Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
16,884Advisories collected
6,352Published or updated in 30 days
6,999Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

16,884 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Ubuntu Security NoticesUSN-8729-5
Severity not listed

USN-8729-5: Linux kernel (AWS FIPS) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - PowerPC architecture; - Compute Acceleration Framew...

Vendor guidance

This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - PowerPC architecture; - Compute Acceleration Framework; - Drivers core; - Bluetooth drivers; - Arm Firmware Framewo...

CVE-2025-71289CVE-2026-23469CVE-2026-31420CVE-2026-31486CVE-2026-31560CVE-2026-46158
Read the vendor advisory
Ubuntu Security NoticesUSN-8818-2
Severity not listed

USN-8818-2: Linux kernel (IBM) vulnerabilities

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permiss...

Vendor guidance

This update corrects flaws in the following subsystems: - ARM64 architecture; - InfiniBand drivers; - Network drivers; - TCM subsystem; - exFAT file system; - Network file system (NFS) client; - Network file system (N...

CVE-2025-10263CVE-2026-53186CVE-2026-53216CVE-2026-53221CVE-2026-53354CVE-2026-53355
Read the vendor advisory
Ubuntu Security NoticesUSN-8819-2
Severity not listed

USN-8819-2: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network file system (NFS) server daemon; - IPv6 networking; - Netfilter; (CVE-2025-38724, CVE-2...

Vendor guidance

This update corrects flaws in the following subsystems: - Network file system (NFS) server daemon; - IPv6 networking; - Netfilter; (CVE-2025-38724, CVE-2026-53131, CVE-2026-53221)

CVE-2025-38724CVE-2026-53131CVE-2026-53221
Read the vendor advisory
Ubuntu Security NoticesUSN-8730-6
Severity not listed

USN-8730-6: Linux kernel (Intel IoTG) vulnerability

A security issue was discovered in the Linux kernel. An attacker could possibly use this to compromise the system. This update corrects flaws in the following subsystems: - IPv6 networking; - Netfilter;

Vendor guidance

This update corrects flaws in the following subsystems: - IPv6 networking; - Netfilter;

Read the vendor advisory
Ubuntu Security NoticesUSN-8824-1
Severity not listed

USN-8824-1: libpcap vulnerability

It was discovered that libpcap did not properly validate BPF instructions in some situation. An attacker could possibly use this issue to perform out of bound memory operations.

Read the vendor advisory
Microsoft Security Response CenterCVE-2026-78510
CriticalCVSS 8.4

Microsoft Outlook and Word Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

Affected productsMicrosoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems
Fixed versions16.0.10417.20207, 16.0.20326.20138, 16.113.26091433, 16.0.14334.20906
Vendor guidance

Release Notes Install KB5002916.

CVE-2026-78510
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-100208
HighCVSS 7.5

Microsoft Office Outlook Remote Code Execution Vulnerability

Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

Affected productsMicrosoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions
Fixed versionshttps://aka.ms/OfficeSecurityReleases
Vendor guidance

Click to Run

CVE-2026-100208
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-71328
HighCVSS 8.8

.NET and Visual Studio Remote Code Execution Vulnerability

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

Affected productsMicrosoft Visual Studio 2026 version 18.9, .NET 10.0 runtime installed on Windows, .NET 8.0 runtime installed on Windows, .NET 9.0 runtime installed on Windows
Fixed versions18.9.3, 10.0.12, 8.0.31, 9.0.20
Vendor guidance

Release Notes Install KB5126106. Install KB5126104. Install KB5126105.

CVE-2026-71328
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-69806
HighCVSS 7.0

.NET Elevation of Privilege Vulnerability

Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.

Affected productsMicrosoft Visual Studio 2026 version 18.9, Microsoft Visual Studio 2022 version 17.14, .NET 9.0 runtime installed on Linux, .NET 10.0 runtime installed on Linux
Fixed versions18.9.3, 17.14.40, 9.0.20, 10.0.12
Vendor guidance

Release Notes Install KB5126105. Install KB5126106.

CVE-2026-69806
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-69439
HighCVSS 8.8

.NET and Visual Studio Elevation of Privilege Vulnerability

Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.

Affected products.NET 10.0 runtime installed on Windows, .NET 8.0 runtime installed on Windows, .NET 9.0 runtime installed on Windows, Microsoft Visual Studio 2022 version 17.14
Fixed versions10.0.12, 8.0.31, 9.0.20, 17.14.40
Vendor guidance

Release Notes Install KB5126106. Install KB5126104. Install KB5126105.

CVE-2026-69439
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources