CurrentChecked 17 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
11Vendor sources
16,884Advisories collected
6,334Published or updated in 30 days
6,998Marked critical or high
Coverage
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
CurrentChecked about an hour ago
Checked hourly
Browse this vendor's advisories
Official source
Check delayedChecked 24 days ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked about an hour ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked about an hour ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 17 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 17 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 7 minutes ago
Checked every 6 hours
Browse this vendor's advisories
Official source
CurrentChecked 13 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked about an hour ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 13 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
16,884 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
Microsoft Security Response CenterCVE-2026-59248
Medium
Unbounded HPACK/QPACK prefixed-integer decoding in Cowlib causes memory-exhaustion DoS
Mariner
Affected productsazl3 rabbitmq-server 3.13.7-9 on Azure Linux 3.0, azl3 rabbitmq-server 3.13.7-8 on Azure Linux 3.0
Fixed versions3.13.7-9
Vendor guidance
See the Microsoft Security Update Guide for the update that applies to your product.
Microsoft Security Response CenterCVE-2026-15003
MediumCVSS 5.6
Binutils: gnu binutils: heap-buffer-overflow in linker leads to information disclosure and denial of service
Mariner
Affected productsazl3 gdb 13.2-10 on Azure Linux 3.0, azl3 gdb 13.2-11 on Azure Linux 3.0
Fixed versions13.2-11
Vendor guidance
CBL-Mariner Releases
Microsoft Security Response CenterCVE-2026-44210
MediumCVSS 9.9
Kata Containers have VM Escape via virtiofsd Argument Injection through Default-Enabled Pod Annotations
Mariner
Affected productsazl3 kata-containers-cc 3.15.0.aks0-15 on Azure Linux 3.0, azl3 kata-containers 3.19.1.kata3-6 on Azure Linux 3.0, azl3 kata-containers-cc 3.15.0.aks0-16 on Azure Linux 3.0, azl3 kata-containers-cc 3.15.0.aks0-20 on Azure Linux 3.0
Fixed versions3.32.0.kata0-1, 3.15.0.aks0-20
Vendor guidance
CBL-Mariner Releases
Microsoft Security Response CenterCVE-2026-58050
HighCVSS 7.0
libssh2 - Integer Overflow in publickey Subsystem Attribute Allocation
Mariner
Affected productsazl3 rust 1.96.1-1 on Azure Linux 3.0
Fixed versions1.96.1-2
Vendor guidance
See the Microsoft Security Update Guide for the update that applies to your product.
Microsoft Security Response CenterCVE-2026-5704
MediumCVSS 5.0
Tar: tar: hidden file injection via crafted archives
Mariner
Affected productsazl3 tar 1.35-2 on Azure Linux 3.0
Vendor guidance
See the Microsoft Security Update Guide for the update that applies to your product.
Microsoft Security Response CenterCVE-2025-68146
MediumCVSS 6.3
filelock has TOCTOU race condition that allows symlink attacks during lock file creation
Mariner
Affected productsazl3 python-filelock 3.14.0-1 on Azure Linux 3.0, cbl2 python-filelock 3.0.12-13 on CBL Mariner 2.0, cbl2 python-filelock 3.0.12-13 on CBL-Mariner 2.0, cbl2 python-filelock 3.0.12-13
Fixed versions3.20.1-1, 3.0.12-14
Vendor guidance
CBL-Mariner Releases
Microsoft Security Response CenterCVE-2025-68223
MediumCVSS 6.2
drm/radeon: delete radeon_fence_process in is_signaled, no deadlock
Mariner
Affected productsazl3 kernel 6.6.119.3-3 on Azure Linux 3.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1
Fixed versions6.6.126.1-1
Vendor guidance
CBL-Mariner Releases
Palo Alto Networks Security AdvisoriesCVE-2026-0299
HighCVSS 8.5
CVE-2026-0299: GlobalProtect App: Local Privilege Escalation Vulnerabilities
Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows, and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with ad...
Affected productsGlobalProtect App, GlobalProtect App 6.3, GlobalProtect App 6.2, GlobalProtect App 6.0
Fixed versionsGlobalProtect App 6.3 >= 6.3.3-h15 on Linux (ETA: 09/17), >= 6.3.3-h14 (6.3.3-1121) on macOS, >= 6.3.3-h14 (6.3.3-1121) on Windows, GlobalProtect App 6.2 None on Linux, >= 6.2.8-h13 (6.2.8-1045) on macOS, >= 6.2.8-h13 (6.2.8-1045) on Windows, GlobalProtect App 6.0 >= 6.0.15 on Linux (ETA: 10/29), >= 6.0.15 on macOS (ETA: 10/29), >= 6.0.15 on Windows (ETA: 10/29), GlobalProtect App All on iOS, All on Android, All on Chrome OS
Vendor guidance
VERSION MINOR VERSION SUGGESTED SOLUTION GlobalProtect App 6.3/6.2 on Linux 6.2.0 through 6.3.3-h14 Upgrade to 6.3.3-h15 or later. GlobalProtect App 6.0 on Linux 6.0.0 through 6.0.14 Upgrade to 6.0.15 or later. Global...
Palo Alto Networks Security AdvisoriesCVE-2026-0298
HighCVSS 7.7
CVE-2026-0298: GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP)
An improper input validation vulnerability exists in the Windows Pre-Logon Access Provider (PLAP) component of the Palo Alto Networks GlobalProtect™ app on Windows devices which enables a man-in-the-middle (MitM) attacker to execute arbitrary code with SYSTEM privileges on an ...
Affected productsGlobalProtect App, GlobalProtect App 6.3, GlobalProtect App 6.2, GlobalProtect App 6.0
Fixed versionsGlobalProtect App 6.3 >= 6.3.3-h14 (6.3.3-1121) on Windows, GlobalProtect App 6.2 >= 6.2.8-h13 (6.2.8-1045) on Windows, GlobalProtect App 6.0 >= 6.0.15 on Windows (ETA: 10/29), GlobalProtect App All on Linux, All on macOS, All on Android, All on Chrome OS, All on iOS
Vendor guidance
VERSION MINOR VERSION SUGGESTED SOLUTION GlobalProtect App 6.3 on Windows 6.3.0 through 6.3.3-h13 Upgrade to 6.3.3-h14 (6.3.3-1121) or later. GlobalProtect App 6.2 on Windows 6.2.0 through 6.2.8-h12 Upgrade to 6.2.8-h...
Palo Alto Networks Security AdvisoriesCVE-2026-0296
HighCVSS 7.4
CVE-2026-0296: GlobalProtect App: Improper Certificate Validation Bypass Vulnerability
Improper certificate validation vulnerabilities in Palo Alto Networks GlobalProtect™ app enable an unauthenticated attacker with man-in-the-middle (MitM) access to intercept and modify application communications. VPN tunnel traffic is not impacted. The GlobalProtect app on iOS...
Affected productsGlobalProtect App, GlobalProtect App 6.3, GlobalProtect App 6.2, GlobalProtect App 6.0
Fixed versionsGlobalProtect App 6.3 >= 6.3.3-h15 on Linux (ETA: 09/17), >= 6.3.3-h14 (6.3.3-1121) on macOS, >= 6.3.3-h14 (6.3.3-1121) on Windows, GlobalProtect App 6.2 None on Linux, >= 6.2.8-h13 (6.2.8-1045) on macOS, >= 6.2.8-h13 (6.2.8-1045) on Windows, GlobalProtect App 6.0 >= 6.0.15 on Linux (ETA: 10/29), >= 6.0.15 on macOS (ETA: 10/29), >= 6.0.15 on Windows (ETA: 10/29), GlobalProtect App All on iOS, All on Android, All on Chrome OS
Vendor guidance
VERSION MINOR VERSION SUGGESTED SOLUTION GlobalProtect App 6.3/6.2 on Linux 6.2.0 through 6.3.3-h14 Upgrade to 6.3.3-h15 or later. GlobalProtect App 6.0 on Linux 6.0.0 through 6.0.14 Upgrade to 6.0.15 or later. Global...
Palo Alto Networks Security AdvisoriesCVE-2026-0295
HighCVSS 7.2
CVE-2026-0295: GlobalProtect App: Local Privilege Escalation via Race Condition on macOS
A race condition in the Palo Alto Networks GlobalProtect™ client on macOS enables a locally authenticated low-privileged attacker to escalate their privileges to root. The GlobalProtect app on Linux, Windows, iOS, Android, and Chrome OS is not affected.
Affected productsGlobalProtect App, GlobalProtect App 6.3, GlobalProtect App 6.2, GlobalProtect App 6.0
Fixed versionsGlobalProtect App 6.3 >= 6.3.3-h14 (6.3.3-1121) on macOS, GlobalProtect App 6.2 >= 6.2.8-h13 (6.2.8-1045) on macOS, GlobalProtect App 6.0 >= 6.0.15 on macOS (ETA: 10/29), GlobalProtect App All on Linux, All on Windows, All on iOS, All on Android, All on Chrome OS
Vendor guidance
VERSION MINOR VERSION SUGGESTED SOLUTION GlobalProtect App 6.3 on macOS 6.3.0 through 6.3.3-h13 Upgrade to 6.3.3-h14 (6.3.3-1121) or later. GlobalProtect App 6.2 on macOS 6.2.0 through 6.2.8-h12 Upgrade to 6.2.8-h13 (...
Palo Alto Networks Security AdvisoriesCVE-2026-0297
HighCVSS 7.7
CVE-2026-0297: GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake
A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man-in-the-middle (MitM) attacker or a rogue gateway to disrupt system processes and potentially execute arbitrary code with elevated privileges (SYSTEM privileges on Windows, an...
Affected productsGlobalProtect App, GlobalProtect App 6.3, GlobalProtect App 6.2, GlobalProtect App 6.0
Fixed versionsGlobalProtect App 6.3 >= 6.3.3-h15 on Linux (ETA: 09/17), >= 6.3.3-h14 on macOS, >= 6.3.3-h14 on Windows, >= 6.3.5 on iOS, >= 6.3.5 on Android, >= 6.3.5 on Chrome OS, GlobalProtect App 6.2 None on Linux, >= 6.2.8-h13 on macOS, >= 6.2.8-h13 on Windows, GlobalProtect App 6.0 >= 6.0.15 on Linux (ETA: 10/29), >= 6.0.15 on macOS (ETA: 10/29), >= 6.0.15 on Windows (ETA: 10/29), >= 6.0.15 on iOS (ETA: 10/29), >= 6.0.15 on Android (ETA: 1
Vendor guidance
VERSION MINOR VERSION SUGGESTED SOLUTION GlobalProtect App 6.3/6.2 on Linux 6.2.0 through 6.3.3-h14 Upgrade to 6.3.3-h15 or later. GlobalProtect App 6.0 on Linux 6.0.0 through 6.0.14 Upgrade to 6.0.15 or later. Global...
Microsoft Security Response CenterCVE-2026-87491
Severity not listed
Chromium CVE-2026-87491: Out of bounds write in V8
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Google is aware that an exploit for CVE-2026-87491 exists in the wild.
Affected productsMicrosoft Edge (Chromium-based)
Fixed versions153.0.4234.32
Vendor guidance
Release Notes
AWS Security BulletinsCVE-2026-89332
Severity not listed
CVE-2026-89332 - Kiro IDE Sensitive Workspace Data Exfiltration via Agent-Written Workspace Configuration
Bulletin ID: 2026-111-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 09/11/2026 12:00 PM PDT Description: Kiro IDE is an agentic development environment that makes it easy for developers to ship real engineering work with the help of AI agents. W...
Microsoft Security Response CenterCVE-2026-76023
Severity not listed
Chromium CVE-2026-76023: Improper resource control in Linux Toolkit Theming
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Affected productsMicrosoft Edge (Chromium-based)
Fixed versions151.0.4129.107
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-76022
Severity not listed
Chromium CVE-2026-76022: Buffer overflow in Network
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Affected productsMicrosoft Edge (Chromium-based)
Fixed versions151.0.4129.107
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-76021
Severity not listed
Chromium CVE-2026-76021: Use after free in DOM
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Affected productsMicrosoft Edge (Chromium-based)
Fixed versions151.0.4129.107
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-76019
Severity not listed
Chromium CVE-2026-76019: Incorrect authorization in Workers
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Affected productsMicrosoft Edge (Chromium-based)
Fixed versions151.0.4129.107
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-76018
Severity not listed
Chromium CVE-2026-76018: Privilege elevation in Import
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Affected productsMicrosoft Edge (Chromium-based)
Fixed versions151.0.4129.107
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-76017
Severity not listed
Chromium CVE-2026-76017: Use after free in Chromoting
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Affected productsMicrosoft Edge (Chromium-based)
Fixed versions151.0.4129.107
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-76039
Severity not listed
Chromium CVE-2026-76039: Incorrect reference resolution in Core
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Affected productsMicrosoft Edge (Chromium-based)
Fixed versions151.0.4129.101
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-76036
Severity not listed
Chromium CVE-2026-76036: Buffer overflow in Dawn
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Affected productsMicrosoft Edge (Chromium-based)
Fixed versions151.0.4129.101
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-85053
Severity not listed
Chromium CVE-2026-85053: Improper resource exposure in CacheStorage
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Affected productsMicrosoft Edge (Chromium-based)
Fixed versions152.0.4191.66
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-85052
Severity not listed
Chromium CVE-2026-85052: Out of bounds read in CrashReporting
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Affected productsMicrosoft Edge (Chromium-based)
Fixed versions152.0.4191.66
Vendor guidance
Release Notes
Before you act
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.