Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed

11Vendor sources

18,545Advisories collected

6,566Published or updated in 30 days

8,317Marked critical or high

Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

AWS Security Bulletins 182 advisories

CurrentChecked just now

Checked every 15 minutes Browse this vendor's advisories Official source

Apple Security Releases 39 advisories

CurrentChecked 15 minutes ago

Checked hourly Browse this vendor's advisories Official source

Cisco Security Advisories 107 advisories

Check delayedChecked 29 days ago

Checked every 15 minutes Browse this vendor's advisories Official source

Citrix Security Bulletins 30 advisories

CurrentChecked 25 minutes ago

Checked hourly Browse this vendor's advisories Official source

Delinea Security Advisories 14 advisories

CurrentChecked 25 minutes ago

Checked hourly Browse this vendor's advisories Official source

Fortinet PSIRT Advisories 110 advisories

CurrentChecked 10 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Ivanti Security Advisories 10 advisories

CurrentChecked just now

Checked every 15 minutes Browse this vendor's advisories Official source

Microsoft Security Response Center 17,484 advisories

CurrentChecked 2 hours ago

Checked every 6 hours Browse this vendor's advisories Official source

Palo Alto Networks Security Advisories 69 advisories

CurrentChecked 10 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

SonicWall PSIRT Advisories 12 advisories

Check delayedChecked 2 days ago

Checked hourly Browse this vendor's advisories Official source

Ubuntu Security Notices 488 advisories

CurrentChecked 10 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

18,545 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results

Microsoft Security Response CenterCVE-2026-50690

Published Jul 14, 2026

HighCVSS 5.5

Windows SMB Information Disclosure Vulnerability

Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9020, 10.0.20348.5386, 10.0.19044.7548, 10.0.19045.7548

Vendor guidance

Install KB5099538. Install KB5099540. Install KB5099539. Install KB5099536. Install KB5101650. Install KB5101649. Install KB5099535. Install KB5099445. Install KB5099444.

CVE-2026-50690

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-50689

Published Jul 14, 2026

HighCVSS 7.8

Windows Clipboard Server Elevation of Privilege Vulnerability

Use after free in Windows Clipboard Server allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9020, 10.0.20348.5386, 10.0.19044.7548, 10.0.19045.7548

Vendor guidance

Install KB5099538. Install KB5099540. Install KB5099539. Install KB5099536. Install KB5101650. Install KB5101649.

CVE-2026-50689

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-50686

Published Jul 14, 2026

HighCVSS 8.1

Windows OLE Remote Code Execution Vulnerability

Access of resource using incompatible type ('type confusion') in Windows OLE allows an unauthorized attacker to execute code over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9020, 10.0.20348.5386, 10.0.19044.7548, 10.0.19045.7548

Vendor guidance

Install KB5099538. Install KB5099540. Install KB5099539. Install KB5099536. Install KB5101650. Install KB5101649. Install KB5099535. Install KB5099444.

CVE-2026-50686

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-50685

Published Jul 14, 2026

HighCVSS 7.5

Windows DHCP Server Remote Code Execution Vulnerability

Double free in Windows DHCP Server allows an authorized attacker to execute code over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2022

Fixed versions10.0.17763.9020, 10.0.20348.5386, 10.0.26100.33158, 10.0.14393.9339

Vendor guidance

Install KB5099538. Install KB5099540. Install KB5099536. Install KB5099535. Install KB5099445. Install KB5099444.

CVE-2026-50685

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-50684

Published Jul 14, 2026

HighCVSS 4.8

Active Directory Federation Server Spoofing Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Active Directory Federation Services (AD FS) allows an authorized attacker to perform spoofing over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9020, 10.0.20348.5386, 10.0.26100.33158, 10.0.14393.9339

Vendor guidance

Install KB5099538. Install KB5099540. Install KB5099536. Install KB5099535. Install KB5099445. Install KB5099444.

CVE-2026-50684

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-50682

Published Jul 14, 2026

HighCVSS 7.1

Active Directory Denial of Service Vulnerability

Out-of-bounds read in Windows Active Directory allows an authorized attacker to deny service over a network.

Affected productsWindows Server 2022, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems

Fixed versions10.0.20348.5386, 10.0.19044.7548, 10.0.19045.7548, 10.0.26100.33158

Vendor guidance

Install KB5099540. Install KB5099539. Install KB5099536. Install KB5101650. Install KB5101649.

CVE-2026-50682

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-50681

Published Jul 14, 2026

HighCVSS 5.5

Windows Secure Channel Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9020, 10.0.20348.5386, 10.0.19044.7548, 10.0.19045.7548

Vendor guidance

Install KB5099538. Install KB5099540. Install KB5099539. Install KB5099536. Install KB5101650. Install KB5101649. Install KB5099535.

CVE-2026-50681

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-50678

Published Jul 14, 2026

HighCVSS 6.6

Microsoft Excel Information Disclosure Vulnerability

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Affected productsOffice Online Server, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems

Fixed versions16.0.10417.20175, https://aka.ms/OfficeSecurityReleases, 16.111.26071215, 16.0.5561.1001

Vendor guidance

Click to Run Release Notes Install KB5002884. Install KB5002886.

CVE-2026-50678

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-50675

Published Jul 14, 2026

HighCVSS 7.8

Microsoft Excel Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Affected productsOffice Online Server, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems

Fixed versions16.0.10417.20175, https://aka.ms/OfficeSecurityReleases, 16.111.26071215, 16.0.5561.1001

Vendor guidance

Click to Run Release Notes Install KB5002884. Install KB5002886.

CVE-2026-50675

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-50674

Published Jul 14, 2026

HighCVSS 7.0

Windows USB Print Driver Elevation of Privilege Vulnerability

Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

Affected productsWindows Server 2025 (Server Core installation), Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems

Fixed versions10.0.26100.33158, 10.0.26200.8875, 10.0.26100.8875, 10.0.28000.2525

Vendor guidance

Install KB5099536. Install KB5101650. Install KB5101649.

CVE-2026-50674

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-50673

Published Jul 14, 2026

HighCVSS 7.8

Windows Kernel Elevation of Privilege Vulnerability

Null pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9020, 10.0.20348.5386, 10.0.19044.7548, 10.0.19045.7548

Vendor guidance

Install KB5099538. Install KB5099540. Install KB5099539. Install KB5099536. Install KB5101650. Install KB5101649. Install KB5099535. Install KB5099445. Install KB5099444.

CVE-2026-50673

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-50672

Published Jul 14, 2026

HighCVSS 7.0

Windows NTFS Elevation of Privilege Vulnerability

Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9020, 10.0.20348.5386, 10.0.19044.7548, 10.0.19045.7548

Vendor guidance

Install KB5099538. Install KB5099540. Install KB5099539. Install KB5099536. Install KB5101650. Install KB5101649.

CVE-2026-50672

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-50670

Published Jul 14, 2026

HighCVSS 8.8

Windows Win32k Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9020, 10.0.20348.5386, 10.0.19044.7548, 10.0.19045.7548

Vendor guidance

Install KB5099538. Install KB5099540. Install KB5099539. Install KB5099536. Install KB5101650. Install KB5101649.

CVE-2026-50670

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-50669

Published Jul 14, 2026

HighCVSS 7.0

Windows Telephony Server Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9020, 10.0.20348.5386, 10.0.19044.7548, 10.0.19045.7548

Vendor guidance

Install KB5099538. Install KB5099540. Install KB5099539. Install KB5099536. Install KB5101650. Install KB5101649. Install KB5099535. Install KB5099445. Install KB5099444.

CVE-2026-50669

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-50668

Published Jul 14, 2026

HighCVSS 6.8

Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to elevate privileges with a physical attack.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9020, 10.0.20348.5386, 10.0.19044.7548, 10.0.19045.7548

Vendor guidance

Install KB5099538. Install KB5099540. Install KB5099539. Install KB5099536. Install KB5101650. Install KB5101649. Install KB5099535.

CVE-2026-50668

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-50667

Published Jul 14, 2026

HighCVSS 7.8

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows NTFS allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9020, 10.0.20348.5386, 10.0.19044.7548, 10.0.19045.7548

Vendor guidance

Install KB5099538. Install KB5099540. Install KB5099539. Install KB5099536. Install KB5101650. Install KB5101649. Install KB5099535. Install KB5099445. Install KB5099444.

CVE-2026-50667

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-50666

Published Jul 14, 2026

HighCVSS 8.8

Windows Remote Access Elevation of Privilege Vulnerability

Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9020, 10.0.20348.5386, 10.0.19044.7548, 10.0.19045.7548

Vendor guidance

Install KB5099538. Install KB5099540. Install KB5099539. Install KB5099536. Install KB5101650. Install KB5101649. Install KB5099535. Install KB5099444.

CVE-2026-50666

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-50665

Published Jul 14, 2026

HighCVSS 7.8

Microsoft Office Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

Affected productsMicrosoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems

Fixed versionshttps://aka.ms/OfficeSecurityReleases, 16.111.26071215, 16.0.5561.1000

Vendor guidance

Click to Run Release Notes Install KB5002887.

CVE-2026-50665

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-50663

Published Jul 14, 2026

HighCVSS 8.8

Game: Age of Empires II: Definitive Edition Remote Code Execution Vulnerability

Relative path traversal in Age of Empires II: Definitive Edition Game allows an unauthorized attacker to execute code over a network.

Affected productsAge of Empires II: Definitive Edition Game

Fixed versions101.103.46651.0

Vendor guidance

Release Notes

CVE-2026-50663

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-50658

Published Jul 14, 2026

HighCVSS 7.0

Microsoft Defender for Endpoint for Mac Elevation of Privilege Vulnerability

Time-of-check time-of-use (toctou) race condition in Microsoft Defender allows an authorized attacker to elevate privileges locally.

Affected productsMicrosoft Defender for Endpoint for Mac

Fixed versions101.26042.0020

Vendor guidance

Release Notes

CVE-2026-50658

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-50657

Published Jul 14, 2026

HighCVSS 4.7

Microsoft Defender for Endpoint for Mac Information Disclosure Vulnerability

Exposure of private personal information to an unauthorized actor in Microsoft Defender allows an authorized attacker to disclose information locally.

Affected productsMicrosoft Defender for Endpoint for Mac

Fixed versions101.26042.0020

Vendor guidance

Release Notes

CVE-2026-50657

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-50651

Published Jul 14, 2026

HighCVSS 7.5

.NET Denial of Service Vulnerability

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.

Affected products.NET 10.0 runtime installed on Mac OS, .NET 10.0 runtime installed on Linux, Microsoft Visual Studio 2022 version 17.12, .NET 8.0 runtime installed on Windows

Fixed versions10.0.10, 17.12.22, 8.0.29, 9.0.18

Vendor guidance

Release Notes Install KB5104034. Install KB5104032. Install KB5104033.

CVE-2026-50651

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-50528

Published Jul 14, 2026

HighCVSS 8.2

.NET Security Feature Bypass Vulnerability

Incorrect authorization in .NET allows an unauthorized attacker to bypass a security feature over a network.

Affected productsMicrosoft Visual Studio 2022 version 17.12, .NET 10.0 runtime installed on Linux, .NET 10.0 runtime installed on Mac OS, .NET 8.0 runtime installed on Linux

Fixed versions17.12.22, 10.0.10, 8.0.29, 9.0.18

Vendor guidance

Release Notes Install KB5104034. Install KB5104032. Install KB5104033.

CVE-2026-50528

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-50526

Published Jul 14, 2026

HighCVSS 7.0

.NET Tampering Vulnerability

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to perform tampering locally.

Affected productsMicrosoft Visual Studio 2022 version 17.12, .NET 9.0 runtime installed on Mac OS, .NET 8.0 runtime installed on Mac OS, .NET 9.0 runtime installed on Linux

Fixed versions17.12.22, 9.0.18, 8.0.29, 10.0.10

Vendor guidance

Release Notes Install KB5104033. Install KB5104032. Install KB5104034.

CVE-2026-50526

Read the vendor advisory Watch this product

Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources