Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

11Vendor sources
16,745Advisories collected
6,299Published or updated in 30 days
6,969Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

16,745 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2026-88196
HighCVSS 8.8

Microsoft Office Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

Affected productsMicrosoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions
Fixed versions16.0.14334.20974, 16.0.17932.21056, https://aka.ms/OfficeSecurityReleases, 16.114.26101123
Vendor guidance

Release Notes

Microsoft Security Response CenterCVE-2026-88192
HighCVSS 6.5

Microsoft Office Excel Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

Affected productsMicrosoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC 2021 for 64-bit editions
Fixed versionshttps://aka.ms/OfficeSecurityReleases, 16.114.26101123, 16.0.14334.20974, 16.0.17932.21056
Vendor guidance

Release Notes

Microsoft Security Response CenterCVE-2026-88186
HighCVSS 8.8

Microsoft Office Word Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Affected productsMicrosoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 64-bit editions
Fixed versions16.114.26101123, 16.0.14334.20974, 16.0.17932.21056, https://aka.ms/OfficeSecurityReleases
Vendor guidance

Release Notes

Microsoft Security Response CenterCVE-2026-88184
HighCVSS 6.5

Microsoft Office Excel Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

Affected productsMicrosoft Office 365 for Mac, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office LTSC for Mac 2021
Fixed versions16.114.26101123, https://aka.ms/OfficeSecurityReleases, 16.0.14334.20974, 16.0.17932.21056
Vendor guidance

Release Notes

Microsoft Security Response CenterCVE-2026-88183
HighCVSS 6.5

Microsoft Office PowerPoint Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

Affected productsMicrosoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC 2021 for 64-bit editions
Fixed versionshttps://aka.ms/OfficeSecurityReleases, 16.114.26101123, 16.0.14334.20974, 16.0.17932.21056
Vendor guidance

Release Notes

Microsoft Security Response CenterCVE-2026-88175
HighCVSS 6.5

Microsoft Office Excel Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

Affected productsMicrosoft Office 365 for Mac, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office LTSC 2021 for 64-bit editions
Fixed versions16.114.26101123, https://aka.ms/OfficeSecurityReleases, 16.0.14334.20974, 16.0.17932.21056
Vendor guidance

Release Notes

Microsoft Security Response CenterCVE-2026-88169
HighCVSS 6.5

Microsoft Office Word Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

Affected productsMicrosoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 64-bit editions
Fixed versions16.114.26101123, 16.0.14334.20974, 16.0.17932.21056, https://aka.ms/OfficeSecurityReleases
Vendor guidance

Release Notes

Microsoft Security Response CenterCVE-2026-88167
HighCVSS 6.5

Microsoft Office Word Information Disclosure Vulnerability

Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

Affected productsMicrosoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 64-bit editions
Fixed versions16.114.26101123, 16.0.14334.20974, 16.0.17932.21056, https://aka.ms/OfficeSecurityReleases
Vendor guidance

Release Notes

Microsoft Security Response CenterCVE-2026-88150
HighCVSS 8.8

Microsoft Office Word Remote Code Execution Vulnerability

Use of uninitialized resource in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Affected productsMicrosoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 64-bit editions
Fixed versions16.114.26101123, 16.0.14334.20974, 16.0.17932.21056, https://aka.ms/OfficeSecurityReleases
Vendor guidance

Release Notes

Microsoft Security Response CenterCVE-2026-88145
HighCVSS 8.8

Microsoft Office Excel Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Affected productsMicrosoft Office 365 for Mac, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office LTSC for Mac 2021
Fixed versions16.114.26101123, https://aka.ms/OfficeSecurityReleases, 16.0.14334.20974, 16.0.17932.21056
Vendor guidance

Release Notes

Microsoft Security Response CenterCVE-2026-87697
HighCVSS 8.8

.NET Remote Code Execution Vulnerability

Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.

Affected products.NET 11.0 runtime installed on Windows, .NET 10.0 runtime installed on Windows, .NET 8.0 runtime installed on Windows, .NET 9.0 runtime installed on Windows
Fixed versions11.0.0-rc.2, 10.0.13, 8.0.32, 9.0.21
Vendor guidance

Release Notes Install KB5130036. Install KB5130034. Install KB5130035.

Microsoft Security Response CenterCVE-2026-85363
HighCVSS 8.8

.NET Framework Elevation of Privilege Vulnerability

Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network.

Affected productsMicrosoft Visual Studio 2026 version 18.10, Microsoft Visual Studio 2022 version 17.14, .NET 10.0 runtime installed on Windows, .NET 9.0 runtime installed on Windows
Fixed versions18.10.4, 17.14.42, 10.0.13, 9.0.21
Vendor guidance

Release Notes Install KB5130036. Install KB5130035. Install KB5130034. Install KB5127689. Install KB5127690. Install KB5127691. Install KB5127692. Install KB5127693. Install KB5127694. Install KB5127696. Install KB512...

Microsoft Security Response CenterCVE-2026-84008
HighCVSS 7.5

.NET Denial of Service Vulnerability

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.

Affected productsSystem.Security.Cryptography.Pkcs on .NET 10.0 runtime installed on Windows, System.Security.Cryptography.Pkcs on .NET 10.0 runtime installed on Linux, System.Security.Cryptography.Pkcs on .NET 10.0 runtime installed on Mac OS, System.Security.Cryptography.Pkcs on .NET 11.0 runtime installed on Windows
Fixed versions10.0.13, 11.0.0-rc.2, 8.0.2, 9.0.21
Vendor guidance

Release Notes Install KB5127666. Install KB5127696. Install KB5127660. Install KB5127664. Install KB5126868. Install KB5127685. Install KB5127683. Install KB5127687. Install KB5127667. Install KB5127668. Install KB512...

Microsoft Security Response CenterCVE-2026-83891
HighCVSS 8.8

Microsoft Office Word Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Affected productsMicrosoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 64-bit editions
Fixed versions16.114.26101123, 16.0.14334.20974, 16.0.17932.21056, https://aka.ms/OfficeSecurityReleases
Vendor guidance

Release Notes

Microsoft Security Response CenterCVE-2026-77902
HighCVSS 8.8

Microsoft Office Excel Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Affected productsMicrosoft Office 365 for Mac, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office LTSC for Mac 2021
Fixed versions16.114.26101123, https://aka.ms/OfficeSecurityReleases, 16.0.14334.20974, 16.0.17932.21056
Vendor guidance

Release Notes

Microsoft Security Response CenterCVE-2026-70302
HighCVSS 8.8

Microsoft Office Word Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Affected productsMicrosoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 64-bit editions
Fixed versions16.114.26101123, 16.0.14334.20974, 16.0.17932.21056, https://aka.ms/OfficeSecurityReleases
Vendor guidance

Release Notes

Microsoft Security Response CenterCVE-2026-70301
HighCVSS 8.8

Microsoft Office Word Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Affected productsMicrosoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 64-bit editions
Fixed versions16.114.26101123, 16.0.14334.20974, 16.0.17932.21056, https://aka.ms/OfficeSecurityReleases
Vendor guidance

Release Notes

Microsoft Security Response CenterCVE-2026-70287
HighCVSS 8.8

Microsoft Office Word Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Affected productsMicrosoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 64-bit editions
Fixed versions16.114.26101123, 16.0.14334.20974, 16.0.17932.21056, https://aka.ms/OfficeSecurityReleases
Vendor guidance

Release Notes

Microsoft Security Response CenterCVE-2026-70281
HighCVSS 7.5

Microsoft Office Outlook Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.

Affected productsMicrosoft Office 365 for Mac, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office LTSC for Mac 2021
Fixed versions16.114.26101123, https://aka.ms/OfficeSecurityReleases, 16.0.14334.20974, 16.0.17932.21056
Vendor guidance

Release Notes

Microsoft Security Response CenterCVE-2026-70268
HighCVSS 8.8

Microsoft Office Word Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Affected productsMicrosoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 64-bit editions
Fixed versions16.114.26101123, 16.0.14334.20974, 16.0.17932.21056, https://aka.ms/OfficeSecurityReleases
Vendor guidance

Release Notes

Microsoft Security Response CenterCVE-2026-70263
HighCVSS 6.5

Microsoft Office Word Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

Affected productsMicrosoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 64-bit editions
Fixed versions16.114.26101123, 16.0.14334.20974, 16.0.17932.21056, https://aka.ms/OfficeSecurityReleases
Vendor guidance

Release Notes

Microsoft Security Response CenterCVE-2026-70254
HighCVSS 8.8

Microsoft Office Excel Remote Code Execution Vulnerability

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Affected productsMicrosoft Office 365 for Mac, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office LTSC 2021 for 64-bit editions
Fixed versions16.114.26101123, https://aka.ms/OfficeSecurityReleases, 16.0.14334.20974, 16.0.17932.21056
Vendor guidance

Release Notes

Microsoft Security Response CenterCVE-2026-70220
HighCVSS 7.8

Microsoft Office Word Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Affected productsMicrosoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions
Fixed versions16.0.14334.20974, 16.0.17932.21056, https://aka.ms/OfficeSecurityReleases, 16.114.26101123
Vendor guidance

Release Notes

Microsoft Security Response CenterCVE-2026-70206
HighCVSS 6.5

Microsoft Office Word Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

Affected productsMicrosoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 64-bit editions
Fixed versions16.114.26101123, 16.0.14334.20974, 16.0.17932.21056, https://aka.ms/OfficeSecurityReleases
Vendor guidance

Release Notes

Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources