Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how microsoft compares to other vendors in security performance

View Risk Score →

Software

microsoft windows operating system
6695
microsoft windows
6211
microsoft windows server 2016
5747
microsoft windows server 2019
5339
microsoft windows 10
3618
microsoft windows server 2022
3594
microsoft windows server
3562
microsoft windows 7
3093
microsoft edge
2993
microsoft windows server 2012 r2
2534
microsoft edge (chromium-based)
2439
microsoft windows 11
2346
microsoft windows server 2012
2103
microsoft windows server 2025
1951
microsoft windows 10 1809
1949
microsoft windows rt
1935
microsoft windows 10 21h2
1929
microsoft windows 10 22h2
1925
microsoft windows 11 24h2
1852
microsoft windows server 2022 23h2
1724
microsoft windows 10 1607
1664
microsoft windows 11 23h2
1591
microsoft windows server 2008
1527
microsoft windows server 2022, 23h2 edition
1464
microsoft windows xp
1356
microsoft windows vista
1353
microsoft windows 11 25h2
1186
microsoft windows 8.1
1136
microsoft office
1076
microsoft windows 11 22h2
1062
microsoft edge beta
1016
microsoft internet explorer
915
microsoft windows 11 26h1
900
microsoft windows 10 1507
868
microsoft windows server 2008 r2
808
microsoft windows server 2008 r2 for itanium-based systems
786
microsoft windows 2000
635
microsoft 365 apps for enterprise
625
microsoft windows rt 8.1
578
microsoft cbl2 kernel 5.15.186.1-1
562
microsoft 365 apps
548
microsoft windows server 2003
491
microsoft office ltsc 2021 for 64-bit editions
455
microsoft office ltsc 2021 for 32-bit editions
454
microsoft office 2019 for 64-bit editions
447
microsoft office 2019 for 32-bit editions
446
microsoft windows 11 21h2
427
microsoft office ltsc 2024 for 32-bit editions
401
microsoft office ltsc 2024 for 64-bit editions
401
microsoft sharepoint enterprise server 2016
381

August 2026 Patch Tuesday Issue - WDS TFTP CVE Fix for PXE boot.

First published (updated )
Social
reddit

Microsoft Security CenterCommand Injection

Risk 82
Severity
9.9
First published (updated )
CVE-2026-19681

Microsoft Microsoft Edge (Chromium-based)Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Risk 67
Severity
8.3
First published (updated )
CVE-2026-72970

Microsoft Microsoft DefenderMicrosoft Defender Elevation of Privilege Vulnerability

Risk 69
Severity
7.8
First published (updated )
CVE-2026-69414

Hongjing e-HRHongjing e-HR Unauthenticated SQL Injection via getSdutyTree

Risk 47
Severity
8.7
First published (updated )
CVE-2024-58374
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Microsoft Secure AccessNull Pointer Dereference

Risk 33
Severity
6.9
First published (updated )
CVE-2026-55401

Microsoft Container Migration Solution AcceleratorMicrosoft Container Migration Solution Accelerator: Authenticated IDOR allowing read/write/delete processes

Risk 79
Severity
8.7
First published (updated )
CVE-2026-73298

Microsoft UFOMicrosoft UFO: IPv6 transition address bypass of SSRF guard in URL validation

Risk 41
Severity
6.9
First published (updated )
CVE-2026-73297

Microsoft UFOMicrosoft UFO: Unauthenticated Mobile MCP access allows remote Android device control and screen disclosure

Risk 76
Severity
9.4
First published (updated )
CVE-2026-73296

Palo Alto Networks Prisma Access AgentPrisma Access Agent: Local Security Inspection Bypass Vulnerability on Windows (Severity: LOW)

Risk 57
Severity
6.1
First published (updated )
CVE-2026-0292
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Palo Alto Networks GlobalProtect AppGlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake (Severity: MEDIUM)

Risk 72
Severity
7.7
First published (updated )
CVE-2026-0297

Palo Alto Networks GlobalProtect AppGlobalProtect App: Improper Certificate Validation Bypass Vulnerability (Severity: MEDIUM)

Risk 52
Severity
7.4
First published (updated )
CVE-2026-0296

Palo Alto Networks GlobalProtect AppGlobalProtect App: Local Privilege Escalation via Race Condition on macOS (Severity: MEDIUM)

Risk 51
Severity
7.2
First published (updated )
CVE-2026-0295

Palo Alto Networks Prisma Access AgentPrisma Access Agent: Anti-Tamper Protection Bypass on Windows (Severity: MEDIUM)

Risk 53
Severity
8.3
First published (updated )
CVE-2026-0293

Palo Alto Networks GlobalProtect AppGlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP) (Severity: MEDIUM)

Risk 72
Severity
7.7
First published (updated )
CVE-2026-0298
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Palo Alto Networks Prisma Access AgentPrisma Access Agent: Local Privilege Escalation (Severity: MEDIUM)

Risk 60
Severity
8.5
First published (updated )
CVE-2026-0294

Palo Alto Networks GlobalProtect AppGlobalProtect App: Local Privilege Escalation Vulnerabilities (Severity: MEDIUM)

Risk 73
Severity
8.5
First published (updated )
CVE-2026-0299

Palo Alto Networks Prisma Access AgentPrisma Access Agent: Authenticated Limited File Deletion on Linux (Severity: LOW)

Risk 31
Severity
4.8
First published (updated )
CVE-2026-0291

ZDNetMicrosoft fixes 421 bugs and a Windows zero-day in August Patch Tuesday - update ASAP

Exploited
Zeroday
First published (updated )
News
ZDNet

BleepingComputerNew Microsoft Defender 'ShieldBreak' zero-day grants SYSTEM privileges

Exploited
Zeroday
First published (updated )
News
BleepingComputer
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Google BlinkUse After Free

Risk 77
Severity
8.8
First published (updated )
CVE-2026-19560

Google Google ChromeUse After Free

Risk 77
Severity
8.8
First published (updated )
CVE-2026-19559

Google Google ChromeUse After Free

Risk 69
Severity
7.5
First published (updated )
CVE-2026-19558

Google ChromeUse After Free

Risk 71
Severity
8.3
First published (updated )
CVE-2026-19557

Lightroom ClassicLightroom Classic | Out-of-bounds Write (CWE-787)

Risk 68
Severity
7.8
First published (updated )
CVE-2026-48408
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Lightroom ClassicLightroom Classic | Out-of-bounds Write (CWE-787)

Risk 68
Severity
7.8
First published (updated )
CVE-2026-48409

Adobe Lightroom ClassicLightroom Classic | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

Risk 70
Severity
8.6
First published (updated )
CVE-2026-48441

Adobe Lightroom ClassicLightroom Classic | Incorrect Authorization (CWE-863)

Risk 64
Severity
7.7
First published (updated )
CVE-2026-48447

Adobe Lightroom ClassicLightroom Classic | Out-of-bounds Write (CWE-787)

Risk 68
Severity
7.8
First published (updated )
CVE-2026-48406

Adobe Lightroom ClassicLightroom Classic | Out-of-bounds Write (CWE-787)

Risk 68
Severity
7.8
First published (updated )
CVE-2026-48405
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203