Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
16,884Advisories collected
6,314Published or updated in 30 days
6,999Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

16,884 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2025-37903
HighCVSS 7.0

drm/amd/display: Fix slab-use-after-free in hdcp

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.92.2-1 on Azure Linux 3.0, azl3 kernel 6.6.85.1-4 on Azure Linux 3.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0
Fixed versions6.6.92.2-1
Vendor guidance

CBL-Mariner Releases Release Notes

CVE-2025-37903
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-37980
MediumCVSS 5.5

block: fix resource leak in blk_register_queue() error path

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.92.2-1 on Azure Linux 3.0, azl3 kernel 6.6.85.1-4 on Azure Linux 3.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0
Fixed versions6.6.92.2-1
Vendor guidance

CBL-Mariner Releases Release Notes

CVE-2025-37980
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-37957
MediumCVSS 5.5

KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.92.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0
Fixed versions6.6.92.2-1
Vendor guidance

CBL-Mariner Releases Release Notes

CVE-2025-37957
Read the vendor advisory Watch this product
Ubuntu Security NoticesUSN-8811-1
Severity not listed

USN-8811-1: urllib3 vulnerability

It was discovered that urllib3 did not correctly strip sensitive HTTP headers during cross-origin redirects. An attacker could possibly use this issue to leak sensitive information.

Read the vendor advisory
Microsoft Security Response CenterCVE-2023-26819
LowCVSS 2.9

cJSON 1.7.15 might allow a denial of service via a crafted JSON document such as {"a": true, "b": [ null,9999999999999999999999999999999999999999999999912345678901234567]}.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 ceph 18.2.2-10 on Azure Linux 3.0, azl3 libglvnd 1.7.0-3 on Azure Linux 3.0, azl3 ceph 18.2.2-11 on Azure Linux 3.0, azl3 ceph 18.2.2-13 on Azure Linux 3.0
Fixed versions1.7.0-3
Vendor guidance

CBL-Mariner Releases Release Notes

CVE-2023-26819
Read the vendor advisory Watch this product
Ubuntu Security NoticesUSN-8810-1
Severity not listed

USN-8810-1: ImageMagick vulnerabilities

It was discovered that ImageMagick did not correctly handle certain memory operations. An attacker could possibly use this issue to cause a denial of service. This issue affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubunt...

CVE-2026-33535CVE-2026-33536CVE-2026-34238CVE-2026-40310CVE-2026-40311CVE-2026-40312
Read the vendor advisory
Ubuntu Security NoticesUSN-8287-2
Severity not listed

USN-8287-2: XDG Desktop Portal regression

USN-8287-1 fixed a vulnerability in XDG Desktop Portal. Unfortunately the fix for CVE-2026-40354 was incomplete and introduced a regression when trashing files. This update fixes the problem and provides the corresponding update for Ubuntu 26.04 LTS. We apologize for the incon...

Vendor guidance

USN-8287-1 fixed a vulnerability in XDG Desktop Portal.

CVE-2026-40354
Read the vendor advisory
Ubuntu Security NoticesUSN-8809-1
Severity not listed

USN-8809-1: libgit2 vulnerability

Kazuma Matsumoto and Isabel Mill discovered that libgit2 incorrectly handled certain repository URLs when using the SSH transport. A remote attacker could possibly use this issue to execute arbitrary commands.

Read the vendor advisory
Ubuntu Security NoticesUSN-8808-1
Severity not listed

USN-8808-1: SQL parse vulnerabilities

It was discovered that SQL parse contained multiple algorithmic complexity flaws when parsing SQL statements with deeply nested parentheses, comments, or dollar-quoted string literals. An attacker could use this issue to cause SQL parse to consume excessive CPU resources, resu...

Read the vendor advisory
Ubuntu Security NoticesUSN-8807-1
Severity not listed

USN-8807-1: Open-iSNS vulnerability

It was discovered that Open-iSNS contained a double-free vulnerability when decoding malformed iSNS attributes. An unauthenticated attacker could possibly use this to cause a denial of service.

Read the vendor advisory
Ubuntu Security NoticesUSN-8805-1
Severity not listed

USN-8805-1: Moodle vulnerability

It was discovered that Moodle did not properly restrict URLs. An authenticated user could possibly use this issue to perform a server-side request forgery attack and expose sensitive information.

Read the vendor advisory
Cisco Security Advisoriescisco-sa-asaftdvirtual-dos-MuenGnYR
High

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software SSL VPN Denial of Service Vulnerability

Update for September 16, 2026: The original 1.0 version of this advisory was specific to the Cisco Adaptive Security Virtual Appliance (ASAv) and Cisco Secure Firewall Threat Defense Virtual (FTDv) models. However, it was later found that this vulnerability affects all Cisco S...

Affected productsSSL VPN, HTTP server used for the management interface
CVE-2024-20260
Read the vendor advisory Watch this product
Ubuntu Security NoticesUSN-8806-1
Severity not listed

USN-8806-1: NetworkManager vulnerability

It was discovered that NetworkManager did not properly restrict the ca-path and phase2-ca-path certificate authority settings for private (single-user) 802.1X network connections. An attacker could use this issue to point their own private 802.1X connection profile at a direct...

Read the vendor advisory
Microsoft Security Response CenterCVE-2026-86137
LowCVSS 2.9

In libxml2 before 2.15.4, xmlFAParsePosCharGroup has an out-of-bounds read, aka an out-of-bounds read in the NXT macro in xmlregexp.

Mariner

Affected productsazl3 libxml2 2.11.5-10 on Azure Linux 3.0, azl3 libxml2 2.11.5-11 on Azure Linux 3.0
Fixed versions2.11.5-11
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2026-86137
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-86142
MediumCVSS 6.9

In libxml2 before 2.15.4, there is a heap-based buffer overflow in xmlXPtrEvalXPtrPart because of xmlXPtrEval xpointer length saturation.

Mariner

Affected productsazl3 libxml2 2.11.5-10 on Azure Linux 3.0, azl3 libxml2 2.11.5-11 on Azure Linux 3.0
Fixed versions2.11.5-11
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2026-86142
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-86138
MediumCVSS 6.9

In libxml2 before 2.15.4, xmlDictAddQString in dict.c has an integer overflow and resultant heap-based buffer overflow.

Mariner

Affected productsazl3 libxml2 2.11.5-10 on Azure Linux 3.0, azl3 libxml2 2.11.5-11 on Azure Linux 3.0
Fixed versions2.11.5-11
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2026-86138
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21750
MediumCVSS 5.5

wifi: brcmfmac: Check the return value of of_property_read_string_index()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2025-21750
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21738
MediumCVSS 5.5

ata: libata-sff: Ensure that we cannot write outside the allocated buffer

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2025-21738
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21816
MediumCVSS 5.5

hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2025-21816
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources