CurrentChecked 14 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
11Vendor sources
16,884Advisories collected
6,374Published or updated in 30 days
6,999Marked critical or high
Coverage
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
CurrentChecked 39 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
Check delayedChecked 24 days ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 39 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 39 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 4 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 4 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 2 hours ago
Checked every 6 hours
Browse this vendor's advisories
Official source
CurrentChecked 4 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 39 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 14 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
16,884 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
Ubuntu Security NoticesUSN-8905-1
Severity not listed
USN-8905-1: Linux kernel (GCP) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - x86 architecture; - Intel NPU ...
Vendor guidance
This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - x86 architecture; - Intel NPU Driver; - Auxiliary display drivers; - Compressed RAM block devi...
Ubuntu Security NoticesUSN-8904-1
Severity not listed
USN-8904-1: Linux kernel (Azure) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - x86 architecture; - Intel NPU ...
Vendor guidance
This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - x86 architecture; - Intel NPU Driver; - Auxiliary display drivers; - Compressed RAM block devi...
Ubuntu Security NoticesUSN-8903-1
Severity not listed
USN-8903-1: Linux kernel vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - x86 architecture; - Intel NPU ...
Vendor guidance
This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - x86 architecture; - Intel NPU Driver; - Auxiliary display drivers; - Compressed RAM block devi...
Ubuntu Security NoticesUSN-8888-2
Severity not listed
USN-8888-2: Linux kernel (Azure) vulnerabilities
It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity o...
Vendor guidance
This update corrects flaws in the following subsystems: - ARM64 architecture; - NVDIMM (Non-Volatile Memory Device) drivers; - Handshake API; - ARM32 architecture; - MIPS architecture; - OpenRISC architecture; - Power...
Ubuntu Security NoticesUSN-8887-2
Severity not listed
USN-8887-2: Linux kernel (AWS) vulnerabilities
It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity o...
Vendor guidance
This update corrects flaws in the following subsystems: - ARM64 architecture; - NVDIMM (Non-Volatile Memory Device) drivers; - Handshake API; - ARM32 architecture; - MIPS architecture; - OpenRISC architecture; - Power...
Microsoft Security Response CenterCVE-2026-96207
CriticalCVSS 10.0
Microsoft Partner Center Elevation of Privilege Vulnerability
Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network.
Affected productsMicrosoft Partner Center
Microsoft Security Response CenterCVE-2026-94510
CriticalCVSS 9.9
Microsoft Bookings Elevation of Privilege Vulnerability
Authorization bypass through user-controlled key in Microsoft Bookings allows an unauthorized attacker to elevate privileges over a network.
Affected productsMicrosoft Bookings
Microsoft Security Response CenterCVE-2026-88131
CriticalCVSS 9.8
Microsoft Dataverse Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Dataverse allows an unauthorized attacker to execute code over a network.
Affected productsMicrosoft Dataverse
Microsoft Security Response CenterCVE-2026-83947
CriticalCVSS 7.7
Azure Event Grid Spoofing Vulnerability
Missing authorization in Azure Event Grid allows an authorized attacker to perform spoofing over a network.
Affected productsAzure Event Grid System
Microsoft Security Response CenterCVE-2026-77900
CriticalCVSS 9.8
Azure App Service Remote Code Execution Vulnerability
Missing authentication for critical function in Azure App Service allows an unauthorized attacker to execute code over a network.
Affected productsAzure App Service for Linux
Microsoft Security Response CenterCVE-2026-69435
CriticalCVSS 9.6
Azure SRE Agent Elevation of Privilege Vulnerability
Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.
Affected productsAzure SRE Agent
Microsoft Security Response CenterCVE-2026-58528
HighCVSS 6.8
Windows USB Audio Class Driver Information Disclosure Vulnerability
Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to disclose information with a physical attack.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9020, 10.0.20348.5386, 10.0.19044.7548, 10.0.19045.7548
Vendor guidance
Install KB5099538. Install KB5099540. Install KB5099539. Install KB5099536. Install KB5101650. Install KB5101649.
Microsoft Security Response CenterCVE-2026-50441
HighCVSS 7.8
Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9020, 10.0.20348.5386, 10.0.19044.7548, 10.0.19045.7548
Vendor guidance
Install KB5099538. Install KB5099540. Install KB5099539. Install KB5099536. Install KB5101650. Install KB5101649. Install KB5099535.
Microsoft Security Response CenterCVE-2026-77904
HighCVSS 7.8
Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725
Vendor guidance
Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.
Microsoft Security Response CenterCVE-2026-69581
HighCVSS 7.0
Windows Device Association Service Elevation of Privilege Vulnerability
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725
Vendor guidance
Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123066.
Microsoft Security Response CenterCVE-2026-69270
HighCVSS 7.8
Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725
Vendor guidance
Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.
Microsoft Security Response CenterCVE-2025-48431
HighCVSS 7.5
Apache Thrift: Specially crafted input can crash a c_glib Thrift server with invalid pointer error.
Mariner
Affected productscbl2 ceph 16.2.10-11 on CBL Mariner 2.0, azl3 thrift 0.15.0-5 on Azure Linux 3.0, cbl2 ceph 16.2.10-11 on CBL-Mariner 2.0
Fixed versions0.15.0-6
Vendor guidance
CBL-Mariner Releases Release Notes
Microsoft Security Response CenterCVE-2026-23220
MediumCVSS 5.5
ksmbd: fix infinite loop caused by next_smb2_rcv_hdr_off reset in error paths
Mariner
Affected productscbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-23212
MediumCVSS 5.5
bonding: annotate data-races around slave->last_rx
Mariner
Affected productsazl3 kernel 6.6.121.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
Fixed versions6.6.126.1-1
Vendor guidance
CBL-Mariner Releases Release Notes
Microsoft Security Response CenterCVE-2026-23225
MediumCVSS 5.3
sched/mmcid: Don't assume CID is CPU owned on mode switch
Mariner
Affected productsazl3 kernel 6.6.121.1-1 on Azure Linux 3.0
Fixed versions6.6.121.1-2
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-23223
MediumCVSS 5.5
xfs: fix UAF in xchk_btree_check_block_owner
Mariner
Affected productsazl3 kernel 6.6.121.1-1 on Azure Linux 3.0
Fixed versions6.6.121.1-2
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-23229
MediumCVSS 5.5
crypto: virtio - Add spinlock protection with virtqueue notification
Mariner
Affected productsazl3 kernel 6.6.121.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0
Fixed versions6.6.121.1-2, 5.15.202.1-1
Vendor guidance
Release Notes CBL-Mariner Releases
Microsoft Security Response CenterCVE-2023-53366
MediumCVSS 5.5
block: be a bit more careful in checking for NULL bdev while polling
Mariner
Affected productscbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2023-53355
MediumCVSS 5.5
staging: pi433: fix memory leak with using debugfs_lookup()
Mariner
Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
Vendor guidance
Release Notes
Before you act
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.