CurrentChecked 8 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
9Vendor sources
4,737Advisories collected
2,721Published or updated in 30 days
2,119Marked critical or high
Coverage
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
CurrentChecked 8 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 8 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 43 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 8 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 8 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 33 minutes ago
Checked every 6 hours
Browse this vendor's advisories
Official source
CurrentChecked 8 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 8 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
4,737 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
Microsoft Security Response CenterCVE-2026-81393
HighCVSS 5.5
Microsoft Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
Affected productsMicrosoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems
Fixed versions16.0.10417.20207, 16.0.20326.20138, 16.0.14334.20906, 16.0.17932.20976
Vendor guidance
Release Notes Install KB5002914. Install KB5002904.
Microsoft Security Response CenterCVE-2026-81392
HighCVSS 5.5
Microsoft Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
Affected productsMicrosoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems
Fixed versions16.0.10417.20207, 16.0.20326.20138, 16.0.14334.20906, 16.0.17932.20976
Vendor guidance
Release Notes Install KB5002914. Install KB5002904.
Microsoft Security Response CenterCVE-2026-81391
HighCVSS 5.5
Microsoft Excel Information Disclosure Vulnerability
Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
Affected productsMicrosoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems
Fixed versions16.0.10417.20207, 16.0.20326.20138, 16.0.14334.20906, 16.0.17932.20976
Vendor guidance
Release Notes Install KB5002914. Install KB5002904.
Microsoft Security Response CenterCVE-2026-81390
HighCVSS 5.5
Microsoft Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
Affected productsOffice Online Server, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems
Fixed versions16.0.10417.20207, 16.0.20326.20138, 16.0.14334.20906, 16.0.17932.20976
Vendor guidance
Release Notes Install KB5002910. Install KB5002914. Install KB5002904.
Microsoft Security Response CenterCVE-2026-81389
HighCVSS 7.0
Microsoft Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Affected productsMicrosoft Office 365 for Mac, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems
Fixed versions16.0.10417.20207, 16.0.20326.20138, 16.0.14334.20906, 16.0.17932.20976
Vendor guidance
Release Notes Install KB5002914. Install KB5002904.
Microsoft Security Response CenterCVE-2026-81388
HighCVSS 7.8
Microsoft Excel Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Affected productsMicrosoft Office 365 for Mac, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems
Fixed versions16.0.10417.20207, 16.0.20326.20138, 16.0.14334.20906, 16.0.17932.20976
Vendor guidance
Release Notes Install KB5002914. Install KB5002904.
Microsoft Security Response CenterCVE-2026-81387
HighCVSS 5.5
Microsoft Excel Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
Affected productsMicrosoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems
Fixed versions16.0.10417.20207, 16.0.20326.20138, 16.0.14334.20906, 16.0.17932.20976
Vendor guidance
Release Notes Install KB5002914. Install KB5002904.
Microsoft Security Response CenterCVE-2026-81386
HighCVSS 7.8
Microsoft Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Affected productsMicrosoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems
Fixed versions16.0.10417.20207, 16.0.20326.20138, 16.0.14334.20906, 16.0.17932.20976
Vendor guidance
Release Notes Install KB5002914. Install KB5002904.
Microsoft Security Response CenterCVE-2026-81385
HighCVSS 8.8
Microsoft Office Publisher Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network.
Affected productsMicrosoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems
Fixed versions16.0.10417.20207, 16.0.20326.20138, 16.0.14334.20906, 16.0.17932.20976
Vendor guidance
Release Notes Install KB5002644.
Microsoft Security Response CenterCVE-2026-81383
HighCVSS 7.4
Visual Studio Code Information Disclosure Vulnerability
Use of incorrectly-resolved name or reference in Visual Studio Code allows an unauthorized attacker to disclose information over a network.
Affected productsVisual Studio Code
Fixed versions1.136.2
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-81381
HighCVSS 6.5
GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability
Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network.
Affected productsVisual Studio Code
Fixed versions1.136.2
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-81380
HighCVSS 5.3
GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability
Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network.
Affected productsVisual Studio Code
Fixed versions1.136.2
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-81378
HighCVSS 8.2
Visual Studio Code Security Feature Bypass Vulnerability
Interpretation conflict in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
Affected productsVisual Studio Code
Fixed versions1.136.2
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-81377
HighCVSS 6.5
Visual Studio Code Tampering Vulnerability
Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to perform tampering over a network.
Affected productsVisual Studio Code
Fixed versions1.136.2
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-81376
HighCVSS 9.6
Visual Studio Code Security Feature Bypass Vulnerability
Incomplete comparison with missing factors in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
Affected productsVisual Studio Code
Fixed versions1.136.2
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-81357
HighCVSS 8.2
Visual Studio Code Security Feature Bypass Vulnerability
Server-side request forgery (ssrf) in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
Affected productsVisual Studio Code
Fixed versions1.136.2
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-81356
HighCVSS 8.2
Visual Studio Code Security Feature Bypass Vulnerability
Inconsistent interpretation of http requests ('http request/response smuggling') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
Affected productsVisual Studio Code
Fixed versions1.136.2
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-81353
HighCVSS 7.8
HEIF Image Extensions Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.
Affected productsHEIF Image Extension
Fixed versions1.2.48.0
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-81349
HighCVSS 7.2
Azure HDInsight Ambari Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an os command ('os command injection') in Azure HDInsights allows an authorized attacker to elevate privileges over a network.
Affected productsAzure HDInsight
Fixed versions2606012120
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-80097
HighCVSS 8.6
Microsoft Authenticator Elevation of Privilege Vulnerability
Improper authentication in Microsoft Authenticator allows an unauthorized attacker to elevate privileges locally.
Affected productsMicrosoft Authenticator for Android
Fixed versions16.3.0
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-80096
HighCVSS 8.8
Windows Remote Desktop Services Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725
Vendor guidance
Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.
Microsoft Security Response CenterCVE-2026-80093
HighCVSS 7.0
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725
Vendor guidance
Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012.
Microsoft Security Response CenterCVE-2026-80091
HighCVSS 6.5
Microsoft Office Information Disclosure Vulnerability
Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information over a network.
Affected productsMicrosoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems
Fixed versions16.0.10417.20207, 16.0.20326.20138, 16.112.26083020, 16.0.14334.20906
Vendor guidance
Release Notes Install KB5002916.
Microsoft Security Response CenterCVE-2026-80090
HighCVSS 6.5
Microsoft Office Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
Affected productsMicrosoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems
Fixed versions16.0.10417.20207, 16.0.20326.20138, 16.0.14334.20906, 16.0.17932.20976
Vendor guidance
Release Notes Install KB5002923.
Before you act
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.
Read how SecurityAlert collects and checks threat intelligence.