Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
16,884 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
Windows Win32k Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.
Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.
Remote Desktop Services Remote Code Execution Vulnerability
Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.
Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012.
Windows Win32k Elevation of Privilege Vulnerability
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012.
Audio Video Control Transport Protocol Elevation of Privilege Vulnerability
Use after free in Audio Video Control Transport Protocol allows an authorized attacker to elevate privileges locally.
Install KB5122871. Install KB5124008. Install KB5124012.
Windows Win32k Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
Install KB5122871. Install KB5124008. Install KB5124012.
Windows DHCP Server Remote Code Execution Vulnerability
Integer overflow or wraparound in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
Install KB5122876. Install KB5122882. Install KB5122871. Install KB5123099. Install KB5123065. Install KB5123066.
Windows NTFS Elevation of Privilege Vulnerability
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.
Microsoft Digest Authentication Elevation of Privilege Vulnerability
Numeric truncation error in Microsoft Digest Authentication allows an authorized attacker to elevate privileges locally.
Install KB5120238. Install KB5120242. Install KB5120229. Install KB5120249. Install KB5120233. Install KB5120228. Install KB5121003. Install KB5120994. Install KB5120240. Install KB5121000. Install KB5120418. Install ...
Windows HTTP.sys Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
Install KB5120238. Install KB5120242. Install KB5120229. Install KB5120249. Install KB5120233. Install KB5120228. Install KB5121003. Install KB5120994. Install KB5120240. Install KB5121000.
Windows Bind Filter Driver Elevation of Privilege Vulnerability
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
Install KB5120233. Install KB5120228. Install KB5121003. Install KB5120994. Install KB5121000.
Microsoft SharePoint Server Spoofing Vulnerability
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
Install KB5002905. Install KB5002906. Install KB5002894. Install KB5002896. Install KB5002893.
USN-8873-1: Unbound vulnerabilities
Yuqi Qiu and Xiang Li discovered that Unbound did not correctly handle certain memory operations. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2026-81642) Ben Morris discovered that Unbound did not correctly handle cert...
RabbitMQ: CSWSH on Web-STOMP / Web-MQTT (no Origin validation)
Mariner
Release Notes
RabbitMQ: Shovel Management Atom Exhaustion Allows Persistent Broker-Wide Denial of Service
Mariner
Release Notes
Werkzeug safe_join() allows Windows special device names
Mariner
Release Notes
Mako: Path traversal via drive-letter URI on Windows in TemplateLookup
Mariner
Release Notes
QUIC Unvalidated Amplification Credit may be Over Accounted
Mariner
Release Notes
wifi: mac80211_hwsim: Fix possible NULL dereference
Mariner
Release Notes
mtd: core: fix possible resource leak in init_mtd()
Mariner
Release Notes
drm/amdkfd: Fix double release compute pasid
Mariner
Release Notes
cacheinfo: Fix shared_cpu_map to handle shared caches at different levels
Mariner
Release Notes
drm/amdgpu: install stub fence into potential unused fence pointers
Mariner
Release Notes
btrfs: set_page_extent_mapped after read_folio in btrfs_cont_expand
Mariner
Release Notes
xsk: check IFF_UP earlier in Tx path
Mariner
Release Notes
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.