Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed

11Vendor sources

18,986Advisories collected

6,818Published or updated in 30 days

8,727Marked critical or high

Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

AWS Security Bulletins 182 advisories

CurrentChecked 11 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Apple Security Releases 40 advisories

CurrentChecked 15 minutes ago

Checked hourly Browse this vendor's advisories Official source

Cisco Security Advisories 107 advisories

Check delayedChecked 30 days ago

Checked every 15 minutes Browse this vendor's advisories Official source

Citrix Security Bulletins 30 advisories

CurrentChecked 16 minutes ago

Checked hourly Browse this vendor's advisories Official source

Delinea Security Advisories 14 advisories

CurrentChecked 15 minutes ago

Checked hourly Browse this vendor's advisories Official source

Fortinet PSIRT Advisories 112 advisories

CurrentChecked 15 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Ivanti Security Advisories 10 advisories

CurrentChecked 11 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Microsoft Security Response Center 17,903 advisories

CurrentChecked 5 hours ago

Checked every 6 hours Browse this vendor's advisories Official source

Palo Alto Networks Security Advisories 69 advisories

CurrentChecked 15 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

SonicWall PSIRT Advisories 12 advisories

Check delayedChecked 3 days ago

Checked hourly Browse this vendor's advisories Official source

Ubuntu Security Notices 507 advisories

CurrentChecked 15 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

18,986 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results

Microsoft Security Response CenterCVE-2026-12460

Published Jun 19, 2026

Severity not listed

Chromium: CVE-2026-12460 Insufficient policy enforcement in File System Access

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.80

Vendor guidance

Release Notes

CVE-2026-12460

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-12459

Published Jun 19, 2026

Severity not listed

Chromium: CVE-2026-12459 Inappropriate implementation in Serial

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.80

Vendor guidance

Release Notes

CVE-2026-12459

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-12458

Published Jun 19, 2026

Severity not listed

Chromium: CVE-2026-12458 Incorrect security UI in Passwords

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.80

Vendor guidance

Release Notes

CVE-2026-12458

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-12457

Published Jun 19, 2026

Severity not listed

Chromium: CVE-2026-12457 Insufficient data validation in Extensions

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.80

Vendor guidance

Release Notes

CVE-2026-12457

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-12456

Published Jun 19, 2026

Severity not listed

Chromium: CVE-2026-12456 Insufficient validation of untrusted input in Extensions

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.80

Vendor guidance

Release Notes

CVE-2026-12456

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-12455

Published Jun 19, 2026

Severity not listed

Chromium: CVE-2026-12455 Use after free in Tab Strip

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.80

Vendor guidance

Release Notes

CVE-2026-12455

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-12453

Published Jun 19, 2026

Severity not listed

Chromium: CVE-2026-12453 Insufficient validation of untrusted input in Input

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.80

Vendor guidance

Release Notes

CVE-2026-12453

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-12452

Published Jun 19, 2026

Severity not listed

Chromium: CVE-2026-12452 Use after free in Downloads

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.80

Vendor guidance

Release Notes

CVE-2026-12452

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-12451

Published Jun 19, 2026

Severity not listed

Chromium: CVE-2026-12451 Use after free in DigitalCredentials

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.80

Vendor guidance

Release Notes

CVE-2026-12451

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-12447

Published Jun 19, 2026

Severity not listed

Chromium: CVE-2026-12447 Heap buffer overflow in WebRTC

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.80

Vendor guidance

Release Notes

CVE-2026-12447

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-12446

Published Jun 19, 2026

Severity not listed

Chromium: CVE-2026-12446 Insufficient data validation in Passwords

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.80

Vendor guidance

Release Notes

CVE-2026-12446

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-12445

Published Jun 19, 2026

Severity not listed

Chromium: CVE-2026-12445 Use after free in Extensions

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.80

Vendor guidance

Release Notes

CVE-2026-12445

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-12443

Published Jun 19, 2026

Severity not listed

Chromium: CVE-2026-12443 Use after free in Web Authentication

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.80

Vendor guidance

Release Notes

CVE-2026-12443

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-12441

Published Jun 19, 2026

Severity not listed

Chromium: CVE-2026-12441 Use after free in File Input

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.80

Vendor guidance

Release Notes

CVE-2026-12441

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-12440

Published Jun 19, 2026

Severity not listed

Chromium: CVE-2026-12440 Use after free in DigitalCredentials

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.80

Vendor guidance

Release Notes

CVE-2026-12440

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-12439

Published Jun 19, 2026

Severity not listed

Chromium: CVE-2026-12439 Use after free in Digital Credentials

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.80

Vendor guidance

Release Notes

CVE-2026-12439

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-45474

Updated Jun 19, 2026

CriticalCVSS 8.4

Microsoft Office Remote Code Execution Vulnerability

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

Affected productsMicrosoft Office 365 for Mac, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems

Fixed versions16.110.26061317, https://aka.ms/OfficeSecurityReleases, 16.0.20131.20024, 16.0.5556.1005

Vendor guidance

Release Notes Click to Run Install KB5002878.

CVE-2026-45474

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-45472

Updated Jun 19, 2026

CriticalCVSS 8.4

Microsoft Office Remote Code Execution Vulnerability

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

Affected productsMicrosoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems

Fixed versionshttps://aka.ms/OfficeSecurityReleases, 16.110.26061317, 16.0.5556.1005, 16.0.20131.20024

Vendor guidance

Click to Run Release Notes Install KB5002878.

CVE-2026-45472

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-45463

Updated Jun 19, 2026

CriticalCVSS 8.4

Microsoft Office Remote Code Execution Vulnerability

Integer underflow (wrap or wraparound) in Microsoft Office allows an unauthorized attacker to execute code locally.

Affected productsMicrosoft Office 365 for Mac, Microsoft Office for Android, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions

Fixed versions16.110.26061317, 16.0.20131.20024, https://aka.ms/OfficeSecurityReleases, 16.0.5556.1005

Vendor guidance

Release Notes Click to Run Install KB5002878.

CVE-2026-45463

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-45461

Updated Jun 19, 2026

CriticalCVSS 8.4

Microsoft Office Remote Code Execution Vulnerability

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

Affected productsMicrosoft Office for Android, Microsoft Office 365 for Mac, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions

Fixed versions16.0.20131.20024, 16.110.26061317, https://aka.ms/OfficeSecurityReleases, 16.0.5556.1005

Vendor guidance

Release Notes Click to Run Install KB5002878.

CVE-2026-45461

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-45460

Updated Jun 19, 2026

CriticalCVSS 4.7

Microsoft Office Information Disclosure Vulnerability

Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information locally.

Affected productsMicrosoft Office for Android, Microsoft Office 365 for Mac, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions

Fixed versions16.0.20131.20024, 16.110.26061317, https://aka.ms/OfficeSecurityReleases

Vendor guidance

Release Notes Click to Run

CVE-2026-45460

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-45458

Updated Jun 19, 2026

CriticalCVSS 8.4

Microsoft Outlook and Word Remote Code Execution Vulnerability

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

Affected productsMicrosoft Office 365 for Mac, Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft Office 2019 for 32-bit editions

Fixed versions16.110.26061317, 16.0.5556.1005, 16.0.5556.1002, 16.0.10417.20153

Vendor guidance

Release Notes Click to Run Install KB5002880. Install KB5002881. Install KB5002874. Install KB5002876. Install KB5002873. Install KB5002879.

CVE-2026-45458

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-45456

Updated Jun 19, 2026

CriticalCVSS 8.4

Microsoft Outlook and Word Remote Code Execution Vulnerability

Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.

Affected productsMicrosoft Office 365 for Mac, Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft Office 2019 for 32-bit editions

Fixed versions16.110.26061317, 16.0.5556.1005, 16.0.5556.1002, 16.0.10417.20153

Vendor guidance

Release Notes Click to Run Install KB5002880. Install KB5002881. Install KB5002874. Install KB5002876. Install KB5002873. Install KB5002879.

CVE-2026-45456

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-44812

Updated Jun 19, 2026

CriticalCVSS 7.8

Windows Graphics Component Remote Code Execution Vulnerability

Integer overflow or wraparound in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.8880, 10.0.20348.5256, 10.0.19044.7417, 10.0.19045.7417

Vendor guidance

Release Notes Install KB5094123. Install KB5094128. Install KB5094127. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051. Install KB5094122. Install KB5094042. Install KB5094041.

CVE-2026-44812

Read the vendor advisory Watch this product

Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources