CurrentChecked 19 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
11Vendor sources
18,986Advisories collected
6,810Published or updated in 30 days
8,727Marked critical or high
Coverage
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
CurrentChecked 14 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
Check delayedChecked 31 days ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 19 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 14 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 19 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 19 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 3 hours ago
Checked every 6 hours
Browse this vendor's advisories
Official source
CurrentChecked 19 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
Check delayedChecked 4 days ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 19 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
18,986 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
Microsoft Security Response CenterCVE-2026-40408
HighCVSS 7.8
Windows WAN ARP Driver Elevation of Privilege Vulnerability
Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8755, 10.0.20348.5139, 10.0.20348.5074, 10.0.19044.7291
Vendor guidance
Install KB5087538. Install KB5087545. Install KB5087424. Install KB5087544. Install KB5094127. Install KB5087539. Install KB5087423. Install KB5089549. Install KB5089466. Install KB5087420. Install KB5093998. Install ...
Microsoft Security Response CenterCVE-2026-40407
HighCVSS 7.8
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
Affected productsWindows Server 2022 (Server Core installation), Windows Server 2019, Windows Server 2022, Windows 10 Version 1809 for 32-bit Systems
Fixed versions10.0.20348.5139, 10.0.20348.5074, 10.0.17763.8755, 10.0.19044.7291
Vendor guidance
Install KB5087545. Install KB5087424. Install KB5087538. Install KB5087544. Install KB5094127. Install KB5087539. Install KB5087423. Install KB5089549. Install KB5089466. Install KB5093998. Install KB5087420. Install ...
Microsoft Security Response CenterCVE-2026-40406
HighCVSS 7.5
Windows TCP/IP Information Disclosure Vulnerability
Use after free in Windows TCP/IP allows an unauthorized attacker to disclose information over a network.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8755, 10.0.20348.5139, 10.0.20348.5074, 10.0.19044.7291
Vendor guidance
Install KB5087538. Install KB5087545. Install KB5087424. Install KB5087544. Install KB5094127. Install KB5087539. Install KB5087423. Install KB5089549. Install KB5089466. Install KB5087420. Install KB5093998. Install ...
Microsoft Security Response CenterCVE-2026-40405
HighCVSS 7.5
Windows TCP/IP Denial of Service Vulnerability
Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network.
Affected productsWindows Server 2025 (Server Core installation), Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems
Fixed versions10.0.26100.32860, 10.0.26100.32772, 10.0.26200.8457, 10.0.26200.8390
Vendor guidance
Install KB5087539. Install KB5087423. Install KB5089549. Install KB5089466. Install KB5089548.
Microsoft Security Response CenterCVE-2026-40401
HighCVSS 7.1
Windows TCP/IP Denial of Service Vulnerability
According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability? In this case, a successful attack could be performed from a low privilege Hyper-V guest. The attacker could traverse the guest's security bou...
Affected productsWindows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022
Fixed versions10.0.17763.8755, 10.0.20348.5139, 10.0.20348.5074, 10.0.19044.7291
Vendor guidance
Install KB5087538. Install KB5087545. Install KB5087424. Install KB5087544. Install KB5094127. Install KB5087539. Install KB5087423. Install KB5089549. Install KB5089466. Install KB5087420. Install KB5093998. Install ...
Microsoft Security Response CenterCVE-2026-40399
HighCVSS 7.8
Windows TCP/IP Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8755, 10.0.20348.5139, 10.0.20348.5074, 10.0.19044.7291
Vendor guidance
Install KB5087538. Install KB5087545. Install KB5087424. Install KB5087544. Install KB5094127. Install KB5087539. Install KB5087423. Install KB5089549. Install KB5089466. Install KB5087420. Install KB5093998. Install ...
Microsoft Security Response CenterCVE-2026-40398
HighCVSS 7.8
Windows Remote Desktop Services Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Remote Desktop allows an authorized attacker to elevate privileges locally.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8755, 10.0.20348.5139, 10.0.20348.5074, 10.0.19044.7291
Vendor guidance
Install KB5087538. Install KB5087545. Install KB5087424. Install KB5087544. Install KB5094127. Install KB5087539. Install KB5087423. Install KB5089549. Install KB5089466. Install KB5087420. Install KB5093998. Install ...
Microsoft Security Response CenterCVE-2026-40397
HighCVSS 7.8
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
Affected productsWindows 10 Version 1809 for x64-based Systems, Windows Server 2022, Windows 10 Version 1809 for 32-bit Systems, Windows Server 2022 (Server Core installation)
Fixed versions10.0.17763.8755, 10.0.20348.5139, 10.0.20348.5074, 10.0.19044.7291
Vendor guidance
Install KB5087538. Install KB5087545. Install KB5087424. Install KB5087544. Install KB5094127. Install KB5087539. Install KB5087423. Install KB5089549. Install KB5089466. Install KB5087541. Install KB5087420. Install ...
Microsoft Security Response CenterCVE-2026-40382
HighCVSS 7.8
Windows Telephony Service Elevation of Privilege Vulnerability
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8755, 10.0.20348.5139, 10.0.20348.5074, 10.0.19044.7291
Vendor guidance
Install KB5087538. Install KB5087545. Install KB5087424. Install KB5087544. Install KB5094127. Install KB5087539. Install KB5087423. Install KB5089549. Install KB5089466. Install KB5087420. Install KB5093998. Install ...
Microsoft Security Response CenterCVE-2026-40381
HighCVSS 7.8
Azure Connected Machine Agent Elevation of Privilege Vulnerability
Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.
Affected productsAzure Connected Machine Agent
Fixed versions1.63
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-40380
HighCVSS 6.2
Windows Volume Manager Extension Driver Remote Code Execution Vulnerability
Heap-based buffer overflow in Volume Manager Extension Driver allows an authorized attacker to execute code with a physical attack.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8755, 10.0.20348.5139, 10.0.20348.5074, 10.0.19044.7291
Vendor guidance
Install KB5087538. Install KB5087545. Install KB5087424. Install KB5087544. Install KB5094127. Install KB5087539. Install KB5087423. Install KB5089549. Install KB5089466. Install KB5087420. Install KB5093998. Install ...
Microsoft Security Response CenterCVE-2026-40377
HighCVSS 7.8
Microsoft Cryptographic Services Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Cryptographic Services allows an authorized attacker to elevate privileges locally.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8755, 10.0.20348.5139, 10.0.20348.5074, 10.0.19044.7291
Vendor guidance
Install KB5087538. Install KB5087545. Install KB5087424. Install KB5087544. Install KB5094127. Install KB5087539. Install KB5087423. Install KB5089549. Install KB5089466. Install KB5087420. Install KB5093998. Install ...
Microsoft Security Response CenterCVE-2026-40374
HighCVSS 6.5
Microsoft Power Automate Desktop Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Power Automate allows an authorized attacker to disclose information over a network.
Affected productsPower Automate for Desktop
Fixed versions2.67
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-40370
HighCVSS 8.8
SQL Server Remote Code Execution Vulnerability
External control of file name or path in SQL Server allows an authorized attacker to execute code over a network.
Affected productsMicrosoft SQL Server 2025 for x64-based Systems (CU4), Microsoft SQL Server 2022 for x64-based Systems (CU 24), Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (GDR)
Fixed versions17.0.4040.1, 16.0.4252.3, 14.0.2110.2, 15.0.2170.1
Vendor guidance
Install KB5089899. Install KB5089900. Install KB5090347. Install KB5090408. Install KB5089271. Install KB5089270. Install KB5090354. Install KB5091158. Install KB5091223. Install KB5090407.
Microsoft Security Response CenterCVE-2026-40369
HighCVSS 7.8
Windows Kernel Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
Affected productsWindows Server 2025 (Server Core installation), Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems
Fixed versions10.0.26100.32860, 10.0.26100.32772, 10.0.26200.8457, 10.0.26200.8390
Vendor guidance
Install KB5087539. Install KB5087423. Install KB5089549. Install KB5089466. Install KB5089548.
Microsoft Security Response CenterCVE-2026-40368
HighCVSS 8.0
Microsoft SharePoint Server Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
Affected productsMicrosoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition
Fixed versions16.0.5552.1002, 16.0.10417.20128, 16.0.19725.20280
Vendor guidance
Install KB5002868. Install KB5002870. Install KB5002863.
Microsoft Security Response CenterCVE-2026-40362
HighCVSS 7.8
Microsoft Excel Remote Code Execution Vulnerability
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Affected productsOffice Online Server, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems
Fixed versions16.0.10417.20128, https://aka.ms/OfficeSecurityReleases, 16.109.26051019, 16.0.5552.1000
Vendor guidance
Click to Run Release Notes Install KB5002871. Install KB5002865.
Microsoft Security Response CenterCVE-2026-40360
HighCVSS 7.8
Microsoft Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
Affected productsOffice Online Server, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems
Fixed versions16.0.10417.20128, https://aka.ms/OfficeSecurityReleases, 16.109.26051019, 16.0.5552.1000
Vendor guidance
Click to Run Release Notes Install KB5002871. Install KB5002865.
Microsoft Security Response CenterCVE-2026-40359
HighCVSS 7.8
Microsoft Excel Remote Code Execution Vulnerability
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Affected productsOffice Online Server, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems
Fixed versions16.0.10417.20128, https://aka.ms/OfficeSecurityReleases, 16.109.26051019, 16.0.5552.1000
Vendor guidance
Click to Run Release Notes Install KB5002871. Install KB5002865.
Microsoft Security Response CenterCVE-2026-40357
HighCVSS 8.8
Microsoft SharePoint Server Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
Affected productsMicrosoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition
Fixed versions16.0.5552.1002, 16.0.10417.20128, 16.0.19725.20280
Vendor guidance
Install KB5002868. Install KB5002870. Install KB5002863.
Microsoft Security Response CenterCVE-2026-35440
HighCVSS 5.5
Microsoft Word Information Disclosure Vulnerability
Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
Affected productsMicrosoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems
Fixed versionshttps://aka.ms/OfficeSecurityReleases, 16.0.5552.1000
Vendor guidance
Click to Run Install KB5002858.
Microsoft Security Response CenterCVE-2026-35439
HighCVSS 8.8
Microsoft SharePoint Server Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
Affected productsMicrosoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition
Fixed versions16.0.5552.1002, 16.0.10417.20128, 16.0.19725.20280
Vendor guidance
Install KB5002868. Install KB5002870. Install KB5002863.
Microsoft Security Response CenterCVE-2026-35438
HighCVSS 8.3
Windows Admin Center Elevation of Privilege Vulnerability
Missing authorization in Windows Admin Center allows an authorized attacker to elevate privileges over a network.
Affected productsWindows Admin Center
Fixed versions2.6.5.16
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-35436
HighCVSS 8.8
Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.
Affected productsMicrosoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems
Fixed versionshttps://aka.ms/OfficeSecurityReleases
Vendor guidance
Click to Run
Before you act
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.