Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
18,986Advisories collected
6,744Published or updated in 30 days
8,727Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

18,986 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2026-27922
HighCVSS 7.0

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Affected productsWindows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems
Fixed versions10.0.28000.1836, 10.0.17763.8644, 10.0.20348.5020, 10.0.19044.7184
Vendor guidance

Install KB5083768. Install KB5082123. Install KB5082142. Install KB5082200. Install KB5082063. Install KB5083769. Install KB5082052. Install KB5082060. Install KB5082198. Install KB5082127. Install KB5082126.

CVE-2026-27922
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-27921
HighCVSS 7.0

Windows TDI Translation Driver (tdx.sys) Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

Affected productsWindows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems
Fixed versions10.0.28000.1836, 10.0.17763.8644, 10.0.20348.5020, 10.0.19044.7184
Vendor guidance

Install KB5083768. Install KB5082123. Install KB5082142. Install KB5082200. Install KB5082063. Install KB5083769. Install KB5082052. Install KB5082060. Install KB5082198. Install KB5082127. Install KB5082126.

CVE-2026-27921
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-27920
HighCVSS 7.8

Windows UPnP Device Host Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.

Affected productsWindows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems
Fixed versions10.0.28000.1836, 10.0.17763.8644, 10.0.20348.5020, 10.0.19044.7184
Vendor guidance

Install KB5083768. Install KB5082123. Install KB5082142. Install KB5082200. Install KB5082063. Install KB5083769. Install KB5082052. Install KB5082060. Install KB5082198. Install KB5082127. Install KB5082126.

CVE-2026-27920
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-27919
HighCVSS 7.8

Windows UPnP Device Host Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8644, 10.0.20348.5020, 10.0.19044.7184, 10.0.19045.7184
Vendor guidance

Install KB5082123. Install KB5082142. Install KB5082200. Install KB5082063. Install KB5083769. Install KB5082052. Install KB5082060. Install KB5082198. Install KB5082127. Install KB5082126. Install KB5083768.

CVE-2026-27919
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-27918
HighCVSS 7.8

Windows Shell Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Shell allows an authorized attacker to elevate privileges locally.

Affected productsWindows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems
Fixed versions10.0.28000.1836, 10.0.17763.8644, 10.0.20348.5020, 10.0.19044.7184
Vendor guidance

Install KB5083768. Install KB5082123. Install KB5082142. Install KB5082200. Install KB5082063. Install KB5083769. Install KB5082052. Install KB5082060.

CVE-2026-27918
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-27917
HighCVSS 7.0

Windows WFP NDIS Lightweight Filter Driver (wfplwfs.sys) Elevation of Privilege Vulnerability

Use after free in Windows WFP NDIS Lightweight Filter Driver (wfplwfs.sys) allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8644, 10.0.20348.5020, 10.0.19044.7184, 10.0.19045.7184
Vendor guidance

Install KB5082123. Install KB5082142. Install KB5082200. Install KB5082063. Install KB5083769. Install KB5082052. Install KB5082060. Install KB5082198. Install KB5082126. Install KB5083768.

CVE-2026-27917
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-27916
HighCVSS 7.8

Windows UPnP Device Host Elevation of Privilege Vulnerability

Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8644, 10.0.20348.5020, 10.0.19044.7184, 10.0.19045.7184
Vendor guidance

Install KB5082123. Install KB5082142. Install KB5082200. Install KB5082063. Install KB5083769. Install KB5082052. Install KB5082060. Install KB5082198. Install KB5082127. Install KB5082126. Install KB5083768.

CVE-2026-27916
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-27915
HighCVSS 7.8

Windows UPnP Device Host Elevation of Privilege Vulnerability

Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8644, 10.0.20348.5020, 10.0.19044.7184, 10.0.19045.7184
Vendor guidance

Install KB5082123. Install KB5082142. Install KB5082200. Install KB5082063. Install KB5083769. Install KB5082052. Install KB5082060. Install KB5082198. Install KB5082127. Install KB5082126. Install KB5083768.

CVE-2026-27915
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-27914
HighCVSS 7.8

Microsoft Management Console Elevation of Privilege Vulnerability

Improper access control in Microsoft Management Console allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8644, 10.0.20348.5020, 10.0.19044.7184, 10.0.19045.7184
Vendor guidance

Install KB5082123. Install KB5082142. Install KB5082200. Install KB5082063. Install KB5083769. Install KB5082052. Install KB5082060. Install KB5082198. Install KB5082127. Install KB5082126. Install KB5083768.

CVE-2026-27914
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-27913
HighCVSS 7.7

Windows BitLocker Security Feature Bypass Vulnerability

Improper input validation in Windows BitLocker allows an unauthorized attacker to bypass a security feature locally.

Affected productsWindows Server 2019, Windows Server 2022, 23H2 Edition (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation)
Fixed versions10.0.17763.8644, 10.0.25398.2274, 10.0.14393.9060, 10.0.20348.5020
Vendor guidance

Install KB5082123. Install KB5082060. Install KB5082198. Install KB5082142. Install KB5082127. Install KB5082126.

CVE-2026-27913
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-27912
HighCVSS 8.0

Windows Kerberos Elevation of Privilege Vulnerability

Improper authorization in Windows Kerberos allows an authorized attacker to elevate privileges over an adjacent network.

Affected productsWindows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation)
Fixed versions10.0.17763.8644, 10.0.20348.5020, 10.0.26100.32690, 10.0.25398.2274
Vendor guidance

Install KB5082123. Install KB5082142. Install KB5082063. Install KB5082060. Install KB5082198. Install KB5082127. Install KB5082126.

CVE-2026-27912
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-27911
HighCVSS 7.8

Windows User Interface Core Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows User Interface Core allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8644, 10.0.20348.5020, 10.0.19044.7184, 10.0.19045.7184
Vendor guidance

Install KB5082123. Install KB5082142. Install KB5082200. Install KB5082063. Install KB5083769. Install KB5082052. Install KB5082060. Install KB5082198. Install KB5083768.

CVE-2026-27911
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-27910
HighCVSS 7.8

Windows Installer Elevation of Privilege Vulnerability

Improper handling of insufficient permissions or privileges in Windows Installer allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8644, 10.0.20348.5020, 10.0.19044.7184, 10.0.19045.7184
Vendor guidance

Install KB5082123. Install KB5082142. Install KB5082200. Install KB5082063. Install KB5083769. Install KB5082052. Install KB5082060. Install KB5082198. Install KB5082127. Install KB5082126. Install KB5083768.

CVE-2026-27910
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-27909
HighCVSS 7.8

Windows Search Service Elevation of Privilege Vulnerability

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8644, 10.0.20348.5020, 10.0.19044.7184, 10.0.19045.7184
Vendor guidance

Install KB5082123. Install KB5082142. Install KB5082200. Install KB5082063. Install KB5083769. Install KB5082052. Install KB5082060. Install KB5082198. Install KB5082127. Install KB5082126. Install KB5083768.

CVE-2026-27909
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-27908
HighCVSS 7.0

Windows TDI Translation Driver (tdx.sys) Elevation of Privilege Vulnerability

Use after free in Windows TDI Translation Driver (tdx.sys) allows an authorized attacker to elevate privileges locally.

Affected productsWindows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems
Fixed versions10.0.28000.1836, 10.0.17763.8644, 10.0.20348.5020, 10.0.19044.7184
Vendor guidance

Install KB5083768. Install KB5082123. Install KB5082142. Install KB5082200. Install KB5082063. Install KB5083769. Install KB5082052. Install KB5082060. Install KB5082198. Install KB5082127. Install KB5082126.

CVE-2026-27908
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-27907
HighCVSS 7.8

Windows Storage Spaces Controller Elevation of Privilege Vulnerability

Integer underflow (wrap or wraparound) in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.

Affected productsWindows Server 2025 (Server Core installation), Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems
Fixed versions10.0.26100.32690, 10.0.26200.8246, 10.0.22631.6936, 10.0.25398.2274
Vendor guidance

Install KB5082063. Install KB5083769. Install KB5082052. Install KB5082060. Install KB5083768.

CVE-2026-27907
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-27906
HighCVSS 4.4

Windows Hello Security Feature Bypass Vulnerability

Improper input validation in Windows Hello allows an authorized attacker to bypass a security feature locally.

Affected productsWindows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for x64-based Systems
Fixed versions10.0.19044.7184, 10.0.19045.7184, 10.0.26200.8246, 10.0.22631.6936
Vendor guidance

Install KB5082200. Install KB5083769. Install KB5082052. Install KB5083768.

CVE-2026-27906
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-26184
HighCVSS 7.8

Windows Projected File System Elevation of Privilege Vulnerability

Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally.

Affected productsWindows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2019, Windows 10 Version 1809 for x64-based Systems
Fixed versions10.0.28000.1836, 10.0.17763.8644, 10.0.20348.5020, 10.0.19044.7184
Vendor guidance

Install KB5083768. Install KB5082123. Install KB5082142. Install KB5082200. Install KB5082063. Install KB5083769. Install KB5082052. Install KB5082060.

CVE-2026-26184
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-26183
HighCVSS 7.8

Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability

Improper access control in Windows RPC API allows an authorized attacker to elevate privileges locally.

Affected productsWindows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation)
Fixed versions10.0.17763.8644, 10.0.20348.5020, 10.0.26100.32690, 10.0.25398.2274
Vendor guidance

Install KB5082123. Install KB5082142. Install KB5082063. Install KB5082060. Install KB5082198. Install KB5082127. Install KB5082126.

CVE-2026-26183
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-26182
HighCVSS 7.0

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8644, 10.0.20348.5020, 10.0.19044.7184, 10.0.19045.7184
Vendor guidance

Install KB5082123. Install KB5082142. Install KB5082200. Install KB5082063. Install KB5083769. Install KB5082052. Install KB5082060. Install KB5082198. Install KB5082127. Install KB5082126. Install KB5083768.

CVE-2026-26182
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-26181
HighCVSS 7.8

Microsoft Brokering File System Elevation of Privilege Vulnerability

Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.

Affected productsWindows Server 2025 (Server Core installation), Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems
Fixed versions10.0.26100.32690, 10.0.26200.8246, 10.0.22631.6936, 10.0.25398.2274
Vendor guidance

Install KB5082063. Install KB5083769. Install KB5082052. Install KB5082060. Install KB5083768.

CVE-2026-26181
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-26180
HighCVSS 7.8

Windows Kernel Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

Affected productsWindows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems
Fixed versions10.0.28000.1836, 10.0.17763.8644, 10.0.20348.5020, 10.0.19044.7184
Vendor guidance

Install KB5083768. Install KB5082123. Install KB5082142. Install KB5082200. Install KB5082063. Install KB5083769. Install KB5082052. Install KB5082060. Install KB5082198. Install KB5082127. Install KB5082126.

CVE-2026-26180
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-26179
HighCVSS 7.8

Windows Kernel Elevation of Privilege Vulnerability

Double free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Affected productsWindows Server 2025 (Server Core installation), Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems
Fixed versions10.0.26100.32690, 10.0.26200.8246, 10.0.22631.6936, 10.0.25398.2274
Vendor guidance

Install KB5082063. Install KB5083769. Install KB5082052. Install KB5082060. Install KB5083768.

CVE-2026-26179
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-26178
HighCVSS 8.8

Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability

Integer size truncation in Windows Advanced Rasterization Platform (WARP) allows an unauthorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8644, 10.0.20348.5020, 10.0.19044.7184, 10.0.19045.7184
Vendor guidance

Install KB5082123. Install KB5082142. Install KB5082200. Install KB5082063. Install KB5083769. Install KB5082052. Install KB5082060. Install KB5082198.

CVE-2026-26178
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources