Browse 15,985 advisories from this official source. Search by product, CVE, severity, or advisory ID.
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
Improper authorization in Copilot Cowork allows an unauthorized attacker to elevate privileges over a network.
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
Click to Run
Missing authentication for critical function in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
Install KB5002905. Install KB5002906. Install KB5002894. Install KB5002896. Install KB5002893.
Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally.
Click to Run Release Notes
Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.
Click to Run Release Notes
Integer underflow (wrap or wraparound) in Microsoft Office allows an unauthorized attacker to execute code locally.
Release Notes Click to Run Install KB5002897.
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Click to Run Release Notes Install KB5002901.
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
Release Notes Click to Run
Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
Release Notes Click to Run Install KB5002897.
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Click to Run Install KB5002901.
Authentication bypass by capture-replay in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
Install KB5121576. Install KB5121573. Install KB5121574. Install KB5121575.
Integer overflow or wraparound in Windows GDI+ allows an unauthorized attacker to execute code over a network.
Install KB5120238. Install KB5120242. Install KB5120229. Install KB5120249. Install KB5120233. Install KB5120228. Install KB5121003. Install KB5120994. Install KB5120240. Install KB5121000. Install KB5120418. Install ...
Stack-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
Install KB5120418. Install KB5120386. Install KB5120385.
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Click to Run Release Notes Install KB5002884. Install KB5002903.
Heap-based buffer overflow in Windows Key Guard allows an authorized attacker to elevate privileges locally.
Install KB5120238. Install KB5120242. Install KB5120229. Install KB5123303. Install KB5120249. Install KB5120233. Install KB5120228. Install KB5121003. Install KB5120994. Install KB5120240. Install KB5121000. Install ...
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
Install KB5002894. Install KB5002896. Install KB5002893.
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
Click to Run Release Notes
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
Click to Run Release Notes
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
Release Notes Click to Run Install KB5002902.
Use after free in Active Directory Certificate Services (AD CS) allows an authorized attacker to execute code over a network.
Install KB5120238. Install KB5120242. Install KB5120229. Install KB5120233. Install KB5120228. Install KB5120418. Install KB5120386. Install KB5120385.
Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network.
Install KB5120238. Install KB5120242. Install KB5120229. Install KB5120249. Install KB5120233. Install KB5120228. Install KB5121003. Install KB5120994. Install KB5120240. Install KB5121000. Install KB5120418. Install ...
Improper authentication in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
Install KB5002905. Install KB5002906. Install KB5002894. Install KB5002896. Install KB5002893.
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
Install KB5120238. Install KB5120242. Install KB5120229. Install KB5120249. Install KB5120233. Install KB5120228. Install KB5121003. Install KB5120994. Install KB5120240. Install KB5121000. Install KB5120418. Install ...
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
Install KB5002905. Install KB5002906. Install KB5002894. Install KB5002896. Install KB5002893.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.