Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed

11Vendor sources

18,544Advisories collected

6,565Published or updated in 30 days

8,317Marked critical or high

Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

AWS Security Bulletins 182 advisories

CurrentChecked 14 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Apple Security Releases 39 advisories

CurrentChecked 34 minutes ago

Checked hourly Browse this vendor's advisories Official source

Cisco Security Advisories 107 advisories

Check delayedChecked 29 days ago

Checked every 15 minutes Browse this vendor's advisories Official source

Citrix Security Bulletins 30 advisories

CurrentChecked 44 minutes ago

Checked hourly Browse this vendor's advisories Official source

Delinea Security Advisories 14 advisories

CurrentChecked 44 minutes ago

Checked hourly Browse this vendor's advisories Official source

Fortinet PSIRT Advisories 110 advisories

CurrentChecked 4 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Ivanti Security Advisories 10 advisories

CurrentChecked 14 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Microsoft Security Response Center 17,484 advisories

CurrentChecked about an hour ago

Checked every 6 hours Browse this vendor's advisories Official source

Palo Alto Networks Security Advisories 69 advisories

CurrentChecked 4 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

SonicWall PSIRT Advisories 12 advisories

Check delayedChecked 2 days ago

Checked hourly Browse this vendor's advisories Official source

Ubuntu Security Notices 487 advisories

CurrentChecked 4 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

18,544 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results

Microsoft Security Response CenterCVE-2026-57976

Published Jul 14, 2026

HighCVSS 6.5

Windows Active Directory Domain Services Denial of Service Vulnerability

Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9020, 10.0.20348.5386, 10.0.19044.7548, 10.0.19045.7548

Vendor guidance

Install KB5099538. Install KB5099540. Install KB5099539. Install KB5099536. Install KB5101650. Install KB5101649. Install KB5099535. Install KB5099445. Install KB5099444.

CVE-2026-57976

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-57973

Published Jul 14, 2026

HighCVSS 6.3

Windows Subsystem for Linux (WSL2) Kernel Tampering Vulnerability

Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to perform tampering locally.

Affected productsWindows Subsystem for Linux (WSL2)

Fixed versions2.7.10

Vendor guidance

Release Notes

CVE-2026-57973

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-57968

Published Jul 14, 2026

HighCVSS 7.8

Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability

Buffer over-read in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.

Affected productsWindows Subsystem for Linux (WSL2)

Fixed versions2.7.8

Vendor guidance

Release Notes

CVE-2026-57968

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-57108

Published Jul 14, 2026

HighCVSS 7.5

.NET Denial of Service Vulnerability

Access of resource using incompatible type ('type confusion') in .NET Core allows an unauthorized attacker to deny service over a network.

Affected products.NET 10.0 runtime installed on Linux, .NET 10.0 runtime installed on Mac OS, .NET 8.0 runtime installed on Windows, .NET 8.0 runtime installed on Linux

Fixed versions10.0.10, 8.0.29, 9.0.18

Vendor guidance

Install KB5104034. Install KB5104032. Install KB5104033.

CVE-2026-57108

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-57107

Published Jul 14, 2026

HighCVSS 7.8

Windows Admin Center Elevation of Privilege Vulnerability

Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges locally.

Affected productsWindows Admin Center

Fixed versions2.7.4

Vendor guidance

Release Notes

CVE-2026-57107

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-57102

Published Jul 14, 2026

HighCVSS 8.8

Visual Studio Code Security Feature Bypass Vulnerability

Inclusion of functionality from untrusted control sphere in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

Affected productsVisual Studio Code

Fixed versions1.128.1

Vendor guidance

Release Notes

CVE-2026-57102

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-57101

Published Jul 14, 2026

HighCVSS 7.1

Visual Studio Code Security Feature Bypass Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

Affected productsVisual Studio Code

Fixed versions1.128.1

Vendor guidance

Release Notes

CVE-2026-57101

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-57097

Published Jul 14, 2026

HighCVSS 6.4

Microsoft XML Security Feature Bypass Vulnerability

Untrusted search path in Microsoft XML allows an unauthorized attacker to bypass a security feature with a physical attack.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9020, 10.0.20348.5386, 10.0.19044.7548, 10.0.19045.7548

Vendor guidance

Install KB5099538. Install KB5099540. Install KB5099539. Install KB5099536. Install KB5101650. Install KB5101649. Install KB5099535. Install KB5099445. Install KB5099444.

CVE-2026-57097

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-57096

Published Jul 14, 2026

HighCVSS 7.8

Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9020, 10.0.20348.5386, 10.0.19044.7548, 10.0.19045.7548

Vendor guidance

Install KB5099538. Install KB5099540. Install KB5099539. Install KB5099536. Install KB5101650. Install KB5101649. Install KB5099535. Install KB5099444.

CVE-2026-57096

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-57093

Published Jul 14, 2026

HighCVSS 7.0

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9020, 10.0.20348.5386, 10.0.19044.7548, 10.0.19045.7548

Vendor guidance

Install KB5099538. Install KB5099540. Install KB5099539. Install KB5099536. Install KB5101650. Install KB5101649. Install KB5099535. Install KB5099445. Install KB5099444.

CVE-2026-57093

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-57089

Published Jul 14, 2026

HighCVSS 7.5

Windows SMB Server Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability

Use after free in Windows SMB Server Network Transport Driver (srvnet.sys) allows an unauthorized attacker to execute code over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9020, 10.0.20348.5386, 10.0.19044.7548, 10.0.19045.7548

Vendor guidance

Install KB5099538. Install KB5099540. Install KB5099539. Install KB5099536. Install KB5101650. Install KB5101649. Install KB5099535. Install KB5099445. Install KB5099444.

CVE-2026-57089

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-57088

Published Jul 14, 2026

HighCVSS 7.8

Extensible Storage Engine (ESENT) Elevation of Privilege Vulnerability

Improper access control in Extensible Storage Engine (ESENT) allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9020, 10.0.20348.5386, 10.0.26100.33158

Vendor guidance

Install KB5099538. Install KB5099540. Install KB5099536.

CVE-2026-57088

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-56649

Published Jul 14, 2026

HighCVSS 5.9

Windows Network File System Remote Code Execution Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Network File System allows an unauthorized attacker to execute code over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9020, 10.0.20348.5386, 10.0.19044.7548, 10.0.19045.7548

Vendor guidance

Install KB5099538. Install KB5099540. Install KB5099539. Install KB5099536. Install KB5101650. Install KB5101649. Install KB5099535. Install KB5099445. Install KB5099444.

CVE-2026-56649

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-56648

Published Jul 14, 2026

HighCVSS 7.5

Windows NFS Server Elevation of Privilege Vulnerability

Time-of-check time-of-use (toctou) race condition in Windows Network File System allows an authorized attacker to elevate privileges over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9020, 10.0.20348.5386, 10.0.19044.7548, 10.0.19045.7548

Vendor guidance

Install KB5099538. Install KB5099540. Install KB5099539. Install KB5099536. Install KB5101650. Install KB5101649. Install KB5099535. Install KB5099445. Install KB5099444.

CVE-2026-56648

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-56647

Published Jul 14, 2026

HighCVSS 8.8

Windows Remote Access Service Infrastructure Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Remote Access Service Infrastructure allows an authorized attacker to elevate privileges over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9020, 10.0.20348.5386, 10.0.19044.7548, 10.0.19045.7548

Vendor guidance

Install KB5099538. Install KB5099540. Install KB5099539. Install KB5099536. Install KB5101650. Install KB5101649. Install KB5099535. Install KB5099444.

CVE-2026-56647

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-56644

Published Jul 14, 2026

HighCVSS 7.8

DirectX Graphics Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9020, 10.0.20348.5386, 10.0.19044.7548, 10.0.19045.7548

Vendor guidance

Install KB5099538. Install KB5099540. Install KB5099539. Install KB5099536. Install KB5101650. Install KB5101649. Install KB5099535.

CVE-2026-56644

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-56643

Published Jul 14, 2026

HighCVSS 7.8

DirectX Graphics Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9020, 10.0.20348.5386, 10.0.19044.7548, 10.0.19045.7548

Vendor guidance

Install KB5099538. Install KB5099540. Install KB5099539. Install KB5099536. Install KB5101650. Install KB5101649. Install KB5099535.

CVE-2026-56643

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-56196

Published Jul 14, 2026

HighCVSS 8.8

Windows Admin Center (WAC) Remote Code Execution Vulnerability

Relative path traversal in Windows Admin Center allows an authorized attacker to execute code over a network.

Affected productsWindows Admin Center

Fixed versions2.7.4

Vendor guidance

Release Notes

CVE-2026-56196

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-56195

Published Jul 14, 2026

HighCVSS 5.5

Microsoft Office Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

Affected productsMicrosoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems

Fixed versionshttps://aka.ms/OfficeSecurityReleases, 16.111.26071215, 16.0.5561.1000

Vendor guidance

Click to Run Release Notes Install KB5002887.

CVE-2026-56195

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-56194

Published Jul 14, 2026

HighCVSS 8.8

Windows NFS Server Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate privileges over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9020, 10.0.20348.5386, 10.0.19044.7548, 10.0.19045.7548

Vendor guidance

Install KB5099538. Install KB5099540. Install KB5099539. Install KB5099536. Install KB5101650. Install KB5101649. Install KB5099535. Install KB5099445. Install KB5099444.

CVE-2026-56194

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-56193

Published Jul 14, 2026

HighCVSS 7.1

Microsoft Office Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

Fixed versionshttps://aka.ms/OfficeSecurityReleases, 16.111.26071215, 16.0.5561.1000

Vendor guidance

Click to Run Release Notes Install KB5002887.

CVE-2026-56193

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-56192

Published Jul 14, 2026

HighCVSS 5.5

Microsoft Office Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

Affected productsMicrosoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions

Fixed versions16.0.5561.1001, 16.0.10417.20175, https://aka.ms/OfficeSecurityReleases, 16.111.26071215

Vendor guidance

Click to Run Release Notes Install KB5002891. Install KB5002892. Install KB5002883. Install KB5002885. Install KB5002882. Install KB5002887.

CVE-2026-56192

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-56190

Published Jul 14, 2026

HighCVSS 9.8

Remote Desktop Protocol Remote Code Execution Vulnerability

Use of uninitialized resource in Windows RDP allows an unauthorized attacker to execute code over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9020, 10.0.20348.5386, 10.0.19044.7548, 10.0.19045.7548

Vendor guidance

Install KB5099538. Install KB5099540. Install KB5099539. Install KB5099536. Install KB5101650. Install KB5101649. Install KB5099535. Install KB5099445. Install KB5099444.

CVE-2026-56190

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-56187

Published Jul 14, 2026

HighCVSS 7.0

Windows MIDI Service Module Elevation of Privileges Vulnerability

Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

Affected productsWindows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems

Fixed versions10.0.26200.8875, 10.0.26100.8875, 10.0.28000.2525

Vendor guidance

Install KB5101650. Install KB5101649.

CVE-2026-56187

Read the vendor advisory Watch this product

Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources