Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed

11Vendor sources

18,986Advisories collected

6,816Published or updated in 30 days

8,727Marked critical or high

Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

AWS Security Bulletins 182 advisories

CurrentChecked 13 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Apple Security Releases 40 advisories

CurrentChecked 23 minutes ago

Checked hourly Browse this vendor's advisories Official source

Cisco Security Advisories 107 advisories

Check delayedChecked 31 days ago

Checked every 15 minutes Browse this vendor's advisories Official source

Citrix Security Bulletins 30 advisories

Check delayedChecked about an hour ago

Checked hourly Browse this vendor's advisories Official source

Delinea Security Advisories 14 advisories

CurrentChecked 23 minutes ago

Checked hourly Browse this vendor's advisories Official source

Fortinet PSIRT Advisories 112 advisories

CurrentChecked 18 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Ivanti Security Advisories 10 advisories

CurrentChecked 13 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Microsoft Security Response Center 17,903 advisories

CurrentChecked 2 hours ago

Checked every 6 hours Browse this vendor's advisories Official source

Palo Alto Networks Security Advisories 69 advisories

CurrentChecked 18 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

SonicWall PSIRT Advisories 12 advisories

Check delayedChecked 3 days ago

Checked hourly Browse this vendor's advisories Official source

Ubuntu Security Notices 507 advisories

CurrentChecked 18 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

18,986 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results

Microsoft Security Response CenterCVE-2026-47287

Published Jun 9, 2026

HighCVSS 6.5

Visual Studio Code Tampering Vulnerability

Relative path traversal in Visual Studio Code allows an unauthorized attacker to perform tampering over a network.

Affected productsVisual Studio Code

Fixed versions1.123.2

Vendor guidance

Release Notes

CVE-2026-47287

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-47284

Published Jun 9, 2026

HighCVSS 6.5

Visual Studio Code Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Visual Studio Code allows an unauthorized attacker to disclose information over a network.

Affected productsVisual Studio Code

Fixed versions1.123.2

Vendor guidance

Release Notes

CVE-2026-47284

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-47281

Published Jun 9, 2026

HighCVSS 9.6

Visual Studio Code Elevation of Privilege Vulnerability

Missing authorization in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network.

Affected productsVisual Studio Code

Fixed versions1.123.2

Vendor guidance

Release Notes

CVE-2026-47281

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-45658

Published Jun 9, 2026

HighCVSS 7.8

Windows BitLocker Security Feature Bypass Vulnerability

Improper access control in Windows BitLocker allows an authorized attacker to bypass a security feature locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.8880, 10.0.20348.5256, 10.0.19044.7417, 10.0.19045.7417

Vendor guidance

Install KB5094123. Install KB5094128. Install KB5094127. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051. Install KB5094122. Install KB5094042. Install KB5094041.

CVE-2026-45658

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-45656

Published Jun 9, 2026

HighCVSS 7.8

UEFI Secure Boot Security Feature Bypass Vulnerability

Protection mechanism failure in Windows UEFI allows an authorized attacker to bypass a security feature locally.

Affected productsWindows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems

Fixed versions10.0.28000.2269, 10.0.17763.8880, 10.0.20348.5256, 10.0.19044.7417

Vendor guidance

Install KB5095051. Install KB5094123. Install KB5094128. Install KB5094127. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5094122. Install KB5094042. Install KB5094041.

CVE-2026-45656

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-45655

Published Jun 9, 2026

HighCVSS 5.3

Windows BitLocker Security Feature Bypass Vulnerability

Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.

Fixed versions10.0.28000.2269, 10.0.17763.8880, 10.0.20348.5256, 10.0.19044.7417

Vendor guidance

Install KB5095051. Install KB5094123. Install KB5094128. Install KB5094127. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5094122. Install KB5094042. Install KB5094041.

CVE-2026-45655

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-45654

Published Jun 9, 2026

HighCVSS 7.9

Secure Boot Security Feature Bypass Vulnerability

Improper access control in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

Affected productsWindows 11 version 26H1 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows Server 2025 (Server Core installation), Windows 11 Version 25H2 for ARM64-based Systems

Fixed versions10.0.28000.2269, 10.0.26100.32995, 10.0.26200.8655, 10.0.26100.8655

Vendor guidance

Install KB5095051. Install KB5094125. Install KB5094126.

CVE-2026-45654

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-45653

Published Jun 9, 2026

HighCVSS 7.0

Windows Kernel Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.8880, 10.0.20348.5256, 10.0.19044.7417, 10.0.19045.7417

Vendor guidance

Install KB5094123. Install KB5094128. Install KB5094127. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051. Install KB5094122. Install KB5094042. Install KB5094041.

CVE-2026-45653

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-45647

Published Jun 9, 2026

HighCVSS 5.5

Microsoft Defender for Endpoint for Mac Elevation of Privilege Vulnerability

Time-of-check time-of-use (toctou) race condition in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally.

Affected productsMicrosoft Defender for Endpoint for Mac

Fixed versions101.26042.0011

Vendor guidance

Release Notes

CVE-2026-45647

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-45644

Published Jun 9, 2026

HighCVSS 8.0

Microsoft Live Share Canvas SDK Elevation of Privilege Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Live Share Canvas SDK allows an authorized attacker to elevate privileges over a network.

Affected productsMicrosoft Live Share Canvas SDK

Fixed versions1.4.2

Vendor guidance

Release Notes

CVE-2026-45644

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-45642

Published Jun 9, 2026

HighCVSS 3.9

Microsoft Azure Attestation service and Device Health Attestation Service Spoofing Vulnerability

Improper input validation in Microsoft Azure Attestation service and Device Health Attestation Service allows an authorized attacker to perform spoofing with a physical attack.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.8880, 10.0.20348.5256, 10.0.19044.7417, 10.0.19045.7417

Vendor guidance

Install KB5094123. Install KB5094128. Install KB5094127. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051. Install KB5094122. Install KB5094042. Install KB5094041.

CVE-2026-45642

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-45640

Published Jun 9, 2026

HighCVSS 7.0

Windows Bluetooth Port Driver Elevation of Privilege Vulnerability

Use after free in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally.

Affected productsWindows Server 2022, Windows Server 2022 (Server Core installation), Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems

Fixed versions10.0.20348.5256, 10.0.19044.7417, 10.0.19045.7417, 10.0.26100.32995

Vendor guidance

Install KB5094128. Install KB5094127. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051.

CVE-2026-45640

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-45636

Published Jun 9, 2026

HighCVSS 7.8

Windows NTFS Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

Affected productsWindows Server 2022 (Server Core installation), Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems

Fixed versions10.0.20348.5256, 10.0.17763.8880, 10.0.19044.7417, 10.0.19045.7417

Vendor guidance

Install KB5094128. Install KB5094123. Install KB5094127. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051. Install KB5094122. Install KB5094041. Install KB5094042.

CVE-2026-45636

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-45635

Published Jun 9, 2026

HighCVSS 8.1

Windows UPnP Device Host Remote Code Execution Vulnerability

Access of resource using incompatible type ('type confusion') in Universal Plug and Play (upnp.dll) allows an unauthorized attacker to execute code over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.8880, 10.0.20348.5256, 10.0.19044.7417, 10.0.19045.7417

Vendor guidance

Install KB5094123. Install KB5094128. Install KB5094127. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051. Install KB5094122. Install KB5094042. Install KB5094041.

CVE-2026-45635

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-45634

Published Jun 9, 2026

HighCVSS 5.5

Windows DHCP Client Information Disclosure Vulnerability

Out-of-bounds read in Windows DHCP Server allows an authorized attacker to disclose information locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.8880, 10.0.20348.5256, 10.0.19044.7417, 10.0.19045.7417

Vendor guidance

Install KB5094123. Install KB5094128. Install KB5094127. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051. Install KB5094122. Install KB5094042. Install KB5094041.

CVE-2026-45634

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-45608

Published Jun 9, 2026

HighCVSS 6.8

Windows DHCP Client Information Disclosure Vulnerability

Out-of-bounds read in Windows DHCP Client allows an unauthorized attacker to disclose information locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.8880, 10.0.20348.5256, 10.0.19044.7417, 10.0.19045.7417

Vendor guidance

Install KB5094123. Install KB5094128. Install KB5094127. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051. Install KB5094122. Install KB5094042. Install KB5094041.

CVE-2026-45608

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-45606

Published Jun 9, 2026

HighCVSS 5.5

Microsoft UxTheme Library (uxtheme.dll) Denial of Service Vulnerability

Out-of-bounds read in Microsoft UxTheme Library (uxtheme.dll) allows an authorized attacker to deny service locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.8880, 10.0.20348.5256, 10.0.19044.7417, 10.0.19045.7417

Vendor guidance

Install KB5094123. Install KB5094128. Install KB5094127. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051. Install KB5094122. Install KB5094042. Install KB5094041.

CVE-2026-45606

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-45605

Published Jun 9, 2026

HighCVSS 7.8

Windows Bluetooth Service Elevation of Privilege Vulnerability

Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.8880, 10.0.20348.5256, 10.0.19044.7417, 10.0.19045.7417

Vendor guidance

Install KB5094123. Install KB5094128. Install KB5094127. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051. Install KB5094122.

CVE-2026-45605

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-45604

Published Jun 9, 2026

HighCVSS 5.5

Windows Managed Installer Information Disclosure Vulnerability

Out-of-bounds read in Windows Application Identity (AppID) Subsystem allows an authorized attacker to disclose information locally.

Affected productsWindows Server 2025 (Server Core installation), Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems

Fixed versions10.0.26100.32995, 10.0.26200.8655, 10.0.22631.7219, 10.0.26100.8655

Vendor guidance

Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051.

CVE-2026-45604

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-45603

Published Jun 9, 2026

HighCVSS 7.0

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.8880, 10.0.20348.5256, 10.0.19044.7417, 10.0.19045.7417

Vendor guidance

Install KB5094123. Install KB5094128. Install KB5094127. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051. Install KB5094122. Install KB5094042. Install KB5094041.

CVE-2026-45603

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-45601

Published Jun 9, 2026

HighCVSS 7.0

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.8880, 10.0.20348.5256, 10.0.19044.7417, 10.0.19045.7417

Vendor guidance

Install KB5094123. Install KB5094128. Install KB5094127. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051. Install KB5094122. Install KB5094042. Install KB5094041.

CVE-2026-45601

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-45600

Published Jun 9, 2026

HighCVSS 7.8

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

Access of resource using incompatible type ('type confusion') in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

Fixed versions10.0.26100.32995, 10.0.26200.8655, 10.0.26100.8655, 10.0.28000.2269

Vendor guidance

Install KB5094125. Install KB5094126. Install KB5095051.

CVE-2026-45600

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-45599

Published Jun 9, 2026

HighCVSS 8.1

Windows UPnP Device Host Remote Code Execution Vulnerability

Use after free in Universal Plug and Play (upnp.dll) allows an unauthorized attacker to execute code over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.8880, 10.0.20348.5256, 10.0.19044.7417, 10.0.19045.7417

Vendor guidance

Install KB5094123. Install KB5094128. Install KB5094127. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051. Install KB5094122. Install KB5094042. Install KB5094041.

CVE-2026-45599

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-45598

Published Jun 9, 2026

HighCVSS 7.0

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.8880, 10.0.20348.5256, 10.0.19044.7417, 10.0.19045.7417

Vendor guidance

Install KB5094123. Install KB5094128. Install KB5094127. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051. Install KB5094122. Install KB5094042. Install KB5094041.

CVE-2026-45598

Read the vendor advisory Watch this product

Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources