Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed

11Vendor sources

18,986Advisories collected

6,816Published or updated in 30 days

8,727Marked critical or high

Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

AWS Security Bulletins 182 advisories

CurrentChecked 3 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Apple Security Releases 40 advisories

CurrentChecked 13 minutes ago

Checked hourly Browse this vendor's advisories Official source

Cisco Security Advisories 107 advisories

Check delayedChecked 31 days ago

Checked every 15 minutes Browse this vendor's advisories Official source

Citrix Security Bulletins 30 advisories

Check delayedChecked about an hour ago

Checked hourly Browse this vendor's advisories Official source

Delinea Security Advisories 14 advisories

CurrentChecked 13 minutes ago

Checked hourly Browse this vendor's advisories Official source

Fortinet PSIRT Advisories 112 advisories

CurrentChecked 8 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Ivanti Security Advisories 10 advisories

CurrentChecked 3 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Microsoft Security Response Center 17,903 advisories

CurrentChecked 2 hours ago

Checked every 6 hours Browse this vendor's advisories Official source

Palo Alto Networks Security Advisories 69 advisories

CurrentChecked 8 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

SonicWall PSIRT Advisories 12 advisories

Check delayedChecked 3 days ago

Checked hourly Browse this vendor's advisories Official source

Ubuntu Security Notices 507 advisories

CurrentChecked 8 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

18,986 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results

Microsoft Security Response CenterCVE-2026-49161

Published Jun 9, 2026

HighCVSS 7.8

Microsoft PC Manager Security Feature Bypass Vulnerability

Improper access control in Microsoft PC Manager allows an authorized attacker to bypass a security feature locally.

Affected productsMicrosoft PC Manager

Fixed versions3.21.6.0

Vendor guidance

Release Notes

CVE-2026-49161

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-49160

Published Jun 9, 2026

HighCVSS 7.5

HTTP.sys Denial of Service Vulnerability

Uncontrolled resource consumption in HTTP/2 allows an unauthorized attacker to deny service over a network.

Affected productsWindows Server 2019 (Server Core installation), Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems

Fixed versions10.0.17763.8880, 10.0.19044.7417, 10.0.20348.5256, 10.0.19045.7417

Vendor guidance

Install KB5094123. Install KB5094127. Install KB5094128. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051. Install KB5094122.

CVE-2026-49160

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-48583

Published Jun 9, 2026

HighCVSS 7.8

Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.8880, 10.0.20348.5256, 10.0.19044.7417, 10.0.19045.7417

Vendor guidance

Install KB5094123. Install KB5094128. Install KB5094127. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051. Install KB5094122.

CVE-2026-48583

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-48578

Published Jun 9, 2026

HighCVSS 7.9

Secure Boot Security Feature Bypass Vulnerability

Improper access control in Windows Secure Boot allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.8880, 10.0.20348.5256, 10.0.19044.7417, 10.0.19045.7417

Vendor guidance

Install KB5094123. Install KB5094128. Install KB5094127. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051. Install KB5094122. Install KB5094042. Install KB5094041.

CVE-2026-48578

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-48576

Published Jun 9, 2026

HighCVSS 7.9

Secure Boot Security Feature Bypass Vulnerability

No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.8880, 10.0.20348.5256, 10.0.19044.7417, 10.0.19045.7417

Vendor guidance

Install KB5094123. Install KB5094128. Install KB5094127. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051. Install KB5094122. Install KB5094042. Install KB5094041.

CVE-2026-48576

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-48575

Published Jun 9, 2026

HighCVSS 7.9

Secure Boot Security Feature Bypass Vulnerability

Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.8880, 10.0.20348.5256, 10.0.19044.7417, 10.0.19045.7417

Vendor guidance

Install KB5094123. Install KB5094128. Install KB5094127. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051. Install KB5094122. Install KB5094042. Install KB5094041.

CVE-2026-48575

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-48573

Published Jun 9, 2026

HighCVSS 7.9

Secure Boot Security Feature Bypass Vulnerability

No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.8880, 10.0.20348.5256, 10.0.19044.7417, 10.0.19045.7417

Vendor guidance

Install KB5094123. Install KB5094128. Install KB5094127. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051. Install KB5094122. Install KB5094042. Install KB5094041.

CVE-2026-48573

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-48570

Published Jun 9, 2026

HighCVSS 7.9

Secure Boot Security Feature Bypass Vulnerability

Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.8880, 10.0.20348.5256, 10.0.19044.7417, 10.0.19045.7417

Vendor guidance

Install KB5094123. Install KB5094128. Install KB5094127. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051. Install KB5094122. Install KB5094042. Install KB5094041.

CVE-2026-48570

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-48568

Published Jun 9, 2026

HighCVSS 7.9

Secure Boot Security Feature Bypass Vulnerability

Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.8880, 10.0.20348.5256, 10.0.19044.7417, 10.0.19045.7417

Vendor guidance

Install KB5094123. Install KB5094128. Install KB5094127. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051. Install KB5094122. Install KB5094042. Install KB5094041.

CVE-2026-48568

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-48565

Published Jun 9, 2026

HighCVSS 7.8

Windows Narrator Braille Elevation of Privilege Vulnerability

Untrusted search path in Windows Narrator Braille allows an authorized attacker to elevate privileges locally.

Affected productsWindows Narrator Braille

CVE-2026-48565

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-48562

Published Jun 9, 2026

HighCVSS 4.6

Microsoft SharePoint Server Spoofing Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Affected productsMicrosoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition

Fixed versions16.0.5556.1005, 16.0.10417.20153, 16.0.19725.20384

Vendor guidance

Install KB5002880. Install KB5002874. Install KB5002873.

CVE-2026-48562

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-48560

Published Jun 9, 2026

HighCVSS 5.4

Microsoft SharePoint Server Spoofing Vulnerability

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Affected productsMicrosoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition

Fixed versions16.0.5556.1005, 16.0.10417.20153, 16.0.19725.20384

Vendor guidance

Install KB5002880. Install KB5002874. Install KB5002873.

CVE-2026-48560

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-47656

Published Jun 9, 2026

HighCVSS 7.9

Windows Boot Manager Security Feature Bypass Vulnerability

Protection mechanism failure in Windows Boot Manager allows an authorized attacker to bypass a security feature locally.

Affected productsWindows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 10 Version 1809 for x64-based Systems

Fixed versions10.0.17763.8880, 10.0.20348.5256, 10.0.19044.7417, 10.0.19045.7417

Vendor guidance

Install KB5094123. Install KB5094128. Install KB5094127. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051. Install KB5094122. Install KB5094042. Install KB5094041.

CVE-2026-47656

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-47653

Published Jun 9, 2026

HighCVSS 8.8

Remote Desktop Client Remote Code Execution Vulnerability

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.8880, 10.0.20348.5256, 10.0.19044.7417, 10.0.19045.7417

Vendor guidance

Install KB5094123. Install KB5094128. Install KB5094127. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051. Install KB5094122. Install KB5094042. Install KB5094041.

CVE-2026-47653

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-47648

Published Jun 9, 2026

HighCVSS 7.0

Windows Storage Elevation of Privilege Vulnerability

Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.8880, 10.0.20348.5256, 10.0.19044.7417, 10.0.19045.7417

Vendor guidance

Install KB5094123. Install KB5094128. Install KB5094127. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051. Install KB5094122. Install KB5094042. Install KB5094041.

CVE-2026-47648

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-47643

Published Jun 9, 2026

HighCVSS 9.8

Azure Stack Edge Remote Code Execution Vulnerability

External control of file name or path in Azure Stack Edge allows an unauthorized attacker to execute code over a network.

Affected productsAzure Stack Edge

Fixed versions3.3.2604.3097

Vendor guidance

Release Notes

CVE-2026-47643

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-47641

Published Jun 9, 2026

HighCVSS 4.6

Microsoft SharePoint Server Spoofing Vulnerability

Improper input validation in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Affected productsMicrosoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition

Fixed versions16.0.5556.1005, 16.0.10417.20153, 16.0.19725.20384

Vendor guidance

Install KB5002880. Install KB5002874. Install KB5002873.

CVE-2026-47641

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-47640

Published Jun 9, 2026

HighCVSS 4.6

Microsoft SharePoint Server Spoofing Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Affected productsMicrosoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition

Fixed versions16.0.5556.1005, 16.0.10417.20153, 16.0.19725.20384

Vendor guidance

Install KB5002880. Install KB5002874. Install KB5002873.

CVE-2026-47640

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-47639

Published Jun 9, 2026

HighCVSS 5.4

Microsoft SharePoint Server Spoofing Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

Affected productsMicrosoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition

Fixed versions16.0.5556.1005, 16.0.10417.20153, 16.0.19725.20384

Vendor guidance

Install KB5002880. Install KB5002874. Install KB5002873.

CVE-2026-47639

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-47638

Published Jun 9, 2026

HighCVSS 4.6

Microsoft SharePoint Server Spoofing Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Affected productsMicrosoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition

Fixed versions16.0.5556.1005, 16.0.10417.20153, 16.0.19725.20384

Vendor guidance

Install KB5002880. Install KB5002874. Install KB5002873.

CVE-2026-47638

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-47637

Published Jun 9, 2026

HighCVSS 4.6

Microsoft SharePoint Server Spoofing Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Affected productsMicrosoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition

Fixed versions16.0.5556.1005, 16.0.10417.20153, 16.0.19725.20384

Vendor guidance

Install KB5002880. Install KB5002874. Install KB5002873.

CVE-2026-47637

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-47634

Published Jun 9, 2026

HighCVSS 7.3

Microsoft SharePoint Server Spoofing Vulnerability

Improper neutralization of special elements in output used by a downstream component ('injection') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Affected productsMicrosoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition

Fixed versions16.0.10417.20153, 16.0.19725.20384

Vendor guidance

Install KB5002874. Install KB5002873.

CVE-2026-47634

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-47631

Published Jun 9, 2026

HighCVSS 8.1

Microsoft Exchange Server Spoofing Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

Affected productsMicrosoft Exchange Server 2016 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 14, Microsoft Exchange Server 2019 Cumulative Update 15, Microsoft Exchange Server Subscription Edition RTM

Fixed versions15.01.2507.071, 15.02.1544.043, 15.02.1748.048, 15.02.2562.045

Vendor guidance

Install KB5103215. Install KB5103214. Install KB5103213. Install KB5103212.

CVE-2026-47631

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-47293

Published Jun 9, 2026

HighCVSS 7.0

Microsoft Office Click-To-Run Elevation of Privilege Vulnerability

Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.

Affected productsMicrosoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems

Fixed versionshttps://aka.ms/OfficeSecurityReleases

Vendor guidance

Click to Run

CVE-2026-47293

Read the vendor advisory Watch this product

Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources