CurrentChecked 14 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
11Vendor sources
16,884Advisories collected
6,334Published or updated in 30 days
6,998Marked critical or high
Coverage
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
CurrentChecked 54 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
Check delayedChecked 24 days ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 54 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 54 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 14 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 14 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked about an hour ago
Checked every 6 hours
Browse this vendor's advisories
Official source
CurrentChecked 9 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 54 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 9 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
16,884 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
Microsoft Security Response CenterCVE-2025-46394
LowCVSS 3.2
In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Affected productsazl3 busybox 1.36.1-14 on Azure Linux 3.0, azl3 busybox 1.36.1-15 on Azure Linux 3.0, azl3 busybox 1.36.1-17 on Azure Linux 3.0, azl3 busybox 1.36.1-18 on Azure Linux 3.0
Vendor guidance
See the Microsoft Security Update Guide for the update that applies to your product.
Microsoft Security Response CenterCVE-2025-1180
LowCVSS 3.1
GNU Binutils ld elf-eh-frame.c _bfd_elf_write_section_eh_frame memory corruption
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Affected productscbl2 gdb 11.2-6 on CBL Mariner 2.0, cbl2 binutils 2.37-15 on CBL Mariner 2.0, cbl2 binutils 2.37-16 on CBL Mariner 2.0, azl3 gdb 13.2-5 on Azure Linux 3.0
Fixed versions8.0.4-5, 8.0.1-5
Vendor guidance
CBL-Mariner Releases
Ubuntu Security NoticesUSN-8675-2
Severity not listed
USN-8675-2: Perl vulnerabilities
USN-8675-1 fixed vulnerabilities in Perl. This update provides the corresponding fix for Perl on Ubuntu 26.04 LTS. Original advisory details: It was discovered that Perl incorrectly handled short source addresses in the Socket module. An attacker could possibly use this issue ...
Vendor guidance
USN-8675-1 fixed vulnerabilities in Perl.
Microsoft Security Response CenterCVE-2026-45499
CriticalCVSS 9.9
Azure OpenAI Elevation of Privilege Vulnerability
Server-side request forgery (ssrf) in Azure OpenAI allows an authorized attacker to elevate privileges over a network.
Affected productsAzure Open AI
Microsoft Security Response CenterCVE-2026-73024
HighCVSS 7.8
Windows Services for NFS ONCRPC XDR Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to elevate privileges locally.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725
Vendor guidance
Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.
Microsoft Security Response CenterCVE-2026-69777
HighCVSS 8.0
Windows DHCP Client Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network.
Affected productsWindows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems
Fixed versions10.0.26200.9445, 10.0.26100.9445, 10.0.28000.2954
Vendor guidance
Install KB5124008. Install KB5124012.
Microsoft Security Response CenterCVE-2026-69508
HighCVSS 7.8
Windows MIDI Service Module Elevation of Privileges Vulnerability
Stack-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
Affected productsWindows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 version 26H1 for x64-based Systems
Fixed versions10.0.26200.9445, 10.0.26100.9445, 10.0.28000.2954
Vendor guidance
Install KB5124008. Install KB5124012.
Microsoft Security Response CenterCVE-2026-69492
HighCVSS 7.0
Windows Partition Management Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725
Vendor guidance
Install KB5122876. Install KB5122882. Install KB5122878. Install KB5122871. Install KB5124008. Install KB5122880. Install KB5124012. Install KB5123099. Install KB5123065. Install KB5123066.
Microsoft Security Response CenterCVE-2026-64901
HighCVSS 8.8
Microsoft SharePoint Server Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
Affected productsMicrosoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition
Fixed versions16.0.5565.1001, 16.0.10417.20198, 16.0.19725.20522
Vendor guidance
Install KB5002905. Install KB5002906. Install KB5002894. Install KB5002896. Install KB5002893.
Microsoft Security Response CenterCVE-2026-62693
HighCVSS 7.0
Windows MIDI Service Module Elevation of Privileges Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
Affected productsWindows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems
Fixed versions10.0.26200.9168, 10.0.26200.9106, 10.0.26100.9168, 10.0.26100.9106
Vendor guidance
Install KB5121003. Install KB5120994. Install KB5121000.
Microsoft Security Response CenterCVE-2024-28960
HighCVSS 8.2
An issue was discovered in Mbed TLS 2.18.0 through 2.28.x before 2.28.8 and 3.x before 3.6.0 and Mbed Crypto. The PSA Crypto API mishandles shared memory.
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Affected productscbl2 hvloader 1.0.1-6 on CBL Mariner 2.0, cbl2 hvloader 1.0.1-5 on CBL Mariner 2.0, cbl2 hvloader 1.0.1-5 on CBL-Mariner 2.0
Fixed versions1.0.1-6
Vendor guidance
CBL-Mariner Releases
Microsoft Security Response CenterCVE-2026-55893
High
Capstone SH disassembler `set_reg_n` heap buffer overflow via crafted SH2A FPU bytecode
Mariner
Affected productsazl3 rust 1.75.0-30 on Azure Linux 3.0
Microsoft Security Response CenterCVE-2026-55894
Medium
Capstone SH disassembler `sh_disassemble` out-of-bounds read via crafted SH2A bytecode
Mariner
Affected productsazl3 rust 1.75.0-30 on Azure Linux 3.0
Microsoft Security Response CenterCVE-2026-14457
HighCVSS 7.5
RPK Server Signature Algorithm Selection Can Dereference a Missing Certificate
Mariner
Affected productsazl3 kata-containers 3.32.0.kata0-2 on Azure Linux 3.0, azl3 rust 1.90.0-10 on Azure Linux 3.0, azl3 cloud-hypervisor 51.1.101-2 on Azure Linux 3.0, azl3 rust 1.75.0-30 on Azure Linux 3.0
Microsoft Security Response CenterCVE-2025-4432
MediumCVSS 5.3
Ring: some aes functions may panic when overflow checking is enabled in ring
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Affected productsazl3 rust 1.86.0-10 on Azure Linux 3.0, azl3 kata-containers 3.15.0.aks0-1 on Azure Linux 3.0, azl3 kata-containers-cc 3.15.0.aks0-1 on Azure Linux 3.0, azl3 trident 0.28.0-1 on Azure Linux 3.0
Fixed versions0.28.0-1
Vendor guidance
CBL-Mariner Releases
Ubuntu Security NoticesUSN-8739-1
Severity not listed
USN-8739-1: ImageMagick vulnerabilities
It was discovered that ImageMagick incorrectly handled certain images. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2026-56366...
Ubuntu Security NoticesUSN-8670-3
Severity not listed
USN-8670-3: curl vulnerability
USN-8670-1 fixed a vulnerability in curl. This update provides the corresponding update for Ubuntu 26.04 LTS. Original advisory details: Joshua Rogers discovered that curl incorrectly handled reusing connections when client certificate settings changed. This could result in th...
Vendor guidance
USN-8670-1 fixed a vulnerability in curl.
Ubuntu Security NoticesUSN-8679-2
Severity not listed
USN-8679-2: Vim vulnerability
USN-8679-1 fixed a vulnerability in Vim. This update provides the corresponding update for Ubuntu 26.04 LTS. Original advisory details: It was discovered that Vim incorrectly handled certain tags files. An attacker could possibly use this issue to execute arbitrary code.
Vendor guidance
USN-8679-1 fixed a vulnerability in Vim.
Ubuntu Security NoticesUSN-8738-1
Severity not listed
USN-8738-1: FFmpeg vulnerabilities
It was discovered that FFmpeg incorrectly handled certain video frames when using the hqdn3d filter. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2026-66036) Adrian Junge discovered that FFmpeg incorrectly handled certa...
Ubuntu Security NoticesUSN-8737-1
Severity not listed
USN-8737-1: GNU C Library vulnerabilities
It was discovered that GNU C Library had a buffer overflow in the strfmon function when handling right-justification padding. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 26.04 LTS. (CVE-2026-...
Ivanti Security AdvisoriesIVANTI-SEPTEMBER-2026-SECURITY-UPDATE
Severity not listedPriority signal
September 2026 Security Update
Ivanti releases standard security patches on the second Tuesday of every month. In today’s rapidly evolving technology and threat landscape, we believe responsible transparency should be a cornerstone of any product security program. AI is compressing the time-to-exploit, and ...
Affected productsIvanti Endpoint Manager, Ivanti Sentry
Vendor guidance
Ivanti releases standard security patches on the second Tuesday of every month.
Ubuntu Security NoticesUSN-8736-1
Severity not listed
USN-8736-1: Perl vulnerabilities
It was discovered that Perl incorrectly handled certain large inputs during regular expression matching. An attacker could possibly use this issue to trigger out-of-bounds heap reads or writes, resulting in a denial of service or arbitrary code execution. (CVE-2026-15534) It w...
Ubuntu Security NoticesUSN-8735-1
Severity not listed
USN-8735-1: HSQLDB vulnerability
It was discovered that HSQLDB incorrectly handled specially crafted database files. An attacker could possibly use this issue to overwrite arbitrary files.
Cisco Security Advisoriescisco-sa-esa-smime-disc-dzw4rEdY
Medium
Cisco Secure Email Secure/Multipurpose Internet Mail Extensions Ciphertext Decryption Vulnerabilities
Multiple vulnerabilities in the Secure/Multipurpose Internet Mail Extensions (S/MIME) decryption functionality of Cisco Secure Email could allow an unauthenticated, remote attacker to recover plain text from encrypted email messages. These vulnerabilities are due to insufficie...
Before you act
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.