Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed

11Vendor sources

16,884Advisories collected

6,334Published or updated in 30 days

6,998Marked critical or high

Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

AWS Security Bulletins 173 advisories

CurrentChecked just now

Checked every 15 minutes Browse this vendor's advisories Official source

Apple Security Releases 29 advisories

CurrentChecked 19 minutes ago

Checked hourly Browse this vendor's advisories Official source

Cisco Security Advisories 107 advisories

Check delayedChecked 24 days ago

Checked every 15 minutes Browse this vendor's advisories Official source

Citrix Security Bulletins 24 advisories

CurrentChecked 20 minutes ago

Checked hourly Browse this vendor's advisories Official source

Delinea Security Advisories 14 advisories

CurrentChecked 19 minutes ago

Checked hourly Browse this vendor's advisories Official source

Fortinet PSIRT Advisories 55 advisories

CurrentChecked just now

Checked every 15 minutes Browse this vendor's advisories Official source

Ivanti Security Advisories 9 advisories

CurrentChecked just now

Checked every 15 minutes Browse this vendor's advisories Official source

Microsoft Security Response Center 15,972 advisories

CurrentChecked 29 minutes ago

Checked every 6 hours Browse this vendor's advisories Official source

Palo Alto Networks Security Advisories 59 advisories

CurrentChecked 15 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

SonicWall PSIRT Advisories 12 advisories

CurrentChecked 19 minutes ago

Checked hourly Browse this vendor's advisories Official source

Ubuntu Security Notices 430 advisories

CurrentChecked 15 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

16,884 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results

Microsoft Security Response CenterCVE-2026-77490

Published Sep 11, 2026

MediumCVSS 6.1

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions151.0.4129.107

Vendor guidance

Release Notes

CVE-2026-77490

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-87564

Published Sep 11, 2026

MediumCVSS 4.3

Type confusion in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Mariner

Affected productsazl3 nodejs 24.20.0-1 on Azure Linux 3.0

Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2026-87564

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-87587

Published Sep 11, 2026

HighCVSS 8.8

Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

What is the version information for this release? Microsoft Edge Version Date Released Based on Chromium Version 153.0.4234.32 09/10/2026 153.0.8010.37

Affected productsazl3 nodejs 24.20.0-1 on Azure Linux 3.0

Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2026-87587

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-80921

Published Sep 11, 2026

MediumCVSS 4.2

KVM: s390: vsie: zero stale crypto bits

Mariner

Affected productsazl3 kernel 6.6.150.1-1 on Azure Linux 3.0

Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2026-80921

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-6485

Published Sep 11, 2026

HighCVSS 8.2

UEFI BIOS embedded Shell can be used to bypass Secure Boot

Mariner

Affected productsazl3 qemu 10.1.0-1 on Azure Linux 3.0, azl3 edk2 20240524git3e722403cd16-20 on Azure Linux 3.0

Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2026-6485

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-87612

Published Sep 11, 2026

HighCVSS 8.8

Type confusion in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Mariner

Affected productsazl3 nodejs 24.20.0-1 on Azure Linux 3.0

Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2026-87612

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-87625

Published Sep 11, 2026

HighCVSS 8.8

Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted Chrome extension. (Chromium security severity: Medium)

Mariner

Affected productsazl3 nodejs 24.20.0-1 on Azure Linux 3.0

Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2026-87625

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-87601

Published Sep 11, 2026

MediumCVSS 7.5

Race condition in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)

Mariner

Affected productsazl3 nodejs 24.20.0-1 on Azure Linux 3.0

Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2026-87601

Read the vendor advisory Watch this product

Ubuntu Security NoticesUSN-8571-2

Published Sep 10, 2026

Severity not listed

USN-8571-2: Apache HTTP Server regression

USN-8571-1 fixed vulnerabilities in Apache HTTP Server. That fix was incomplete due to a missing library symbol, resulting in a regression that could cause Apache HTTP Server to fail to start when HTTP/2 proxying was enabled. This update fixes the problem. We apologize for the...

Vendor guidance

USN-8571-1 fixed vulnerabilities in Apache HTTP Server.

CVE-2026-33007 CVE-2026-33523 CVE-2026-33857 CVE-2026-34032 CVE-2026-34355 CVE-2026-34356

Read the vendor advisory

Ubuntu Security NoticesUSN-8747-1

Published Sep 10, 2026

Severity not listed

USN-8747-1: Beets vulnerability

It was discovered that Beets incorrectly escaped untrusted media metadata in its web interface. An attacker could possibly use this issue to inject arbitrary HTML or execute arbitrary JavaScript code in a user's browser.

Read the vendor advisory

Ubuntu Security NoticesUSN-8746-1

Published Sep 10, 2026

Severity not listed

USN-8746-1: libEBML vulnerability

It was discovered that libEBML incorrectly handled certain read and write operations. An attacker could possibly use this issue to cause a buffer overflow, resulting in a denial of service.

Read the vendor advisory

Ubuntu Security NoticesUSN-8745-1

Published Sep 10, 2026

Severity not listed

USN-8745-1: KissFFT vulnerabilities

It was discovered that KissFFT incorrectly handled certain large Fourier transform sizes on 32-bit architectures. An attacker could possibly use this issue to cause KissFFT to crash, resulting in a denial of service, or execute arbitrary code. (CVE-2025-34297) It was discovere...

CVE-2025-34297 CVE-2026-41445

Read the vendor advisory

Ubuntu Security NoticesUSN-8748-1

Published Sep 10, 2026

Severity not listed

USN-8748-1: Linux kernel (NVIDIA) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Hardware crypto device drivers; - NVIDIA Tegra memory controller driver; - Network drivers; - G...

Vendor guidance

This update corrects flaws in the following subsystems: - Hardware crypto device drivers; - NVIDIA Tegra memory controller driver; - Network drivers; - GFS2 file system; - OCFS2 file system; - SMB network file system;...

CVE-2026-52914 CVE-2026-52931 CVE-2026-52955 CVE-2026-52958 CVE-2026-52982 CVE-2026-52986

Read the vendor advisory

Ubuntu Security NoticesUSN-8744-1

Published Sep 10, 2026

Severity not listed

USN-8744-1: Python vulnerabilities

It was discovered that Python's http.cookies module incorrectly handled control characters in certain cookie operations. An attacker could possibly use this issue to inject arbitrary content. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu...

CVE-2026-3644 CVE-2026-4224 CVE-2026-4360 CVE-2026-6019 CVE-2026-15308

Read the vendor advisory

Ubuntu Security NoticesUSN-8743-1

Published Sep 10, 2026

Severity not listed

USN-8743-1: PHP vulnerabilities

It was discovered that PHP incorrectly handled backslash escaping in the PostgreSQL extension. An attacker could use this issue to perform SQL injection attacks. (CVE-2026-17543) It was discovered that PHP incorrectly handled certain inputs to the bccomp() function. An attacke...

CVE-2026-17543 CVE-2026-17544 CVE-2026-7260

Read the vendor advisory

Ubuntu Security NoticesUSN-8737-2

Published Sep 10, 2026

Severity not listed

USN-8737-2: GNU C Library vulnerabilities

USN-8737-1 fixed vulnerabilities in GNU C Library. This update provides the corresponding fixes for Ubuntu 24.04 LTS. Original advisory details: It was discovered that GNU C Library had a buffer overflow in the strfmon function when handling right-justification padding. An att...

Vendor guidance

USN-8737-1 fixed vulnerabilities in GNU C Library.

CVE-2026-19499 CVE-2026-19542 CVE-2026-6368 CVE-2026-6791 CVE-2026-77117 CVE-2026-80489

Read the vendor advisory

Ubuntu Security NoticesUSN-8742-1

Published Sep 10, 2026

Severity not listed

USN-8742-1: Netty vulnerability

It was discovered that Netty incorrectly validates the bailiwick of NS records. An attacker could possibly use this issue to facilitate DNS cache poisoning attacks.

Read the vendor advisory

Ubuntu Security NoticesUSN-8741-1

Published Sep 10, 2026

Severity not listed

USN-8741-1: Flatpak vulnerabilities

It was discovered that Flatpak did not properly validate paths in sandbox-expose options. A malicious or compromised Flatpak app could use app-controlled symlinks to access arbitrary host files and gain code execution in the host context. This issue was addressed in Ubuntu Ubu...

CVE-2026-34078 CVE-2026-34079

Read the vendor advisory

Mariner

Affected productsazl3 vim 9.2.0782-1 on Azure Linux 3.0

Fixed versions9.2.0976-1

Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2026-73073

Read the vendor advisory Watch this product

Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources