CurrentChecked 17 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
11Vendor sources
16,884Advisories collected
6,313Published or updated in 30 days
6,999Marked critical or high
Coverage
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
CurrentChecked 42 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
Check delayedChecked 24 days ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 42 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 42 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 13 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 13 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 5 hours ago
Checked every 6 hours
Browse this vendor's advisories
Official source
CurrentChecked 13 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 42 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 12 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
16,884 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
Ubuntu Security NoticesUSN-8563-5
Severity not listed
USN-8563-5: nginx vulnerability
USN-8563-1 fixed vulnerabilities in nginx. The fix for CVE-2026-42533 was backed out in USN-8563-2 because it could cause a regression. This update includes a better fix for CVE-2026-42533. We apologize for the inconvenience. Original advisory details: It was discovered that n...
Vendor guidance
USN-8563-1 fixed vulnerabilities in nginx.
Microsoft Security Response CenterCVE-2026-62721
HighCVSS 7.8
Windows User-Mode Power Service (UMPS) Elevation of Privilege Vulnerability
Insufficient granularity of access control in User-Mode Power Service (UMPS) allows an authorized attacker to elevate privileges locally.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9121, 10.0.20348.5499, 10.0.20348.5440, 10.0.19044.7663
Vendor guidance
Install KB5120238. Install KB5120242. Install KB5120229. Install KB5120249. Install KB5120233. Install KB5120228. Install KB5129195. Install KB5129241. Install KB5120240. Install KB5129194. Install KB5120418. Install ...
Ubuntu Security NoticesUSN-8751-1
Severity not listed
USN-8751-1: Urwid vulnerabilities
Katriel Moses discovered that Urwid used a weak PRNG. A local attacker could possibly use this issue to cause a denial of service or execute arbitrary code.
Ubuntu Security NoticesUSN-8750-1
Severity not listed
USN-8750-1: FFmpeg vulnerabilities
Seung Min Shin discovered that FFmpeg did not correctly handle certain memory operations. If a user or automated system were tricked into opening a specially crafted file, an attacker could cause a denial of service. (CVE-2026-12706) Xinghang Lv discovered that FFmpeg did not ...
Ubuntu Security NoticesUSN-8749-1
Severity not listed
USN-8749-1: CivetWeb vulnerabilities
It was discovered that CivetWeb did not correctly handle parsing certain URIs. A remote attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2025-55763) It was discov...
Apple Security Releases149039
Severity not listed
Safari 27
Open the original vendor bulletin for the full description and affected-version details.
Affected productsmacOS Sequoia and macOS Tahoe
Apple Security Releases149038
Severity not listed
visionOS 27
Open the original vendor bulletin for the full description and affected-version details.
Affected productsApple Vision Pro (all models)
Apple Security Releases149037
Severity not listed
watchOS 27
Open the original vendor bulletin for the full description and affected-version details.
Affected productsApple Watch Series 9 and later
Apple Security Releases149036
Severity not listed
tvOS 27
Open the original vendor bulletin for the full description and affected-version details.
Affected productsApple TV 4K 2nd generation and later
Apple Security Releases149043
Severity not listed
macOS Sequoia 15.8
Open the original vendor bulletin for the full description and affected-version details.
Affected productsmacOS Sequoia
Apple Security Releases149042
Severity not listed
macOS Tahoe 26.7
Open the original vendor bulletin for the full description and affected-version details.
Affected productsmacOS Tahoe
Apple Security Releases149035
Severity not listed
macOS Golden Gate 27
Open the original vendor bulletin for the full description and affected-version details.
Affected productsMacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)
Apple Security Releases149041
Severity not listed
iOS 26.7 and iPadOS 26.7
Open the original vendor bulletin for the full description and affected-version details.
Affected productsiPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later
Apple Security Releases149034
Severity not listed
iOS 27 and iPadOS 27
Open the original vendor bulletin for the full description and affected-version details.
Affected productsiPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later
Apple Security Releases149040
Severity not listed
Xcode 27
Open the original vendor bulletin for the full description and affected-version details.
Affected productsmacOS Tahoe 26.6 and later
Microsoft Security Response CenterCVE-2026-9804
HighCVSS 7.7
Kubevirt: kubevirt: vmexport directory symlink escape enables exporter pod file read
Mariner
Affected productsazl3 kubevirt 1.7.1-8 on Azure Linux 3.0, azl3 kubevirt 1.7.1-2 on Azure Linux 3.0, azl3 kubevirt 1.7.1-7 on Azure Linux 3.0
Fixed versions1.8.4-1
Vendor guidance
See the Microsoft Security Update Guide for the update that applies to your product.
Microsoft Security Response CenterCVE-2026-54874
HighCVSS 7.5
Excessive Memory Use Buffering DTLS Records for a Future Epoch
Mariner
Affected productsazl3 edk2 20240524git3e722403cd16-18 on Azure Linux 3.0, azl3 kata-containers 3.32.0.kata0-2 on Azure Linux 3.0, azl3 qemu 9.1.0-11 on Azure Linux 3.0, azl3 openssl 3.3.7-6 on Azure Linux 3.0
Fixed versions3.3.7-6
Vendor guidance
See the Microsoft Security Update Guide for the update that applies to your product.
Microsoft Security Response CenterCVE-2026-63073
MediumCVSS 7.4
Untrusted Sender DN Used as Format String in CMP Response Validation
Mariner
Affected productsazl3 kata-containers 3.32.0.kata0-2 on Azure Linux 3.0, azl3 rust 1.75.0-30 on Azure Linux 3.0, azl3 openssl 3.3.7-6 on Azure Linux 3.0, azl3 cloud-hypervisor 51.1.101-2 on Azure Linux 3.0
Fixed versions3.3.7-6
Vendor guidance
See the Microsoft Security Update Guide for the update that applies to your product.
Microsoft Security Response CenterCVE-2025-23131
MediumCVSS 5.5
dlm: prevent NPD when writing a positive value to event_done
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.112.1-2 on Azure Linux 3.0, azl3 kernel 6.6.117.1-1 on Azure Linux 3.0, azl3 kernel 6.6.119.3-1 on Azure Linux 3.0
Fixed versions6.6.144.1-1
Vendor guidance
CBL-Mariner Releases
Microsoft Security Response CenterCVE-2026-63072
MediumCVSS 7.5
Heap Buffer Overflow in CMS Key Unwrapping
Mariner
Affected productsazl3 cloud-hypervisor 51.1.101-2 on Azure Linux 3.0, azl3 edk2 20240524git3e722403cd16-18 on Azure Linux 3.0, azl3 kata-containers 3.32.0.kata0-2 on Azure Linux 3.0, azl3 openssl 3.3.7-4 on Azure Linux 3.0
Fixed versions20240524git3e722403cd16-19, 3.3.7-6
Vendor guidance
See the Microsoft Security Update Guide for the update that applies to your product.
Microsoft Security Response CenterCVE-2026-63074
MediumCVSS 5.9
CMP Indefinite Cache Growth of ExtraCerts
Mariner
Affected productsazl3 cloud-hypervisor 51.1.101-2 on Azure Linux 3.0, azl3 edk2 20240524git3e722403cd16-18 on Azure Linux 3.0, azl3 kata-containers 3.32.0.kata0-2 on Azure Linux 3.0, azl3 openssl 3.3.7-6 on Azure Linux 3.0
Fixed versions20240524git3e722403cd16-19, 3.3.7-6
Vendor guidance
See the Microsoft Security Update Guide for the update that applies to your product.
Microsoft Security Response CenterCVE-2026-63076
HighCVSS 7.5
Invalid Pointer Dereference in CMP Server via Crafted protectionAlg
Mariner
Affected productsazl3 openssl 3.3.7-6 on Azure Linux 3.0, azl3 cloud-hypervisor 51.1.101-2 on Azure Linux 3.0, azl3 edk2 20240524git3e722403cd16-18 on Azure Linux 3.0, azl3 kata-containers 3.32.0.kata0-2 on Azure Linux 3.0
Fixed versions3.3.7-6, 20240524git3e722403cd16-19
Vendor guidance
See the Microsoft Security Update Guide for the update that applies to your product.
Microsoft Security Response CenterCVE-2026-63075
MediumCVSS 7.5
QUIC ACK-only Packet Retention Can Cause Memory Exhaustion
Mariner
Affected productsazl3 rust 1.75.0-30 on Azure Linux 3.0, azl3 rust 1.90.0-10 on Azure Linux 3.0, azl3 cloud-hypervisor 51.1.101-2 on Azure Linux 3.0, azl3 kata-containers 3.32.0.kata0-2 on Azure Linux 3.0
Fixed versions3.3.7-6
Vendor guidance
See the Microsoft Security Update Guide for the update that applies to your product.
Microsoft Security Response CenterCVE-2025-22111
MediumCVSS 5.5
net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF.
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Affected productsazl3 kernel 6.6.112.1-2 on Azure Linux 3.0, azl3 kernel 6.6.117.1-1 on Azure Linux 3.0, azl3 kernel 6.6.119.3-1 on Azure Linux 3.0, azl3 kernel 6.6.119.3-3 on Azure Linux 3.0
Fixed versions6.6.121.1-1
Vendor guidance
CBL-Mariner Releases
Before you act
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.