Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
16,884Advisories collected
6,314Published or updated in 30 days
6,999Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

16,884 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2024-36898
HighCVSS 7.8

gpiolib: cdev: fix uninitialised kfifo

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2024-36898
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-27389
MediumCVSS 5.5

pstore: inode: Only d_invalidate() is needed

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2024-27389
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-41079
MediumCVSS 5.5

nvmet: always initialize cqe.result

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2024-41079
Read the vendor advisory Watch this product
Cisco Security Advisoriescisco-sa-cimc-arg-inject-upSHdMfU
High

Cisco Integrated Management Controller Argument Injection Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected system and elevate privileges to root. F...

Vendor guidance

Cisco has released software updates that address these vulnerabilities.

CVE-2026-20200CVE-2026-20288
Read the vendor advisory
Ubuntu Security NoticesUSN-8769-1
Severity not listed

USN-8769-1: phpseclib vulnerability

It was discovered that phpseclib did not perform padding validation in constant time when using AES in CBC mode. A remote attacker could possibly use this issue to conduct a padding oracle timing attack and obtain sensitive information.

Read the vendor advisory
Ubuntu Security NoticesUSN-8768-1
Severity not listed

USN-8768-1: Shibboleth vulnerability

Florian Stuhlmann discovered that Shibboleth incorrectly escaped input when using the ODBC storage plugin. A remote attacker could possibly use this issue to perform SQL injection attacks and obtain sensitive information.

Read the vendor advisory
Ubuntu Security NoticesUSN-8767-1
Severity not listed

USN-8767-1: Snapcast vulnerability

It was discovered that Snapcast incorrectly handled crafted JSON-RPC requests. A remote attacker could possibly use this issue to execute arbitrary code or obtain sensitive information.

Read the vendor advisory
Ubuntu Security NoticesUSN-8766-1
Severity not listed

USN-8766-1: Suricata-Update vulnerability

Guillem Lefait discovered that Suricata-Update did not properly validate destination paths when extracting files referenced by downloaded rule archives. An attacker could possibly use this issue to write arbitrary files outside the configured rules directory.

Read the vendor advisory
Ubuntu Security NoticesUSN-8762-1
Severity not listed

USN-8762-1: polkit vulnerability

It was discovered that polkit incorrectly handled cookie input. A local attacker could possibly use this issue to cause polkit to crash, resulting in a denial of service, or execute arbitrary code.

Read the vendor advisory
Ubuntu Security NoticesUSN-8764-1
Severity not listed

USN-8764-1: SRT vulnerabilities

It was discovered that SRT did not authenticate certain encryption control messages. A remote attacker could possibly use this issue to downgrade an encrypted connection and inject arbitrary content or interrupt a media stream. (CVE-2026-55868) It was discovered that SRT did n...

CVE-2026-55868CVE-2026-55869
Read the vendor advisory
Ubuntu Security NoticesUSN-8761-1
Severity not listed

USN-8761-1: Linux kernel (Azure) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - PowerPC architecture; - Compute Acceleration Framew...

Vendor guidance

This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - PowerPC architecture; - Compute Acceleration Framework; - Drivers core; - Bluetooth drivers; - Arm Firmware Framewo...

CVE-2025-71289CVE-2026-23469CVE-2026-31420CVE-2026-31486CVE-2026-31560CVE-2026-46158
Read the vendor advisory
Ubuntu Security NoticesUSN-8730-2
Severity not listed

USN-8730-2: Linux kernel (Azure) vulnerability

A security issue was discovered in the Linux kernel. An attacker could possibly use this to compromise the system. This update corrects flaws in the following subsystems: - IPv6 networking; - Netfilter;

Vendor guidance

This update corrects flaws in the following subsystems: - IPv6 networking; - Netfilter;

Read the vendor advisory
Ubuntu Security NoticesUSN-8760-1
Severity not listed

USN-8760-1: Linux kernel (NVIDIA) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - User-space API (UAPI); - Kernel build system; - ARM32 architecture; - ARM64 architecture; - RIS...

Vendor guidance

This update corrects flaws in the following subsystems: - User-space API (UAPI); - Kernel build system; - ARM32 architecture; - ARM64 architecture; - RISC-V architecture; - S390 architecture; - x86 architecture; - Blo...

Read the vendor advisory
Microsoft Security Response CenterCVE-2026-69321
HighCVSS 5.5

Windows Power Dependency Coordinator Tampering Vulnerability

Missing authentication for critical function in Windows Power Dependency Coordinator allows an authorized attacker to perform tampering locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725
Vendor guidance

Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.

CVE-2026-69321
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-55053
HighCVSS 7.8

Microsoft Excel Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Affected productsMicrosoft Office 365 for Mac, Office Online Server, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions
Fixed versions16.111.26071215, 16.0.10417.20175, https://aka.ms/OfficeSecurityReleases, 16.0.5561.1001
Vendor guidance

Release Notes Click to Run Install KB5002884. Install KB5002886.

CVE-2026-55053
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-50688
HighCVSS 7.8

Windows Win32k Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9020, 10.0.20348.5386, 10.0.19044.7548, 10.0.19045.7548
Vendor guidance

Install KB5099538. Install KB5099540. Install KB5099539. Install KB5099536. Install KB5101650. Install KB5101649. Install KB5099535. Install KB5099445. Install KB5099444.

CVE-2026-50688
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-50683
HighCVSS 8.0

Windows DHCP Client Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges over an adjacent network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9020, 10.0.20348.5386, 10.0.26100.33158, 10.0.14393.9339
Vendor guidance

Install KB5099538. Install KB5099540. Install KB5099536. Install KB5099535. Install KB5099445. Install KB5099444.

CVE-2026-50683
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-50351
HighCVSS 7.8

Windows Audio Compression Manager (ACM) Elevation of Privilege Vulnerability

Improper access control in Windows Audio Compression Manager (ACM) allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9020, 10.0.20348.5386, 10.0.19044.7548, 10.0.19045.7548
Vendor guidance

Install KB5099538. Install KB5099540. Install KB5099539. Install KB5099536. Install KB5101650. Install KB5101649. Install KB5099535. Install KB5099445. Install KB5099444.

CVE-2026-50351
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources