Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed

11Vendor sources

18,986Advisories collected

6,816Published or updated in 30 days

8,727Marked critical or high

Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

AWS Security Bulletins 182 advisories

CurrentChecked 11 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Apple Security Releases 40 advisories

CurrentChecked just now

Checked hourly Browse this vendor's advisories Official source

Cisco Security Advisories 107 advisories

Check delayedChecked 31 days ago

Checked every 15 minutes Browse this vendor's advisories Official source

Citrix Security Bulletins 30 advisories

Check delayedChecked about an hour ago

Checked hourly Browse this vendor's advisories Official source

Delinea Security Advisories 14 advisories

CurrentChecked just now

Checked hourly Browse this vendor's advisories Official source

Fortinet PSIRT Advisories 112 advisories

CurrentChecked 16 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Ivanti Security Advisories 10 advisories

CurrentChecked 11 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Microsoft Security Response Center 17,903 advisories

CurrentChecked 2 hours ago

Checked every 6 hours Browse this vendor's advisories Official source

Palo Alto Networks Security Advisories 69 advisories

CurrentChecked 16 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

SonicWall PSIRT Advisories 12 advisories

Check delayedChecked 3 days ago

Checked hourly Browse this vendor's advisories Official source

Ubuntu Security Notices 507 advisories

CurrentChecked 16 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

18,986 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results

Microsoft Security Response CenterCVE-2026-47291

Published Jun 9, 2026

CriticalCVSS 9.8

HTTP.sys Remote Code Execution Vulnerability

Integer overflow or wraparound in Windows HTTP.sys allows an unauthorized attacker to execute code over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.8880, 10.0.20348.5256, 10.0.19044.7417, 10.0.19045.7417

Vendor guidance

To help protect against this vulnerability prior to installing the June 2026 security updates for your operating system, you may need to modify the MaxRequestBytes registry value used by the Windows HTTP stack if it i...

CVE-2026-47291

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-47289

Published Jun 9, 2026

CriticalCVSS 8.8

Remote Desktop Client Remote Code Execution Vulnerability

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.8880, 10.0.20348.5256, 10.0.19044.7417, 10.0.19045.7417

Vendor guidance

Release Notes Install KB5094123. Install KB5094128. Install KB5094127. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051. Install KB5094122. Install KB5094042. Install KB5094041.

CVE-2026-47289

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-47288

Published Jun 9, 2026

CriticalCVSS 7.1

Windows Kerberos Key Distribution Center (KDC) Remote Code Execution

Integer overflow or wraparound in Windows Kerberos allows an authorized attacker to execute code over an adjacent network.

Affected productsWindows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation)

Fixed versions10.0.17763.8880, 10.0.20348.5256, 10.0.26100.32995, 10.0.14393.9234

Vendor guidance

Install KB5094123. Install KB5094128. Install KB5094125. Install KB5094122. Install KB5094042. Install KB5094041.

CVE-2026-47288

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-45657

Published Jun 9, 2026

CriticalCVSS 9.8

Windows Kernel Remote Code Execution Vulnerability

Use after free in Windows Kernel allows an unauthorized attacker to execute code over a network.

Affected productsWindows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025 (Server Core installation), Windows 11 Version 25H2 for ARM64-based Systems

Fixed versions10.0.20348.5256, 10.0.26100.32995, 10.0.26200.8655, 10.0.22631.7219

Vendor guidance

Install KB5094128. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051.

CVE-2026-45657

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-45648

Published Jun 9, 2026

CriticalCVSS 8.8

Windows Active Directory Domain Services Remote Code Execution Vulnerability

Stack-based buffer overflow in Active Directory Domain Services allows an authorized attacker to execute code over a network.

Affected productsWindows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025 (Server Core installation), Windows Server 2025

Fixed versions10.0.20348.5256, 10.0.26100.32995

Vendor guidance

Install KB5094128. Install KB5094125.

CVE-2026-45648

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-45641

Published Jun 9, 2026

CriticalCVSS 8.4

Windows Hyper-V Remote Code Execution Vulnerability

Access of resource using incompatible type ('type confusion') in Windows Hyper-V allows an unauthorized attacker to execute code locally.

Affected productsWindows Server 2022, Windows Server 2022 (Server Core installation), Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for x64-based Systems

Fixed versions10.0.20348.5256, 10.0.19044.7417, 10.0.19045.7417, 10.0.26100.32995

Vendor guidance

Install KB5094128. Install KB5094127. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051.

CVE-2026-45641

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-45607

Published Jun 9, 2026

CriticalCVSS 8.4

Windows Hyper-V Remote Code Execution Vulnerability

Out-of-bounds read in Windows Hyper-V allows an unauthorized attacker to execute code locally.

Affected productsWindows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022

Fixed versions10.0.17763.8880, 10.0.20348.5256, 10.0.19044.7417, 10.0.19045.7417

Vendor guidance

Install KB5094123. Install KB5094128. Install KB5094127. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051. Install KB5094122.

CVE-2026-45607

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-45476

Published Jun 9, 2026

CriticalCVSS 8.2

Microsoft Azure Network Adapter Elevation of Privilege Vulnerability

Use after free in Linux MANA Driver allows an authorized attacker to elevate privileges locally.

Affected productsLinux kernel - Microsoft MANA Network Driver

Fixed versions7.1

Vendor guidance

Release Notes

CVE-2026-45476

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-44810

Published Jun 9, 2026

CriticalCVSS 8.4

Microsoft Cryptographic Services Elevation of Privilege Vulnerability

Improper authentication in Windows Cryptographic Services allows an unauthorized attacker to elevate privileges locally.

Affected productsWindows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025 (Server Core installation), Windows 11 Version 25H2 for ARM64-based Systems

Fixed versions10.0.20348.5256, 10.0.26100.32995, 10.0.26200.8655, 10.0.22631.7219

Vendor guidance

Install KB5094128. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051.

CVE-2026-44810

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-44801

Published Jun 9, 2026

CriticalCVSS 7.5

Remote Desktop Client Remote Code Execution Vulnerability

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.8880, 1.2.7214.0, 10.0.20348.5256, 10.0.19044.7417

Vendor guidance

CVE-2026-44801

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-44799

Published Jun 9, 2026

CriticalCVSS 7.5

Remote Desktop Client Remote Code Execution Vulnerability

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.8880, 1.2.7214.0, 10.0.20348.5256, 10.0.19044.7417

Vendor guidance

CVE-2026-44799

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-42992

Published Jun 9, 2026

CriticalCVSS 7.5

Remote Desktop Client Remote Code Execution Vulnerability

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.8880, 10.0.20348.5256, 10.0.19044.7417, 10.0.19045.7417

Vendor guidance

Release Notes Install KB5094123. Install KB5094128. Install KB5094127. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051. Install KB5094122.

CVE-2026-42992

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-42987

Published Jun 9, 2026

CriticalCVSS 8.1

Windows Deployment Services (WDS) Remote Code Execution

Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network.

Affected productsWindows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation)

Fixed versions10.0.17763.8880, 10.0.20348.5256, 10.0.26100.32995, 10.0.14393.9234

Vendor guidance

Install KB5094123. Install KB5094128. Install KB5094125. Install KB5094122. Install KB5094042. Install KB5094041.

CVE-2026-42987

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-42985

Published Jun 9, 2026

CriticalCVSS 8.8

Remote Desktop Client Remote Code Execution Vulnerability

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Affected productsWindows App Client for Windows Desktop, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019

Fixed versions2.0.1193.0, 10.0.17763.8880, 1.2.7214.0, 10.0.20348.5256

Vendor guidance

CVE-2026-42985

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-33828

Published Jun 9, 2026

CriticalCVSS 7.8

Windows Device Health Attestation (DHA) Elevation of Privilege Vulnerability

Trust boundary violation in Windows Attestation allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.8880, 10.0.20348.5256, 10.0.19044.7417, 10.0.19045.7417

Vendor guidance

Install KB5094123. Install KB5094128. Install KB5094127. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051. Install KB5094122.

CVE-2026-33828

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-32193

Published Jun 9, 2026

CriticalCVSS 8.8

Azure Kubernetes Service (AKS) Remote Code Execution Vulnerability

Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Azure Kubernetes Service allows an authorized attacker to execute code locally.

Affected productsAzure Kubernetes Service

Fixed versionsv0.20260213.5

Vendor guidance

Release Notes

CVE-2026-32193

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-26142

Published Jun 9, 2026

CriticalCVSS 9.8

Nuance PowerScribe Remote Code Execution Vulnerability

Deserialization of untrusted data in Nuance PowerScribe allows an unauthorized attacker to execute code over a network.

Affected productsNuance PowerScribe 360 version 4.0.5, Nuance PowerScribe 360 version 4.0.6, Nuance PowerScribe 360 version 4.0.7, Nuance PowerScribe 360 version 4.0.8

Fixed versions7.0.243.19, 7.0.277.28, 7.0.316.12, 7.0.427.15

Vendor guidance

Release Notes

CVE-2026-26142

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2025-10263

Published Jun 9, 2026

CriticalCVSS 9.3

ARM: CVE-2025-10263 Completion of affected memory accesses might not be guaranteed by completion of a TLBI [kernel]

No cwe for this issue in Windows Kernel allows an unauthorized attacker to elevate privileges locally.

Affected productsWindows 11 Version 26H1 for ARM64-based Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems

Fixed versions10.0.28000.2269, 10.0.19044.7417, 10.0.19045.7417, 10.0.26200.8655

Vendor guidance

Install KB5095051. Install KB5094127. Install KB5094126. Install KB5093998.

CVE-2025-10263

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2025-21330

Updated Jun 9, 2026

HighCVSS 7.5

Windows Remote Desktop Services Denial of Service Vulnerability

According to the CVSS metrics, successful exploitation of this vulnerability could lead to major loss of availability (A:H). What does that mean for this vulnerability? An attacker can send specially crafted packets which could affect availability of the service and result in ...

Affected productsWindows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems

Fixed versions10.0.28000.2269, 10.0.17763.6775, 10.0.20348.3091, 10.0.19044.5371

Vendor guidance

Install KB5095051. Install KB5050008. Install KB5049983. Install KB5049981. Install KB5050021. Install KB5050009. Install KB5049984.

CVE-2025-21330

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2024-49075

Updated Jun 9, 2026

HighCVSS 7.5

Windows Remote Desktop Services Denial of Service Vulnerability

Windows Remote Desktop Services

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.6659, 10.0.20348.2966, 10.0.20348.2908, 10.0.19044.5247

Vendor guidance

Install KB5048661. Install KB5048654. Install KB5048800. Install KB5048652. Install KB5048685. Install KB5048667. Install KB5048794. Install KB5048653. Install KB5095051.

CVE-2024-49075

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-8863

Published Jun 9, 2026

HighCVSS 7.8

UEFI Secure Boot Security Feature Bypass Vulnerability

No cwe for this issue in Windows UEFI allows an authorized attacker to bypass a security feature locally.

Affected productsWindows Server 2019, Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.8880, 10.0.20348.5256, 10.0.19044.7417, 10.0.19045.7417

Vendor guidance

Install KB5094123. Install KB5094128. Install KB5094127. Install KB5094126. Install KB5094125. Install KB5093998. Install KB5095051. Install KB5094122. Install KB5094042. Install KB5094041.

CVE-2026-8863

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-50519

Published Jun 9, 2026

HighCVSS 6.5

Microsoft Visual Studio Code CoPilot Chat Security Feature Bypass Vulnerability

Initialization of a resource with an insecure default in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network.

Affected productsGitHub Copilot Chat

Fixed versions1.123.2

Vendor guidance

Release Notes

CVE-2026-50519

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-50511

Published Jun 9, 2026

HighCVSS 7.8

Microsoft PC Manager Elevation of Privilege Vulnerability

Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to elevate privileges locally.

Affected productsMicrosoft PC Manager

Fixed versions3.21.6.0

Vendor guidance

Release Notes

CVE-2026-50511

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-50508

Published Jun 9, 2026

HighCVSS 6.5

Windows NTLM Spoofing Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

Affected productsWindows Server 2022, Windows Server 2022 (Server Core installation), Windows Server, version 2004 (Server Core installation), Windows 11 Version 22H2 for ARM64-based Systems

Fixed versions10.0.20348.5256, 10.0.19045.7417, 10.0.22631.7219, 10.0.14393.9234

Vendor guidance

Install KB5094128. Install KB5094127. Install KB5093998. Install KB5094122. Install KB5094042. Install KB5094041.

CVE-2026-50508

Read the vendor advisory Watch this product

Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources