Browse 17,903 advisories from this official source. Search by product, CVE, severity, or advisory ID.
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
Mariner
CBL-Mariner Releases
Mariner
CBL-Mariner Releases
Mariner
CBL-Mariner Releases
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
Release Notes
Incorrect implementation of authentication algorithm in Microsoft SSO Plugin for Jira & Confluence allows an unauthorized attacker to elevate privileges over a network.
Release Notes
Heap-based buffer overflow in Microsoft Windows DNS allows an unauthorized attacker to execute code over a network.
Install KB5087539. Install KB5087423. Install KB5089549. Install KB5089466. Install KB5087420. Install KB5093998. Install KB5087541. Install KB5089548.
Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.
Install KB5087538. Install KB5087545. Install KB5087424. Install KB5087539. Install KB5087423. Install KB5087541. Install KB5087537. Install KB5087470. Install KB5087471.
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to execute code locally.
Install KB5087538. Install KB5087545. Install KB5087424. Install KB5087544. Install KB5094127. Install KB5087539. Install KB5087423. Install KB5089549. Install KB5089466. Install KB5087420. Install KB5093998. Install ...
Use after free in Windows Hyper-V allows an unauthorized attacker to elevate privileges locally.
Install KB5087545. Install KB5087424. Install KB5087420. Install KB5093998.
Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Click to Run Release Notes Install KB5002858.
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
Install KB5002868. Install KB5002870. Install KB5002863.
Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Click to Run Release Notes Install KB5002858.
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
Click to Run Release Notes Install KB5002866.
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
Click to Run Release Notes Install KB5002866.
Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code locally.
Install KB5087538. Install KB5087545. Install KB5087424. Install KB5087544. Install KB5094127. Install KB5087539. Install KB5087423. Install KB5089549. Install KB5089466. Install KB5087420. Install KB5093998. Install ...
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.
Install KB5073723. Install KB5073457. Install KB5073724. Install KB5073379. Install KB5074109. Install KB5073455. Install KB5073450. Install KB5073722.
Loop with unreachable exit condition ('infinite loop') in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Install KB5093447. Install KB5093448. Install KB5093446.
Integer overflow or wraparound in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
Install KB5087539. Install KB5087423. Install KB5089549. Install KB5089466. Install KB5089548.
Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to perform tampering over a network.
See the Microsoft Security Update Guide for the update that applies to your product.
Improper access control in Microsoft Office allows an unauthorized attacker to perform spoofing locally.
Release Notes
Untrusted search path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.
Release Notes
Improper access control in Azure Logic Apps allows an authorized attacker to elevate privileges over a network.
Improper access control in M365 Copilot for Desktop allows an unauthorized attacker to perform spoofing locally.
Release Notes
Session fixation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network.
Release Notes
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.