Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed

11Vendor sources

18,531Advisories collected

6,564Published or updated in 30 days

8,312Marked critical or high

Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

AWS Security Bulletins 180 advisories

CurrentChecked 8 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Apple Security Releases 38 advisories

CurrentChecked 54 minutes ago

Checked hourly Browse this vendor's advisories Official source

Cisco Security Advisories 107 advisories

Check delayedChecked 28 days ago

Checked every 15 minutes Browse this vendor's advisories Official source

Citrix Security Bulletins 25 advisories

CurrentChecked about an hour ago

Checked hourly Browse this vendor's advisories Official source

Delinea Security Advisories 14 advisories

CurrentChecked about an hour ago

Checked hourly Browse this vendor's advisories Official source

Fortinet PSIRT Advisories 110 advisories

CurrentChecked 18 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Ivanti Security Advisories 10 advisories

CurrentChecked 8 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Microsoft Security Response Center 17,484 advisories

CurrentChecked 4 hours ago

Checked every 6 hours Browse this vendor's advisories Official source

Palo Alto Networks Security Advisories 69 advisories

CurrentChecked 18 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

SonicWall PSIRT Advisories 12 advisories

Check delayedChecked yesterday

Checked hourly Browse this vendor's advisories Official source

Ubuntu Security Notices 482 advisories

CurrentChecked 18 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

18,531 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results

Microsoft Security Response CenterCVE-2026-62816

Published Aug 11, 2026

CriticalCVSS 8.8

Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9121, 10.0.20348.5499, 10.0.20348.5440, 10.0.19044.7663

Vendor guidance

Install KB5120238. Install KB5120242. Install KB5120229. Install KB5120249. Install KB5120233. Install KB5120228. Install KB5121003. Install KB5120994. Install KB5120240. Install KB5121000. Install KB5120418. Install ...

CVE-2026-62816

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-62827

Published Aug 11, 2026

CriticalCVSS 8.8

Microsoft SharePoint Server Elevation of Privilege Vulnerability

Improper authentication in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

Affected productsMicrosoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition

Fixed versions16.0.5565.1001, 16.0.10417.20198, 16.0.19725.20522

Vendor guidance

Install KB5002905. Install KB5002906. Install KB5002894. Install KB5002896. Install KB5002893.

CVE-2026-62827

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-62727

Published Aug 11, 2026

HighCVSS 7.0

Windows Telephony Service Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9121, 10.0.20348.5499, 10.0.20348.5440, 10.0.19044.7663

Vendor guidance

CVE-2026-62727

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-64900

Published Aug 11, 2026

HighCVSS 7.3

Microsoft SharePoint Server Spoofing Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Affected productsMicrosoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition

Fixed versions16.0.5565.1001, 16.0.10417.20198, 16.0.19725.20522

Vendor guidance

Install KB5002905. Install KB5002906. Install KB5002894. Install KB5002896. Install KB5002893.

CVE-2026-64900

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-62917

Published Aug 11, 2026

HighCVSS 4.6

Microsoft SharePoint Server Spoofing Vulnerability

Improper input validation in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Affected productsMicrosoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition

Fixed versions16.0.5565.1001, 16.0.10417.20198, 16.0.19725.20522

Vendor guidance

Install KB5002905. Install KB5002906. Install KB5002894. Install KB5002896. Install KB5002893.

CVE-2026-62917

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-62839

Published Aug 11, 2026

HighCVSS 6.5

Microsoft SharePoint Server Spoofing Vulnerability

Insufficiently protected credentials in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Affected productsMicrosoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition

Fixed versions16.0.5565.1001, 16.0.10417.20198, 16.0.19725.20522

Vendor guidance

Install KB5002905. Install KB5002906. Install KB5002894. Install KB5002896. Install KB5002893.

CVE-2026-62839

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-58639

Published Aug 11, 2026

HighCVSS 6.5

Microsoft SharePoint Server Spoofing Vulnerability

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Affected productsMicrosoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition

Fixed versions16.0.5565.1001, 16.0.10417.20198, 16.0.19725.20522

Vendor guidance

Install KB5002905. Install KB5002906. Install KB5002894. Install KB5002896. Install KB5002893.

CVE-2026-58639

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-62738

Published Aug 11, 2026

HighCVSS 5.5

Windows Management Instrumentation Information Disclosure Vulnerability

Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9121, 10.0.20348.5499, 10.0.20348.5440, 10.0.19044.7663

Vendor guidance

CVE-2026-62738

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-70326

Published Aug 11, 2026

HighCVSS 8.8

Microsoft SharePoint Server Elevation of Privilege Vulnerability

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

Affected productsMicrosoft SharePoint Server Subscription Edition

Fixed versions16.0.19725.20522

Vendor guidance

Install KB5002893.

CVE-2026-70326

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-70306

Published Aug 11, 2026

HighCVSS 9.3

Microsoft Office SharePoint Spoofing Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

Affected productsMicrosoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition

Fixed versions16.0.5565.1001, 16.0.10417.20198, 16.0.19725.20522

Vendor guidance

Install KB5002905. Install KB5002894. Install KB5002893.

CVE-2026-70306

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-68814

Published Aug 11, 2026

HighCVSS 7.8

Microsoft Excel Remote Code Execution Vulnerability

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Affected productsMicrosoft Office 365 for Mac, Office Online Server, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions

Fixed versions16.112.26081010, 16.0.10417.20175, https://aka.ms/OfficeSecurityReleases, 16.0.5565.1001

Vendor guidance

Release Notes Click to Run Install KB5002884. Install KB5002903.

CVE-2026-68814

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-68805

Published Aug 11, 2026

HighCVSS 7.8

Microsoft Excel Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Affected productsOffice Online Server, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems

Fixed versions16.0.10417.20175, https://aka.ms/OfficeSecurityReleases, 16.112.26081010, 16.0.5565.1001

Vendor guidance

Click to Run Release Notes Install KB5002884. Install KB5002903.

CVE-2026-68805

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-68803

Published Aug 11, 2026

HighCVSS 7.8

Microsoft Excel Remote Code Execution Vulnerability

Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Affected productsOffice Online Server, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems

Fixed versions16.0.10417.20175, https://aka.ms/OfficeSecurityReleases, 16.112.26081010, 16.0.5565.1001

Vendor guidance

Click to Run Release Notes Install KB5002884. Install KB5002903.

CVE-2026-68803

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-68799

Published Aug 11, 2026

HighCVSS 5.5

Microsoft Excel Information Disclosure Vulnerability

Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Affected productsOffice Online Server, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems

Fixed versions16.0.10417.20175, https://aka.ms/OfficeSecurityReleases, 16.112.26081010, 16.0.5565.1001

Vendor guidance

Click to Run Release Notes Install KB5002884. Install KB5002903.

CVE-2026-68799

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-68797

Published Aug 11, 2026

HighCVSS 5.5

Microsoft Excel Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Affected productsOffice Online Server, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems

Fixed versions16.0.10417.20175, https://aka.ms/OfficeSecurityReleases, 16.112.26081010, 16.0.5565.1001

Vendor guidance

Click to Run Release Notes Install KB5002884. Install KB5002903.

CVE-2026-68797

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-66808

Published Aug 11, 2026

HighCVSS 8.8

Microsoft SharePoint Server Remote Code Execution Vulnerability

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Affected productsMicrosoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition

Fixed versions16.0.5565.1001, 16.0.10417.20198, 16.0.19725.20522

Vendor guidance

Install KB5002905. Install KB5002906. Install KB5002894. Install KB5002896. Install KB5002893.

CVE-2026-66808

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-66806

Published Aug 11, 2026

HighCVSS 5.5

Microsoft Office Word Information Disclosure Vulnerability

Off-by-one error in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

Affected productsMicrosoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems

Fixed versionshttps://aka.ms/OfficeSecurityReleases, 16.0.5565.1000

Vendor guidance

Click to Run Install KB5002901.

CVE-2026-66806

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-66805

Published Aug 11, 2026

HighCVSS 8.8

Microsoft SharePoint Server Remote Code Execution Vulnerability

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Affected productsMicrosoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition

Fixed versions16.0.5565.1001, 16.0.10417.20198, 16.0.20326.20190

Vendor guidance

Install KB5002905. Install KB5002906. Install KB5002894. Install KB5002896. Install KB5002927.

CVE-2026-66805

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-65810

Published Aug 11, 2026

HighCVSS 7.8

.NET Framework Elevation of Privilege Vulnerability

Relative path traversal in .NET Framework allows an unauthorized attacker to elevate privileges locally.

Affected productsMicrosoft .NET Framework 4.8.1 on Windows 11 version 26H1 for x64-based Systems, Microsoft .NET Framework 4.8.1 on Windows 11 Version 26H1 for ARM64-based Systems, Microsoft .NET Framework 3.5 on Windows 11 version 26H1 for x64-based Systems, Microsoft .NET Framework 3.5 on Windows 11 Version 26H1 for ARM64-based Systems

Fixed versions4.8.9344.0, 2.0.50727.9183 & 3.0.30729.9169, 4.8.4805.0, 2.0.50727.9070 & 3.0.30729.9068 & 4.8.4805.0

Vendor guidance

Install KB5120711. Install KB5120747. Install KB5120702. Install KB5120704. Install KB5120706. Install KB5120703. Install KB5120705. Install KB5120701. Install KB5120698. Install KB5120418. Install KB5120699. Install ...

CVE-2026-65810

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-65798

Published Aug 11, 2026

HighCVSS 6.7

Windows DNS Elevation of Privilege Vulnerability

Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9121, 10.0.20348.5499, 10.0.20348.5440, 10.0.19044.7663

Vendor guidance

CVE-2026-65798

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-65799

Published Aug 11, 2026

HighCVSS 6.7

Windows DNS Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows DNS allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9121, 10.0.20348.5499, 10.0.20348.5440, 10.0.19044.7663

Vendor guidance

CVE-2026-65799

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-65797

Published Aug 11, 2026

HighCVSS 6.7

Windows DNS Elevation of Privilege Vulnerability

Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9121, 10.0.20348.5499, 10.0.20348.5440, 10.0.19044.7663

Vendor guidance

CVE-2026-65797

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-65794

Published Aug 11, 2026

HighCVSS 6.5

Windows SMB Client Information Disclosure Vulnerability

Buffer over-read in Windows SMB Client allows an unauthorized attacker to disclose information over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9121, 10.0.20348.5499, 10.0.20348.5440, 10.0.19044.7663

Vendor guidance

CVE-2026-65794

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-65790

Published Aug 11, 2026

HighCVSS 7.8

Windows Message Queuing Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9121, 10.0.20348.5499, 10.0.20348.5440, 10.0.19044.7663

Vendor guidance

CVE-2026-65790

Read the vendor advisory Watch this product

Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources