Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed

11Vendor sources

16,785Advisories collected

6,417Published or updated in 30 days

6,988Marked critical or high

Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

AWS Security Bulletins 169 advisories

CurrentChecked 8 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Apple Security Releases 29 advisories

CurrentChecked about an hour ago

Checked hourly Browse this vendor's advisories Official source

Cisco Security Advisories 104 advisories

Check delayedChecked 21 days ago

Checked every 15 minutes Browse this vendor's advisories Official source

Citrix Security Bulletins 24 advisories

CurrentChecked about an hour ago

Checked hourly Browse this vendor's advisories Official source

Delinea Security Advisories 14 advisories

CurrentChecked about an hour ago

Checked hourly Browse this vendor's advisories Official source

Fortinet PSIRT Advisories 55 advisories

CurrentChecked 13 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Ivanti Security Advisories 9 advisories

CurrentChecked 13 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Microsoft Security Response Center 15,888 advisories

CurrentChecked 5 hours ago

Checked every 6 hours Browse this vendor's advisories Official source

Palo Alto Networks Security Advisories 59 advisories

CurrentChecked 13 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

SonicWall PSIRT Advisories 11 advisories

CurrentChecked about an hour ago

Checked hourly Browse this vendor's advisories Official source

Ubuntu Security Notices 423 advisories

CurrentChecked 13 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

16,785 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results

Microsoft Security Response CenterCVE-2026-88127

Published Oct 13, 2026

HighCVSS 7.0

Windows SMB Server Elevation of Privilege Vulnerability

Use after free in Windows SMB Server allows an authorized attacker to elevate privileges locally.

Affected productsWindows 11 Version 26H2 for ARM64-based Systems, Windows 11 Version 26H2 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems

Fixed versions10.0.26300.9711, 10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807

Vendor guidance

Install KB5127648. Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5126653. Install KB5127646. Install KB5126868.

CVE-2026-88127

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-88126

Published Oct 13, 2026

HighCVSS 7.8

WebDAV Elevation of Privilege Vulnerability

Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807, 10.0.19045.7807

Vendor guidance

Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5127648. Install KB5126653. Install KB5127646. Install KB5126868. Install KB5126835. Install KB5126836.

CVE-2026-88126

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-88125

Published Oct 13, 2026

HighCVSS 6.5

Role: DNS Server Denial of Service Vulnerability

Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.

Affected productsWindows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation)

Fixed versions6.2.9200.26434, 6.3.9600.23470, 10.0.14393.9612, 10.0.17763.9376

Vendor guidance

Install KB5126835. Install KB5126836. Install KB5126868. Install KB5126651. Install KB5126655. Install KB5126646.

CVE-2026-88125

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-88124

Published Oct 13, 2026

HighCVSS 7.0

Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

Affected productsWindows 11 Version 26H2 for x64-based Systems, Windows 11 Version 26H2 for ARM64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems

Fixed versions10.0.26300.9711, 10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807

Vendor guidance

Install KB5127648. Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5126653. Install KB5127646. Install KB5126868. Install KB5126835. Install KB5126836.

CVE-2026-88124

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-88123

Published Oct 13, 2026

HighCVSS 6.5

Role: DNS Server Denial of Service Vulnerability

Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.

Affected productsWindows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation)

Fixed versions6.2.9200.26434, 6.3.9600.23470, 10.0.14393.9612, 10.0.17763.9376

Vendor guidance

Install KB5126835. Install KB5126836. Install KB5126868. Install KB5126651. Install KB5126655. Install KB5126646.

CVE-2026-88123

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-88122

Published Oct 13, 2026

HighCVSS 6.5

Role: DNS Server Denial of Service Vulnerability

Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.

Affected productsWindows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation)

Fixed versions6.2.9200.26434, 6.3.9600.23470, 10.0.14393.9612, 10.0.17763.9376

Vendor guidance

Install KB5126835. Install KB5126836. Install KB5126868. Install KB5126651. Install KB5126655. Install KB5126646.

CVE-2026-88122

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-88121

Published Oct 13, 2026

HighCVSS 8.0

Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability

Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.

Fixed versions10.0.26300.9711, 10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807

Vendor guidance

Install KB5127648. Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5126653. Install KB5127646. Install KB5126868. Install KB5126835. Install KB5126836.

CVE-2026-88121

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-88118

Published Oct 13, 2026

HighCVSS 7.8

Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807, 10.0.19045.7807

Vendor guidance

Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5127648. Install KB5126653. Install KB5127646. Install KB5126868. Install KB5126835. Install KB5126836.

CVE-2026-88118

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-88116

Published Oct 13, 2026

HighCVSS 8.8

Windows Domain Name Service Remote Code Execution Vulnerability

Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.

Fixed versions10.0.26300.9711, 10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807

Vendor guidance

Install KB5127648. Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5126653. Install KB5127646. Install KB5126868.

CVE-2026-88116

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-88115

Published Oct 13, 2026

HighCVSS 8.8

Windows Server for NFS Remote Code Execution Vulnerability

Out-of-bounds read in Windows Server for NFS allows an unauthorized attacker to execute code over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9376, 10.0.20348.5761, 10.0.26100.33650, 10.0.14393.9612

Vendor guidance

Install KB5126651. Install KB5126655. Install KB5126646. Install KB5126868. Install KB5126835. Install KB5126836.

CVE-2026-88115

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-88114

Published Oct 13, 2026

HighCVSS 8.8

Windows Domain Name Service Remote Code Execution Vulnerability

Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807, 10.0.19045.7807

Vendor guidance

Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5127648. Install KB5126653. Install KB5127646. Install KB5126868.

CVE-2026-88114

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-88113

Published Oct 13, 2026

HighCVSS 7.0

Windows Broadcast DVR User Service Elevation of Privilege Vulnerability

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems

Fixed versions10.0.17763.9376, 10.0.19044.7807, 10.0.19045.7807, 10.0.26200.9711

Vendor guidance

Install KB5126651. Install KB5126657. Install KB5127648. Install KB5126653. Install KB5127646.

CVE-2026-88113

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-88112

Published Oct 13, 2026

HighCVSS 8.8

Windows Domain Name Service Remote Code Execution Vulnerability

Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.

Fixed versions10.0.26300.9711, 10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807

Vendor guidance

Install KB5127648. Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5126653. Install KB5127646. Install KB5126868. Install KB5126836.

CVE-2026-88112

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-88110

Published Oct 13, 2026

HighCVSS 7.0

Windows Graphics Kernel Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Affected productsWindows 11 Version 26H2 for ARM64-based Systems, Windows 11 Version 26H2 for x64-based Systems, Windows Server 2025 (Server Core installation), Windows 11 Version 25H2 for ARM64-based Systems

Fixed versions10.0.26300.9711, 10.0.26100.33650, 10.0.26200.9711, 10.0.26100.9711

Vendor guidance

Install KB5127648. Install KB5126646.

CVE-2026-88110

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-88109

Published Oct 13, 2026

HighCVSS 7.8

Microsoft Office Click-To-Run Elevation of Privilege Vulnerability

Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.

Affected productsMicrosoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions

Fixed versions16.0.14334.20974, 16.0.17932.21056, https://aka.ms/OfficeSecurityReleases

Vendor guidance

Release Notes

CVE-2026-88109

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-88107

Published Oct 13, 2026

HighCVSS 7.0

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9376, 10.0.19044.7807, 10.0.19045.7807, 10.0.20348.5761

Vendor guidance

Install KB5126651. Install KB5126657. Install KB5126655. Install KB5126653. Install KB5127648. Install KB5126646. Install KB5127646.

CVE-2026-88107

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-88106

Published Oct 13, 2026

HighCVSS 7.0

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

Affected productsWindows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems

Fixed versions10.0.26100.9711, 10.0.26200.9711, 10.0.26300.9711, 10.0.26100.33650

Vendor guidance

Install KB5127648. Install KB5126646. Install KB5126651. Install KB5126657. Install KB5126655. Install KB5126653. Install KB5127646.

CVE-2026-88106

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-88105

Published Oct 13, 2026

HighCVSS 7.8

Windows Broadcast DVR User Service Elevation of Privilege Vulnerability

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

Fixed versions10.0.17763.9376, 10.0.19044.7807, 10.0.19045.7807, 10.0.26200.9711

Vendor guidance

Install KB5126651. Install KB5126657. Install KB5127648. Install KB5126653. Install KB5127646. Install KB5126868.

CVE-2026-88105

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-88103

Published Oct 13, 2026

HighCVSS 7.0

Windows Broadcast DVR User Service Elevation of Privilege Vulnerability

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9376, 10.0.19044.7807, 10.0.19045.7807, 10.0.26200.9711

Vendor guidance

Install KB5126651. Install KB5126657. Install KB5127648. Install KB5126653. Install KB5127646.

CVE-2026-88103

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-88102

Published Oct 13, 2026

HighCVSS 9.8

Microsoft Failover Cluster Remote Code Execution Vulnerability

Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.

Affected productsWindows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation)

Fixed versions10.0.17763.9376, 10.0.20348.5761, 10.0.26100.33650

Vendor guidance

Install KB5126651. Install KB5126655. Install KB5126646.

CVE-2026-88102

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-88101

Published Oct 13, 2026

HighCVSS 7.8

Microsoft Input Method Editor (IME) Elevation of Privilege Vulnerability

Weak authentication in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807, 10.0.19045.7807

Vendor guidance

Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5127648. Install KB5126653. Install KB5127646. Install KB5126868. Install KB5126835. Install KB5126836.

CVE-2026-88101

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-88100

Published Oct 13, 2026

HighCVSS 7.8

Windows Storage Spaces Controller Elevation of Privilege Vulnerability

Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.

Affected productsWindows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows Server 2025 (Server Core installation), Windows 11 Version 26H1 for ARM64-based Systems

Fixed versions10.0.26100.9711, 10.0.26100.33650, 10.0.28000.3231, 10.0.26200.9711

Vendor guidance

Install KB5127648. Install KB5126646. Install KB5127646.

CVE-2026-88100

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-88099

Published Oct 13, 2026

HighCVSS 5.9

Windows Failover Cluster Denial of Service Vulnerability

Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.

Affected productsWindows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation)

Fixed versions10.0.17763.9376, 10.0.20348.5761, 10.0.26100.33650

Vendor guidance

Install KB5126651. Install KB5126655. Install KB5126646.

CVE-2026-88099

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-88098

Published Oct 13, 2026

HighCVSS 7.0

Windows Security Support Provider Interface Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Security Support Provider Interface allows an authorized attacker to elevate privileges locally.

Affected productsWindows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation)

Fixed versions6.2.9200.26434, 6.3.9600.23470, 10.0.14393.9612, 10.0.17763.9376

Vendor guidance

Install KB5126835. Install KB5126836. Install KB5126868. Install KB5126651. Install KB5126657. Install KB5126655. Install KB5126653. Install KB5127648. Install KB5126646. Install KB5127646.

CVE-2026-88098

Read the vendor advisory Watch this product

Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources