CurrentChecked 13 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
11Vendor sources
16,922Advisories collected
6,354Published or updated in 30 days
7,004Marked critical or high
Coverage
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
CurrentChecked 18 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
Check delayedChecked 26 days ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 23 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 18 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 18 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 8 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 8 minutes ago
Checked every 6 hours
Browse this vendor's advisories
Official source
CurrentChecked 8 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 18 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 3 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
16,922 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
Microsoft Security Response CenterCVE-2026-66798
HighCVSS 4.3
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
Affected productsMicrosoft Edge for iOS, Microsoft Edge for MAC, Microsoft Edge for Linux, Microsoft Edge for Android
Fixed versions152.0.4191.52, 152.0.4191.53
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-66324
HighCVSS 6.5
Microsoft Edge (Chromium-based) Spoofing Vulnerability
External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
Affected productsMicrosoft Edge for iOS, Microsoft Edge for MAC, Microsoft Edge for Android, Microsoft Edge for Linux
Fixed versions152.0.4191.52, 152.0.4191.53
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-66323
HighCVSS 5.4
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Improper neutralization of parameter/argument delimiters in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
Affected productsMicrosoft Edge for Linux, Microsoft Edge for Android, Microsoft Edge for iOS, Microsoft Edge for MAC
Fixed versions152.0.4191.52, 152.0.4191.53
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-65813
HighCVSS 6.5
Microsoft Exchange Server Elevation of Privilege Vulnerability
Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
Affected productsMicrosoft Exchange Server Subscription Edition RTM, Microsoft Exchange Server 2016 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 15, Microsoft Exchange Server 2019 Cumulative Update 14
Fixed versions15.02.2562.046, 15.01.2507.072, 15.02.1748.049, 15.02.1544.044
Vendor guidance
Install KB5121573. Install KB5121576. Install KB5121574. Install KB5121575.
Microsoft Security Response CenterCVE-2026-79095
Severity not listed
Chromium: CVE-2026-79095 Information leak in Payments
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Affected productsMicrosoft Edge (Chromium-based)
Fixed versions152.0.4191.53
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-70331
MediumCVSS 5.4
Microsoft Edge for iOS Spoofing Vulnerability
Improper neutralization of input used for llm prompting in Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network.
Affected productsMicrosoft Edge (Chromium-based), Microsoft Edge for iOS
Fixed versions150.0.4078.50
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-70309
MediumCVSS 5.4
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.
Affected productsMicrosoft Edge (Chromium-based)
Fixed versions150.0.4078.65
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-62904
MediumCVSS 5.4
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Incorrect authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
Affected productsMicrosoft Edge for Android, Microsoft Edge for MAC, Microsoft Edge for Linux, Microsoft Edge for iOS
Fixed versions152.0.4191.52, 152.0.4191.53
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-58616
MediumCVSS 4.4
Copilot Chat (Microsoft Edge) Information Disclosure Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Copilot Chat (Microsoft Edge) allows an authorized attacker to disclose information over a network.
Affected productsMicrosoft Edge for Android, Microsoft Edge for MAC, Microsoft Edge for iOS, Microsoft Edge for Linux
Fixed versions152.0.4191.52, 152.0.4191.53
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-9546
HighCVSS 7.5
sending old referer
Mariner
Affected productsazl3 rust 1.75.0-30 on Azure Linux 3.0, azl3 rust 1.96.1-1 on Azure Linux 3.0
Microsoft Security Response CenterCVE-2026-11352
HighCVSS 7.5
QUIC zero-length UDP datagrams busy-loop
Mariner
Affected productsazl3 rust 1.75.0-30 on Azure Linux 3.0, azl3 rust 1.96.1-1 on Azure Linux 3.0
Ubuntu Security NoticesUSN-8666-3
Severity not listed
USN-8666-3: Linux kernel (GCP FIPS) vulnerabilities
Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject p...
Vendor guidance
This update corrects flaws in the following subsystems: - x86 architecture; - Cryptographic API; - InfiniBand drivers; - Media drivers; - NVIDIA Tegra memory controller driver; - Network drivers; - NVME drivers; - Fil...
Ubuntu Security NoticesUSN-8644-3
Severity not listed
USN-8644-3: Linux kernel (Azure) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - File systems infrastructure; - OCFS2 file system; - B.A.T.M.A.N. meshing protocol; - SCTP proto...
Vendor guidance
This update corrects flaws in the following subsystems: - File systems infrastructure; - OCFS2 file system; - B.A.T.M.A.N.
Ubuntu Security NoticesUSN-8661-3
Severity not listed
USN-8661-3: Linux kernel vulnerabilities
Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject p...
Vendor guidance
This update corrects flaws in the following subsystems: - x86 architecture; - InfiniBand drivers; - Network drivers; - NVME drivers; - Ext4 file system; - SMB network file system; - IPv4 networking; - Network traffic ...
Ubuntu Security NoticesUSN-8658-4
Severity not listed
USN-8658-4: Linux kernel (Azure CVM) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Open vSwitch; - SCTP protocol; (CVE-2026-53224, CVE-2026-53246, CVE-2026-64531)
Vendor guidance
This update corrects flaws in the following subsystems: - Open vSwitch; - SCTP protocol; (CVE-2026-53224, CVE-2026-53246, CVE-2026-64531)
Ubuntu Security NoticesUSN-8643-5
Severity not listed
USN-8643-5: Linux kernel vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network drivers; - Open vSwitch; - SCTP protocol; (CVE-2026-53224, CVE-2026-53246, CVE-2026-532...
Vendor guidance
This update corrects flaws in the following subsystems: - Network drivers; - Open vSwitch; - SCTP protocol; (CVE-2026-53224, CVE-2026-53246, CVE-2026-53247, CVE-2026-64531)
Ubuntu Security NoticesUSN-8688-1
Severity not listed
USN-8688-1: PAM vulnerability
Juthawong Naisanguansee discovered that PAM incorrectly cleared failed login attempt records when certain services invoked the account phase without first performing authentication. An attacker could possibly use this issue to reset failed login counters, resulting in authenti...
Ubuntu Security NoticesUSN-8687-1
Severity not listed
USN-8687-1: p11-kit vulnerabilities
It was discovered that p11-kit incorrectly handled certain RPC messages. A local attacker could use this issue to cause p11-kit to crash, resulting in a denial of service. (CVE-2026-13757) It was discovered that p11-kit incorrectly handled nested attribute decoding on 32-bit s...
Ubuntu Security NoticesUSN-8686-1
Severity not listed
USN-8686-1: openCryptoki vulnerabilities
It was discovered that primitive decoders in openCryptoki produced integer underflows when the encoded length was zero. An attacker could possibly use this issue to trigger out-of-bounds reads. (CVE-2026-40253) It was discovered that openCryptoki incorrectly handled symlinks. ...
Ubuntu Security NoticesUSN-8685-1
Severity not listed
USN-8685-1: bzip2 vulnerability
It was discovered that bzip2 did not properly manage memory under certain circumstances. An attacker could possibly use this issue to cause a crash, resulting in a denial of service.
Ubuntu Security NoticesUSN-8684-1
Severity not listed
USN-8684-1: Perl vulnerabilities
It was discovered that Perl incorrectly handled certain arguments to Socket and pack/unpack functions. An attacker could possibly use this issue to read sensitive information from memory. (CVE-2026-12087, CVE-2026-57432) It was discovered that Perl incorrectly handled regular ...
Ubuntu Security Notices
Severity not listed
LSN-0121-1: Kernel Live Patch Security Notice
In the Linux kernel, the following vulnerability has been resolved: ksmbd: ipc: fix use-after-free in ipc_msg_send_request ipc_msg_send_request() waits for a generic netlink reply using an ipc_msg_table_entry on the stack. In the Linux kernel, the following vulnerability has b...
Vendor guidance
In the Linux kernel, the following vulnerability has been resolved: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache The NFSv4.0 replay cache uses a fixed 112-byte inline buffer (rp_ibuf.
Microsoft Security Response CenterCVE-2026-42993
HighCVSS 7.5
Remote Desktop Client Remote Code Execution Vulnerability
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
Affected productsWindows Server 2022, Windows Server 2022 (Server Core installation), Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems
Fixed versions10.0.20348.5256, 10.0.19044.7417, 10.0.19045.7417, 10.0.26100.32995
Vendor guidance
Install KB5094128. Install KB5094127. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051.
Microsoft Security Response CenterCVE-2026-50435
HighCVSS 7.8
Windows Overlay Filter Elevation of Privilege Vulnerability
Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9020, 10.0.20348.5386, 10.0.19044.7548, 10.0.19045.7548
Vendor guidance
Install KB5099538. Install KB5099540. Install KB5099539. Install KB5099536. Install KB5101650. Install KB5101649. Install KB5099535. Install KB5099444.
Before you act
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.