Complete feed
Security advisories & CVEs
954 advisories across 32 monitored vendors.
Android app · Google Play
Take your CVE monitoring with you.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
High [CVE-2021-26876] OpenType Font Parsing Remote Code Execution Vulnerability
OpenType Font Parsing Remote Code Execution Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2019 (Server Core installation); Windows Server version 2004; Windows Server version 20H2; and 1 more. Affected products named by the advisory: Windows Server, version 1909 (Server Core installation).
High [CVE-2021-26874] Windows Overlay Filter Elevation of Privilege Vulnerability
Windows Overlay Filter Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2019 (Server Core installation); Windows Server version 2004; Windows Server version 20H2; and 1 more. Affected products named by the advisory: Windows Server, version 1909 (Server Core installation).
High [CVE-2021-26873] Windows User Profile Service Elevation of Privilege Vulnerability
Windows User Profile Service Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2008 R2 Service Pack 1; Windows Server 2008 R2 Service Pack 1 (Server Core installation); Windows Server 2008 Service Pack 2; Windows Server 2008 Service Pack 2 (Server Core installation); and 11 more. Affected products named by the advisory: Windows Server 2012 (Server Core installation); Windows Server 2012 R2 (Server Core installation); Windows Server 2016 (Server Core installation); Windows Server 2019 (Server Core installation); and 3 more.
High [CVE-2021-26870] Windows Projected File System Elevation of Privilege Vulnerability
Windows Projected File System Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2019 (Server Core installation); Windows Server version 2004; Windows Server version 20H2; and 1 more. Affected products named by the advisory: Windows Server, version 1909 (Server Core installation).
High [CVE-2021-26868] Windows Graphics Component Elevation of Privilege Vulnerability
Windows Graphics Component Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2012; Windows Server 2012 (Server Core installation); Windows Server 2012 R2; Windows Server 2012 R2 (Server Core installation); and 7 more. Affected products named by the advisory: Windows Server 2016 (Server Core installation); Windows Server 2019 (Server Core installation); Windows Server version 2004; Windows Server version 20H2; and 1 more.
High [CVE-2021-26866] Windows Update Service Elevation of Privilege Vulnerability
Windows Update Service Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2016 (Server Core installation); Windows Server 2019; Windows Server 2019 (Server Core installation); and 3 more. Affected products named by the advisory: Windows Server version 2004; Windows Server version 20H2; Windows Server, version 1909 (Server Core installation).
High [CVE-2021-26864] Windows Virtual Registry Provider Elevation of Privilege Vulnerability
Windows Virtual Registry Provider Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2016 (Server Core installation); Windows Server 2019; Windows Server 2019 (Server Core installation); and 3 more. Affected products named by the advisory: Windows Server version 2004; Windows Server version 20H2; Windows Server, version 1909 (Server Core installation).
High [CVE-2021-26863] Windows Win32k Elevation of Privilege Vulnerability
Windows Win32k Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2019 (Server Core installation); Windows Server version 2004; Windows Server version 20H2; and 1 more. Affected products named by the advisory: Windows Server, version 1909 (Server Core installation).
High [CVE-2021-26862] Windows Installer Elevation of Privilege Vulnerability
Windows Installer Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2008 R2 Service Pack 1; Windows Server 2008 R2 Service Pack 1 (Server Core installation); Windows Server 2008 Service Pack 2; Windows Server 2008 Service Pack 2 (Server Core installation); and 11 more. Affected products named by the advisory: Windows Server 2012 (Server Core installation); Windows Server 2012 R2 (Server Core installation); Windows Server 2016 (Server Core installation); Windows Server 2019 (Server Core installation); and 3 more.
High [CVE-2021-26861] Windows Graphics Component Remote Code Execution Vulnerability
Windows Graphics Component Remote Code Execution Vulnerability Affected products named by the advisory: Windows Server 2008 R2 Service Pack 1; Windows Server 2008 R2 Service Pack 1 (Server Core installation); Windows Server 2008 Service Pack 2; Windows Server 2008 Service Pack 2 (Server Core installation); and 11 more. Affected products named by the advisory: Windows Server 2012 (Server Core installation); Windows Server 2012 R2 (Server Core installation); Windows Server 2016 (Server Core installation); Windows Server 2019 (Server Core installation); and 3 more.
High [CVE-2021-26860] Windows App-V Overlay Filter Elevation of Privilege Vulnerability
Windows App-V Overlay Filter Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2019 (Server Core installation); Windows Server version 2004; Windows Server version 20H2; and 1 more. Affected products named by the advisory: Windows Server, version 1909 (Server Core installation).
High [CVE-2021-24095] DirectX Elevation of Privilege Vulnerability
DirectX Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2019 (Server Core installation); Windows Server version 2004; Windows Server version 20H2; and 1 more. Affected products named by the advisory: Windows Server, version 1909 (Server Core installation).
High [CVE-2021-24090] Windows Error Reporting Elevation of Privilege Vulnerability
Windows Error Reporting Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server version 2004; Windows Server version 20H2; Windows Server, version 1909 (Server Core installation).
High [CVE-2021-1729] Windows Update Stack Setup Elevation of Privilege Vulnerability
Windows Update Stack Setup Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2019 (Server Core installation); Windows Server version 2004; Windows Server version 20H2; and 1 more. Affected products named by the advisory: Windows Server, version 1909 (Server Core installation).
High [CVE-2021-27065] Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability Affected products named by the advisory: Microsoft Exchange Server 2019; Microsoft Exchange Server 2013 Cumulative Update 22; Microsoft Exchange Server 2019 Cumulative Update 2; Microsoft Exchange Server 2016 Cumulative Update 13; and 21 more. Affected products named by the advisory: Microsoft Exchange Server 2013 Cumulative Update 23; Microsoft Exchange Server 2019 Cumulative Update 3; Microsoft Exchange Server 2016 Cumulative Update 14; Microsoft Exchange Server 2019 Cumulative Update 4; and 17 more.
High [CVE-2021-26858] Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability Affected products named by the advisory: Microsoft Exchange Server 2019; Microsoft Exchange Server 2013 Cumulative Update 22; Microsoft Exchange Server 2019 Cumulative Update 2; Microsoft Exchange Server 2016 Cumulative Update 13; and 20 more. Affected products named by the advisory: Microsoft Exchange Server 2013 Cumulative Update 23; Microsoft Exchange Server 2019 Cumulative Update 3; Microsoft Exchange Server 2016 Cumulative Update 14; Microsoft Exchange Server 2019 Cumulative Update 4; and 16 more.
High [CVE-2021-26857] Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability Affected products named by the advisory: Microsoft Exchange Server 2016 Cumulative Update 19; Microsoft Exchange Server 2019 Cumulative Update 8; Microsoft Exchange Server 2019; Microsoft Exchange Server 2013 Cumulative Update 22; and 22 more. Affected products named by the advisory: Microsoft Exchange Server 2019 Cumulative Update 2; Microsoft Exchange Server 2016 Cumulative Update 13; Microsoft Exchange Server 2013 Cumulative Update 23; Microsoft Exchange Server 2019 Cumulative Update 3; and 18 more.
High [CVE-2021-1732] Windows Win32k Elevation of Privilege Vulnerability
Windows Win32k Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2019 (Server Core installation); Windows Server, version 1909 (Server Core installation); Windows Server version 2004; and 1 more. Affected products named by the advisory: Windows Server version 20H2.
High [CVE-2020-1190] Windows State Repository Service Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in an elevated context. An attacker could exploit this vulnerability by running a specially crafted application on the victim system. The update addresses the vulnerability by correcting the way the Windows State Repository Service handles objects in memory. Affected products named by the advisory: Windows Server 2016; Windows Server 2016 (Server Core installation); Windows Server 2019; Windows Server 2019 (Server Core installation); and 3 more. Affected products named by the advisory: Windows Server, version 1803 (Server Core Installation); Windows Server, version 1903 (Server Core installation); Windows Server, version 1909 (Server Core installation).
High [CVE-2020-1176] Jet Database Engine Remote Code Execution Vulnerability
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system. An attacker could exploit this vulnerability by enticing a victim to open a specially crafted file. The update addresses the vulnerability by correcting the way the Windows Jet Database Engine handles objects in memory. Affected products named by the advisory: Windows Server 2008 R2 Service Pack 1; Windows Server 2008 R2 Service Pack 1 (Server Core installation); Windows Server 2008 Service Pack 2; Windows Server 2008 Service Pack 2 (Server Core installation); and 11 more. Affected products named by the advisory: Windows Server 2012 (Server Core installation); Windows Server 2012 R2 (Server Core installation); Windows Server 2016 (Server Core installation); Windows Server 2019 (Server Core installation); and 3 more.