CurrentChecked 12 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
11Vendor sources
16,884Advisories collected
6,352Published or updated in 30 days
6,999Marked critical or high
Coverage
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
CurrentChecked 27 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
Check delayedChecked 24 days ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 27 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 27 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 7 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 7 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 3 hours ago
Checked every 6 hours
Browse this vendor's advisories
Official source
CurrentChecked 6 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 27 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 12 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
16,884 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
Microsoft Security Response CenterCVE-2026-93386
Severity not listed
Chromium CVE-2026-93386: UI misrepresentation in WebAppInstalls
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Affected productsMicrosoft Edge (Chromium-based)
Fixed versions153.0.4234.48
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-93385
Severity not listed
Chromium CVE-2026-93385: Information leak in Paint
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Affected productsMicrosoft Edge (Chromium-based)
Fixed versions153.0.4234.48
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-93383
Severity not listed
Chromium CVE-2026-93383: Information leak in Permissions
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Affected productsMicrosoft Edge (Chromium-based)
Fixed versions153.0.4234.48
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-93382
Severity not listed
Chromium CVE-2026-93382: Use after free in PDFium
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Affected productsMicrosoft Edge (Chromium-based)
Fixed versions153.0.4234.48
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-93381
Severity not listed
Chromium CVE-2026-93381: Buffer overflow in PDFium
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Affected productsMicrosoft Edge (Chromium-based)
Fixed versions153.0.4234.48
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-93380
Severity not listed
Chromium CVE-2026-93380: Race condition in FileSystem
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Affected productsMicrosoft Edge (Chromium-based)
Fixed versions153.0.4234.48
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-93379
Severity not listed
Chromium CVE-2026-93379: Incorrect authorization in ORB
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Affected productsMicrosoft Edge (Chromium-based)
Fixed versions153.0.4234.48
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-93378
Severity not listed
Chromium CVE-2026-93378: Missing authorization in Storage
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Affected productsMicrosoft Edge (Chromium-based)
Fixed versions153.0.4234.48
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-93377
Severity not listed
Chromium CVE-2026-93377: Type confusion in V8
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Affected productsMicrosoft Edge (Chromium-based)
Fixed versions153.0.4234.48
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-93376
Severity not listed
Chromium CVE-2026-93376: Out of bounds read in DataTransfer
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Affected productsMicrosoft Edge (Chromium-based)
Fixed versions153.0.4234.48
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-93375
Severity not listed
Chromium CVE-2026-93375: Incorrect reference resolution in Tracing
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Affected productsMicrosoft Edge (Chromium-based)
Fixed versions153.0.4234.48
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-93374
Severity not listed
Chromium CVE-2026-93374: Use after free in Dawn
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Affected productsMicrosoft Edge (Chromium-based)
Fixed versions153.0.4234.48
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-93373
Severity not listed
Chromium CVE-2026-93373: Use after free in Extensions
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Affected productsMicrosoft Edge (Chromium-based)
Fixed versions153.0.4234.48
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-93372
Severity not listed
Chromium CVE-2026-93372: Buffer overflow in WebGL
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Affected productsMicrosoft Edge (Chromium-based)
Fixed versions153.0.4234.49
Vendor guidance
Release Notes
Ubuntu Security NoticesUSN-8858-1
Severity not listed
USN-8858-1: Authen::SASL vulnerability
It was discovered that Authen::SASL, a Perl authentication library, did not properly validate login attempts. An attacker could possibly use this issue to gain unauthorized access.
Ubuntu Security NoticesUSN-8859-1
Severity not listed
USN-8859-1: ImageMagick vulnerabilities
It was discovered that ImageMagick did not correctly handle certain images. An attacker could possibly use this issue to cause a denial of service or obtain sensitive information. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, ...
Ubuntu Security NoticesUSN-8855-1
Severity not listed
USN-8855-1: GStreamer Bad Plugins vulnerability
It was discovered that GStreamer Bad Plugins incorrectly validated the size of multi-channel audio blocks. An attacker could possibly use this issue with a specially crafted WAV file to cause the program to crash, resulting in a denial of service, or possibly execute arbitrary...
Ubuntu Security NoticesUSN-8856-1
Severity not listed
USN-8856-1: Kdenlive, MLT vulnerability
It was discovered that Kdenlive allowed dangerous proxy parameters when processing attacker-controlled project files. An attacker could use this to execute arbitrary commands via the MLT framework's ante/post consumer properties.
Ubuntu Security NoticesUSN-8845-1
Severity not listed
USN-8845-1: GVfs vulnerabilities
Keith Linneman discovered that GVfs did not properly validate data received from SFTP servers. An attacker could possibly use this issue to cause a heap buffer overflow, resulting in arbitrary code execution or a denial of service. (CVE-2026-84268) It was discovered that GVfs ...
Ubuntu Security NoticesUSN-8816-3
Severity not listed
USN-8816-3: Linux kernel (Oracle) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - S390 architecture; - x86 architecture; - DRBD Distributed Replicated Bloc...
Vendor guidance
This update corrects flaws in the following subsystems: - ARM64 architecture; - S390 architecture; - x86 architecture; - DRBD Distributed Replicated Block Device drivers; - InfiniBand drivers; - IOMMU subsystem; - Mul...
Ubuntu Security NoticesUSN-8817-3
Severity not listed
USN-8817-3: Linux kernel (AWS) vulnerabilities
It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permiss...
Vendor guidance
This update corrects flaws in the following subsystems: - ARM64 architecture; - InfiniBand drivers; - Network drivers; - TCM subsystem; - B.A.T.M.A.N.
Ubuntu Security NoticesUSN-8818-5
Severity not listed
USN-8818-5: Linux kernel (NVIDIA Tegra) vulnerabilities
It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permiss...
Vendor guidance
This update corrects flaws in the following subsystems: - ARM64 architecture; - InfiniBand drivers; - Network drivers; - TCM subsystem; - exFAT file system; - Network file system (NFS) client; - Network file system (N...
Ubuntu Security NoticesUSN-8854-1
Severity not listed
USN-8854-1: OpenStack Keystone vulnerabilities
Grzegorz Grasza discovered that OpenStack Keystone did not consistently enforce restrictions for delegated authentication tokens. An authenticated attacker could possibly use this issue to create credentials or delegations that outlasted the delegated token. (CVE-2026-80182) I...
Ubuntu Security NoticesUSN-8853-1
Severity not listed
USN-8853-1: OpenSBI vulnerability
It was discovered that OpenSBI did not properly validate the counter index mask in SBI PMU extension requests. An attacker could use this issue to cause a denial of service.
Before you act
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.