CurrentChecked 9 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
11Vendor sources
16,884Advisories collected
6,314Published or updated in 30 days
6,999Marked critical or high
Coverage
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
CurrentChecked 48 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
Check delayedChecked 24 days ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 49 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 48 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 4 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 4 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 2 hours ago
Checked every 6 hours
Browse this vendor's advisories
Official source
CurrentChecked 4 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 48 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 4 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
16,884 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
Ubuntu Security NoticesUSN-8781-1
Severity not listed
USN-8781-1: Linux kernel (NVIDIA Tegra) vulnerabilities
It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permiss...
Vendor guidance
This update corrects flaws in the following subsystems: - ARM64 architecture; - User-space API (UAPI); - Kernel build system; - ARM32 architecture; - PowerPC architecture; - RISC-V architecture; - S390 architecture; -...
Ubuntu Security NoticesUSN-8730-3
Severity not listed
USN-8730-3: Linux kernel (Azure) vulnerability
A security issue was discovered in the Linux kernel. An attacker could possibly use this to compromise the system. This update corrects flaws in the following subsystems: - IPv6 networking; - Netfilter;
Vendor guidance
This update corrects flaws in the following subsystems: - IPv6 networking; - Netfilter;
Ubuntu Security NoticesUSN-8761-2
Severity not listed
USN-8761-2: Linux kernel (Azure FIPS) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - PowerPC architecture; - Compute Acceleration Framew...
Vendor guidance
This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - PowerPC architecture; - Compute Acceleration Framework; - Drivers core; - Bluetooth drivers; - Arm Firmware Framewo...
Ubuntu Security NoticesUSN-8729-2
Severity not listed
USN-8729-2: Linux kernel (Raspberry Pi Real-time) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - PowerPC architecture; - Compute Acceleration Framew...
Vendor guidance
This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - PowerPC architecture; - Compute Acceleration Framework; - Drivers core; - Bluetooth drivers; - Arm Firmware Framewo...
Ubuntu Security NoticesUSN-8726-2
Severity not listed
USN-8726-2: Linux kernel (Raspberry Pi) vulnerabilities
It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permiss...
Vendor guidance
This update corrects flaws in the following subsystems: - ARM64 architecture; - User-space API (UAPI); - Kernel build system; - ARM32 architecture; - RISC-V architecture; - S390 architecture; - x86 architecture; - Blo...
Ubuntu Security NoticesUSN-8725-2
Severity not listed
USN-8725-2: Linux kernel (AWS) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - NVIDIA Tegra memory controller driver; - File systems infrastructure; - Network file system (NF...
Vendor guidance
This update corrects flaws in the following subsystems: - NVIDIA Tegra memory controller driver; - File systems infrastructure; - Network file system (NFS) server daemon; - OCFS2 file system; - B.A.T.M.A.N.
Ubuntu Security NoticesUSN-8715-2
Severity not listed
USN-8715-2: Linux kernel (AWS FIPS) vulnerabilities
Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject p...
Vendor guidance
This update corrects flaws in the following subsystems: - x86 architecture; - Cryptographic API; - InfiniBand drivers; - Media drivers; - NVIDIA Tegra memory controller driver; - Network drivers; - NVME drivers; - Fil...
Ubuntu Security NoticesUSN-8714-3
Severity not listed
USN-8714-3: Linux kernel vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - OCFS2 file system; - SCTP protocol; (CVE-2026-53043, CVE-2026-53224, CVE-2026-53225, CVE-2026-5...
Vendor guidance
This update corrects flaws in the following subsystems: - OCFS2 file system; - SCTP protocol; (CVE-2026-53043, CVE-2026-53224, CVE-2026-53225, CVE-2026-53246, CVE-2026-53309)
Microsoft Security Response CenterCVE-2026-82253
HighCVSS 7.5
gitoxide before 0.82.0 Path Traversal via Submodule Name Validation Bypass
Mariner
Affected productsazl3 rust 1.90.0-10 on Azure Linux 3.0, azl3 rust 1.96.1-1 on Azure Linux 3.0
Fixed versions1.96.1-2
Vendor guidance
See the Microsoft Security Update Guide for the update that applies to your product.
Microsoft Security Response CenterCVE-2026-82252
HighCVSS 7.5
gitoxide before 0.52.1 Repository Boundary Violation via symlinked .gitmodules
Mariner
Affected productsazl3 rust 1.90.0-10 on Azure Linux 3.0, azl3 rust 1.96.1-1 on Azure Linux 3.0
Fixed versions1.96.1-2
Vendor guidance
See the Microsoft Security Update Guide for the update that applies to your product.
Microsoft Security Response CenterCVE-2026-82251
HighCVSS 7.5
gitoxide before 0.52.1 Path Traversal via Submodule Name
Mariner
Affected productsazl3 rust 1.90.0-10 on Azure Linux 3.0, azl3 rust 1.96.1-1 on Azure Linux 3.0
Fixed versions1.96.1-2
Vendor guidance
See the Microsoft Security Update Guide for the update that applies to your product.
Microsoft Security Response CenterCVE-2026-66033
HighCVSS 7.5
libssh2 Integer Underflow DoS via AES-GCM Cipher Negotiation
Mariner
Affected productsazl3 libssh2 1.11.1-4 on Azure Linux 3.0, azl3 rust 1.75.0-30 on Azure Linux 3.0, azl3 rust 1.96.1-1 on Azure Linux 3.0
Fixed versions1.11.1-5, 1.96.1-2
Vendor guidance
CBL-Mariner Releases
Microsoft Security Response CenterCVE-2026-0899
HighCVSS 8.8
Chromium: CVE-2026-0899 Out of bounds memory access in V8
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Affected productsMicrosoft Edge (Chromium-based), cbl2 nodejs18 18.20.3-12 on CBL-Mariner 2.0
Fixed versions144.0.3719.82
Vendor guidance
Release Notes
Ubuntu Security NoticesUSN-8779-2
Severity not listed
USN-8779-2: Bubblewrap regression
USN-8779-1 fixed vulnerabilities in Bubblewrap. Unfortunately, the fix for CVE-2026-87766 introduced a regression in symlink resolution, preventing certain Flatpak applications from launching. This update reverts that fix until a complete fix is available. We apologize for the...
Vendor guidance
USN-8779-1 fixed vulnerabilities in Bubblewrap.
Cisco Security Advisoriescisco-sa-hardening-iosxr-qg64NcM
CriticalPriority signal
Cisco IOS XR Software Security Hardening Release: September 2026
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered v...
Vendor guidance
To assist customers in patching and streamline the disclosure process, Cisco has grouped these issues by their underlying vulnerability class - Common Weakness Enumeration (CWE) - and assigned a single Common Vulnerab...
AWS Security BulletinsCVE-2026-92943
Severity not listed
CVE-2026-92943 - Improper validation of certificate with host mismatch in AWS IoT Device SDK for Python
Bulletin ID: 2026-115-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 09/17/2026 12:00 PM PDT Description: AWS IoT Device SDK for Python (AWSIoTPythonSDK) is an open source SDK that lets IoT devices and gateways connect to AWS IoT Core over MQTT. ...
Ubuntu Security NoticesUSN-8780-1
Severity not listed
USN-8780-1: libsoup vulnerabilities
It was discovered that libsoup incorrectly handled certain URLs when using an HTTP proxy. A remote attacker could possibly use this issue to inject arbitrary HTTP headers. (CVE-2026-1467) It was discovered that libsoup did not remove proxy authentication credentials when follo...
Ubuntu Security NoticesUSN-8779-1
Severity not listed
USN-8779-1: Bubblewrap vulnerabilities
It was discovered that Bubblewrap incorrectly handled certain temporary directories. A local attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 18.04 LTS. (CVE-2019-12439) It was discovered that Bubble...
Ubuntu Security NoticesUSN-8778-1
Severity not listed
USN-8778-1: GStreamer Good Plugins vulnerability
It was discovered that GStreamer Good Plugins did not limit the size of reassembly buffers when processing fragmented RTP packets. A remote attacker could possibly use this issue to cause GStreamer Good Plugins to use excessive resources, leading to a denial of service.
Ubuntu Security NoticesUSN-8777-1
Severity not listed
USN-8777-1: GNU Bison vulnerability
It was discovered that GNU Bison incorrectly handled grammar-defined configuration variables when generating HTML reports. An attacker could possibly use this issue to execute arbitrary code.
Microsoft Security Response CenterCVE-2026-87701
CriticalCVSS 9.6
Azure Cosmos DB Elevation of Privilege Vulnerability
Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Cosmos DB allows an authorized attacker to elevate privileges over a network.
Affected productsAzure Cosmos DB
Microsoft Security Response CenterCVE-2026-85917
CriticalCVSS 7.5
Azure AI Foundry Elevation of Privilege Vulnerability
Server-side request forgery (ssrf) in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.
Affected productsAzure AI Foundry
Microsoft Security Response CenterCVE-2026-85889
CriticalCVSS 10.0
Azure AI Foundry Elevation of Privilege Vulnerability
Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.
Affected productsAzure AI Foundry
Microsoft Security Response CenterCVE-2026-85887
CriticalCVSS 7.7
M365 Copilot Information Disclosure Vulnerability
Incorrect permission assignment for critical resource in M365 Copilot allows an authorized attacker to disclose information over a network.
Affected productsMicrosoft 365 Copilot
Before you act
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.