Everything you care about in one place

Follow feeds: blogs, news, RSS and more. An effortless way to read and digest content of your choice.

Get Feeder

api.msrc.microsoft.com

MSRC Security Update Guide

Get the latest updates from MSRC Security Update Guide directly as they happen.

Follow now 429 followers

Latest posts

Last updated 6 days ago

CVE-2025-33074 Azure Functions Remote Code Execution Vulnerability

6 days ago

Improper verification of cryptographic signature in Microsoft Azure Functions allows an authorized...

CVE-2025-30390 Azure ML Compute Elevation of Privilege Vulnerability

6 days ago

Improper authorization in Azure allows an authorized attacker to elevate privileges over...

CVE-2025-30391 Microsoft Dynamics Information Disclosure Vulnerability

6 days ago

Improper input validation in Microsoft Dynamics allows an unauthorized attacker to disclose...

CVE-2025-30392 Azure AI bot Elevation of Privilege Vulnerability

6 days ago

Improper authorization in Azure Bot Framework SDK allows an unauthorized attacker to...

CVE-2025-21416 Azure Virtual Desktop Elevation of Privilege Vulnerability

6 days ago

Missing authorization in Azure Virtual Desktop allows an authorized attacker to elevate...

CVE-2025-30389 Azure Bot Framework SDK Elevation of Privilege Vulnerability

6 days ago

Improper authorization in Azure Bot Framework SDK allows an unauthorized attacker to...

Chromium: CVE-2025-3620 Use after free in USB

19 days ago

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which...

Chromium: CVE-2025-3619 Heap buffer overflow in Codecs

19 days ago

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which...

CVE-2024-21302 Windows Secure Kernel Mode Elevation of Privilege Vulnerability

21 days ago

To comprehensively address CVE-2024-21302, Microsoft has released April 2025 security updates for...

CVE-2025-29817 Microsoft Power Automate Desktop Information Disclosure Vulnerability

21 days ago

Uncontrolled search path element in Power Automate allows an authorized attacker to...

CVE-2025-26669 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

28 days ago

Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an...

CVE-2025-26665 Windows upnphost.dll Elevation of Privilege Vulnerability

28 days ago

Sensitive data storage in improperly locked memory in Windows upnphost.dll allows an...