Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed

9Vendor sources

4,726Advisories collected

2,720Published or updated in 30 days

2,115Marked critical or high

Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

AWS Security Bulletins 111 advisories

CurrentChecked 16 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Cisco Security Advisories 34 advisories

CurrentChecked 16 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Citrix Security Bulletins 17 advisories

CurrentChecked about an hour ago

Checked hourly Browse this vendor's advisories Official source

Delinea Security Advisories 7 advisories

CurrentChecked 31 minutes ago

Checked hourly Browse this vendor's advisories Official source

Fortinet PSIRT Advisories 40 advisories

CurrentChecked 16 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Ivanti Security Advisories 5 advisories

CurrentChecked 16 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Microsoft Security Response Center 4,344 advisories

CurrentChecked 2 hours ago

Checked every 6 hours Browse this vendor's advisories Official source

Palo Alto Networks Security Advisories 39 advisories

CurrentChecked 16 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Ubuntu Security Notices 129 advisories

CurrentChecked 16 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

4,726 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results

Microsoft Security Response CenterCVE-2026-81963

Updated Sep 11, 2026

HighCVSS 7.8

Windows Update Stack Elevation of Privilege Vulnerability

Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.

Affected productsWindows Server 2025 (Server Core installation), Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems

Fixed versions10.0.26100.33438, 10.0.26200.9445, 10.0.22631.7582, 10.0.26100.9445

Vendor guidance

Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012.

CVE-2026-81963

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-81379

Updated Sep 11, 2026

HighCVSS 8.2

Visual Studio Code Security Feature Bypass Vulnerability

Not failing securely ('failing open') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

Affected productsVisual Studio Code

Fixed versions1.136.2

Vendor guidance

Release Notes

CVE-2026-81379

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-80080

Updated Sep 11, 2026

HighCVSS 8.8

Microsoft Office Word Remote Code Execution Vulnerability

Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Affected productsMicrosoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems

Fixed versions16.0.10417.20207, 16.0.20326.20138, 16.0.14334.20906, 16.0.17932.20976

Vendor guidance

Release Notes Install KB5002923.

CVE-2026-80080

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-77499

Updated Sep 11, 2026

HighCVSS 7.5

Windows DHCP Server Denial of Service Vulnerability

Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.26100.33438, 10.0.14393.9512

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122871. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-77499

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-73016

Updated Sep 11, 2026

HighCVSS 8.8

DirectWrite Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-73016

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-71336

Updated Sep 11, 2026

HighCVSS 8.8

Windows Work Folder Service Remote Code Execution Vulnerability

Integer overflow or wraparound in Windows Work Folder Service allows an authorized attacker to execute code over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.26100.33438, 10.0.14393.9512

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122871. Install KB5123099. Install KB5123066.

CVE-2026-71336

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-70334

Updated Sep 11, 2026

HighCVSS 7.8

Visual Studio Code Security Feature Bypass Vulnerability

Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

Affected productsVisual Studio Code

Fixed versions1.136.2

Vendor guidance

Release Notes

CVE-2026-70334

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69732

Updated Sep 11, 2026

HighCVSS 8.1

Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Link Layer Topology Discovery Protocol allows an unauthorized attacker to execute code over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-69732

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69468

Updated Sep 11, 2026

HighCVSS 7.0

Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-69468

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69461

Updated Sep 11, 2026

HighCVSS 8.8

Windows NTFS Remote Code Execution Vulnerability

Stack-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-69461

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69405

Updated Sep 11, 2026

HighCVSS 5.7

Windows DHCP Server Denial of Service Vulnerability

Missing release of memory after effective lifetime in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.26100.33438, 10.0.14393.9512

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122871. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-69405

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69314

Updated Sep 11, 2026

HighCVSS 7.1

Windows Device Association Broker Service Elevation of Privilege Vulnerability

Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099.

CVE-2026-69314

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-68894

Updated Sep 11, 2026

HighCVSS 8.0

Windows Error Reporting Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-68894

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-77490

Published Sep 11, 2026

MediumCVSS 6.1

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions151.0.4129.107

Vendor guidance

Release Notes

CVE-2026-77490

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-80822

Published Sep 11, 2026

Severity not listed

mailbox: mchp-ipc-sbi: Add null check for devm_kasprintf()

Mariner

Affected productsazl3 kernel 6.6.150.1-1 on Azure Linux 3.0

Fixed versions6.6.152.1-1

Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2026-80822

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-80888

Updated Sep 11, 2026

MediumCVSS 5.5

drm/vmwgfx: drop dma_buf reference on foreign-fd prime import

Mariner

Affected productsazl3 kernel 6.6.150.1-1 on Azure Linux 3.0

Fixed versions6.6.152.1-1

Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2026-80888

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-80901

Published Sep 11, 2026

Severity not listed

ipvs: fix the checksum validations

Mariner

Affected productsazl3 kernel 6.6.150.1-1 on Azure Linux 3.0

Fixed versions6.6.152.1-1

Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2026-80901

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-80890

Updated Sep 11, 2026

MediumCVSS 4.8

sctp: reject stale cookies with mismatched verification tags

Mariner

Affected productsazl3 kernel 6.6.150.1-1 on Azure Linux 3.0

Fixed versions6.6.152.1-1

Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2026-80890

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-80893

Updated Sep 11, 2026

LowCVSS 2.5

mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork()

Mariner

Affected productsazl3 kernel 6.6.150.1-1 on Azure Linux 3.0

Fixed versions6.6.152.1-1

Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2026-80893

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-80887

Published Sep 11, 2026

Severity not listed

drm/vmwgfx: use check_add_overflow for shader size+offset bound

Mariner

Affected productsazl3 kernel 6.6.150.1-1 on Azure Linux 3.0

Fixed versions6.6.152.1-1

Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2026-80887

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-80902

Updated Sep 11, 2026

MediumCVSS 4.4

dmaengine: sun6i-dma: Fix reclaim descriptors while terminating DMA

Mariner

Affected productsazl3 kernel 6.6.150.1-1 on Azure Linux 3.0

Fixed versions6.6.152.1-1

Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2026-80902

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-80883

Updated Sep 11, 2026

Severity not listed

drm/tegra: gr2d/gr3d: Initialize address register map before HOST1X client is registered

Mariner

Affected productsazl3 kernel 6.6.150.1-1 on Azure Linux 3.0

Fixed versions6.6.152.1-1

Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2026-80883

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-56855

Updated Sep 11, 2026

MediumCVSS 7.5

Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Mariner

Affected productsazl3 kubevirt 1.7.1-8 on Azure Linux 3.0, azl3 packer 1.9.5-18 on Azure Linux 3.0, azl3 cert-manager 1.12.15-11 on Azure Linux 3.0, azl3 cf-cli 8.7.11-8 on Azure Linux 3.0

Fixed versions8.7.11-9, 0.14.0-17, 2.27.0-14, 1.12.15-13

Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2026-56855

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-78662

Updated Sep 11, 2026

MediumCVSS 7.5

Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

Mariner

Affected productsazl3 cert-manager 1.12.15-11 on Azure Linux 3.0, azl3 kubernetes 1.30.10-27 on Azure Linux 3.0, azl3 moby-engine 25.0.3-19 on Azure Linux 3.0, azl3 cert-manager 1.12.15-12 on Azure Linux 3.0

Fixed versions1.12.15-13, 8.7.11-9, 0.14.0-17, 2.27.0-14

Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2026-78662

Read the vendor advisory Watch this product

Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

Read how SecurityAlert collects and checks threat intelligence.