CurrentChecked 15 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
11Vendor sources
16,745Advisories collected
6,299Published or updated in 30 days
6,969Marked critical or high
Coverage
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
CurrentChecked 15 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
Check delayedChecked 20 days ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 20 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 20 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 10 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 10 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 4 hours ago
Checked every 6 hours
Browse this vendor's advisories
Official source
CurrentChecked 10 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 15 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 10 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
16,745 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
Microsoft Security Response CenterCVE-2026-70584
HighCVSS 7.8
Windows Core Messaging Elevation of Privilege Vulnerability
Access of resource using incompatible type ('type confusion') in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725
Vendor guidance
Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099.
Microsoft Security Response CenterCVE-2026-69620
HighCVSS 8.1
Windows DHCP Server Remote Code Execution Vulnerability
Stack-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.26100.33438, 10.0.14393.9512
Vendor guidance
Install KB5122876. Install KB5122882. Install KB5122871. Install KB5123099. Install KB5123065. Install KB5123066.
Microsoft Security Response CenterCVE-2026-69366
HighCVSS 7.1
Windows Kernel Elevation of Privilege Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725
Vendor guidance
Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.
Microsoft Security Response CenterCVE-2026-69351
HighCVSS 5.5
Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vulnerability
Exposure of private personal information to an unauthorized actor in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to disclose information locally.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725
Vendor guidance
Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.
Microsoft Security Response CenterCVE-2026-69334
HighCVSS 8.8
Windows Volume Manager Extension Driver Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725
Vendor guidance
Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.
Microsoft Security Response CenterCVE-2026-68825
HighCVSS 7.0
Windows Bind Filter Driver Elevation of Privilege Vulnerability
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
Affected productsWindows Server 2025 (Server Core installation), Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems
Fixed versions10.0.26100.33438, 10.0.26200.9445, 10.0.22631.7582, 10.0.26100.9445
Vendor guidance
Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012.
Microsoft Security Response CenterCVE-2026-62697
HighCVSS 7.8
Windows Push Notifications Elevation of Privilege Vulnerability
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
Affected productsWindows Server 2022, Windows Server 2022 (Server Core installation), Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems
Fixed versions10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725, 10.0.26100.33438
Vendor guidance
Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012.
Microsoft Security Response CenterCVE-2026-62755
HighCVSS 7.8
Windows DHCP Client Elevation of Privilege Vulnerability
Stack-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges locally.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9121, 10.0.20348.5499, 10.0.20348.5440, 10.0.19044.7663
Vendor guidance
Install KB5120238. Install KB5120242. Install KB5120229. Install KB5120249. Install KB5120233. Install KB5120228. Install KB5121003. Install KB5120994. Install KB5120240. Install KB5121000. Install KB5120418. Install ...
Microsoft Security Response CenterCVE-2026-62688
Severity not listedCVSS 7.8
Windows MIDI Service Module Elevation of Privileges Vulnerability
Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
Vendor guidance
Install KB5121003. Install KB5120994. Install KB5121000.
SonicWall PSIRT AdvisoriesSNWLID-2026-0018
HighCVSS 8.8
SonicWall NSM On-Prem Affected By Multiple Vulnerabilities
1) CVE-2026-96540 - SonicWall NSM On-Prem Improper Access Control Vulnerability An improper access control vulnerability has been identified in the SonicWall Network Security Manager (NSM) on-prem in export settings, potentially allowing a remote authenticated attacker to obta...
Affected productsAffected Product(s): Affected Versions, Network Security Manager (NSM) On-Prem (VMWare, Hyper-V, Azure and KVM): 4.3.1 and earlier versions
Fixed versionsFixed Product(s): Fixed Versions, Network Security Manager (NSM) On-Prem (VMWare, Hyper-V, Azure and KVM): 4.4.0 and higher versions.
Vendor guidance
Install the applicable fixed SonicWall release for your product and branch. Fixed Product(s): Fixed Versions Network Security Manager (NSM) On-Prem (VMWare, Hyper-V, Azure and KVM): 4.4.0 and higher versions.
Ubuntu Security NoticesUSN-8926-1
Severity not listed
USN-8926-1: urllib3 vulnerabilities
Yu-Fu Fu, Seth Larson and Yonatan Magier discovered that urllib3 did not correctly handle certain certificate validations. An attacker could possibly use this issue to observe or modify forwarded traffic. This issue only affected Ubuntu 26.04 LTS. (CVE-2026-97687) Martin Desru...
Ubuntu Security NoticesUSN-8925-1
Severity not listed
USN-8925-1: YAML-LibYAML vulnerabilities
Dominique Dumont discovered that YAML-LibYAML did not correctly handle certain reflection operations. If a user or system were tricked into opening a specially crafted file, an attacker could possibly use this issue to delete files. This issue only affected Ubuntu 16.04 LTS an...
Microsoft Security Response CenterCVE-2024-58266
LowCVSS 3.2
The shlex crate before 1.2.1 for Rust allows unquoted and unescaped instances of the { and \xa0 characters, which may facilitate command injection.
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Affected productscbl2 kata-containers 3.2.0.azl2-6 on CBL Mariner 2.0, cbl2 kata-containers-cc 3.2.0.azl2-7 on CBL Mariner 2.0, cbl2 rust 1.72.0-10 on CBL Mariner 2.0, azl3 rust 1.75.0-17 on Azure Linux 3.0
Vendor guidance
CBL-Mariner Releases Release Notes
Microsoft Security Response CenterCVE-2024-7598
LowCVSS 3.1
Network restriction bypass via race condition during namespace termination
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Affected productscbl2 kubernetes 1.28.4-19 on CBL Mariner 2.0, azl3 kubernetes 1.30.10-14 on Azure Linux 3.0, azl3 kubernetes 1.30.10-16 on Azure Linux 3.0, cbl2 kubernetes 1.28.4-21 on CBL Mariner 2.0
Fixed versions1.30.10-27, 1.30.10-26
Vendor guidance
CBL-Mariner Releases Release Notes
Microsoft Security Response CenterCVE-2026-53493
Medium
Containerd has image-pull DoS via crafted OCI index graph amplification
Mariner
Affected productsazl3 containerd2 2.3.4-1 on Azure Linux 3.0, azl3 moby-containerd-cc 1.7.7-17 on Azure Linux 3.0
Fixed versions2.3.6-1, 1.7.7-18
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-61674
Critical
Fluent Bit: Remote stack buffer overflow in Fluent Bit `out_forward` Secure-Forward `PONG` handler
Mariner
Affected productsazl3 fluent-bit 3.1.10-7 on Azure Linux 3.0
Fixed versions3.1.10-8
Vendor guidance
Release Notes
Cisco Security Advisoriescisco-sa-ucs-uefi-sb-bypass-eb6xC5GW
High
Cisco UCS and UCS-Based Appliances UEFI Shell Secure Boot Bypass Vulnerability
A vulnerability in the Unified Extensible Firmware Interface (UEFI) Shell implementation of Cisco UCS Servers and UCS-based appliances could allow an authenticated attacker with valid credentials for a user account with the role of user or admin or an unauthenticated attacker ...
Affected products5000 Series Enterprise Network Compute Systems (ENCS) (CSCwu42927), UCS B-Series Blade Servers (CSCwt77804), UCS C-Series Rack Servers (CSCwt77804), UCS C845A M8 Rack Server (CSCwt77950)
Vendor guidance
Cisco has released software updates that address this vulnerability.
Ubuntu Security NoticesUSN-8908-2
Severity not listed
USN-8908-2: BlueZ regression
USN-8908-1 fixed vulnerabilities in BlueZ. Unfortunately, that update introduced a regression in the A2DP profile: cached remote stream endpoints were no longer loaded at startup, which could cause Bluetooth audio devices to fail to reconnect automatically or to fall back to l...
Vendor guidance
USN-8908-1 fixed vulnerabilities in BlueZ.
Microsoft Security Response CenterCVE-2026-18727
MediumCVSS 6.5
Open-iscsi: open-iscsi: integer underflow in iscsiuio dhcpv6 parsing
Mariner
Affected productsazl3 iscsi-initiator-utils 2.1.12-1 on Azure Linux 3.0
Vendor guidance
Release Notes
Ubuntu Security NoticesUSN-8924-1
Severity not listed
USN-8924-1: Linux kernel vulnerabilities
It was discovered that the timer stats implementation in the Linux kernel allowed the discovery of a real PID value while inside a PID namespace. A local attacker could use this to expose sensitive information. (CVE-2017-5967) Wen Xu discovered that the XFS file system impleme...
Vendor guidance
This update corrects flaws in the following subsystems: - IPv6 networking; - Netfilter; (CVE-2026-53131)
Ubuntu Security NoticesUSN-8918-1
Severity not listed
USN-8918-1: Linux kernel (Azure) vulnerabilities
It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity o...
Vendor guidance
This update corrects flaws in the following subsystems: - NVDIMM (Non-Volatile Memory Device) drivers; - Handshake API; - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - RISC-V...
Ubuntu Security NoticesUSN-8921-1
Severity not listed
USN-8921-1: Linux kernel vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - S390 architecture; - IIO ADC drivers; - Multiple devices driver; - PCI subsystem; - VFIO driver...
Vendor guidance
This update corrects flaws in the following subsystems: - S390 architecture; - IIO ADC drivers; - Multiple devices driver; - PCI subsystem; - VFIO drivers; - Network file system (NFS) server daemon; - Overlay file sys...
Ubuntu Security NoticesUSN-8920-1
Severity not listed
USN-8920-1: Linux kernel vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Ethernet bonding driver; - Network drivers; - F2FS file system; - Network file system (NFS) ser...
Vendor guidance
This update corrects flaws in the following subsystems: - Ethernet bonding driver; - Network drivers; - F2FS file system; - Network file system (NFS) server daemon; - Tracing infrastructure; - io_uring subsystem; - Ne...
Ubuntu Security NoticesUSN-8923-1
Severity not listed
USN-8923-1: Linux kernel vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - SCSI subsystem; - Bluetooth subsystem; (CVE-2022-49111, CVE-2022-49114)
Vendor guidance
This update corrects flaws in the following subsystems: - SCSI subsystem; - Bluetooth subsystem; (CVE-2022-49111, CVE-2022-49114)
Before you act
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.