CurrentChecked just now
Checked every 15 minutes
Browse this vendor's advisories
Official source
Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
11Vendor sources
18,986Advisories collected
6,818Published or updated in 30 days
8,727Marked critical or high
Coverage
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
CurrentChecked 25 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
Check delayedChecked 30 days ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 26 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 25 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 6 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked just now
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 5 hours ago
Checked every 6 hours
Browse this vendor's advisories
Official source
CurrentChecked 6 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
Check delayedChecked 3 days ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 6 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
18,986 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
Microsoft Security Response CenterCVE-2026-44803
CriticalCVSS 7.8
Windows Graphics Component Remote Code Execution Vulnerability
Integer overflow or wraparound in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8880, 10.0.20348.5256, 10.0.19044.7417, 10.0.19045.7417
Vendor guidance
Release Notes Install KB5094123. Install KB5094128. Install KB5094127. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051. Install KB5094122. Install KB5094042. Install KB5094041.
Microsoft Security Response CenterCVE-2026-24289
HighCVSS 7.8
Windows Kernel Elevation of Privilege Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Affected productsWindows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems
Fixed versions10.0.28000.1719, 10.0.17763.8511, 10.0.20348.4893, 10.0.20348.4830
Vendor guidance
Install KB5079466. Install KB5078752. Install KB5078766. Install KB5078737. Install KB5078885. Install KB5078740. Install KB5078736. Install KB5079473. Install KB5079420. Install KB5078883. Install KB5078734. Install ...
Microsoft Security Response CenterCVE-2026-45649
HighCVSS 7.1
Office for Android Spoofing Vulnerability
Improper access control in Office for Android allows an unauthorized attacker to perform spoofing locally.
Affected productsMicrosoft Excel for Android, Microsoft PowerPoint for Android, Microsoft Word for Android
Fixed versions16.0.20131.20024
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-45645
HighCVSS 7.8
Microsoft Office Remote Code Execution Vulnerability
Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.
Affected productsMicrosoft Office 365 for Mac, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems
Fixed versions16.110.26061317, https://aka.ms/OfficeSecurityReleases, 16.0.5556.1001
Vendor guidance
Release Notes Click to Run Install KB5002852.
Microsoft Security Response CenterCVE-2026-45643
HighCVSS 7.8
Microsoft Word Remote Code Execution Vulnerability
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Affected productsMicrosoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC 2021 for 64-bit editions
Fixed versionshttps://aka.ms/OfficeSecurityReleases, 16.110.26061317
Vendor guidance
Click to Run Release Notes
Microsoft Security Response CenterCVE-2026-45486
HighCVSS 7.8
Microsoft Word Remote Code Execution Vulnerability
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Affected productsMicrosoft Office 365 for Mac, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office LTSC for Mac 2021
Fixed versions16.110.26061317, https://aka.ms/OfficeSecurityReleases
Vendor guidance
Release Notes Click to Run
Microsoft Security Response CenterCVE-2026-45485
HighCVSS 3.3
Microsoft Office Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
Affected productsMicrosoft Office 365 for Mac, Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft Office 2019 for 32-bit editions
Fixed versions16.110.26061317, 16.0.5556.1005, 16.0.5556.1002, 16.0.10417.20153
Vendor guidance
Release Notes Click to Run Install KB5002880. Install KB5002881. Install KB5002874. Install KB5002876. Install KB5002873. Install KB5002878.
Microsoft Security Response CenterCVE-2026-45475
HighCVSS 7.8
Microsoft Office Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
Affected productsMicrosoft Office 365 for Mac, Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft Office 2019 for 32-bit editions
Fixed versions16.110.26061317, 16.0.5556.1005, 16.0.5556.1002, 16.0.10417.20153
Vendor guidance
Release Notes Click to Run Install KB5002880. Install KB5002881. Install KB5002874. Install KB5002876. Install KB5002873. Install KB5002878.
Microsoft Security Response CenterCVE-2026-45471
HighCVSS 7.8
Microsoft Word Remote Code Execution Vulnerability
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Affected productsMicrosoft Office 365 for Mac, Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft Office 2019 for 32-bit editions
Fixed versions16.110.26061317, 16.0.5556.1005, 16.0.5556.1002, 16.0.10417.20153
Vendor guidance
Release Notes Click to Run Install KB5002880. Install KB5002881. Install KB5002874. Install KB5002876. Install KB5002873. Install KB5002879.
Microsoft Security Response CenterCVE-2026-45469
HighCVSS 7.8
Microsoft Excel Remote Code Execution Vulnerability
Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Affected productsMicrosoft Office 365 for Mac, Office Online Server, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions
Fixed versions16.110.26061317, 16.0.10417.20137, https://aka.ms/OfficeSecurityReleases, 16.0.5556.1001
Vendor guidance
Release Notes Click to Run Install KB5002875. Install KB5002877.
Microsoft Security Response CenterCVE-2026-45466
HighCVSS 3.3
Microsoft Word Information Disclosure Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
Affected productsMicrosoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC 2021 for 64-bit editions
Fixed versionshttps://aka.ms/OfficeSecurityReleases, 16.110.26061317
Vendor guidance
Click to Run Release Notes
Microsoft Security Response CenterCVE-2026-45459
HighCVSS 3.3
Microsoft Excel Security Feature Bypass Vulnerability
Protection mechanism failure in Microsoft Office Excel allows an unauthorized attacker to bypass a security feature locally.
Affected productsMicrosoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC 2024 for 32-bit editions
Fixed versionshttps://aka.ms/OfficeSecurityReleases, 16.110.26061317
Vendor guidance
Click to Run Release Notes
Microsoft Security Response CenterCVE-2026-45457
HighCVSS 7.8
Microsoft Word Remote Code Execution Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Affected productsMicrosoft Office 365 for Mac, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office LTSC for Mac 2021
Fixed versions16.110.26061317, https://aka.ms/OfficeSecurityReleases
Vendor guidance
Release Notes Click to Run
Microsoft Security Response CenterCVE-2026-45455
HighCVSS 3.3
Microsoft Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
Affected productsOffice Online Server, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems
Fixed versions16.0.10417.20137, https://aka.ms/OfficeSecurityReleases, 16.110.26061317, 16.0.5556.1001
Vendor guidance
Click to Run Release Notes Install KB5002875. Install KB5002877.
Microsoft Security Response CenterCVE-2026-44824
HighCVSS 7.8
Microsoft Office Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
Affected productsMicrosoft Office 365 for Mac, Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft Office 2019 for 32-bit editions
Fixed versions16.110.26061317, 16.0.5556.1005, 16.0.5556.1002, 16.0.10417.20153
Vendor guidance
Release Notes Click to Run Install KB5002880. Install KB5002881. Install KB5002874. Install KB5002876. Install KB5002873. Install KB5002878.
Microsoft Security Response CenterCVE-2026-44823
HighCVSS 7.8
Microsoft Excel Remote Code Execution Vulnerability
Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Affected productsMicrosoft Office 365 for Mac, Office Online Server, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions
Fixed versions16.110.26061317, 16.0.10417.20137, https://aka.ms/OfficeSecurityReleases, 16.0.5556.1001
Vendor guidance
Release Notes Click to Run Install KB5002875. Install KB5002877.
Microsoft Security Response CenterCVE-2026-44822
HighCVSS 8.2
Microsoft Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
Affected productsMicrosoft Office 365 for Mac, Office Online Server, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions
Fixed versions16.110.26061317, 16.0.10417.20137, https://aka.ms/OfficeSecurityReleases, 16.0.5556.1001
Vendor guidance
Release Notes Click to Run Install KB5002875. Install KB5002877.
Microsoft Security Response CenterCVE-2026-44821
HighCVSS 5.5
Microsoft Office Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
Affected productsMicrosoft SharePoint Server Subscription Edition, Microsoft SharePoint Enterprise Server 2016, Microsoft Office 365 for Mac, Microsoft SharePoint Server 2019
Fixed versions16.0.19725.20384, 16.0.5556.1005, 16.0.5556.1002, 16.110.26061317
Vendor guidance
Release Notes Click to Run Install KB5002873. Install KB5002880. Install KB5002881. Install KB5002874. Install KB5002876. Install KB5002878.
Microsoft Security Response CenterCVE-2026-44820
HighCVSS 7.8
Microsoft Excel Remote Code Execution Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Affected productsMicrosoft Office 365 for Mac, Office Online Server, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions
Fixed versions16.110.26061317, 16.0.10417.20137, https://aka.ms/OfficeSecurityReleases, 16.0.5556.1001
Vendor guidance
Release Notes Click to Run Install KB5002875. Install KB5002877.
Microsoft Security Response CenterCVE-2026-44819
HighCVSS 7.8
Microsoft Office Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
Affected productsMicrosoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server Subscription Edition, Microsoft Office 365 for Mac, Microsoft SharePoint Server 2019
Fixed versions16.0.5556.1005, 16.0.5556.1002, 16.0.19725.20384, 16.110.26061317
Vendor guidance
Release Notes Click to Run Install KB5002880. Install KB5002881. Install KB5002873. Install KB5002874. Install KB5002876. Install KB5002878.
Microsoft Security Response CenterCVE-2026-44818
HighCVSS 7.0
Microsoft Excel Remote Code Execution Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Affected productsMicrosoft Office 365 for Mac, Office Online Server, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions
Fixed versions16.110.26061317, 16.0.10417.20137, https://aka.ms/OfficeSecurityReleases, 16.0.5556.1001
Vendor guidance
Release Notes Click to Run Install KB5002875. Install KB5002877.
Microsoft Security Response CenterCVE-2026-44817
HighCVSS 7.8
Microsoft Excel Remote Code Execution Vulnerability
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Affected productsMicrosoft Office 365 for Mac, Office Online Server, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions
Fixed versions16.110.26061317, 16.0.10417.20137, https://aka.ms/OfficeSecurityReleases, 16.0.5556.1001
Vendor guidance
Release Notes Click to Run Install KB5002875. Install KB5002877.
Microsoft Security Response CenterCVE-2026-42903
HighCVSS 6.5
Windows Kerberos Denial of Service Vulnerability
Null pointer dereference in Windows Kerberos allows an authorized attacker to deny service over a network.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8880, 10.0.20348.5256, 10.0.19044.7417, 10.0.19045.7417
Vendor guidance
Install KB5094123. Install KB5094128. Install KB5094127. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051. Install KB5094122. Install KB5094042. Install KB5094041.
Microsoft Security Response CenterCVE-2026-32177
HighCVSS 7.3
.NET Elevation of Privilege Vulnerability
Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.
Affected products.NET 10.0 installed on Windows, .NET 8.0 installed on Windows, .NET 9.0 installed on Windows, Microsoft Visual Studio 2022 version 17.12
Fixed versions10.0.8, 8.0.27, 9.0.16, 17.12.20
Vendor guidance
Release Notes Install KB5093446. Install KB5093447. Install KB5093448. Install KB5087065. Install KB5087067. Install KB5087069. Install KB5087066. Install KB5087068. Install KB5087064. Install KB5087061. Install KB508...
Before you act
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.