Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
16,884Advisories collected
6,314Published or updated in 30 days
6,999Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

16,884 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2025-40005
MediumCVSS 6.6

spi: cadence-quadspi: Implement refcount to handle unbind during busy

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.112.1-2 on Azure Linux 3.0, azl3 kernel 6.6.119.3-3 on Azure Linux 3.0, azl3 kernel 6.6.121.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0
Fixed versions6.6.126.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-40005
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-27056
MediumCVSS 5.5

wifi: iwlwifi: mvm: ensure offloading TID queue exists

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2024-27056
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-86145
HighCVSS 8.2

PCRE2 before 10.48 allows a pcre2_dfa_match out-of-bounds write because reuse of a cached workspace block, in a recursive DFA matching workspace, lacks a size check (even though a newly allocated block, for the same purpose, does have a size check). This outcome requires an attacker-controlled regular expression, or a recursive pattern in conjunction with a small heap limit (this can be set through the API).

Mariner

Affected productsazl3 pcre2 10.42-3 on Azure Linux 3.0
Fixed versions10.48-1
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2026-86145
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-86143
MediumCVSS 6.9

In xmlIO in libxml2 before 2.15.4, an inconsistency in xmlOutputWriteCallback and xmlBufUse causes negative lengths to reach write callbacks, aka a lack of a check for integer overflow before calling writecallback. This has security relevance for many types of uses of that length value within a callback.

Mariner

Affected productsazl3 libxml2 2.11.5-10 on Azure Linux 3.0
Fixed versions2.11.5-11
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2026-86143
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-86144
MediumCVSS 5.6

In xinclude in libxml2 before 2.15.4, xmlXIncludeProcess and xmlXIncludeProcessTree do not propagate parseFlags. This has security relevance for, for example, the XML_PARSE_NONET flag, if (without it) a custom resource loader accesses the internet and triggers XML external entity injection, SSRF, or a denial of service (e.g., for an attacker-controlled internet resource that is intentionally slow).

Mariner

Affected productsazl3 libxml2 2.11.5-10 on Azure Linux 3.0
Fixed versions2.11.5-11
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2026-86144
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-8224
MediumCVSS 5.5

GNU Binutils BFD Library elf.c bfd_elf_get_str_section null pointer dereference

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 binutils 2.37-15 on CBL Mariner 2.0
CVE-2025-8224
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2022-49531
MediumCVSS 5.5

loop: implement ->free_disk

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2022-49531
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources