Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed

11Vendor sources

16,884Advisories collected

6,380Published or updated in 30 days

6,999Marked critical or high

Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

AWS Security Bulletins 173 advisories

CurrentChecked 4 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Apple Security Releases 29 advisories

CurrentChecked 33 minutes ago

Checked hourly Browse this vendor's advisories Official source

Cisco Security Advisories 107 advisories

Check delayedChecked 24 days ago

Checked every 15 minutes Browse this vendor's advisories Official source

Citrix Security Bulletins 24 advisories

CurrentChecked 34 minutes ago

Checked hourly Browse this vendor's advisories Official source

Delinea Security Advisories 14 advisories

CurrentChecked 33 minutes ago

Checked hourly Browse this vendor's advisories Official source

Fortinet PSIRT Advisories 55 advisories

Check delayedChecked 24 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Ivanti Security Advisories 9 advisories

CurrentChecked 4 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Microsoft Security Response Center 15,972 advisories

CurrentChecked 3 hours ago

Checked every 6 hours Browse this vendor's advisories Official source

Palo Alto Networks Security Advisories 59 advisories

CurrentChecked 4 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

SonicWall PSIRT Advisories 12 advisories

CurrentChecked 33 minutes ago

Checked hourly Browse this vendor's advisories Official source

Ubuntu Security Notices 430 advisories

CurrentChecked 4 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

16,884 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results

Microsoft Security Response CenterCVE-2026-83674

Published Oct 13, 2026

HighCVSS 8.1

Active Directory Federation Services (AD FS) Spoofing Vulnerability

Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9376, 10.0.20348.5761, 10.0.26100.33650, 10.0.14393.9612

Vendor guidance

Install KB5126651. Install KB5126655. Install KB5126646. Install KB5126868.

CVE-2026-83674

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83672

Published Oct 13, 2026

HighCVSS 4.7

Windows Installer Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows Installer allows an authorized attacker to disclose information locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807, 10.0.19045.7807

Vendor guidance

Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5127648. Install KB5126653. Install KB5127646. Install KB5126868. Install KB5126835. Install KB5126836.

CVE-2026-83672

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83671

Published Oct 13, 2026

HighCVSS 6.5

Windows Hyper-V Information Disclosure Vulnerability

Out-of-bounds read in Windows Hyper-V allows an authorized attacker to disclose information locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807, 10.0.19045.7807

Vendor guidance

Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5127648. Install KB5126653. Install KB5127646.

CVE-2026-83671

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83670

Published Oct 13, 2026

HighCVSS 7.5

Function Discovery Service (fdwsd.dll) Information Disclosure Vulnerability

Out-of-bounds read in Function Discovery Service (fdwsd.dll) allows an unauthorized attacker to disclose information over a network.

Affected productsWindows 11 Version 26H2 for ARM64-based Systems, Windows 11 Version 26H2 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems

Fixed versions10.0.26300.9711, 10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807

Vendor guidance

Install KB5127648. Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5126653. Install KB5127646. Install KB5126868. Install KB5126835. Install KB5126836.

CVE-2026-83670

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83669

Published Oct 13, 2026

HighCVSS 7.8

Windows Error Reporting Elevation of Privilege Vulnerability

Use of uninitialized resource in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

Affected productsWindows 11 Version 26H2 for ARM64-based Systems, Windows 11 Version 26H2 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation)

Fixed versions10.0.26300.9711, 10.0.14393.9612, 10.0.17763.9376, 10.0.19044.7807

Vendor guidance

Install KB5127648. Install KB5126868. Install KB5126651. Install KB5126657. Install KB5126653. Install KB5126646. Install KB5127646. Install KB5126655.

CVE-2026-83669

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83668

Published Oct 13, 2026

HighCVSS 5.5

Windows WLAN Service Information Disclosure Vulnerability

Out-of-bounds read in Windows WLAN Service allows an authorized attacker to disclose information locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807, 10.0.19045.7807

Vendor guidance

Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5127648. Install KB5126653. Install KB5127646. Install KB5126868. Install KB5126835. Install KB5126836.

CVE-2026-83668

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83667

Published Oct 13, 2026

HighCVSS 6.5

Windows Active Directory Domain Services Denial of Service Vulnerability

Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807, 10.0.19045.7807

Vendor guidance

Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5127648. Install KB5126653. Install KB5127646. Install KB5126868. Install KB5126835. Install KB5126836.

CVE-2026-83667

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83666

Published Oct 13, 2026

HighCVSS 7.0

Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9376, 10.0.20348.5761, 10.0.26100.33650, 10.0.14393.9612

Vendor guidance

Install KB5126651. Install KB5126655. Install KB5126646. Install KB5126868. Install KB5126835. Install KB5126836.

CVE-2026-83666

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83665

Published Oct 13, 2026

HighCVSS 7.5

Windows DHCP Server Denial of Service Vulnerability

Null pointer dereference in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9376, 10.0.20348.5761, 10.0.26100.33650, 10.0.14393.9612

Vendor guidance

Install KB5126651. Install KB5126655. Install KB5126646. Install KB5126868. Install KB5126835. Install KB5126836.

CVE-2026-83665

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83664

Published Oct 13, 2026

HighCVSS 5.5

Windows Portable Device File System Driver Information Disclosure Vulnerability

Access of resource using incompatible type ('type confusion') in Windows Portable Device File System Driver allows an authorized attacker to disclose information locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807, 10.0.19045.7807

Vendor guidance

Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5127648. Install KB5126653. Install KB5127646. Install KB5126868. Install KB5126835. Install KB5126836.

CVE-2026-83664

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83659

Published Oct 13, 2026

HighCVSS 7.8

Windows User Profile Service Elevation of Privilege Vulnerability

Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges locally.

Fixed versions10.0.26300.9711, 10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807

Vendor guidance

Install KB5127648. Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5126653. Install KB5127646. Install KB5126868. Install KB5126835. Install KB5126836.

CVE-2026-83659

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83658

Published Oct 13, 2026

HighCVSS 5.5

Windows Error Reporting Information Disclosure Vulnerability

Improper access control in Windows Error Reporting allows an authorized attacker to disclose information locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807, 10.0.19045.7807

Vendor guidance

Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5127648. Install KB5126653. Install KB5127646.

CVE-2026-83658

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83657

Published Oct 13, 2026

HighCVSS 5.5

Windows Modern Device Management (MDM) Tampering Vulnerability

Weak authentication in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9376

Vendor guidance

Install KB5126651.

CVE-2026-83657

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83655

Published Oct 13, 2026

HighCVSS 7.5

Network Policy Server (NPS) Denial of Service Vulnerability

Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to deny service over a network.

Fixed versions10.0.26300.9711, 10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807

Vendor guidance

Install KB5127648. Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5126653. Install KB5127646. Install KB5126868. Install KB5126835. Install KB5126836.

CVE-2026-83655

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83652

Published Oct 13, 2026

HighCVSS 7.8

Windows NTFS Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

Fixed versions10.0.26300.9711, 10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807

Vendor guidance

Install KB5127648. Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5126653. Install KB5127646. Install KB5126868. Install KB5126835. Install KB5126836.

CVE-2026-83652

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83651

Published Oct 13, 2026

HighCVSS 6.5

Windows GDI Information Disclosure Vulnerability

Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807, 10.0.19045.7807

Vendor guidance

Release Notes Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5127648. Install KB5126653. Install KB5127646. Install KB5126868. Install KB5126835. Install KB5126836.

CVE-2026-83651

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83650

Published Oct 13, 2026

HighCVSS 7.8

Windows Media Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.

Affected productsWindows 11 Version 26H2 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019

Fixed versions10.0.26300.9711, 10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807

Vendor guidance

Install KB5127648. Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5126653. Install KB5127646. Install KB5126868. Install KB5126835. Install KB5126836.

CVE-2026-83650

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83649

Published Oct 13, 2026

HighCVSS 6.5

Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability

Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network.

Fixed versions10.0.26300.9711, 10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807

Vendor guidance

Install KB5127648. Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5126653. Install KB5127646. Install KB5126868.

CVE-2026-83649

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83648

Published Oct 13, 2026

HighCVSS 6.5

Windows Active Directory Domain Services Denial of Service Vulnerability

Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.

Affected productsWindows Server 2022, Windows Server 2022 (Server Core installation), Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems

Fixed versions10.0.20348.5761, 10.0.19044.7807, 10.0.19045.7807, 10.0.26100.33650

Vendor guidance

Install KB5126655. Install KB5126657. Install KB5126646. Install KB5127648. Install KB5126653. Install KB5127646.

CVE-2026-83648

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83647

Published Oct 13, 2026

HighCVSS 7.5

Windows Active Directory Domain Services Denial of Service Vulnerability

Out-of-bounds read in Active Directory Domain Services allows an unauthorized attacker to deny service over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807, 10.0.19045.7807

Vendor guidance

Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5127648. Install KB5126653. Install KB5127646. Install KB5126868. Install KB5126836.

CVE-2026-83647

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83646

Published Oct 13, 2026

HighCVSS 4.8

Active Directory Federation Services (AD FS) Spoofing Vulnerability

Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS) allows an authorized attacker to perform spoofing over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9376, 10.0.20348.5761, 10.0.26100.33650, 10.0.14393.9612

Vendor guidance

Install KB5126651. Install KB5126655. Install KB5126646. Install KB5126868.

CVE-2026-83646

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83645

Published Oct 13, 2026

HighCVSS 7.5

Active Directory Federation Services (AD FS) Denial of Service Vulnerability

Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9376, 10.0.20348.5761, 10.0.26100.33650, 10.0.14393.9612

Vendor guidance

Install KB5126651. Install KB5126655. Install KB5126646. Install KB5126868. Install KB5126835. Install KB5126836.

CVE-2026-83645

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83644

Published Oct 13, 2026

HighCVSS 7.0

Windows Audio Service Elevation of Privilege Vulnerability

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807, 10.0.19045.7807

Vendor guidance

Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5127648. Install KB5126653. Install KB5127646. Install KB5126868.

CVE-2026-83644

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83643

Published Oct 13, 2026

HighCVSS 8.8

Windows Error Reporting Remote Code Execution Vulnerability

Stack-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807, 10.0.19045.7807

Vendor guidance

Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5127648. Install KB5126653. Install KB5127646. Install KB5126868. Install KB5126835. Install KB5126836.

CVE-2026-83643

Read the vendor advisory Watch this product

Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources