CurrentChecked 11 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
11Vendor sources
16,922Advisories collected
6,354Published or updated in 30 days
7,004Marked critical or high
Coverage
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
CurrentChecked 31 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
Check delayedChecked 26 days ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 40 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 31 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked just now
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 11 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked about an hour ago
Checked every 6 hours
Browse this vendor's advisories
Official source
CurrentChecked 11 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 31 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 11 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
16,922 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
Ubuntu Security NoticesUSN-8669-1
Severity not listed
USN-8669-1: Linux kernel (NVIDIA) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Foo-over-UDP (FOU); - ARM64 architecture; - x86 architecture; - Block layer subsystem; - Driver...
Vendor guidance
This update corrects flaws in the following subsystems: - Foo-over-UDP (FOU); - ARM64 architecture; - x86 architecture; - Block layer subsystem; - Drivers core; - Null block device driver; - Bluetooth drivers; - Count...
Ubuntu Security NoticesUSN-8643-3
Severity not listed
USN-8643-3: Linux kernel (NVIDIA) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network drivers; - Open vSwitch; - SCTP protocol; (CVE-2026-53224, CVE-2026-53246, CVE-2026-532...
Vendor guidance
This update corrects flaws in the following subsystems: - Network drivers; - Open vSwitch; - SCTP protocol; (CVE-2026-53224, CVE-2026-53246, CVE-2026-53247, CVE-2026-64531)
Ubuntu Security NoticesUSN-8659-2
Severity not listed
USN-8659-2: Linux kernel (HWE) vulnerability
A security issue was discovered in the Linux kernel. An attacker could possibly use this to compromise the system. This update corrects flaws in the following subsystems: - Open vSwitch;
Vendor guidance
This update corrects flaws in the following subsystems: - Open vSwitch;
Ubuntu Security NoticesUSN-8668-1
Severity not listed
USN-8668-1: Linux kernel (GCP) vulnerabilities
Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and opera...
Vendor guidance
This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - S390 architecture; - x86 architecture; - Block layer subsystem; - Cryp...
Ubuntu Security NoticesUSN-8667-1
Severity not listed
USN-8667-1: Linux kernel (KVM) vulnerabilities
Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject p...
Vendor guidance
This update corrects flaws in the following subsystems: - x86 architecture; - Cryptographic API; - InfiniBand drivers; - Media drivers; - NVIDIA Tegra memory controller driver; - Network drivers; - NVME drivers; - Fil...
Ubuntu Security NoticesUSN-8662-2
Severity not listed
USN-8662-2: Linux kernel (FIPS) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - Cryptographic API; - InfiniBand drivers; - Media drivers; - STMicroelectron...
Vendor guidance
This update corrects flaws in the following subsystems: - x86 architecture; - Cryptographic API; - InfiniBand drivers; - Media drivers; - STMicroelectronics network drivers; - Network drivers; - Ext4 file system; - IP...
Cisco Security Advisoriescisco-sa-hardening-crosswork-UzDTU9Vh
CriticalPriority signal
Cisco Crosswork Security Hardening Release: August 2026
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Crosswork engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vuln...
Vendor guidance
To assist customers in patching and to streamline the disclosure process, Cisco has grouped these issues by their underlying vulnerability class - Common Weakness Enumeration (CWE) - and assigned a single Common Vulne...
Microsoft Security Response CenterCVE-2026-56684
HighCVSS 7.5
Valkey: TLS pending-data processing use-after-free may allow remote code execution
Mariner
Affected productsazl3 valkey 8.0.10-1 on Azure Linux 3.0
Microsoft Security Response CenterCVE-2026-63639
HighCVSS 8.8
Valkey: UAF in stream deserialization may lead to remote code execution
Mariner
Affected productsazl3 valkey 8.0.10-1 on Azure Linux 3.0
Microsoft Security Response CenterCVE-2026-60589
LowCVSS 3.7
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12; Oracle GraalVM Enterprise Edition: 21.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vect
Mariner
Affected productsazl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0
Microsoft Security Response CenterCVE-2026-49825
HighCVSS 8.2
lxml: javascript: URL bypass in Cleaner via xlink:href
Mariner
Affected productsazl3 python-lxml 4.9.3-2 on Azure Linux 3.0
Microsoft Security Response CenterCVE-2026-76956
MediumCVSS 7.5
In libexpat 2.8.2 and 2.8.3 before 2.8.4, misinterpretation of getentropy's return code leads to insufficient entropy, which results in being vulnerable to hash flooding attacks, causing a denial of service via crafted XML content.
Mariner
Affected productsazl3 expat 2.8.2-1 on Azure Linux 3.0
Microsoft Security Response CenterCVE-2026-73566
HighCVSS 7.5
node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection
Mariner
Affected productsazl3 tar 1.35-2 on Azure Linux 3.0
Microsoft Security Response CenterCVE-2026-16238
HighCVSS 8.8
PostgreSQL type confusion in pg_restore_attribute_stats() executes arbitrary code
Mariner
Affected productsazl3 postgresql 16.14-1 on Azure Linux 3.0
Microsoft Security Response CenterCVE-2026-69836
CriticalCVSS 10.0
Microsoft Entra ID Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network.
Affected productsMicrosoft Entra ID
Microsoft Security Response CenterCVE-2026-64903
CriticalCVSS 7.8
Microsoft Office Remote Code Execution Vulnerability
Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally.
Affected productsMicrosoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems
Fixed versionshttps://aka.ms/OfficeSecurityReleases, 16.112.26081010, 16.0.5565.1001
Vendor guidance
Click to Run Release Notes Install KB5002897.
Microsoft Security Response CenterCVE-2026-58547
HighCVSS 5.5
Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability
Heap-based buffer overflow in Universal Plug and Play (upnp.dll) allows an authorized attacker to elevate privileges locally.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9020, 10.0.20348.5386, 10.0.19044.7548, 10.0.19045.7548
Vendor guidance
Install KB5099538. Install KB5099540. Install KB5099539. Install KB5099536. Install KB5101650. Install KB5101649.
Microsoft Security Response CenterCVE-2026-50466
HighCVSS 7.8
Microsoft Brokering File System Elevation of Privilege Vulnerability
Use after free in Windows Brokering File System allows an authorized attacker to elevate privileges locally.
Affected productsWindows Server 2025 (Server Core installation), Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 24H2 for x64-based Systems
Fixed versions10.0.26100.33158, 10.0.26200.8875, 10.0.26100.8875, 10.0.28000.2525
Vendor guidance
Install KB5099536. Install KB5101650. Install KB5101649.
Microsoft Security Response CenterCVE-2026-32202
HighCVSS 4.3
Windows Shell Spoofing Vulnerability
Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9020, 10.0.20348.5386, 10.0.19044.7548, 10.0.19045.7548
Vendor guidance
Install KB5099538. Install KB5099540. Install KB5099539. Install KB5099536. Install KB5101650. Install KB5099414. Install KB5099535. Install KB5099445. Install KB5099444. Install KB5101649.
Microsoft Security Response CenterCVE-2026-68801
HighCVSS 7.8
Microsoft Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Affected productsMicrosoft Office 365 for Mac, Office Online Server, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions
Fixed versions16.112.26081010, 16.0.10417.20175, https://aka.ms/OfficeSecurityReleases, 16.0.5565.1001
Vendor guidance
Release Notes Click to Run Install KB5002884. Install KB5002903.
Ubuntu Security NoticesUSN-8666-1
Severity not listed
USN-8666-1: Linux kernel vulnerabilities
Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject p...
Vendor guidance
This update corrects flaws in the following subsystems: - x86 architecture; - Cryptographic API; - InfiniBand drivers; - Media drivers; - NVIDIA Tegra memory controller driver; - Network drivers; - NVME drivers; - Fil...
Ubuntu Security NoticesUSN-8665-1
Severity not listed
USN-8665-1: Linux kernel (Raspberry Pi) vulnerabilities
It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505) It was discovered that some AMD Zen 2 processors did not pr...
Vendor guidance
This update corrects flaws in the following subsystems: - ARM64 architecture; - RISC-V architecture; - S390 architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - Compute Acceleration Framew...
Ubuntu Security NoticesUSN-8664-1
Severity not listed
USN-8664-1: Linux kernel (NVIDIA BaseOS) vulnerabilities
It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518) S...
Vendor guidance
This update corrects flaws in the following subsystems: - x86 platform drivers; - Cryptographic API; - PSP security protocol; - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - ...
Ubuntu Security NoticesUSN-8663-1
Severity not listed
USN-8663-1: Linux kernel (NVIDIA) vulnerabilities
It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518) S...
Vendor guidance
This update corrects flaws in the following subsystems: - x86 platform drivers; - Cryptographic API; - PSP security protocol; - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - ...
Before you act
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.