CurrentChecked 7 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
11Vendor sources
18,986Advisories collected
6,744Published or updated in 30 days
8,727Marked critical or high
Coverage
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
CurrentChecked 52 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
Check delayedChecked 31 days ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked about an hour ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 52 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 12 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 7 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 6 hours ago
Checked every 6 hours
Browse this vendor's advisories
Official source
CurrentChecked 12 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
Check delayedChecked 4 days ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 12 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
18,986 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
Microsoft Security Response CenterCVE-2026-26160
HighCVSS 7.8
Remote Desktop Licensing Service Elevation of Privilege Vulnerability
Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges locally.
Affected productsWindows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems
Fixed versions10.0.28000.1836, 10.0.17763.8644, 10.0.20348.5020, 10.0.19044.7184
Vendor guidance
Install KB5083768. Install KB5082123. Install KB5082142. Install KB5082200. Install KB5082063. Install KB5083769. Install KB5082052. Install KB5082060. Install KB5082198. Install KB5082127. Install KB5082126.
Microsoft Security Response CenterCVE-2026-26159
HighCVSS 7.8
Remote Desktop Licensing Service Elevation of Privilege Vulnerability
Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges locally.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8644, 10.0.20348.5020, 10.0.19044.7184, 10.0.19045.7184
Vendor guidance
Install KB5082123. Install KB5082142. Install KB5082200. Install KB5082063. Install KB5083769. Install KB5082052. Install KB5082060. Install KB5082198. Install KB5082127. Install KB5082126. Install KB5083768.
Microsoft Security Response CenterCVE-2026-33827
CriticalCVSS 8.1
Windows TCP/IP Remote Code Execution Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an unauthorized attacker to execute code over a network.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8644, 10.0.20348.5020, 10.0.19044.7184, 10.0.19045.7184
Vendor guidance
Install KB5082123. Install KB5082142. Install KB5082200. Install KB5082063. Install KB5083769. Install KB5082052. Install KB5082060. Install KB5083768. Install KB5082198. Install KB5082127. Install KB5082126.
Microsoft Security Response CenterCVE-2026-33826
CriticalCVSS 8.0
Windows Active Directory Remote Code Execution Vulnerability
Improper input validation in Windows Active Directory allows an authorized attacker to execute code over an adjacent network.
Affected productsWindows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation)
Fixed versions10.0.17763.8644, 10.0.20348.5020, 10.0.26100.32690, 10.0.25398.2274
Vendor guidance
Install KB5082123. Install KB5082142. Install KB5082063. Install KB5082060. Install KB5082198. Install KB5082126.
Microsoft Security Response CenterCVE-2026-33115
CriticalCVSS 8.4
Microsoft Word Remote Code Execution Vulnerability
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Affected productsMicrosoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC 2021 for 64-bit editions
Fixed versionshttps://aka.ms/OfficeSecurityReleases, 16.108.26041219
Vendor guidance
Click to Run Release Notes
Microsoft Security Response CenterCVE-2026-33114
CriticalCVSS 8.4
Microsoft Word Remote Code Execution Vulnerability
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Affected productsMicrosoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC 2021 for 64-bit editions
Fixed versionshttps://aka.ms/OfficeSecurityReleases, 16.108.26041219
Vendor guidance
Click to Run Release Notes
Microsoft Security Response CenterCVE-2026-32190
CriticalCVSS 8.4
Microsoft Office Remote Code Execution Vulnerability
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
Affected productsMicrosoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems
Fixed versionshttps://aka.ms/OfficeSecurityReleases, 16.108.26041219, 16.0.5548.1000
Vendor guidance
Click to Run Release Notes Install KB5002859.
Microsoft Security Response CenterCVE-2025-65018
HighCVSS 7.1
LIBPNG is vulnerable to a heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read`
Mariner
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8644, 10.0.20348.5020, 10.0.19044.7184, 10.0.19045.7184
Vendor guidance
Install KB5082123. Install KB5082142. Install KB5082200. Install KB5082063. Install KB5083769. Install KB5082052. Install KB5082060. Install KB5083768. Install KB5082198. Install KB5082127. Install KB5082126.
Microsoft Security Response CenterCVE-2025-64720
HighCVSS 7.1
LIBPNG is vulnerable to a buffer overflow in `png_image_read_composite` via incorrect palette premultiplication
Mariner
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8644, 10.0.20348.5020, 10.0.19044.7184, 10.0.19045.7184
Vendor guidance
Install KB5082123. Install KB5082142. Install KB5082200. Install KB5082063. Install KB5083769. Install KB5082052. Install KB5082060. Install KB5083768. Install KB5082198. Install KB5082127. Install KB5082126.
Microsoft Security Response CenterCVE-2026-33822
HighCVSS 6.1
Microsoft Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
Affected productsMicrosoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024
Fixed versionshttps://aka.ms/OfficeSecurityReleases, 16.108.26041219
Vendor guidance
Click to Run Release Notes
Microsoft Security Response CenterCVE-2026-33120
HighCVSS 8.8
Microsoft SQL Server Remote Code Execution Vulnerability
Untrusted pointer dereference in SQL Server allows an authorized attacker to execute code over a network.
Affected productsMicrosoft SQL Server 2022 for x64-based Systems (GDR)
Fixed versions16.0.1175.1
Vendor guidance
Install KB5084815.
Microsoft Security Response CenterCVE-2026-33116
HighCVSS 7.5
.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a network.
Affected products.NET 10.0 installed on Mac OS, .NET 10.0 installed on Linux, .NET 8.0, .NET 8.0 installed on Windows
Fixed versions10.0.6, 8.0.26, 9.0.15, 4.8.4801.0
Vendor guidance
Install KB5086095. Install KB5086096. Install KB5086097. Install KB5082411. Install KB5082403. Install KB5082414. Install KB5082427. Install KB5082426. Install KB5082413. Install KB5082400. Install KB5082402. Install ...
Microsoft Security Response CenterCVE-2026-33104
HighCVSS 7.0
Win32k Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8644, 10.0.20348.5020, 10.0.19044.7184, 10.0.19045.7184
Vendor guidance
Install KB5082123. Install KB5082142. Install KB5082200. Install KB5082063. Install KB5083769. Install KB5082052. Install KB5082060. Install KB5083768. Install KB5082198. Install KB5082127. Install KB5082126.
Microsoft Security Response CenterCVE-2026-33101
HighCVSS 7.8
Windows Print Spooler Elevation of Privilege Vulnerability
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
Affected productsWindows Server 2025 (Server Core installation), Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows Server 2022, 23H2 Edition (Server Core installation)
Fixed versions10.0.26100.32690, 10.0.26200.8246, 10.0.25398.2274, 10.0.26100.8246
Vendor guidance
Install KB5082063. Install KB5083769. Install KB5082060. Install KB5083768.
Microsoft Security Response CenterCVE-2026-33100
HighCVSS 7.0
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
Affected productsWindows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems
Fixed versions10.0.28000.1836, 10.0.17763.8644, 10.0.20348.5020, 10.0.19044.7184
Vendor guidance
Install KB5083768. Install KB5082123. Install KB5082142. Install KB5082200. Install KB5082063. Install KB5083769. Install KB5082052. Install KB5082060. Install KB5082198. Install KB5082127. Install KB5082126.
Microsoft Security Response CenterCVE-2026-33099
HighCVSS 7.0
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8644, 10.0.20348.5020, 10.0.19044.7184, 10.0.19045.7184
Vendor guidance
Install KB5082123. Install KB5082142. Install KB5082200. Install KB5083769. Install KB5082052. Install KB5082060. Install KB5082198. Install KB5082127. Install KB5082126.
Microsoft Security Response CenterCVE-2026-33098
HighCVSS 7.8
Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability
Use after free in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate privileges locally.
Affected productsWindows Server 2019 (Server Core installation), Windows Server 2022 (Server Core installation), Windows 10 Version 1809 for x64-based Systems, Windows Server 2019
Fixed versions10.0.17763.8644, 10.0.20348.5020, 10.0.19044.7184, 10.0.19045.7184
Vendor guidance
Install KB5082123. Install KB5082142. Install KB5082200. Install KB5083769. Install KB5082063. Install KB5082052. Install KB5082060. Install KB5083768. Install KB5082198.
Microsoft Security Response CenterCVE-2026-33096
HighCVSS 7.5
HTTP.sys Denial of Service Vulnerability
Out-of-bounds read in Windows HTTP.sys allows an unauthorized attacker to deny service over a network.
Affected productsWindows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2022, Windows Server 2022 (Server Core installation)
Fixed versions10.0.28000.1836, 10.0.20348.5020, 10.0.26100.32690, 10.0.26200.8246
Vendor guidance
Mitigation refers to a setting, common configuration, or general best-practice, existing in a default state, that could reduce the severity of exploitation of a vulnerability. The following mitigating factors might he...
Microsoft Security Response CenterCVE-2026-33095
HighCVSS 7.8
Microsoft Word Remote Code Execution Vulnerability
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Affected productsMicrosoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC 2021 for 64-bit editions
Fixed versionshttps://aka.ms/OfficeSecurityReleases, 16.108.26041219
Vendor guidance
Click to Run Release Notes
Microsoft Security Response CenterCVE-2026-32631
HighCVSS 7.4
GitHub: CVE-2026-32631 'git clone' from manipulated repositories can leak NTLM hashes
CVE-2026-32631 is regarding a vulnerability where it is possible to obtain a user's NTLM hash by tricking them into cloning a malicious repository, or checking out a malicious branch that accesses an attacker-controlled server. By default, NTLM authentication does not need any...
Affected productsMicrosoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3), Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8), Microsoft Visual Studio 2022 version 17.12, Microsoft Visual Studio 2022 version 17.14
Fixed versions16.11.55, 15.9.79, 17.12.19, 17.14.30
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-32225
HighCVSS 8.8
Windows Shell Security Feature Bypass Vulnerability
Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8644, 10.0.20348.5020, 10.0.19044.7184, 10.0.19045.7184
Vendor guidance
Install KB5082123. Install KB5082142. Install KB5082200. Install KB5082063. Install KB5083769. Install KB5082052. Install KB5082060. Install KB5082198. Install KB5082127. Install KB5082126. Install KB5083768.
Microsoft Security Response CenterCVE-2026-32224
HighCVSS 7.0
Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability
Use after free in Windows Server Update Service allows an authorized attacker to elevate privileges locally.
Affected productsWindows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems
Fixed versions10.0.28000.1836
Vendor guidance
Install KB5083768.
Microsoft Security Response CenterCVE-2026-32222
HighCVSS 7.8
Windows Win32k Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.
Affected productsWindows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2025 (Server Core installation), Windows 11 Version 25H2 for ARM64-based Systems
Fixed versions10.0.28000.1836, 10.0.26100.32690, 10.0.26200.8246, 10.0.26100.8246
Vendor guidance
Install KB5083768. Install KB5082063. Install KB5083769.
Microsoft Security Response CenterCVE-2026-32221
HighCVSS 8.4
Windows Graphics Component Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code locally.
Affected productsWindows Server 2025 (Server Core installation), Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems
Fixed versions10.0.26100.32690, 10.0.26200.8246, 10.0.26100.8246, 10.0.28000.1836
Vendor guidance
Install KB5082063. Install KB5083769. Install KB5083768.
Before you act
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.