568

Published May 15, 2026

Severity not listed

Chromium: CVE-2026-8568 Insufficient policy enforcement in AI

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions148.0.3967.70

Vendor guidance

Release Notes

CVE-2026-8568

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-8567

Published May 15, 2026

Severity not listed

Chromium: CVE-2026-8567 Integer overflow in ANGLE

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions148.0.3967.70

Vendor guidance

Release Notes

CVE-2026-8567

Read the vendor advisory Watch this product

Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources