Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed

11Vendor sources

16,922Advisories collected

6,354Published or updated in 30 days

7,004Marked critical or high

Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

AWS Security Bulletins 175 advisories

CurrentChecked 11 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Apple Security Releases 38 advisories

CurrentChecked 36 minutes ago

Checked hourly Browse this vendor's advisories Official source

Cisco Security Advisories 107 advisories

Check delayedChecked 26 days ago

Checked every 15 minutes Browse this vendor's advisories Official source

Citrix Security Bulletins 24 advisories

CurrentChecked 41 minutes ago

Checked hourly Browse this vendor's advisories Official source

Delinea Security Advisories 14 advisories

CurrentChecked 36 minutes ago

Checked hourly Browse this vendor's advisories Official source

Fortinet PSIRT Advisories 55 advisories

CurrentChecked just now

Checked every 15 minutes Browse this vendor's advisories Official source

Ivanti Security Advisories 9 advisories

CurrentChecked 11 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Microsoft Security Response Center 15,985 advisories

CurrentChecked 26 minutes ago

Checked every 6 hours Browse this vendor's advisories Official source

Palo Alto Networks Security Advisories 59 advisories

CurrentChecked 11 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

SonicWall PSIRT Advisories 12 advisories

CurrentChecked 36 minutes ago

Checked hourly Browse this vendor's advisories Official source

Ubuntu Security Notices 444 advisories

CurrentChecked 6 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

16,922 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results

Ubuntu Security NoticesUSN-8679-1

Published Aug 25, 2026

Severity not listed

USN-8679-1: Vim vulnerability

It was discovered that Vim incorrectly handled certain tags files. An attacker could possibly use this issue to execute arbitrary code.

Read the vendor advisory

Ubuntu Security NoticesUSN-8678-2

Published Aug 25, 2026

Severity not listed

USN-8678-2: OpenSSL, OpenSSL 1.0 vulnerabilities

USN-8678-1 fixed vulnerabilities in OpenSSL. This update provides the corresponding fix for OpenSSL and OpenSSL 1.0 on Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS. In addition, this update also fixes the following issues that were not previously addressed in those...

Vendor guidance

USN-8678-1 fixed vulnerabilities in OpenSSL.

CVE-2024-2511 CVE-2024-5535 CVE-2026-54874 CVE-2026-63072

Read the vendor advisory

Ubuntu Security NoticesUSN-8678-1

Published Aug 25, 2026

Severity not listed

USN-8678-1: OpenSSL vulnerabilities

It was discovered that OpenSSL incorrectly handled the QUIC server incoming channel queue. A remote attacker could possibly use this issue to cause OpenSSL to use excessive resources, leading to a denial of service. This issue only affected Ubuntu 26.04 LTS. (CVE-2026-14456) I...

CVE-2026-14456 CVE-2026-14457 CVE-2026-18798 CVE-2026-54874 CVE-2026-63072 CVE-2026-63073

Read the vendor advisory

Ubuntu Security NoticesUSN-8670-2

Published Aug 25, 2026

Severity not listed

USN-8670-2: curl vulnerability

USN-8670-1 fixed a vulnerability in curl. This update provides the corresponding update for Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. Original advisory details: Joshua Rogers discovered that curl incorrectly handled reusing connections when client certificate s...

Vendor guidance

USN-8670-1 fixed a vulnerability in curl.

Read the vendor advisory

Ubuntu Security NoticesUSN-8675-1

Published Aug 25, 2026

Severity not listed

USN-8675-1: Perl vulnerabilities

It was discovered that Perl incorrectly handled short source addresses in the Socket module. An attacker could possibly use this issue to trigger an out-of-bounds heap read, resulting in information disclosure. (CVE-2026-12087) It was discovered that Perl incorrectly handled r...

Vendor guidance

(CVE-2026-12087) It was discovered that Perl incorrectly handled regular expressions containing a large number of fixed string alternatives.

CVE-2026-12087 CVE-2026-13221 CVE-2026-57432 CVE-2026-57433

Read the vendor advisory

Microsoft Security Response CenterCVE-2026-50333

Updated Aug 25, 2026

HighCVSS 7.8

Windows Spaceport.sys Elevation of Privilege Vulnerability

Missing authentication for critical function in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9020, 10.0.20348.5386, 10.0.19044.7548, 10.0.19045.7548

Vendor guidance

Install KB5099538. Install KB5099540. Install KB5099539. Install KB5099536. Install KB5101650. Install KB5101649. Install KB5099535.

CVE-2026-50333

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-24301

Updated Aug 25, 2026

CriticalCVSS 8.8

Microsoft Copilot Information Disclosure Vulnerability

Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to disclose information over a network.

Affected productsCopilot Web

CVE-2026-24301

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-45639

Updated Aug 25, 2026

HighCVSS 7.5

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network.

Affected productsWindows App Client for Windows Desktop, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019

Fixed versions2.0.1193.0, 10.0.17763.8880, 1.2.7214.0, 10.0.20348.5256

Vendor guidance

Release Notes Install KB5094123. Install KB5094128. Install KB5094127. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051. Install KB5094122. Install KB5094042. Install KB5094041.

CVE-2026-45639

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-55137

Updated Aug 25, 2026

HighCVSS 7.8

Microsoft Excel Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Affected productsOffice Online Server, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems

Fixed versions16.0.10417.20175, https://aka.ms/OfficeSecurityReleases, 16.111.26071215, 16.0.5561.1001

Vendor guidance

Click to Run Release Notes Install KB5002884. Install KB5002886.

CVE-2026-55137

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-49183

Updated Aug 25, 2026

HighCVSS 7.0

Windows Clipboard Server Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Clipboard Server allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9020, 10.0.20348.5386, 10.0.19044.7548, 10.0.19045.7548

Vendor guidance

Install KB5099538. Install KB5099540. Install KB5099539. Install KB5099536. Install KB5101650. Install KB5101649.

CVE-2026-49183

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-62728

Updated Aug 25, 2026

HighCVSS 7.0

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Time-of-check time-of-use (toctou) race condition in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9121, 10.0.20348.5499, 10.0.20348.5440, 10.0.19044.7663

Vendor guidance

Install KB5120238. Install KB5120242. Install KB5120229. Install KB5120249. Install KB5120233. Install KB5120228. Install KB5121003. Install KB5120994. Install KB5120240. Install KB5121000. Install KB5120418. Install ...

CVE-2026-62728

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-59131

Updated Aug 25, 2026

HighCVSS 5.6

AMD Zen Information Disclosure Vulnerability

No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9121, 10.0.20348.5499, 10.0.20348.5440, 10.0.19044.7663

Vendor guidance

CVE-2026-59131

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-61939

Updated Aug 25, 2026

HighCVSS 7.0

Winlogon Elevation of Privilege Vulnerability

Use after free in Winlogon allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9121, 10.0.20348.5499, 10.0.20348.5440, 10.0.19044.7663

Vendor guidance

CVE-2026-61939

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-59130

Updated Aug 25, 2026

HighCVSS 5.6

AMD Zen Information Disclosure Vulnerability

No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9121, 10.0.20348.5499, 10.0.20348.5440, 10.0.19044.7663

Vendor guidance

CVE-2026-59130

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-53583

Updated Aug 25, 2026

MediumCVSS 6.5

libgit2: Inverted IP SubjectAltName Comparison in OpenSSL Backend

Mariner

Affected productsazl3 rust 1.90.0-10 on Azure Linux 3.0, azl3 libgit2 1.7.2-1 on Azure Linux 3.0, azl3 rust 1.75.0-30 on Azure Linux 3.0

CVE-2026-53583

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-53584

Updated Aug 25, 2026

MediumCVSS 4.3

libgit2: Submodule path traversal

Mariner

Affected productsazl3 libgit2 1.7.2-1 on Azure Linux 3.0, azl3 rust 1.75.0-30 on Azure Linux 3.0, azl3 rust 1.90.0-10 on Azure Linux 3.0

CVE-2026-53584

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-49114

Published Aug 25, 2026

MediumCVSS 7.1

ONNX symlink-following and path-traversal arbitrary file write

Mariner

Affected productsazl3 pytorch 2.2.2-16 on Azure Linux 3.0

CVE-2026-49114

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-54770

Published Aug 25, 2026

MediumCVSS 6.1

WebOb: Open redirect in Location header normalization via leading C0 control / space characters

Mariner

Affected productsazl3 python-webob 1.8.10-1 on Azure Linux 3.0

CVE-2026-54770

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-63383

Updated Aug 25, 2026

High

Libevent: decode_tag_internal() can lead to out-of-bounds read

Mariner

Affected productsazl3 fluent-bit 3.1.10-6 on Azure Linux 3.0, azl3 mysql 8.0.46-1 on Azure Linux 3.0, azl3 libevent 2.1.12-1 on Azure Linux 3.0, azl3 lldpd 1.0.22-1 on Azure Linux 3.0

CVE-2026-63383

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-63387

Updated Aug 25, 2026

MediumCVSS 7.0

Libevent: Off-by-one stack buffer overflow in dnsname_to_labels via crafted DNS server response

Mariner

Affected productsazl3 fluent-bit 3.1.10-6 on Azure Linux 3.0, azl3 libevent 2.1.12-1 on Azure Linux 3.0, azl3 lldpd 1.0.22-1 on Azure Linux 3.0, azl3 mysql 8.0.46-1 on Azure Linux 3.0

CVE-2026-63387

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-63381

Updated Aug 25, 2026

Medium

Libevent: Dangling Pointer in `evbuffer_add_buffer_reference`

Mariner

Affected productsazl3 libevent 2.1.12-1 on Azure Linux 3.0, azl3 fluent-bit 3.1.10-6 on Azure Linux 3.0, azl3 ntp 4.2.8p17-2 on Azure Linux 3.0, azl3 lldpd 1.0.22-1 on Azure Linux 3.0

CVE-2026-63381

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-63385

Updated Aug 25, 2026

Critical

Libevent: HTTP header handling bugs create risk of access control bypass.

Mariner

Affected productsazl3 libevent 2.1.12-1 on Azure Linux 3.0, azl3 lldpd 1.0.22-1 on Azure Linux 3.0, azl3 fluent-bit 3.1.10-6 on Azure Linux 3.0, azl3 mysql 8.0.46-1 on Azure Linux 3.0

CVE-2026-63385

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-63388

Updated Aug 25, 2026

HighCVSS 8.4

Libevent: Heap out-of-bounds write in bufferevent_socket_set_conn_address_ reachable via AF_UNIX accept

Mariner

Affected productsazl3 libevent 2.1.12-1 on Azure Linux 3.0, azl3 fluent-bit 3.1.10-6 on Azure Linux 3.0, azl3 lldpd 1.0.22-1 on Azure Linux 3.0, azl3 mysql 8.0.46-1 on Azure Linux 3.0

CVE-2026-63388

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-63379

Updated Aug 25, 2026

Medium

Libevent: HTTP Header smuggling

Mariner

Affected productsazl3 libevent 2.1.12-1 on Azure Linux 3.0, azl3 fluent-bit 3.1.10-6 on Azure Linux 3.0, azl3 lldpd 1.0.22-1 on Azure Linux 3.0, azl3 mysql 8.0.46-1 on Azure Linux 3.0

CVE-2026-63379

Read the vendor advisory Watch this product

Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources