CurrentChecked 18 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
11Vendor sources
16,884Advisories collected
6,318Published or updated in 30 days
6,999Marked critical or high
Coverage
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
CurrentChecked 7 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
Check delayedChecked 24 days ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 7 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 7 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 18 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 18 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 56 minutes ago
Checked every 6 hours
Browse this vendor's advisories
Official source
CurrentChecked 18 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 7 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 18 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
16,884 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
Microsoft Security Response CenterCVE-2026-93750
HighCVSS 5.9
http-cache-semantics through 4.2.0 Cross-Client Cache Disclosure via Vary Wildcard
Mariner
Affected productsazl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-93748
HighCVSS 7.5
http-cache-semantics through 4.2.0 Cross-User Cache Disclosure via max-stale
Mariner
Affected productsazl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-93687
HighCVSS 7.5
braces through 3.0.3 Stack Overflow via Deeply Nested Patterns
Mariner
Affected productsazl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-93749
HighCVSS 7.5
source-map-js through 1.2.1 Event Loop Denial of Service
Mariner
Affected productsazl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0
Vendor guidance
Release Notes
Ubuntu Security NoticesUSN-8820-1
Severity not listed
USN-8820-1: curl vulnerabilities
Eunsoo Kim discovered that curl incorrectly handled SASL negotiation for LDAP authentication in certain circumstances. A machine-in-the-middle attacker could possibly use this issue to bypass peer validation. This issue only affected Ubuntu 24.04 LTS and Ubuntu 26.04 LTS. (CVE...
Vendor guidance
This issue was previously fixed in USN-8487-1, but that fix was incomplete for Ubuntu 16.04 LTS.
Ubuntu Security NoticesUSN-8821-1
Severity not listed
USN-8821-1: OpenStack Swift vulnerability
It was discovered that OpenStack Swift incorrectly handled truncated aws-chunked PUT request bodies in its s3api middleware. An authenticated attacker could possibly use this issue to cause OpenStack Swift to use excessive resources, leading to a denial of service.
AWS Security BulletinsCVE-2026-96883
Severity not listed
CVE-2026-96883 - Type confusion in AWS pgcollection allows remote code execution
Bulletin ID: 2026-118-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 09/24/2026 12:00 PM PDT Description: pgcollection is an open source extension to PostgreSQL. We identified CVE-2026-96883, an issue in pgcollection's type coercion logic. When r...
AWS Security BulletinsCVE-2026-95985
Severity not listed
CVE-2026-95985 - Kiro IDE Allows Agentic Writes to Global Configurations While Working in Untrusted Workspaces
Bulletin ID: 2026-117-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 09/24/2026 10:00 AM PDT Description: Kiro is an agentic IDE that users install on their desktop. We identified CVE-2026-95985. The file write tool in Kiro IDE before version 1.0...
Cisco Security Advisoriescisco-sa-ise-multiauth-bypass-sgD2HbL4
Medium
Cisco Identity Services Engine Authentication Bypass Vulnerabilities
Multiple vulnerabilities in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow a remote attacker to access or manipulate data, obtain sensitive information, or cause a reload of certificate and key material on an affected device...
Vendor guidance
Cisco has released software updates that address these vulnerabilities.
Ubuntu Security NoticesUSN-8819-1
Severity not listed
USN-8819-1: Linux kernel vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network file system (NFS) server daemon; - IPv6 networking; - Netfilter; (CVE-2025-38724, CVE-2...
Vendor guidance
This update corrects flaws in the following subsystems: - Network file system (NFS) server daemon; - IPv6 networking; - Netfilter; (CVE-2025-38724, CVE-2026-53131, CVE-2026-53221)
Ubuntu Security NoticesUSN-8818-1
Severity not listed
USN-8818-1: Linux kernel vulnerabilities
It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permiss...
Vendor guidance
This update corrects flaws in the following subsystems: - ARM64 architecture; - InfiniBand drivers; - Network drivers; - TCM subsystem; - exFAT file system; - Network file system (NFS) client; - Network file system (N...
Ubuntu Security NoticesUSN-8817-1
Severity not listed
USN-8817-1: Linux kernel vulnerabilities
It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permiss...
Vendor guidance
This update corrects flaws in the following subsystems: - ARM64 architecture; - InfiniBand drivers; - Network drivers; - TCM subsystem; - B.A.T.M.A.N.
Ubuntu Security NoticesUSN-8816-1
Severity not listed
USN-8816-1: Linux kernel vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - S390 architecture; - x86 architecture; - DRBD Distributed Replicated Bloc...
Vendor guidance
This update corrects flaws in the following subsystems: - ARM64 architecture; - S390 architecture; - x86 architecture; - DRBD Distributed Replicated Block Device drivers; - InfiniBand drivers; - IOMMU subsystem; - Mul...
Ubuntu Security NoticesUSN-8815-1
Severity not listed
USN-8815-1: libass vulnerabilities
It was discovered that libass incorrectly handled parsing operations for specific nested character strings. An attacker could use this issue to cause libass to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 14.04 LT...
Ubuntu Security NoticesUSN-8813-1
Severity not listed
USN-8813-1: Expat vulnerabilities
It was discovered that Expat did not correctly handle certain integer arithmetic. An attacker could possibly use this issue to cause a denial of service. (CVE-2026-56406, CVE-2026-56407, CVE-2026-56409, CVE-2026-56410, CVE-2026-56411) It was discovered that Expat did not corre...
Ubuntu Security NoticesUSN-8814-1
Severity not listed
USN-8814-1: Octavia vulnerabilities
It was discovered that Octavia did not properly validate TLS cipher string fields in the Amphora provider driver. An authenticated attacker who owns a TLS-enabled load balancer could possibly use this issue to inject arbitrary HAProxy configuration directives. (CVE-2026-94572)...
Ubuntu Security NoticesUSN-8812-1
Severity not listed
USN-8812-1: GDAL vulnerabilities
It was discovered that GDAL incorrectly handled certain netCDF files. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS. (CVE-2026-49014) It was discovered that GDAL incorrectl...
Microsoft Security Response CenterCVE-2026-81951
CriticalCVSS 7.8
Microsoft Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Affected productsMicrosoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems
Fixed versions16.0.10417.20207, 16.0.20326.20138, 16.113.26091433, 16.0.14334.20906
Vendor guidance
Release Notes Install KB5002914. Install KB5002904.
Microsoft Security Response CenterCVE-2026-69590
CriticalCVSS 9.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725
Vendor guidance
Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.
Microsoft Security Response CenterCVE-2026-47292
HighCVSS 7.8
Visual Studio Code MSSQL Extension Remote Code Execution Vulnerability
Inclusion of functionality from untrusted control sphere in Visual Studio Code allows an unauthorized attacker to elevate privileges locally.
Affected productsVisual Studio Code - MSSQL Extension
Fixed versions1.43.0
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-81357
HighCVSS 8.2
Visual Studio Code Security Feature Bypass Vulnerability
Server-side request forgery (ssrf) in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
Affected productsVisual Studio Code
Fixed versions1.136.2
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-80073
HighCVSS 6.5
Microsoft Office Outlook Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.
Affected productsMicrosoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems
Fixed versions16.0.10417.20207, 16.0.20326.20138, 16.0.14334.20906, 16.0.17932.20976
Vendor guidance
Release Notes Install KB5002919.
Microsoft Security Response CenterCVE-2026-71337
HighCVSS 7.8
Windows Storage Management Provider Elevation of Privilege Vulnerability
Stack-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally.
Affected productsWindows Server 2022, Windows Server 2022 (Server Core installation), Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems
Fixed versions10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725, 10.0.26100.33438
Vendor guidance
Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012.
Microsoft Security Response CenterCVE-2026-69803
HighCVSS 5.9
Windows DHCP Server Information Disclosure Vulnerability
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.26100.33438, 10.0.14393.9512
Vendor guidance
Install KB5122876. Install KB5122882. Install KB5122871. Install KB5123099. Install KB5123065. Install KB5123066.
Before you act
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.