Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed

11Vendor sources

16,892Advisories collected

6,312Published or updated in 30 days

7,001Marked critical or high

Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

AWS Security Bulletins 173 advisories

CurrentChecked 7 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Apple Security Releases 29 advisories

CurrentChecked 5 minutes ago

Checked hourly Browse this vendor's advisories Official source

Cisco Security Advisories 107 advisories

Check delayedChecked 26 days ago

Checked every 15 minutes Browse this vendor's advisories Official source

Citrix Security Bulletins 24 advisories

CurrentChecked 11 minutes ago

Checked hourly Browse this vendor's advisories Official source

Delinea Security Advisories 14 advisories

CurrentChecked 6 minutes ago

Checked hourly Browse this vendor's advisories Official source

Fortinet PSIRT Advisories 55 advisories

Check delayedChecked 2 hours ago

Checked every 15 minutes Browse this vendor's advisories Official source

Ivanti Security Advisories 9 advisories

CurrentChecked 5 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Microsoft Security Response Center 15,977 advisories

CurrentChecked 4 hours ago

Checked every 6 hours Browse this vendor's advisories Official source

Palo Alto Networks Security Advisories 59 advisories

CurrentChecked 5 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

SonicWall PSIRT Advisories 12 advisories

CurrentChecked 5 minutes ago

Checked hourly Browse this vendor's advisories Official source

Ubuntu Security Notices 433 advisories

CurrentChecked 2 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

16,892 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results

Microsoft Security Response CenterCVE-2026-69720

Published Sep 8, 2026

HighCVSS 7.8

Windows MIDI Service Module Elevation of Privileges Vulnerability

Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

Affected productsWindows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems

Fixed versions10.0.26200.9445, 10.0.26100.9445, 10.0.28000.2954

Vendor guidance

Install KB5124008. Install KB5124012.

CVE-2026-69720

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69717

Published Sep 8, 2026

HighCVSS 8.0

Windows Group Policy Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-69717

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69716

Published Sep 8, 2026

HighCVSS 8.8

Microsoft Office SharePoint Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

Affected productsMicrosoft SharePoint Server Subscription Edition

Fixed versions16.0.20326.20094

Vendor guidance

Install KB5002908.

CVE-2026-69716

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69715

Published Sep 8, 2026

HighCVSS 9.8

Windows Direct Show Remote Code Execution Vulnerability

Out-of-bounds read in Windows Direct Show allows an unauthorized attacker to execute code over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-69715

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69713

Published Sep 8, 2026

HighCVSS 4.4

Windows Secure Boot Security Feature Bypass Vulnerability

Dependency on vulnerable third-party component in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-69713

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69711

Published Sep 8, 2026

HighCVSS 7.0

Windows Device Association Service Elevation of Privilege Vulnerability

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099.

CVE-2026-69711

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69709

Published Sep 8, 2026

HighCVSS 7.8

Windows NTFS Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-69709

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69708

Published Sep 8, 2026

HighCVSS 7.0

Windows Web Platform Storage Elevation of Privilege Vulnerability

Use after free in Windows Web Platform Storage allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012.

CVE-2026-69708

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69707

Published Sep 8, 2026

HighCVSS 7.8

Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-69707

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69706

Published Sep 8, 2026

HighCVSS 7.1

Windows Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-69706

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69694

Published Sep 8, 2026

HighCVSS 7.0

Windows IP Address Management (IPAM) Service Elevation of Privilege Vulnerability

Deserialization of untrusted data in Windows IP Address Management (IPAM) Service allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099.

CVE-2026-69694

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69692

Published Sep 8, 2026

HighCVSS 7.0

Windows Audio Service Elevation of Privilege Vulnerability

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-69692

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69691

Published Sep 8, 2026

HighCVSS 7.8

Windows Spaceport.sys Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-69691

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69690

Published Sep 8, 2026

HighCVSS 4.6

Microsoft Office SharePoint Spoofing Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Affected productsMicrosoft SharePoint Server Subscription Edition

Fixed versions16.0.20326.20090

Vendor guidance

Install KB5002908.

CVE-2026-69690

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69687

Published Sep 8, 2026

HighCVSS 7.8

Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability

Integer underflow (wrap or wraparound) in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-69687

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69685

Published Sep 8, 2026

HighCVSS 7.8

Windows Kerberos Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-69685

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69684

Published Sep 8, 2026

HighCVSS 5.5

Windows Error Reporting Information Disclosure Vulnerability

Generation of error message containing sensitive information in Windows Error Reporting allows an authorized attacker to disclose information locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123066.

CVE-2026-69684

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69683

Published Sep 8, 2026

HighCVSS 6.5

Microsoft Office SharePoint Information Disclosure Vulnerability

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

Affected productsMicrosoft SharePoint Server Subscription Edition

Fixed versions16.0.20326.20082

Vendor guidance

Install KB5002908.

CVE-2026-69683

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69682

Published Sep 8, 2026

HighCVSS 7.0

Windows Host Guardian Service Elevation of Privilege Vulnerability

Use after free in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012.

CVE-2026-69682

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69680

Published Sep 8, 2026

HighCVSS 8.1

Windows DNS Spoofing Vulnerability

Origin validation error in Windows DNS allows an unauthorized attacker to perform spoofing over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.26100.33438, 10.0.14393.9512

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122871. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-69680

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69679

Published Sep 8, 2026

HighCVSS 5.7

Windows DHCP Server Denial of Service Vulnerability

Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.26100.33438, 10.0.14393.9512

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122871. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-69679

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69672

Published Sep 8, 2026

HighCVSS 5.5

Windows DNS Information Disclosure Vulnerability

Use of uninitialized resource in Windows DNS allows an authorized attacker to disclose information locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.26100.33438, 10.0.14393.9512

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122871. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-69672

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69669

Published Sep 8, 2026

HighCVSS 8.8

Windows Kernel Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to execute code over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-69669

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69654

Published Sep 8, 2026

HighCVSS 7.0

Windows Accounts Control Elevation of Privilege Vulnerability

Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099.

CVE-2026-69654

Read the vendor advisory Watch this product

Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources