Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
18,986Advisories collected
6,810Published or updated in 30 days
8,727Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

18,986 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2026-35424
HighCVSS 7.5

Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability

Missing release of memory after effective lifetime in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8755, 10.0.20348.5139, 10.0.20348.5074, 10.0.19044.7291
Vendor guidance

Install KB5087538. Install KB5087545. Install KB5087424. Install KB5087544. Install KB5094127. Install KB5087539. Install KB5087423. Install KB5089549. Install KB5089466. Install KB5087420. Install KB5093998. Install ...

CVE-2026-35424
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-35423
HighCVSS 5.4

Windows 11 Telnet Client Information Disclosure Vulnerability

Out-of-bounds read in Telnet Client allows an unauthorized attacker to disclose information over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8755, 10.0.20348.5139, 10.0.20348.5074, 10.0.19044.7291
Vendor guidance

Install KB5087538. Install KB5087545. Install KB5087424. Install KB5087544. Install KB5094127. Install KB5087539. Install KB5087423. Install KB5089549. Install KB5089466. Install KB5087420. Install KB5093998. Install ...

CVE-2026-35423
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-35422
HighCVSS 6.5

Windows TCP/IP Driver Security Feature Bypass Vulnerability

Authentication bypass using an alternate path or channel in Windows TCP/IP allows an authorized attacker to bypass a security feature over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8755, 10.0.20348.5139, 10.0.20348.5074, 10.0.19044.7291
Vendor guidance

Install KB5087538. Install KB5087545. Install KB5087424. Install KB5087544. Install KB5094127. Install KB5087539. Install KB5087423. Install KB5089549. Install KB5089466. Install KB5087420. Install KB5093998. Install ...

CVE-2026-35422
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-35420
HighCVSS 7.8

Windows Kernel Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

Affected productsWindows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation)
Fixed versions10.0.17763.8755, 10.0.20348.5139, 10.0.20348.5074, 10.0.26100.32860
Vendor guidance

Install KB5087538. Install KB5087545. Install KB5087424. Install KB5087539. Install KB5087423. Install KB5087541. Install KB5087537. Install KB5087470. Install KB5087471.

CVE-2026-35420
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-35419
HighCVSS 5.5

Windows DWM Core Library Information Disclosure Vulnerability

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.

Affected productsWindows Server 2025 (Server Core installation), Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems
Fixed versions10.0.26100.32860, 10.0.26100.32772, 10.0.26200.8457, 10.0.26200.8390
Vendor guidance

Install KB5087539. Install KB5087423. Install KB5089549. Install KB5089466. Install KB5089548.

CVE-2026-35419
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-35418
HighCVSS 7.8

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

Affected productsWindows Server 2022, Windows Server 2022 (Server Core installation), Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for x64-based Systems
Fixed versions10.0.20348.5139, 10.0.20348.5074, 10.0.19044.7291, 10.0.17763.8755
Vendor guidance

Install KB5087545. Install KB5087424. Install KB5087544. Install KB5087538. Install KB5094127. Install KB5087539. Install KB5087423. Install KB5089549. Install KB5089466. Install KB5087541. Install KB5093998. Install ...

CVE-2026-35418
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-35417
HighCVSS 7.8

Windows Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8755, 10.0.20348.5139, 10.0.20348.5074, 10.0.19044.7291
Vendor guidance

Install KB5087538. Install KB5087545. Install KB5087424. Install KB5087544. Install KB5094127. Install KB5087539. Install KB5087423. Install KB5089549. Install KB5089466. Install KB5087420. Install KB5093998. Install ...

CVE-2026-35417
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-35416
HighCVSS 7.0

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8755, 10.0.20348.5139, 10.0.20348.5074, 10.0.19044.7291
Vendor guidance

Install KB5087538. Install KB5087545. Install KB5087424. Install KB5087544. Install KB5094127. Install KB5087539. Install KB5087423. Install KB5089549. Install KB5089466. Install KB5087420. Install KB5093998. Install ...

CVE-2026-35416
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-35415
HighCVSS 7.8

Windows Storage Spaces Controller Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8755, 10.0.20348.5139, 10.0.20348.5074, 10.0.19044.7291
Vendor guidance

Install KB5087538. Install KB5087545. Install KB5087424. Install KB5087544. Install KB5094127. Install KB5087539. Install KB5087423. Install KB5089549. Install KB5089466. Install KB5087420. Install KB5093998. Install ...

CVE-2026-35415
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-34351
HighCVSS 7.8

Windows TCP/IP Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8755, 10.0.20348.5139, 10.0.20348.5074, 10.0.19044.7291
Vendor guidance

Install KB5087538. Install KB5087545. Install KB5087424. Install KB5087544. Install KB5094127. Install KB5087539. Install KB5087423. Install KB5089549. Install KB5089466. Install KB5087420. Install KB5093998. Install ...

CVE-2026-34351
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-34350
HighCVSS 6.5

Windows Storport Miniport Driver Denial of Service Vulnerability

Null pointer dereference in Windows Storport Miniport Driver allows an unauthorized attacker to deny service over a network.

Affected productsWindows Server 2025 (Server Core installation), Windows Server 2025
Fixed versions10.0.26100.32860, 10.0.26100.32772
Vendor guidance

Install KB5087539. Install KB5087423.

CVE-2026-34350
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-34347
HighCVSS 7.0

Windows Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8755, 10.0.20348.5139, 10.0.20348.5074, 10.0.19044.7291
Vendor guidance

Install KB5087538. Install KB5087545. Install KB5087424. Install KB5087544. Install KB5094127. Install KB5087539. Install KB5087423. Install KB5089549. Install KB5089466. Install KB5087420. Install KB5093998. Install ...

CVE-2026-34347
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-34345
HighCVSS 7.0

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8755, 10.0.20348.5139, 10.0.20348.5074, 10.0.19044.7291
Vendor guidance

Install KB5087538. Install KB5087545. Install KB5087424. Install KB5087544. Install KB5094127. Install KB5087539. Install KB5087423. Install KB5089549. Install KB5089466. Install KB5087420. Install KB5093998. Install ...

CVE-2026-34345
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-34344
HighCVSS 7.8

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8755, 10.0.20348.5139, 10.0.20348.5074, 10.0.19044.7291
Vendor guidance

Install KB5087538. Install KB5087545. Install KB5087424. Install KB5087544. Install KB5094127. Install KB5087539. Install KB5087423. Install KB5089549. Install KB5089466. Install KB5087420. Install KB5093998. Install ...

CVE-2026-34344
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-34343
HighCVSS 7.8

Windows Application Identity (AppID) Subsystem Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Application Identity (AppID) Subsystem allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8755, 10.0.20348.5139, 10.0.20348.5074, 10.0.19044.7291
Vendor guidance

Install KB5087538. Install KB5087545. Install KB5087424. Install KB5087544. Install KB5094127. Install KB5087539. Install KB5087423. Install KB5089549. Install KB5089466. Install KB5087420. Install KB5093998. Install ...

CVE-2026-34343
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-34342
HighCVSS 7.0

Windows Print Spooler Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8755, 10.0.20348.5139, 10.0.20348.5074, 10.0.19044.7291
Vendor guidance

Install KB5087538. Install KB5087545. Install KB5087424. Install KB5087544. Install KB5094127. Install KB5087539. Install KB5087423. Install KB5089549. Install KB5089466. Install KB5087420. Install KB5093998. Install ...

CVE-2026-34342
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-34341
HighCVSS 7.0

Windows Link-Layer Discovery Protocol (LLDP) Elevation of Privilege Vulnerability

Double free in Windows Link-Layer Discovery Protocol (LLDP) allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8755, 10.0.20348.5139, 10.0.20348.5074, 10.0.19044.7291
Vendor guidance

Install KB5087538. Install KB5087545. Install KB5087424. Install KB5087544. Install KB5094127. Install KB5087539. Install KB5087423. Install KB5089549. Install KB5089466. Install KB5087420. Install KB5093998. Install ...

CVE-2026-34341
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-34340
HighCVSS 7.0

Windows Projected File System Elevation of Privilege Vulnerability

Use after free in Windows Projected File System allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows Server 2022, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems
Fixed versions10.0.17763.8755, 10.0.20348.5139, 10.0.20348.5074, 10.0.19044.7291
Vendor guidance

Install KB5087538. Install KB5087545. Install KB5087424. Install KB5087544. Install KB5094127. Install KB5087539. Install KB5087423. Install KB5089549. Install KB5089466. Install KB5087420. Install KB5093998. Install ...

CVE-2026-34340
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-34339
HighCVSS 5.5

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

Null pointer dereference in Windows LDAP - Lightweight Directory Access Protocol allows an authorized attacker to deny service locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8755, 10.0.20348.5139, 10.0.20348.5074, 10.0.19044.7291
Vendor guidance

Install KB5087538. Install KB5087545. Install KB5087424. Install KB5087544. Install KB5094127. Install KB5087539. Install KB5087423. Install KB5089549. Install KB5089466. Install KB5087420. Install KB5093998. Install ...

CVE-2026-34339
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-34338
HighCVSS 7.8

Windows Telephony Service Elevation of Privilege Vulnerability

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8755, 10.0.20348.5139, 10.0.20348.5074, 10.0.19044.7291
Vendor guidance

Install KB5087538. Install KB5087545. Install KB5087424. Install KB5087544. Install KB5094127. Install KB5087539. Install KB5087423. Install KB5089549. Install KB5089466. Install KB5087420. Install KB5093998. Install ...

CVE-2026-34338
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-34337
HighCVSS 7.8

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

Affected productsWindows Server 2022, Windows Server 2022 (Server Core installation), Windows 10 Version 21H2 for ARM64-based Systems, Windows Server 2019
Fixed versions10.0.20348.5139, 10.0.20348.5074, 10.0.19044.7291, 10.0.17763.8755
Vendor guidance

Install KB5087545. Install KB5087424. Install KB5087544. Install KB5087538. Install KB5094127. Install KB5087539. Install KB5087423. Install KB5089549. Install KB5089466. Install KB5087420. Install KB5087541. Install ...

CVE-2026-34337
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-34334
HighCVSS 7.8

Windows TCP/IP Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8755, 10.0.20348.5139, 10.0.20348.5074, 10.0.19044.7291
Vendor guidance

Install KB5087538. Install KB5087545. Install KB5087424. Install KB5087544. Install KB5094127. Install KB5087539. Install KB5087423. Install KB5089549. Install KB5089466. Install KB5087420. Install KB5093998. Install ...

CVE-2026-34334
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-34333
HighCVSS 7.8

Windows Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8755, 10.0.20348.5139, 10.0.20348.5074, 10.0.19044.7291
Vendor guidance

Install KB5087538. Install KB5087545. Install KB5087424. Install KB5087544. Install KB5094127. Install KB5087539. Install KB5087423. Install KB5089549. Install KB5089466. Install KB5087420. Install KB5093998. Install ...

CVE-2026-34333
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-34332
HighCVSS 8.0

Windows Kernel-Mode Driver Remote Code Execution Vulnerability

Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to execute code over a network.

Affected productsWindows Server 2025 (Server Core installation), Windows Server 2025
Fixed versions10.0.26100.32860, 10.0.26100.32772
Vendor guidance

Install KB5087539. Install KB5087423.

CVE-2026-34332
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources