CurrentChecked 17 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
11Vendor sources
18,986Advisories collected
6,811Published or updated in 30 days
8,727Marked critical or high
Coverage
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
CurrentChecked 47 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
Check delayedChecked 31 days ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
Check delayedChecked about an hour ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 47 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 2 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 17 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 3 hours ago
Checked every 6 hours
Browse this vendor's advisories
Official source
CurrentChecked 2 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
Check delayedChecked 4 days ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 2 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
18,986 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
Microsoft Security Response CenterCVE-2026-42913
HighCVSS 7.5
Remote Desktop Client Remote Code Execution Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
Affected productsRemote Desktop client for Windows Desktop, Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025 (Server Core installation)
Fixed versions1.2.7214.0, 10.0.20348.5256, 10.0.26100.32995, 10.0.26200.8655
Vendor guidance
Release Notes Install KB5094128. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051.
Microsoft Security Response CenterCVE-2026-42911
HighCVSS 7.0
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8880, 10.0.20348.5256, 10.0.19044.7417, 10.0.19045.7417
Vendor guidance
Install KB5094123. Install KB5094128. Install KB5094127. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051. Install KB5094122. Install KB5094042. Install KB5094041.
Microsoft Security Response CenterCVE-2026-42909
HighCVSS 7.5
Remote Desktop Client Remote Code Execution Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8880, 1.2.7214.0, 10.0.20348.5256, 10.0.19044.7417
Vendor guidance
Release Notes Install KB5094123. Install KB5094128. Install KB5094127. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051. Install KB5094122. Install KB5094042. Install KB5094041.
Microsoft Security Response CenterCVE-2026-42908
HighCVSS 7.5
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8880, 10.0.20348.5256, 10.0.19044.7417, 10.0.19045.7417
Vendor guidance
Release Notes Install KB5094123. Install KB5094128. Install KB5094127. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051. Install KB5094122. Install KB5094042. Install KB5094041.
Microsoft Security Response CenterCVE-2026-42907
HighCVSS 6.5
Windows Shell Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to disclose information over a network.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8880, 10.0.20348.5256, 10.0.19044.7417, 10.0.19045.7417
Vendor guidance
Install KB5094123. Install KB5094128. Install KB5094127. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051.
Microsoft Security Response CenterCVE-2026-42906
HighCVSS 5.5
Windows Shell Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to disclose information locally.
Affected productsWindows Server 2022, Windows Server 2022 (Server Core installation), Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems
Fixed versions10.0.20348.5256, 10.0.19044.7417, 10.0.19045.7417, 10.0.26100.32995
Vendor guidance
Install KB5094128. Install KB5094127. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051.
Microsoft Security Response CenterCVE-2026-42905
HighCVSS 7.8
Windows DWM Core Library Elevation of Privilege Vulnerability
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8880, 10.0.20348.5256, 10.0.19044.7417, 10.0.19045.7417
Vendor guidance
Install KB5094123. Install KB5094128. Install KB5094127. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051. Install KB5094122. Install KB5094042. Install KB5094041.
Microsoft Security Response CenterCVE-2026-42904
HighCVSS 9.6
Windows TCP/IP Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to elevate privileges over an adjacent network.
Affected productsWindows Server 2022, Windows Server 2022 (Server Core installation), Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems
Fixed versions10.0.20348.5256, 10.0.19044.7417, 10.0.19045.7417, 10.0.26100.32995
Vendor guidance
Install KB5094128. Install KB5094127. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051.
Microsoft Security Response CenterCVE-2026-42902
HighCVSS 7.8
Microsoft PowerToys Elevation of Privilege Vulnerability
Improper authorization in Microsoft PowerToys allows an authorized attacker to elevate privileges locally.
Affected productsMicrosoft PowerToys
Fixed versionsv0.99.1
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-42837
HighCVSS 7.8
Windows Projected File System Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges locally.
Affected productsWindows Server 2019 (Server Core installation), Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows Server 2022 (Server Core installation)
Fixed versions10.0.17763.8880, 10.0.19044.7417, 10.0.20348.5256, 10.0.19045.7417
Vendor guidance
Install KB5094123. Install KB5094127. Install KB5094128. Install KB5094126. Install KB5094125. Install KB5093998. Install KB5095051.
Microsoft Security Response CenterCVE-2026-42836
HighCVSS 7.0
Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Function Discovery Service (fdwsd.dll) allows an authorized attacker to elevate privileges locally.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022
Fixed versions10.0.17763.8880, 10.0.20348.5256, 10.0.19044.7417, 10.0.19045.7417
Vendor guidance
Install KB5094123. Install KB5094128. Install KB5094127. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051. Install KB5094122. Install KB5094042. Install KB5094041.
Microsoft Security Response CenterCVE-2026-42835
HighCVSS 8.1
Microsoft Teams for Android Information Disclosure Vulnerability
Improper neutralization of special elements in output used by a downstream component ('injection') in Microsoft Teams for Android allows an authorized attacker to disclose information over a network.
Affected productsMicrosoft Teams for Android
Fixed versions1.0.76.2026111302
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-42829
HighCVSS 7.8
Windows Administrator Protection Secure Feature Bypass Vulnerability
Improper access control in Windows Administrator Protection allows an authorized attacker to bypass a security feature locally.
Affected productsWindows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems
Fixed versions10.0.26200.8655, 10.0.26100.8655, 10.0.28000.2269
Vendor guidance
Install KB5094126. Install KB5095051.
Microsoft Security Response CenterCVE-2026-41108
HighCVSS 7.0
Windows DNS Client Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Windows DNS allows an authorized attacker to elevate privileges locally.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8880, 10.0.20348.5256, 10.0.19044.7417, 10.0.19045.7417
Vendor guidance
Install KB5094123. Install KB5094128. Install KB5094127. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051. Install KB5094122. Install KB5094042. Install KB5094041.
Microsoft Security Response CenterCVE-2026-41098
HighCVSS 8.4
Azure Stack Edge Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Azure Stack Edge allows an authorized attacker to perform spoofing over a network.
Affected productsAzure Stack Edge
Fixed versions3.3.2604.3097
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-41092
HighCVSS 7.8
Microsoft Kinect Elevation of Privilege Vulnerability
Improper access control in Microsoft Kinect allows an authorized attacker to elevate privileges locally.
Affected productsWindows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems
Fixed versions10.0.28000.2269, 10.0.17763.8880, 10.0.20348.5256, 10.0.19044.7417
Vendor guidance
Install KB5095051. Install KB5094123. Install KB5094128. Install KB5094127. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5094122. Install KB5094042. Install KB5094041.
Microsoft Security Response CenterCVE-2026-40409
HighCVSS 7.8
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Numeric truncation error in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows Server 2019, Windows Server 2022, Windows 10 Version 1809 for x64-based Systems
Fixed versions10.0.17763.8880, 10.0.20348.5256, 10.0.19044.7417, 10.0.19045.7417
Vendor guidance
Install KB5094123. Install KB5094128. Install KB5094127. Install KB5094126. Install KB5094125. Install KB5093998. Install KB5095051. Install KB5094122. Install KB5094042. Install KB5094041.
Microsoft Security Response CenterCVE-2026-40404
HighCVSS 7.8
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
Affected productsWindows Server 2022 (Server Core installation), Windows Server 2022, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 1809 for x64-based Systems
Fixed versions10.0.20348.5256, 10.0.19044.7417, 10.0.17763.8880, 10.0.19045.7417
Vendor guidance
Install KB5094128. Install KB5094127. Install KB5094123. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051. Install KB5094122. Install KB5094042. Install KB5094041.
Microsoft Security Response CenterCVE-2026-34335
HighCVSS 7.0
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8880, 10.0.20348.5256, 10.0.19044.7417, 10.0.19045.7417
Vendor guidance
Install KB5094123. Install KB5094128. Install KB5094127. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051. Install KB5094122. Install KB5094042. Install KB5094041.
Microsoft Security Response CenterCVE-2026-33113
HighCVSS 5.4
Microsoft SharePoint Server Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
Affected productsMicrosoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition
Fixed versions16.0.5556.1005, 16.0.10417.20153, 16.0.19725.20384
Vendor guidance
Install KB5002880. Install KB5002874. Install KB5002873.
Microsoft Security Response CenterCVE-2026-41100
HighCVSS 4.4
Microsoft 365 Copilot for Android Spoofing Vulnerability
Improper access control in M365 Copilot allows an authorized attacker to perform spoofing locally.
Affected productsMicrosoft 365 Copilot for Android, Microsoft Excel for Android, Microsoft Word for Android, Microsoft PowerPoint for Android
Fixed versions16.0.19822.20190
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-21530
HighCVSS 6.7
Windows Rich Text Edit Elevation of Privilege Vulnerability
Double free in Windows Rich Text Edit allows an authorized attacker to elevate privileges locally.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8755, 10.0.20348.5139, 10.0.20348.5074, 10.0.19044.7291
Vendor guidance
Click to Run Install KB5087538. Install KB5087545. Install KB5087424. Install KB5087544. Install KB5094127. Install KB5087539. Install KB5087423. Install KB5089549. Install KB5089466. Install KB5087420. Install KB5093...
Microsoft Security Response CenterCVE-2026-11148
Severity not listed
Chromium: CVE-2026-11148 Inappropriate implementation in Payments
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Affected productsMicrosoft Edge (Chromium-based)
Fixed versions149.0.4022.53
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-37460
HighCVSS 7.5
Missing input validation in the rfapiRibBi2Ri() function (rfapi_rib.c) of FRRouting (FRR) stable/10.0 to stable/10.6 allows attackers to cause a Denial of Service (DoS) via supplying a crafted BGP UPDATE message.
Mariner
Affected productsazl3 frr 10.5.4-1 on Azure Linux 3.0
Before you act
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.