Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
16,922Advisories collected
6,354Published or updated in 30 days
7,004Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

16,922 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Ubuntu Security NoticesUSN-8654-1
Severity not listed

USN-8654-1: Netty vulnerabilities

It was discovered that Netty did not properly handle malformed HTTP/2 control frames. An attacker could use this to cause a denial of service via resource exhaustion. This issue only affects Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 24.04 LTS. (CVE-2025-...

CVE-2025-55163CVE-2025-67735
Read the vendor advisory
Ubuntu Security NoticesUSN-8653-1
Severity not listed

USN-8653-1: PostgreSQL vulnerabilities

It was discovered that PostgreSQL incorrectly handled COPY FROM STDIN when an early failure occurred. An authenticated user could possibly use this issue to execute arbitrary SQL commands. (CVE-2026-6464) It was discovered that PostgreSQL incorrectly reset extended statistics ...

CVE-2026-6464CVE-2026-6469CVE-2026-6470CVE-2026-6471CVE-2026-14662CVE-2026-14663
Read the vendor advisory
Microsoft Security Response CenterCVE-2026-54118
CriticalCVSS 9.8

Microsoft SQL Server Remote Code Execution Vulnerability

Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network.

Affected productsMicrosoft SQL Server 2016 for x64-based Systems Service Pack 3 Azure Connect Feature Pack, Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (GDR), Microsoft SQL Server 2017 for x64-based Systems (CU 31)
Fixed versions13.0.7095.1, 15.0.2180.2, 16.0.1190.2, 14.0.3540.1
Vendor guidance

Install KB5102339. Install KB5102336. Install KB5102334. Install KB5102337. Install KB5102335. Install KB5101347. Install KB5102333. Install KB5101346. Install KB5102340. Install KB5102338.

CVE-2026-54118
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-54117
CriticalCVSS 9.8

Microsoft SQL Server Remote Code Execution Vulnerability

Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network.

Affected productsMicrosoft SQL Server 2025 for x64-based Systems (GDR), Microsoft SQL Server 2025 for x64-based Systems (CU6)
Fixed versions17.0.1125.2, 17.0.4060.2
Vendor guidance

Install KB5102333. Install KB5101346.

CVE-2026-54117
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-33824
CriticalCVSS 9.8

Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability

Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8644, 10.0.20348.5020, 10.0.19044.7184, 10.0.19045.7184
Vendor guidance

The following mitigating factors might be helpful in your situation: Customers who cannot immediately install the security update can take one of the following actions, depending on their environment: Block inbound tr...

CVE-2026-33824
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-71331
CriticalCVSS 8.1

Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability

Integer overflow or wraparound in Windows Device Health Attestation (DHA) allows an unauthorized attacker to execute code over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9121, 10.0.20348.5499, 10.0.20348.5440, 10.0.26100.33296
Vendor guidance

Install KB5120238. Install KB5120242. Install KB5120229. Install KB5120233. Install KB5120228.

CVE-2026-71331
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources