CurrentChecked 19 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
11Vendor sources
16,745Advisories collected
6,299Published or updated in 30 days
6,969Marked critical or high
Coverage
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
CurrentChecked 19 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
Check delayedChecked 20 days ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 24 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 24 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 14 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 14 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 4 hours ago
Checked every 6 hours
Browse this vendor's advisories
Official source
CurrentChecked 14 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 19 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 14 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
16,745 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
Ubuntu Security NoticesUSN-8919-1
Severity not listed
USN-8919-1: Linux kernel vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Ethernet bonding driver; - Network drivers; - F2FS file system; - Tracing infrastructure; - io_...
Vendor guidance
This update corrects flaws in the following subsystems: - Ethernet bonding driver; - Network drivers; - F2FS file system; - Tracing infrastructure; - io_uring subsystem; - Networking core; - IUCV driver; - RxRPC sessi...
Ubuntu Security NoticesUSN-8922-1
Severity not listed
USN-8922-1: Linux kernel (Oracle) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - S390 architecture; - IIO ADC drivers; - Multiple devices driver; - PCI subsystem; - VFIO driver...
Vendor guidance
This update corrects flaws in the following subsystems: - S390 architecture; - IIO ADC drivers; - Multiple devices driver; - PCI subsystem; - VFIO drivers; - Network file system (NFS) server daemon; - Overlay file sys...
Ubuntu Security NoticesUSN-8917-1
Severity not listed
USN-8917-1: Linux kernel vulnerabilities
It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity o...
Vendor guidance
This update corrects flaws in the following subsystems: - NVDIMM (Non-Volatile Memory Device) drivers; - Handshake API; - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - RISC-V...
Ivanti Security AdvisoriesIVANTI-OCTOBER-2026-SECURITY-UPDATE
Severity not listed
October 2026 Security Update
Security is foundational to how Ivanti builds, tests, and supports our products. We continue to strengthen our secure product development practices through vulnerability discovery, responsible disclosure processes, security testing, threat-informed hardening, and coordinated r...
Affected productsIvanti Connect Secure
Vendor guidance
We are working directly with those organizations while making information, updates and remediation available to the broader customer community.
Ubuntu Security NoticesUSN-8916-1
Severity not listed
USN-8916-1: PyJWT vulnerabilities
YuSung Han discovered that PyJWT did not properly validate certain JWK keys when performing HMAC verification. An attacker could possibly use this issue to forge authentication tokens. This issue only affected Ubuntu 26.04 LTS. (CVE-2026-102266) Rohan Das discovered that PyJWT...
Citrix Security BulletinsCTX697187
HighCVSS 8.5
Citrix UniconOS Security Bulletin CVE-2026-53562, CVE-2026-53563, and CVE-2026-53564
Citrix UniconOS is affected by the vulnerability described below
Affected productsCitrix UniconOS, The vulnerabilities affect the following supported versions of Citrix UniconOS (formerly eLux). Current Release (CR) Citrix UniconOS versions BEFORE 2607.2 Long Term Service Release (LTSR) Citrix UniconOS versions BEFORE 2603 LTSR CU2
Fixed versionsCitrix UniconOS 2607.2 and later versions, Citrix UniconOS 2603 LTSR CU2 and later versions
Vendor guidance
Citrix strongly recommends that customers upgrade their Citrix UniconOS to versions that contain the fixes as soon as possible. Citrix UniconOS versions that contain the fixes are: Current Release (CR) Citrix UniconOS...
Microsoft Security Response CenterCVE-2026-97800
HighCVSS 7.8
Windows Mobile Broadband Elevation of Privilege Vulnerability
Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally.
Affected productsWindows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems
Fixed versions10.0.26100.9711, 10.0.26200.9711, 10.0.26300.9711, 10.0.28000.3231
Vendor guidance
Install KB5127648. Install KB5127646.
Microsoft Security Response CenterCVE-2026-97793
HighCVSS 7.0
Windows Setup and Deployment Elevation of Privilege Vulnerability
Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9376, 10.0.19044.7807, 10.0.19045.7807, 10.0.20348.5761
Vendor guidance
Install KB5126651. Install KB5126657. Install KB5126655. Install KB5126653. Install KB5127648. Install KB5126646. Install KB5127646.
Microsoft Security Response CenterCVE-2026-96858
HighCVSS 5.5
Windows Security Account Manager Tampering Vulnerability
Missing authentication for critical function in Windows Security Account Manager allows an authorized attacker to perform tampering locally.
Affected productsWindows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems
Fixed versions10.0.19044.7807, 10.0.19045.7807, 10.0.20348.5761, 10.0.22631.7652
Vendor guidance
Install KB5126657. Install KB5126655. Install KB5126653. Install KB5127648. Install KB5126646. Install KB5127646.
Microsoft Security Response CenterCVE-2026-96313
HighCVSS 7.0
Windows Push Notifications Elevation of Privilege Vulnerability
Missing authentication for critical function in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9376, 10.0.19044.7807, 10.0.19045.7807, 10.0.20348.5761
Vendor guidance
Install KB5126651. Install KB5126657. Install KB5126655. Install KB5126653. Install KB5127648. Install KB5126646. Install KB5127646.
Microsoft Security Response CenterCVE-2026-96183
HighCVSS 5.5
Windows Health and Optimized Experiences Service Information Disclosure Vulnerability
Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to disclose information locally.
Affected productsWindows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems
Fixed versions10.0.26100.9711, 10.0.26200.9711, 10.0.26300.9711, 10.0.28000.3231
Vendor guidance
Install KB5127648. Install KB5127646.
Microsoft Security Response CenterCVE-2026-85884
HighCVSS 7.8
Windows Health and Optimized Experiences Service Elevation of Privilege Vulnerability
Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally.
Affected productsWindows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems
Fixed versions10.0.26200.9711, 10.0.26100.9711, 10.0.28000.3231, 10.0.26300.9711
Vendor guidance
Install KB5127648. Install KB5127646.
Microsoft Security Response CenterCVE-2026-83715
HighCVSS 7.1
Windows Error Reporting Tampering Vulnerability
Missing authentication for critical function in Windows Error Reporting allows an authorized attacker to perform tampering locally.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807, 10.0.19045.7807
Vendor guidance
Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5127648. Install KB5126653. Install KB5127646. Install KB5126868. Install KB5126835. Install KB5126836.
Microsoft Security Response CenterCVE-2026-83656
HighCVSS 4.7
Windows Modern Device Management (MDM) Tampering Vulnerability
Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.
Affected productsWindows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows Server 2022
Fixed versions10.0.19044.7807, 10.0.19045.7807, 10.0.20348.5761, 10.0.22631.7652
Vendor guidance
Install KB5126657. Install KB5126655. Install KB5126653. Install KB5127648. Install KB5126646. Install KB5127646.
Microsoft Security Response CenterCVE-2026-70580
HighCVSS 8.8
Windows Credential Guard Spoofing Vulnerability
Missing authentication for critical function in Windows Credential Guard allows an authorized attacker to perform spoofing locally.
Affected productsWindows 11 Version 26H2 for ARM64-based Systems, Windows 11 Version 26H2 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems
Fixed versions10.0.26300.9711, 10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807
Vendor guidance
Install KB5127648. Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5126653. Install KB5127646.
Microsoft Security Response CenterCVE-2026-62879
HighCVSS 5.5
Windows SmartScreen Tampering Vulnerability
Missing authentication for critical function in Windows SmartScreen allows an authorized attacker to perform tampering locally.
Affected productsWindows 11 Version 26H2 for ARM64-based Systems, Windows 11 Version 26H2 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems
Fixed versions10.0.26300.9711, 10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807
Vendor guidance
Install KB5127648. Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5126653. Install KB5127646.
Microsoft Security Response CenterCVE-2026-97814
CriticalCVSS 9.8
Windows Text Shaping Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
Affected productsWindows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation)
Fixed versions6.2.9200.26434, 6.3.9600.23470, 10.0.14393.9612, 10.0.17763.9376
Vendor guidance
Install KB5126835. Install KB5126836. Install KB5126868. Install KB5126651. Install KB5126653. Install KB5127648. Install KB5126646. Install KB5127646. Install KB5126657. Install KB5126655.
Microsoft Security Response CenterCVE-2026-97749
CriticalCVSS 9.8
Microsoft Office Outlook Remote Code Execution Vulnerability
Double free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
Affected productsMicrosoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions
Fixed versions16.0.14334.20974, 16.0.17932.21056, https://aka.ms/OfficeSecurityReleases
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-97016
CriticalCVSS 9.8
Microsoft Office Outlook Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
Affected productsMicrosoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions
Fixed versions16.0.14334.20974, 16.0.17932.21056, https://aka.ms/OfficeSecurityReleases
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-96952
CriticalCVSS 8.8
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9376, 10.0.19044.7807, 10.0.19045.7807, 10.0.20348.5761
Vendor guidance
Install KB5126651. Install KB5126657. Install KB5126655. Install KB5126653. Install KB5127648. Install KB5126646. Install KB5127646.
Microsoft Security Response CenterCVE-2026-96943
CriticalCVSS 8.8
Windows Raw Image Extension Remote Code Execution Vulnerability
Integer overflow or wraparound in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.
Affected productsRaw Image Extension on Windows 10 Version 1607 for x64-based Systems, Raw Image Extension on Windows 10 Version 1607 for 32-bit Systems, Raw Image Extension on Windows 10 for x64-based Systems, Raw Image Extension on Windows 10 for 32-bit Systems
Fixed versions2.4.36.0, 2.5.35.0
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-96934
CriticalCVSS 9.8
Windows DHCP Server Remote Code Execution Vulnerability
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
Affected productsWindows Server 2012 R2 (Server Core installation), Windows 10 Version 1607 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation)
Fixed versions6.3.9600.23470, 10.0.14393.9612, 10.0.17763.9376, 10.0.26100.33650
Vendor guidance
Install KB5126836. Install KB5126868. Install KB5126651. Install KB5126646. Install KB5126835. Install KB5126655.
Microsoft Security Response CenterCVE-2026-96914
CriticalCVSS 8.8
Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
Affected productsWindows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems
Fixed versions10.0.22631.7652, 10.0.26100.9711, 10.0.26200.9711, 10.0.26300.9711
Vendor guidance
Install KB5126653. Install KB5127648. Install KB5126646. Install KB5127646. Install KB5126868. Install KB5126651. Install KB5126657. Install KB5126655.
Microsoft Security Response CenterCVE-2026-88174
CriticalCVSS 8.1
Windows Deployment Services Remote Code Execution Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Deployment Services allows an unauthorized attacker to execute code over a network.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9376, 10.0.20348.5761, 10.0.26100.33650, 10.0.14393.9612
Vendor guidance
Install KB5126651. Install KB5126655. Install KB5126646. Install KB5126868. Install KB5126835. Install KB5126836.
Before you act
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.