Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed

11Vendor sources

16,381Advisories collected

5,892Published or updated in 30 days

6,725Marked critical or high

Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

AWS Security Bulletins 153 advisories

CurrentChecked 17 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Apple Security Releases 28 advisories

CurrentChecked 22 minutes ago

Checked hourly Browse this vendor's advisories Official source

Cisco Security Advisories 100 advisories

Check delayedChecked 14 days ago

Checked every 15 minutes Browse this vendor's advisories Official source

Citrix Security Bulletins 23 advisories

Check delayedChecked about an hour ago

Checked hourly Browse this vendor's advisories Official source

Delinea Security Advisories 10 advisories

CurrentChecked 12 minutes ago

Checked hourly Browse this vendor's advisories Official source

Fortinet PSIRT Advisories 54 advisories

CurrentChecked 17 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Ivanti Security Advisories 9 advisories

CurrentChecked 17 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Microsoft Security Response Center 15,547 advisories

CurrentChecked 2 hours ago

Checked every 6 hours Browse this vendor's advisories Official source

Palo Alto Networks Security Advisories 56 advisories

CurrentChecked 17 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

SonicWall PSIRT Advisories 10 advisories

CurrentChecked 12 minutes ago

Checked hourly Browse this vendor's advisories Official source

Ubuntu Security Notices 391 advisories

CurrentChecked 17 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

16,381 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results

Microsoft Security Response CenterCVE-2026-102303

Published Oct 26, 2026

HighCVSS 4.3

Chromium CVE-2026-102303: Uninitialized resource

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions154.0.4258.53

Vendor guidance

Release Notes

CVE-2026-102303

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-102302

Published Oct 26, 2026

HighCVSS 8.8

Chromium CVE-2026-102302: Buffer overflow

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions154.0.4258.53

Vendor guidance

Release Notes

CVE-2026-102302

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-102301

Published Oct 26, 2026

HighCVSS 8.3

Chromium CVE-2026-102301: Out of bounds write

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions154.0.4258.53

Vendor guidance

Release Notes

CVE-2026-102301

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-102300

Published Oct 26, 2026

High

Chromium CVE-2026-102300: Uninitialized resource in WebGPU

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions154.0.4258.53

Vendor guidance

Release Notes

CVE-2026-102300

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-102299

Published Oct 26, 2026

HighCVSS 8.8

Chromium CVE-2026-102299: Type confusion

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions154.0.4258.53

Vendor guidance

Release Notes

CVE-2026-102299

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-96199

Updated Oct 26, 2026

HighCVSS 8.8

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions154.0.4258.37

Vendor guidance

Release Notes

CVE-2026-96199

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-96198

Updated Oct 26, 2026

HighCVSS 8.8

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions154.0.4258.37

Vendor guidance

Release Notes

CVE-2026-96198

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-85898

Updated Oct 26, 2026

HighCVSS 8.8

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions154.0.4258.48

Vendor guidance

Release Notes

CVE-2026-85898

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-85897

Updated Oct 26, 2026

HighCVSS 8.8

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions154.0.4258.37

Vendor guidance

Release Notes

CVE-2026-85897

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-85890

Updated Oct 26, 2026

HighCVSS 8.8

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions154.0.4258.37

Vendor guidance

Release Notes

CVE-2026-85890

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83831

Updated Oct 26, 2026

HighCVSS 8.8

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions154.0.4258.48

Vendor guidance

Release Notes

CVE-2026-83831

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-96951

Updated Oct 26, 2026

HighCVSS 8.8

Windows Shell Security Feature Bypass Vulnerability

Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.

Affected productsWindows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems

Fixed versions6.3.9600.23470, 10.0.14393.9612, 10.0.17763.9376, 10.0.19044.7807

Vendor guidance

Release Notes Install KB5126836. Install KB5126868. Install KB5126651. Install KB5126657. Install KB5126655. Install KB5126653. Install KB5127648. Install KB5126646. Install KB5127646.

CVE-2026-96951

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-96844

Updated Oct 26, 2026

HighCVSS 8.0

Microsoft Bluetooth Driver Elevation of Privilege Vulnerability

Integer underflow (wrap or wraparound) in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges over an adjacent network.

Affected productsWindows Server 2012, Windows Server 2012 (Server Core installation), Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems

Fixed versions6.2.9200.26434, 10.0.14393.9612, 10.0.17763.9376, 10.0.19044.7807

Vendor guidance

Install KB5126835. Install KB5126868. Install KB5126651. Install KB5126657. Install KB5126655. Install KB5126653. Install KB5127648. Install KB5126646. Install KB5127646. Install KB5126836.

CVE-2026-96844

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-96311

Updated Oct 26, 2026

HighCVSS 5.5

Windows Network List Service Tampering Vulnerability

Improper authorization in Windows Network List Service allows an authorized attacker to perform tampering locally.

Affected productsWindows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems

Fixed versions10.0.14393.9612, 10.0.17763.9376, 10.0.19045.7807, 10.0.26100.9711

Vendor guidance

Install KB5126868. Install KB5126651. Install KB5126657. Install KB5127648. Install KB5126646. Install KB5126836. Install KB5126655. Install KB5126653. Install KB5127646.

CVE-2026-96311

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-96244

Updated Oct 26, 2026

HighCVSS 7.8

Windows Internal System User Profile Elevation of Privilege Vulnerability

Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally.

Affected productsWindows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems

Fixed versions10.0.22631.7652, 10.0.26100.9711, 10.0.26200.9711, 10.0.26300.9711

Vendor guidance

Install KB5126653. Install KB5127648. Install KB5126646. Install KB5127646. Install KB5126868. Install KB5126651. Install KB5126657. Install KB5126655.

CVE-2026-96244

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-96234

Updated Oct 26, 2026

HighCVSS 5.3

.NET Information Disclosure Vulnerability

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.

Affected products.NET 10.0 runtime installed on Windows, .NET 8.0 runtime installed on Windows, .NET 9.0 runtime installed on Windows, .NET 11.0 runtime installed on Windows

Fixed versions10.0.13, 8.0.32, 9.0.21, 11.0.0-rc.2

Vendor guidance

Release Notes Install KB5130036. Install KB5130034. Install KB5130035.

CVE-2026-96234

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-88094

Updated Oct 26, 2026

HighCVSS 8.1

Azure Storage Library Elevation of Privilege Vulnerability

Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Storage Library allows an authorized attacker to elevate privileges over a network.

Affected productsMicrosoft Edge (Chromium-based), azure-storage-blob-batch

Fixed versions153.0.4234.46, 12.31.2

Vendor guidance

Release Notes

CVE-2026-88094

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-85798

Updated Oct 26, 2026

HighCVSS 7.2

Windows Distributed File System (DFS) Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.

Affected productsWindows 11 Version 26H2 for ARM64-based Systems, Windows 11 Version 26H2 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems

Fixed versions10.0.26300.9711, 10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807

Vendor guidance

Install KB5127648. Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5126653. Install KB5127646. Install KB5126868. Install KB5126835. Install KB5126836.

CVE-2026-85798

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-84007

Updated Oct 26, 2026

HighCVSS 6.5

Remote Desktop Gateway Service Information Disclosure Vulnerability

Out-of-bounds read in Remote Desktop Gateway Service allows an authorized attacker to disclose information over a network.

Affected productsWindows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation)

Fixed versions10.0.17763.9376, 10.0.20348.5761, 10.0.26100.33650, 10.0.14393.9612

Vendor guidance

Install KB5126651. Install KB5126655. Install KB5126646. Install KB5126868. Install KB5126835. Install KB5126836.

CVE-2026-84007

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83840

Updated Oct 26, 2026

HighCVSS 7.8

Windows Error Reporting Elevation of Privilege Vulnerability

Weak authentication in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807, 10.0.19045.7807

Vendor guidance

Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5127648. Install KB5126653. Install KB5127646. Install KB5126868.

CVE-2026-83840

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83776

Updated Oct 26, 2026

HighCVSS 6.8

Windows Bluetooth Driver Elevation of Privilege Vulnerability

Out-of-bounds read in Microsoft Bluetooth Driver allows an unauthorized attacker to elevate privileges with a physical attack.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807, 10.0.19045.7807

Vendor guidance

Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5127648. Install KB5126653. Install KB5127646. Install KB5126868.

CVE-2026-83776

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83716

Updated Oct 26, 2026

HighCVSS 8.8

Windows Hyper-V Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807, 10.0.19045.7807

Vendor guidance

Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5127648. Install KB5126653. Install KB5127646. Install KB5126868.

CVE-2026-83716

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83519

Updated Oct 26, 2026

HighCVSS 9.8

Windows Error Reporting Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807, 10.0.19045.7807

Vendor guidance

Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5127648. Install KB5126653. Install KB5127646. Install KB5126868. Install KB5126835. Install KB5126836.

CVE-2026-83519

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-70177

Updated Oct 26, 2026

HighCVSS 7.8

Microsoft Windows Search Component Elevation of Privilege Vulnerability

Numeric truncation error in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807, 10.0.19045.7807

Vendor guidance

Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5127648. Install KB5126653. Install KB5127646. Install KB5126868. Install KB5126835. Install KB5126836.

CVE-2026-70177

Read the vendor advisory Watch this product

Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources