CurrentChecked 18 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
11Vendor sources
16,914Advisories collected
6,332Published or updated in 30 days
7,001Marked critical or high
Coverage
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
CurrentChecked 48 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
Check delayedChecked 26 days ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 53 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 48 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 3 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 13 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 5 hours ago
Checked every 6 hours
Browse this vendor's advisories
Official source
CurrentChecked 12 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 48 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 8 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
16,914 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
Microsoft Security Response CenterCVE-2026-66046
HighCVSS 7.5
Expat Denial of Service via storeAtts() Quadratic Complexity
Mariner
Affected productsazl3 expat 2.8.2-1 on Azure Linux 3.0
Fixed versions2.8.3-2
Vendor guidance
See the Microsoft Security Update Guide for the update that applies to your product.
Microsoft Security Response CenterCVE-2026-79992
HighCVSS 7.8
Emacs: local shell command injection through the user field in emacs tramp
Mariner
Affected productsazl3 emacs 29.4-4 on Azure Linux 3.0
Fixed versions29.4-5
Vendor guidance
See the Microsoft Security Update Guide for the update that applies to your product.
Microsoft Security Response CenterCVE-2026-54332
MediumCVSS 7.5
GoPacket's sFlow ExtendedGatewayFlow decoder: unbounded attacker-controlled allocation (104-byte UDP datagram -> up to 16 GiB make) -> unauthenticated remote DoS
Mariner
Affected productsazl3 telegraf 1.31.0-28 on Azure Linux 3.0, azl3 telegraf 1.31.0-27 on Azure Linux 3.0
Fixed versions1.31.0-30
Vendor guidance
CBL-Mariner Releases
Microsoft Security Response CenterCVE-2026-19589
HighCVSS 7.1
Packer vulnerable to arbitrary file write via crafted plugin archive during installation
Mariner
Affected productsazl3 packer 1.9.5-18 on Azure Linux 3.0
Fixed versions1.9.5-20
Vendor guidance
See the Microsoft Security Update Guide for the update that applies to your product.
Microsoft Security Response CenterCVE-2026-85396
HighCVSS 7.5
rubyzip before 3.4.0 Path Traversal in Zip::Entry#extract via Sibling-Directory Prefix
Mariner
Affected productsazl3 rubygem-rubyzip 2.3.2-1 on Azure Linux 3.0
Vendor guidance
See the Microsoft Security Update Guide for the update that applies to your product.
Microsoft Security Response CenterCVE-2026-85062
Medium
Colord: Slow rejection of oversized malformed color strings
Mariner
Affected productsazl3 colord 1.4.6-1 on Azure Linux 3.0
Vendor guidance
See the Microsoft Security Update Guide for the update that applies to your product.
Ubuntu Security NoticesUSN-8714-2
Severity not listed
USN-8714-2: Linux kernel vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - OCFS2 file system; - SCTP protocol; (CVE-2026-53043, CVE-2026-53224, CVE-2026-53225, CVE-2026-5...
Vendor guidance
This update corrects flaws in the following subsystems: - OCFS2 file system; - SCTP protocol; (CVE-2026-53043, CVE-2026-53224, CVE-2026-53225, CVE-2026-53246, CVE-2026-53309)
Ubuntu Security NoticesUSN-8725-1
Severity not listed
USN-8725-1: Linux kernel vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - NVIDIA Tegra memory controller driver; - File systems infrastructure; - Network file system (NF...
Vendor guidance
This update corrects flaws in the following subsystems: - NVIDIA Tegra memory controller driver; - File systems infrastructure; - Network file system (NFS) server daemon; - OCFS2 file system; - B.A.T.M.A.N.
SonicWall PSIRT AdvisoriesSNWLID-2026-0015
CriticalCVSS 9.1
SonicWall NSM On-Prem Affected By Multiple Vulnerabilities
1) CVE-2026-78327 - Authenticated Command Injection Vulnerability An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the SonicWall Network Security Manager (NSM) On-Prem Management interface allows an authenticated at...
Affected productsAffected Product(s): Affected Versions, Network Security Manager (NSM) On-Prem (VMWare, Hyper-V, Azure and KVM): 4.3.0 and earlier versions.
Fixed versionsFixed Product(s): Fixed Versions, Network Security Manager (NSM) On-Prem (VMWare, Hyper-V, Azure and KVM): 4.3.1-R4 and higher versions.
Vendor guidance
Install the applicable fixed SonicWall release for your product and branch. Fixed Product(s): Fixed Versions Network Security Manager (NSM) On-Prem (VMWare, Hyper-V, Azure and KVM): 4.3.1-R4 and higher versions.
Citrix Security BulletinsCTX696734
HighCVSS 8.5
Citrix Secure Access Client for Windows and Citrix Endpoint Analysis Client for Windows Security Bulletin for CVE-2026-53565 and CVE-2026-53566
Citrix Secure Access Client for Windows and Citrix Endpoint Analysis Client for Windows contain the vulnerabilities mentioned below
Affected productsCitrix Secure Access Client for Windows and Citrix Endpoint Analysis Client for Windows, The following supported versions of Citrix Secure Access Client for Windows and Citrix Endpoint Analysis Client for Windows are affected by CVE-2026-53565: Citrix Secure Access Client for Windows versions BEFORE 26.6.1.20 Citrix Endpoint Analysis Client for Windows versions BEFORE 26.5.1.7 The following supported versions of Citrix Secure Access Client for Windows are affected by CVE-2026-53566: Citrix Secure Access Client for Windows versions BEFORE 26.6.1.20
Fixed versionsCitrix Secure Access Client for Windows 26.6.1.20 and later releases, Citrix Endpoint Analysis Client for Windows 26.5.1.7 and later releases
Vendor guidance
Cloud Software Group strongly urges customers of Citrix Secure Access Client for Windows and Citrix Endpoint Analysis Client to install the relevant updated versions as soon as possible: Citrix Secure Access Client fo...
Microsoft Security Response CenterCVE-2026-50376
HighCVSS 6.5
Windows Remote Desktop Client Information Disclosure Vulnerability
Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9020, 10.0.20348.5386, 10.0.19044.7548, 10.0.19045.7548
Vendor guidance
Install KB5099538. Install KB5099540. Install KB5099539. Install KB5099536. Install KB5101650. Install KB5101649. Install KB5099535. Install KB5099445. Install KB5099444.
Microsoft Security Response CenterCVE-2026-46669
HighCVSS 7.5
`openvm-pairing` pairing check missing proper subfield check on scaling factor
Mariner
Affected productsazl3 openvmm 0.1.0-1 on Azure Linux 3.0
Vendor guidance
See the Microsoft Security Update Guide for the update that applies to your product.
Ubuntu Security NoticesUSN-8724-1
Severity not listed
USN-8724-1: rabbitmq-c vulnerabilities
It was discovered that the rabbitmq-c command-line tools only accepted credentials on the command line, making them visible to other local users through the process list. An attacker could possibly use this to obtain sensitive credentials. This issue only affected Ubuntu 14.04...
Ubuntu Security NoticesUSN-8720-1
Severity not listed
USN-8720-1: GnuPG vulnerability
It was discovered that GnuPG incorrectly validated authentication tag lengths when parsing CMS messages encrypted with AES-GCM. An attacker could possibly use this issue to bypass message integrity checks.
Ubuntu Security NoticesUSN-8723-1
Severity not listed
USN-8723-1: SPICE vdagent vulnerabilities
It was discovered that SPICE vdagent had an integer overflow in the buffer size calculation used when writing to the daemon socket. A malicious or compromised SPICE host could possibly use this issue to cause SPICE vdagent to crash, resulting in a denial of service. (CVE-2026-...
Ubuntu Security NoticesUSN-8722-1
Severity not listed
USN-8722-1: libssh2 vulnerabilities
It was discovered that libssh2 incorrectly handled certain SFTP server responses. A remote attacker controlling an SSH server could use this issue to cause libssh2 to crash or possibly execute arbitrary code. (CVE-2026-66032) It was discovered that libssh2 incorrectly handled ...
Ubuntu Security NoticesUSN-8719-1
Severity not listed
USN-8719-1: APR-util vulnerabilities
It was discovered that APR-util incorrectly performed password hash comparisons in a way that was not constant-time. An attacker could possibly use this issue to obtain sensitive information. (CVE-2025-49506) It was discovered that APR-util incorrectly handled recursive XML el...
Ubuntu Security NoticesUSN-8721-1
Severity not listed
USN-8721-1: OpenSSH vulnerabilities
It was discovered that OpenSSH's ssh-agent incorrectly handled interactions between agent locking and the session-bind@openssh.com extension. A remote attacker with access to a forwarded agent connection could possibly use this issue to perform operations that should only be a...
Ubuntu Security NoticesUSN-8718-1
Severity not listed
USN-8718-1: SSSD vulnerability
It was discovered that SSSD did not properly validate authentication token lengths when processing PAM responder requests. A local attacker could possibly use this issue to cause SSSD to crash, resulting in a denial of service.
Ubuntu Security NoticesUSN-8716-1
Severity not listed
USN-8716-1: FFmpeg vulnerabilities
It was discovered that FFmpeg incorrectly handled certain crafted media files in the VobSub subtitle demuxer. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2026-64830) It was discovered that FFmpeg incorrectly handled ce...
Ubuntu Security NoticesUSN-8717-1
Severity not listed
USN-8717-1: Apache Tika vulnerability
It was discovered that Apache Tika's ISA-Tab parser incorrectly handled file path resolution. An attacker who could place files in a directory that Tika subsequently parses could use this issue to read arbitrary files accessible to the Tika process and have their contents emit...
Microsoft Security Response CenterCVE-2026-69414
HighCVSS 7.8
Microsoft Defender Elevation of Privilege Vulnerability
Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "ShieldBreak ".
Affected productsMicrosoft Malware Protection Engine
Fixed versions1.1.26080.3
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-62815
CriticalCVSS 9.8
Microsoft QUIC Remote Code Execution Vulnerability
Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.
Affected productsWindows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025 (Server Core installation), Windows 11 Version 25H2 for ARM64-based Systems
Fixed versions10.0.20348.5499, 10.0.20348.5440, 10.0.26100.33296, 10.0.26100.33222
Vendor guidance
Install KB5120242. Install KB5120229. Install KB5120233. Install KB5120228. Install KB5121003. Install KB5120994. Install KB5120240. Install KB5121000.
Microsoft Security Response CenterCVE-2026-58641
HighCVSS 7.8
.NET Elevation of Privilege Vulnerability
Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.
Affected productsSkiaSharp 4.151.2
Fixed versions4.151.2
Vendor guidance
Release Notes
Before you act
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.