Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
16,884Advisories collected
6,314Published or updated in 30 days
6,999Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

16,884 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2026-78515
HighCVSS 6.5

Microsoft Office Excel Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

Affected productsMicrosoft Office 365 for Mac, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems
Fixed versions16.113.26091433, 16.0.10417.20207, 16.0.20326.20138, 16.0.14334.20906
Vendor guidance

Release Notes Install KB5002916.

CVE-2026-78515
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-78514
HighCVSS 8.8

Microsoft Office Word Remote Code Execution Vulnerability

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Affected productsMicrosoft Office 365 for Mac, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems
Fixed versions16.113.26091433, 16.0.10417.20207, 16.0.20326.20138, 16.0.14334.20906
Vendor guidance

Release Notes Install KB5002923.

CVE-2026-78514
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-78513
HighCVSS 5.5

Microsoft Office PowerPoint Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

Affected productsMicrosoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems
Fixed versions16.0.10417.20207, 16.0.20326.20138, 16.113.26091433, 16.0.14334.20906
Vendor guidance

Release Notes Install KB5002920.

CVE-2026-78513
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-78512
HighCVSS 8.8

Microsoft Office Word Remote Code Execution Vulnerability

Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Affected productsMicrosoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems
Fixed versions16.0.10417.20207, 16.0.20326.20138, 16.113.26091433, 16.0.14334.20906
Vendor guidance

Release Notes Install KB4011160.

CVE-2026-78512
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-78511
HighCVSS 8.8

Microsoft Office Word Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Affected productsMicrosoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems
Fixed versions16.0.10417.20207, 16.0.20326.20138, 16.113.26091433, 16.0.14334.20906
Vendor guidance

Release Notes Install KB5002923.

CVE-2026-78511
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-78507
HighCVSS 8.8

Microsoft Office Word Remote Code Execution Vulnerability

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Affected productsMicrosoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems
Fixed versions16.0.10417.20207, 16.0.20326.20138, 16.113.26091433, 16.0.14334.20906
Vendor guidance

Release Notes

CVE-2026-78507
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-78506
HighCVSS 5.5

Microsoft Office Word Information Disclosure Vulnerability

Improper null termination in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

Affected productsMicrosoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems
Fixed versions16.0.10417.20207, 16.0.20326.20138, 16.113.26091433, 16.0.14334.20906
Vendor guidance

Release Notes Install KB5002923.

CVE-2026-78506
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-78504
HighCVSS 8.8

Microsoft Office Word Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Affected productsMicrosoft Office 365 for Mac, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems
Fixed versions16.113.26091433, 16.0.10417.20207, 16.0.20326.20138, 16.0.14334.20906
Vendor guidance

Release Notes Install KB5002923.

CVE-2026-78504
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-78503
HighCVSS 6.5

Microsoft Office Word Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

Affected productsMicrosoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems
Fixed versions16.0.10417.20207, 16.0.20326.20138, 16.113.26091433, 16.0.14334.20906
Vendor guidance

Release Notes Install KB5002923.

CVE-2026-78503
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-72977
HighCVSS 6.5

Microsoft Office PowerPoint Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

Affected productsMicrosoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems
Fixed versions16.0.10417.20207, 16.0.20326.20138, 16.113.26091433, 16.0.14334.20906
Vendor guidance

Release Notes Install KB5002920.

CVE-2026-72977
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-72976
HighCVSS 5.0

Microsoft Office Word Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office Word allows an authorized attacker to disclose information locally.

Affected productsMicrosoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems
Fixed versions16.0.10417.20207, 16.0.20326.20138, 16.113.26091433, 16.0.14334.20906
Vendor guidance

Release Notes Install KB5002923.

CVE-2026-72976
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-72975
HighCVSS 6.5

Microsoft Office PowerPoint Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

Affected productsMicrosoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems
Fixed versions16.0.10417.20207, 16.0.20326.20138, 16.113.26091433, 16.0.14334.20906
Vendor guidance

Release Notes Install KB5002920.

CVE-2026-72975
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-72974
HighCVSS 6.5

Microsoft Office Excel Information Disclosure Vulnerability

Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

Affected productsMicrosoft Office 365 for Mac, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems
Fixed versions16.113.26091433, 16.0.10417.20207, 16.0.20326.20138, 16.0.14334.20906
Vendor guidance

Release Notes Install KB5002916.

CVE-2026-72974
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-72973
HighCVSS 8.8

Microsoft Office Word Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Affected productsMicrosoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems
Fixed versions16.0.10417.20207, 16.0.20326.20138, 16.113.26091433, 16.0.14334.20906
Vendor guidance

Release Notes Install KB5002923.

CVE-2026-72973
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-72972
HighCVSS 8.8

Microsoft Office Word Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Affected productsMicrosoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems
Fixed versions16.0.10417.20207, 16.0.20326.20138, 16.113.26091433, 16.0.14334.20906
Vendor guidance

Release Notes Install KB5002923.

CVE-2026-72972
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-72938
HighCVSS 6.5

Microsoft Office PowerPoint Information Disclosure Vulnerability

Access of resource using incompatible type ('type confusion') in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

Affected productsMicrosoft Office LTSC 2024 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office 2019 for 32-bit editions
Fixed versions16.0.17932.20976, 16.0.20326.20138, 16.0.14334.20906, 16.0.10417.20207
Vendor guidance

Release Notes

CVE-2026-72938
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-69759
HighCVSS 8.8

Microsoft Office Word Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Affected productsMicrosoft Office 365 for Mac, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems
Fixed versions16.113.26091433, 16.0.10417.20207, 16.0.20326.20138, 16.0.14334.20906
Vendor guidance

Release Notes Install KB5002923.

CVE-2026-69759
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-69739
HighCVSS 6.5

Microsoft Office Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.

Affected productsMicrosoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems
Fixed versions16.0.10417.20207, 16.0.20326.20138, 16.113.26091433, 16.0.14334.20906
Vendor guidance

Release Notes Install KB5002916.

CVE-2026-69739
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-69734
HighCVSS 6.5

Microsoft Office Word Information Disclosure Vulnerability

Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

Affected productsMicrosoft Office 365 for Mac, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems
Fixed versions16.113.26091433, 16.0.10417.20207, 16.0.20326.20138, 16.0.14334.20906
Vendor guidance

Release Notes Install KB5002916.

CVE-2026-69734
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-69722
HighCVSS 8.8

Microsoft Office Word Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Affected productsMicrosoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems
Fixed versions16.0.10417.20207, 16.0.20326.20138, 16.113.26091433, 16.0.14334.20906
Vendor guidance

Release Notes Install KB5002923.

CVE-2026-69722
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-69719
HighCVSS 6.5

Microsoft Office Word Information Disclosure Vulnerability

Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

Affected productsMicrosoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems
Fixed versions16.0.10417.20207, 16.0.20326.20138, 16.113.26091433, 16.0.14334.20906
Vendor guidance

Release Notes Install KB5002923.

CVE-2026-69719
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-69686
HighCVSS 8.8

Microsoft Office Word Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Affected productsMicrosoft Office 365 for Mac, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems
Fixed versions16.113.26091433, 16.0.10417.20207, 16.0.20326.20138, 16.0.14334.20906
Vendor guidance

Release Notes Install KB5002923.

CVE-2026-69686
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-69671
HighCVSS 8.8

Microsoft Office Word Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Affected productsMicrosoft Office 365 for Mac, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems
Fixed versions16.113.26091433, 16.0.10417.20207, 16.0.20326.20138, 16.0.14334.20906
Vendor guidance

Release Notes Install KB5002923.

CVE-2026-69671
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources