Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed

11Vendor sources

16,938Advisories collected

6,370Published or updated in 30 days

7,004Marked critical or high

Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

AWS Security Bulletins 175 advisories

CurrentChecked 19 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Apple Security Releases 38 advisories

CurrentChecked 49 minutes ago

Checked hourly Browse this vendor's advisories Official source

Cisco Security Advisories 107 advisories

Check delayedChecked 26 days ago

Checked every 15 minutes Browse this vendor's advisories Official source

Citrix Security Bulletins 24 advisories

CurrentChecked 59 minutes ago

Checked hourly Browse this vendor's advisories Official source

Delinea Security Advisories 14 advisories

CurrentChecked 49 minutes ago

Checked hourly Browse this vendor's advisories Official source

Fortinet PSIRT Advisories 55 advisories

CurrentChecked 19 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Ivanti Security Advisories 9 advisories

CurrentChecked 19 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Microsoft Security Response Center 15,985 advisories

CurrentChecked 3 hours ago

Checked every 6 hours Browse this vendor's advisories Official source

Palo Alto Networks Security Advisories 59 advisories

CurrentChecked 19 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

SonicWall PSIRT Advisories 12 advisories

CurrentChecked 49 minutes ago

Checked hourly Browse this vendor's advisories Official source

Ubuntu Security Notices 460 advisories

CurrentChecked 19 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

16,938 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results

Microsoft Security Response CenterCVE-2026-63824

Updated Aug 14, 2026

CriticalCVSS 9.8

KEYS: fix overflow in keyctl_pkey_params_get_2()

Mariner

Affected productsazl3 kernel 6.6.143.1-1 on Azure Linux 3.0

Fixed versions6.6.150.1-1

Vendor guidance

CBL-Mariner Releases

CVE-2026-63824

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-19560

Published Aug 14, 2026

Severity not listed

Chromium: CVE-2026-19560 Use after free in Blink

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions151.0.4129.86

Vendor guidance

Release Notes

CVE-2026-19560

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-19559

Published Aug 14, 2026

Severity not listed

Chromium: CVE-2026-19559 Use after free in HTML

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions151.0.4129.86

Vendor guidance

Release Notes

CVE-2026-19559

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-19558

Published Aug 14, 2026

Severity not listed

Chromium: CVE-2026-19558 Use after free in Extensions

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions151.0.4129.86

Vendor guidance

Release Notes

CVE-2026-19558

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-19557

Published Aug 14, 2026

Severity not listed

Chromium: CVE-2026-19557 Use after free in TabStrip

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions151.0.4129.86

Vendor guidance

Release Notes

CVE-2026-19557

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-19556

Published Aug 14, 2026

Severity not listed

Chromium: CVE-2026-19556 Use after free in V8

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions151.0.4129.86

Vendor guidance

Release Notes

CVE-2026-19556

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-48566

Updated Aug 14, 2026

HighCVSS 5.5

Windows DWM Core Library Information Disclosure Vulnerability

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Affected productsWindows Server 2025 (Server Core installation), Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems

Fixed versions10.0.26100.32860, 10.0.26100.32772, 10.0.26200.8457, 10.0.26200.8390

Vendor guidance

Install KB5087539. Install KB5087423. Install KB5089549. Install KB5089466. Install KB5089548.

CVE-2026-48566

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-32153

Updated Aug 14, 2026

HighCVSS 7.8

Windows Speech Runtime Elevation of Privilege Vulnerability

Use after free in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems

Fixed versions10.0.17763.8644, 10.0.19044.7184, 10.0.19045.7184, 10.0.26200.8246

Vendor guidance

Install KB5082123. Install KB5082200. Install KB5083769. Install KB5082052. Install KB5083768.

CVE-2026-32153

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-50313

Updated Aug 14, 2026

HighCVSS 7.8

Windows NTFS Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9020, 10.0.20348.5386, 10.0.19044.7548, 10.0.19045.7548

Vendor guidance

Install KB5099538. Install KB5099540. Install KB5099539. Install KB5099536. Install KB5101650. Install KB5101649. Install KB5099535. Install KB5099445. Install KB5099444.

CVE-2026-50313

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-49162

Updated Aug 14, 2026

HighCVSS 7.0

Microsoft Brokering File System Elevation of Privilege Vulnerability

Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.

Fixed versions10.0.26100.33158, 10.0.26200.8875, 10.0.26100.8875, 10.0.28000.2525

Vendor guidance

Install KB5099536. Install KB5101650. Install KB5101649.

CVE-2026-49162

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-59126

Updated Aug 14, 2026

HighCVSS 7.0

Windows Event Logging Service Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Event Logging Service allows an authorized attacker to elevate privileges locally.

Affected productsWindows Server 2022, Windows Server 2022 (Server Core installation), Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems

Fixed versions10.0.20348.5499, 10.0.20348.5440, 10.0.19044.7663, 10.0.19045.7663

Vendor guidance

Install KB5120242. Install KB5120229. Install KB5120249. Install KB5120233. Install KB5120228. Install KB5121003. Install KB5120994. Install KB5120240. Install KB5121000.

CVE-2026-59126

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-59119

Updated Aug 14, 2026

HighCVSS 7.3

PowerShell Elevation of Privilege Vulnerability

Incorrect default permissions in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.

Affected productsPowerShell 7.5, PowerShell 7.4, PowerShell 7.6

Fixed versions7.5.10.0, 7.4.19.0, 7.6.5

CVE-2026-59119

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-50523

Updated Aug 14, 2026

HighCVSS 7.8

Microsoft PowerShell Remote Code Execution Vulnerability

Improper neutralization of special elements used in a command ('command injection') in Microsoft PowerShell allows an authorized attacker to execute code locally.

Affected productsPowerShell 7.5, PowerShell 7.6, PowerShell 7.4

Fixed versions7.5.10.0, 7.6.5, 7.4.19.0

CVE-2026-50523

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-65671

Updated Aug 14, 2026

HighCVSS 7.8

Remote Access API Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9121, 10.0.20348.5499, 10.0.20348.5440, 10.0.19044.7663

Vendor guidance

Install KB5120238. Install KB5120242. Install KB5120229. Install KB5120249. Install KB5120233. Install KB5120228. Install KB5121003. Install KB5120994. Install KB5120240. Install KB5121000. Install KB5120418. Install ...

CVE-2026-65671

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-62746

Updated Aug 14, 2026

HighCVSS 5.5

Win32k Information Disclosure Vulnerability

Buffer over-read in Windows Win32K allows an authorized attacker to disclose information locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9121, 10.0.20348.5499, 10.0.20348.5440, 10.0.19044.7663

Vendor guidance

CVE-2026-62746

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-61347

Updated Aug 14, 2026

HighCVSS 5.5

Windows Event Logging Service Information Disclosure Vulnerability

Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9121, 10.0.20348.5499, 10.0.20348.5440, 10.0.19044.7663

Vendor guidance

CVE-2026-61347

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-72970

Published Aug 14, 2026

HighCVSS 8.3

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions151.0.4129.86

Vendor guidance

Release Notes

CVE-2026-72970

Read the vendor advisory Watch this product

Cisco Security Advisoriescisco-sa-clamav-WuuvVd26

Published Aug 13, 2026

High

ClamAV Vulnerabilities Affecting Cisco Products: August 2026

Multiple vulnerabilities in ClamAV could allow a remote attacker to cause a denial of service (DoS) condition, interrupting scanning operations. For more information about these vulnerabilities, see the Details section of this advisory. For additional information on these vuln...

Vendor guidance

Cisco has released software updates that address these vulnerabilities in affected Cisco platforms.

CVE-2026-20337 CVE-2026-20338 CVE-2026-20339 CVE-2026-20345 CVE-2026-20346 CVE-2026-20347

Read the vendor advisory

Microsoft Security Response CenterCVE-2026-65796

Updated Aug 13, 2026

CriticalCVSS 8.1

Windows iSCSI Target Service Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9121, 10.0.20348.5499, 10.0.20348.5440, 10.0.26100.33296

Vendor guidance

Install KB5120238. Install KB5120242. Install KB5120229. Install KB5120233. Install KB5120228. Install KB5120418. Install KB5120386. Install KB5120385.

CVE-2026-65796

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-65679

Updated Aug 13, 2026

CriticalCVSS 8.1

Windows iSCSI Target Service Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9121, 10.0.20348.5499, 10.0.20348.5440, 10.0.26100.33296

Vendor guidance

Install KB5120238. Install KB5120242. Install KB5120229. Install KB5120233. Install KB5120228. Install KB5120418. Install KB5120386. Install KB5120385.

CVE-2026-65679

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-45638

Updated Aug 13, 2026

HighCVSS 7.8

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.8880, 10.0.20348.5256, 10.0.19044.7417, 10.0.19045.7417

Vendor guidance

Install KB5094123. Install KB5094128. Install KB5094127. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051. Install KB5094122. Install KB5094042. Install KB5094041.

CVE-2026-45638

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-45597

Updated Aug 13, 2026

HighCVSS 7.0

Windows UI Automation Manager (uiamanager.dll) Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in UI Automation Manager (uiamanager.dll) allows an authorized attacker to elevate privileges locally.

Affected productsWindows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025 (Server Core installation), Windows 11 Version 25H2 for ARM64-based Systems

Fixed versions10.0.20348.5256, 10.0.26100.32995, 10.0.26200.8655, 10.0.22631.7219

Vendor guidance

Install KB5094128. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051.

CVE-2026-45597

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-45593

Updated Aug 13, 2026

HighCVSS 7.8

Windows SDK Elevation of Privilege Vulnerability

Use after free in Windows SDK allows an authorized attacker to elevate privileges locally.

Affected productsWindows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems

Fixed versions10.0.28000.2269, 10.0.17763.8880, 10.0.20348.5256, 10.0.19044.7417

Vendor guidance

Install KB5095051. Install KB5094123. Install KB5094128. Install KB5094127. Install KB5094125. Install KB5094126. Install KB5093998.

CVE-2026-45593

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-45592

Updated Aug 13, 2026

HighCVSS 7.8

Windows Internet (wininet.dll) Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Internet (wininet.dll) allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.8880, 10.0.20348.5256, 10.0.19044.7417, 10.0.19045.7417

Vendor guidance

Install KB5094123. Install KB5094128. Install KB5094127. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051. Install KB5094122. Install KB5094041. Install KB5094006.

CVE-2026-45592

Read the vendor advisory Watch this product

Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources