CurrentChecked 15 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
11Vendor sources
16,884Advisories collected
6,314Published or updated in 30 days
6,999Marked critical or high
Coverage
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
CurrentChecked 54 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
Check delayedChecked 24 days ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 55 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 54 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 10 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 10 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 2 hours ago
Checked every 6 hours
Browse this vendor's advisories
Official source
CurrentChecked 10 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 54 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 10 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
16,884 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
Microsoft Security Response CenterCVE-2026-85885
CriticalCVSS 9.9
Microsoft 365 Copilot Elevation of Privilege Vulnerability
Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an authorized attacker to elevate privileges over a network.
Affected productsMicrosoft 365 Copilot
Microsoft Security Response CenterCVE-2026-85878
CriticalCVSS 9.9
Azure Database for PostgreSQL Elevation of Privilege Vulnerability
Improper authorization in Azure Database for PostgreSQL allows an authorized attacker to elevate privileges over a network.
Affected productsAzure HorizonDB
Microsoft Security Response CenterCVE-2026-83946
CriticalCVSS 8.2
Azure Portal Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Azure Portal allows an unauthorized attacker to perform spoofing over a network.
Affected productsAzure Portal
Microsoft Security Response CenterCVE-2026-83944
CriticalCVSS 10.0
Azure Logic Apps Elevation of Privilege Vulnerability
Improper access control in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.
Affected productsAzure Logic Apps
Microsoft Security Response CenterCVE-2026-77903
CriticalCVSS 9.0
Microsoft Dataverse Elevation of Privilege Vulnerability
Authentication bypass by spoofing in Microsoft Dataverse allows an unauthorized attacker to elevate privileges over a network.
Affected productsMicrosoft Dataverse
Microsoft Security Response CenterCVE-2026-70200
CriticalCVSS 10.0
Azure Logic Apps Elevation of Privilege Vulnerability
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.
Affected productsAzure Logic Apps
Microsoft Security Response CenterCVE-2026-70009
CriticalCVSS 9.3
Azure Arc Elevation of Privilege Vulnerability
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Arc allows an unauthorized attacker to elevate privileges over a network.
Affected productsAzure ARC
Microsoft Security Response CenterCVE-2026-69865
CriticalCVSS 10.0
Microsoft Container Registry Elevation of Privilege Vulnerability
Authorization bypass through user-controlled key in Microsoft Container Registry allows an unauthorized attacker to elevate privileges over a network.
Affected productsAzure Container Registry
Microsoft Security Response CenterCVE-2026-69843
CriticalCVSS 10.0
Microsoft Fabric Elevation of Privilege Vulnerability
Authentication bypass by spoofing in Microsoft Fabric allows an unauthorized attacker to elevate privileges over a network.
Affected productsMicrosoft Fabric
Microsoft Security Response CenterCVE-2026-69399
CriticalCVSS 9.9
Azure Arc Elevation of Privilege Vulnerability
Unintended proxy or intermediary in Azure Arc allows an authorized attacker to elevate privileges over a network.
Affected productsAzure ARC
Microsoft Security Response CenterCVE-2026-68791
CriticalCVSS 8.6
Azure Machine Learning Information Disclosure Vulnerability
Incorrect authorization in Azure Machine Learning allows an unauthorized attacker to disclose information over a network.
Affected productsAzure Machine Learning
Microsoft Security Response CenterCVE-2026-62874
CriticalCVSS 10.0
Azure Billing Elevation of Privilege Vulnerability
Insufficient verification of data authenticity in Azure Billing allows an unauthorized attacker to elevate privileges over a network.
Affected productsAzure Billing
Microsoft Security Response CenterCVE-2026-81959
CriticalCVSS 7.8
Microsoft Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Affected productsMicrosoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems
Fixed versions16.0.10417.20207, 16.0.20326.20140, 16.113.26091433, 16.0.14334.20906
Vendor guidance
Release Notes Install KB5002914. Install KB5002904.
Microsoft Security Response CenterCVE-2026-81955
CriticalCVSS 8.8
Windows Graphics Component Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
Affected productsMicrosoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems
Fixed versions16.0.10417.20207, 16.0.20326.20138, 16.113.26091433, 16.0.14334.20906
Vendor guidance
Release Notes Install KB5002916. Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5122874. Install KB5123065. Install KB512...
Microsoft Security Response CenterCVE-2026-81953
CriticalCVSS 7.8
Microsoft Excel Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Affected productsMicrosoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems
Fixed versions16.0.10417.20207, 16.0.20326.20138, 16.113.26091433, 16.0.14334.20906
Vendor guidance
Release Notes Install KB5002914. Install KB5002904.
Microsoft Security Response CenterCVE-2026-81952
CriticalCVSS 8.8
Microsoft Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Affected productsMicrosoft Office 365 for Mac, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, Microsoft 365 Apps for Enterprise for 32-bit Systems
Fixed versions16.113.26091433, 16.0.20326.20138, 16.0.5569.1003, 16.0.10417.20207
Vendor guidance
Release Notes Install KB5002916.
Microsoft Security Response CenterCVE-2026-81950
CriticalCVSS 7.8
Microsoft Excel Remote Code Execution Vulnerability
Double free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Affected productsMicrosoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems
Fixed versions16.0.10417.20207, 16.0.20326.20138, 16.113.26091433, 16.0.14334.20906
Vendor guidance
Release Notes Install KB5002914. Install KB5002904.
Microsoft Security Response CenterCVE-2026-81949
CriticalCVSS 7.8
Microsoft Excel Remote Code Execution Vulnerability
Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Affected productsMicrosoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems
Fixed versions16.0.10417.20207, 16.0.20326.20138, 16.113.26091433, 16.0.14334.20906
Vendor guidance
Release Notes Install KB5002914. Install KB5002904.
Microsoft Security Response CenterCVE-2026-81948
CriticalCVSS 7.8
Microsoft Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Affected productsMicrosoft Office 365 for Mac, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems
Fixed versions16.113.26091433, 16.0.10417.20207, 16.0.20326.20138, 16.0.14334.20906
Vendor guidance
Release Notes Install KB5002914. Install KB5002904.
Microsoft Security Response CenterCVE-2026-78525
CriticalCVSS 8.8
Microsoft Office Outlook Remote Code Execution Vulnerability
Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
Affected productsMicrosoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems
Fixed versions16.0.10417.20207, 16.0.20326.20138, 16.113.26091433, 16.0.14334.20906
Vendor guidance
Release Notes Install KB5002923.
Microsoft Security Response CenterCVE-2026-78520
CriticalCVSS 6.5
Microsoft Office Outlook Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
Affected productsMicrosoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems
Fixed versions16.0.10417.20207, 16.0.20326.20138, 16.113.26091433, 16.0.14334.20906
Vendor guidance
Release Notes Install KB5002923.
Microsoft Security Response CenterCVE-2026-78509
CriticalCVSS 9.8
Microsoft Office Outlook Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
Affected productsMicrosoft Office 365 for Mac, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems
Fixed versions16.113.26091433, 16.0.10417.20207, 16.0.20326.20138, 16.0.14334.20906
Vendor guidance
Release Notes Install KB5002923.
Microsoft Security Response CenterCVE-2026-78505
CriticalCVSS 8.8
Microsoft Office Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
Affected productsMicrosoft Office 365 for Mac, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems
Fixed versions16.113.26091433, 16.0.10417.20207, 16.0.20326.20138, 16.0.14334.20906
Vendor guidance
Release Notes Install KB5002916.
Microsoft Security Response CenterCVE-2026-78439
CriticalCVSS 8.8
Microsoft Office Graphics Component Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
Affected productsMicrosoft Office LTSC for Mac 2021, Microsoft Office for Android, Microsoft Office LTSC for Mac 2024, Microsoft Office 365 for Mac
Fixed versions16.113.26091433, 16.0.20430.20000
Vendor guidance
Release Notes
Before you act
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.