Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed

9Vendor sources

4,737Advisories collected

2,721Published or updated in 30 days

2,119Marked critical or high

Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

AWS Security Bulletins 111 advisories

CurrentChecked 1 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Cisco Security Advisories 34 advisories

CurrentChecked 1 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Citrix Security Bulletins 17 advisories

CurrentChecked 16 minutes ago

Checked hourly Browse this vendor's advisories Official source

Delinea Security Advisories 7 advisories

CurrentChecked 56 minutes ago

Checked hourly Browse this vendor's advisories Official source

Fortinet PSIRT Advisories 40 advisories

CurrentChecked 1 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Ivanti Security Advisories 5 advisories

CurrentChecked 1 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Microsoft Security Response Center 4,355 advisories

CurrentChecked 1 minutes ago

Checked every 6 hours Browse this vendor's advisories Official source

Palo Alto Networks Security Advisories 39 advisories

CurrentChecked just now

Checked every 15 minutes Browse this vendor's advisories Official source

Ubuntu Security Notices 129 advisories

CurrentChecked 1 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

4,737 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results

Microsoft Security Response CenterCVE-2026-69355

Published Sep 8, 2026

HighCVSS 8.8

Microsoft Exchange Server Remote Code Execution Vulnerability

External control of file name or path in Microsoft Exchange Server allows an authorized attacker to execute code over a network.

Affected productsMicrosoft Exchange Server 2019 Cumulative Update 15, Microsoft Exchange Server 2019 Cumulative Update 14, Microsoft Exchange Server 2016 Cumulative Update 23, Microsoft Exchange Server Subscription Edition RTM

Fixed versions15.02.1748.051, 15.02.1544.046, 15.01.2507.073, 15.02.2562.049

Vendor guidance

Install KB5121609. Install KB5121610. Install KB5121611. Install KB5121608.

CVE-2026-69355

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69353

Published Sep 8, 2026

HighCVSS 5.5

Windows Text Shaping Information Disclosure Vulnerability

Out-of-bounds read in Windows Text Shaping allows an authorized attacker to disclose information locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-69353

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69352

Published Sep 8, 2026

HighCVSS 7.8

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099.

CVE-2026-69352

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69351

Published Sep 8, 2026

HighCVSS 5.5

Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vulnerability

Exposure of private personal information to an unauthorized actor in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to disclose information locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-69351

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69350

Published Sep 8, 2026

HighCVSS 6.7

Windows Overlay Filter Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123066.

CVE-2026-69350

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69349

Published Sep 8, 2026

HighCVSS 5.7

Windows Management Instrumentation Information Disclosure Vulnerability

Use of uninitialized resource in Windows Management Instrumentation allows an authorized attacker to disclose information over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-69349

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69348

Published Sep 8, 2026

HighCVSS 7.8

Windows Win32k Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.

Affected productsWindows Server 2025 (Server Core installation), Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems

Fixed versions10.0.26100.33438, 10.0.26200.9445, 10.0.26100.9445, 10.0.28000.2954

Vendor guidance

Install KB5122871. Install KB5124008. Install KB5124012.

CVE-2026-69348

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69347

Published Sep 8, 2026

HighCVSS 7.4

Windows Fast FAT Driver Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-69347

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69346

Published Sep 8, 2026

HighCVSS 8.0

Windows Print Spooler Components Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-69346

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69345

Published Sep 8, 2026

HighCVSS 5.5

Microsoft Standard XPS Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-69345

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69344

Published Sep 8, 2026

HighCVSS 5.5

Windows Print Spooler Components Information Disclosure Vulnerability

Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.

Affected productsWindows Server 2022, Windows Server 2022 (Server Core installation), Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems

Fixed versions10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725, 10.0.26100.33438

Vendor guidance

Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012.

CVE-2026-69344

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69343

Published Sep 8, 2026

HighCVSS 5.5

Windows Overlay Filter Information Disclosure Vulnerability

Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123066.

CVE-2026-69343

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69342

Published Sep 8, 2026

HighCVSS 7.5

Windows DHCP Server Denial of Service Vulnerability

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.26100.33438, 10.0.14393.9512

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122871. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-69342

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69341

Published Sep 8, 2026

HighCVSS 7.0

Windows Image Acquisition Elevation of Privilege Vulnerability

Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-69341

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69340

Published Sep 8, 2026

HighCVSS 7.1

Windows NTFS Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-69340

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69339

Published Sep 8, 2026

HighCVSS 5.5

Windows MIDI Service Module Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally.

Affected productsWindows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems

Fixed versions10.0.26200.9445, 10.0.26100.9445, 10.0.28000.2954

Vendor guidance

Install KB5124008. Install KB5124012.

CVE-2026-69339

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69338

Published Sep 8, 2026

HighCVSS 7.1

Remote Desktop Gateway Service Elevation of Privilege Vulnerability

Use after free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.26100.33438, 10.0.14393.9512

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122871. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-69338

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69337

Published Sep 8, 2026

HighCVSS 7.1

Windows Registry Elevation of Privilege Vulnerability

Double free in Windows Registry allows an authorized attacker to elevate privileges over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-69337

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69336

Published Sep 8, 2026

HighCVSS 7.1

Microsoft Standard XPS Elevation of Privilege Vulnerability

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-69336

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69335

Published Sep 8, 2026

HighCVSS 7.0

Windows Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-69335

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69333

Published Sep 8, 2026

HighCVSS 7.0

Windows Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

Fixed versions10.0.26200.9445, 10.0.26100.9445, 10.0.28000.2954

Vendor guidance

Install KB5124008. Install KB5124012.

CVE-2026-69333

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69332

Published Sep 8, 2026

HighCVSS 8.0

Windows NTFS Elevation of Privilege Vulnerability

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-69332

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69331

Published Sep 8, 2026

HighCVSS 7.0

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123066.

CVE-2026-69331

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-69329

Published Sep 8, 2026

HighCVSS 7.5

BranchCache Denial of Service Vulnerability

Out-of-bounds read in BranchCache allows an unauthorized attacker to deny service over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725

Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-69329

Read the vendor advisory Watch this product

Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

Read how SecurityAlert collects and checks threat intelligence.