Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how microsoft compares to other vendors in security performance

View Risk Score →

Software

microsoft windows
112
microsoft windows operating system
74
microsoft edge
63
microsoft edge (chromium-based)
56
microsoft windows server
49
microsoft internet explorer
46
microsoft windows 7
43
microsoft windows rt
41
microsoft windows 2000
31
microsoft windows xp
31
microsoft windows vista
28
microsoft windows server 2016
25
microsoft windows 8.0
23
microsoft windows nt
23
microsoft ie
19
microsoft edge beta
16
microsoft windows 2003 server
12
microsoft windows server 2019
12
microsoft azl3 binutils 2.41-9
11
microsoft cbl2 binutils 2.37-16
11
microsoft azl3 binutils 2.41-7
10
microsoft azl3 hdf5 1.14.4.3-1
10
microsoft cbl2 binutils 2.37-17
10
microsoft cbl2 gdb 11.2-6
10
microsoft windows 10
9
microsoft windows server 2022
9
microsoft cbl2 hdf5 1.14.4-1
8
microsoft cbl2 hdf5 1.14.6-1
8
microsoft windows 11
8
microsoft windows server 2012
8
microsoft cbl2 binutils 2.37-19
7
microsoft cbl2 gdb 11.2-7
7
microsoft windows 10 1607
7
microsoft windows 10 1809
7
microsoft windows 10 21h2
7
microsoft windows 10 22h2
7
microsoft windows 11 24h2
7
microsoft windows server 2025
7
microsoft azl3 binutils 2.41-10
6
microsoft azl3 rubygem-nokogiri 1.15.4-1
6
microsoft windows 11 23h2
6
microsoft windows 98
6
microsoft windows server 2012 r2
6
microsoft 365 apps
5
microsoft 365 apps for enterprise
5
microsoft azl3 unbound 1.25.1-1
5
microsoft exchange server
5
microsoft azl3 crash 8.0.4-4
4
microsoft azl3 gdb 13.2-5
4
microsoft azl3 gdb 13.2-6
4

Nlnet Labs UnboundPrivacy/configuration issue when adding local data in views through 'unbound-control'

Risk 23
Severity
3.1
First published (updated )
CVE-2026-55708

Nlnet Labs UnboundDNS Cookie bypass when combined with proxy-protocol use

Risk 21
Severity
3.7
First published (updated )
CVE-2026-54478

Nlnet Labs UnboundA wildcard replay, as another piece of data, triggers poisoning in the serve expired reply path

Risk 21
Severity
3.7
First published (updated )
CVE-2026-46582

Nlnet Labs UnboundOff-by-one error in 'harden-below-nxdomain' logic can shadow a stub/forward zone by a legitimate parent's NXDOMAIN

Risk 21
Severity
3.7
First published (updated )
CVE-2026-44687

Nlnet Labs UnboundExtra fix for CVE-2026-40622 to also clamp the TTL of A/AAAA records disallowing a one-time 'ghost domain' delegation renewal via glue records

Risk 21
Severity
3.7
First published (updated )
CVE-2026-42955
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Nlnet Labs UnboundDegradation of resolution service from improperly accounted client-terminated DNS-over-QUIC queries

Risk 21
Severity
3.7
First published (updated )
CVE-2026-41637

Microsoft Windows 11Win32k Information Disclosure Vulnerability

Risk 18
Severity
3.3
First published (updated )
CVE-2026-50416

Microsoft Windows 10Windows Kernel Information Disclosure Vulnerability

Risk 18
Severity
3.3
First published (updated )
CVE-2026-50419

Libarchive libarchiveLibarchive: heap overflow oob read while parsing a tar archive contains a pax extended header

Risk 25
Severity
3.9
First published (updated )
CVE-2026-15028

Nokogiri NokogiriNokogiri: Possible Use-After-Free in XInclude Processing

Risk 50
Severity
2.2
First published (updated )
CVE-2026-57438
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Nokogiri NokogiriNokogiri: Possible Use-After-Free when directly using `NokogirI::XML::XPathContext` beyond document lifetime

Risk 27
Severity
1.7
First published (updated )
CVE-2026-57437

Nokogiri NokogiriNokogiri: Possible Use-After-Free when setting `Document#root=` to an invalid node type

Risk 27
Severity
1.7
First published (updated )
CVE-2026-57436

Nokogiri NokogiriNokogiri: Possible Use-After-Free when setting an attribute value via `Nokogiri::XML::Attr#value=` or `#content=`

Risk 43
Severity
1.7
First published (updated )
CVE-2026-57435

Nokogiri NokogiriNokogiri: Null Pointer Dereference calling methods on uninitialized wrapper classes

Risk 43
Severity
1.7
First published (updated )
CVE-2026-57434

Nokogiri XML::SchemaNokogiri: XML::Schema on JRuby allows network requests when NONET is set, bypassing CVE-2020-26247

Risk 15
Severity
2.6
First published (updated )
CVE-2026-57234
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

NokogiriNokogiri: Possible Use-After-Free when `Nokogiri::XML::Document#encoding=` raises an exception

Risk 54
Severity
1.7
First published (updated )
CVE-2026-57236

gnupg gpgsmCMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS forma…

Risk 16
Severity
2.9
First published (updated )
CVE-2026-57062

rubygems/concurrent-rubyconcurrent-ruby: ReadWriteLock allows wrong-thread write release and stray read-release counter corruption

Risk 86
Severity
2.1
First published (updated )
CVE-2026-54906

rubygems/concurrent-rubyconcurrent-ruby: `ReentrantReadWriteLock` read-count overflow grants a write lock without exclusivity

Risk 32
Severity
2
First published (updated )
CVE-2026-54905

npm/undiciundici vulnerable to Set-Cookie SameSite attribute downgrade via permissive substring matching

Risk 20
Severity
3.7
First published (updated )
CVE-2026-11525
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

linuxfoundation Runcrunc: Malicious image with /dev symlink can trigger limited host filesystem integrity violations

Risk 17
Severity
3.3
First published (updated )
CVE-2026-41579

Erlang Erlang\/otpSFTP READLINK Leaks Absolute Backend Filesystem Path When Root Is Configured

Risk 38
Severity
2.3
First published (updated )
CVE-2026-48855

Microsoft 365 AppsMicrosoft Excel Security Feature Bypass Vulnerability

Risk 17
Severity
3.3
First published (updated )
CVE-2026-45459

Microsoft 365 AppsMicrosoft Word Information Disclosure Vulnerability

Risk 17
Severity
3.3
First published (updated )
CVE-2026-45466

Microsoft Office 2016Microsoft Office Information Disclosure Vulnerability

Risk 17
Severity
3.3
First published (updated )
CVE-2026-45485
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Microsoft Windows 10Microsoft Azure Attestation service and Device Health Attestation Service Spoofing Vulnerability

Risk 22
Severity
3.9
First published (updated )
CVE-2026-45642

tmux tmuxtmux image.c image_free use after free

Risk 34
Severity
1.1
First published (updated )
CVE-2026-11623

Google ChromeUninitialized Use in Skia

Risk 17
Severity
3.1
First published (updated )
CVE-2026-16417

OpenSC OpenSCOpenSC pkcs11-tool Key Generation pkcs11-tool.c test_kpgen_certwrite buffer overflow

Risk 37
Severity
1.3
First published (updated )
CVE-2026-10275

Google ChromeChromium: CVE-2026-12032 Inappropriate implementation  Passwords

Risk 17
Severity
3.1
First published (updated )
CVE-2026-12032
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203