Search threats, CVEs… ⌘K
Vendor advisories

Microsoft Security Response Center

Browse 17,903 advisories from this official source. Search by product, CVE, severity, or advisory ID.

Current Checked 5 hours ago Checked every 6 hours
All vendor sources Official source

17,903 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2026-21246
HighCVSS 7.8

Windows Graphics Component Elevation of Privilege Vulnerability

Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8389, 10.0.20348.4773, 10.0.20348.4711, 10.0.19044.6937
Vendor guidance

Install KB5075904. Install KB5075906. Install KB5075943. Install KB5075912. Install KB5075899. Install KB5075942. Install KB5077181. Install KB5077212. Install KB5075941. Install KB5075897. Install KB5075999. Install ...

CVE-2026-21246
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-6919
Severity not listed

Chromium: CVE-2026-6919 Use after free in DevTools

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge for Android, Microsoft Edge (Chromium-based)
Fixed versions147.0.3912.87, 147.0.3912.86
Vendor guidance

Release Notes

CVE-2026-6919
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-6921
Severity not listed

Chromium: CVE-2026-6921 Race in GPU

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)
Fixed versions147.0.3912.86
Vendor guidance

Release Notes

CVE-2026-6921
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-22015
MediumCVSS 4.3

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).

Mariner

Affected productsazl3 mysql 8.0.45-2 on Azure Linux 3.0, cbl2 mysql 8.0.45-3 on CBL Mariner 2.0
Fixed versions8.0.46-1
Vendor guidance

CBL-Mariner Releases

CVE-2026-22015
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-22005
MediumCVSS 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Mariner

Affected productsazl3 mysql 8.0.45-2 on Azure Linux 3.0, cbl2 mysql 8.0.45-3 on CBL Mariner 2.0
Fixed versions8.0.46-1
Vendor guidance

CBL-Mariner Releases

CVE-2026-22005
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-22004
MediumCVSS 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Mariner

Affected productscbl2 mysql 8.0.45-3 on CBL Mariner 2.0, azl3 mysql 8.0.45-2 on Azure Linux 3.0
Fixed versions8.0.46-1
Vendor guidance

CBL-Mariner Releases

CVE-2026-22004
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources