CurrentChecked 14 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
11Vendor sources
16,884Advisories collected
6,314Published or updated in 30 days
6,999Marked critical or high
Coverage
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
CurrentChecked 18 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
Check delayedChecked 24 days ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 18 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 18 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 13 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 13 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 2 hours ago
Checked every 6 hours
Browse this vendor's advisories
Official source
CurrentChecked 13 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 18 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 13 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
16,884 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
Ubuntu Security NoticesUSN-8796-1
Severity not listed
USN-8796-1: OpenJDK 21 vulnerabilities
Kai Aizen discovered that the Networking component of OpenJDK 21 did not correctly handle user authentication. A remote attacker could possibly use this issue to leak sensitive information. (CVE-2026-61308) It was discovered that the JSSE component of OpenJDK 21 did not correc...
Ubuntu Security NoticesUSN-8795-1
Severity not listed
USN-8795-1: OpenJDK 17 vulnerabilities
Kai Aizen discovered that the Networking component of OpenJDK 17 did not correctly handle user authentication. A remote attacker could possibly use this issue to leak sensitive information. (CVE-2026-61308) It was discovered that the JSSE component of OpenJDK 17 did not correc...
Microsoft Security Response CenterCVE-2026-61548
HighCVSS 8.1
Rsyslog: mmpstrucdata stack buffer overflow with oversized RFC5424 structured data
Mariner
Affected productsazl3 rsyslog 8.2308.0-6 on Azure Linux 3.0
Vendor guidance
See the Microsoft Security Update Guide for the update that applies to your product.
Ubuntu Security NoticesUSN-8790-1
Severity not listed
USN-8790-1: Expat vulnerabilities
It was discovered that Expat could be made to allocate large amounts of memory when parsing a small crafted document. An attacker could possibly use this issue to cause Expat to consume resources, leading to a denial of service. This issue was only addressed in Ubuntu 24.04 LT...
Ubuntu Security NoticesUSN-8793-1
Severity not listed
USN-8793-1: Linux kernel (Azure CVM) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Bluetooth drivers; - GPU drivers; - Hardware monitoring drivers; - SPI subsystem; - NTFS3 file ...
Vendor guidance
This update corrects flaws in the following subsystems: - Bluetooth drivers; - GPU drivers; - Hardware monitoring drivers; - SPI subsystem; - NTFS3 file system; - io_uring subsystem; - Ethernet bridge; - Multipath TCP...
Ubuntu Security NoticesUSN-8668-2
Severity not listed
USN-8668-2: Linux kernel (Raspberry Pi) vulnerabilities
Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and opera...
Vendor guidance
This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - S390 architecture; - x86 architecture; - Block layer subsystem; - Cryp...
Ubuntu Security NoticesUSN-8726-3
Severity not listed
USN-8726-3: Linux kernel (IBM) vulnerabilities
It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permiss...
Vendor guidance
This update corrects flaws in the following subsystems: - ARM64 architecture; - User-space API (UAPI); - Kernel build system; - ARM32 architecture; - RISC-V architecture; - S390 architecture; - x86 architecture; - Blo...
Ubuntu Security NoticesUSN-8729-3
Severity not listed
USN-8729-3: Linux kernel vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - PowerPC architecture; - Compute Acceleration Framew...
Vendor guidance
This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - PowerPC architecture; - Compute Acceleration Framework; - Drivers core; - Bluetooth drivers; - Arm Firmware Framewo...
Ubuntu Security NoticesUSN-8761-3
Severity not listed
USN-8761-3: Linux kernel (Azure) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - PowerPC architecture; - Compute Acceleration Framew...
Vendor guidance
This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - PowerPC architecture; - Compute Acceleration Framework; - Drivers core; - Bluetooth drivers; - Arm Firmware Framewo...
Ubuntu Security NoticesUSN-8730-4
Severity not listed
USN-8730-4: Linux kernel vulnerability
A security issue was discovered in the Linux kernel. An attacker could possibly use this to compromise the system. This update corrects flaws in the following subsystems: - IPv6 networking; - Netfilter;
Vendor guidance
This update corrects flaws in the following subsystems: - IPv6 networking; - Netfilter;
Ubuntu Security NoticesUSN-8792-1
Severity not listed
USN-8792-1: Memcached vulnerability
It was discovered that Memcached incorrectly handled ASCII authentication. A remote attacker could possibly use this issue to cause Memcached to crash, resulting in a denial of service.
Ubuntu Security NoticesUSN-8791-1
Severity not listed
USN-8791-1: Ghostscript vulnerability
It was discovered that Ghostscript incorrectly handled JPEG 2000 image components with mismatched subsampling factors. An attacker could possibly use this issue to cause Ghostscript to crash or execute arbitrary code if it opened a specially crafted file.
Ubuntu Security NoticesUSN-8787-1
Severity not listed
USN-8787-1: libxml2 vulnerabilities
It was discovered that libxml2 incorrectly handled certain XML elements under certain circumstances. An attacker could possibly use this issue to cause libxml2 to crash or execute arbitrary code. (CVE-2026-86140) It was discovered that libxml2 incorrectly handled certain XML d...
Ubuntu Security NoticesUSN-8786-1
Severity not listed
USN-8786-1: rsyslog vulnerability
It was discovered that rsyslog incorrectly calculated buffer sizes when replacing strings. A remote attacker could possibly use this issue to cause rsyslog to crash, resulting in a denial of service.
Ubuntu Security NoticesUSN-8789-1
Severity not listed
USN-8789-1: strongSwan vulnerabilities
It was discovered that strongSwan incorrectly handled PKCS#7 containers in the openssl plugin. A remote attacker could possibly use this issue to cause strongSwan to crash, resulting in a denial of service. (CVE-2026-78123) It was discovered that strongSwan incorrectly handled...
Ubuntu Security NoticesUSN-8788-1
Severity not listed
USN-8788-1: ClamAV vulnerabilities
It was discovered that ClamAV incorrectly handled certain zip archive files. A remote attacker could possibly use this issue to cause ClamAV to crash, resulting in a denial of service. (CVE-2026-20337, CVE-2026-20338) It was discovered that ClamAV incorrectly handled certain P...
Microsoft Security Response CenterCVE-2026-55123
CriticalCVSS 7.8
Microsoft PowerPoint Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
Affected productsMicrosoft Office 365 for Mac, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems
Fixed versions16.111.26071215, https://aka.ms/OfficeSecurityReleases, 16.0.5561.1000
Vendor guidance
Release Notes Click to Run Install KB5002867.
Microsoft Security Response CenterCVE-2026-83498
CriticalCVSS 7.8
Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
Affected productsWindows Server 2025 (Server Core installation), Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems
Fixed versions10.0.26100.33438, 10.0.26200.9445, 10.0.22631.7582, 10.0.26100.9445
Vendor guidance
Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012.
Microsoft Security Response CenterCVE-2026-63532
CriticalCVSS 7.8
Microsoft Office Remote Code Execution Vulnerability
Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally.
Affected productsMicrosoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems
Fixed versionshttps://aka.ms/OfficeSecurityReleases, 16.112.26081010, 16.0.5565.1001
Vendor guidance
Click to Run Release Notes Install KB5002897.
Microsoft Security Response CenterCVE-2026-55039
HighCVSS 7.8
Microsoft Excel Remote Code Execution Vulnerability
Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Affected productsOffice Online Server, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems
Fixed versions16.0.10417.20175, https://aka.ms/OfficeSecurityReleases, 16.111.26071215, 16.0.5561.1001
Vendor guidance
Click to Run Release Notes Install KB5002884. Install KB5002886.
Microsoft Security Response CenterCVE-2026-78526
HighCVSS 8.8
Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Affected productsMicrosoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems
Fixed versions16.0.10417.20207, 16.0.20326.20138, 16.113.26091433, 16.0.14334.20906
Vendor guidance
Release Notes Install KB5002898.
Microsoft Security Response CenterCVE-2026-78517
HighCVSS 8.8
Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Affected productsMicrosoft Office 365 for Mac, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems
Fixed versions16.113.26091433, 16.0.10417.20207, 16.0.20326.20138, 16.0.14334.20906
Vendor guidance
Release Notes Install KB5002923.
Microsoft Security Response CenterCVE-2026-77901
HighCVSS 8.8
Microsoft Office Word Remote Code Execution Vulnerability
Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Affected productsMicrosoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems
Fixed versions16.0.10417.20207, 16.0.20326.20138, 16.113.26091433, 16.0.14334.20906
Vendor guidance
Release Notes Install KB5002923.
Microsoft Security Response CenterCVE-2026-62871
HighCVSS 7.8
.NET Elevation of Privilege Vulnerability
Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.
Affected products.NET 8.0 runtime installed on Windows, .NET 9.0 runtime installed on Windows, Microsoft Visual Studio 2026 version 18.8, Microsoft Visual Studio 2022 version 17.14
Fixed versions8.0.30, 9.0.19, 18.8.3, 17.14.38
Vendor guidance
Install KB5122104. Install KB5122105.
Before you act
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.