Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
16,884Advisories collected
6,374Published or updated in 30 days
6,999Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

16,884 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2025-64436
MediumCVSS 5.3

KubeVirt Excessive Role Permissions Could Enable Unauthorized VMI Migrations Between Nodes

Mariner

Affected productscbl2 kubevirt 0.59.0-30 on CBL Mariner 2.0, cbl2 kubevirt 0.59.0-31 on CBL Mariner 2.0, azl3 kubevirt 1.5.3-2 on Azure Linux 3.0, cbl2 kubevirt 0.59.0-35 on CBL Mariner 2.0
Fixed versions1.6.3-1, 1.5.3-1
Vendor guidance

CBL-Mariner Releases Release Notes

CVE-2025-64436
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-22103
MediumCVSS 5.5

net: fix NULL pointer dereference in l3mdev_l3_rcv

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.96.2-1 on Azure Linux 3.0, azl3 kernel 6.6.112.1-2 on Azure Linux 3.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0
Fixed versions6.6.117.1-1
Vendor guidance

CBL-Mariner Releases Release Notes

CVE-2025-22103
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-22125
MediumCVSS 6.1

md/raid1,raid10: don't ignore IO flags

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.96.2-1 on Azure Linux 3.0, azl3 kernel 6.6.96.2-2 on Azure Linux 3.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.112.1-2 on Azure Linux 3.0
Fixed versions6.6.137.1-2
Vendor guidance

CBL-Mariner Releases Release Notes

CVE-2025-22125
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-35995
MediumCVSS 5.5

ACPI: CPPC: Use access_width over bit_width for system memory accesses

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
Vendor guidance

Release Notes

CVE-2024-35995
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-39851
MediumCVSS 7.0

vxlan: Fix NPD when refreshing an FDB entry with a nexthop object

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.117.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.121.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0
Vendor guidance

Release Notes

CVE-2025-39851
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-37354
MediumCVSS 4.7

btrfs: fix crash on racing fsync and size-extending write into prealloc

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0
Vendor guidance

Release Notes

CVE-2024-37354
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-22113
MediumCVSS 7.1

ext4: avoid journaling sb update on error if journal is destroying

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.96.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.112.1-2 on Azure Linux 3.0, azl3 kernel 6.6.117.1-1 on Azure Linux 3.0
Vendor guidance

Release Notes

CVE-2025-22113
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-41014
MediumCVSS 6.1

xfs: add bounds checking to xlog_recover_process_data

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0
Vendor guidance

Release Notes

CVE-2024-41014
Read the vendor advisory Watch this product
Ubuntu Security NoticesUSN-8910-1
Severity not listed

USN-8910-1: libxml2 vulnerabilities

Yirou Yang discovered that libxml2 incorrectly handled certain XML catalogs. If a user or automated system was tricked into processing a specially crafted XML catalog, an attacker could possibly use this issue to cause libxml2 to crash, resulting in a denial of service. (CVE-2...

CVE-2026-76781CVE-2026-86138CVE-2026-86139CVE-2026-86142CVE-2026-86143CVE-2026-86144
Read the vendor advisory
AWS Security BulletinsCVE-2026-107332
Severity not listed

CVE-2026-107332 - Insecure default file permissions on cached credentials in AWS Toolkit for Visual Studio Code

Bulletin ID: 2026-129-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/08/2026 10:30 PM PDT Description: AWS Toolkit for Visual Studio Code is an open source extension that lets developers work with AWS services, including Amazon CodeCatalyst, f...

CVE-2026-107332
Read the vendor advisory
Ubuntu Security NoticesUSN-8909-1
Severity not listed

USN-8909-1: libde265 vulnerability

It was discovered that libde265 did not properly validate certain crafted H.265 bitstreams, leading to a NULL pointer dereference. An attacker could possibly use this issue to cause libde265 to crash, resulting in a denial of service.

Read the vendor advisory
Cisco Security Advisoriescisco-sa-napi-rce-r2shwu2j
Critical

Cisco NX-OS Software NX-API Remote Code Execution Vulnerability

A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient input valid...

Affected productsNexus 3000 Series Switches (CSCwu46199), Nexus 9000 Series Switches in standalone NX-OS mode (CSCwu46199), UCS 6300 Series Fabric Interconnects (CSCwu58579)
Vendor guidance

Cisco has released software updates that address this vulnerability.

CVE-2026-76471
Read the vendor advisory Watch this product
Ubuntu Security NoticesUSN-8907-1
Severity not listed

USN-8907-1: libgit2 vulnerability

It was discovered that libgit2 incorrectly handled IP address SubjectAltName verification in TLS certificate validation. A remote attacker with a CA-trusted certificate could possibly use this issue to perform a machine-in-the-middle attack, leading to the exposure of sensitiv...

Read the vendor advisory
Ubuntu Security NoticesUSN-8902-1
Severity not listed

USN-8902-1: libarchive vulnerability

It was discovered that libarchive had a signed integer overflow in its ZIP writer when handling encrypted entries with sizes near the maximum value. An attacker could possibly use this issue to cause libarchive to crash or execute arbitrary code.

Read the vendor advisory
Ubuntu Security NoticesUSN-8906-1
Severity not listed

USN-8906-1: Linux kernel (IBM) vulnerabilities

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permiss...

Vendor guidance

This update corrects flaws in the following subsystems: - ARM64 architecture; - ARM32 architecture; - MIPS architecture; - PowerPC architecture; - x86 architecture; - Intel NPU Driver; - Compute Acceleration Framework...

CVE-2025-10263CVE-2025-68296CVE-2025-68768CVE-2025-71289CVE-2026-23346CVE-2026-23469
Read the vendor advisory
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources