Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed

11Vendor sources

18,986Advisories collected

6,816Published or updated in 30 days

8,727Marked critical or high

Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

AWS Security Bulletins 182 advisories

CurrentChecked 5 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Apple Security Releases 40 advisories

CurrentChecked about an hour ago

Checked hourly Browse this vendor's advisories Official source

Cisco Security Advisories 107 advisories

Check delayedChecked 31 days ago

Checked every 15 minutes Browse this vendor's advisories Official source

Citrix Security Bulletins 30 advisories

CurrentChecked about an hour ago

Checked hourly Browse this vendor's advisories Official source

Delinea Security Advisories 14 advisories

CurrentChecked about an hour ago

Checked hourly Browse this vendor's advisories Official source

Fortinet PSIRT Advisories 112 advisories

CurrentChecked 10 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Ivanti Security Advisories 10 advisories

CurrentChecked 5 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Microsoft Security Response Center 17,903 advisories

CurrentChecked 2 hours ago

Checked every 6 hours Browse this vendor's advisories Official source

Palo Alto Networks Security Advisories 69 advisories

CurrentChecked 10 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

SonicWall PSIRT Advisories 12 advisories

Check delayedChecked 3 days ago

Checked hourly Browse this vendor's advisories Official source

Ubuntu Security Notices 507 advisories

CurrentChecked 10 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

18,986 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results

Microsoft Security Response CenterCVE-2026-11167

Published Jun 9, 2026

Severity not listed

Chromium: CVE-2026-11167 Inappropriate implementation in WebView

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.53

Vendor guidance

Release Notes

CVE-2026-11167

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-11007

Published Jun 9, 2026

Severity not listed

Chromium: CVE-2026-11007 Insufficient validation of untrusted input in WebView

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.53

Vendor guidance

Release Notes

CVE-2026-11007

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-10953

Published Jun 9, 2026

Severity not listed

Chromium: CVE-2026-10953 Use after free in Core

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.53

Vendor guidance

Release Notes

CVE-2026-10953

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-11163

Published Jun 9, 2026

Severity not listed

Chromium: CVE-2026-11163 Use after free in Messages

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.53

Vendor guidance

Release Notes

CVE-2026-11163

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-11270

Published Jun 9, 2026

Severity not listed

Chromium: CVE-2026-11270 Inappropriate implementation in UI

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.53

Vendor guidance

Release Notes

CVE-2026-11270

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-11215

Published Jun 9, 2026

Severity not listed

Chromium: CVE-2026-11215 Inappropriate implementation in Cronet

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.53

Vendor guidance

Release Notes

CVE-2026-11215

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-11108

Published Jun 9, 2026

Severity not listed

Chromium: CVE-2026-11108 Inappropriate implementation in NFC

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.53

Vendor guidance

Release Notes

CVE-2026-11108

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-10892

Published Jun 9, 2026

Severity not listed

Chromium: CVE-2026-10892 Out of bounds write in GPU

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.53

Vendor guidance

Release Notes

CVE-2026-10892

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-11263

Published Jun 9, 2026

Severity not listed

Chromium: CVE-2026-11263 Insufficient policy enforcement in WebAuthentication

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.53

Vendor guidance

Release Notes

CVE-2026-11263

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-11045

Published Jun 9, 2026

Severity not listed

Chromium: CVE-2026-11045 Insufficient validation of untrusted input in GPU

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.53

Vendor guidance

Release Notes

CVE-2026-11045

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-11097

Published Jun 9, 2026

Severity not listed

Chromium: CVE-2026-11097 Inappropriate implementation in WebView

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.53

Vendor guidance

Release Notes

CVE-2026-11097

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-10883

Published Jun 9, 2026

Severity not listed

Chromium: CVE-2026-10883 Out of bounds write in ANGLE

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.53

Vendor guidance

Release Notes

CVE-2026-10883

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-50512

Published Jun 9, 2026

HighCVSS 7.8

Microsoft PC Manager Elevation of Privilege Vulnerability

Missing authentication for critical function in Microsoft PC Manager allows an authorized attacker to elevate privileges locally.

Affected productsMicrosoft PC Manager

Fixed versions3.21.6.0

Vendor guidance

Release Notes

CVE-2026-50512

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-50507

Published Jun 9, 2026

HighCVSS 6.8

Windows BitLocker Security Feature Bypass Vulnerability

Missing authentication for critical function in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.8880, 10.0.20348.5256, 10.0.19044.7417, 10.0.19045.7417

Vendor guidance

Install KB5094123. Install KB5094128. Install KB5094127. Install KB5094126. Install KB5093998. Install KB5095051. Install KB5094122. Install KB5094041.

CVE-2026-50507

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-45650

Published Jun 9, 2026

HighCVSS 4.3

Microsoft Bing Search Spoofing Vulnerability

User interface (ui) misrepresentation of critical information in Microsoft Bing allows an unauthorized attacker to perform spoofing over a network.

Affected productsMicrosoft Bing Search for Android

Fixed versions33.3

Vendor guidance

Release Notes

CVE-2026-45650

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-45585

Updated Jun 9, 2026

HighCVSS 6.8

Windows BitLocker Security Feature Bypass Vulnerability

Microsoft is aware of a security feature bypass vulnerability in Windows publicly referred to as "YellowKey". The proof of concept for this vulnerability has been made public violating coordinated vulnerability best practices. We are issuing this CVE to provide mitigation guid...

Affected productsWindows Server 2025 (Server Core installation), Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows Server 2025

Fixed versions10.0.26100.32995, 10.0.26200.8655, 10.0.26100.8655, 10.0.28000.2269

Vendor guidance

Install KB5094125. Install KB5094126. Install KB5095051.

CVE-2026-45585

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2024-43582

Updated Jun 9, 2026

CriticalCVSS 8.1

Remote Desktop Protocol Server Remote Code Execution Vulnerability

How could an attacker exploit this vulnerability? To exploit this vulnerability, an unauthenticated attacker would need to send malformed packets to a websocket listening port. This could result in remote code execution on the server side with the same permissions as the webso...

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.6414, 10.0.20348.2762, 10.0.22000.3260, 10.0.19044.5011

Vendor guidance

Install KB5044277. Install KB5044281. Install KB5044280. Install KB5044273. Install KB5044285. Install KB5044288. Install KB5044284. Install KB5095051.

CVE-2024-43582

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2024-49132

Updated Jun 9, 2026

CriticalCVSS 8.1

Windows Remote Desktop Services Remote Code Execution Vulnerability

How could an attacker exploit this vulnerability? An attacker could successfully exploit this vulnerability by attempting to connect to a system with the Remote Desktop Gateway role, triggering the race condition to create a use-after-free scenario, and then leveraging this to...

Affected productsWindows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems

Fixed versions10.0.28000.2269, 10.0.17763.6659, 10.0.20348.2966, 10.0.20348.2908

Vendor guidance

Install KB5095051. Install KB5048661. Install KB5048654. Install KB5048800. Install KB5048652. Install KB5048685. Install KB5048667. Install KB5048794. Install KB5048653.

CVE-2024-49132

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2024-49123

Updated Jun 9, 2026

CriticalCVSS 8.1

Windows Remote Desktop Services Remote Code Execution Vulnerability

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.6659, 10.0.20348.2966, 10.0.20348.2908, 10.0.19044.5247

Vendor guidance

Install KB5048661. Install KB5048654. Install KB5048800. Install KB5048652. Install KB5048685. Install KB5048667. Install KB5048794. Install KB5048653. Install KB5095051.

CVE-2024-49123

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-48574

Published Jun 9, 2026

CriticalCVSS 7.8

Windows Media Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.8880, 10.0.20348.5256, 10.0.19044.7417, 10.0.19045.7417

Vendor guidance

Install KB5094123. Install KB5094128. Install KB5094127. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051. Install KB5094122. Install KB5094042. Install KB5094041.

CVE-2026-48574

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-48563

Published Jun 9, 2026

CriticalCVSS 7.5

Remote Desktop Client Remote Code Execution Vulnerability

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.8880, 10.0.20348.5256, 10.0.19044.7417, 10.0.19045.7417

Vendor guidance

Install KB5094123. Install KB5094128. Install KB5094127. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051.

CVE-2026-48563

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-47654

Published Jun 9, 2026

CriticalCVSS 7.5

Remote Desktop Client Remote Code Execution Vulnerability

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Affected productsWindows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation)

Fixed versions10.0.17763.8880, 10.0.20348.5256, 10.0.26100.32995, 10.0.14393.9234

Vendor guidance

Install KB5094123. Install KB5094128. Install KB5094125. Install KB5094122.

CVE-2026-47654

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-47652

Published Jun 9, 2026

CriticalCVSS 8.2

Windows Hyper-V Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.

Affected productsWindows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025 (Server Core installation), Windows 11 Version 25H2 for ARM64-based Systems

Fixed versions10.0.20348.5256, 10.0.26100.32995, 10.0.26200.8655, 10.0.22631.7219

Vendor guidance

Install KB5094128. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051.

CVE-2026-47652

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-47635

Published Jun 9, 2026

CriticalCVSS 8.4

Microsoft Outlook and Word Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

Affected productsMicrosoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions

Fixed versionshttps://aka.ms/OfficeSecurityReleases

Vendor guidance

Click to Run

CVE-2026-47635

Read the vendor advisory Watch this product

Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources