Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed

11Vendor sources

16,884Advisories collected

6,377Published or updated in 30 days

6,999Marked critical or high

Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

AWS Security Bulletins 173 advisories

CurrentChecked 8 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Apple Security Releases 29 advisories

CurrentChecked 23 minutes ago

Checked hourly Browse this vendor's advisories Official source

Cisco Security Advisories 107 advisories

Check delayedChecked 24 days ago

Checked every 15 minutes Browse this vendor's advisories Official source

Citrix Security Bulletins 24 advisories

CurrentChecked 23 minutes ago

Checked hourly Browse this vendor's advisories Official source

Delinea Security Advisories 14 advisories

CurrentChecked 23 minutes ago

Checked hourly Browse this vendor's advisories Official source

Fortinet PSIRT Advisories 55 advisories

CurrentChecked 18 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Ivanti Security Advisories 9 advisories

CurrentChecked 18 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Microsoft Security Response Center 15,972 advisories

CurrentChecked 28 minutes ago

Checked every 6 hours Browse this vendor's advisories Official source

Palo Alto Networks Security Advisories 59 advisories

CurrentChecked 18 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

SonicWall PSIRT Advisories 12 advisories

CurrentChecked 23 minutes ago

Checked hourly Browse this vendor's advisories Official source

Ubuntu Security Notices 430 advisories

CurrentChecked 8 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

16,884 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results

Microsoft Security Response CenterCVE-2026-105716

Published Oct 13, 2026

HighCVSS 8.8

Microsoft Office Access Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

Affected productsMicrosoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions

Fixed versions16.0.14334.20974, 16.0.17932.21056, https://aka.ms/OfficeSecurityReleases

Vendor guidance

Release Notes

CVE-2026-105716

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-105714

Published Oct 13, 2026

HighCVSS 7.5

Microsoft Office Access Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

Fixed versions16.0.14334.20974, 16.0.17932.21056, https://aka.ms/OfficeSecurityReleases

Vendor guidance

Release Notes

CVE-2026-105714

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-105713

Published Oct 13, 2026

HighCVSS 5.7

Microsoft Office SharePoint Spoofing Vulnerability

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over an adjacent network.

Affected productsMicrosoft SharePoint Server Subscription Edition

Fixed versions16.0.20326.20190

Vendor guidance

Install KB5002927.

CVE-2026-105713

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-105598

Published Oct 13, 2026

HighCVSS 8.8

Microsoft Office Access Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

Fixed versions16.0.14334.20974, 16.0.17932.21056, https://aka.ms/OfficeSecurityReleases

Vendor guidance

Release Notes

CVE-2026-105598

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-105597

Published Oct 13, 2026

HighCVSS 8.8

Microsoft Office Access Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

Fixed versions16.0.14334.20974, 16.0.17932.21056, https://aka.ms/OfficeSecurityReleases

Vendor guidance

Release Notes

CVE-2026-105597

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-105596

Published Oct 13, 2026

HighCVSS 8.8

Microsoft Office Access Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

Fixed versions16.0.14334.20974, 16.0.17932.21056, https://aka.ms/OfficeSecurityReleases

Vendor guidance

Release Notes

CVE-2026-105596

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-105595

Published Oct 13, 2026

HighCVSS 8.8

Microsoft Office Access Remote Code Execution Vulnerability

Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

Fixed versions16.0.14334.20974, 16.0.17932.21056, https://aka.ms/OfficeSecurityReleases

Vendor guidance

Release Notes

CVE-2026-105595

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-105593

Published Oct 13, 2026

HighCVSS 8.8

Microsoft Office Access Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

Affected productsMicrosoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft 365 Apps for Enterprise for 32-bit Systems

Fixed versions16.0.17932.21056, https://aka.ms/OfficeSecurityReleases, 16.0.14334.20974

Vendor guidance

Release Notes

CVE-2026-105593

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-105592

Published Oct 13, 2026

HighCVSS 7.5

Microsoft Office Access Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

Fixed versions16.0.14334.20974, 16.0.17932.21056, https://aka.ms/OfficeSecurityReleases

Vendor guidance

Release Notes

CVE-2026-105592

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-105591

Published Oct 13, 2026

HighCVSS 8.8

Microsoft Office Access Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

Fixed versions16.0.14334.20974, 16.0.17932.21056, https://aka.ms/OfficeSecurityReleases

Vendor guidance

Release Notes

CVE-2026-105591

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-105013

Published Oct 13, 2026

HighCVSS 7.4

Microsoft Office SharePoint Remote Code Execution Vulnerability

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Affected productsMicrosoft SharePoint Server Subscription Edition

Fixed versions16.0.20326.20190

Vendor guidance

Install KB5002927.

CVE-2026-105013

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-105010

Published Oct 13, 2026

HighCVSS 9.8

Microsoft Windows Search Component Elevation of Privilege Vulnerability

Use after free in Microsoft Windows Search Component allows an unauthorized attacker to elevate privileges over a network.

Affected productsWindows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems

Fixed versions6.3.9600.23470, 10.0.14393.9612, 10.0.17763.9376, 10.0.19044.7807

Vendor guidance

Install KB5126836. Install KB5126868. Install KB5126651. Install KB5126657. Install KB5126655. Install KB5126653. Install KB5127648. Install KB5126646. Install KB5127646.

CVE-2026-105010

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-105009

Published Oct 13, 2026

HighCVSS 7.5

Windows Server Update Service Elevation of Privilege Vulnerability

Incorrect default permissions in Windows Server Update Service allows an authorized attacker to elevate privileges locally.

Affected productsWindows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation)

Fixed versions6.2.9200.26434, 6.3.9600.23470, 10.0.14393.9612, 10.0.17763.9376

Vendor guidance

Install KB5126835. Install KB5126836. Install KB5126868. Install KB5126651. Install KB5126655. Install KB5126646.

CVE-2026-105009

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-105007

Published Oct 13, 2026

HighCVSS 8.8

Windows NDIS Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length of a buffer prior to copying memory to it. To exploit the vulnerability, in a local attack scenario, an attacker could run a specially cr...

Affected productsWindows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation)

Fixed versions6.2.9200.26434, 6.3.9600.23470, 10.0.14393.9612, 10.0.17763.9376

Vendor guidance

Install KB5126835. Install KB5126836. Install KB5126868. Install KB5126651. Install KB5126657. Install KB5126655. Install KB5126653. Install KB5127648. Install KB5126646. Install KB5127646.

CVE-2026-105007

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-105006

Published Oct 13, 2026

HighCVSS 6.4

HID Class Driver Elevation of Privilege Vulnerability

Use after free in HID class driver allows an unauthorized attacker to elevate privileges with a physical attack.

Affected productsWindows Server 2025 (Server Core installation), Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2012 R2

Fixed versions10.0.26100.33650, 10.0.28000.3231, 6.3.9600.23470, 10.0.14393.9612

Vendor guidance

Install KB5126646. Install KB5127646. Install KB5126836. Install KB5126868. Install KB5126651. Install KB5126657. Install KB5126655. Install KB5126653. Install KB5127648.

CVE-2026-105006

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-105005

Published Oct 13, 2026

HighCVSS 8.1

Windows Schannel Remote Code Execution Vulnerability

Out-of-bounds write in Windows Schannel allows an unauthorized attacker to execute code over a network.

Affected productsWindows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems

Fixed versions10.0.28000.3231

Vendor guidance

Install KB5127646.

CVE-2026-105005

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-105004

Published Oct 13, 2026

HighCVSS 7.8

Windows Overlay Filter Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

Affected productsWindows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation)

Fixed versions6.2.9200.26434, 6.3.9600.23470, 10.0.14393.9612, 10.0.17763.9376

Vendor guidance

Install KB5126835. Install KB5126836. Install KB5126868. Install KB5126651. Install KB5126657. Install KB5126655. Install KB5126653. Install KB5127648. Install KB5126646. Install KB5127646.

CVE-2026-105004

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-105003

Published Oct 13, 2026

HighCVSS 7.8

HID Class Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.

Affected productsWindows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems

Fixed versions6.3.9600.23470, 10.0.14393.9612, 10.0.17763.9376, 10.0.19044.7807

Vendor guidance

Install KB5126836. Install KB5126868. Install KB5126651. Install KB5126657. Install KB5126655. Install KB5126653. Install KB5127648. Install KB5126646. Install KB5127646.

CVE-2026-105003

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-103578

Published Oct 13, 2026

HighCVSS 6.8

Windows Kernel Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.

Affected productsWindows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems

Fixed versions10.0.28000.3231

Vendor guidance

Install KB5127646.

CVE-2026-103578

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-103577

Published Oct 13, 2026

HighCVSS 7.5

Microsoft QUIC Security Feature Bypass Vulnerability

Insecure default variable initialization in Microsoft QUIC allows an unauthorized attacker to bypass a security feature over a network.

Affected productsWindows 11 Version 26H2 for ARM64-based Systems, Windows 11 Version 26H2 for x64-based Systems, Windows Server 2022 (Server Core installation), Windows 11 Version 23H2 for x64-based Systems

Fixed versions10.0.26300.9711, 10.0.20348.5761, 10.0.22631.7652, 10.0.26100.9711

Vendor guidance

Install KB5127648. Install KB5126655. Install KB5126653. Install KB5126646. Install KB5127646.

CVE-2026-103577

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-103576

Published Oct 13, 2026

HighCVSS 6.5

Active Directory Federation Services (AD FS) Spoofing Vulnerability

Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.

Affected productsWindows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.14393.9612, 10.0.17763.9376, 10.0.20348.5761, 10.0.26100.33650

Vendor guidance

Install KB5126868. Install KB5126651. Install KB5126655. Install KB5126646.

CVE-2026-103576

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-103575

Published Oct 13, 2026

HighCVSS 8.8

Remote Desktop Client Remote Code Execution Vulnerability

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Affected productsWindows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H2 for ARM64-based Systems

Fixed versions10.0.26100.9711, 10.0.26200.9711, 10.0.26300.9711, 10.0.26100.33650

Vendor guidance

Install KB5127648. Install KB5126646. Install KB5127646. Install KB5126835. Install KB5126836. Install KB5126868. Install KB5126651. Install KB5126657. Install KB5126655. Install KB5126653.

CVE-2026-103575

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-103569

Published Oct 13, 2026

HighCVSS 7.5

Windows IKE Extension Information Disclosure Vulnerability

Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose information over a network.

Affected productsWindows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation)

Fixed versions6.2.9200.26434, 6.3.9600.23470, 10.0.14393.9612, 10.0.17763.9376

Vendor guidance

Install KB5126835. Install KB5126836. Install KB5126868. Install KB5126651. Install KB5126657. Install KB5126655. Install KB5126653. Install KB5127648. Install KB5126646. Install KB5127646.

CVE-2026-103569

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-103568

Published Oct 13, 2026

HighCVSS 7.8

Windows Credential Providers Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Providers allows an authorized attacker to elevate privileges locally.

Affected productsWindows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation)

Fixed versions6.2.9200.26434, 6.3.9600.23470, 10.0.14393.9612, 10.0.17763.9376

Vendor guidance

Install KB5126835. Install KB5126836. Install KB5126868. Install KB5126651. Install KB5126657. Install KB5126655. Install KB5126653. Install KB5127648. Install KB5126646. Install KB5127646.

CVE-2026-103568

Read the vendor advisory Watch this product

Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources