Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed

11Vendor sources

16,884Advisories collected

6,334Published or updated in 30 days

6,998Marked critical or high

Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

AWS Security Bulletins 173 advisories

CurrentChecked 16 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Apple Security Releases 29 advisories

CurrentChecked 51 minutes ago

Checked hourly Browse this vendor's advisories Official source

Cisco Security Advisories 107 advisories

Check delayedChecked 24 days ago

Checked every 15 minutes Browse this vendor's advisories Official source

Citrix Security Bulletins 24 advisories

CurrentChecked 51 minutes ago

Checked hourly Browse this vendor's advisories Official source

Delinea Security Advisories 14 advisories

CurrentChecked 51 minutes ago

Checked hourly Browse this vendor's advisories Official source

Fortinet PSIRT Advisories 55 advisories

CurrentChecked 16 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Ivanti Security Advisories 9 advisories

CurrentChecked 16 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Microsoft Security Response Center 15,972 advisories

CurrentChecked 2 hours ago

Checked every 6 hours Browse this vendor's advisories Official source

Palo Alto Networks Security Advisories 59 advisories

CurrentChecked 16 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

SonicWall PSIRT Advisories 12 advisories

CurrentChecked 51 minutes ago

Checked hourly Browse this vendor's advisories Official source

Ubuntu Security Notices 430 advisories

CurrentChecked 16 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

16,884 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results

Microsoft Security Response CenterCVE-2026-83973

Published Sep 8, 2026

HighCVSS 7.8

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099.

CVE-2026-83973

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83972

Published Sep 8, 2026

HighCVSS 7.8

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099.

CVE-2026-83972

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83971

Published Sep 8, 2026

HighCVSS 7.8

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099.

CVE-2026-83971

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83970

Published Sep 8, 2026

HighCVSS 7.8

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099.

CVE-2026-83970

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83969

Published Sep 8, 2026

HighCVSS 7.8

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099.

CVE-2026-83969

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83968

Published Sep 8, 2026

HighCVSS 7.8

Windows Biometric Service Elevation of Privilege Vulnerability

Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099.

CVE-2026-83968

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83967

Published Sep 8, 2026

HighCVSS 7.8

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099.

CVE-2026-83967

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83955

Published Sep 8, 2026

HighCVSS 7.8

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099.

CVE-2026-83955

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83954

Published Sep 8, 2026

HighCVSS 7.8

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099.

CVE-2026-83954

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83952

Published Sep 8, 2026

HighCVSS 7.8

Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.

Affected productsWindows Server 2025 (Server Core installation), Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems

Fixed versions10.0.26100.33438, 10.0.26200.9445, 10.0.26100.9445, 10.0.28000.2954

Vendor guidance

Install KB5122871. Install KB5124008. Install KB5124012.

CVE-2026-83952

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83951

Published Sep 8, 2026

HighCVSS 5.5

Microsoft Office Word Information Disclosure Vulnerability

Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

Affected productsMicrosoft Word 2016 (64-bit edition), Microsoft Word 2016 (32-bit edition), Microsoft Office 2019 for 64-bit editions, Microsoft Office 2019 for 32-bit editions

Fixed versions16.0.5569.1000, 16.0.10417.20207, 16.0.14334.20906, 16.0.17932.20976

Vendor guidance

Release Notes Install KB5002923.

CVE-2026-83951

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83949

Published Sep 8, 2026

HighCVSS 5.5

Microsoft Office Word Information Disclosure Vulnerability

Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

Affected productsMicrosoft Word 2016 (64-bit edition), Microsoft Word 2016 (32-bit edition), Microsoft Office 2019 for 64-bit editions, Microsoft Office 2019 for 32-bit editions

Fixed versions16.0.5569.1000, 16.0.10417.20207, 16.0.14334.20906, 16.0.17932.20976

Vendor guidance

Release Notes Install KB5002923.

CVE-2026-83949

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83948

Published Sep 8, 2026

HighCVSS 8.0

Microsoft Azure CLI Remote Code Execution Vulnerability

Improper neutralization of special elements used in a command ('command injection') in Microsoft Azure CLI allows an authorized attacker to execute code over a network.

Affected productsMicrosoft Azure CLI

Fixed versions2.2.1

Vendor guidance

Release Notes

CVE-2026-83948

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83942

Published Sep 8, 2026

HighCVSS 7.8

Windows Kernel Elevation of Privilege Vulnerability

Missing authorization in Windows Kernel allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012.

CVE-2026-83942

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-83940

Published Sep 8, 2026

HighCVSS 7.0

Windows Device Association Service Elevation of Privilege Vulnerability

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099.

CVE-2026-83940

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-81385

Published Sep 8, 2026

HighCVSS 8.8

Microsoft Office Publisher Remote Code Execution Vulnerability

Deserialization of untrusted data in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network.

Affected productsMicrosoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems

Fixed versions16.0.10417.20207, 16.0.20326.20138, 16.0.14334.20906, 16.0.17932.20976

Vendor guidance

Release Notes Install KB5002644.

CVE-2026-81385

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-81383

Published Sep 8, 2026

HighCVSS 7.4

Visual Studio Code Information Disclosure Vulnerability

Use of incorrectly-resolved name or reference in Visual Studio Code allows an unauthorized attacker to disclose information over a network.

Affected productsVisual Studio Code

Fixed versions1.136.2

Vendor guidance

Release Notes

CVE-2026-81383

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-81381

Published Sep 8, 2026

HighCVSS 6.5

GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability

Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network.

Affected productsVisual Studio Code

Fixed versions1.136.2

Vendor guidance

Release Notes

CVE-2026-81381

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-81380

Published Sep 8, 2026

HighCVSS 5.3

GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability

Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network.

Affected productsVisual Studio Code

Fixed versions1.136.2

Vendor guidance

Release Notes

CVE-2026-81380

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-81378

Published Sep 8, 2026

HighCVSS 8.2

Visual Studio Code Security Feature Bypass Vulnerability

Interpretation conflict in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

Affected productsVisual Studio Code

Fixed versions1.136.2

Vendor guidance

Release Notes

CVE-2026-81378

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-81377

Published Sep 8, 2026

HighCVSS 6.5

Visual Studio Code Tampering Vulnerability

Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to perform tampering over a network.

Affected productsVisual Studio Code

Fixed versions1.136.2

Vendor guidance

Release Notes

CVE-2026-81377

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-81376

Published Sep 8, 2026

HighCVSS 9.6

Visual Studio Code Security Feature Bypass Vulnerability

Incomplete comparison with missing factors in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

Affected productsVisual Studio Code

Fixed versions1.136.2

Vendor guidance

Release Notes

CVE-2026-81376

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-81356

Published Sep 8, 2026

HighCVSS 8.2

Visual Studio Code Security Feature Bypass Vulnerability

Inconsistent interpretation of http requests ('http request/response smuggling') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

Affected productsVisual Studio Code

Fixed versions1.136.2

Vendor guidance

Release Notes

CVE-2026-81356

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-81353

Published Sep 8, 2026

HighCVSS 7.8

HEIF Image Extensions Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.

Affected productsHEIF Image Extension

Fixed versions1.2.48.0

Vendor guidance

Release Notes

CVE-2026-81353

Read the vendor advisory Watch this product

Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources