CurrentChecked 17 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
11Vendor sources
16,884Advisories collected
6,374Published or updated in 30 days
6,999Marked critical or high
Coverage
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
CurrentChecked 6 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
Check delayedChecked 24 days ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 7 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 6 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 7 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 7 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 5 hours ago
Checked every 6 hours
Browse this vendor's advisories
Official source
CurrentChecked 7 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 6 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 17 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
16,884 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
Cisco Security Advisoriescisco-sa-hardening-iosxe-V8NMuMZJ
CriticalPriority signal
Cisco IOS XE Software Security Hardening Release: August 2026
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered v...
Vendor guidance
To assist customers in patching and streamline the disclosure process, Cisco has grouped these issues by their underlying vulnerability class - Common Weakness Enumeration (CWE) - and assigned a single Common Vulnerab...
AWS Security BulletinsCVE-2026-103505
Severity not listed
CVE-2026-103505 - Mount Option Injection in Amazon EFS CSI Driver
Bulletin ID: 2026-120-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/01/2026 08:30 AM PDT Description: The Amazon EFS CSI Driver is a Container Storage Interface driver that allows Kubernetes clusters to use Amazon Elastic File System. We iden...
Microsoft Security Response CenterCVE-2026-74601
MediumCVSS 4.1
ring-buffer: Use current_context for safe per-CPU buffer swap
Mariner
Affected productsazl3 kernel 6.6.150.1-1 on Azure Linux 3.0, azl3 kernel 6.6.152.1-1 on Azure Linux 3.0
Fixed versions6.6.157.1-1
Vendor guidance
Release Notes
Palo Alto Networks Security AdvisoriesCVE-2026-0250
HighCVSS 7.7
CVE-2026-0250: GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway
A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man in the middle attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges. This vulnerability is triggered during the processing of req...
Affected productsGlobalProtect App, GlobalProtect UWP App, GlobalProtect App 6.3, GlobalProtect App 6.2
Fixed versionsGlobalProtect App 6.3 >= 6.3.3-h9 on Windows, >= 6.3.3-h9 on macOS, >= 6.3.5 on Android, >= 6.3.5 on ChromeOS, >= 6.3.3-h15 on Linux (ETA: 10/06), GlobalProtect App 6.2 >= 6.2.8-h10 on Windows, >= 6.2.8-h10 on macOS, GlobalProtect App 6.1 >= 6.1.14 on Android, >= 6.1.14 on ChromeOS, GlobalProtect App 6.0 >= 6.0.15 on Linux (ETA: 10/29), >= 6.0.13 on Windows, >= 6.0.13 on macOS, >= 6.0.15 on Android (ETA: 10/29), >= 6.0.15 on ChromeOS (ETA: 10/29)
Vendor guidance
VERSION MINOR VERSION SUGGESTED SOLUTION GlobalProtect App 6.3 on Windows 6.3.0 through 6.3.3-h8 Upgrade to 6.3.3-h9 (6.3.3-999) or later. GlobalProtect App 6.2 on Windows 6.2.0 through 6.2.8-h9 Upgrade to 6.2.8-h10 (...
Ubuntu Security NoticesUSN-8864-1
Severity not listed
USN-8864-1: Linux kernel vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network file system (NFS) server daemon; - IPv6 networking; - Netfilter; (CVE-2025-38724, CVE-2...
Vendor guidance
This update corrects flaws in the following subsystems: - Network file system (NFS) server daemon; - IPv6 networking; - Netfilter; (CVE-2025-38724, CVE-2026-53131, CVE-2026-53221)
Microsoft Security Response CenterCVE-2026-96940
HighCVSS 8.8
Microsoft Exchange Server Elevation of Privilege Vulnerability
Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
Affected productsMicrosoft Exchange Server 2019 Cumulative Update 14, Microsoft Exchange Server 2016 Cumulative Update 23, Microsoft Exchange Server Subscription Edition RTM, Microsoft Exchange Server 2019 Cumulative Update 15
Fixed versions15.02.1544.048, 15.01.2507.075, 15.02.2562.053, 15.02.1748.053
Vendor guidance
Install KB5129957. Install KB5129958. Install KB5129955. Install KB5129956.
Ubuntu Security NoticesUSN-8816-4
Severity not listed
USN-8816-4: Linux kernel (GKE) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - S390 architecture; - x86 architecture; - DRBD Distributed Replicated Bloc...
Vendor guidance
This update corrects flaws in the following subsystems: - ARM64 architecture; - S390 architecture; - x86 architecture; - DRBD Distributed Replicated Block Device drivers; - InfiniBand drivers; - IOMMU subsystem; - Mul...
Ubuntu Security NoticesUSN-8818-6
Severity not listed
USN-8818-6: Linux kernel (FIPS) vulnerabilities
It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permiss...
Vendor guidance
This update corrects flaws in the following subsystems: - ARM64 architecture; - InfiniBand drivers; - Network drivers; - TCM subsystem; - exFAT file system; - Network file system (NFS) client; - Network file system (N...
Ubuntu Security NoticesUSN-8851-2
Severity not listed
USN-8851-2: Linux kernel (Raspberry Pi) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network file system (NFS) server daemon; - IPv6 networking; - Netfilter; (CVE-2025-38724, CVE-2...
Vendor guidance
This update corrects flaws in the following subsystems: - Network file system (NFS) server daemon; - IPv6 networking; - Netfilter; (CVE-2025-38724, CVE-2026-53131, CVE-2026-53221)
Microsoft Security Response CenterCVE-2026-74531
MediumCVSS 6.3
Bluetooth: hci_conn: hold conn reference in abort_conn_sync()
Mariner
Affected productsazl3 kernel 6.6.150.1-1 on Azure Linux 3.0
Fixed versions6.6.152.1-1
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-74525
LowCVSS 1.9
net: sxgbe: free TX rings on RX allocation failure
Mariner
Affected productsazl3 kernel 6.6.150.1-1 on Azure Linux 3.0
Fixed versions6.6.152.1-1
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-74556
HighCVSS 8.8
scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer
Mariner
Affected productsazl3 kernel 6.6.150.1-1 on Azure Linux 3.0
Fixed versions6.6.152.1-1
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-74457
MediumCVSS 5.9
can: peak_usb: add bounds check for USB channel index
Mariner
Affected productsazl3 kernel 6.6.150.1-1 on Azure Linux 3.0
Fixed versions6.6.152.1-1
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-74454
HighCVSS 7.8
drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO size
Mariner
Affected productsazl3 kernel 6.6.150.1-1 on Azure Linux 3.0
Fixed versions6.6.152.1-1
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-74479
MediumCVSS 6.4
net: pktgen: fix proc entry use-after-free
Mariner
Affected productsazl3 kernel 6.6.150.1-1 on Azure Linux 3.0, azl3 kernel 6.6.152.1-1 on Azure Linux 3.0
Fixed versions6.6.157.1-1
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-74516
HighCVSS 7.5
KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active
Mariner
Affected productsazl3 kernel 6.6.150.1-1 on Azure Linux 3.0
Fixed versions6.6.152.1-1
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-80994
MediumCVSS 4.1
net: openvswitch: fix flow mask use-after-free on flow deletion
Mariner
Affected productsazl3 kernel 6.6.150.1-1 on Azure Linux 3.0, azl3 kernel 6.6.152.1-1 on Azure Linux 3.0
Fixed versions6.6.157.1-1
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-74661
MediumCVSS 4.1
mac802154: fix netdev use-after-free in beacon worker
Mariner
Affected productsazl3 kernel 6.6.150.1-1 on Azure Linux 3.0
Fixed versions6.6.152.1-1
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-74461
MediumCVSS 4.1
i2c: imx: Cancel hrtimer before clearing slave pointer
Mariner
Affected productsazl3 kernel 6.6.150.1-1 on Azure Linux 3.0
Fixed versions6.6.152.1-1
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-74682
MediumCVSS 5.9
ALSA: usb-audio: fix OOB write on Type II inbound URBs
Mariner
Affected productsazl3 kernel 6.6.150.1-1 on Azure Linux 3.0
Fixed versions6.6.152.1-1
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-74455
MediumCVSS 5.9
can: peak_usb: validate uCAN receive record lengths
Mariner
Affected productsazl3 kernel 6.6.150.1-1 on Azure Linux 3.0
Fixed versions6.6.152.1-1
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-90170
MediumCVSS 7.1
ksmbd: validate ipc response length before dereferencing its fields
Mariner
Affected productsazl3 kernel 6.6.150.1-1 on Azure Linux 3.0, azl3 kernel 6.6.152.1-1 on Azure Linux 3.0
Fixed versions6.6.157.1-1
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-74613
MediumCVSS 4.7
vsock/virtio: avoid refilling the RX queue after teardown
Mariner
Affected productsazl3 kernel 6.6.150.1-1 on Azure Linux 3.0
Fixed versions6.6.152.1-1
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-74572
MediumCVSS 4.7
btrfs: zoned: fix deadlock between metadata writeback and transaction commit
Mariner
Affected productsazl3 kernel 6.6.150.1-1 on Azure Linux 3.0
Fixed versions6.6.152.1-1
Vendor guidance
Release Notes
Before you act
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.