Vendor advisories

Microsoft Security Response Center

Browse 17,903 advisories from this official source. Search by product, CVE, severity, or advisory ID.

Current Checked 4 hours ago Checked every 6 hours

17,903 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results

Microsoft Security Response CenterCVE-2026-8005

Published May 7, 2026

Severity not listed

Chromium: CVE-2026-8005 Insufficient validation of untrusted input in Cast

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions148.0.3967.54

Vendor guidance

Release Notes

CVE-2026-8005

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-8004

Published May 7, 2026

Severity not listed

Chromium: CVE-2026-8004 Insufficient policy enforcement in DevTools

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions148.0.3967.54

Vendor guidance

Release Notes

CVE-2026-8004

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-8003

Published May 7, 2026

Severity not listed

Chromium: CVE-2026-8003 Insufficient validation of untrusted input in TabGroups

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions148.0.3967.54

Vendor guidance

Release Notes

CVE-2026-8003

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-8002

Published May 7, 2026

Severity not listed

Chromium: CVE-2026-8002 Use after free in Audio

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions148.0.3967.54

Vendor guidance

Release Notes

CVE-2026-8002

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-8001

Published May 7, 2026

Severity not listed

Chromium: CVE-2026-8001 Use after free in Printing

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions148.0.3967.54

Vendor guidance

Release Notes

CVE-2026-8001

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-8000

Published May 7, 2026

Severity not listed

Chromium: CVE-2026-8000 Insufficient validation of untrusted input in ChromeDriver

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions148.0.3967.54

Vendor guidance

Release Notes

CVE-2026-8000

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-7999

Published May 7, 2026

Severity not listed

Chromium: CVE-2026-7999 Inappropriate implementation in V8

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions148.0.3967.54

Vendor guidance

Release Notes

CVE-2026-7999

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-7998

Published May 7, 2026

Severity not listed

Chromium: CVE-2026-7998 Insufficient validation of untrusted input in Dialog

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions148.0.3967.54

Vendor guidance

Release Notes

CVE-2026-7998

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-7997

Published May 7, 2026

Severity not listed

Chromium: CVE-2026-7997 Insufficient validation of untrusted input in Updater

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions148.0.3967.54

Vendor guidance

Release Notes

CVE-2026-7997

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-7996

Published May 7, 2026

Severity not listed

Chromium: CVE-2026-7996 Insufficient validation of untrusted input in SSL

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions148.0.3967.54

Vendor guidance

Release Notes

CVE-2026-7996

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-7995

Published May 7, 2026

Severity not listed

Chromium: CVE-2026-7995 Out of bounds read in AdFilter

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions148.0.3967.54

Vendor guidance

Release Notes

CVE-2026-7995

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-7994

Published May 7, 2026

Severity not listed

Chromium: CVE-2026-7994 Inappropriate implementation in Chromoting

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions148.0.3967.54

Vendor guidance

Release Notes

CVE-2026-7994

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-7992

Published May 7, 2026

Severity not listed

Chromium: CVE-2026-7992 Insufficient validation of untrusted input in UI

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions148.0.3967.54

Vendor guidance

Release Notes

CVE-2026-7992

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-7991

Published May 7, 2026

Severity not listed

Chromium: CVE-2026-7991 Use after free in UI

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions148.0.3967.54

Vendor guidance

Release Notes

CVE-2026-7991

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-7990

Published May 7, 2026

Severity not listed

Chromium: CVE-2026-7990 Insufficient validation of untrusted input in Updater

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions148.0.3967.54

Vendor guidance

Release Notes

CVE-2026-7990

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-7989

Published May 7, 2026

Severity not listed

Chromium: CVE-2026-7989 Insufficient data validation in DataTransfer

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions148.0.3967.54

Vendor guidance

Release Notes

CVE-2026-7989

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-7988

Published May 7, 2026

Severity not listed

Chromium: CVE-2026-7988 Type Confusion in WebRTC

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions148.0.3967.54

Vendor guidance

Release Notes

CVE-2026-7988

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-7987

Published May 7, 2026

Severity not listed

Chromium: CVE-2026-7987 Use after free in WebRTC

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions148.0.3967.54

Vendor guidance

Release Notes

CVE-2026-7987

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-7986

Published May 7, 2026

Severity not listed

Chromium: CVE-2026-7986 Insufficient policy enforcement in Autofill

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions148.0.3967.54

Vendor guidance

Release Notes

CVE-2026-7986

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-7985

Published May 7, 2026

Severity not listed

Chromium: CVE-2026-7985 Use after free in GPU

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions148.0.3967.54

Vendor guidance

Release Notes

CVE-2026-7985

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-7984

Published May 7, 2026

Severity not listed

Chromium: CVE-2026-7984 Use after free in ReadingMode

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions148.0.3967.54

Vendor guidance

Release Notes

CVE-2026-7984

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-7983

Published May 7, 2026

Severity not listed

Chromium: CVE-2026-7983 Out of bounds read in Dawn

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions148.0.3967.54

Vendor guidance

Release Notes

CVE-2026-7983

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-7982

Published May 7, 2026

Severity not listed

Chromium: CVE-2026-7982 Uninitialized Use in WebCodecs

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions148.0.3967.54

Vendor guidance

Release Notes

CVE-2026-7982

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-7981

Published May 7, 2026

Severity not listed

Chromium: CVE-2026-7981 Out of bounds read in Codecs

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions148.0.3967.54

Vendor guidance

Release Notes

CVE-2026-7981

Read the vendor advisory Watch this product

Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources