Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed

11Vendor sources

16,745Advisories collected

6,299Published or updated in 30 days

6,969Marked critical or high

Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

AWS Security Bulletins 167 advisories

CurrentChecked 2 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Apple Security Releases 29 advisories

CurrentChecked 22 minutes ago

Checked hourly Browse this vendor's advisories Official source

Cisco Security Advisories 101 advisories

Check delayedChecked 20 days ago

Checked every 15 minutes Browse this vendor's advisories Official source

Citrix Security Bulletins 24 advisories

CurrentChecked 27 minutes ago

Checked hourly Browse this vendor's advisories Official source

Delinea Security Advisories 14 advisories

CurrentChecked 27 minutes ago

Checked hourly Browse this vendor's advisories Official source

Fortinet PSIRT Advisories 55 advisories

CurrentChecked 17 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Ivanti Security Advisories 9 advisories

CurrentChecked 17 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Microsoft Security Response Center 15,859 advisories

CurrentChecked 4 hours ago

Checked every 6 hours Browse this vendor's advisories Official source

Palo Alto Networks Security Advisories 59 advisories

CurrentChecked 17 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

SonicWall PSIRT Advisories 11 advisories

CurrentChecked 22 minutes ago

Checked hourly Browse this vendor's advisories Official source

Ubuntu Security Notices 417 advisories

CurrentChecked 17 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

16,745 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results

Microsoft Security Response CenterCVE-2026-88171

Published Oct 13, 2026

CriticalCVSS 8.1

Windows DHCP Server Remote Code Execution Vulnerability

Double free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9376, 10.0.20348.5761, 10.0.26100.33650, 10.0.14393.9612

Vendor guidance

Install KB5126651. Install KB5126655. Install KB5126646. Install KB5126868. Install KB5126835. Install KB5126836.

CVE-2026-88171

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-88120

Published Oct 13, 2026

CriticalCVSS 8.1

Windows DHCP Server Remote Code Execution Vulnerability

Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

Affected productsWindows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation)

Fixed versions6.2.9200.26434, 6.3.9600.23470, 10.0.14393.9612, 10.0.17763.9376

Vendor guidance

Install KB5126835. Install KB5126836. Install KB5126868. Install KB5126651. Install KB5126655. Install KB5126646.

CVE-2026-88120

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-88119

Published Oct 13, 2026

CriticalCVSS 8.1

Windows DHCP Server Remote Code Execution Vulnerability

Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

Affected productsWindows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation)

Fixed versions6.2.9200.26434, 6.3.9600.23470, 10.0.14393.9612, 10.0.17763.9376

Vendor guidance

Install KB5126835. Install KB5126836. Install KB5126868. Install KB5126651. Install KB5126655. Install KB5126646.

CVE-2026-88119

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-88117

Published Oct 13, 2026

CriticalCVSS 8.1

Windows DHCP Server Remote Code Execution Vulnerability

Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

Affected productsWindows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation)

Fixed versions6.2.9200.26434, 6.3.9600.23470, 10.0.14393.9612, 10.0.17763.9376

Vendor guidance

Install KB5126835. Install KB5126836. Install KB5126868. Install KB5126651. Install KB5126655. Install KB5126646.

CVE-2026-88117

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-88073

Published Oct 13, 2026

CriticalCVSS 8.8

Windows Graphics Kernel Elevation of Privilege Vulnerability

Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems

Fixed versions10.0.19044.7807, 10.0.19045.7807, 10.0.22631.7652, 10.0.26100.9711

Vendor guidance

Install KB5126657. Install KB5126653. Install KB5127648. Install KB5126646. Install KB5127646.

CVE-2026-88073

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83934

Published Oct 13, 2026

CriticalCVSS 8.8

Windows GDI+ Remote Code Execution Vulnerability

Stack-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807, 10.0.19045.7807

Vendor guidance

Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5127648. Install KB5126653. Install KB5127646. Install KB5126868. Install KB5126835. Install KB5126836.

CVE-2026-83934

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83917

Published Oct 13, 2026

CriticalCVSS 7.0

Windows ALPC Elevation of Privilege Vulnerability

Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally.

Affected productsWindows 11 Version 26H2 for ARM64-based Systems, Windows 11 Version 26H2 for x64-based Systems, Windows Server 2025, Windows Server 2025 (Server Core installation)

Fixed versions10.0.26300.9711, 10.0.26100.33650, 10.0.28000.3231, 10.0.17763.9376

Vendor guidance

Install KB5127648. Install KB5126646. Install KB5127646. Install KB5126651. Install KB5126657. Install KB5126655. Install KB5126653.

CVE-2026-83917

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-70571

Published Oct 13, 2026

CriticalCVSS 8.1

Microsoft Exchange Server Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.

Affected productsMicrosoft Exchange Server 2019 Cumulative Update 15, Microsoft Exchange Server Subscription Edition RTM, Microsoft Exchange Server 2016 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 14

Fixed versions15.02.1748.055, 15.02.2562.056, 15.01.2507.077, 15.02.1544.050

Vendor guidance

Install KB5128896. Install KB5128895. Install KB5128898. Install KB5128897.

CVE-2026-70571

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-70300

Published Oct 13, 2026

CriticalCVSS 9.8

Microsoft Office Word Remote Code Execution Vulnerability

Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Affected productsMicrosoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2021 for 32-bit editions

Fixed versionshttps://aka.ms/OfficeSecurityReleases, 16.0.14334.20974, 16.0.17932.21056

Vendor guidance

Release Notes

CVE-2026-70300

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-70242

Published Oct 13, 2026

CriticalCVSS 9.8

Microsoft Office Outlook Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

Affected productsMicrosoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions

Fixed versions16.0.14334.20974, 16.0.17932.21056, https://aka.ms/OfficeSecurityReleases

Vendor guidance

Release Notes

CVE-2026-70242

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-70229

Published Oct 13, 2026

CriticalCVSS 8.1

Windows Active Directory Domain Services Remote Code Execution Vulnerability

Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.

Affected productsWindows 11 Version 26H2 for ARM64-based Systems, Windows 11 Version 26H2 for x64-based Systems, Windows Server 2012 (Server Core installation), Windows Server 2012 R2

Fixed versions10.0.26300.9711, 6.2.9200.26434, 6.3.9600.23470, 10.0.14393.9612

Vendor guidance

Install KB5127648. Install KB5126835. Install KB5126836. Install KB5126868. Install KB5126651. Install KB5126657. Install KB5126646. Install KB5127646. Install KB5126655. Install KB5126653.

CVE-2026-70229

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-70187

Published Oct 13, 2026

CriticalCVSS 8.1

Windows Remote Desktop Services Remote Code Execution Vulnerability

Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.

Affected productsWindows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation)

Fixed versions10.0.17763.9376, 10.0.20348.5761, 10.0.26100.33650, 10.0.14393.9612

Vendor guidance

Install KB5126651. Install KB5126655. Install KB5126646. Install KB5126868. Install KB5126835. Install KB5126836.

CVE-2026-70187

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-70153

Published Oct 13, 2026

CriticalCVSS 9.8

Microsoft PostScript Printer Driver Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.

Affected productsWindows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation)

Fixed versions6.2.9200.26434, 6.3.9600.23470, 10.0.14393.9612, 10.0.17763.9376

Vendor guidance

Install KB5126835. Install KB5126836. Install KB5126868. Install KB5126651. Install KB5126657. Install KB5126655. Install KB5126653. Install KB5127648. Install KB5126646. Install KB5127646.

CVE-2026-70153

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-70147

Published Oct 13, 2026

CriticalCVSS 9.8

Microsoft PostScript Printer Driver Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.

Affected productsWindows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems

Fixed versions10.0.26100.9711, 10.0.26200.9711, 10.0.26300.9711, 10.0.26100.33650

Vendor guidance

Install KB5127648. Install KB5126646. Install KB5126835. Install KB5126836. Install KB5126868. Install KB5126651. Install KB5126657. Install KB5126655. Install KB5126653. Install KB5127646.

CVE-2026-70147

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69802

Published Oct 13, 2026

CriticalCVSS 8.1

Network Device Enrollment Service (NDES) Remote Code Execution Vulnerability

Weak authentication in Network Device Enrollment Service (NDES) allows an unauthorized attacker to execute code over a network.

Affected productsWindows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation)

Fixed versions6.2.9200.26434, 6.3.9600.23470, 10.0.14393.9612, 10.0.17763.9376

Vendor guidance

Install KB5126835. Install KB5126836. Install KB5126868. Install KB5126651. Install KB5126655. Install KB5126646.

CVE-2026-69802

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69789

Published Oct 13, 2026

CriticalCVSS 7.5

Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-69789

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-62840

Published Oct 13, 2026

CriticalCVSS 7.0

Linux Kernel Elevation of Privilege Vulnerability

Time-of-check time-of-use (toctou) race condition in Linux Kernel allows an authorized attacker to elevate privileges locally.

Affected productsLinux 3P (Third Party) Distros

Fixed versions7.3

Vendor guidance

Release Notes

CVE-2026-62840

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-21413

Published Oct 13, 2026

CriticalCVSS 9.8

Raw Image Extension Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.

Affected productsRaw Image Extension on Windows 10 Version 1607 for x64-based Systems, Raw Image Extension on Windows 10 Version 1607 for 32-bit Systems, Raw Image Extension on Windows 10 for x64-based Systems, Raw Image Extension on Windows 10 for 32-bit Systems

Fixed versions2.4.36.0, 2.5.35.0

Vendor guidance

Release Notes

CVE-2026-21413

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-108467

Published Oct 13, 2026

CriticalCVSS 8.8

Microsoft PostScript Printer Driver Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an authorized attacker to execute code over a network.

Affected productsWindows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation)

Fixed versions6.2.9200.26434, 6.3.9600.23470, 10.0.14393.9612, 10.0.17763.9376

Vendor guidance

Install KB5126835. Install KB5126836. Install KB5126868. Install KB5126651. Install KB5126657. Install KB5126655. Install KB5126653. Install KB5127648. Install KB5126646. Install KB5127646.

CVE-2026-108467

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-108460

Published Oct 13, 2026

CriticalCVSS 8.1

Windows Message Queuing Remote Code Execution Vulnerability

Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.

Affected productsWindows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation)

Fixed versions6.2.9200.26434, 6.3.9600.23470, 10.0.14393.9612, 10.0.17763.9376

Vendor guidance

Install KB5126835. Install KB5126836. Install KB5126868. Install KB5126651. Install KB5126657. Install KB5126655. Install KB5126653. Install KB5127648. Install KB5126646. Install KB5127646.

CVE-2026-108460

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-108457

Published Oct 13, 2026

CriticalCVSS 8.1

Microsoft Windows PDF Remote Code Execution Vulnerability

Out-of-bounds write in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network.

Affected productsWindows 11 Version 23H2 for x64-based Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows Server 2022 (Server Core installation)

Fixed versions10.0.22631.7652, 10.0.19044.7807, 10.0.19045.7807, 10.0.20348.5761

Vendor guidance

Install KB5126653. Install KB5126657. Install KB5126655. Install KB5126646.

CVE-2026-108457

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-108400

Published Oct 13, 2026

CriticalCVSS 8.8

HEVC Video Extensions Remote Code Execution Vulnerability

Integer overflow or wraparound in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.

Affected productsHEVC Video Extensions from Device Manufacturer on Windows 11 Version 26H1 for ARM64-based Systems, HEVC Video Extensions from Device Manufacturer on Windows 11 version 26H1 for x64-based Systems, HEVC Video Extensions from Device Manufacturer on Windows Server 2025, HEVC Video Extensions from Device Manufacturer on Windows 11 Version 23H2 for ARM64-based Systems

Fixed versions2.5.25.0, 2.4.86.0, 2.4.85.0, 2.4.87.0

Vendor guidance

Release Notes

CVE-2026-108400

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-108399

Published Oct 13, 2026

CriticalCVSS 7.2

Windows Hyper-V Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

Affected productsWindows 11 Version 26H2 for ARM64-based Systems, Windows 11 Version 26H2 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems

Fixed versions10.0.26300.9711, 10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807

Vendor guidance

Install KB5127648. Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5126653. Install KB5127646. Install KB5126868. Install KB5126835. Install KB5126836.

CVE-2026-108399

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-108130

Published Oct 13, 2026

CriticalCVSS 7.8

Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.

Fixed versions10.0.26100.9711, 10.0.26200.9711, 10.0.26300.9711, 10.0.26100.33650

Vendor guidance

Install KB5127648. Install KB5126646. Install KB5127646.

CVE-2026-108130

Read the vendor advisory Watch this product

Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources