CurrentChecked 5 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
11Vendor sources
16,745Advisories collected
6,299Published or updated in 30 days
6,969Marked critical or high
Coverage
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
CurrentChecked 50 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
Check delayedChecked 20 days ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked about an hour ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 59 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 5 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 5 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 3 hours ago
Checked every 6 hours
Browse this vendor's advisories
Official source
CurrentChecked 5 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 55 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 5 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
16,745 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
Microsoft Security Response CenterCVE-2026-70190
HighCVSS 7.3
.NET Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
Affected products.NET 9.0 runtime installed on Windows, .NET 10.0 runtime installed on Windows, Microsoft Visual Studio 2026 version 18.10, Microsoft Visual Studio 2022 version 17.14
Fixed versions9.0.319, 9.0.122, 10.0.113, 18.10.4, 17.14.42
Vendor guidance
Release Notes Install KB5130035. Install KB5130036.
Microsoft Security Response CenterCVE-2026-70188
HighCVSS 9.1
ASP.NET Core Security Feature Bypass Vulnerability
Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.
Affected productsMicrosoft Visual Studio 2026 version 18.10, Microsoft Visual Studio 2022 version 17.14, ASP.NET Core 11.0, ASP.NET Core 9.0
Fixed versions18.10.4, 17.14.42, 11.0.0-rc.2, 9.0.21
Vendor guidance
Release Notes Install KB5130035. Install KB5130036. Install KB5130034.
Microsoft Security Response CenterCVE-2026-70179
HighCVSS 7.5
ASP.NET Core Elevation of Privilege Vulnerability
Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network.
Affected productsMicrosoft Visual Studio 2026 version 18.10, Microsoft Visual Studio 2022 version 17.14, Microsoft.AspNetCore.Authentication.Negotiate on .NET 10.0 runtime installed on Windows, Microsoft.AspNetCore.Authentication.Negotiate on .NET 10.0 runtime installed on Linux
Fixed versions18.10.4, 17.14.42, 10.0.13, 8.0.32
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-70174
HighCVSS 8.8
.NET Remote Code Execution Vulnerability
Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network.
Affected productsMicrosoft Visual Studio 2026 version 18.10, .NET 11.0 runtime installed on Windows, Microsoft Visual Studio 2022 version 17.14, .NET 10.0 runtime installed on Windows
Fixed versions18.10.4, 11.0.0-rc.2, 17.14.42, 10.0.13
Vendor guidance
Release Notes Install KB5130036. Install KB5130034. Install KB5130035. Install KB5127689. Install KB5127690. Install KB5127691. Install KB5127692. Install KB5127693. Install KB5127694. Install KB5127696. Install KB512...
Microsoft Security Response CenterCVE-2026-70165
HighCVSS 6.7
.NET Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
Affected productsMicrosoft Visual Studio 2026 version 18.10, Microsoft Visual Studio 2022 version 17.14, .NET 9.0 runtime installed on Windows, .NET 10.0 runtime installed on Windows
Fixed versions18.10.4, 17.14.42, 9.0.319, 9.0.122, 10.0.402
Vendor guidance
Release Notes Install KB5130035. Install KB5130036.
Microsoft Security Response CenterCVE-2026-70159
HighCVSS 7.5
ASP.NET Core Denial of Service Vulnerability
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Affected productsMicrosoft.AspNetCore.SignalR.Common on .NET 10.0 runtime installed on Windows, Microsoft.AspNetCore.SignalR.Common on .NET 10.0 runtime installed on Linux, Microsoft.AspNetCore.SignalR.Common on .NET 10.0 runtime installed on Mac OS, Microsoft.AspNetCore.SignalR.Core on .NET 10.0 runtime installed on Windows
Fixed versions10.0.13, 1.2.14, 11.0.0-rc.2, 8.0.32
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-70096
HighCVSS 9.8
Windows Rich Text Edit Control Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a network.
Affected productsWindows 11 Version 26H2 for ARM64-based Systems, Windows 11 Version 26H2 for x64-based Systems, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems
Fixed versions10.0.26300.9711, https://aka.ms/OfficeSecurityReleases, 16.0.14334.20974, 16.0.17932.21056
Vendor guidance
Release Notes Install KB5127648. Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5126653. Install KB5127646. Install KB5126868. Install KB5126835. Install KB5126836.
Microsoft Security Response CenterCVE-2026-69651
HighCVSS 7.5
.NET Denial of Service Vulnerability
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
Affected productsMicrosoft .NET Framework 3.5 on Windows 11 version 26H1, Microsoft .NET Framework 3.5 on Windows Server 2012, Microsoft .NET Framework 3.5 on Windows Server 2012 R2, Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 version 1607
Fixed versions2.0.50727.9188 AND 3.0.30729.9171, 2.0.50727.8987 AND 3.0.30729.8982, 2.0.50727.8987 AND 3.0.30729.8982 AND 4.7.4150.0, 2.0.50727.9073 AND 3.0.30729.9070 AND 4.7.4150.0
Vendor guidance
Release Notes Install KB5127696. Install KB5127660. Install KB5127664. Install KB5126868. Install KB5127666. Install KB5127685. Install KB5127683. Install KB5127687. Install KB5127667. Install KB5127668. Install KB512...
Microsoft Security Response CenterCVE-2026-66822
HighCVSS 5.9
.NET Information Disclosure Vulnerability
Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network.
Affected products.NET 11.0 runtime installed on Windows, .NET 11.0 runtime installed on Linux, .NET 11.0 runtime installed on Mac OS, .NET 10.0 runtime installed on Windows
Fixed versions11.0.0-rc.2, 10.0.13, 8.0.32, 9.0.21
Vendor guidance
Release Notes Install KB5130036. Install KB5130034. Install KB5130035.
Microsoft Security Response CenterCVE-2026-58280
HighCVSS 7.5
.NET Denial of Service Vulnerability
Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network.
Affected products.NET 9.0 runtime installed on Windows, .NET 9.0 runtime installed on Linux, .NET 9.0 runtime installed on Mac OS, .NET 8.0 runtime installed on Windows
Fixed versions9.0.21, 8.0.32, 10.0.13, 11.0.0-rc.2
Vendor guidance
Release Notes Install KB5130035. Install KB5130034. Install KB5130036. Install KB5127689. Install KB5127690. Install KB5127691. Install KB5127692. Install KB5127693. Install KB5127694. Install KB5127696. Install KB512...
Microsoft Security Response CenterCVE-2026-105715
HighCVSS 7.5
Microsoft Office Word Remote Code Execution Vulnerability
Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Affected productsMicrosoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 64-bit editions
Fixed versions16.114.26101123, 16.0.14334.20974, 16.0.17932.21056, https://aka.ms/OfficeSecurityReleases
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-105599
HighCVSS 7.5
Microsoft Office PowerPoint Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
Affected productsMicrosoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 64-bit editions
Fixed versions16.114.26101123, 16.0.14334.20974, 16.0.17932.21056, https://aka.ms/OfficeSecurityReleases
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-102858
HighCVSS 8.8
Microsoft Office OneNote Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network.
Affected productsMicrosoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, Microsoft Office 365 for Mac
Fixed versions16.114.26101123
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-100212
HighCVSS 8.8
Microsoft Office Excel Remote Code Execution Vulnerability
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Affected productsMicrosoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions
Fixed versions16.0.14334.20974, 16.0.17932.21056, https://aka.ms/OfficeSecurityReleases, 16.114.26101123
Vendor guidance
Release Notes Install KB5002928.
Microsoft Security Response CenterCVE-2026-92707
MediumCVSS 5.3
MessagePack-CSharp Denial of Service Vulnerability
Improperly controlled sequential memory allocation in .NET allows an unauthorized attacker to deny service over a network.
Affected productsMicrosoft.AspNetCore.SignalR.Protocols.MessagePack on .NET 10.0 runtime installed on Windows, Microsoft.AspNetCore.SignalR.Protocols.MessagePack on .NET 10.0 runtime installed on Linux, Microsoft.AspNetCore.SignalR.Protocols.MessagePack on .NET 10.0 runtime installed on Mac OS, Microsoft.AspNetCore.SignalR.Protocols.MessagePack on .NET 11.0 runtime installed on Windows
Fixed versions10.0.13, 11.0.0-rc.2, 8.0.32, 9.0.21
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-97905
MediumCVSS 5.5
cpufreq: zero-initialize policy cpumask before sysfs publication
Mariner
Affected productsazl3 kernel 6.6.157.1-1 on Azure Linux 3.0
Fixed versions6.6.158.1-1
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-97899
LowCVSS 3.3
drm/i915: Fix memory leak in query_perf_config_list()
Mariner
Affected productsazl3 kernel 6.6.157.1-1 on Azure Linux 3.0
Fixed versions6.6.158.1-1
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-97957
HighCVSS 8.8
net: hinic: fix mailbox segment buffer overflow
Mariner
Affected productsazl3 kernel 6.6.157.1-1 on Azure Linux 3.0
Fixed versions6.6.158.1-1
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-97930
LowCVSS 1.6
ALSA: usbusx2y: fix in04_last array size mismatch with in04_buf
Mariner
Affected productsazl3 kernel 6.6.157.1-1 on Azure Linux 3.0
Fixed versions6.6.158.1-1
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-97920
MediumCVSS 5.5
tracing: Keep the entry count when the histogram stats allocation fails
Mariner
Affected productsazl3 kernel 6.6.157.1-1 on Azure Linux 3.0
Fixed versions6.6.158.1-1
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-97922
MediumCVSS 5.5
tracing: Free histogram var refs regardless of how often they are referenced
Mariner
Affected productsazl3 kernel 6.6.157.1-1 on Azure Linux 3.0
Fixed versions6.6.158.1-1
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-97940
HighCVSS 7.8
ipv6: fix fib6 walker UAF on seq stop
Mariner
Affected productsazl3 kernel 6.6.157.1-1 on Azure Linux 3.0
Fixed versions6.6.158.1-1
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-97952
MediumCVSS 6.5
sunvdc: unmap LDC cookies when the descriptor send fails
Mariner
Affected productsazl3 kernel 6.6.157.1-1 on Azure Linux 3.0
Fixed versions6.6.158.1-1
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-97958
MediumCVSS 5.5
net/sched: cls_api: Don't replay RTM_GETCHAIN in tc_ctl_chain().
Mariner
Affected productsazl3 kernel 6.6.157.1-1 on Azure Linux 3.0
Fixed versions6.6.158.1-1
Vendor guidance
Release Notes
Before you act
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.