Microsoft Security Response Center CVE-2026-22001
Updated Apr 24, 2026
Low CVSS 2.7
Mariner
Affected products azl3 mysql 8.0.45-2 on Azure Linux 3.0, cbl2 mysql 8.0.45-3 on CBL Mariner 2.0
Fixed versions 8.0.46-1
Microsoft Security Response Center CVE-2026-22017
Updated Apr 24, 2026
Medium CVSS 6.5
Mariner
Affected products azl3 mysql 8.0.45-2 on Azure Linux 3.0, cbl2 mysql 8.0.45-3 on CBL Mariner 2.0
Fixed versions 8.0.46-1
Microsoft Security Response Center CVE-2026-22002
Updated Apr 24, 2026
Medium CVSS 4.9
Mariner
Affected products cbl2 mysql 8.0.45-3 on CBL Mariner 2.0, azl3 mysql 8.0.45-2 on Azure Linux 3.0
Fixed versions 8.0.46-1
Microsoft Security Response Center CVE-2026-22009
Updated Apr 24, 2026
Medium CVSS 6.5
Mariner
Affected products cbl2 mysql 8.0.45-3 on CBL Mariner 2.0, azl3 mysql 8.0.45-2 on Azure Linux 3.0
Fixed versions 8.0.46-1
Microsoft Security Response Center CVE-2026-21998
Updated Apr 24, 2026
Medium CVSS 4.9
Mariner
Affected products cbl2 mysql 8.0.45-3 on CBL Mariner 2.0, azl3 mysql 8.0.45-2 on Azure Linux 3.0
Fixed versions 8.0.46-1
Microsoft Security Response Center CVE-2026-31461
Published Apr 23, 2026
Medium CVSS 5.5
Mariner
Affected products azl3 kernel 6.6.130.1-3 on Azure Linux 3.0
Microsoft Security Response Center CVE-2026-35431
Published Apr 23, 2026
Critical CVSS 10.0
Server-side request forgery (ssrf) in Microsoft Entra ID Entitlement Management allows an unauthorized attacker to perform spoofing over a network.
Affected products Microsoft Entra ID
Microsoft Security Response Center CVE-2026-33819
Published Apr 23, 2026
Critical CVSS 10.0
Deserialization of untrusted data in Microsoft Bing allows an unauthorized attacker to execute code over a network.
Affected products Microsoft Bing
Microsoft Security Response Center CVE-2026-33102
Published Apr 23, 2026
Critical CVSS 9.3
Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker to elevate privileges over a network.
Affected products Microsoft 365 Copilot
Microsoft Security Response Center CVE-2026-32210
Published Apr 23, 2026
Critical CVSS 9.3
Server-side request forgery (ssrf) in Microsoft Dynamics 365 (Online) allows an unauthorized attacker to perform spoofing over a network.
Affected products Microsoft Dynamics 365 (online)
Microsoft Security Response Center CVE-2026-32172
Published Apr 23, 2026
Critical CVSS 8.0
Uncontrolled search path element in Microsoft Power Apps allows an unauthorized attacker to execute code over a network.
Affected products Microsoft Power Apps
Microsoft Security Response Center CVE-2026-26150
Published Apr 23, 2026
Critical CVSS 8.6
Server-side request forgery (ssrf) in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network.
Affected products Microsoft Purview eDiscovery
Microsoft Security Response Center CVE-2026-24303
Published Apr 23, 2026
Critical CVSS 9.6
Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network.
Affected products Microsoft Partner Center
Microsoft Security Response Center CVE-2026-21515
Published Apr 23, 2026
Critical CVSS 9.9
Exposure of sensitive information to an unauthorized actor in Azure IOT Central allows an authorized attacker to elevate privileges over a network.
Affected products Azure IOT Central
Microsoft Security Response Center CVE-2026-6507
Published Apr 23, 2026
High CVSS 7.5
Mariner
Affected products cbl2 dnsmasq 2.90-1 on CBL Mariner 2.0
Microsoft Security Response Center CVE-2026-26171
Updated Apr 22, 2026
High CVSS 7.5
Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a network.
Affected products PowerShell 7.5, .NET 10.0 installed on Linux, .NET 8.0 installed on Windows, .NET 10.0 installed on Mac OS
Fixed versions 7.5.6, 10.0.6, 8.0.26, 9.0.15
Microsoft Security Response Center CVE-2026-34085
Updated Apr 22, 2026
Medium CVSS 5.9
Mariner
Affected products azl3 fontconfig 2.14.2-1 on Azure Linux 3.0
Microsoft Security Response Center CVE-2026-23284
Updated Apr 22, 2026
Medium CVSS 6.4
Mariner
Affected products azl3 kernel 6.6.126.1-1 on Azure Linux 3.0
Fixed versions 6.6.130.1-1
Microsoft Security Response Center CVE-2026-23347
Updated Apr 22, 2026
Medium CVSS 5.5
Mariner
Affected products azl3 kernel 6.6.126.1-1 on Azure Linux 3.0
Fixed versions 6.6.130.1-1
Microsoft Security Response Center CVE-2026-23291
Updated Apr 22, 2026
Medium CVSS 5.5
Mariner
Affected products azl3 kernel 6.6.126.1-1 on Azure Linux 3.0
Fixed versions 6.6.130.1-1
Microsoft Security Response Center CVE-2026-23320
Updated Apr 22, 2026
Medium CVSS 5.5
Mariner
Affected products azl3 kernel 6.6.126.1-1 on Azure Linux 3.0
Microsoft Security Response Center CVE-2026-23334
Updated Apr 22, 2026
Medium CVSS 5.5
Mariner
Affected products azl3 kernel 6.6.126.1-1 on Azure Linux 3.0
Fixed versions 6.6.130.1-1
Microsoft Security Response Center CVE-2026-2645
Updated Apr 22, 2026
Medium
Mariner
Affected products cbl2 mariadb 10.6.24-1 on CBL Mariner 2.0
Microsoft Security Response Center CVE-2026-2646
Updated Apr 22, 2026
Medium
Mariner
Affected products cbl2 mariadb 10.6.24-1 on CBL Mariner 2.0