Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed

11Vendor sources

16,850Advisories collected

6,405Published or updated in 30 days

6,992Marked critical or high

Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

AWS Security Bulletins 171 advisories

CurrentChecked 14 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Apple Security Releases 29 advisories

CurrentChecked 3 minutes ago

Checked hourly Browse this vendor's advisories Official source

Cisco Security Advisories 106 advisories

Check delayedChecked 22 days ago

Checked every 15 minutes Browse this vendor's advisories Official source

Citrix Security Bulletins 24 advisories

CurrentChecked 4 minutes ago

Checked hourly Browse this vendor's advisories Official source

Delinea Security Advisories 14 advisories

CurrentChecked 3 minutes ago

Checked hourly Browse this vendor's advisories Official source

Fortinet PSIRT Advisories 55 advisories

CurrentChecked 19 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Ivanti Security Advisories 9 advisories

CurrentChecked 19 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Microsoft Security Response Center 15,943 advisories

CurrentChecked 2 hours ago

Checked every 6 hours Browse this vendor's advisories Official source

Palo Alto Networks Security Advisories 59 advisories

CurrentChecked 19 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

SonicWall PSIRT Advisories 11 advisories

CurrentChecked 3 minutes ago

Checked hourly Browse this vendor's advisories Official source

Ubuntu Security Notices 429 advisories

CurrentChecked 18 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

16,850 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results

Microsoft Security Response CenterCVE-2026-83747

Published Oct 13, 2026

HighCVSS 5.5

Windows Error Reporting Information Disclosure Vulnerability

Out-of-bounds read in Windows Error Reporting allows an authorized attacker to disclose information locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807, 10.0.19045.7807

Vendor guidance

Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5127648. Install KB5126653. Install KB5127646. Install KB5126868. Install KB5126835. Install KB5126836.

CVE-2026-83747

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83746

Published Oct 13, 2026

HighCVSS 8.1

Skype for Business Elevation of Privilege Vulnerability

Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network.

Affected productsSkype for Business Server Subscription Edition CU1, Skype for Business Server 2019 CU8, Skype for Business Server 2015 CU13

Fixed versions7.0.2046.889, 7.0.2046.583, 6.0.9319.886

Vendor guidance

Install KB5131692. Install KB5131693. Install KB5132779.

CVE-2026-83746

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83741

Published Oct 13, 2026

HighCVSS 7.8

Internet Explorer Elevation of Privilege Vulnerability

Use after free in Internet Explorer allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807, 10.0.19045.7807

Vendor guidance

Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5127648. Install KB5126653. Install KB5127646.

CVE-2026-83741

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83740

Published Oct 13, 2026

HighCVSS 7.0

Windows Hello Elevation of Privilege Vulnerability

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.

Affected productsWindows 11 Version 26H2 for ARM64-based Systems, Windows 11 Version 26H2 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems

Fixed versions10.0.26300.9711, 10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807

Vendor guidance

Install KB5127648. Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5126653. Install KB5127646.

CVE-2026-83740

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83739

Published Oct 13, 2026

HighCVSS 7.5

Windows Bluetooth Service Remote Code Execution Vulnerability

Use after free in Windows Bluetooth Service allows an unauthorized attacker to execute code over an adjacent network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807, 10.0.19045.7807

Vendor guidance

Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5127648. Install KB5126653. Install KB5127646.

CVE-2026-83739

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83738

Published Oct 13, 2026

HighCVSS 7.0

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807, 10.0.19045.7807

Vendor guidance

Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5127648. Install KB5126653. Install KB5127646. Install KB5126868. Install KB5126835. Install KB5126836.

CVE-2026-83738

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83737

Published Oct 13, 2026

HighCVSS 5.5

Windows NTFS Information Disclosure Vulnerability

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807, 10.0.19045.7807

Vendor guidance

Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5127648. Install KB5126653. Install KB5127646. Install KB5126868. Install KB5126835. Install KB5126836.

CVE-2026-83737

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83736

Published Oct 13, 2026

HighCVSS 5.5

Windows Kernel Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

Affected productsWindows Server 2022, Windows Server 2022 (Server Core installation), Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems

Fixed versions10.0.20348.5761, 10.0.19044.7807, 10.0.19045.7807, 10.0.26100.33650

Vendor guidance

Install KB5126655. Install KB5126657. Install KB5126646. Install KB5127648. Install KB5126653. Install KB5127646.

CVE-2026-83736

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83735

Published Oct 13, 2026

HighCVSS 7.8

Windows Kernel Elevation of Privilege Vulnerability

Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally.

Affected productsWindows Server 2025 (Server Core installation), Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems

Fixed versions10.0.26100.33650, 10.0.26200.9711, 10.0.22631.7652, 10.0.26100.9711

Vendor guidance

Install KB5126646. Install KB5127648. Install KB5126653. Install KB5127646.

CVE-2026-83735

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83733

Published Oct 13, 2026

HighCVSS 5.5

Windows Print Spooler Components Information Disclosure Vulnerability

Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807, 10.0.19045.7807

Vendor guidance

Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5127648. Install KB5126653. Install KB5127646. Install KB5126868. Install KB5126835. Install KB5126836.

CVE-2026-83733

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83732

Published Oct 13, 2026

HighCVSS 7.8

Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

Fixed versions10.0.26300.9711, 10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807

Vendor guidance

Install KB5127648. Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5126653. Install KB5127646. Install KB5126868.

CVE-2026-83732

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83728

Published Oct 13, 2026

HighCVSS 8.8

Windows Hyper-V Spoofing Vulnerability

Improper validation of syntactic correctness of input in Windows Hyper-V allows an authorized attacker to perform spoofing locally.

Fixed versions10.0.26300.9711, 10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807

Vendor guidance

Install KB5127648. Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5126653. Install KB5127646. Install KB5126868. Install KB5126835. Install KB5126836.

CVE-2026-83728

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83727

Published Oct 13, 2026

HighCVSS 7.8

Windows Overlay Filter Elevation of Privilege Vulnerability

Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807, 10.0.19045.7807

Vendor guidance

Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5127648. Install KB5126653. Install KB5127646. Install KB5126868. Install KB5126835. Install KB5126836.

CVE-2026-83727

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83726

Published Oct 13, 2026

HighCVSS 7.8

Windows DWM Core Library Elevation of Privilege Vulnerability

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807, 10.0.19045.7807

Vendor guidance

Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5127648. Install KB5126653. Install KB5127646. Install KB5126868.

CVE-2026-83726

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83725

Published Oct 13, 2026

HighCVSS 8.8

Microsoft Windows Search Component Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network.

Fixed versions10.0.26300.9711, 10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807

Vendor guidance

Install KB5127648. Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5126653. Install KB5127646. Install KB5126868. Install KB5126835. Install KB5126836.

CVE-2026-83725

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83724

Published Oct 13, 2026

HighCVSS 7.0

Windows Management Instrumentation Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807, 10.0.19045.7807

Vendor guidance

Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5127648. Install KB5126653. Install KB5127646. Install KB5126868. Install KB5126835. Install KB5126836.

CVE-2026-83724

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83723

Published Oct 13, 2026

HighCVSS 5.5

Windows Event Logging Service Information Disclosure Vulnerability

Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807, 10.0.19045.7807

Vendor guidance

Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5127648. Install KB5126653. Install KB5127646. Install KB5126868. Install KB5126835. Install KB5126836.

CVE-2026-83723

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83722

Published Oct 13, 2026

HighCVSS 7.0

Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability

Use after free in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807, 10.0.19045.7807

Vendor guidance

Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5127648. Install KB5126653. Install KB5127646. Install KB5126868. Install KB5126835. Install KB5126836.

CVE-2026-83722

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83721

Published Oct 13, 2026

HighCVSS 7.8

Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

Fixed versions10.0.26100.33650, 10.0.26200.9711, 10.0.26100.9711, 10.0.28000.3231

Vendor guidance

Install KB5126646. Install KB5127648. Install KB5127646.

CVE-2026-83721

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83720

Published Oct 13, 2026

HighCVSS 7.0

Windows Kerberos Elevation of Privilege Vulnerability

Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally.

Affected productsWindows 11 version 26H1 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems

Fixed versions10.0.28000.3231

Vendor guidance

Install KB5127646.

CVE-2026-83720

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83719

Published Oct 13, 2026

HighCVSS 5.5

Servicing Stack Updates Information Disclosure Vulnerability

Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807, 10.0.19045.7807

Vendor guidance

Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5127648. Install KB5126653. Install KB5127646.

CVE-2026-83719

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83718

Published Oct 13, 2026

HighCVSS 7.0

Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

Fixed versions10.0.26300.9711, 10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807

Vendor guidance

Install KB5127648. Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5126653. Install KB5127646. Install KB5126868. Install KB5126835. Install KB5126836.

CVE-2026-83718

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83717

Published Oct 13, 2026

HighCVSS 7.0

Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

Fixed versions10.0.26300.9711, 10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807

Vendor guidance

Install KB5127648. Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5126653. Install KB5127646. Install KB5126868. Install KB5126835. Install KB5126836.

CVE-2026-83717

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83714

Published Oct 13, 2026

HighCVSS 5.5

HTTP.sys Information Disclosure Vulnerability

Use of uninitialized resource in Windows HTTP.sys allows an authorized attacker to disclose information locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807, 10.0.19045.7807

Vendor guidance

Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5127648. Install KB5126653. Install KB5127646. Install KB5126868. Install KB5126835. Install KB5126836.

CVE-2026-83714

Read the vendor advisory Watch this product

Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources