Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed

11Vendor sources

18,531Advisories collected

6,564Published or updated in 30 days

8,312Marked critical or high

Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

AWS Security Bulletins 180 advisories

CurrentChecked just now

Checked every 15 minutes Browse this vendor's advisories Official source

Apple Security Releases 38 advisories

CurrentChecked 46 minutes ago

Checked hourly Browse this vendor's advisories Official source

Cisco Security Advisories 107 advisories

Check delayedChecked 28 days ago

Checked every 15 minutes Browse this vendor's advisories Official source

Citrix Security Bulletins 25 advisories

CurrentChecked 56 minutes ago

Checked hourly Browse this vendor's advisories Official source

Delinea Security Advisories 14 advisories

CurrentChecked 55 minutes ago

Checked hourly Browse this vendor's advisories Official source

Fortinet PSIRT Advisories 110 advisories

CurrentChecked 11 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Ivanti Security Advisories 10 advisories

CurrentChecked just now

Checked every 15 minutes Browse this vendor's advisories Official source

Microsoft Security Response Center 17,484 advisories

CurrentChecked 3 hours ago

Checked every 6 hours Browse this vendor's advisories Official source

Palo Alto Networks Security Advisories 69 advisories

CurrentChecked 11 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

SonicWall PSIRT Advisories 12 advisories

Check delayedChecked yesterday

Checked hourly Browse this vendor's advisories Official source

Ubuntu Security Notices 482 advisories

CurrentChecked 11 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

18,531 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results

Microsoft Security Response CenterCVE-2026-61365

Published Aug 11, 2026

HighCVSS 7.8

Windows Remote Desktop Services Elevation of Privilege Vulnerability

Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9121, 10.0.20348.5499, 10.0.20348.5440, 10.0.19044.7663

Vendor guidance

Install KB5120238. Install KB5120242. Install KB5120229. Install KB5120249. Install KB5120233. Install KB5120228. Install KB5121003. Install KB5120994. Install KB5120240. Install KB5121000. Install KB5120418. Install ...

CVE-2026-61365

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-61364

Published Aug 11, 2026

HighCVSS 7.8

Windows Remote Desktop Services Elevation of Privilege Vulnerability

Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9121, 10.0.20348.5499, 10.0.20348.5440, 10.0.19044.7663

Vendor guidance

CVE-2026-61364

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-61367

Published Aug 11, 2026

HighCVSS 7.8

Windows Remote Desktop Services Elevation of Privilege Vulnerability

Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9121, 10.0.20348.5499, 10.0.20348.5440, 10.0.19044.7663

Vendor guidance

CVE-2026-61367

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-61356

Published Aug 11, 2026

HighCVSS 7.8

Windows Remote Desktop Services Elevation of Privilege Vulnerability

Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9121, 10.0.20348.5499, 10.0.20348.5440, 10.0.19044.7663

Vendor guidance

Install KB5120238. Install KB5120242. Install KB5120229. Install KB5120249. Install KB5120233. Install KB5120228. Install KB5121003. Install KB5120994. Install KB5120240. Install KB5121000.

CVE-2026-61356

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-59118

Updated Aug 11, 2026

CriticalCVSS 9.3

Copilot Cowork Elevation of Privilege Vulnerability

Improper authorization in Copilot Cowork allows an unauthorized attacker to elevate privileges over a network.

Affected productsCopilot Cowork

CVE-2026-59118

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-70130

Published Aug 11, 2026

CriticalCVSS 8.4

Microsoft Office Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

Affected productsMicrosoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems

Fixed versionshttps://aka.ms/OfficeSecurityReleases

Vendor guidance

Click to Run

CVE-2026-70130

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-64921

Published Aug 11, 2026

CriticalCVSS 8.8

Microsoft SharePoint Server Elevation of Privilege Vulnerability

Missing authentication for critical function in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

Affected productsMicrosoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition

Fixed versions16.0.5565.1001, 16.0.10417.20198, 16.0.19725.20522

Vendor guidance

Install KB5002905. Install KB5002906. Install KB5002894. Install KB5002896. Install KB5002893.

CVE-2026-64921

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-64911

Published Aug 11, 2026

CriticalCVSS 7.8

Microsoft Office Remote Code Execution Vulnerability

Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally.

Fixed versionshttps://aka.ms/OfficeSecurityReleases, 16.112.26081010

Vendor guidance

Click to Run Release Notes

CVE-2026-64911

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-64910

Published Aug 11, 2026

CriticalCVSS 7.8

Microsoft Office Remote Code Execution Vulnerability

Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.

Fixed versionshttps://aka.ms/OfficeSecurityReleases, 16.112.26081010

Vendor guidance

Click to Run Release Notes

CVE-2026-64910

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-64909

Published Aug 11, 2026

CriticalCVSS 7.8

Microsoft Office Remote Code Execution Vulnerability

Integer underflow (wrap or wraparound) in Microsoft Office allows an unauthorized attacker to execute code locally.

Affected productsMicrosoft Office 365 for Mac, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems

Fixed versions16.112.26081010, https://aka.ms/OfficeSecurityReleases, 16.0.5565.1001

Vendor guidance

Release Notes Click to Run Install KB5002897.

CVE-2026-64909

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-64907

Published Aug 11, 2026

CriticalCVSS 7.8

Microsoft Office Word Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Fixed versionshttps://aka.ms/OfficeSecurityReleases, 16.112.26081010, 16.0.5565.1000

Vendor guidance

Click to Run Release Notes Install KB5002901.

CVE-2026-64907

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-64898

Published Aug 11, 2026

CriticalCVSS 7.8

Microsoft Office Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

Affected productsMicrosoft Office 365 for Mac, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems

Fixed versions16.112.26081010, https://aka.ms/OfficeSecurityReleases

Vendor guidance

Release Notes Click to Run

CVE-2026-64898

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-63526

Published Aug 11, 2026

CriticalCVSS 7.8

Microsoft Office Graphics Component Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

Affected productsMicrosoft Office 365 for Mac, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems

Fixed versions16.112.26081010, https://aka.ms/OfficeSecurityReleases, 16.0.5565.1001

Vendor guidance

Release Notes Click to Run Install KB5002897.

CVE-2026-63526

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-63525

Published Aug 11, 2026

CriticalCVSS 7.8

Microsoft Office Word Remote Code Execution Vulnerability

Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Fixed versionshttps://aka.ms/OfficeSecurityReleases, 16.0.5565.1000

Vendor guidance

Click to Run Install KB5002901.

CVE-2026-63525

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-62911

Published Aug 11, 2026

CriticalCVSS 8.0

Microsoft Exchange Server Elevation of Privilege Vulnerability

Authentication bypass by capture-replay in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

Affected productsMicrosoft Exchange Server 2016 Cumulative Update 23, Microsoft Exchange Server Subscription Edition RTM, Microsoft Exchange Server 2019 Cumulative Update 15, Microsoft Exchange Server 2019 Cumulative Update 14

Fixed versions15.01.2507.072, 15.02.2562.046, 15.02.1748.049, 15.02.1544.044

Vendor guidance

Install KB5121576. Install KB5121573. Install KB5121574. Install KB5121575.

CVE-2026-62911

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-62822

Published Aug 11, 2026

CriticalCVSS 8.8

Windows GDI+ Remote Code Execution Vulnerability

Integer overflow or wraparound in Windows GDI+ allows an unauthorized attacker to execute code over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9121, 10.0.20348.5499, 10.0.20348.5440, 10.0.19044.7663

Vendor guidance

CVE-2026-62822

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-62824

Published Aug 11, 2026

CriticalCVSS 8.8

Remote Desktop Client Remote Code Execution Vulnerability

Stack-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Affected productsWindows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation)

Fixed versions10.0.14393.9418, 6.2.9200.26280, 6.3.9600.23338

Vendor guidance

Install KB5120418. Install KB5120386. Install KB5120385.

CVE-2026-62824

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-68816

Published Aug 11, 2026

CriticalCVSS 7.8

Microsoft Excel Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Affected productsOffice Online Server, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems

Fixed versions16.0.10417.20175, https://aka.ms/OfficeSecurityReleases, 16.112.26081010, 16.0.5565.1001

Vendor guidance

Click to Run Release Notes Install KB5002884. Install KB5002903.

CVE-2026-68816

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-66799

Published Aug 11, 2026

CriticalCVSS 7.8

Windows Key Guard Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Key Guard allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9121, 10.0.20348.5499, 10.0.20348.5440, 10.0.19044.7663

Vendor guidance

Install KB5120238. Install KB5120242. Install KB5120229. Install KB5123303. Install KB5120249. Install KB5120233. Install KB5120228. Install KB5121003. Install KB5120994. Install KB5120240. Install KB5121000. Install ...

CVE-2026-66799

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-65665

Published Aug 11, 2026

CriticalCVSS 8.8

Microsoft SharePoint Server Remote Code Execution Vulnerability

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Affected productsMicrosoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition

Fixed versions16.0.10417.20198, 16.0.19725.20522

Vendor guidance

Install KB5002894. Install KB5002896. Install KB5002893.

CVE-2026-65665

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-65664

Published Aug 11, 2026

CriticalCVSS 7.8

Microsoft Office Graphics Component Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

Fixed versionshttps://aka.ms/OfficeSecurityReleases, 16.112.26081010

Vendor guidance

Click to Run Release Notes

CVE-2026-65664

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-65657

Published Aug 11, 2026

CriticalCVSS 7.8

Microsoft Office Remote Code Execution Vulnerability

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

Fixed versionshttps://aka.ms/OfficeSecurityReleases, 16.112.26081010

Vendor guidance

Click to Run Release Notes

CVE-2026-65657

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-63515

Published Aug 11, 2026

CriticalCVSS 7.8

Microsoft Office Remote Code Execution Vulnerability

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.

Affected productsMicrosoft Office 365 for Mac, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems

Fixed versions16.112.26081010, https://aka.ms/OfficeSecurityReleases, 16.0.5565.1001

Vendor guidance

Release Notes Click to Run Install KB5002902.

CVE-2026-63515

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-62818

Published Aug 11, 2026

CriticalCVSS 8.8

Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability

Use after free in Active Directory Certificate Services (AD CS) allows an authorized attacker to execute code over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9121, 10.0.20348.5499, 10.0.20348.5440, 10.0.26100.33296

Vendor guidance

Install KB5120238. Install KB5120242. Install KB5120229. Install KB5120233. Install KB5120228. Install KB5120418. Install KB5120386. Install KB5120385.

CVE-2026-62818

Read the vendor advisory Watch this product

Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources