Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed

11Vendor sources

16,884Advisories collected

6,334Published or updated in 30 days

6,998Marked critical or high

Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

AWS Security Bulletins 173 advisories

CurrentChecked 9 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Apple Security Releases 29 advisories

CurrentChecked 9 minutes ago

Checked hourly Browse this vendor's advisories Official source

Cisco Security Advisories 107 advisories

Check delayedChecked 24 days ago

Checked every 15 minutes Browse this vendor's advisories Official source

Citrix Security Bulletins 24 advisories

CurrentChecked 10 minutes ago

Checked hourly Browse this vendor's advisories Official source

Delinea Security Advisories 14 advisories

CurrentChecked 9 minutes ago

Checked hourly Browse this vendor's advisories Official source

Fortinet PSIRT Advisories 55 advisories

CurrentChecked 9 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Ivanti Security Advisories 9 advisories

CurrentChecked 9 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Microsoft Security Response Center 15,972 advisories

CurrentChecked 19 minutes ago

Checked every 6 hours Browse this vendor's advisories Official source

Palo Alto Networks Security Advisories 59 advisories

CurrentChecked 5 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

SonicWall PSIRT Advisories 12 advisories

CurrentChecked 9 minutes ago

Checked hourly Browse this vendor's advisories Official source

Ubuntu Security Notices 430 advisories

CurrentChecked 5 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

16,884 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results

Microsoft Security Response CenterCVE-2026-85051

Published Sep 11, 2026

Severity not listed

Chromium CVE-2026-85051: Type confusion in Compositing

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions152.0.4191.66

Vendor guidance

Release Notes

CVE-2026-85051

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-85049

Published Sep 11, 2026

Severity not listed

Chromium CVE-2026-85049: Use after free in Skia

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions152.0.4191.66

Vendor guidance

Release Notes

CVE-2026-85049

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-85048

Published Sep 11, 2026

Severity not listed

Chromium CVE-2026-85048: Use after free in Compositing

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions152.0.4191.66

Vendor guidance

Release Notes

CVE-2026-85048

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-85045

Published Sep 11, 2026

Severity not listed

Chromium CVE-2026-85045: Race condition in V8

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions152.0.4191.66

Vendor guidance

Release Notes

CVE-2026-85045

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-85043

Published Sep 11, 2026

Severity not listed

Chromium CVE-2026-85043: Incomplete cleanup in Network

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions152.0.4191.66

Vendor guidance

Release Notes

CVE-2026-85043

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-85042

Published Sep 11, 2026

Severity not listed

Chromium CVE-2026-85042: Use after free in DevTools

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions152.0.4191.66

Vendor guidance

Release Notes

CVE-2026-85042

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-84333

Published Sep 11, 2026

Severity not listed

Chromium: CVE-2026-84333 Use after free in Dawn

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions152.0.4191.65

Vendor guidance

Release Notes

CVE-2026-84333

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-84330

Published Sep 11, 2026

Severity not listed

Chromium: CVE-2026-84330 UI misrepresentation in FullScreen

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions152.0.4191.65

Vendor guidance

Release Notes

CVE-2026-84330

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-84352

Published Sep 11, 2026

Severity not listed

Chromium: CVE-2026-84352 Use after free in WebGL

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions152.0.4191.65

Vendor guidance

Release Notes

CVE-2026-84352

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69860

Updated Sep 11, 2026

CriticalCVSS 8.8

Windows Imaging Component Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-69860

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-54124

Updated Sep 11, 2026

HighCVSS 7.8

Windows Terminal Remote Code Execution Vulnerability

Integer overflow or wraparound in Windows Terminal allows an unauthorized attacker to execute code locally.

Affected productsWindows Server 2022, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems

Fixed versions10.0.20348.5386, 10.0.19044.7548, 10.0.19045.7548, 1.24.11321.0

Vendor guidance

Release Notes Install KB5099540. Install KB5099539. Install KB5099536. Install KB5101650. Install KB5101649.

CVE-2026-54124

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-54112

Updated Sep 11, 2026

HighCVSS 7.8

Windows Win32k Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9020, 10.0.20348.5386, 10.0.19044.7548, 10.0.19045.7548

Vendor guidance

Install KB5099538. Install KB5099540. Install KB5099539. Install KB5099536. Install KB5101650. Install KB5101649.

CVE-2026-54112

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-50679

Updated Sep 11, 2026

HighCVSS 7.8

Windows Search Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

Affected productsWindows Server 2025 (Server Core installation), Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems

Fixed versions10.0.26100.33158, 10.0.26200.8875, 10.0.26100.8875, 10.0.28000.2525

Vendor guidance

Install KB5099536. Install KB5101650. Install KB5101649.

CVE-2026-50679

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-50676

Updated Sep 11, 2026

HighCVSS 7.8

Windows Media Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privileges locally.

Affected productsWindows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems

Fixed versions10.0.26200.8875, 10.0.26100.8875, 10.0.28000.2525

Vendor guidance

Install KB5101650. Install KB5101649.

CVE-2026-50676

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-85892

Published Sep 11, 2026

HighCVSS 7.8

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges locally.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions152.0.4191.66

Vendor guidance

Release Notes

CVE-2026-85892

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-81379

Updated Sep 11, 2026

HighCVSS 8.2

Visual Studio Code Security Feature Bypass Vulnerability

Not failing securely ('failing open') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

Affected productsVisual Studio Code

Fixed versions1.136.2

Vendor guidance

Release Notes

CVE-2026-81379

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-73016

Updated Sep 11, 2026

HighCVSS 8.8

DirectWrite Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-73016

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-71336

Updated Sep 11, 2026

HighCVSS 8.8

Windows Work Folder Service Remote Code Execution Vulnerability

Integer overflow or wraparound in Windows Work Folder Service allows an authorized attacker to execute code over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.26100.33438, 10.0.14393.9512

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122871. Install KB5123099. Install KB5123066.

CVE-2026-71336

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-70334

Updated Sep 11, 2026

HighCVSS 7.8

Visual Studio Code Security Feature Bypass Vulnerability

Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

Affected productsVisual Studio Code

Fixed versions1.136.2

Vendor guidance

Release Notes

CVE-2026-70334

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69468

Updated Sep 11, 2026

HighCVSS 7.0

Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-69468

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69461

Updated Sep 11, 2026

HighCVSS 8.8

Windows NTFS Remote Code Execution Vulnerability

Stack-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-69461

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69405

Updated Sep 11, 2026

HighCVSS 5.7

Windows DHCP Server Denial of Service Vulnerability

Missing release of memory after effective lifetime in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.26100.33438, 10.0.14393.9512

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122871. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-69405

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-62799

Updated Sep 11, 2026

HighCVSS 7.8

Windows SMB Client Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally.

Affected productsWindows 11 version 26H1 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems

Fixed versions10.0.28000.2704

Vendor guidance

Install KB5121000.

CVE-2026-62799

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-61349

Updated Sep 11, 2026

HighCVSS 7.8

Windows Work Folder Service Elevation of Privilege Vulnerability

Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9121, 10.0.20348.5499, 10.0.20348.5440, 10.0.19044.7663

Vendor guidance

Install KB5120238. Install KB5120242. Install KB5120229. Install KB5120249. Install KB5120233. Install KB5120228. Install KB5121003. Install KB5120994. Install KB5120240. Install KB5121000. Install KB5120418. Install ...

CVE-2026-61349

Read the vendor advisory Watch this product

Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources