Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed

11Vendor sources

16,884Advisories collected

6,377Published or updated in 30 days

6,999Marked critical or high

Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

AWS Security Bulletins 173 advisories

CurrentChecked 14 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Apple Security Releases 29 advisories

CurrentChecked 9 minutes ago

Checked hourly Browse this vendor's advisories Official source

Cisco Security Advisories 107 advisories

Check delayedChecked 24 days ago

Checked every 15 minutes Browse this vendor's advisories Official source

Citrix Security Bulletins 24 advisories

CurrentChecked 9 minutes ago

Checked hourly Browse this vendor's advisories Official source

Delinea Security Advisories 14 advisories

CurrentChecked 9 minutes ago

Checked hourly Browse this vendor's advisories Official source

Fortinet PSIRT Advisories 55 advisories

CurrentChecked 4 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Ivanti Security Advisories 9 advisories

CurrentChecked 4 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Microsoft Security Response Center 15,972 advisories

CurrentChecked 14 minutes ago

Checked every 6 hours Browse this vendor's advisories Official source

Palo Alto Networks Security Advisories 59 advisories

CurrentChecked 4 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

SonicWall PSIRT Advisories 12 advisories

CurrentChecked 9 minutes ago

Checked hourly Browse this vendor's advisories Official source

Ubuntu Security Notices 430 advisories

CurrentChecked 14 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

16,884 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results

Microsoft Security Response CenterCVE-2026-69596

Published Oct 13, 2026

HighCVSS 7.0

Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability

Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807, 10.0.19045.7807

Vendor guidance

Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5127648. Install KB5126653. Install KB5127646. Install KB5126868.

CVE-2026-69596

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69577

Published Oct 13, 2026

HighCVSS 7.5

Microsoft Azure Attestation service and Device Health Attestation Service Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network.

Affected productsWindows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation)

Fixed versions10.0.17763.9376, 10.0.20348.5761, 10.0.26100.33650

Vendor guidance

Install KB5126651. Install KB5126655. Install KB5126646.

CVE-2026-69577

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69506

Published Oct 13, 2026

HighCVSS 4.7

Windows Key Storage Provider Information Disclosure Vulnerability

Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807, 10.0.19045.7807

Vendor guidance

Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5127648. Install KB5126653. Install KB5127646. Install KB5126868. Install KB5126836.

CVE-2026-69506

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69471

Published Oct 13, 2026

HighCVSS 7.8

Windows Installer Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807, 10.0.19045.7807

Vendor guidance

Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5127648. Install KB5126653. Install KB5127646. Install KB5126868. Install KB5126835. Install KB5126836.

CVE-2026-69471

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69454

Published Oct 13, 2026

HighCVSS 7.5

Microsoft Azure Attestation service and Device Health Attestation Service Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network.

Affected productsWindows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation)

Fixed versions10.0.17763.9376, 10.0.20348.5761, 10.0.26100.33650

Vendor guidance

Install KB5126651. Install KB5126655. Install KB5126646.

CVE-2026-69454

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69452

Published Oct 13, 2026

HighCVSS 7.1

Windows Enterprise App Management Elevation of Privilege Vulnerability

Use after free in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network.

Affected productsWindows 11 Version 26H2 for ARM64-based Systems, Windows 11 Version 26H2 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems

Fixed versions10.0.26300.9711, 10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807

Vendor guidance

Install KB5127648. Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5126653. Install KB5127646. Install KB5126868. Install KB5126835. Install KB5126836.

CVE-2026-69452

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69387

Published Oct 13, 2026

HighCVSS 7.0

Windows Error Reporting Elevation of Privilege Vulnerability

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807, 10.0.19045.7807

Vendor guidance

Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5127648. Install KB5126653. Install KB5127646. Install KB5126868. Install KB5126836.

CVE-2026-69387

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69370

Published Oct 13, 2026

HighCVSS 8.8

Visual Studio Code Remote Code Execution Vulnerability

Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.

Affected productsVisual Studio Code

Fixed versions1.141.1

Vendor guidance

Release Notes

CVE-2026-69370

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69363

Published Oct 13, 2026

HighCVSS 8.0

Windows Error Reporting Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-69363

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69354

Published Oct 13, 2026

HighCVSS 7.8

Windows Error Reporting Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-69354

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69326

Published Oct 13, 2026

HighCVSS 8.8

Graphic Fonts Remote Code Execution Vulnerability

Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807, 10.0.19045.7807

Vendor guidance

Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5127648. Install KB5126653. Install KB5127646. Install KB5126868. Install KB5126835. Install KB5126836.

CVE-2026-69326

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-68883

Published Oct 13, 2026

HighCVSS 8.5

Microsoft SQL Server Elevation of Privilege Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

Affected productsMicrosoft SQL Server 2017 for x64-based Systems (CU31), Microsoft SQL Server 2025 for x64-based Systems (GDR), Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (GDR)

Fixed versions14.0.3560.2, 17.0.1145.4, 14.0.2140.2, 15.0.2200.2

Vendor guidance

Install KB5128496. Install KB5128492. Install KB5128497. Install KB5128495. Install KB5128494. Install KB5126934. Install KB5126967. Install KB5128493.

CVE-2026-68883

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-68836

Published Oct 13, 2026

HighCVSS 7.8

Windows kernel32.dll Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally.

Fixed versions10.0.26300.9711, 10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807

Vendor guidance

Install KB5127648. Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5126653. Install KB5127646. Install KB5126868. Install KB5126835. Install KB5126836.

CVE-2026-68836

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-67628

Published Oct 13, 2026

HighCVSS 4.9

Microsoft SQL Server Information Disclosure Vulnerability

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

Affected productsMicrosoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (GDR)

Fixed versions14.0.2140.2, 15.0.2200.2, 16.0.1210.3, 17.0.1145.4

Vendor guidance

Install KB5128497. Install KB5128495. Install KB5128493. Install KB5128492. Install KB5128496. Install KB5128494. Install KB5126934. Install KB5126967.

CVE-2026-67628

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-67626

Published Oct 13, 2026

HighCVSS 6.5

Microsoft SQL Server Denial of Service Vulnerability

Uncontrolled resource consumption in SQL Server allows an authorized attacker to deny service over a network.

Affected productsMicrosoft SQL Server 2022 for x64-based Systems (CU27), Microsoft SQL Server 2025 for x64-based Systems (CU9), Microsoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (GDR)

Fixed versions16.0.4305.5, 17.0.5015.4, 16.0.1210.3, 17.0.1145.4

Vendor guidance

Install KB5126934. Install KB5126967. Install KB5128493. Install KB5128492.

CVE-2026-67626

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-67625

Published Oct 13, 2026

HighCVSS 8.5

Microsoft SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Affected productsMicrosoft SQL Server 2017 for x64-based Systems (CU31), Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (GDR)

Fixed versions14.0.3560.2, 14.0.2140.2, 15.0.2200.2, 16.0.1210.3

Vendor guidance

Install KB5128496. Install KB5128497. Install KB5128495. Install KB5128493. Install KB5128492. Install KB5126934. Install KB5126967. Install KB5128494.

CVE-2026-67625

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-65674

Published Oct 13, 2026

HighCVSS 8.8

Microsoft SQL Server Remote Code Execution Vulnerability

Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.

Affected productsMicrosoft SQL Server 2022 for x64-based Systems (CU27), Microsoft SQL Server 2025 for x64-based Systems (CU9), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (GDR)

Fixed versions16.0.4305.5, 17.0.5015.4, 15.0.2200.2, 16.0.1210.3

Vendor guidance

Install KB5126934. Install KB5126967. Install KB5128495. Install KB5128493. Install KB5128492. Install KB5128494.

CVE-2026-65674

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-62687

Published Oct 13, 2026

HighCVSS 5.5

Windows Backup Engine Information Disclosure Vulnerability

Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to disclose information locally.

Affected productsWindows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for x64-based Systems

Fixed versions10.0.19044.7807, 10.0.19045.7807, 10.0.26200.9711, 10.0.22631.7652

Vendor guidance

Install KB5126657. Install KB5127648. Install KB5126653. Install KB5127646.

CVE-2026-62687

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-61931

Published Oct 13, 2026

HighCVSS 7.8

Windows Perception Simulation Service Elevation of Privilege Vulnerability

Use after free in Windows Perception Simulation Service allows an authorized attacker to elevate privileges locally.

Fixed versions10.0.26300.9711, 10.0.17763.9376, 10.0.19044.7807, 10.0.19045.7807

Vendor guidance

Install KB5127648. Install KB5126651. Install KB5126657. Install KB5126653.

CVE-2026-61931

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-59116

Published Oct 13, 2026

HighCVSS 6.8

Windows Remote Desktop Security Feature Bypass Vulnerability

Use of a broken or risky cryptographic algorithm in Windows Remote Desktop allows an unauthorized attacker to bypass a security feature over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9020, 10.0.20348.5386, 10.0.19044.7548, 10.0.19045.7548

Vendor guidance

Install KB5099538. Install KB5099540. Install KB5099539. Install KB5099536. Install KB5101650. Install KB5099414. Install KB5101649. Install KB5099535. Install KB5099445. Install KB5099444.

CVE-2026-59116

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-49785

Published Oct 13, 2026

HighCVSS 7.8

UEFI Secure Boot Security Feature Bypass Vulnerability

Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a security feature locally.

Fixed versions10.0.26300.9711, 10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807

Vendor guidance

Install KB5127648. Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5126653. Install KB5127646. Install KB5126868. Install KB5126835. Install KB5126836.

CVE-2026-49785

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-109453

Published Oct 13, 2026

HighCVSS 7.0

Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.

Affected productsWindows 11 Version 24H2 for ARM64-based Systems, Windows Server 2019 (Server Core installation), Windows Server 2019, Windows Server 2012 (Server Core installation)

Fixed versions10.0.26100.9711, 10.0.17763.9376, 6.2.9200.26434, 10.0.22631.7652

Vendor guidance

Install KB5127648. Install KB5126651. Install KB5126835. Install KB5126653. Install KB5127646. Install KB5126646. Install KB5126836. Install KB5126868. Install KB5126657. Install KB5126655.

CVE-2026-109453

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-108468

Published Oct 13, 2026

HighCVSS 7.0

Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

Affected productsWindows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation)

Fixed versions6.2.9200.26434, 6.3.9600.23470, 10.0.14393.9612, 10.0.17763.9376

Vendor guidance

Install KB5126835. Install KB5126836. Install KB5126868. Install KB5126651. Install KB5126657. Install KB5126655. Install KB5126653. Install KB5127648. Install KB5126646. Install KB5127646.

CVE-2026-108468

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-108466

Published Oct 13, 2026

HighCVSS 5.3

Windows Kernel Denial of Service Vulnerability

Out-of-bounds read in Windows Kernel allows an unauthorized attacker to deny service over a network.

Affected productsWindows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation)

Fixed versions6.2.9200.26434, 6.3.9600.23470, 10.0.14393.9612, 10.0.17763.9376

Vendor guidance

Install KB5126835. Install KB5126836. Install KB5126868. Install KB5126651. Install KB5126657. Install KB5126655. Install KB5126653. Install KB5127648. Install KB5126646. Install KB5127646.

CVE-2026-108466

Read the vendor advisory Watch this product

Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources