CurrentChecked 5 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
11Vendor sources
16,905Advisories collected
6,325Published or updated in 30 days
7,001Marked critical or high
Coverage
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
CurrentChecked 10 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
Check delayedChecked 26 days ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 15 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 10 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked just now
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 5 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked about an hour ago
Checked every 6 hours
Browse this vendor's advisories
Official source
CurrentChecked 5 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 10 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 5 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
16,905 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
Ubuntu Security NoticesUSN-8729-1
Severity not listed
USN-8729-1: Linux kernel vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - PowerPC architecture; - Compute Acceleration Framew...
Vendor guidance
This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - PowerPC architecture; - Compute Acceleration Framework; - Drivers core; - Bluetooth drivers; - Arm Firmware Framewo...
Ubuntu Security NoticesUSN-8728-1
Severity not listed
USN-8728-1: Linux kernel (GCP) vulnerabilities
It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permiss...
Vendor guidance
This update corrects flaws in the following subsystems: - x86 platform drivers; - ARM64 architecture; - Cryptographic API; - PSP security protocol; - User-space API (UAPI); - Kernel build system; - ARM32 architecture;...
Ubuntu Security NoticesUSN-8727-1
Severity not listed
USN-8727-1: Linux kernel (OEM) vulnerabilities
It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permiss...
Vendor guidance
This update corrects flaws in the following subsystems: - ARM64 architecture; - User-space API (UAPI); - Kernel build system; - ARM32 architecture; - RISC-V architecture; - S390 architecture; - x86 architecture; - Blo...
Ubuntu Security NoticesUSN-8726-1
Severity not listed
USN-8726-1: Linux kernel vulnerabilities
It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permiss...
Vendor guidance
This update corrects flaws in the following subsystems: - ARM64 architecture; - User-space API (UAPI); - Kernel build system; - ARM32 architecture; - RISC-V architecture; - S390 architecture; - x86 architecture; - Blo...
Microsoft Security Response CenterCVE-2026-80846
MediumCVSS 5.9
xfrm: drop ESP-in-TCP packets with no ingress device
Mariner
Affected productsazl3 kernel 6.6.150.1-1 on Azure Linux 3.0
Vendor guidance
See the Microsoft Security Update Guide for the update that applies to your product.
Microsoft Security Response CenterCVE-2026-80834
MediumCVSS 4.7
crypto: sun8i-ce - Remove crypto_rng interface
Mariner
Affected productsazl3 kernel 6.6.150.1-1 on Azure Linux 3.0
Vendor guidance
See the Microsoft Security Update Guide for the update that applies to your product.
Microsoft Security Response CenterCVE-2026-80803
HighCVSS 8.1
nfc: digital: clamp SENSF_RES length to the destination buffer
Mariner
Affected productsazl3 kernel 6.6.150.1-1 on Azure Linux 3.0
Vendor guidance
See the Microsoft Security Update Guide for the update that applies to your product.
Microsoft Security Response CenterCVE-2026-0665
MediumCVSS 6.5
Qemu-kvm: heap off-by-one in kvm xen physdevop_map_pirq
Mariner
Affected productsazl3 qemu 10.1.0-1 on Azure Linux 3.0
Vendor guidance
See the Microsoft Security Update Guide for the update that applies to your product.
Microsoft Security Response CenterCVE-2026-83611
Medium
xmldom: Parser silently accepts a not-well-formed end tag whose name is followed by a line break and trailing content
Mariner
Affected productsazl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0
Vendor guidance
See the Microsoft Security Update Guide for the update that applies to your product.
Microsoft Security Response CenterCVE-2026-83613
High
xmldom: Quadratic-time attribute deduplication
Mariner
Affected productsazl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0
Vendor guidance
See the Microsoft Security Update Guide for the update that applies to your product.
Microsoft Security Response CenterCVE-2026-83610
Medium
xmldom: XML fragment injection via invalid EntityReference.nodeName during requireWellFormed serialization
Mariner
Affected productsazl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0
Vendor guidance
See the Microsoft Security Update Guide for the update that applies to your product.
Microsoft Security Response CenterCVE-2026-83619
High
xmldom: End-tag Whitespace-Trim Regex ReDoS - quadratic backtracking in the 0.8.x end-tag parser
Mariner
Affected productsazl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0
Vendor guidance
See the Microsoft Security Update Guide for the update that applies to your product.
Microsoft Security Response CenterCVE-2026-80798
HighCVSS 8.1
nfc: llcp: reject PDUs shorter than the LLCP header
Mariner
Affected productsazl3 kernel 6.6.150.1-1 on Azure Linux 3.0
Vendor guidance
See the Microsoft Security Update Guide for the update that applies to your product.
Microsoft Security Response CenterCVE-2026-80772
MediumCVSS 4.3
HID: nintendo: fix out-of-bounds read in joycon_ctlr_read_handler()
Mariner
Affected productsazl3 kernel 6.6.150.1-1 on Azure Linux 3.0
Vendor guidance
See the Microsoft Security Update Guide for the update that applies to your product.
Microsoft Security Response CenterCVE-2026-80768
MediumCVSS 5.6
HID: ft260: fix stack-use-after-return write in I2C read race
Mariner
Affected productsazl3 kernel 6.6.150.1-1 on Azure Linux 3.0
Microsoft Security Response CenterCVE-2026-80799
HighCVSS 8.1
nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers
Mariner
Affected productsazl3 kernel 6.6.150.1-1 on Azure Linux 3.0
Microsoft Security Response CenterCVE-2026-80780
MediumCVSS 5.9
HID: pidff: fix OOB write when hid->inputs is empty
Mariner
Affected productsazl3 kernel 6.6.150.1-1 on Azure Linux 3.0
Vendor guidance
See the Microsoft Security Update Guide for the update that applies to your product.
Microsoft Security Response CenterCVE-2026-82250
MediumCVSS 6.5
gitoxide gix-packetline before 0.21.5 Denial of Service
Mariner
Affected productsazl3 rust 1.90.0-10 on Azure Linux 3.0, azl3 rust 1.75.0-30 on Azure Linux 3.0
Vendor guidance
See the Microsoft Security Update Guide for the update that applies to your product.
Microsoft Security Response CenterCVE-2026-80771
MediumCVSS 4.7
HID: nintendo: register input device after capabilities are set
Mariner
Affected productsazl3 kernel 6.6.150.1-1 on Azure Linux 3.0
Microsoft Security Response CenterCVE-2026-80791
HighCVSS 7.5
nvmet-auth: zero the AUTH_RECEIVE response buffer
Mariner
Affected productsazl3 kernel 6.6.150.1-1 on Azure Linux 3.0
Vendor guidance
See the Microsoft Security Update Guide for the update that applies to your product.
Microsoft Security Response CenterCVE-2026-80800
HighCVSS 8.1
nfc: llcp: bound the connect_sn TLV walk to the skb
Mariner
Affected productsazl3 kernel 6.6.150.1-1 on Azure Linux 3.0
Vendor guidance
See the Microsoft Security Update Guide for the update that applies to your product.
Microsoft Security Response CenterCVE-2026-80770
MediumCVSS 4.0
HID: nintendo: stop device IO before hid_hw_stop on probe failure
Mariner
Affected productsazl3 kernel 6.6.150.1-1 on Azure Linux 3.0
Vendor guidance
See the Microsoft Security Update Guide for the update that applies to your product.
Microsoft Security Response CenterCVE-2026-80790
MediumCVSS 5.7
nvmet-fc: fix invalid free in LS IOD error path
Mariner
Affected productsazl3 kernel 6.6.150.1-1 on Azure Linux 3.0
Vendor guidance
See the Microsoft Security Update Guide for the update that applies to your product.
Microsoft Security Response CenterCVE-2026-54876
HighCVSS 7.5
Client-Side Memory Leak in OCSP Response Checking
Mariner
Affected productsazl3 cloud-hypervisor 52.0.152-1 on Azure Linux 3.0, azl3 openvmm 0.1.0-1 on Azure Linux 3.0
Vendor guidance
See the Microsoft Security Update Guide for the update that applies to your product.
Before you act
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.