Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed

9Vendor sources

4,737Advisories collected

2,721Published or updated in 30 days

2,119Marked critical or high

Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

AWS Security Bulletins 111 advisories

CurrentChecked 8 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Cisco Security Advisories 34 advisories

CurrentChecked 8 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Citrix Security Bulletins 17 advisories

CurrentChecked 3 minutes ago

Checked hourly Browse this vendor's advisories Official source

Delinea Security Advisories 7 advisories

CurrentChecked 43 minutes ago

Checked hourly Browse this vendor's advisories Official source

Fortinet PSIRT Advisories 40 advisories

CurrentChecked 8 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Ivanti Security Advisories 5 advisories

CurrentChecked 8 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Microsoft Security Response Center 4,355 advisories

CurrentChecked 5 hours ago

Checked every 6 hours Browse this vendor's advisories Official source

Palo Alto Networks Security Advisories 39 advisories

CurrentChecked 8 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Ubuntu Security Notices 129 advisories

CurrentChecked 8 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

4,737 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results

Microsoft Security Response CenterCVE-2026-69381

Published Sep 8, 2026

HighCVSS 4.6

Windows Storage Port Driver Information Disclosure Vulnerability

Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-69381

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69380

Published Sep 8, 2026

HighCVSS 8.1

Microsoft Exchange Server Elevation of Privilege Vulnerability

Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

Affected productsMicrosoft Exchange Server 2019 Cumulative Update 15, Microsoft Exchange Server 2019 Cumulative Update 14, Microsoft Exchange Server 2016 Cumulative Update 23, Microsoft Exchange Server Subscription Edition RTM

Fixed versions15.02.1748.051, 15.02.1544.046, 15.01.2507.073, 15.02.2562.049

Vendor guidance

Install KB5121609. Install KB5121610. Install KB5121611. Install KB5121608.

CVE-2026-69380

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69379

Published Sep 8, 2026

HighCVSS 7.0

Windows NTFS Elevation of Privilege Vulnerability

Improper link resolution before file access ('link following') in Windows NTFS allows an authorized attacker to elevate privileges locally.

Affected productsWindows Server 2025 (Server Core installation), Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems

Fixed versions10.0.26100.33438, 10.0.26200.9445, 10.0.22631.7582, 10.0.26100.9445

Vendor guidance

Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012.

CVE-2026-69379

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69378

Published Sep 8, 2026

HighCVSS 7.5

Microsoft Exchange Server Denial of Service Vulnerability

Uncontrolled recursion in Microsoft Exchange Server allows an unauthorized attacker to deny service over a network.

Affected productsMicrosoft Exchange Server 2016 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 14, Microsoft Exchange Server Subscription Edition RTM, Microsoft Exchange Server 2019 Cumulative Update 15

Fixed versions15.01.2507.073, 15.02.1544.046, 15.02.2562.049, 15.02.1748.051

Vendor guidance

Install KB5121611. Install KB5121610. Install KB5121608. Install KB5121609.

CVE-2026-69378

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69377

Published Sep 8, 2026

HighCVSS 7.8

Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability

Missing authorization in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012.

CVE-2026-69377

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69376

Published Sep 8, 2026

HighCVSS 5.5

Microsoft Standard XPS Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-69376

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69375

Published Sep 8, 2026

HighCVSS 6.5

Microsoft Exchange Server Tampering Vulnerability

Authorization bypass through user-controlled key in Microsoft Exchange Server allows an authorized attacker to perform tampering over a network.

Affected productsMicrosoft Exchange Server Subscription Edition RTM, Microsoft Exchange Server 2019 Cumulative Update 15, Microsoft Exchange Server 2016 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 14

Fixed versions15.02.2562.049, 15.02.1748.051, 15.01.2507.073, 15.02.1544.046

Vendor guidance

Install KB5121608. Install KB5121609. Install KB5121611. Install KB5121610.

CVE-2026-69375

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69374

Published Sep 8, 2026

HighCVSS 6.5

Windows SMB Server Denial of Service Vulnerability

Allocation of resources without limits or throttling in Windows SMB Server allows an authorized attacker to deny service over a network.

Affected productsWindows Server 2022, Windows Server 2022 (Server Core installation), Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems

Fixed versions10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725, 10.0.26100.33438

Vendor guidance

Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012.

CVE-2026-69374

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69373

Published Sep 8, 2026

HighCVSS 6.7

Windows Overlay Filter Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123066.

CVE-2026-69373

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69372

Published Sep 8, 2026

HighCVSS 5.7

Windows Network File System Denial of Service Vulnerability

Out-of-bounds read in Windows Network File System allows an authorized attacker to deny service over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.26100.33438, 10.0.14393.9512

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122871. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-69372

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69371

Published Sep 8, 2026

HighCVSS 8.0

Windows Overlay Filter Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123066.

CVE-2026-69371

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69369

Published Sep 8, 2026

HighCVSS 5.5

Windows DNS Information Disclosure Vulnerability

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.26100.33438, 10.0.14393.9512

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122871. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-69369

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69368

Published Sep 8, 2026

HighCVSS 7.8

Windows Overlay Filter Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123066.

CVE-2026-69368

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69367

Published Sep 8, 2026

HighCVSS 5.5

Microsoft Standard XPS Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-69367

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69366

Published Sep 8, 2026

HighCVSS 7.1

Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-69366

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69365

Published Sep 8, 2026

HighCVSS 8.0

Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability

Out-of-bounds read in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges over a network.

Affected productsWindows Server 2022, Windows Server 2022 (Server Core installation), Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems

Fixed versions10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725, 10.0.26100.33438

Vendor guidance

Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012.

CVE-2026-69365

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69364

Published Sep 8, 2026

HighCVSS 7.1

Windows Print Spooler Components Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-69364

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69362

Published Sep 8, 2026

HighCVSS 7.0

Windows Error Reporting Elevation of Privilege Vulnerability

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-69362

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69361

Published Sep 8, 2026

HighCVSS 6.5

Microsoft Exchange Server Spoofing Vulnerability

Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network.

Affected productsMicrosoft Exchange Server 2019 Cumulative Update 14, Microsoft Exchange Server 2019 Cumulative Update 15, Microsoft Exchange Server 2016 Cumulative Update 23, Microsoft Exchange Server Subscription Edition RTM

Fixed versions15.02.1544.046, 15.02.1748.051, 15.01.2507.073, 15.02.2562.049

Vendor guidance

Install KB5121610. Install KB5121609. Install KB5121611. Install KB5121608.

CVE-2026-69361

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69360

Published Sep 8, 2026

HighCVSS 8.8

Microsoft Office Word Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-69360

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69359

Published Sep 8, 2026

HighCVSS 7.8

Active Directory Domain Services Elevation of Privilege Vulnerability

Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099.

CVE-2026-69359

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69358

Published Sep 8, 2026

HighCVSS 7.1

Remote Desktop Client Remote Code Execution Vulnerability

Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099.

CVE-2026-69358

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69357

Published Sep 8, 2026

HighCVSS 7.1

Windows NDIS Elevation of Privilege Vulnerability

Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5122880. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-69357

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69356

Published Sep 8, 2026

HighCVSS 9.3

Microsoft Exchange Server Spoofing Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

Affected productsMicrosoft Exchange Server 2019 Cumulative Update 14, Microsoft Exchange Server 2019 Cumulative Update 15, Microsoft Exchange Server Subscription Edition RTM, Microsoft Exchange Server 2016 Cumulative Update 23

Fixed versions15.02.1544.046, 15.02.1748.051, 15.02.2562.049, 15.01.2507.073

Vendor guidance

Install KB5121610. Install KB5121609. Install KB5121608. Install KB5121611.

CVE-2026-69356

Read the vendor advisory Watch this product

Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

Read how SecurityAlert collects and checks threat intelligence.