Microsoft Security Response Center CVE-2026-43320
Updated May 11, 2026
Severity not listed
Mariner
Affected products azl3 kernel 6.6.137.1-2 on Azure Linux 3.0
Fixed versions 6.6.138.1-1
Microsoft Security Response Center CVE-2026-43300
Updated May 11, 2026
Medium CVSS 5.5
Mariner
Affected products azl3 kernel 6.6.137.1-2 on Azure Linux 3.0
Fixed versions 6.6.138.1-1
Microsoft Security Response Center CVE-2026-43284
Updated May 11, 2026
High CVSS 7.8
Mariner
Affected products azl3 kernel 6.6.137.1-2 on Azure Linux 3.0
Fixed versions 6.6.138.1-1
Microsoft Security Response Center CVE-2025-71299
Updated May 11, 2026
Medium CVSS 5.5
Mariner
Affected products azl3 kernel 6.6.137.1-2 on Azure Linux 3.0
Fixed versions 6.6.138.1-1
Microsoft Security Response Center CVE-2025-71302
Updated May 11, 2026
Severity not listed
Mariner
Affected products azl3 kernel 6.6.137.1-2 on Azure Linux 3.0
Fixed versions 6.6.138.1-1
Microsoft Security Response Center CVE-2026-43474
Updated May 11, 2026
Severity not listed
Mariner
Affected products azl3 kernel 6.6.137.1-2 on Azure Linux 3.0
Fixed versions 6.6.138.1-1
Microsoft Security Response Center CVE-2026-43195
Updated May 9, 2026
Medium CVSS 7.1
Mariner
Affected products azl3 kernel 6.6.137.1-2 on Azure Linux 3.0
Fixed versions 6.6.137.1-2
Microsoft Security Response Center CVE-2026-43165
Updated May 9, 2026
Medium CVSS 5.5
Mariner
Affected products azl3 kernel 6.6.137.1-2 on Azure Linux 3.0
Fixed versions 6.6.137.1-2
Microsoft Security Response Center CVE-2026-43201
Updated May 9, 2026
Medium CVSS 5.5
Mariner
Affected products azl3 kernel 6.6.137.1-2 on Azure Linux 3.0
Fixed versions 6.6.137.1-2
Microsoft Security Response Center CVE-2026-43237
Updated May 9, 2026
Medium CVSS 5.5
Mariner
Affected products azl3 kernel 6.6.137.1-2 on Azure Linux 3.0
Fixed versions 6.6.137.1-2
Microsoft Security Response Center CVE-2025-71294
Updated May 9, 2026
Medium CVSS 5.5
Mariner
Affected products azl3 kernel 6.6.137.1-2 on Azure Linux 3.0
Fixed versions 6.6.137.1-2
Microsoft Security Response Center CVE-2026-43243
Updated May 9, 2026
Medium CVSS 5.5
Mariner
Affected products azl3 kernel 6.6.137.1-2 on Azure Linux 3.0
Fixed versions 6.6.137.1-2
Microsoft Security Response Center CVE-2026-43191
Updated May 9, 2026
Medium CVSS 5.5
Mariner
Affected products azl3 kernel 6.6.137.1-2 on Azure Linux 3.0
Fixed versions 6.6.137.1-2
Microsoft Security Response Center CVE-2026-43274
Updated May 9, 2026
Medium CVSS 7.1
Mariner
Affected products azl3 kernel 6.6.137.1-2 on Azure Linux 3.0
Fixed versions 6.6.137.1-2
Microsoft Security Response Center CVE-2025-71293
Updated May 9, 2026
Medium CVSS 5.5
Mariner
Affected products azl3 kernel 6.6.137.1-2 on Azure Linux 3.0
Fixed versions 6.6.137.1-2
Microsoft Security Response Center CVE-2025-71290
Updated May 9, 2026
Medium CVSS 5.5
Mariner
Affected products azl3 kernel 6.6.137.1-2 on Azure Linux 3.0
Fixed versions 6.6.137.1-2
Microsoft Security Response Center CVE-2026-25589
Published May 8, 2026
High
Mariner
Affected products azl3 valkey 8.0.7-1 on Azure Linux 3.0
Microsoft Security Response Center CVE-2026-25588
Published May 8, 2026
High
Mariner
Affected products azl3 valkey 8.0.7-1 on Azure Linux 3.0
Microsoft Security Response Center CVE-2026-7896
Published May 7, 2026
Severity not listed
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Affected products Microsoft Edge (Chromium-based)
Fixed versions 148.0.3967.54
Microsoft Security Response Center CVE-2026-42826
Published May 7, 2026
Critical CVSS 10.0
Exposure of sensitive information to an unauthorized actor in Azure DevOps allows an unauthorized attacker to disclose information over a network.
Affected products Azure DevOps
Microsoft Security Response Center CVE-2026-41105
Published May 7, 2026
Critical CVSS 8.1
Server-side request forgery (ssrf) in Azure Notification Service allows an authorized attacker to elevate privileges over a network.
Affected products Azure Monitor Action Group notification system
Microsoft Security Response Center CVE-2026-35435
Published May 7, 2026
Critical CVSS 8.6
Improper access control in Azure AI Foundry M365 published agents allows an unauthorized attacker to elevate privileges over a network.
Affected products Azure AI Foundry
Microsoft Security Response Center CVE-2026-35428
Published May 7, 2026
Critical CVSS 9.6
Improper neutralization of special elements used in a command ('command injection') in Azure Cloud Shell allows an unauthorized attacker to perform spoofing over a network.
Affected products Azure Cloud Shell
Microsoft Security Response Center CVE-2026-34327
Published May 7, 2026
Critical CVSS 8.2
Externally controlled reference to a resource in another sphere in Microsoft Partner Center allows an unauthorized attacker to perform spoofing over a network.
Affected products Microsoft Partner Center