Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed

11Vendor sources

18,986Advisories collected

6,744Published or updated in 30 days

8,727Marked critical or high

Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

AWS Security Bulletins 182 advisories

CurrentChecked 18 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Apple Security Releases 40 advisories

CurrentChecked about an hour ago

Checked hourly Browse this vendor's advisories Official source

Cisco Security Advisories 107 advisories

Check delayedChecked 31 days ago

Checked every 15 minutes Browse this vendor's advisories Official source

Citrix Security Bulletins 30 advisories

CurrentChecked 8 minutes ago

Checked hourly Browse this vendor's advisories Official source

Delinea Security Advisories 14 advisories

CurrentChecked 3 minutes ago

Checked hourly Browse this vendor's advisories Official source

Fortinet PSIRT Advisories 112 advisories

CurrentChecked 3 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Ivanti Security Advisories 10 advisories

CurrentChecked 18 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Microsoft Security Response Center 17,903 advisories

CurrentChecked 7 minutes ago

Checked every 6 hours Browse this vendor's advisories Official source

Palo Alto Networks Security Advisories 69 advisories

CurrentChecked 3 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

SonicWall PSIRT Advisories 12 advisories

Check delayedChecked 4 days ago

Checked hourly Browse this vendor's advisories Official source

Ubuntu Security Notices 507 advisories

CurrentChecked 3 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

18,986 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results

Microsoft Security Response CenterCVE-2026-32220

Published Apr 14, 2026

HighCVSS 4.4

UEFI Secure Boot Security Feature Bypass Vulnerability

Improper access control in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security feature locally.

Affected productsWindows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2025 (Server Core installation), Windows 11 Version 25H2 for ARM64-based Systems

Fixed versions10.0.28000.1836, 10.0.26100.32690, 10.0.26200.8246, 10.0.26100.8246

Vendor guidance

Install KB5083768. Install KB5082063. Install KB5083769.

CVE-2026-32220

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-32219

Published Apr 14, 2026

HighCVSS 7.0

Microsoft Brokering File System Elevation of Privilege Vulnerability

Double free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.

Affected productsWindows Server 2025 (Server Core installation), Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems

Fixed versions10.0.26100.32690, 10.0.26200.8246, 10.0.26100.8246, 10.0.28000.1836

Vendor guidance

Install KB5082063. Install KB5083769. Install KB5083768.

CVE-2026-32219

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-32218

Published Apr 14, 2026

HighCVSS 5.5

Windows Kernel Information Disclosure Vulnerability

Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally.

Affected productsWindows Server 2022, Windows Server 2022 (Server Core installation), Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems

Fixed versions10.0.20348.5020, 10.0.19044.7184, 10.0.19045.7184, 10.0.26100.32690

Vendor guidance

Install KB5082142. Install KB5082200. Install KB5082063. Install KB5083769. Install KB5082052. Install KB5082060. Install KB5083768.

CVE-2026-32218

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-32217

Published Apr 14, 2026

HighCVSS 5.5

Windows Kernel Information Disclosure Vulnerability

Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally.

Affected productsWindows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems

Fixed versions10.0.28000.1836, 10.0.17763.8644, 10.0.20348.5020, 10.0.19044.7184

Vendor guidance

Install KB5083768. Install KB5082123. Install KB5082142. Install KB5082200. Install KB5082063. Install KB5083769. Install KB5082052. Install KB5082060. Install KB5082198. Install KB5082127. Install KB5082126.

CVE-2026-32217

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-32216

Published Apr 14, 2026

HighCVSS 5.5

Windows Redirected Drive Buffering System Denial of Service Vulnerability

Null pointer dereference in Windows Redirected Drive Buffering allows an authorized attacker to deny service locally.

Affected productsWindows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems

Fixed versions10.0.28000.1836

Vendor guidance

Install KB5083768.

CVE-2026-32216

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-32215

Published Apr 14, 2026

HighCVSS 5.5

Windows Kernel Information Disclosure Vulnerability

Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally.

Fixed versions10.0.28000.1836, 10.0.17763.8644, 10.0.20348.5020, 10.0.19044.7184

Vendor guidance

Install KB5083768. Install KB5082123. Install KB5082142. Install KB5082200. Install KB5082063. Install KB5083769. Install KB5082052. Install KB5082060.

CVE-2026-32215

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-32214

Published Apr 14, 2026

HighCVSS 5.5

Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability

Improper access control in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally.

Fixed versions10.0.28000.1836, 10.0.17763.8644, 10.0.20348.5020, 10.0.19044.7184

Vendor guidance

CVE-2026-32214

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-32212

Published Apr 14, 2026

HighCVSS 5.5

Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability

Improper link resolution before file access ('link following') in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally.

Fixed versions10.0.28000.1836, 10.0.17763.8644, 10.0.20348.5020, 10.0.19044.7184

Vendor guidance

CVE-2026-32212

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-32201

Published Apr 14, 2026

HighCVSS 6.5

Microsoft SharePoint Server Spoofing Vulnerability

Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

Affected productsMicrosoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition

Fixed versions16.0.5548.1003, 16.0.10417.20114, 16.0.19725.20210

Vendor guidance

Install KB5002861. Install KB5002854. Install KB5002853.

CVE-2026-32201

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-32200

Published Apr 14, 2026

HighCVSS 7.8

Microsoft PowerPoint Remote Code Execution Vulnerability

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.

Affected productsMicrosoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems

Fixed versionshttps://aka.ms/OfficeSecurityReleases, 16.0.5548.1001

Vendor guidance

Click to Run Install KB5002808.

CVE-2026-32200

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-32199

Published Apr 14, 2026

HighCVSS 7.8

Microsoft Excel Remote Code Execution Vulnerability

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Affected productsOffice Online Server, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems

Fixed versions16.0.10417.20113, https://aka.ms/OfficeSecurityReleases, 16.108.26041219, 16.0.5548.1000

Vendor guidance

Click to Run Release Notes Install KB5002855. Install KB5002860.

CVE-2026-32199

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-32198

Published Apr 14, 2026

HighCVSS 7.8

Microsoft Excel Remote Code Execution Vulnerability

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Affected productsOffice Online Server, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems

Fixed versions16.0.10417.20113, https://aka.ms/OfficeSecurityReleases, 16.108.26041219, 16.0.5548.1000

Vendor guidance

Click to Run Release Notes Install KB5002855. Install KB5002860.

CVE-2026-32198

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-32197

Published Apr 14, 2026

HighCVSS 7.8

Microsoft Excel Remote Code Execution Vulnerability

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Affected productsOffice Online Server, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems

Fixed versions16.0.10417.20113, https://aka.ms/OfficeSecurityReleases, 16.108.26041219, 16.0.5548.1000

Vendor guidance

Click to Run Release Notes Install KB5002855. Install KB5002860.

CVE-2026-32197

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-32196

Published Apr 14, 2026

HighCVSS 6.1

Windows Admin Center Spoofing Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Windows Admin Center allows an unauthorized attacker to perform spoofing over a network.

Affected productsWindows Admin Center

Fixed versions2.6.5.16

Vendor guidance

Release Notes

CVE-2026-32196

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-32195

Published Apr 14, 2026

HighCVSS 7.0

Windows Kernel Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

Affected productsWindows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems

Fixed versions10.0.28000.1836

Vendor guidance

Install KB5083768.

CVE-2026-32195

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-32192

Published Apr 14, 2026

HighCVSS 7.8

Azure Monitor Agent Elevation of Privilege Vulnerability

Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.

Affected productsAzure Monitor Agent

Fixed versions1.41.0

Vendor guidance

Release Notes

CVE-2026-32192

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-32189

Published Apr 14, 2026

HighCVSS 7.8

Microsoft Excel Remote Code Execution Vulnerability

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Affected productsOffice Online Server, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems

Fixed versions16.0.10417.20113, https://aka.ms/OfficeSecurityReleases, 16.108.26041219, 16.0.5548.1000

Vendor guidance

Click to Run Release Notes Install KB5002855. Install KB5002860.

CVE-2026-32189

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-32188

Published Apr 14, 2026

HighCVSS 7.1

Microsoft Excel Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Affected productsOffice Online Server, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems

Fixed versions16.0.10417.20113, https://aka.ms/OfficeSecurityReleases, 16.108.26041219, 16.0.5548.1000

Vendor guidance

Click to Run Release Notes Install KB5002855. Install KB5002860.

CVE-2026-32188

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-32184

Published Apr 14, 2026

HighCVSS 7.8

Microsoft High Performance Compute (HPC) Pack Elevation of Privilege Vulnerability

Deserialization of untrusted data in Microsoft High Performance Compute Pack (HPC) allows an authorized attacker to elevate privileges locally.

Affected productsMicrosoft HPC Pack 2019

Fixed versions6.3.8355

Vendor guidance

Release Notes

CVE-2026-32184

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-32183

Published Apr 14, 2026

HighCVSS 7.8

Windows Snipping Tool Remote Code Execution Vulnerability

Improper neutralization of special elements used in a command ('command injection') in Windows Snipping Tool allows an unauthorized attacker to execute code locally.

Fixed versions10.0.28000.1836, 10.0.17763.8644, 10.0.20348.5020, 10.0.19044.7184

Vendor guidance

CVE-2026-32183

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-32181

Published Apr 14, 2026

HighCVSS 5.5

Connected User Experiences and Telemetry Service Denial of Service Vulnerability

Improper privilege management in Microsoft Windows allows an authorized attacker to deny service locally.

Affected productsWindows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2022, Windows Server 2022 (Server Core installation)

Fixed versions10.0.28000.1836, 10.0.20348.5020, 10.0.19044.7184, 10.0.19045.7184

Vendor guidance

Install KB5083768. Install KB5082142. Install KB5082200. Install KB5082063. Install KB5083769. Install KB5082052. Install KB5082060.

CVE-2026-32181

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-32178

Published Apr 14, 2026

HighCVSS 7.5

.NET Spoofing Vulnerability

Improper neutralization of special elements in .NET allows an unauthorized attacker to perform spoofing over a network.

Affected productsMicrosoft Visual Studio 2022 version 17.12, Microsoft Visual Studio 2022 version 17.14, .NET 10.0 installed on Windows, .NET 10.0 installed on Mac OS

Fixed versions17.12.19, 17.14.30, 10.0.6, 8.0.26

Vendor guidance

Release Notes Install KB5086095. Install KB5086096. Install KB5086097.

CVE-2026-32178

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-32171

Published Apr 14, 2026

HighCVSS 8.8

Azure Logic Apps Elevation of Privilege Vulnerability

Insufficiently protected credentials in Azure Logic Apps allows an authorized attacker to elevate privileges over a network.

Affected productsAzure Logic Apps

CVE-2026-32171

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-32168

Published Apr 14, 2026

HighCVSS 7.8

Azure Monitor Agent Elevation of Privilege Vulnerability

Improper input validation in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.

Affected productsAzure Monitor Agent

Fixed versions1.35.9

Vendor guidance

Release Notes

CVE-2026-32168

Read the vendor advisory Watch this product

Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources