Vendor advisories

Microsoft Security Response Center

Browse 17,903 advisories from this official source. Search by product, CVE, severity, or advisory ID.

Current Checked 3 hours ago Checked every 6 hours

17,903 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2026-33110
HighCVSS 8.8

Microsoft SharePoint Server Remote Code Execution Vulnerability

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Affected productsMicrosoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition
Fixed versions16.0.5552.1002, 16.0.10417.20128, 16.0.19725.20280
Vendor guidance

Install KB5002868. Install KB5002870. Install KB5002863.

Microsoft Security Response CenterCVE-2026-32209
HighCVSS 4.4

Windows Filtering Platform (WFP) Security Feature Bypass Vulnerability

Improper access control in Windows Filtering Platform (WFP) allows an authorized attacker to bypass a security feature locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8755, 10.0.20348.5139, 10.0.20348.5074, 10.0.19044.7291
Vendor guidance

Install KB5087538. Install KB5087545. Install KB5087424. Install KB5087544. Install KB5094127. Install KB5087539. Install KB5087423. Install KB5089549. Install KB5089466. Install KB5087420. Install KB5093998. Install ...

Microsoft Security Response CenterCVE-2026-42838
HighCVSS 5.4

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Improper neutralization of special elements in output used by a downstream component ('injection') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

Affected productsMicrosoft Edge (Chromium-based)
Fixed versions148.0.3967.55
Vendor guidance

Release Notes

Microsoft Security Response CenterCVE-2026-32226
HighCVSS 5.9

.NET Framework Denial of Service Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in .NET Framework allows an unauthorized attacker to deny service over a network.

Affected productsMicrosoft .NET Framework 4.8 on Windows 10 Version 22H2 for x64-based Systems, Microsoft .NET Framework 4.8 on Windows 11 Version 22H2 for x64-based Systems, Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for x64-based Systems, Microsoft .NET Framework 4.8 on Windows Server 2012 R2 (Server Core installation)
Fixed versions2.0.50727.9181 & 3.0.30729.9165 & 4.8.4801.0, 2.0.50727.9181 & 3.0.30729.9165 & 4.8.9332.0, 4.8.4801.0, 2.0.50727.9068 & 3.0.30729.9065 & 4.8.4801.0
Vendor guidance

Install KB5082426. Install KB5082424. Install KB5082411. Install KB5082403. Install KB5082404. Install KB5082414. Install KB5082419. Install KB5082413. Install KB5082425. Install KB5082418. Install KB5082420. Install ...

Microsoft Security Response CenterCVE-2026-7993
Severity not listed

Chromium: CVE-2026-7993 Insufficient validation of untrusted input in Payments

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)
Fixed versions148.0.3967.55
Vendor guidance

Release Notes

Microsoft Security Response CenterCVE-2026-7941
Severity not listed

Chromium: CVE-2026-7941 Insufficient validation of untrusted input in Mobile

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)
Fixed versions148.0.3967.55
Vendor guidance

Release Notes

Microsoft Security Response CenterCVE-2026-7931
Severity not listed

Chromium: CVE-2026-7931 Insufficient validation of untrusted input in iOS

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)
Fixed versions148.0.3967.55
Vendor guidance

Release Notes

Microsoft Security Response CenterCVE-2026-7913
Severity not listed

Chromium: CVE-2026-7913 Insufficient policy enforcement in DevTools

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)
Fixed versions148.0.3967.55
Vendor guidance

Release Notes

Microsoft Security Response CenterCVE-2026-7905
Severity not listed

Chromium: CVE-2026-7905 Insufficient validation of untrusted input in Media

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)
Fixed versions148.0.3967.55
Vendor guidance

Release Notes

Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources