CurrentChecked 17 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
11Vendor sources
16,884Advisories collected
6,334Published or updated in 30 days
6,998Marked critical or high
Coverage
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
CurrentChecked 33 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
Check delayedChecked 24 days ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 33 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 33 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 17 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 17 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked about an hour ago
Checked every 6 hours
Browse this vendor's advisories
Official source
CurrentChecked 17 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 33 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 17 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
16,884 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
Microsoft Security Response CenterCVE-2026-65669
CriticalCVSS 9.6
Microsoft SQL Server Elevation of Privilege Vulnerability
Improper neutralization of special elements in output used by a downstream component ('injection') in SQL Server allows an unauthorized attacker to elevate privileges over a network.
Affected productsSQL Server Management Studio 22
Fixed versions22.8.2
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-58599
CriticalCVSS 7.8
HEVC Video Extensions Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.
Affected productsHEVC Video Extensions, HEVC Video Extensions for Licensed Applications, HEVC Video Extensions from Device Manufacturer on Windows 10 Version 1809 for 32-bit Systems, HEVC Video Extensions from Device Manufacturer on Windows 10 Version 1809 for x64-based Systems
Fixed versions2.4.87.0, 2.4.85.0, 2.4.86.0, 2.5.25.0
Vendor guidance
Update Information
Microsoft Security Response CenterCVE-2026-34182
CriticalCVSS 9.1
CMS AuthEnvelopedData Processing May Accept Forged Messages
Mariner
Affected productsMicrosoft Visual Studio 2022 version 17.14, Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10), Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8), azl3 edk2 20240524git3e722403cd16-17 on Azure Linux 3.0
Fixed versions16.11.60, 15.9.83, 17.14.40, 20240524git3e722403cd16-18
Vendor guidance
Release Notes CBL-Mariner Releases
Microsoft Security Response CenterCVE-2026-83941
CriticalCVSS 9.9
Entra ID Elevation of Privilege Vulnerability
Missing authorization in Entra ID allows an authorized attacker to elevate privileges over a network.
Affected productsMicrosoft Entra ID
Microsoft Security Response CenterCVE-2026-83711
CriticalCVSS 10.0
Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability
Authorization bypass through user-controlled key in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a network.
Affected productsMicrosoft Azure Active Directory B2C
Microsoft Security Response CenterCVE-2026-80098
CriticalCVSS 9.3
Copilot Studio Elevation of Privilege Vulnerability
Improper verification of cryptographic signature in Copilot Studio allows an unauthorized attacker to elevate privileges over a network.
Affected productsMicrosoft Copilot Studio
Microsoft Security Response CenterCVE-2026-70352
CriticalCVSS 10.0
Azure AI Language Elevation of Privilege Vulnerability
Missing authentication for critical function in Azure AI Language allows an unauthorized attacker to elevate privileges over a network.
Affected productsAzure AI Language Authoring
Microsoft Security Response CenterCVE-2026-70178
CriticalCVSS 8.5
Microsoft Fabric Elevation of Privilege Vulnerability
Missing authorization in Microsoft Fabric allows an authorized attacker to elevate privileges over a network.
Affected productsMicrosoft Fabric
Microsoft Security Response CenterCVE-2026-69857
CriticalCVSS 8.5
Azure Cosmos DB Spoofing Vulnerability
Authorization bypass through user-controlled key in Azure Cosmos DB allows an authorized attacker to perform spoofing over a network.
Affected productsAzure Cosmos DB
Microsoft Security Response CenterCVE-2026-65818
CriticalCVSS 8.5
Power Automate Elevation of Privilege Vulnerability
Server-side request forgery (ssrf) in Power Automate allows an authorized attacker to elevate privileges over a network.
Affected productsMicrosoft Power Platform
Microsoft Security Response CenterCVE-2026-62916
CriticalCVSS 9.1
Microsoft Entra ID Elevation of Privilege Vulnerability
Authentication bypass using an alternate path or channel in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network.
Affected productsMicrosoft Entra ID
Microsoft Security Response CenterCVE-2026-62906
CriticalCVSS 7.4
Microsoft Discovery Studio Information Disclosure Vulnerability
Improper neutralization of special elements in data query logic in Microsoft Discovery Studio allows an unauthorized attacker to disclose information over a network.
Affected productsMicrosoft Discovery Studio
Microsoft Security Response CenterCVE-2026-62823
CriticalCVSS 8.8
Windows DHCP Server Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over an adjacent network.
Affected productsWindows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation)
Fixed versions10.0.17763.9121, 10.0.20348.5499, 10.0.20348.5440, 10.0.26100.33296
Vendor guidance
Install KB5120238. Install KB5120242. Install KB5120229. Install KB5120233. Install KB5120228. Install KB5120418. Install KB5120386. Install KB5120385.
Microsoft Security Response CenterCVE-2026-65789
CriticalCVSS 8.1
Windows DNS Server Remote Code Execution Vulnerability
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
Affected productsWindows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation)
Fixed versions10.0.17763.9121, 10.0.20348.5499, 10.0.20348.5440, 10.0.26100.33296
Vendor guidance
Install KB5120238. Install KB5120242. Install KB5120229. Install KB5120233. Install KB5120228. Install KB5120418.
Microsoft Security Response CenterCVE-2026-62893
CriticalCVSS 9.8
Windows Deployment Services TFTP Server Remote Code Execution Vulnerability
Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network.
Affected productsWindows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation)
Fixed versions10.0.17763.9121, 10.0.20348.5499, 10.0.20348.5440, 10.0.26100.33296
Vendor guidance
Install KB5120238. Install KB5120242. Install KB5120229. Install KB5120233. Install KB5120228. Install KB5120418. Install KB5120386. Install KB5120385.
Microsoft Security Response CenterCVE-2026-62878
CriticalCVSS 9.8
Windows DNS Server Remote Code Execution Vulnerability
Stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code over a network.
Affected productsWindows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation)
Fixed versions10.0.17763.9121, 10.0.20348.5499, 10.0.20348.5440, 10.0.26100.33296
Vendor guidance
Install KB5120238. Install KB5120242. Install KB5120229. Install KB5120233. Install KB5120228. Install KB5120418. Install KB5120386. Install KB5120385.
Microsoft Security Response CenterCVE-2026-62820
CriticalCVSS 8.1
Windows DNS Server Remote Code Execution Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an unauthorized attacker to execute code over a network.
Affected productsWindows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation)
Fixed versions10.0.17763.9121, 10.0.20348.5499, 10.0.20348.5440, 10.0.26100.33296
Vendor guidance
Install KB5120238. Install KB5120242. Install KB5120229. Install KB5120233. Install KB5120228. Install KB5120418.
Microsoft Security Response CenterCVE-2026-62817
CriticalCVSS 8.8
Windows DNS Server Remote Code Execution Vulnerability
Out-of-bounds write in Windows DNS allows an unauthorized attacker to execute code over an adjacent network.
Affected productsWindows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation)
Fixed versions10.0.17763.9121, 10.0.20348.5499, 10.0.20348.5440, 10.0.26100.33296
Vendor guidance
Install KB5120238. Install KB5120242. Install KB5120229. Install KB5120233. Install KB5120228.
Microsoft Security Response CenterCVE-2026-44814
HighCVSS 5.5
Windows DWM Core Library Information Disclosure Vulnerability
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.
Affected productsWindows 11 version 26H1 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems
Fixed versions10.0.28000.2269
Vendor guidance
Install KB5095051.
Microsoft Security Response CenterCVE-2026-42914
HighCVSS 5.3
Windows Kerberos Denial of Service Vulnerability
Out-of-bounds read in Windows Kerberos allows an authorized attacker to deny service over a network.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8880, 10.0.20348.5256, 10.0.19044.7417, 10.0.19045.7417
Vendor guidance
Install KB5094123. Install KB5094128. Install KB5094127. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051. Install KB5094122. Install KB5094042. Install KB5094041.
Microsoft Security Response CenterCVE-2026-57085
HighCVSS 5.5
Windows Print Spooler Information Disclosure Vulnerability
Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9020, 10.0.20348.5386, 10.0.19044.7548, 10.0.19045.7548
Vendor guidance
Install KB5099538. Install KB5099540. Install KB5099539. Install KB5099536. Install KB5101650. Install KB5101649. Install KB5099535. Install KB5099445. Install KB5099444.
Microsoft Security Response CenterCVE-2026-54990
HighCVSS 9.8
Remote Desktop Client Remote Code Execution Vulnerability
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
Affected productsWindows Server 2025 (Server Core installation), Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems
Fixed versions10.0.26100.33158, 10.0.26200.8875, 10.0.26100.8875, 10.0.28000.2525
Vendor guidance
Install KB5099536. Install KB5101650. Install KB5101649.
Microsoft Security Response CenterCVE-2026-50453
HighCVSS 6.1
Windows USB Audio Class Driver Information Disclosure Vulnerability
Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to disclose information with a physical attack.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9020, 10.0.20348.5386, 10.0.19044.7548, 10.0.19045.7548
Vendor guidance
Install KB5099538. Install KB5099540. Install KB5099539. Install KB5099536. Install KB5101650. Install KB5101649. Install KB5099535. Install KB5099445. Install KB5099444.
Microsoft Security Response CenterCVE-2026-85877
HighCVSS 8.8
Windows Print Spooler Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Print Spooler Components allows an unauthorized attacker to execute code over a network.
Affected productsWindows 11 Version 24H2 for x64-based Systems
Fixed versions10.0.26100.9445
Vendor guidance
Install KB5124008.
Before you act
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.