Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed

9Vendor sources

4,737Advisories collected

2,721Published or updated in 30 days

2,119Marked critical or high

Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

AWS Security Bulletins 111 advisories

CurrentChecked 17 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Cisco Security Advisories 34 advisories

CurrentChecked 17 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Citrix Security Bulletins 17 advisories

CurrentChecked 52 minutes ago

Checked hourly Browse this vendor's advisories Official source

Delinea Security Advisories 7 advisories

CurrentChecked 22 minutes ago

Checked hourly Browse this vendor's advisories Official source

Fortinet PSIRT Advisories 40 advisories

CurrentChecked 17 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Ivanti Security Advisories 5 advisories

CurrentChecked 17 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Microsoft Security Response Center 4,355 advisories

CurrentChecked 2 hours ago

Checked every 6 hours Browse this vendor's advisories Official source

Palo Alto Networks Security Advisories 39 advisories

CurrentChecked 16 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Ubuntu Security Notices 129 advisories

CurrentChecked 17 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

4,737 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results

Microsoft Security Response CenterCVE-2026-71339

Published Sep 8, 2026

HighCVSS 6.7

Windows Installer Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-71339

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-71338

Published Sep 8, 2026

HighCVSS 6.4

Windows Failover Cluster Elevation of Privilege Vulnerability

Double free in Windows Failover Cluster allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.26100.33438, 10.0.14393.9512

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122871. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-71338

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-71337

Published Sep 8, 2026

HighCVSS 7.8

Windows Storage Management Provider Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally.

Affected productsWindows Server 2022, Windows Server 2022 (Server Core installation), Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems

Fixed versions10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725, 10.0.26100.33438

Vendor guidance

Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012.

CVE-2026-71337

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-71334

Published Sep 8, 2026

HighCVSS 7.8

Windows NFS Portmapper Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows NFS Portmapper allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-71334

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-71333

Published Sep 8, 2026

HighCVSS 7.0

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-71333

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-71332

Published Sep 8, 2026

HighCVSS 7.0

Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability

Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099.

CVE-2026-71332

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-71330

Published Sep 8, 2026

HighCVSS 7.5

Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to disclose information over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-71330

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-71329

Published Sep 8, 2026

HighCVSS 6.8

Windows NTFS Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-71329

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-71328

Published Sep 8, 2026

HighCVSS 8.8

.NET and Visual Studio Remote Code Execution Vulnerability

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

Affected productsMicrosoft Visual Studio 2026 version 18.9, .NET 10.0 installed on Windows, .NET 8.0 installed on Windows, .NET 9.0 installed on Windows

Fixed versions18.9.3, 10.0.12, 8.0.31, 9.0.20

Vendor guidance

Release Notes Install KB5126106. Install KB5126104. Install KB5126105.

CVE-2026-71328

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-70587

Published Sep 8, 2026

HighCVSS 7.5

Windows Remote Desktop Protocol Information Disclosure Vulnerability

Improper null termination in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-70587

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-70584

Published Sep 8, 2026

HighCVSS 7.8

Windows Core Messaging Elevation of Privilege Vulnerability

Access of resource using incompatible type ('type confusion') in Windows Core Messaging allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099.

CVE-2026-70584

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-70583

Published Sep 8, 2026

HighCVSS 7.8

Windows Core Messaging Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099.

CVE-2026-70583

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-70582

Published Sep 8, 2026

HighCVSS 6.4

Windows Management Instrumentation Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-70582

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-70581

Published Sep 8, 2026

HighCVSS 7.8

Windows Biometric Service Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099.

CVE-2026-70581

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-70579

Published Sep 8, 2026

HighCVSS 7.5

Windows Mobile Broadband Information Disclosure Vulnerability

Out-of-bounds read in Windows Mobile Broadband allows an unauthorized attacker to disclose information over a network.

Affected productsWindows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for x64-based Systems

Fixed versions10.0.19044.7725, 10.0.19045.7725, 10.0.26200.9445, 10.0.22631.7582

Vendor guidance

Install KB5122878. Install KB5124008. Install KB5122880. Install KB5124012.

CVE-2026-70579

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-70578

Published Sep 8, 2026

HighCVSS 7.0

Windows Credential Guard Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Credential Guard allows an authorized attacker to elevate privileges locally.

Fixed versions10.0.19044.7725, 10.0.19045.7725, 10.0.26200.9445, 10.0.22631.7582

Vendor guidance

Install KB5122878. Install KB5124008. Install KB5122880. Install KB5124012.

CVE-2026-70578

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-70577

Published Sep 8, 2026

HighCVSS 7.0

Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability

Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012.

CVE-2026-70577

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-70575

Published Sep 8, 2026

HighCVSS 5.3

Windows Schannel Denial of Service Vulnerability

Null pointer dereference in Windows Schannel allows an authorized attacker to deny service over a network.

Affected productsWindows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025 (Server Core installation), Windows 11 Version 25H2 for ARM64-based Systems

Fixed versions10.0.20348.5622, 10.0.26100.33438, 10.0.26200.9445, 10.0.22631.7582

Vendor guidance

Install KB5122882. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012.

CVE-2026-70575

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-70574

Published Sep 8, 2026

HighCVSS 7.8

Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability

Out-of-bounds read in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-70574

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-70573

Published Sep 8, 2026

HighCVSS 7.0

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099.

CVE-2026-70573

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-70572

Published Sep 8, 2026

HighCVSS 7.8

Windows Biometric Service Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099.

CVE-2026-70572

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-70570

Published Sep 8, 2026

HighCVSS 7.5

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-70570

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-70569

Published Sep 8, 2026

HighCVSS 7.8

Windows Spaceport.sys Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.

Affected productsWindows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025 (Server Core installation), Windows 11 Version 25H2 for ARM64-based Systems

Fixed versions10.0.20348.5622, 10.0.26100.33438, 10.0.26200.9445, 10.0.22631.7582

Vendor guidance

Install KB5122882. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012.

CVE-2026-70569

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-70568

Published Sep 8, 2026

HighCVSS 7.0

Windows Defender Firewall Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-70568

Read the vendor advisory Watch this product

Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

Read how SecurityAlert collects and checks threat intelligence.