CurrentChecked 19 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
11Vendor sources
18,986Advisories collected
6,810Published or updated in 30 days
8,727Marked critical or high
Coverage
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
CurrentChecked 34 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
Check delayedChecked 31 days ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 39 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 34 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 19 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 19 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 3 hours ago
Checked every 6 hours
Browse this vendor's advisories
Official source
CurrentChecked 19 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
Check delayedChecked 4 days ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 19 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
18,986 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
Microsoft Security Response CenterCVE-2026-34331
HighCVSS 7.0
Win32k Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8755, 10.0.20348.5139, 10.0.20348.5074, 10.0.19044.7291
Vendor guidance
Install KB5087538. Install KB5087545. Install KB5087424. Install KB5087544. Install KB5094127. Install KB5087539. Install KB5087423. Install KB5089549. Install KB5089466. Install KB5087420. Install KB5093998. Install ...
Microsoft Security Response CenterCVE-2026-34330
HighCVSS 7.8
Win32k Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8755, 10.0.20348.5139, 10.0.20348.5074, 10.0.19044.7291
Vendor guidance
Install KB5087538. Install KB5087545. Install KB5087424. Install KB5087544. Install KB5094127. Install KB5087539. Install KB5087423. Install KB5089549. Install KB5089466. Install KB5087420. Install KB5093998. Install ...
Microsoft Security Response CenterCVE-2026-34329
HighCVSS 8.8
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over an adjacent network.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8755, 10.0.20348.5139, 10.0.20348.5074, 10.0.19044.7291
Vendor guidance
Install KB5087538. Install KB5087545. Install KB5087424. Install KB5087544. Install KB5094127. Install KB5087539. Install KB5087423. Install KB5089549. Install KB5089466. Install KB5087420. Install KB5093998. Install ...
Microsoft Security Response CenterCVE-2026-33839
HighCVSS 7.0
Win32k Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8755, 10.0.20348.5139, 10.0.20348.5074, 10.0.19044.7291
Vendor guidance
Install KB5087538. Install KB5087545. Install KB5087424. Install KB5087544. Install KB5094127. Install KB5087539. Install KB5087423. Install KB5089549. Install KB5089466. Install KB5087420. Install KB5093998. Install ...
Microsoft Security Response CenterCVE-2026-33838
HighCVSS 7.8
Windows Message Queuing (MSMQ) Elevation of Privilege Vulnerability
Double free in Windows Message Queuing allows an authorized attacker to elevate privileges locally.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8755, 10.0.20348.5139, 10.0.20348.5074, 10.0.19044.7291
Vendor guidance
Install KB5087538. Install KB5087545. Install KB5087424. Install KB5087544. Install KB5094127. Install KB5087539. Install KB5087423. Install KB5089549. Install KB5089466. Install KB5087420. Install KB5093998. Install ...
Microsoft Security Response CenterCVE-2026-33837
HighCVSS 7.8
Windows TCP/IP Local Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8755, 10.0.20348.5139, 10.0.20348.5074, 10.0.19044.7291
Vendor guidance
Install KB5087538. Install KB5087545. Install KB5087424. Install KB5087544. Install KB5094127. Install KB5087539. Install KB5087423. Install KB5089549. Install KB5089466. Install KB5087420. Install KB5093998. Install ...
Microsoft Security Response CenterCVE-2026-33834
HighCVSS 7.8
Windows Event Logging Service Elevation of Privilege Vulnerability
Improper access control in Windows Event Logging Service allows an authorized attacker to elevate privileges locally.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8755, 10.0.20348.5139, 10.0.20348.5074, 10.0.19044.7291
Vendor guidance
Install KB5087538. Install KB5087545. Install KB5087424. Install KB5087544. Install KB5094127. Install KB5087539. Install KB5087423. Install KB5089549. Install KB5089466. Install KB5087420. Install KB5093998. Install ...
Microsoft Security Response CenterCVE-2026-33833
HighCVSS 8.2
Azure Machine Learning Notebook Spoofing Vulnerability
Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Machine Learning allows an unauthorized attacker to perform spoofing over a network.
Affected productsAzure Machine Learning
Fixed versions1.7.6
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-33110
HighCVSS 8.8
Microsoft SharePoint Server Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
Affected productsMicrosoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition
Fixed versions16.0.5552.1002, 16.0.10417.20128, 16.0.19725.20280
Vendor guidance
Install KB5002868. Install KB5002870. Install KB5002863.
Microsoft Security Response CenterCVE-2026-32209
HighCVSS 4.4
Windows Filtering Platform (WFP) Security Feature Bypass Vulnerability
Improper access control in Windows Filtering Platform (WFP) allows an authorized attacker to bypass a security feature locally.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8755, 10.0.20348.5139, 10.0.20348.5074, 10.0.19044.7291
Vendor guidance
Install KB5087538. Install KB5087545. Install KB5087424. Install KB5087544. Install KB5094127. Install KB5087539. Install KB5087423. Install KB5089549. Install KB5089466. Install KB5087420. Install KB5093998. Install ...
Microsoft Security Response CenterCVE-2026-32204
HighCVSS 7.8
Azure Monitor Agent Elevation of Privilege Vulnerability
External control of file name or path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.
Affected productsAzure Monitor Agent
Fixed versions1.14.0
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-43321
HighCVSS 7.8
bpf: Properly mark live registers for indirect jumps
Mariner
Affected productsazl3 kernel 6.6.137.1-2 on Azure Linux 3.0
Fixed versions6.6.138.1-1
Vendor guidance
CBL-Mariner Releases
Microsoft Security Response CenterCVE-2026-42891
MediumCVSS 6.5
Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability
User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
Affected productsMicrosoft Edge for Android
Fixed versions148.0.3967.55
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-40416
LowCVSS 4.3
Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability
User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
Affected productsMicrosoft Edge (Chromium-based)
Fixed versions148.0.3967.55
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-20841
HighCVSS 7.8
Windows Notepad App Remote Code Execution Vulnerability
Improper neutralization of special elements used in a command ('command injection') in Windows Notepad App allows an unauthorized attacker to execute code locally.
Affected productsWindows Notepad
Fixed versions11.2512.26.0
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-42838
HighCVSS 5.4
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Improper neutralization of special elements in output used by a downstream component ('injection') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.
Affected productsMicrosoft Edge (Chromium-based)
Fixed versions148.0.3967.55
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-32226
HighCVSS 5.9
.NET Framework Denial of Service Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in .NET Framework allows an unauthorized attacker to deny service over a network.
Affected productsMicrosoft .NET Framework 4.8 on Windows 10 Version 22H2 for x64-based Systems, Microsoft .NET Framework 4.8 on Windows 11 Version 22H2 for x64-based Systems, Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for x64-based Systems, Microsoft .NET Framework 4.8 on Windows Server 2012 R2 (Server Core installation)
Fixed versions2.0.50727.9181 & 3.0.30729.9165 & 4.8.4801.0, 2.0.50727.9181 & 3.0.30729.9165 & 4.8.9332.0, 4.8.4801.0, 2.0.50727.9068 & 3.0.30729.9065 & 4.8.4801.0
Vendor guidance
Install KB5082426. Install KB5082424. Install KB5082411. Install KB5082403. Install KB5082404. Install KB5082414. Install KB5082419. Install KB5082413. Install KB5082425. Install KB5082418. Install KB5082420. Install ...
Microsoft Security Response CenterCVE-2026-8020
Severity not listed
Chromium: CVE-2026-8020 Uninitialized Use in GPU
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Affected productsMicrosoft Edge (Chromium-based)
Fixed versions148.0.3967.55
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-7993
Severity not listed
Chromium: CVE-2026-7993 Insufficient validation of untrusted input in Payments
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Affected productsMicrosoft Edge (Chromium-based)
Fixed versions148.0.3967.55
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-7941
Severity not listed
Chromium: CVE-2026-7941 Insufficient validation of untrusted input in Mobile
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Affected productsMicrosoft Edge (Chromium-based)
Fixed versions148.0.3967.55
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-7931
Severity not listed
Chromium: CVE-2026-7931 Insufficient validation of untrusted input in iOS
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Affected productsMicrosoft Edge (Chromium-based)
Fixed versions148.0.3967.55
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-7915
Severity not listed
Chromium: CVE-2026-7915 Insufficient data validation in DevTools
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Affected productsMicrosoft Edge (Chromium-based)
Fixed versions148.0.3967.55
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-7913
Severity not listed
Chromium: CVE-2026-7913 Insufficient policy enforcement in DevTools
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Affected productsMicrosoft Edge (Chromium-based)
Fixed versions148.0.3967.55
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-7912
Severity not listed
Chromium: CVE-2026-7912 Integer overflow in GPU
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Affected productsMicrosoft Edge (Chromium-based)
Fixed versions148.0.3967.55
Vendor guidance
Release Notes
Before you act
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.