Vendor advisories

Microsoft Security Response Center

Browse 17,903 advisories from this official source. Search by product, CVE, severity, or advisory ID.

Current Checked about an hour ago Checked every 6 hours

17,903 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results

Microsoft Security Response CenterCVE-2026-5913

Published Apr 10, 2026

Severity not listed

Chromium: CVE-2026-5913 Out of bounds read in Blink

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions147.0.3912.60

Vendor guidance

Release Notes

CVE-2026-5913

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-5912

Published Apr 10, 2026

Severity not listed

Chromium: CVE-2026-5912 Integer overflow in WebRTC

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions147.0.3912.60

Vendor guidance

Release Notes

CVE-2026-5912

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-5911

Published Apr 10, 2026

Severity not listed

Chromium: CVE-2026-5911 Policy bypass in ServiceWorkers

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions147.0.3912.60

Vendor guidance

Release Notes

CVE-2026-5911

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-5910

Published Apr 10, 2026

Severity not listed

Chromium: CVE-2026-5910 Integer overflow in Media

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions147.0.3912.60

Vendor guidance

Release Notes

CVE-2026-5910

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-5909

Published Apr 10, 2026

Severity not listed

Chromium: CVE-2026-5909 Integer overflow in Media

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions147.0.3912.60

Vendor guidance

Release Notes

CVE-2026-5909

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-5908

Published Apr 10, 2026

Severity not listed

Chromium: CVE-2026-5908 Integer overflow in Media

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions147.0.3912.60

Vendor guidance

Release Notes

CVE-2026-5908

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-5907

Published Apr 10, 2026

Severity not listed

Chromium: CVE-2026-5907 Insufficient data validation in Media

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions147.0.3912.60

Vendor guidance

Release Notes

CVE-2026-5907

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-5906

Published Apr 10, 2026

Severity not listed

Chromium: CVE-2026-5906 Incorrect security UI in Omnibox

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions147.0.3912.60

Vendor guidance

Release Notes

CVE-2026-5906

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-5905

Published Apr 10, 2026

Severity not listed

Chromium: CVE-2026-5905 Incorrect security UI in Permissions

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions147.0.3912.60

Vendor guidance

Release Notes

CVE-2026-5905

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-5904

Published Apr 10, 2026

Severity not listed

Chromium: CVE-2026-5904 Use after free in V8

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions147.0.3912.60

Vendor guidance

Release Notes

CVE-2026-5904

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-5903

Published Apr 10, 2026

Severity not listed

Chromium: CVE-2026-5903 Policy bypass in IFrameSandbox

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions147.0.3912.60

Vendor guidance

Release Notes

CVE-2026-5903

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-5902

Published Apr 10, 2026

Severity not listed

Chromium: CVE-2026-5902 Race in Media

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions147.0.3912.60

Vendor guidance

Release Notes

CVE-2026-5902

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-5901

Published Apr 10, 2026

Severity not listed

Chromium: CVE-2026-5901 Policy bypass in DevTools

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions147.0.3912.60

Vendor guidance

Release Notes

CVE-2026-5901

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-5900

Published Apr 10, 2026

Severity not listed

Chromium: CVE-2026-5900 Policy bypass in Downloads

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions147.0.3912.60

Vendor guidance

Release Notes

CVE-2026-5900

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-5899

Published Apr 10, 2026

Severity not listed

Chromium: CVE-2026-5899 Incorrect security UI in History Navigation

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions147.0.3912.60

Vendor guidance

Release Notes

CVE-2026-5899

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-5898

Published Apr 10, 2026

Severity not listed

Chromium: CVE-2026-5898 Incorrect security UI in Omnibox

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions147.0.3912.60

Vendor guidance

Release Notes

CVE-2026-5898

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-5897

Published Apr 10, 2026

Severity not listed

Chromium: CVE-2026-5897 Incorrect security UI in Downloads

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions147.0.3912.60

Vendor guidance

Release Notes

CVE-2026-5897

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-5896

Published Apr 10, 2026

Severity not listed

Chromium: CVE-2026-5896 Policy bypass in Audio

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions147.0.3912.60

Vendor guidance

Release Notes

CVE-2026-5896

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-5895

Published Apr 10, 2026

Severity not listed

Chromium: CVE-2026-5895 Incorrect security UI in Omnibox

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions147.0.3912.60

Vendor guidance

Release Notes

CVE-2026-5895

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-5894

Published Apr 10, 2026

Severity not listed

Chromium: CVE-2026-5894 Inappropriate implementation in PDF

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions147.0.3912.60

Vendor guidance

Release Notes

CVE-2026-5894

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-5893

Published Apr 10, 2026

Severity not listed

Chromium: CVE-2026-5893 Race in V8

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions147.0.3912.60

Vendor guidance

Release Notes

CVE-2026-5893

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-5892

Published Apr 10, 2026

Severity not listed

Chromium: CVE-2026-5892 Insufficient policy enforcement in PWAs

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions147.0.3912.60

Vendor guidance

Release Notes

CVE-2026-5892

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-5891

Published Apr 10, 2026

Severity not listed

Chromium: CVE-2026-5891 Insufficient policy enforcement in browser UI

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions147.0.3912.60

Vendor guidance

Release Notes

CVE-2026-5891

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-5890

Published Apr 10, 2026

Severity not listed

Chromium: CVE-2026-5890 Race in WebCodecs

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions147.0.3912.60

Vendor guidance

Release Notes

CVE-2026-5890

Read the vendor advisory Watch this product

Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources