CurrentChecked 7 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
9Vendor sources
4,726Advisories collected
2,710Published or updated in 30 days
2,115Marked critical or high
Coverage
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
CurrentChecked 7 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 17 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 52 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 7 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 7 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 4 hours ago
Checked every 6 hours
Browse this vendor's advisories
Official source
CurrentChecked 7 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 7 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
4,726 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
Microsoft Security Response CenterCVE-2026-69777
HighCVSS 8.0
Windows DHCP Client Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network.
Affected productsWindows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems
Fixed versions10.0.26200.9445, 10.0.26100.9445, 10.0.28000.2954
Vendor guidance
Install KB5124008. Install KB5124012.
Microsoft Security Response CenterCVE-2026-69508
HighCVSS 7.8
Windows MIDI Service Module Elevation of Privileges Vulnerability
Stack-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
Affected productsWindows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 version 26H1 for x64-based Systems
Fixed versions10.0.26200.9445, 10.0.26100.9445, 10.0.28000.2954
Vendor guidance
Install KB5124008. Install KB5124012.
Microsoft Security Response CenterCVE-2026-69492
HighCVSS 7.0
Windows Partition Management Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725
Vendor guidance
Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.
Microsoft Security Response CenterCVE-2026-69334
HighCVSS 8.8
Windows Volume Manager Extension Driver Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725
Vendor guidance
Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.
Microsoft Security Response CenterCVE-2026-68877
HighCVSS 7.8
Windows Storage Spaces Controller Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725
Vendor guidance
Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099.
Microsoft Security Response CenterCVE-2026-13608
LowCVSS 3.7
OpenLDAP SASL authentication bypass
Mariner
Affected productsazl3 curl 8.11.1-11 on Azure Linux 3.0
Vendor guidance
See the Microsoft Security Update Guide for the update that applies to your product.
Microsoft Security Response CenterCVE-2026-19931
MediumCVSS 6.5
Negotiate ambient user conn reuse
Mariner
Affected productsazl3 curl 8.11.1-11 on Azure Linux 3.0
Vendor guidance
See the Microsoft Security Update Guide for the update that applies to your product.
Microsoft Security Response CenterCVE-2026-33630
HighCVSS 7.5
c-ares : Use-after-free / double-free in c-ares query-completion handling, remotely triggerable via ares_getaddrinfo() over TCP
Mariner
Affected productsazl3 fluent-bit 3.1.10-6 on Azure Linux 3.0
Vendor guidance
See the Microsoft Security Update Guide for the update that applies to your product.
Microsoft Security Response CenterCVE-2026-86098
HighCVSS 7.4
ntop nDPI before 6.0 Heap Buffer Overflow via ndpi_json_string_escape
Mariner
Affected productsazl3 ntopng 5.2.1-6 on Azure Linux 3.0
Vendor guidance
See the Microsoft Security Update Guide for the update that applies to your product.
Microsoft Security Response CenterCVE-2026-85769
MediumCVSS 6.5
Libtpms: libtpms: heap out-of-bounds read in tpm2 state unmarshalling via unchecked block_skip_read() blocksize
Mariner
Affected productsazl3 libtpms 0.9.6-8 on Azure Linux 3.0
Vendor guidance
See the Microsoft Security Update Guide for the update that applies to your product.
Microsoft Security Response CenterCVE-2026-85197
HighCVSS 7.6
Libsoup: libsoup: heap use-after-free in libsoup http/2 client on_data_read() via goaway during body upload
Mariner
Affected productsazl3 libsoup 3.4.4-16 on Azure Linux 3.0
Vendor guidance
See the Microsoft Security Update Guide for the update that applies to your product.
Microsoft Security Response CenterCVE-2026-85534
MediumCVSS 5.9
Libsoup: libsoup: http/2 client crash in on_data_source_read_callback when settings initial_window_size shrinks during deferred body read
Mariner
Affected productsazl3 libsoup 3.4.4-16 on Azure Linux 3.0
Vendor guidance
See the Microsoft Security Update Guide for the update that applies to your product.
Microsoft Security Response CenterCVE-2026-71224
MediumCVSS 4.7
Gfs2-utils: gfs2-utils: stack overflow via alloca(i_height) in metadata walk
Mariner
Affected productsazl3 gfs2-utils 3.5.1-1 on Azure Linux 3.0
Vendor guidance
See the Microsoft Security Update Guide for the update that applies to your product.
Microsoft Security Response CenterCVE-2026-71219
MediumCVSS 4.7
Gfs2-utils: gfs2-utils: stack overflow via alloca(1
Mariner
Affected productsazl3 gfs2-utils 3.5.1-1 on Azure Linux 3.0
Vendor guidance
See the Microsoft Security Update Guide for the update that applies to your product.
Microsoft Security Response CenterCVE-2026-71222
MediumCVSS 5.3
Gfs2-utils: gfs2-utils: heap out-of-bounds read via unchecked ea_num_ptrs in extended attribute processing
Mariner
Affected productsazl3 gfs2-utils 3.5.1-1 on Azure Linux 3.0
Vendor guidance
See the Microsoft Security Update Guide for the update that applies to your product.
Microsoft Security Response CenterCVE-2026-71221
HighCVSS 7.0
Gfs2-utils: gfs2-utils: stack out-of-bounds write via unchecked height in savemeta
Mariner
Affected productsazl3 gfs2-utils 3.5.1-1 on Azure Linux 3.0
Vendor guidance
See the Microsoft Security Update Guide for the update that applies to your product.
Microsoft Security Response CenterCVE-2026-71220
HighCVSS 7.0
Gfs2-utils: gfs2-utils: stack out-of-bounds write via unchecked di_height in gfs2_edit
Mariner
Affected productsazl3 gfs2-utils 3.5.1-1 on Azure Linux 3.0
Vendor guidance
See the Microsoft Security Update Guide for the update that applies to your product.
Ubuntu Security NoticesUSN-8739-1
Severity not listed
USN-8739-1: ImageMagick vulnerabilities
It was discovered that ImageMagick incorrectly handled certain images. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2026-56366...
Ubuntu Security NoticesUSN-8670-3
Severity not listed
USN-8670-3: curl vulnerability
USN-8670-1 fixed a vulnerability in curl. This update provides the corresponding update for Ubuntu 26.04 LTS. Original advisory details: Joshua Rogers discovered that curl incorrectly handled reusing connections when client certificate settings changed. This could result in th...
Vendor guidance
USN-8670-1 fixed a vulnerability in curl.
Ubuntu Security NoticesUSN-8679-2
Severity not listed
USN-8679-2: Vim vulnerability
USN-8679-1 fixed a vulnerability in Vim. This update provides the corresponding update for Ubuntu 26.04 LTS. Original advisory details: It was discovered that Vim incorrectly handled certain tags files. An attacker could possibly use this issue to execute arbitrary code.
Vendor guidance
USN-8679-1 fixed a vulnerability in Vim.
Ubuntu Security NoticesUSN-8738-1
Severity not listed
USN-8738-1: FFmpeg vulnerabilities
It was discovered that FFmpeg incorrectly handled certain video frames when using the hqdn3d filter. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2026-66036) Adrian Junge discovered that FFmpeg incorrectly handled certa...
Cisco Security Advisoriescisco-sa-ucs-uefi-sb-bypass-eb6xC5GW
High
Cisco UCS and UCS-Based Appliances UEFI Shell Secure Boot Bypass Vulnerability
A vulnerability in the Unified Extensible Firmware Interface (UEFI) Shell implementation of Cisco UCS Servers and UCS-based appliances could allow an authenticated attacker with valid credentials for a user account with the role of user or admin or an unauthenticated attacker ...
Vendor guidance
Cisco has released software updates that address this vulnerability.
Ubuntu Security NoticesUSN-8737-1
Severity not listed
USN-8737-1: GNU C Library vulnerabilities
It was discovered that GNU C Library had a buffer overflow in the strfmon function when handling right-justification padding. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 26.04 LTS. (CVE-2026-...
Ivanti Security AdvisoriesIVANTI-SEPTEMBER-2026-SECURITY-UPDATE
Severity not listedPriority signal
September 2026 Security Update
Ivanti releases standard security patches on the second Tuesday of every month. In today’s rapidly evolving technology and threat landscape, we believe responsible transparency should be a cornerstone of any product security program. AI is compressing the time-to-exploit, and ...
Affected productsIvanti Endpoint Manager, Ivanti Sentry
Vendor guidance
Ivanti releases standard security patches on the second Tuesday of every month.
Before you act
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.
Read how SecurityAlert collects and checks threat intelligence.