Vendor advisories

Microsoft Security Response Center

Browse 15,972 advisories from this official source. Search by product, CVE, severity, or advisory ID.

Current Checked 3 hours ago Checked every 6 hours

15,972 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2026-81949
CriticalCVSS 7.8

Microsoft Excel Remote Code Execution Vulnerability

Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Affected productsMicrosoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems
Fixed versions16.0.10417.20207, 16.0.20326.20138, 16.113.26091433, 16.0.14334.20906
Vendor guidance

Release Notes Install KB5002914. Install KB5002904.

Microsoft Security Response CenterCVE-2026-81948
CriticalCVSS 7.8

Microsoft Excel Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Affected productsMicrosoft Office 365 for Mac, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems
Fixed versions16.113.26091433, 16.0.10417.20207, 16.0.20326.20138, 16.0.14334.20906
Vendor guidance

Release Notes Install KB5002914. Install KB5002904.

Microsoft Security Response CenterCVE-2026-78525
CriticalCVSS 8.8

Microsoft Office Outlook Remote Code Execution Vulnerability

Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

Affected productsMicrosoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems
Fixed versions16.0.10417.20207, 16.0.20326.20138, 16.113.26091433, 16.0.14334.20906
Vendor guidance

Release Notes Install KB5002923.

Microsoft Security Response CenterCVE-2026-78520
CriticalCVSS 6.5

Microsoft Office Outlook Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

Affected productsMicrosoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems
Fixed versions16.0.10417.20207, 16.0.20326.20138, 16.113.26091433, 16.0.14334.20906
Vendor guidance

Release Notes Install KB5002923.

Microsoft Security Response CenterCVE-2026-78509
CriticalCVSS 9.8

Microsoft Office Outlook Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

Affected productsMicrosoft Office 365 for Mac, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems
Fixed versions16.113.26091433, 16.0.10417.20207, 16.0.20326.20138, 16.0.14334.20906
Vendor guidance

Release Notes Install KB5002923.

Microsoft Security Response CenterCVE-2026-78505
CriticalCVSS 8.8

Microsoft Office Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

Affected productsMicrosoft Office 365 for Mac, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems
Fixed versions16.113.26091433, 16.0.10417.20207, 16.0.20326.20138, 16.0.14334.20906
Vendor guidance

Release Notes Install KB5002916.

Microsoft Security Response CenterCVE-2026-78439
CriticalCVSS 8.8

Microsoft Office Graphics Component Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

Affected productsMicrosoft Office LTSC for Mac 2021, Microsoft Office for Android, Microsoft Office LTSC for Mac 2024, Microsoft Office 365 for Mac
Fixed versions16.113.26091433, 16.0.20430.20000
Vendor guidance

Release Notes

Microsoft Security Response CenterCVE-2026-77898
CriticalCVSS 7.5

Microsoft Office Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

Affected productsMicrosoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office 2019 for 64-bit editions
Fixed versions16.0.17932.20976, 16.0.14334.20906, 16.0.10417.20207, 16.0.20326.20138
Vendor guidance

Release Notes

Microsoft Security Response CenterCVE-2026-69797
CriticalCVSS 8.8

Microsoft Office PowerPoint Remote Code Execution Vulnerability

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

Affected productsMicrosoft Office 365 for Mac, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems
Fixed versions16.113.26091433, 16.0.10417.20207, 16.0.20326.20138, 16.0.14334.20906
Vendor guidance

Release Notes Install KB5002920.

Microsoft Security Response CenterCVE-2026-69678
CriticalCVSS 8.8

Microsoft Office PowerPoint Remote Code Execution Vulnerability

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

Affected productsMicrosoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems
Fixed versions16.0.10417.20207, 16.0.20326.20138, 16.113.26091433, 16.0.14334.20906
Vendor guidance

Release Notes Install KB5002920.

Microsoft Security Response CenterCVE-2026-69632
CriticalCVSS 8.8

Microsoft Office Remote Code Execution Vulnerability

Use after free in Microsoft Office allows an unauthorized attacker to execute code over a network.

Affected productsMicrosoft Office 365 for Mac, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems
Fixed versions16.113.26091433, 16.0.10417.20207, 16.0.20326.20138, 16.0.14334.20906
Vendor guidance

Release Notes

Microsoft Security Response CenterCVE-2026-67643
CriticalCVSS 9.8

Microsoft SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.

Affected productsMicrosoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (CU 26), Microsoft SQL Server 2025 for x64-based Systems (CU8)
Fixed versions16.0.1200.5, 17.0.1135.8, 16.0.4275.2, 17.0.4085.5
Vendor guidance

Install KB5122771. Install KB5122770. Install KB5122768. Install KB5122769.

Microsoft Security Response CenterCVE-2026-67636
CriticalCVSS 9.0

Microsoft SQL Server Remote Code Execution Vulnerability

Out-of-bounds read in SQL Server allows an unauthorized attacker to execute code over a network.

Affected productsMicrosoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (CU 32)
Fixed versions15.0.2190.7, 16.0.1200.5, 17.0.1135.8, 15.0.4490.9
Vendor guidance

Install KB5122773. Install KB5122771. Install KB5122770. Install KB5122772. Install KB5122768. Install KB5122769.

Microsoft Security Response CenterCVE-2026-67631
CriticalCVSS 9.8

Microsoft SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.

Affected productsMicrosoft SQL Server 2025 for x64-based Systems (CU8), Microsoft SQL Server 2022 for x64-based Systems (CU 26), Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (GDR)
Fixed versions17.0.4085.5, 16.0.4275.2, 14.0.2130.4, 15.0.2190.7
Vendor guidance

Install KB5122769. Install KB5122768. Install KB5122775. Install KB5122773. Install KB5122774. Install KB5122771. Install KB5122770. Install KB5122772.

Microsoft Security Response CenterCVE-2026-67378
CriticalCVSS 9.0

Microsoft SQL Server Remote Code Execution Vulnerability

Untrusted pointer dereference in SQL Server allows an unauthorized attacker to execute code over a network.

Affected productsMicrosoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (CU 32)
Fixed versions15.0.2190.7, 16.0.1200.5, 17.0.1135.8, 15.0.4490.9
Vendor guidance

Install KB5122773. Install KB5122771. Install KB5122770. Install KB5122772. Install KB5122769. Install KB5122768.

Microsoft Security Response CenterCVE-2026-68794
CriticalCVSS 7.8

Microsoft Excel Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Affected productsOffice Online Server, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems
Fixed versions16.0.10417.20175, https://aka.ms/OfficeSecurityReleases, 16.112.26081010, 16.0.5565.1001
Vendor guidance

Click to Run Release Notes Install KB5002884. Install KB5002903.

Microsoft Security Response CenterCVE-2026-62819
CriticalCVSS 8.1

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9121, 10.0.20348.5499, 10.0.20348.5440, 10.0.19044.7663
Vendor guidance

Install KB5120238. Install KB5120242. Install KB5120229. Install KB5120249. Install KB5120233. Install KB5120228. Install KB5121003. Install KB5120994. Install KB5120240. Install KB5121000. Install KB5120418. Install ...

Microsoft Security Response CenterCVE-2026-56176
HighCVSS 7.8

Windows Win32k Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9020, 10.0.20348.5386, 10.0.19044.7548, 10.0.19045.7548
Vendor guidance

Release Notes Install KB5099538. Install KB5099540. Install KB5099539. Install KB5099536. Install KB5101650. Install KB5101649. Install KB5099535. Install KB5099445. Install KB5099444.

Microsoft Security Response CenterCVE-2026-55121
HighCVSS 5.5

Microsoft Office Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

Affected productsMicrosoft Office 365 for Mac, Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft Office 2019 for 32-bit editions
Fixed versions16.111.26071215, 16.0.5561.1001, 16.0.10417.20175, https://aka.ms/OfficeSecurityReleases
Vendor guidance

Release Notes Click to Run Install KB5002891. Install KB5002892. Install KB5002883. Install KB5002885. Install KB5002882. Install KB5002887.

Microsoft Security Response CenterCVE-2026-33835
HighCVSS 7.8

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

Affected productsWindows Server 2019, Windows Server 2022, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems
Fixed versions10.0.17763.8755, 10.0.20348.5139, 10.0.20348.5074, 10.0.19044.7291
Vendor guidance

Install KB5087538. Install KB5087545. Install KB5087424. Install KB5087544. Install KB5094127. Install KB5087539. Install KB5087423. Install KB5089549. Install KB5089466. Install KB5087420. Install KB5087541. Install ...

Microsoft Security Response CenterCVE-2026-85875
HighCVSS 5.5

Microsoft Office Excel Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Affected productsMicrosoft Office 2016 (64-bit edition), Microsoft Office 2016 (32-bit edition), Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft Office LTSC 2024 for 32-bit editions
Fixed versions16.0.5569.1003, 16.0.20326.20138, 16.0.17932.20976, 16.113.26091433
Vendor guidance

Release Notes Install KB5002904. Install KB5002914.

Microsoft Security Response CenterCVE-2026-81960
HighCVSS 7.8

Microsoft Excel Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Affected productsMicrosoft Office 365 for Mac, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems
Fixed versions16.113.26091433, 16.0.10417.20207, 16.0.20326.20138, 16.0.14334.20906
Vendor guidance

Release Notes Install KB5002914. Install KB5002904.

Microsoft Security Response CenterCVE-2026-81958
HighCVSS 5.5

Microsoft Excel Information Disclosure Vulnerability

Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Affected productsMicrosoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems
Fixed versions16.0.10417.20207, 16.0.20326.20138, 16.113.26091433, 16.0.14334.20906
Vendor guidance

Release Notes Install KB5002914. Install KB5002904.

Microsoft Security Response CenterCVE-2026-81957
HighCVSS 7.8

Microsoft Excel Remote Code Execution Vulnerability

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Affected productsMicrosoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems
Fixed versions16.0.10417.20207, 16.0.20326.20138, 16.113.26091433, 16.0.14334.20906
Vendor guidance

Release Notes Install KB5002914. Install KB5002904.

Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources