CurrentChecked 5 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
11Vendor sources
16,730Advisories collected
6,297Published or updated in 30 days
6,968Marked critical or high
Coverage
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
Check delayedChecked 5 days ago
Checked hourly
Browse this vendor's advisories
Official source
Check delayedChecked 20 days ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 50 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 45 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked just now
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked just now
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 4 hours ago
Checked every 6 hours
Browse this vendor's advisories
Official source
CurrentChecked just now
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 45 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 15 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
16,730 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
Cisco Security Advisoriescisco-sa-notice-QGwHnJ6k
Informational
Cisco Advance Notification for Publication of October 21, 2026, Security Advisories
On October 21, 2026, the Cisco Product Security Incident Response Team (PSIRT) published the following advisories.
Affected productsSnort 3, Cisco Expressway and Unified Communications Products, Cisco IOS XR Software and Secure Client
Vendor guidance
To remediate the vulnerabilities that were disclosed on October 21, 2026, Cisco strongly recommends that customers upgrade to the fixed software that is indicated in the advisories.
Cisco Security Advisoriescisco-sa-vcs-static-cred-hr7EWZ8t
Critical
Cisco Expressway Series Remote Code Execution Vulnerability
A vulnerability in the database service feature of Cisco Expressway Series could allow an unauthenticated, remote attacker with network access to a Cisco Expressway device to execute arbitrary operating system commands as root. This vulnerability is due to the use of persisten...
Vendor guidance
Cisco has released software updates that address this vulnerability.
Cisco Security Advisoriescisco-sa-sec-client-priv-esc-muF8eZdm
High
Cisco Secure Client Secure Firewall Posture Module Privilege Escalation Vulnerability
A vulnerability in the interprocess communication (IPC) channel of the Secure Firewall Posture module in Cisco Secure Client could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient validation of user-s...
Vendor guidance
Cisco has released software updates that address this vulnerability.
Cisco Security Advisoriescisco-sa-opensrc-snort3-2fXGJPfe
High
Open Source Snort 3 Control Channel Socket Arbitrary Command Execution Vulnerability
A vulnerability in the control channel socket implementation of Open Source Snort 3 could allow an authenticated, local attacker with low privileges to execute arbitrary commands as the Snort 3 process user. This vulnerability is due to a lack of authentication when a local us...
Vendor guidance
Cisco has released software updates that address this vulnerability.
Cisco Security Advisoriescisco-sa-asr9k-tUyxcyXN
High
Cisco IOS XR Software for ASR 9000 Series Routers IPv4 Unicast Packets Denial of Service Vulnerability
A vulnerability in the IPv4 packet processing functionality of Cisco IOS XR Software that affects Cisco ASR 9000 and 9900 Series Aggregation Services Routers as well as Cisco ASR 9902 and 9903 Compact High-Performance Routers could allow an unauthenticated, remote attacker to ...
Affected productsASR 9000 Series Aggregation Services Routers if they have a Lightspeed- or Lightspeed-Plus-based line card installed, ASR 9900 Series Aggregation Services Routers if they have a Lightspeed- or Lightspeed-Plus-based line card installed, ASR 9902 Compact High-Performance Routers, ASR 9903 Compact High-Performance Routers
Vendor guidance
Cisco has released software updates that address this vulnerability.
Cisco Security Advisoriescisco-sa-cucm-access-PW9e8Jt2
Medium
Cisco Unified Communications Manager Improper Access Control Vulnerability
A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to conduct access control bypass attacks on an affected device. This vulner...
Vendor guidance
Cisco has released software updates that address this vulnerability.
Cisco Security Advisoriescisco-sa-expressway-inf-disc-vvYqgSTS
Medium
Cisco Expressway Series Information Disclosure Vulnerability
A vulnerability in Cisco Expressway Series could allow an unauthenticated, remote attacker to obtain sensitive information from an affected device. This vulnerability is due to insufficient authorization checks of HTTP requests during Mobile and Remote Access (MRA) provisionin...
Vendor guidance
Cisco has released software updates that address this vulnerability.
Ubuntu Security NoticesUSN-8930-2
Severity not listed
USN-8930-2: U-Boot vulnerabilities
USN-8930-1 fixed some vulnerabilities in U-Boot. This update provides the corresponding fix for U-Boot on Ubuntu 26.10. Original advisory details: Shahriyar Jalayeri and Mehrun P. Hunter discovered that U-Boot incorrectly handled certain NFS READ and NFS READLINK responses. An...
Vendor guidance
USN-8930-1 fixed some vulnerabilities in U-Boot.
Ubuntu Security NoticesUSN-8949-1
Severity not listed
USN-8949-1: Ghostscript vulnerabilities
Rick de Jager discovered that Ghostscript incorrectly handled memory under certain circumstances when processing PostScript documents. If a user or automated system were tricked into processing a specially crafted document, an attacker could possibly use this issue to bypass t...
Ubuntu Security NoticesUSN-8948-2
Severity not listed
USN-8948-2: PHP vulnerabilities
USN-8948-1 fixed vulnerabilities in Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 26.04 LTS and Ubuntu 26.10. This provides the corrosponding updates in Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. Original advisory details: It was discovered that PH...
Vendor guidance
USN-8948-1 fixed vulnerabilities in Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 26.04 LTS and Ubuntu 26.10.
Ubuntu Security NoticesUSN-8948-1
Severity not listed
USN-8948-1: PHP vulnerabilities
It was discovered that PHP incorrectly handled out-of-memory conditions while processing requests. A remote attacker could use this issue to execute arbitrary code. (CVE-2026-109618) It was discovered that PHP incorrectly managed internal request state across worker reuse. A r...
Ubuntu Security NoticesUSN-8946-1
Severity not listed
USN-8946-1: Unbound vulnerabilities
It was discovered that Unbound incorrectly handled certain TCP connections. A remote attacker could possibly use this issue to cause Unbound to consume resources, leading to a denial of service. This issue only affected Ubuntu 26.04 LTS, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS and ...
Microsoft Security Response CenterCVE-2026-97783
HighCVSS 8.1
Microsoft Office SharePoint Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
Affected productsMicrosoft SharePoint Server 2019, Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server Subscription Edition
Fixed versions16.0.10417.20175, 16.0.5561.1001, 16.0.19725.20434
Vendor guidance
Install KB5002883. Install KB5002891. Install KB5002882.
Microsoft Security Response CenterCVE-2026-85870
HighCVSS 7.0
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807, 10.0.19045.7807
Vendor guidance
Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5127648. Install KB5126653. Install KB5127646. Install KB5126868. Install KB5126835. Install KB5126836.
Microsoft Security Response CenterCVE-2026-85868
HighCVSS 7.0
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807, 10.0.19045.7807
Vendor guidance
Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5127648. Install KB5126653. Install KB5127646. Install KB5126868. Install KB5126835. Install KB5126836.
Microsoft Security Response CenterCVE-2026-83709
HighCVSS 7.8
Windows NTLM Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows NTLM allows an authorized attacker to elevate privileges locally.
Affected productsWindows 11 Version 26H2 for ARM64-based Systems, Windows 11 Version 26H2 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems
Fixed versions10.0.26300.9711, 10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807
Vendor guidance
Install KB5127648. Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5126653. Install KB5127646. Install KB5126868.
Microsoft Security Response CenterCVE-2026-69902
HighCVSS 6.7
Windows NTFS Remote Code Execution Vulnerability
Untrusted pointer dereference in Windows NTFS allows an authorized attacker to execute code locally.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807, 10.0.19045.7807
Vendor guidance
Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5127648. Install KB5126653. Install KB5127646. Install KB5126868. Install KB5126835. Install KB5126836.
Microsoft Security Response CenterCVE-2026-61359
Severity not listedCVSS 7.8
Windows Storage Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
Vendor guidance
Install KB5120242. Install KB5120229. Install KB5120233. Install KB5120228. Install KB5121003. Install KB5120994. Install KB5120240. Install KB5121000.
Microsoft Security Response CenterCVE-2026-16729
MediumCVSS 4.8
undici vulnerable to cookie attribute injection via unsanitized domain and unparsed setCookie fields
Mariner
Affected productsazl3 nodejs 24.18.1-1 on Azure Linux 3.0, azl3 nodejs 24.20.0-1 on Azure Linux 3.0, azl3 nodejs 24.21.0-1 on Azure Linux 3.0
Fixed versions24.22.0-1
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-23434
MediumCVSS 5.5
mtd: rawnand: serialize lock/unlock against other NAND operations
Mariner
Affected productscbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-4647
MediumCVSS 6.1
Binutils: out-of-bounds read in xcoff relocation processing in gnu binutils bfd library
Mariner
Affected productscbl2 binutils 2.37-20 on CBL Mariner 2.0, cbl2 crash 8.0.1-5 on CBL Mariner 2.0, azl3 binutils 2.41-10 on Azure Linux 3.0, cbl2 gdb 11.2-10 on CBL Mariner 2.0
Fixed versions2.41-11, 9.0.0-2, 13.2-7
Vendor guidance
CBL-Mariner Releases Release Notes
Microsoft Security Response CenterCVE-2025-39989
MediumCVSS 5.5
x86/mce: use is_copy_from_user() to determine copy-from-user context
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Affected productsazl3 kernel 6.6.92.2-1 on Azure Linux 3.0, azl3 kernel 6.6.85.1-4 on Azure Linux 3.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0
Fixed versions6.6.92.2-1
Vendor guidance
CBL-Mariner Releases Release Notes
Microsoft Security Response CenterCVE-2025-21881
MediumCVSS 5.5
uprobes: Reject the shared zeropage in uprobe_write_opcode()
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Affected productscbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2023-53012
LowCVSS 3.3
thermal: core: call put_device() only after device_register() fails
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Affected productscbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0
Vendor guidance
Release Notes
Before you act
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.