Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
16,884Advisories collected
6,314Published or updated in 30 days
6,999Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

16,884 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2026-69626
HighCVSS 6.5

Microsoft Office Information Disclosure Vulnerability

Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information over a network.

Affected productsMicrosoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems
Fixed versions16.0.10417.20207, 16.0.20326.20138, 16.113.26091433, 16.0.14334.20906
Vendor guidance

Release Notes Install KB5002916.

CVE-2026-69626
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-50311
HighCVSS 7.8

Windows Server Elevation of Privilege Vulnerability

Improper access control in Windows Server allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9020, 10.0.20348.5386, 10.0.19044.7548, 10.0.19045.7548
Vendor guidance

Install KB5099538. Install KB5099540. Install KB5099539. Install KB5099536. Install KB5101650. Install KB5101649. Install KB5099535. Install KB5099445. Install KB5099444.

CVE-2026-50311
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-66809
HighCVSS 5.5

Microsoft Office Graphics Component Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

Affected productsMicrosoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems
Fixed versionshttps://aka.ms/OfficeSecurityReleases, 16.112.26081010, 16.0.5565.1000
Vendor guidance

Click to Run Release Notes Install KB5002901.

CVE-2026-66809
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-24790
CriticalCVSS 9.8

Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 golang 1.18.8-4 on CBL Mariner 2.0, cbl2 golang 1.21.11-1 on CBL Mariner 2.0, cbl2 golang 1.22.3-1 on CBL Mariner 2.0, cbl2 msft-golang 1.21.6-1 on CBL Mariner 2.0
Fixed versions1.18.8-4, 1.21.11-1, 1.22.3-1, 1.21.6-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-24790
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-24537
HighCVSS 7.5

Infinite loop in parsing in go/scanner

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 golang 1.18.8-7 on CBL Mariner 2.0, cbl2 golang 1.17.13-2 on CBL Mariner 2.0, cbl2 golang 1.21.6-1 on CBL Mariner 2.0, cbl2 msft-golang 1.20.11-1 on CBL Mariner 2.0
Fixed versions1.21.6-1, 1.20.11-1, 1.20.7-1
Vendor guidance

CBL-Mariner Releases

CVE-2023-24537
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-61723
HighCVSS 7.5

Quadratic complexity when parsing some invalid inputs in encoding/pem

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 msft-golang 1.24.8-1 on CBL Mariner 2.0, cbl2 msft-golang 1.24.9-1 on CBL Mariner 2.0, azl3 golang 1.25.5-1 on Azure Linux 3.0, cbl2 golang 1.18.8-10 on CBL Mariner 2.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2025-61723
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-24531
CriticalCVSS 9.8

Output of "go env" does not sanitize values in cmd/go

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 golang 1.22.7-3 on CBL Mariner 2.0, azl3 golang 1.23.8-1 on Azure Linux 3.0, cbl2 golang 1.18.8-9 on CBL Mariner 2.0, cbl2 golang 1.21.0-1 on CBL Mariner 2.0
Fixed versions1.21.0-1
Vendor guidance

CBL-Mariner Releases

CVE-2023-24531
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-24785
MediumCVSS 5.4

Errors returned from JSON marshaling may break template escaping in html/template

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 golang 1.21.6-1 on CBL Mariner 2.0, cbl2 golang 1.18.8-7 on CBL Mariner 2.0, cbl2 golang 1.17.13-2 on CBL Mariner 2.0, azl3 golang 1.27.0-1 on Azure Linux 3.0
Fixed versions1.21.6-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-24785
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-24784
HighCVSS 7.5

Comments in display names are incorrectly handled in net/mail

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 golang 1.21.6-1 on CBL Mariner 2.0, cbl2 gcc 11.2.0-8 on CBL Mariner 2.0, cbl2 golang 1.18.8-7 on CBL Mariner 2.0, cbl2 golang 1.17.13-2 on CBL Mariner 2.0
Fixed versions1.21.6-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-24784
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-24538
CriticalCVSS 9.8

Backticks not treated as string delimiters in html/template

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 golang 1.17.13-2 on CBL Mariner 2.0, cbl2 golang 1.21.6-1 on CBL Mariner 2.0, cbl2 msft-golang 1.20.11-1 on CBL Mariner 2.0, cbl2 golang 1.19.8-1 on CBL Mariner 2.0
Fixed versions1.21.6-1, 1.20.11-1, 1.19.8-1
Vendor guidance

CBL-Mariner Releases

CVE-2023-24538
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-24789
MediumCVSS 6.5

Mishandling of corrupt central directory record in archive/zip

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 msft-golang 1.22.4-1 on CBL Mariner 2.0, cbl2 golang 1.21.11-1 on CBL Mariner 2.0, azl3 golang 1.22.3-1 on Azure Linux 3.0, cbl2 golang 1.22.7-3 on CBL Mariner 2.0
Fixed versions1.22.4-1, 1.21.11-1, 1.22.3-1, 1.18.8-8
Vendor guidance

CBL-Mariner Releases

CVE-2024-24789
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-45289
MediumCVSS 5.3

Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 golang 1.21.6-1 on CBL Mariner 2.0, cbl2 golang 1.18.8-7 on CBL Mariner 2.0, cbl2 golang 1.17.13-2 on CBL Mariner 2.0, azl3 golang 1.27.0-1 on Azure Linux 3.0
Fixed versions1.21.6-1
Vendor guidance

CBL-Mariner Releases

CVE-2023-45289
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-22871
CriticalCVSS 9.1

Request smuggling due to acceptance of invalid chunked data in net/http

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 golang 1.22.7-3 on CBL Mariner 2.0, cbl2 msft-golang 1.24.1-2 on CBL-Mariner 2.0, cbl2 golang 1.18.8-7 on CBL-Mariner 2.0, cbl2 golang 1.22.7-3 on CBL-Mariner 2.0
Fixed versions1.22.7-3, 1.24.1-2, 1.18.8-7
Vendor guidance

CBL-Mariner Releases

CVE-2025-22871
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-39836
HighCVSS 7.5

Panic in Dial and LookupPort when handling NUL byte on Windows in net

Mariner

Affected productsazl3 golang 1.25.9-1 on Azure Linux 3.0, azl3 golang 1.26.2-1 on Azure Linux 3.0, azl3 gcc 13.2.0-7 on Azure Linux 3.0, azl3 golang 1.27.0-1 on Azure Linux 3.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2026-39836
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-29406
MediumCVSS 6.5

Insufficient sanitization of Host header in net/http

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 golang 1.17.13-2 on CBL Mariner 2.0, cbl2 golang 1.21.6-1 on CBL Mariner 2.0, cbl2 msft-golang 1.20.7-1 on CBL Mariner 2.0, cbl2 golang 1.20.7-1 on CBL Mariner 2.0
Fixed versions1.21.6-1, 1.20.7-1
Vendor guidance

CBL-Mariner Releases

CVE-2023-29406
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-45341
MediumCVSS 6.1

Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 golang 1.18.8-5 on CBL Mariner 2.0, cbl2 golang 1.22.7-2 on CBL Mariner 2.0, cbl2 msft-golang 1.23.3-2 on CBL Mariner 2.0, cbl2 msft-golang 1.24.1-3 on CBL Mariner 2.0
Fixed versions1.18.8-5, 1.22.7-2, 1.23.3-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-45341
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-24788
MediumCVSS 5.9

Malformed DNS message can cause infinite loop in net

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 golang 1.22.3 on CBL Mariner 2.0, cbl2 golang 1.22.3-1 on CBL Mariner 2.0, cbl2 msft-golang 1.22.3 on CBL Mariner 2.0, azl3 golang 1.22.3-1 on Azure Linux 3.0
Fixed versions1.22.3, 1.22.3-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-24788
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-61729
HighCVSS 7.5

Excessive resource consumption when printing error string for host certificate validation in crypto/x509

Mariner

Affected productsazl3 golang 1.25.5-1 on Azure Linux 3.0, cbl2 msft-golang 1.24.13-1 on CBL Mariner 2.0, azl3 golang 1.26.0-1 on Azure Linux 3.0, azl3 golang 1.25.7-1 on Azure Linux 3.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2025-61729
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources