Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed

11Vendor sources

18,545Advisories collected

6,566Published or updated in 30 days

8,317Marked critical or high

Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

AWS Security Bulletins 182 advisories

CurrentChecked 8 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Apple Security Releases 39 advisories

CurrentChecked 3 minutes ago

Checked hourly Browse this vendor's advisories Official source

Cisco Security Advisories 107 advisories

Check delayedChecked 29 days ago

Checked every 15 minutes Browse this vendor's advisories Official source

Citrix Security Bulletins 30 advisories

CurrentChecked 13 minutes ago

Checked hourly Browse this vendor's advisories Official source

Delinea Security Advisories 14 advisories

CurrentChecked 13 minutes ago

Checked hourly Browse this vendor's advisories Official source

Fortinet PSIRT Advisories 110 advisories

CurrentChecked 18 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Ivanti Security Advisories 10 advisories

CurrentChecked 8 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Microsoft Security Response Center 17,484 advisories

CurrentChecked about an hour ago

Checked every 6 hours Browse this vendor's advisories Official source

Palo Alto Networks Security Advisories 69 advisories

CurrentChecked 18 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

SonicWall PSIRT Advisories 12 advisories

Check delayedChecked 2 days ago

Checked hourly Browse this vendor's advisories Official source

Ubuntu Security Notices 488 advisories

CurrentChecked 18 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

18,545 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results

Microsoft Security Response CenterCVE-2026-55034

Published Jul 14, 2026

HighCVSS 7.3

Microsoft SharePoint Server Spoofing Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Affected productsMicrosoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition

Fixed versions16.0.5561.1001, 16.0.10417.20175, 16.0.19725.20434

Vendor guidance

Install KB5002891. Install KB5002883. Install KB5002882.

CVE-2026-55034

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-55032

Published Jul 14, 2026

HighCVSS 7.8

Microsoft Word Remote Code Execution Vulnerability

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Affected productsMicrosoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions

Fixed versions16.0.5561.1001, 16.0.10417.20175, https://aka.ms/OfficeSecurityReleases, 16.111.26071215

Vendor guidance

Click to Run Release Notes Install KB5002891. Install KB5002892. Install KB5002883. Install KB5002885. Install KB5002882. Install KB5002890.

CVE-2026-55032

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-55031

Published Jul 14, 2026

HighCVSS 7.8

Microsoft Excel Remote Code Execution Vulnerability

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Affected productsMicrosoft Office 365 for Mac, Office Online Server, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions

Fixed versions16.111.26071215, 16.0.10417.20175, https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001

Vendor guidance

Release Notes Click to Run Install KB5002884. Install KB5002886.

CVE-2026-55031

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-55030

Published Jul 14, 2026

HighCVSS 4.6

Microsoft SharePoint Server Spoofing Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Affected productsMicrosoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition

Fixed versions16.0.5561.1001, 16.0.10417.20175, 16.0.19725.20434

Vendor guidance

Install KB5002891. Install KB5002883. Install KB5002882.

CVE-2026-55030

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-55029

Published Jul 14, 2026

HighCVSS 7.8

Microsoft Excel Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Affected productsOffice Online Server, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems

Fixed versions16.0.10417.20175, https://aka.ms/OfficeSecurityReleases, 16.111.26071215, 16.0.5561.1001

Vendor guidance

Click to Run Release Notes Install KB5002884. Install KB5002886.

CVE-2026-55029

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-55028

Published Jul 14, 2026

HighCVSS 5.5

Microsoft Office Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

Affected productsMicrosoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions

Fixed versions16.0.5561.1001, 16.0.10417.20175, https://aka.ms/OfficeSecurityReleases, 16.111.26071215

Vendor guidance

Click to Run Release Notes Install KB5002891. Install KB5002892. Install KB5002883. Install KB5002885. Install KB5002882. Install KB5002887.

CVE-2026-55028

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-55027

Published Jul 14, 2026

HighCVSS 5.5

Microsoft Office Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

Affected productsMicrosoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions

Fixed versions16.0.5561.1001, 16.0.10417.20175, https://aka.ms/OfficeSecurityReleases, 16.111.26071215

Vendor guidance

Click to Run Release Notes Install KB5002891. Install KB5002892. Install KB5002883. Install KB5002885. Install KB5002882. Install KB5002887.

CVE-2026-55027

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-55026

Published Jul 14, 2026

HighCVSS 6.2

Microsoft Office Information Disclosure Vulnerability

Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose information locally.

Affected productsMicrosoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions

Fixed versions16.0.5561.1001, 16.0.10417.20175, https://aka.ms/OfficeSecurityReleases, 16.111.26071215

Vendor guidance

Click to Run Release Notes Install KB5002891. Install KB5002892. Install KB5002883. Install KB5002885. Install KB5002882. Install KB5002887.

CVE-2026-55026

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-55025

Published Jul 14, 2026

HighCVSS 7.8

Microsoft Excel Remote Code Execution Vulnerability

Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Affected productsOffice Online Server, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems

Fixed versions16.0.10417.20175, https://aka.ms/OfficeSecurityReleases, 16.111.26071215, 16.0.5561.1001

Vendor guidance

Click to Run Release Notes Install KB5002884. Install KB5002886.

CVE-2026-55025

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-55024

Published Jul 14, 2026

HighCVSS 7.8

Microsoft Excel Remote Code Execution Vulnerability

Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Affected productsMicrosoft Office 365 for Mac, Office Online Server, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions

Fixed versions16.111.26071215, 16.0.10417.20175, https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001

Vendor guidance

Release Notes Click to Run Install KB5002884. Install KB5002886.

CVE-2026-55024

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-55023

Published Jul 14, 2026

HighCVSS 5.5

Microsoft Office Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

Affected productsMicrosoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions

Fixed versions16.0.5561.1001, 16.0.10417.20175, https://aka.ms/OfficeSecurityReleases, 16.111.26071215

Vendor guidance

Click to Run Release Notes Install KB5002891. Install KB5002892. Install KB5002883. Install KB5002885. Install KB5002882. Install KB5002887.

CVE-2026-55023

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-55021

Published Jul 14, 2026

HighCVSS 7.3

Microsoft SharePoint Server Spoofing Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Affected productsMicrosoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition

Fixed versions16.0.5561.1001, 16.0.10417.20175, 16.0.19725.20434

Vendor guidance

Install KB5002891. Install KB5002883. Install KB5002882.

CVE-2026-55021

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-55020

Published Jul 14, 2026

HighCVSS 4.6

Microsoft SharePoint Server Spoofing Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Affected productsMicrosoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition

Fixed versions16.0.5561.1001, 16.0.10417.20175, 16.0.19725.20434

Vendor guidance

Install KB5002891. Install KB5002883. Install KB5002882.

CVE-2026-55020

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-55019

Published Jul 14, 2026

HighCVSS 4.6

Microsoft SharePoint Server Spoofing Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Affected productsMicrosoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition

Fixed versions16.0.5561.1001, 16.0.10417.20175, 16.0.19725.20434

Vendor guidance

Install KB5002891. Install KB5002883. Install KB5002882.

CVE-2026-55019

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-55017

Published Jul 14, 2026

HighCVSS 7.8

Microsoft Office Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

Affected productsMicrosoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems

Fixed versionshttps://aka.ms/OfficeSecurityReleases, 16.0.5561.1000

Vendor guidance

Click to Run Install KB5002273.

CVE-2026-55017

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-55016

Published Jul 14, 2026

HighCVSS 4.6

Microsoft SharePoint Server Spoofing Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Affected productsMicrosoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition

Fixed versions16.0.5561.1001, 16.0.10417.20175, 16.0.19725.20434

Vendor guidance

Install KB5002891. Install KB5002883. Install KB5002882.

CVE-2026-55016

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-55014

Published Jul 14, 2026

HighCVSS 7.8

Windows Remote Help Defense Elevation of Privilege Vulnerability

Improper access control in Windows Remote Help Defense allows an authorized attacker to elevate privileges locally.

Affected productsWindows Remote Help

Fixed versions5.2.1037.0

Vendor guidance

Release Notes

CVE-2026-55014

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-55009

Published Jul 14, 2026

HighCVSS 7.8

Microsoft Exchange Server Elevation of Privilege Vulnerability

Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.

Affected productsMicrosoft Exchange Server 2016 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 14, Microsoft Exchange Server Subscription Edition RTM, Microsoft Exchange Server 2019 Cumulative Update 15

Fixed versions15.01.2507.071, 15.02.1544.043, 15.02.2562.045, 15.02.1748.048

Vendor guidance

Install KB5103215. Install KB5103214. Install KB5103212. Install KB5103213.

CVE-2026-55009

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-55006

Published Jul 14, 2026

HighCVSS 7.8

Microsoft Exchange Server Elevation of Privilege Vulnerability

Insufficient granularity of access control in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.

Affected productsMicrosoft Exchange Server 2019 Cumulative Update 14, Microsoft Exchange Server 2019 Cumulative Update 15, Microsoft Exchange Server 2016 Cumulative Update 23, Microsoft Exchange Server Subscription Edition RTM

Fixed versions15.02.1544.043, 15.02.1748.048, 15.01.2507.071, 15.02.2562.045

Vendor guidance

Install KB5103214. Install KB5103213. Install KB5103215. Install KB5103212.

CVE-2026-55006

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-55005

Published Jul 14, 2026

HighCVSS 8.8

Microsoft Exchange Server Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network.

Affected productsMicrosoft Exchange Server 2016 Cumulative Update 23, Microsoft Exchange Server Subscription Edition RTM, Microsoft Exchange Server 2019 Cumulative Update 15, Microsoft Exchange Server 2019 Cumulative Update 14

Fixed versions15.01.2507.071, 15.02.2562.045, 15.02.1748.048, 15.02.1544.043

Vendor guidance

Install KB5103215. Install KB5103212. Install KB5103213. Install KB5103214.

CVE-2026-55005

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-55004

Published Jul 14, 2026

HighCVSS 7.8

Windows Print Configuration Elevation of Privilege Vulnerability

Double free in Microsoft Printer Drivers allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9020, 10.0.20348.5386, 10.0.19044.7548, 10.0.19045.7548

Vendor guidance

Install KB5099538. Install KB5099540. Install KB5099539. Install KB5099536. Install KB5101650. Install KB5101649. Install KB5099535. Install KB5099445. Install KB5099444.

CVE-2026-55004

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-55003

Published Jul 14, 2026

HighCVSS 6.5

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9020, 10.0.20348.5386, 10.0.19044.7548, 10.0.19045.7548

Vendor guidance

Install KB5099538. Install KB5099540. Install KB5099539. Install KB5099536. Install KB5101650. Install KB5101649. Install KB5099535. Install KB5099445. Install KB5099444.

CVE-2026-55003

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-55002

Published Jul 14, 2026

HighCVSS 8.8

Microsoft SQL Server Elevation of Privilege Vulnerability

External control of file name or path in SQL Server allows an authorized attacker to elevate privileges over a network.

Affected productsMicrosoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (CU 32), Microsoft SQL Server 2025 for x64-based Systems (CU6), Microsoft SQL Server 2025 for x64-based Systems (GDR)

Fixed versions15.0.2180.2, 15.0.4480.2, 17.0.4060.2, 17.0.1125.2

Vendor guidance

Install KB5102336. Install KB5102335. Install KB5101346. Install KB5102333. Install KB5102334. Install KB5101347. Install KB5102340. Install KB5102339. Install KB5102338. Install KB5102337.

CVE-2026-55002

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-55001

Published Jul 14, 2026

HighCVSS 7.8

Active Directory Domain Services Elevation of Privilege Vulnerability

Improper certificate validation in Windows Active Directory allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9020, 10.0.20348.5386, 10.0.26100.33158, 10.0.14393.9339

Vendor guidance

Install KB5099538. Install KB5099540. Install KB5099536. Install KB5099535.

CVE-2026-55001

Read the vendor advisory Watch this product

Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources