Search threats, CVEs… ⌘K
Vendor advisories

Microsoft Security Response Center

Browse 17,903 advisories from this official source. Search by product, CVE, severity, or advisory ID.

Current Checked 21 minutes ago Checked every 6 hours
All vendor sources Official source

17,903 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2026-32189
HighCVSS 7.8

Microsoft Excel Remote Code Execution Vulnerability

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Affected productsOffice Online Server, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems
Fixed versions16.0.10417.20113, https://aka.ms/OfficeSecurityReleases, 16.108.26041219, 16.0.5548.1000
Vendor guidance

Click to Run Release Notes Install KB5002855. Install KB5002860.

CVE-2026-32189
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-32188
HighCVSS 7.1

Microsoft Excel Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Affected productsOffice Online Server, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems
Fixed versions16.0.10417.20113, https://aka.ms/OfficeSecurityReleases, 16.108.26041219, 16.0.5548.1000
Vendor guidance

Click to Run Release Notes Install KB5002855. Install KB5002860.

CVE-2026-32188
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-32183
HighCVSS 7.8

Windows Snipping Tool Remote Code Execution Vulnerability

Improper neutralization of special elements used in a command ('command injection') in Windows Snipping Tool allows an unauthorized attacker to execute code locally.

Affected productsWindows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems
Fixed versions10.0.28000.1836, 10.0.17763.8644, 10.0.20348.5020, 10.0.19044.7184
Vendor guidance

Install KB5083768. Install KB5082123. Install KB5082142. Install KB5082200. Install KB5082063. Install KB5083769. Install KB5082052. Install KB5082060. Install KB5082198. Install KB5082127. Install KB5082126.

CVE-2026-32183
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-32181
HighCVSS 5.5

Connected User Experiences and Telemetry Service Denial of Service Vulnerability

Improper privilege management in Microsoft Windows allows an authorized attacker to deny service locally.

Affected productsWindows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2022, Windows Server 2022 (Server Core installation)
Fixed versions10.0.28000.1836, 10.0.20348.5020, 10.0.19044.7184, 10.0.19045.7184
Vendor guidance

Install KB5083768. Install KB5082142. Install KB5082200. Install KB5082063. Install KB5083769. Install KB5082052. Install KB5082060.

CVE-2026-32181
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-32178
HighCVSS 7.5

.NET Spoofing Vulnerability

Improper neutralization of special elements in .NET allows an unauthorized attacker to perform spoofing over a network.

Affected productsMicrosoft Visual Studio 2022 version 17.12, Microsoft Visual Studio 2022 version 17.14, .NET 10.0 installed on Windows, .NET 10.0 installed on Mac OS
Fixed versions17.12.19, 17.14.30, 10.0.6, 8.0.26
Vendor guidance

Release Notes Install KB5086095. Install KB5086096. Install KB5086097.

CVE-2026-32178
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-32167
HighCVSS 6.7

SQL Server Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges locally.

Affected productsMicrosoft SQL Server 2025 for x64-based Systems (CU3), Microsoft SQL Server 2022 for x64-based Systems (CU 24), Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (GDR)
Fixed versions17.0.4030.1, 16.0.4250.1, 14.0.2105.1, 15.0.2165.1
Vendor guidance

Install KB5083245. Install KB5083252. Install KB5084819. Install KB5084817. Install KB5084821. Install KB5084820. Install KB5084815. Install KB5084818. Install KB5084814. Install KB5084816.

CVE-2026-32167
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-32165
HighCVSS 7.8

Windows User Interface Core Elevation of Privilege Vulnerability

Use after free in Windows User Interface Core allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8644, 10.0.20348.5020, 10.0.19044.7184, 10.0.19045.7184
Vendor guidance

Install KB5082123. Install KB5082142. Install KB5082200. Install KB5082063. Install KB5083769. Install KB5082052. Install KB5082060. Install KB5083768.

CVE-2026-32165
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-32164
HighCVSS 7.8

Windows User Interface Core Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows User Interface Core allows an authorized attacker to elevate privileges locally.

Affected productsWindows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems
Fixed versions10.0.28000.1836, 10.0.17763.8644, 10.0.20348.5020, 10.0.19044.7184
Vendor guidance

Install KB5083768. Install KB5082123. Install KB5082142. Install KB5082200. Install KB5082063. Install KB5083769. Install KB5082052. Install KB5082060. Install KB5082198.

CVE-2026-32164
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-32163
HighCVSS 7.8

Windows User Interface Core Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows User Interface Core allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8644, 10.0.20348.5020, 10.0.19044.7184, 10.0.19045.7184
Vendor guidance

Install KB5082123. Install KB5082142. Install KB5082200. Install KB5082063. Install KB5083769. Install KB5082052. Install KB5082060. Install KB5083768.

CVE-2026-32163
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-32162
HighCVSS 8.4

Windows COM Elevation of Privilege Vulnerability

Acceptance of extraneous untrusted data with trusted data in Windows COM allows an unauthorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8644, 10.0.20348.5020, 10.0.19044.7184, 10.0.19045.7184
Vendor guidance

Install KB5082123. Install KB5082142. Install KB5082200. Install KB5082063. Install KB5083769. Install KB5082052. Install KB5082060. Install KB5083768.

CVE-2026-32162
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-32160
HighCVSS 7.8

Windows Push Notifications Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8644, 10.0.20348.5020, 10.0.19044.7184, 10.0.19045.7184
Vendor guidance

Install KB5082123. Install KB5082142. Install KB5082200. Install KB5082063. Install KB5083769. Install KB5082052. Install KB5082060. Install KB5083768.

CVE-2026-32160
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-32159
HighCVSS 7.8

Windows Push Notifications Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8644, 10.0.20348.5020, 10.0.19044.7184, 10.0.19045.7184
Vendor guidance

Install KB5082123. Install KB5082142. Install KB5082200. Install KB5082063. Install KB5083769. Install KB5082052. Install KB5082060. Install KB5083768.

CVE-2026-32159
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-32158
HighCVSS 7.8

Windows Push Notifications Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

Affected productsWindows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems
Fixed versions10.0.28000.1836, 10.0.17763.8644, 10.0.20348.5020, 10.0.19044.7184
Vendor guidance

Install KB5083768. Install KB5082123. Install KB5082142. Install KB5082200. Install KB5082063. Install KB5083769. Install KB5082052. Install KB5082060.

CVE-2026-32158
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-32156
HighCVSS 7.4

Windows UPnP Device Host Remote Code Execution Vulnerability

Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an unauthorized attacker to execute code locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8644, 10.0.20348.5020, 10.0.19044.7184, 10.0.19045.7184
Vendor guidance

Install KB5082123. Install KB5082142. Install KB5082200. Install KB5082063. Install KB5083769. Install KB5082052. Install KB5082060. Install KB5082198. Install KB5082127. Install KB5082126. Install KB5083768.

CVE-2026-32156
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-32155
HighCVSS 7.8

Desktop Window Manager Elevation of Privilege Vulnerability

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

Affected productsWindows Server 2022, Windows Server 2022 (Server Core installation), Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems
Fixed versions10.0.20348.5020, 10.0.19044.7184, 10.0.19045.7184, 10.0.26100.32690
Vendor guidance

Install KB5082142. Install KB5082200. Install KB5082063. Install KB5083769. Install KB5082052. Install KB5082060.

CVE-2026-32155
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-32154
HighCVSS 7.8

Desktop Window Manager Elevation of Privilege Vulnerability

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8644, 10.0.20348.5020, 10.0.19044.7184, 10.0.19045.7184
Vendor guidance

Install KB5082123. Install KB5082142. Install KB5082200. Install KB5082063. Install KB5083769. Install KB5082052. Install KB5082060. Install KB5082198. Install KB5083768.

CVE-2026-32154
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-32152
HighCVSS 7.8

Desktop Window Manager Elevation of Privilege Vulnerability

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

Affected productsWindows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025 (Server Core installation), Windows 11 Version 25H2 for ARM64-based Systems
Fixed versions10.0.20348.5020, 10.0.26100.32690, 10.0.26200.8246, 10.0.22631.6936
Vendor guidance

Install KB5082142. Install KB5082063. Install KB5083769. Install KB5082052. Install KB5082060. Install KB5083768.

CVE-2026-32152
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-32151
HighCVSS 6.5

Windows Shell Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to disclose information over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8644, 10.0.20348.5020, 10.0.19044.7184, 10.0.19045.7184
Vendor guidance

Install KB5082123. Install KB5082142. Install KB5082200. Install KB5082063. Install KB5083769. Install KB5082052. Install KB5082060. Install KB5082198. Install KB5082127. Install KB5082126. Install KB5083768.

CVE-2026-32151
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-32150
HighCVSS 7.0

Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Function Discovery Service (fdwsd.dll) allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8644, 10.0.20348.5020, 10.0.19044.7184, 10.0.19045.7184
Vendor guidance

Install KB5082123. Install KB5082142. Install KB5082200. Install KB5082063. Install KB5083769. Install KB5082052. Install KB5082060. Install KB5082198. Install KB5082127. Install KB5082126. Install KB5083768.

CVE-2026-32150
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources