Search threats, CVEs… ⌘K
Vendor advisories

Microsoft Security Response Center

Browse 17,903 advisories from this official source. Search by product, CVE, severity, or advisory ID.

Current Checked 5 hours ago Checked every 6 hours
All vendor sources Official source

17,903 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2026-32223
HighCVSS 6.8

Windows USB Printing Stack (usbprint.sys) Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows USB Print Driver allows an unauthorized attacker to elevate privileges with a physical attack.

Affected productsWindows Server 2025 (Server Core installation), Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems
Fixed versions10.0.26100.32690, 10.0.26200.8246, 10.0.26100.8246, 10.0.28000.1836
Vendor guidance

Install KB5082063. Install KB5083769. Install KB5083768.

CVE-2026-32223
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-21523
HighCVSS 8.0

GitHub Copilot and Visual Studio Code Remote Code Execution Vulnerability

Time-of-check time-of-use (toctou) race condition in GitHub Copilot and Visual Studio allows an authorized attacker to execute code over a network.

Affected productsMicrosoft Visual Studio Code CoPilot Chat Extension, Visual Studio Code
Fixed versions0.37.1, 1.110.1
Vendor guidance

Release Notes

CVE-2026-21523
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-32203
HighCVSS 7.5

.NET and Visual Studio Denial of Service Vulnerability

Stack-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to deny service over a network.

Affected productsMicrosoft Visual Studio 2026 version 18.4, Microsoft Visual Studio 2022 version 17.12, Microsoft Visual Studio 2022 version 17.14, .NET 10.0 installed on Windows
Fixed versions18.4.4, 17.12.19, 17.14.30, 10.0.6
Vendor guidance

Release Notes Install KB5086095. Install KB5086096. Install KB5086097.

CVE-2026-32203
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-32077
HighCVSS 7.8

Windows UPnP Device Host Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.

Affected productsWindows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems
Fixed versions10.0.28000.1836, 10.0.17763.8644, 10.0.20348.5020, 10.0.19044.7184
Vendor guidance

Install KB5083768. Install KB5082123. Install KB5082142. Install KB5082200. Install KB5082063. Install KB5083769. Install KB5082052. Install KB5082060. Install KB5082198. Install KB5082127. Install KB5082806. Install ...

CVE-2026-32077
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources