Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
16,884Advisories collected
6,318Published or updated in 30 days
6,999Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

16,884 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2026-69681
HighCVSS 8.0

Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability

Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725
Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-69681
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-69637
HighCVSS 5.7

Windows DHCP Server Denial of Service Vulnerability

Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.26100.33438, 10.0.14393.9512
Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122871. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-69637
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-69636
HighCVSS 6.5

Microsoft Office SharePoint Information Disclosure Vulnerability

Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

Affected productsMicrosoft SharePoint Server Subscription Edition
Fixed versions16.0.20326.20082
Vendor guidance

Install KB5002908.

CVE-2026-69636
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-54981
HighCVSS 7.8

Visual Studio Code Python Extension Security Feature Bypass Vulnerability

Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauthorized attacker to bypass a security feature locally.

Affected productsPython extension for Visual Studio Code
Fixed versions2026.3.1
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2026-54981
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-70324
HighCVSS 8.8

Microsoft SharePoint Elevation of Privilege Vulnerability

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

Affected productsMicrosoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition
Fixed versions16.0.5565.1001, 16.0.10417.20198, 16.0.19725.20522
Vendor guidance

Install KB5002905. Install KB5002906. Install KB5002894. Install KB5002896. Install KB5002893.

CVE-2026-70324
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-63521
HighCVSS 5.5

Microsoft Office Word Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

Affected productsMicrosoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems
Fixed versionshttps://aka.ms/OfficeSecurityReleases, 16.0.5565.1000
Vendor guidance

Click to Run Install KB5002901.

CVE-2026-63521
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-37920
MediumCVSS 5.5

xsk: Fix race condition in AF_XDP generic RX path

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.96.2-1 on Azure Linux 3.0, azl3 kernel 6.6.96.2-2 on Azure Linux 3.0, azl3 kernel 6.6.112.1-2 on Azure Linux 3.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0
Fixed versions6.6.126.1-1
Vendor guidance

Release Notes CBL-Mariner Releases

CVE-2025-37920
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-22124
MediumCVSS 6.0

md/md-bitmap: fix wrong bitmap_limit for clustermd when write sb

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.112.1-2 on Azure Linux 3.0, azl3 kernel 6.6.117.1-1 on Azure Linux 3.0, azl3 kernel 6.6.119.3-3 on Azure Linux 3.0, azl3 kernel 6.6.121.1-1 on Azure Linux 3.0
Vendor guidance

Release Notes

CVE-2025-22124
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21899
MediumCVSS 5.5

tracing: Fix bad hist from corrupting named_triggers list

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1
Vendor guidance

Release Notes

CVE-2025-21899
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21907
LowCVSS 5.5

mm: memory-failure: update ttu flag inside unmap_poisoned_folio

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.112.1-2 on Azure Linux 3.0, azl3 kernel 6.6.119.3-3 on Azure Linux 3.0, azl3 kernel 6.6.121.1-1 on Azure Linux 3.0, azl3 kernel 6.6.126.1-1 on Azure Linux 3.0
Vendor guidance

Release Notes

CVE-2025-21907
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-38595
MediumCVSS 5.5

net/mlx5: Fix peer devlink set for SF representor devlink port

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.104.2-4 on Azure Linux 3.0, azl3 kernel 6.6.112.1-2 on Azure Linux 3.0, azl3 kernel 6.6.117.1-1 on Azure Linux 3.0, azl3 kernel 6.6.119.3-3 on Azure Linux 3.0
Vendor guidance

Release Notes

CVE-2024-38595
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21629
MediumCVSS 5.5

net: reenable NETIF_F_IPV6_CSUM offload for BIG TCP packets

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0
Vendor guidance

Release Notes

CVE-2025-21629
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources