Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how microsoft compares to other vendors in security performance

View Risk Score →

Software

microsoft windows
112
microsoft edge
81
microsoft edge (chromium-based)
75
microsoft windows operating system
74
microsoft windows server
49
microsoft internet explorer
46
microsoft windows 7
43
microsoft windows rt
41
microsoft windows 2000
31
microsoft windows xp
31
microsoft windows vista
28
microsoft windows server 2016
25
microsoft windows 8.0
23
microsoft windows nt
23
microsoft ie
19
microsoft edge beta
15
microsoft cbl2 gdb 11.2-6
12
microsoft windows 2003 server
12
microsoft windows server 2019
12
microsoft azl3 binutils 2.41-9
11
microsoft cbl2 binutils 2.37-16
11
microsoft azl3 binutils 2.41-7
10
microsoft cbl2 binutils 2.37-17
10
microsoft azl3 hdf5 1.14.4.3-1
9
microsoft windows 10
9
microsoft windows server 2022
9
microsoft cbl2 hdf5 1.14.4-1
8
microsoft cbl2 hdf5 1.14.6-1
8
microsoft windows 11
8
microsoft windows server 2012
8
microsoft cbl2 binutils 2.37-19
7
microsoft cbl2 gdb 11.2-7
7
microsoft windows 10 1607
7
microsoft windows 10 1809
7
microsoft windows 10 21h2
7
microsoft windows 10 22h2
7
microsoft windows 11 24h2
7
microsoft windows server 2025
7
microsoft azl3 binutils 2.41-10
6
microsoft azl3 rubygem-nokogiri 1.15.4-1
6
microsoft edge chromium
6
microsoft windows 11 23h2
6
microsoft windows 98
6
microsoft windows server 2012 r2
6
microsoft 365 apps
5
microsoft 365 apps for enterprise
5
microsoft azl3 unbound 1.25.1-1
5
microsoft exchange server
5
microsoft azl3 crash 8.0.4-4
4
microsoft cbl2 crash 8.0.1-4
4

Linux Linux kernelwifi: p54: validate RX frame length in p54_rx_eeprom_readback()

Risk 22
Severity
3.2
First published (updated )
CVE-2026-64571

OpenJS Node.jsA flaw in Node.js Permission Model enforcement allows process.report writes (and overwrites) files o…

Risk 18
Severity
3.3
First published (updated )
CVE-2026-58039

MessagePack for Ruby MessagePackMessagePack::Buffer#clear Use-After-Free that Enables Cross-Buffer Disclosure

Risk 34
Severity
2.1
First published (updated )
CVE-2026-54522

OpenJS Node.jsA flaw in Node.js Permission Model enforcement allows `trace_events.createTracing().enable()` Writes…

Risk 18
Severity
3.3
First published (updated )
CVE-2026-56847

xml.etree.ElementPathQuadratic Behavior in xml.etree.ElementPath Index Predicates

Risk 12
Severity
2
First published (updated )
CVE-2026-6879
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Linux Linux kernelBluetooth: bpa10x: avoid OOB read of revision string in bpa10x_setup()

Risk 12
Severity
2.1
First published (updated )
CVE-2026-64549

Linux Linux kernelACPI: CPPC: Suppress UBSAN warning caused by field misuse

Risk 12
Severity
1.9
First published (updated )
CVE-2026-64512

Qt Qt XMLXML injection vulnerability in QDom comment, CDATA and processing-instruction serialization

Risk 18
Severity
2.9
First published (updated )
CVE-2026-15037

Nlnet Labs UnboundPrivacy/configuration issue when adding local data in views through 'unbound-control'

Risk 23
Severity
3.1
First published (updated )
CVE-2026-55708

Nlnet Labs UnboundDNS Cookie bypass when combined with proxy-protocol use

Risk 21
Severity
3.7
First published (updated )
CVE-2026-54478
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Nlnet Labs UnboundA wildcard replay, as another piece of data, triggers poisoning in the serve expired reply path

Risk 21
Severity
3.7
First published (updated )
CVE-2026-46582

Nlnet Labs UnboundOff-by-one error in 'harden-below-nxdomain' logic can shadow a stub/forward zone by a legitimate parent's NXDOMAIN

Risk 21
Severity
3.7
First published (updated )
CVE-2026-44687

Nlnet Labs UnboundExtra fix for CVE-2026-40622 to also clamp the TTL of A/AAAA records disallowing a one-time 'ghost domain' delegation renewal via glue records

Risk 21
Severity
3.7
First published (updated )
CVE-2026-42955

Nlnet Labs UnboundDegradation of resolution service from improperly accounted client-terminated DNS-over-QUIC queries

Risk 21
Severity
3.7
First published (updated )
CVE-2026-41637

Google ChromeInteger overflow in GPU

Risk 17
Severity
3.1
First published (updated )
CVE-2026-19167
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Google ChromeUninitialized Use in Skia

Risk 17
Severity
3.1
First published (updated )
CVE-2026-19161

Google ChromeUninitialized Use in Skia

Risk 17
Severity
3.1
First published (updated )
CVE-2026-19160

CoreDNS CoreDNSCoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin

Risk 20
Severity
3.7
First published (updated )
CVE-2026-62994

Microsoft Windows 11Win32k Information Disclosure Vulnerability

Risk 18
Severity
3.3
First published (updated )
CVE-2026-50416

Microsoft Windows 10Windows Kernel Information Disclosure Vulnerability

Risk 18
Severity
3.3
First published (updated )
CVE-2026-50419
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Libarchive libarchiveLibarchive: heap overflow oob read while parsing a tar archive contains a pax extended header

Risk 25
Severity
3.9
First published (updated )
CVE-2026-15028

onnx onnxruntimeonnx onnxruntime old.cc convPoolShapeInference_opset19 out-of-bounds

Risk 22
Severity
2.1
First published (updated )
CVE-2026-14647

python/tarfileTarfile.extract() doesn't fully respect filter parameter

Risk 27
Severity
2
First published (updated )
CVE-2026-4360

Nokogiri NokogiriNokogiri: Possible Use-After-Free in XInclude Processing

Risk 50
Severity
2.2
First published (updated )
CVE-2026-57438

Nokogiri NokogiriNokogiri: Possible Use-After-Free when directly using `NokogirI::XML::XPathContext` beyond document lifetime

Risk 27
Severity
1.7
First published (updated )
CVE-2026-57437
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Nokogiri NokogiriNokogiri: Possible Use-After-Free when setting `Document#root=` to an invalid node type

Risk 27
Severity
1.7
First published (updated )
CVE-2026-57436

Nokogiri NokogiriNokogiri: Possible Use-After-Free when setting an attribute value via `Nokogiri::XML::Attr#value=` or `#content=`

Risk 43
Severity
1.7
First published (updated )
CVE-2026-57435

Nokogiri NokogiriNokogiri: Null Pointer Dereference calling methods on uninitialized wrapper classes

Risk 43
Severity
1.7
First published (updated )
CVE-2026-57434

Nokogiri XML::SchemaNokogiri: XML::Schema on JRuby allows network requests when NONET is set, bypassing CVE-2020-26247

Risk 15
Severity
2.6
First published (updated )
CVE-2026-57234

NokogiriNokogiri: Possible Use-After-Free when `Nokogiri::XML::Document#encoding=` raises an exception

Risk 54
Severity
1.7
First published (updated )
CVE-2026-57236
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203