CurrentChecked 12 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
11Vendor sources
16,745Advisories collected
6,299Published or updated in 30 days
6,969Marked critical or high
Coverage
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
CurrentChecked 12 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
Check delayedChecked 20 days ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 17 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 17 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 7 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 7 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 4 hours ago
Checked every 6 hours
Browse this vendor's advisories
Official source
CurrentChecked 7 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 12 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 7 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
16,745 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
Cisco Security Advisoriescisco-sa-hardening-esa-dfCrfXkm
CriticalPriority signal
Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases t...
Vendor guidance
To assist customers in patching and streamline the disclosure process, Cisco has grouped these issues by their underlying vulnerability class - Common Weakness Enumeration (CWE) - and assigned a single Common Vulnerab...
Palo Alto Networks Security AdvisoriesPAN-SA-2026-0013
CriticalCVSS 9.4
PAN-SA-2026-0013: Chromium: Monthly Vulnerability Update (October 2026)
Palo Alto Networks incorporated the following Chromium security fixes into our products: * https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop_28.html
Affected productsPrisma Browser
Fixed versionsPrisma Browser >= 155.16.5.40
Vendor guidance
CVE PRISMA BROWSER CVE-2026-13774 150.41.2.115 CVE-2026-13775 150.41.2.115 CVE-2026-13776 150.41.2.115 CVE-2026-13777 150.41.2.115 CVE-2026-13778 150.41.2.115 CVE-2026-13779 150.41.2.115 CVE-2026-13780 150.41.2.115 CV...
Cisco Security Advisoriescisco-sa-esa-afw-zqYJkjxp
Critical
Cisco Secure Email Gateway Arbitrary File Write Vulnerability
A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system. This vulnerability is due to improper handling of email attachments when ...
Affected productsThe File Reputation service, which is part of Cisco AMP, is enabled and assigned to a mail policy., The Content Scanner Tools version is earlier than 25.3.0.5525.
Vendor guidance
Cisco has released software updates that address this vulnerability.
Palo Alto Networks Security AdvisoriesCVE-2026-0315
HighCVSS 8.5
CVE-2026-0315: GlobalProtect App: Local Privilege Escalation Vulnerability on macOS
A local privilege escalation vulnerability in the Palo Alto Networks GlobalProtect™ app enables a local user to escalate their privileges to root on macOS. This enables a non-administrative user to execute arbitrary commands with administrative privileges. The GlobalProtect ap...
Affected productsGlobalProtect App, GlobalProtect App 6.2, GlobalProtect App 6.3
Fixed versionsGlobalProtect App 6.2 >= 6.2.8-h15 (6.2.8-1084) on macOS, GlobalProtect App 6.3 >= 6.3.3-h16 (6.3.3-1199) on macOS, GlobalProtect App All on Linux, All on Windows, All on iOS, All on Android, All on ChromeOS
Vendor guidance
VERSION MINOR VERSION SUGGESTED SOLUTION GlobalProtect App 6.3 on macOS 6.3.0 through 6.3.3-h15 Upgrade to 6.3.3-h16 (6.3.3-1199) or later. GlobalProtect App 6.2 on macOS 6.2.0 through 6.2.8-h14 Upgrade to 6.2.8-h15 (...
Palo Alto Networks Security AdvisoriesCVE-2026-0313
HighCVSS 8.6
CVE-2026-0313: Cortex XSOAR: OS Command Injection Vulnerability
A command injection vulnerability in Palo Alto Networks Cortex XSOAR and Cortex XSIAM OS Query content pack enables an authenticated administrator to execute arbitrary OS commands on remote endpoints.
Affected productsCortex XSOAR OS Query, Cortex XSIAM OS Query, Cortex XSOAR OS Query 0, Cortex XSIAM OS Query 0
Fixed versionsCortex XSOAR OS Query 0 >= 1.0.17, Cortex XSIAM OS Query 0 >= 1.0.17
Vendor guidance
VERSION MINOR VERSION SUGGESTED SOLUTION Cortex XSOAR OS Query Update to 1.0.17 or later from the Cortex XSOAR Marketplace. Cortex XSIAM OS Query Update to 1.0.17 or later from the Cortex XSOAR Marketplace.
Palo Alto Networks Security AdvisoriesCVE-2026-0318
HighCVSS 8.2
CVE-2026-0318: PAN-OS: Denial of Service (DoS) on Panorama
A stack-based buffer overflow vulnerability in the log processing functionality of Palo Alto Networks PAN-OS® software on Panorama enables an attacker to cause a denial of service (DoS) condition. Repeated attempts to trigger this condition result in the Panorama entering main...
Affected productsCloud NGFW, PAN-OS, Prisma Access, PAN-OS 12.2
Fixed versionsCloud NGFW All, PAN-OS 12.2 >= 12.2.4 on Panorama, PAN-OS 12.1 >= 12.1.4-h12 on Panorama, >= 12.1.7-h8 on Panorama, >= 12.1.10-h2 on Panorama, PAN-OS 11.2 >= 11.2.4-h22 on Panorama, >= 11.2.7-h21 on Panorama, >= 11.2.10-h15 on Panorama, >= 11.2.13-h3 on Panorama, >= 11.2.15 on Panorama
Vendor guidance
VERSION MINOR VERSION SUGGESTED SOLUTION Cloud NGFW No action needed. PAN-OS 12.2 12.2.0 through 12.2.3 Upgrade to 12.2.4 or later. PAN-OS 12.1 12.1.8 through 12.1.10-h* Upgrade to 12.1.10-h2 or later. 12.1.5 through ...
Palo Alto Networks Security AdvisoriesCVE-2026-0319
HighCVSS 7.6
CVE-2026-0319: PAN-OS: Improper Input Handling Vulnerability
An improper input handling vulnerability in the GlobalProtect™ gateway of Palo Alto Networks PAN-OS software enables an authenticated user to establish a GlobalProtect session using the identity of another user. Cloud NGFW and Panorama are not affected by this vulnerability.
Affected productsCloud NGFW, PAN-OS, Prisma Access, PAN-OS 12.2
Fixed versionsCloud NGFW All, PAN-OS 12.2 >= 12.2.4, PAN-OS 12.1 >= 12.1.4-h12, >= 12.1.7-h8, >= 12.1.10-h2, PAN-OS 11.2 >= 11.2.4-h22, >= 11.2.7-h21, >= 11.2.10-h15, >= 11.2.13-h3, >= 11.2.16 (ETA: 10/15)
Vendor guidance
VERSION MINOR VERSION SUGGESTED SOLUTION Cloud NGFW No action needed. PAN-OS 12.2 12.2.0 through 12.2.3 Upgrade to 12.2.4 or later. PAN-OS 12.1 12.1.8 through 12.1.10-h* Upgrade to 12.1.10-h2 or later. 12.1.5 through ...
Palo Alto Networks Security AdvisoriesCVE-2026-0314
MediumCVSS 6.8
CVE-2026-0314: GlobalProtect App: Local Denial of Service (DoS) on Windows
A type confusion vulnerability in Palo Alto Networks GlobalProtect™ app on Windows enables a local user with low privileges to cause a denial of service (DoS) condition. The GlobalProtect™ app on Linux, macOS, iOS, Android, and Chrome OS is not affected by this vulnerability.
Affected productsGlobalProtect App, GlobalProtect App 6.3, GlobalProtect App 6.2, GlobalProtect App 6.0
Fixed versionsGlobalProtect App 6.3 >= 6.3.3-h16 (6.3.3-1199) on Windows, GlobalProtect App 6.2 >= 6.2.8-h15 (6.2.8-1084) on Windows, GlobalProtect App 6.0 >= 6.0.15 on Windows, GlobalProtect App All on Linux, All on macOS, All on iOS, All on Android, All on Chrome OS
Vendor guidance
VERSION MINOR VERSION SUGGESTED SOLUTION GlobalProtect App 6.3 on Windows 6.3.0 through 6.3.3-h15 Upgrade to 6.3.3-h16 (6.3.3-1199) or later. GlobalProtect App 6.2 on Windows 6.2.0 through 6.2.8-h14 Upgrade to 6.2.8-h...
Palo Alto Networks Security AdvisoriesCVE-2026-0312
MediumCVSS 6.8
CVE-2026-0312: Checkov by Prisma Cloud: Path Traversal Vulnerabilities
Path traversal vulnerabilities in Palo Alto Networks Checkov by Prisma® Cloud enable an unauthenticated local user to write files to arbitrary locations on the scanning filesystem.
Affected productsCheckov by Prisma Cloud, Checkov by Prisma Cloud 0
Fixed versionsCheckov by Prisma Cloud 0 >= 3.3.25
Vendor guidance
VERSION MINOR VERSION SUGGESTED SOLUTION Checkov by Prisma Cloud 3.3 3.2.0 through 3.3.24 Upgrade to 3.3.25 or later. Checkov integration in Prisma Cloud is upgraded automatically when new versions become available.
Palo Alto Networks Security AdvisoriesCVE-2026-0311
MediumCVSS 4.8
CVE-2026-0311: Checkov by Prisma Cloud: Server-Side Request Forgery Vulnerability
A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local unauthenticated user to make unauthorized network requests from host to internal services.
Affected productsCheckov by Prisma Cloud, Checkov by Prisma Cloud 0
Fixed versionsCheckov by Prisma Cloud 0 >= 3.2.533
Vendor guidance
VERSION MINOR VERSION SUGGESTED SOLUTION Checkov by Prisma Cloud 3.2.0 through 3.2.532 Upgrade to 3.2.533 or later. Checkov integration in Prisma Cloud is upgraded automatically when new versions become available.
Ubuntu Security NoticesUSN-8929-1
Severity not listed
USN-8929-1: Bind vulnerabilities
Zuyao Xu and Xiang Li discovered that Bind incorrectly handled certain malformed DNSKEY records. A remote attacker could possibly use this issue to cause Bind to consume resources, resulting in a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, a...
Ubuntu Security NoticesUSN-8928-1
Severity not listed
USN-8928-1: OpenSSH vulnerabilities
It was discovered that OpenSSH's sftp client incorrectly handled paths returned by the server during a recursive copy operation. A remote attacker controlling the server could possibly use this issue to write files to unintended locations. (CVE-2026-106552) It was discovered t...
Ubuntu Security NoticesUSN-8927-1
Severity not listed
USN-8927-1: curl vulnerabilities
It was discovered that curl, when built with GnuTLS support, had an out-of-bounds read in the WebSocket send path. An attacker could possibly use this issue to obtain sensitive information. (CVE-2026-107928) Maksim discovered that curl did not correctly include the interface b...
Microsoft Security Response CenterCVE-2026-83943
CriticalCVSS 8.7
Azure API Center Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Azure API Center allows an unauthorized attacker to disclose information over a network.
Affected productsAzure API Center
Microsoft Security Response CenterCVE-2026-81352
CriticalCVSS 8.8
Web Media Extensions Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.
Affected productsWeb Media Extensions on Windows 10 Version 21H2 for 32-bit Systems, Web Media Extensions on Windows 10 Version 21H2 for ARM64-based Systems, Web Media Extensions on Windows 10 Version 21H2 for x64-based Systems, Web Media Extensions on Windows 10 Version 22H2 for x64-based Systems
Fixed versions1.2.42.0, 2.1.51.0
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-69676
CriticalCVSS 8.8
Windows Kerberos Remote Code Execution Vulnerability
Authentication bypass by capture-replay in Windows Kerberos allows an authorized attacker to execute code over a network.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725
Vendor guidance
Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.
Microsoft Security Response CenterCVE-2026-84019
HighCVSS 7.0
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807, 10.0.19045.7807
Vendor guidance
Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5127648. Install KB5126653. Install KB5127646.
Microsoft Security Response CenterCVE-2026-70245
HighCVSS 7.8
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807, 10.0.19045.7807
Vendor guidance
Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5127648. Install KB5126653. Install KB5127646. Install KB5126868. Install KB5126835. Install KB5126836.
Microsoft Security Response CenterCVE-2026-70095
HighCVSS 7.5
Windows iSCSI Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.
Affected productsWindows 11 Version 26H2 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019
Fixed versions10.0.26300.9711, 10.0.17763.9376, 10.0.20348.5761, 10.0.19044.7807
Vendor guidance
Install KB5127648. Install KB5126651. Install KB5126655. Install KB5126657. Install KB5126646. Install KB5126653. Install KB5127646. Install KB5126868. Install KB5126835. Install KB5126836.
Microsoft Security Response CenterCVE-2026-105723
HighCVSS 7.5
Windows Distributed File System (DFS) Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attacker to elevate privileges over a network.
Affected productsWindows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation)
Fixed versions6.2.9200.26434, 6.3.9600.23470, 10.0.14393.9612, 10.0.17763.9376
Vendor guidance
Install KB5126835. Install KB5126836. Install KB5126868. Install KB5126651. Install KB5126657. Install KB5126655. Install KB5126653. Install KB5127648. Install KB5126646. Install KB5127646.
Microsoft Security Response CenterCVE-2026-102188
HighCVSS 6.8
Windows Storage Port Driver Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack.
Affected productsWindows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation)
Fixed versions6.2.9200.26434, 6.3.9600.23470, 10.0.14393.9612, 10.0.17763.9376
Vendor guidance
Install KB5126835. Install KB5126836. Install KB5126868. Install KB5126651. Install KB5126657. Install KB5126655. Install KB5126653. Install KB5127648. Install KB5126646. Install KB5127646.
Microsoft Security Response CenterCVE-2026-32176
HighCVSS 6.7
SQL Server Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges locally.
Affected productsMicrosoft SQL Server 2022 for x64-based Systems (CU27), Microsoft SQL Server 2017 for x64-based Systems (CU31), Microsoft SQL Server 2025 for x64-based Systems (CU9), Microsoft SQL Server 2025 for x64-based Systems (CU3)
Fixed versions16.0.4305.5, 14.0.3560.2, 17.0.5015.4, 17.0.4030.1
Vendor guidance
Install KB5126934. Install KB5128496. Install KB5126967. Install KB5083245. Install KB5084814. Install KB5128492. Install KB5083252. Install KB5084819. Install KB5128497. Install KB5084817. Install KB5128495. Install ...
Microsoft Security Response CenterCVE-2026-77499
HighCVSS 7.5
Windows DHCP Server Denial of Service Vulnerability
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.26100.33438, 10.0.14393.9512
Vendor guidance
Install KB5122876. Install KB5122882. Install KB5122871. Install KB5123099. Install KB5123065. Install KB5123066.
Microsoft Security Response CenterCVE-2026-72937
HighCVSS 5.5
Windows Storage Port Driver Information Disclosure Vulnerability
Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725
Vendor guidance
Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.
Before you act
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.