Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed

9Vendor sources

4,726Advisories collected

2,710Published or updated in 30 days

2,115Marked critical or high

Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

AWS Security Bulletins 111 advisories

CurrentChecked just now

Checked every 15 minutes Browse this vendor's advisories Official source

Cisco Security Advisories 34 advisories

CurrentChecked just now

Checked every 15 minutes Browse this vendor's advisories Official source

Citrix Security Bulletins 17 advisories

CurrentChecked 30 minutes ago

Checked hourly Browse this vendor's advisories Official source

Delinea Security Advisories 7 advisories

CurrentChecked just now

Checked hourly Browse this vendor's advisories Official source

Fortinet PSIRT Advisories 40 advisories

CurrentChecked just now

Checked every 15 minutes Browse this vendor's advisories Official source

Ivanti Security Advisories 5 advisories

CurrentChecked just now

Checked every 15 minutes Browse this vendor's advisories Official source

Microsoft Security Response Center 4,344 advisories

CurrentChecked 4 hours ago

Checked every 6 hours Browse this vendor's advisories Official source

Palo Alto Networks Security Advisories 39 advisories

CurrentChecked just now

Checked every 15 minutes Browse this vendor's advisories Official source

Ubuntu Security Notices 129 advisories

CurrentChecked just now

Checked every 15 minutes Browse this vendor's advisories Official source

4,726 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results

Ubuntu Security NoticesUSN-8736-1

Published Sep 8, 2026

Severity not listed

USN-8736-1: Perl vulnerabilities

It was discovered that Perl incorrectly handled certain large inputs during regular expression matching. An attacker could possibly use this issue to trigger out-of-bounds heap reads or writes, resulting in a denial of service or arbitrary code execution. (CVE-2026-15534) It w...

CVE-2026-15534 CVE-2026-19487

Read the vendor advisory

Ubuntu Security NoticesUSN-8735-1

Published Sep 8, 2026

Severity not listed

USN-8735-1: HSQLDB vulnerability

It was discovered that HSQLDB incorrectly handled specially crafted database files. An attacker could possibly use this issue to overwrite arbitrary files.

Read the vendor advisory

Cisco Security Advisoriescisco-sa-esa-smime-disc-dzw4rEdY

Published Sep 8, 2026

Medium

Cisco Secure Email Secure/Multipurpose Internet Mail Extensions Ciphertext Decryption Vulnerabilities

Multiple vulnerabilities in the Secure/Multipurpose Internet Mail Extensions (S/MIME) decryption functionality of Cisco Secure Email could allow an unauthenticated, remote attacker to recover plain text from encrypted email messages. These vulnerabilities are due to insufficie...

CVE-2026-20354 CVE-2026-20355

Read the vendor advisory

Microsoft Security Response CenterCVE-2026-83991

Published Sep 8, 2026

HighCVSS 5.5

Windows Cloud Files Mini Filter Driver Tampering Vulnerability

Missing authentication for critical function in Windows Cloud Files Mini Filter Driver allows an authorized attacker to perform tampering locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012.

CVE-2026-83991

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-73004

Published Sep 8, 2026

HighCVSS 5.5

Windows Autopilot Tampering Vulnerability

Missing authentication for critical function in Windows Autopilot allows an authorized attacker to perform tampering locally.

Affected productsWindows Server 2022, Windows Server 2022 (Server Core installation), Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems

Fixed versions10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725, 10.0.26100.33438

Vendor guidance

Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012.

CVE-2026-73004

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-72964

Published Sep 8, 2026

HighCVSS 5.5

Windows Internet Connection Sharing (ICS) Tampering Vulnerability

Missing authentication for critical function in Windows Internet Connection Sharing (ICS) allows an authorized attacker to perform tampering locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099.

CVE-2026-72964

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69674

Published Sep 8, 2026

HighCVSS 5.5

Windows Modern Device Management (MDM) Security Feature Bypass Vulnerability

Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to bypass a security feature locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012.

CVE-2026-69674

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69554

Published Sep 8, 2026

HighCVSS 5.5

Microsoft Windows Search Component Tampering Vulnerability

Missing authentication for critical function in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-69554

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69528

Published Sep 8, 2026

HighCVSS 7.8

Windows Shell Elevation of Privilege Vulnerability

Missing authentication for critical function in Windows Shell allows an authorized attacker to elevate privileges locally.

Affected productsWindows Server 2025 (Server Core installation), Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems

Fixed versions10.0.26100.33438, 10.0.26200.9445, 10.0.22631.7582, 10.0.26100.9445

Vendor guidance

Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012.

CVE-2026-69528

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69415

Published Sep 8, 2026

HighCVSS 6.8

Windows DHCP Server Elevation of Privilege Vulnerability

Missing authentication for critical function in Windows DHCP Server allows an authorized attacker to elevate privileges over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.26100.33438, 10.0.14393.9512

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122871. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-69415

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69321

Published Sep 8, 2026

HighCVSS 5.5

Windows Power Dependency Coordinator Tampering Vulnerability

Missing authentication for critical function in Windows Power Dependency Coordinator allows an authorized attacker to perform tampering locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-69321

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83939

Published Sep 8, 2026

CriticalCVSS 8.2

Windows Secure Kernel Mode Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

Affected productsWindows 11 version 26H1 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems

Fixed versions10.0.28000.2954

Vendor guidance

Install KB5124012.

CVE-2026-83939

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83501

Published Sep 8, 2026

CriticalCVSS 5.5

Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability

Out-of-bounds read in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to disclose information locally.

Fixed versions10.0.26100.33438, 10.0.26200.9445, 10.0.22631.7582, 10.0.26100.9445

Vendor guidance

Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012.

CVE-2026-83501

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83498

Published Sep 8, 2026

CriticalCVSS 7.8

Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.

Fixed versions10.0.26100.33438, 10.0.26200.9445, 10.0.22631.7582, 10.0.26100.9445

Vendor guidance

Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012.

CVE-2026-83498

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-81959

Published Sep 8, 2026

CriticalCVSS 7.8

Microsoft Excel Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Affected productsMicrosoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems

Fixed versions16.0.10417.20207, 16.0.20326.20140, 16.0.14334.20906, 16.0.17932.20976

Vendor guidance

Release Notes Install KB5002914. Install KB5002904.

CVE-2026-81959

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-81955

Published Sep 8, 2026

CriticalCVSS 8.8

Windows Graphics Component Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

Fixed versions16.0.10417.20207, 16.0.20326.20138, 16.0.14334.20906, 16.0.17932.20976

Vendor guidance

Release Notes Install KB5002916. Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5122874. Install KB5123065. Install KB512...

CVE-2026-81955

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-81953

Published Sep 8, 2026

CriticalCVSS 7.8

Microsoft Excel Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Fixed versions16.0.10417.20207, 16.0.20326.20138, 16.0.14334.20906, 16.0.17932.20976

Vendor guidance

Release Notes Install KB5002914. Install KB5002904.

CVE-2026-81953

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-81952

Published Sep 8, 2026

CriticalCVSS 8.8

Microsoft Word Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Affected productsMicrosoft Office 365 for Mac, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, Microsoft 365 Apps for Enterprise for 32-bit Systems

Fixed versions16.0.20326.20138, 16.0.5569.1003, 16.0.10417.20207, 16.0.17932.20976

Vendor guidance

Release Notes Install KB5002916.

CVE-2026-81952

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-81951

Published Sep 8, 2026

CriticalCVSS 7.8

Microsoft Excel Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Fixed versions16.0.10417.20207, 16.0.20326.20138, 16.0.14334.20906, 16.0.17932.20976

Vendor guidance

Release Notes Install KB5002914. Install KB5002904.

CVE-2026-81951

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-81950

Published Sep 8, 2026

CriticalCVSS 7.8

Microsoft Excel Remote Code Execution Vulnerability

Double free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Fixed versions16.0.10417.20207, 16.0.20326.20138, 16.0.14334.20906, 16.0.17932.20976

Vendor guidance

Release Notes Install KB5002914. Install KB5002904.

CVE-2026-81950

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-81949

Published Sep 8, 2026

CriticalCVSS 7.8

Microsoft Excel Remote Code Execution Vulnerability

Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Fixed versions16.0.10417.20207, 16.0.20326.20138, 16.0.14334.20906, 16.0.17932.20976

Vendor guidance

Release Notes Install KB5002914. Install KB5002904.

CVE-2026-81949

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-81948

Published Sep 8, 2026

CriticalCVSS 7.8

Microsoft Excel Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Affected productsMicrosoft Office 365 for Mac, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems

Fixed versions16.0.10417.20207, 16.0.20326.20138, 16.0.14334.20906, 16.0.17932.20976

Vendor guidance

Release Notes Install KB5002914. Install KB5002904.

CVE-2026-81948

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-81354

Published Sep 8, 2026

CriticalCVSS 8.2

Windows Hello Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.19044.7725, 10.0.19045.7725, 10.0.26200.9445

Vendor guidance

Install KB5122876. Install KB5122878. Install KB5124008. Install KB5122880. Install KB5124012.

CVE-2026-81354

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-81352

Published Sep 8, 2026

CriticalCVSS 8.8

Web Media Extensions Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.

Affected productsWeb Media Extensions on Windows 10 Version 21H2 for 32-bit Systems, Web Media Extensions on Windows 10 Version 21H2 for ARM64-based Systems, Web Media Extensions on Windows 10 Version 21H2 for x64-based Systems, Web Media Extensions on Windows 10 Version 22H2 for x64-based Systems

Fixed versions1.2.42.0, 2.1.51.0

Vendor guidance

Release Notes

CVE-2026-81352

Read the vendor advisory Watch this product

Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

Read how SecurityAlert collects and checks threat intelligence.