Vendor advisories

Microsoft Security Response Center

Browse 17,903 advisories from this official source. Search by product, CVE, severity, or advisory ID.

Current Checked 5 hours ago Checked every 6 hours

17,903 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2026-22001
LowCVSS 2.7

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 2.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N).

Mariner

Affected productsazl3 mysql 8.0.45-2 on Azure Linux 3.0, cbl2 mysql 8.0.45-3 on CBL Mariner 2.0
Fixed versions8.0.46-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2026-22017
MediumCVSS 6.5

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Mariner

Affected productsazl3 mysql 8.0.45-2 on Azure Linux 3.0, cbl2 mysql 8.0.45-3 on CBL Mariner 2.0
Fixed versions8.0.46-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2026-22002
MediumCVSS 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Mariner

Affected productscbl2 mysql 8.0.45-3 on CBL Mariner 2.0, azl3 mysql 8.0.45-2 on Azure Linux 3.0
Fixed versions8.0.46-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2026-22009
MediumCVSS 6.5

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Mariner

Affected productscbl2 mysql 8.0.45-3 on CBL Mariner 2.0, azl3 mysql 8.0.45-2 on Azure Linux 3.0
Fixed versions8.0.46-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2026-21998
MediumCVSS 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Mariner

Affected productscbl2 mysql 8.0.45-3 on CBL Mariner 2.0, azl3 mysql 8.0.45-2 on Azure Linux 3.0
Fixed versions8.0.46-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2026-26171
HighCVSS 7.5

.NET Denial of Service Vulnerability

Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a network.

Affected productsPowerShell 7.5, .NET 10.0 installed on Linux, .NET 8.0 installed on Windows, .NET 10.0 installed on Mac OS
Fixed versions7.5.6, 10.0.6, 8.0.26, 9.0.15
Vendor guidance

Release Notes Install KB5086095. Install KB5086096. Install KB5086097.

Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources