CurrentChecked just now
Checked every 15 minutes
Browse this vendor's advisories
Official source
Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
11Vendor sources
16,745Advisories collected
6,299Published or updated in 30 days
6,969Marked critical or high
Coverage
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
CurrentChecked 45 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
Check delayedChecked 20 days ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 55 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 54 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked just now
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked just now
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 3 hours ago
Checked every 6 hours
Browse this vendor's advisories
Official source
CurrentChecked just now
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 50 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked just now
Checked every 15 minutes
Browse this vendor's advisories
Official source
16,745 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
Microsoft Security Response CenterCVE-2026-97017
HighCVSS 8.8
Microsoft Office Excel Remote Code Execution Vulnerability
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Affected productsOffice Online Server, Microsoft Office 365 for Mac, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024
Fixed versions16.0.10417.20228, 16.114.26101123, 16.0.14334.20974, 16.0.17932.21056
Vendor guidance
Release Notes Install KB5002928.
Microsoft Security Response CenterCVE-2026-97011
HighCVSS 8.8
Microsoft Office Excel Remote Code Execution Vulnerability
Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Affected productsMicrosoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 64-bit editions
Fixed versions16.114.26101123, 16.0.14334.20974, 16.0.17932.21056, https://aka.ms/OfficeSecurityReleases
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-97010
HighCVSS 8.8
Microsoft Office Excel Remote Code Execution Vulnerability
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Affected productsOffice Online Server, Microsoft Office 365 for Mac, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024
Fixed versions16.0.10417.20228, 16.114.26101123, 16.0.14334.20974, 16.0.17932.21056
Vendor guidance
Release Notes Install KB5002928.
Microsoft Security Response CenterCVE-2026-97008
HighCVSS 8.8
Microsoft Office Excel Remote Code Execution Vulnerability
Buffer underwrite ('buffer underflow') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Affected productsMicrosoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions
Fixed versions16.0.14334.20974, 16.0.17932.21056, https://aka.ms/OfficeSecurityReleases, 16.114.26101123
Vendor guidance
Release Notes Install KB5002928.
Microsoft Security Response CenterCVE-2026-97007
HighCVSS 8.8
Microsoft Office Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Affected productsMicrosoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions
Fixed versions16.0.14334.20974, 16.0.17932.21056, https://aka.ms/OfficeSecurityReleases, 16.114.26101123
Vendor guidance
Release Notes Install KB5002928.
Microsoft Security Response CenterCVE-2026-97005
HighCVSS 5.5
Microsoft Office PowerPoint Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
Affected productsMicrosoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 64-bit editions
Fixed versions16.114.26101123, 16.0.14334.20974, 16.0.17932.21056, https://aka.ms/OfficeSecurityReleases
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-97004
HighCVSS 8.8
Microsoft Office Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Affected productsMicrosoft Office 365 for Mac, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, Microsoft Office LTSC 2021 for 64-bit editions
Fixed versions16.114.26101123, 16.0.14334.20974, 16.0.17932.21056, https://aka.ms/OfficeSecurityReleases
Vendor guidance
Release Notes Install KB5002928.
Microsoft Security Response CenterCVE-2026-97003
HighCVSS 8.8
Microsoft Office Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Affected productsOffice Online Server, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions
Fixed versions16.0.10417.20228, 16.0.14334.20974, 16.0.17932.21056, https://aka.ms/OfficeSecurityReleases
Vendor guidance
Release Notes Install KB5002928.
Microsoft Security Response CenterCVE-2026-97001
HighCVSS 7.8
Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Affected productsMicrosoft Office 365 for Mac, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office LTSC for Mac 2021
Fixed versions16.114.26101123, https://aka.ms/OfficeSecurityReleases, 16.0.14334.20974, 16.0.17932.21056
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-96997
HighCVSS 7.8
Microsoft Office OneNote Elevation of Privilege Vulnerability
Use after free in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally.
Affected productsMicrosoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions
Fixed versions16.0.14334.20974, 16.0.17932.21056, https://aka.ms/OfficeSecurityReleases, 16.114.26101123
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-96995
HighCVSS 7.8
Microsoft Office Word Elevation of Privilege Vulnerability
Stack-based buffer overflow in Microsoft Office Word allows an authorized attacker to elevate privileges locally.
Affected productsMicrosoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions
Fixed versions16.0.14334.20974, 16.0.17932.21056, https://aka.ms/OfficeSecurityReleases, 16.114.26101123
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-96959
HighCVSS 7.5
.NET Denial of Service Vulnerability
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.
Affected productsSystem.Security.Cryptography.Xml on .NET 10.0 runtime installed on Windows, System.Security.Cryptography.Xml on .NET 10.0 runtime installed on Linux, System.Security.Cryptography.Xml on .NET 10.0 runtime installed on Mac OS, System.Security.Cryptography.Xml on .NET 11.0 runtime installed on Windows
Fixed versions10.0.13, 11.0.0-rc.2, 8.0.5, 9.0.21
Vendor guidance
Release Notes Install KB5127696. Install KB5127660. Install KB5127664. Install KB5126868. Install KB5127666. Install KB5127685. Install KB5127683. Install KB5127687. Install KB5127667. Install KB5127668. Install KB512...
Microsoft Security Response CenterCVE-2026-96958
HighCVSS 7.5
.NET Denial of Service Vulnerability
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
Affected productsMicrosoft .NET Framework 3.5 AND 4.8.1 on Windows 10 version 21H2, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 version 22H2, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 version 24H2, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 version 25H2
Fixed versions2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0, 4.8.9363.0, 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.10008.0, 10.0.13
Vendor guidance
Release Notes Install KB5127689. Install KB5127690. Install KB5127691. Install KB5127692. Install KB5127693. Install KB5127694. Install KB5127696. Install KB5127660. Install KB5127664. Install KB5126868. Install KB512...
Microsoft Security Response CenterCVE-2026-96957
HighCVSS 8.8
.NET Security Feature Bypass Vulnerability
Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.
Affected products.NET 10.0 runtime installed on Windows, .NET 10.0 runtime installed on Mac OS, .NET 11.0 runtime installed on Windows, .NET 11.0 runtime installed on Linux
Fixed versions10.0.402, 11.0.100-rc.2, 18.10.4, 17.14.42
Vendor guidance
Release Notes Install KB5130036.
Microsoft Security Response CenterCVE-2026-96238
HighCVSS 6.5
.NET Security Feature Bypass Vulnerability
Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network.
Affected products.NET 9.0 runtime installed on Windows, .NET 9.0 runtime installed on Linux, .NET 9.0 runtime installed on Mac OS, .NET 11.0 runtime installed on Windows
Fixed versions9.0.122, 11.0.100-rc.2, 8.0.426, 10.0.113
Vendor guidance
Release Notes Install KB5130035. Install KB5130034. Install KB5130036.
Microsoft Security Response CenterCVE-2026-96236
HighCVSS 7.5
ASP.NET Core Denial of Service Vulnerability
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Affected productsASP.NET Core 11.0, ASP.NET Core 10.0, ASP.NET Core 8.0, ASP.NET Core 9.0
Fixed versions11.0.0-rc.2, 10.0.13, 8.0.32, 9.0.21
Vendor guidance
Release Notes Install KB5130036. Install KB5130034. Install KB5130035.
Microsoft Security Response CenterCVE-2026-96235
HighCVSS 8.8
.NET Remote Code Execution Vulnerability
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.
Affected products.NET 10.0 runtime installed on Windows, .NET 8.0 runtime installed on Windows, .NET 9.0 runtime installed on Windows, Microsoft Visual Studio 2022 version 17.14
Fixed versions10.0.13, 8.0.32, 9.0.21, 17.14.42
Vendor guidance
Release Notes Install KB5130036. Install KB5130034. Install KB5130035.
Microsoft Security Response CenterCVE-2026-96233
HighCVSS 7.5
ASP.NET Core Denial of Service Vulnerability
Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Affected productsMicrosoft .NET Framework 3.5 AND 4.8.1 on Windows 10 version 21H2, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 version 22H2, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 version 24H2, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 version 25H2
Fixed versions2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0, 4.8.9363.0, 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.10008.0, 10.0.13
Vendor guidance
Release Notes Install KB5127689. Install KB5127690. Install KB5127691. Install KB5127692. Install KB5127693. Install KB5127694. Install KB5130036. Install KB5130035. Install KB5130034. Install KB5127696. Install KB512...
Microsoft Security Response CenterCVE-2026-96232
HighCVSS 7.5
.NET Information Disclosure Vulnerability
Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network.
Affected productsMicrosoft Visual Studio 2026 version 18.10, .NET 10.0 runtime installed on Windows, .NET 8.0 runtime installed on Windows, .NET 9.0 runtime installed on Windows
Fixed versions18.10.4, 10.0.13, 8.0.32, 9.0.21
Vendor guidance
Release Notes Install KB5130036. Install KB5130034. Install KB5130035.
Microsoft Security Response CenterCVE-2026-96231
HighCVSS 7.8
.NET Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
Affected productsMicrosoft Visual Studio 2026 version 18.10, Microsoft Visual Studio 2022 version 17.14, .NET 8.0 runtime installed on Mac OS, .NET 10.0 runtime installed on Mac OS
Fixed versions18.10.4, 17.14.42, 8.0.32, 10.0.13
Vendor guidance
Release Notes Install KB5130034. Install KB5130036. Install KB5130035.
Microsoft Security Response CenterCVE-2026-96224
HighCVSS 8.8
.NET Remote Code Execution Vulnerability
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.
Affected productsMicrosoft Visual Studio 2026 version 18.10, Microsoft Visual Studio 2022 version 17.14, .NET 11.0 runtime installed on Windows, .NET 10.0 runtime installed on Windows
Fixed versions18.10.4, 17.14.42, 11.0.0-rc.2, 10.0.13
Vendor guidance
Release Notes Install KB5130036. Install KB5130034. Install KB5130035. Install KB5127689. Install KB5127690. Install KB5127691. Install KB5127692. Install KB5127693. Install KB5127694. Install KB5127696. Install KB512...
Microsoft Security Response CenterCVE-2026-88210
HighCVSS 7.8
Microsoft Office Word Security Feature Bypass Vulnerability
Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.
Affected productsMicrosoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft 365 Apps for Enterprise for 32-bit Systems
Fixed versions16.0.17932.21056, https://aka.ms/OfficeSecurityReleases, 16.114.26101123
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-88202
HighCVSS 8.8
Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Affected productsMicrosoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions
Fixed versions16.0.14334.20974, 16.0.17932.21056, https://aka.ms/OfficeSecurityReleases, 16.114.26101123
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-88197
HighCVSS 8.8
Microsoft Office Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
Affected productsMicrosoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions
Fixed versions16.0.14334.20974, 16.0.17932.21056, https://aka.ms/OfficeSecurityReleases, 16.114.26101123
Vendor guidance
Release Notes
Before you act
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.