CurrentChecked 2 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
11Vendor sources
16,745Advisories collected
6,299Published or updated in 30 days
6,969Marked critical or high
Coverage
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
CurrentChecked 27 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
Check delayedChecked 20 days ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 37 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 37 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 2 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 2 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 3 hours ago
Checked every 6 hours
Browse this vendor's advisories
Official source
CurrentChecked 2 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 32 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 2 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
16,745 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
Microsoft Security Response CenterCVE-2025-22107
HighCVSS 7.1
net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry()
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Affected productsazl3 kernel 6.6.112.1-2 on Azure Linux 3.0, azl3 kernel 6.6.117.1-1 on Azure Linux 3.0, azl3 kernel 6.6.119.3-1 on Azure Linux 3.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0
Fixed versions6.6.121.1-1
Vendor guidance
CBL-Mariner Releases Release Notes
Microsoft Security Response CenterCVE-2025-22105
MediumCVSS 5.5
bonding: check xdp prog when set bond mode
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.112.1-2 on Azure Linux 3.0, azl3 kernel 6.6.117.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0
Fixed versions6.6.119.3-1
Vendor guidance
CBL-Mariner Releases Release Notes
Microsoft Security Response CenterCVE-2026-53615
HighCVSS 8.0
util-linux libblkid DOS extended-partition overflow produces invalid partition metadata
Mariner
Affected productsazl3 util-linux 2.40.2-6 on Azure Linux 3.0
Vendor guidance
Release Notes
Cisco Security Advisoriescisco-sa-hardening-meraki-os-drbEX9GH
CriticalPriority signal
Cisco Meraki Security Hardening Release: October 2026
As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. These vulnera...
Affected productsCampus Gateways, Meraki MG Cellular Gateways, Meraki MR Wireless Access Points, Meraki MS Series Switches
Vendor guidance
To assist customers in patching and streamline the disclosure process, Cisco has grouped these issues by their underlying vulnerability class - Common Weakness Enumeration (CWE) - and assigned a single Common Vulnerab...
AWS Security Bulletins
Severity not listed
Issue in the Linux kernel virtio-net/TAP networking path affecting KVM-based hypervisors
Read this article
Palo Alto Networks Security AdvisoriesCVE-2026-0322
HighCVSS 8.6
CVE-2026-0322: PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface
A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS® software enables an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall. The security risk posed by this issue is minimiz...
Affected productsCloud NGFW, PAN-OS, Prisma Access, PAN-OS 12.2
Fixed versionsCloud NGFW All, PAN-OS 12.2 >= 12.2.4, PAN-OS 12.1 >= 12.1.4-h12, >= 12.1.7-h8, >= 12.1.10-h2, PAN-OS 11.2 >= 11.2.4-h22, >= 11.2.7-h21, >= 11.2.10-h15, >= 11.2.13-h3, >= 11.2.16
Vendor guidance
VERSION MINOR VERSION SUGGESTED SOLUTION Cloud NGFW No action needed. PAN-OS 12.2 12.2.0 through 12.2.3 Upgrade to 12.2.4 or later. PAN-OS 12.1 12.1.8 through 12.1.10-h* Upgrade to 12.1.10-h2 or later. 12.1.5 through ...
Palo Alto Networks Security AdvisoriesCVE-2026-0321
HighCVSS 8.7
CVE-2026-0321: PAN-OS: Denial of Service (DoS) Vulnerabilities in Network Services
Denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition by sending specially crafted network traffic to or through a dataplane interface. Repeated attempts to tr...
Affected productsCloud NGFW, PAN-OS, Prisma Access, PAN-OS 12.2
Fixed versionsCloud NGFW All, PAN-OS 12.2 >= 12.2.4, PAN-OS 12.1 >= 12.1.4-h12, >= 12.1.7-h8, >= 12.1.10-h2, PAN-OS 11.2 >= 11.2.4-h22, >= 11.2.7-h21, >= 11.2.10-h15, >= 11.2.13-h3, >= 11.2.16
Vendor guidance
VERSION MINOR VERSION SUGGESTED SOLUTION Cloud NGFW No action needed. PAN-OS 12.2 12.2.0 through 12.2.3 Upgrade to 12.2.4 or later. PAN-OS 12.1 12.1.8 through 12.1.10-h* Upgrade to 12.1.10-h2 or later. 12.1.5 through ...
Palo Alto Networks Security AdvisoriesCVE-2026-0320
HighCVSS 8.6
CVE-2026-0320: PAN-OS: Authenticated Admin Command Injection Vulnerability
A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS management interfa...
Affected productsCloud NGFW, PAN-OS, Prisma Access, PAN-OS 12.2
Fixed versionsCloud NGFW All, PAN-OS 12.2 >= 12.2.4, PAN-OS 12.1 >= 12.1.4-h12, >= 12.1.7-h8, >= 12.1.10-h2, PAN-OS 11.2 >= 11.2.4-h22, >= 11.2.7-h21, >= 11.2.10-h15, >= 11.2.13-h3, >= 11.2.16
Vendor guidance
VERSION MINOR VERSION SUGGESTED SOLUTION Cloud NGFW No action needed. PAN-OS 12.2 12.2.0 through 12.2.3 Upgrade to 12.2.4 or later. PAN-OS 12.1 12.1.8 through 12.1.10-h* Upgrade to 12.1.10-h2 or later. 12.1.5 through ...
Palo Alto Networks Security AdvisoriesCVE-2026-0317
MediumCVSS 5.1
CVE-2026-0317: PAN-OS: Denial of Service Vulnerability
A denial of service vulnerability in Palo Alto Networks PAN-OS software enables an authenticated user with a read-only administrator role to cause a denial of service (DoS) condition by sending a specially crafted API request. The security risk posed by this issue is significa...
Affected productsCloud NGFW, PAN-OS, Prisma Access, PAN-OS 12.2
Fixed versionsCloud NGFW All, PAN-OS 12.2 >= 12.2.4, PAN-OS 12.1 >= 12.1.10-h2, PAN-OS 11.2 >= 11.2.16
Vendor guidance
VERSION MINOR VERSION RANGE SUGGESTED SOLUTION Cloud NGFW No action required. PAN-OS 12.1 12.2.0 through 12.2.3-h* Upgrade to 12.2.4 or later. PAN-OS 12.1 12.1.2 through 12.1.10-h* Upgrade to 12.1.10-h2 or later. PAN-...
Palo Alto Networks Security AdvisoriesCVE-2026-0316
MediumCVSS 4.8
CVE-2026-0316: PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability
A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store or execute a JavaScript payload using the web interface. The security risk posed by this issue is minimized when the management int...
Affected productsCloud NGFW, PAN-OS, Prisma Access, PAN-OS 12.2
Fixed versionsCloud NGFW All, PAN-OS 12.2 >= 12.2.4, PAN-OS 12.1 >= 12.1.10-h2, PAN-OS 11.2 >= 11.2.16
Vendor guidance
VERSION MINOR VERSION SUGGESTED SOLUTION Cloud NGFW No action needed. PAN-OS 12.2 12.2.0 through 12.2.3 Upgrade to 12.2.4 or later. PAN-OS 12.1 12.1.2 through 12.1.10-h* Upgrade to 12.1.10-h2 or later. PAN-OS 11.2 11....
Ubuntu Security NoticesUSN-8933-1
Severity not listed
USN-8933-1: RabbitMQ Server vulnerabilities
It was discovered that RabbitMQ Server incorrectly handled CORS wildcard origin configuration. An attacker could possibly use this issue to cause a cross-site request forgery attack. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LT...
AWS Security BulletinsCVE-2026-110812
Severity not listed
CVE-2026-110812 - Deserialization of untrusted data in the Gremlin graph-import path in Amazon Neptune
Read this article
Vendor guidance
This issue has been addressed in the engine versions listed below; we recommend customers upgrade.
Ubuntu Security NoticesUSN-8922-2
Severity not listed
USN-8922-2: Linux kernel (Azure) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - S390 architecture; - IIO ADC drivers; - Multiple devices driver; - PCI subsystem; - VFIO driver...
Vendor guidance
This update corrects flaws in the following subsystems: - S390 architecture; - IIO ADC drivers; - Multiple devices driver; - PCI subsystem; - VFIO drivers; - Network file system (NFS) server daemon; - Overlay file sys...
Ubuntu Security NoticesUSN-8883-2
Severity not listed
USN-8883-2: Go vulnerability
USN-8883-1 fixed a vulnerability in Go versions 1.18, 1.21, and 1.24. This update provides the corresponding fix for Go version 1.23. Original advisory details: It was discovered that the Go x/net/idna package incorrectly handled certain Punycode-encoded labels that decoded to...
Vendor guidance
USN-8883-1 fixed a vulnerability in Go versions 1.18, 1.21, and 1.24.
Microsoft Security Response CenterCVE-2026-108448
CriticalCVSS 7.5
Microsoft Office Outlook Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
Affected productsMicrosoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions
Fixed versions16.0.14334.20974, 16.0.17932.21056, https://aka.ms/OfficeSecurityReleases, 16.114.26101123
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-108440
CriticalCVSS 8.8
Microsoft Office Word Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Affected productsMicrosoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 64-bit editions
Fixed versions16.114.26101123, 16.0.14334.20974, 16.0.17932.21056, https://aka.ms/OfficeSecurityReleases
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-108439
CriticalCVSS 8.8
Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Affected productsMicrosoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021 for 64-bit editions
Fixed versions16.114.26101123, 16.0.14334.20974, 16.0.17932.21056, https://aka.ms/OfficeSecurityReleases
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-97780
CriticalCVSS 8.8
Microsoft Office Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Affected productsMicrosoft Office 365 for Mac, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, Microsoft Office LTSC 2021 for 64-bit editions
Fixed versions16.114.26101123, 16.0.14334.20974, 16.0.17932.21056, https://aka.ms/OfficeSecurityReleases
Vendor guidance
Release Notes Install KB5002928.
Microsoft Security Response CenterCVE-2026-97778
CriticalCVSS 8.8
Microsoft Office Excel Remote Code Execution Vulnerability
Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Affected productsOffice Online Server, Microsoft Office 365 for Mac, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024
Fixed versions16.0.10417.20228, 16.114.26101123, 16.0.14334.20974, 16.0.17932.21056
Vendor guidance
Release Notes Install KB5002928.
Microsoft Security Response CenterCVE-2026-97767
CriticalCVSS 8.8
Microsoft Office Excel Remote Code Execution Vulnerability
Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Affected productsMicrosoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions
Fixed versions16.0.14334.20974, 16.0.17932.21056, https://aka.ms/OfficeSecurityReleases, 16.114.26101123
Vendor guidance
Release Notes Install KB5002928.
Microsoft Security Response CenterCVE-2026-97765
CriticalCVSS 8.8
Microsoft Office Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Affected productsOffice Online Server, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions
Fixed versions16.0.10417.20228, 16.0.14334.20974, 16.0.17932.21056, https://aka.ms/OfficeSecurityReleases
Vendor guidance
Release Notes Install KB5002928.
Microsoft Security Response CenterCVE-2026-97761
CriticalCVSS 8.8
Microsoft Office Excel Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Affected productsMicrosoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft 365 Apps for Enterprise for 32-bit Systems
Fixed versions16.0.17932.21056, https://aka.ms/OfficeSecurityReleases, 16.114.26101123
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-97759
CriticalCVSS 8.8
Microsoft Office Excel Remote Code Execution Vulnerability
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Affected productsMicrosoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft 365 Apps for Enterprise for 32-bit Systems
Fixed versions16.0.17932.21056, https://aka.ms/OfficeSecurityReleases, 16.114.26101123
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-97758
CriticalCVSS 8.8
Microsoft Office Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Affected productsMicrosoft Office 365 for Mac, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, Microsoft Office LTSC 2021 for 64-bit editions
Fixed versions16.114.26101123, 16.0.14334.20974, 16.0.17932.21056, https://aka.ms/OfficeSecurityReleases
Vendor guidance
Release Notes Install KB5002928.
Before you act
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.