CurrentChecked 13 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
11Vendor sources
16,923Advisories collected
6,355Published or updated in 30 days
7,004Marked critical or high
Coverage
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
CurrentChecked 8 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
Check delayedChecked 26 days ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 18 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 8 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 3 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 13 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 2 hours ago
Checked every 6 hours
Browse this vendor's advisories
Official source
CurrentChecked 13 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 8 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 13 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
16,923 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
Ubuntu Security NoticesUSN-8648-1
Severity not listed
USN-8648-1: Bind vulnerabilities
It was discovered that Bind incorrectly accepted NSEC3 records whose signer name did not match the owning zone. A remote attacker could possibly use this issue to perform NSEC3 impersonation attacks, bypassing DNSSEC validation. (CVE-2026-10723) It was discovered that Bind inc...
Citrix Security BulletinsCTX696939
CriticalCVSS 9.3
NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19489 and CVE-2026-19490
The following supported versions of NetScaler ADC and NetScaler Gateway are affected by the vulnerabilities:
Affected productsNetScaler ADC and NetScaler Gateway, The following supported versions of NetScaler ADC and NetScaler Gateway are affected by the vulnerabilities: NetScaler ADC and NetScaler Gateway 14.1 BEFORE 14.1-73.32 NetScaler ADC and NetScaler Gateway 13.1 BEFORE 13.1-63.21 NetScaler ADC FIPS BEFORE 14.1-73.32 FIPS NetScaler ADC FIPS and NDcPP BEFORE 13.1-37.277
Fixed versionsNetScaler ADC and NetScaler Gateway 14.1-73.32 and later releases, NetScaler ADC and NetScaler Gateway 13.1-63.21 and later releases of 13.1, NetScaler ADC 14.1-FIPS 14.1-73.32 FIPS and later releases of 14.1-FIPS, NetScaler ADC 13.1-FIPS and 13.1-NDcPP 13.1-37.277 and later releases of 13.1-FIPS and 13.1-NDcPP
Vendor guidance
Cloud Software Group strongly urges affected customers of NetScaler ADC and NetScaler Gateway to install the relevant updated versions as soon as possible. NetScaler ADC and NetScaler Gateway 14.1-73.32 and later rele...
Ubuntu Security NoticesUSN-8093-2
Severity not listed
USN-8093-2: libssh vulnerability
USN-8093-1 fixed a vulnerability in libssh. This update provides the corresponsing fix for Ubuntu 26.04 LTS. Original advisory details: It was discovered that libssh incorrectly performed bounds checking when processing SFTP extensions. If a client application queried extensio...
Vendor guidance
USN-8093-1 fixed a vulnerability in libssh.
Ubuntu Security NoticesUSN-8113-2
Severity not listed
USN-8113-2: LibTIFF vulnerabilities
USN 8113-1 fixed vulnerabilities in tiff. This update provides the corresponding fixes for Ubuntu 26.04 LTS. Original advisory details: It was discovered that LibTIFF did not properly handle memory when processing certain images. An attacker could possibly use this issue to ca...
Vendor guidance
USN 8113-1 fixed vulnerabilities in tiff.
Microsoft Security Response CenterCVE-2024-43481
HighCVSS 6.5
Power BI Report Server Spoofing Vulnerability
According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability? Any authenticated attacker could trigger this vulnerability. It does not require admin or other elevated privileges.
Affected productsPower BI Report Server - May 2024
Fixed versions1.21.9032.4573
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2024-43612
HighCVSS 6.9
Power BI Report Server Spoofing Vulnerability
According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do? The user would have to click on a specially crafted file to be compromised by the attacker.
Affected productsPower BI Report Server - May 2024
Fixed versions1.21.9032.4573
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-21229
HighCVSS 8.0
Power BI Remote Code Execution Vulnerability
Improper input validation in Power BI allows an authorized attacker to execute code over a network.
Affected productsPower BI Report Server
Fixed versions1.25.9508.3237
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-42912
HighCVSS 7.0
Windows Telephony Service Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8880, 10.0.20348.5256, 10.0.19044.7417, 10.0.19045.7417
Vendor guidance
Install KB5094123. Install KB5094128. Install KB5094127. Install KB5094125. Install KB5094126. Install KB5093998. Install KB5095051. Install KB5094122. Install KB5094042. Install KB5094041.
Microsoft Security Response CenterCVE-2026-58647
HighCVSS 8.0
Microsoft PowerBI Report Server Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Power BI allows an authorized attacker to perform spoofing over a network.
Affected productsPower BI Report Server
Fixed versions1.26.9682.1442
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-50383
HighCVSS 6.1
Windows Print Spooler Information Disclosure Vulnerability
Buffer over-read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9020, 10.0.20348.5386, 10.0.19044.7548, 10.0.19045.7548
Vendor guidance
Install KB5099538. Install KB5099540. Install KB5099539. Install KB5099536. Install KB5101650. Install KB5101649.
Microsoft Security Response CenterCVE-2026-65811
HighCVSS 8.8
Power BI Remote Code Execution Vulnerability
Improper input validation in Power BI allows an authorized attacker to execute code over a network.
Affected productsPower BI Report Server
Fixed versions1.26.9682.1442
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-62705
HighCVSS 7.0
Microsoft Brokering File System Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
Affected productsWindows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems
Fixed versions10.0.26200.9168, 10.0.26200.9106, 10.0.26100.9168, 10.0.26100.9106
Vendor guidance
Install KB5121003. Install KB5120994. Install KB5121000.
Fortinet PSIRT AdvisoriesFG-IR-26-163
MediumCVSS 5.8
HTTP/2 Bomb CVE-2026-49975
CVSSv3 Score: 5.8 CVE-2026-49975Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service via malicious HTTP requests. This issue affects Apache HTTP Server: from 2.4.17 through 2.4.67. Revised on 2026-08-19 00:00:00
Ubuntu Security NoticesUSN-8630-3
Severity not listed
USN-8630-3: Linux kernel (Oracle) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - InfiniBand drivers; - Network drivers; - Mellanox network drivers; - File s...
Vendor guidance
This update corrects flaws in the following subsystems: - x86 architecture; - InfiniBand drivers; - Network drivers; - Mellanox network drivers; - File systems infrastructure; - IPv4 networking; - Network traffic cont...
Ubuntu Security NoticesUSN-8636-2
Severity not listed
USN-8636-2: Linux kernel (Oracle) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - InfiniBand drivers; - Media drivers; - Network drivers; - Mellanox network ...
Vendor guidance
This update corrects flaws in the following subsystems: - x86 architecture; - InfiniBand drivers; - Media drivers; - Network drivers; - Mellanox network drivers; - Texas Instruments network drivers; - NVME drivers; - ...
Microsoft Security Response CenterCVE-2026-56642
HighCVSS 8.8
Microsoft Fabric Data Warehouse Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Fabric Data Warehouse allows an authorized attacker to execute code over a network.
Affected productsFabric Data Warehouse
Microsoft Security Response CenterCVE-2026-50419
HighCVSS 3.3
Windows Kernel Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose information locally.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9020, 10.0.20348.5386, 10.0.19044.7548, 10.0.19045.7548
Vendor guidance
Install KB5099538. Install KB5099540. Install KB5099539. Install KB5099536. Install KB5101650. Install KB5101649. Install KB5099535. Install KB5099445. Install KB5099444.
Microsoft Security Response CenterCVE-2026-47632
HighCVSS 8.8
Azure Connected Machine Agent Elevation of Privilege Vulnerability
Improper certificate validation in Azure Connected Machine Agent allows an unauthorized attacker to elevate privileges over an adjacent network.
Affected productsAzure Connected Machine Agent
Fixed versions1.65
Vendor guidance
Release Notes
Apple Security Releases148286
Severity not listed
Safari 26.6.1
Open the original vendor bulletin for the full description and affected-version details.
Affected productsmacOS Sonoma and macOS Sequoia
Microsoft Security Response CenterCVE-2025-1767
MediumCVSS 6.5
This CVE only affects Kubernetes clusters that utilize the in-tree gitRepo volume to clone git repositories from other pods within the same node. Since the in-tree gitRepo volume feature has been deprecated and will not receive security updates upstream, any cluster still using this feature remains vulnerable.
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Affected productsazl3 kubernetes 1.30.10-7 on Azure Linux 3.0, cbl2 kubernetes 1.28.4-18 on CBL Mariner 2.0, cbl2 kubernetes 1.28.4-18 on CBL-Mariner 2.0
Microsoft Security Response CenterCVE-2023-2650
MediumCVSS 6.5
Possible DoS translating ASN.1 object identifiers
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Affected productscbl2 hvloader 1.0.1-11 on CBL Mariner 2.0, cm1 openssl 1.1.1k-16 on CBL Mariner 1.0, cbl2 hvloader 1.0.1-9 on CBL Mariner 2.0, cbl2 edk2 20230301gitf80f052277c8-37 on CBL Mariner 2.0
Fixed versions1.0.1-3, 1.1.1k-16, 1.0.1-9, 20230301gitf80f052277c8-37
Vendor guidance
CBL-Mariner Releases
Microsoft Security Response CenterCVE-2024-1298
MediumCVSS 6.0
Integer Overflow caused by divide by zero during S3 suspension
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Affected productscbl2 edk2 20230301gitf80f052277c8-39 on CBL Mariner 2.0, cbl2 hvloader 1.0.1-3 on CBL Mariner 2.0, azl3 edk2 20240524git3e722403cd16-1 on Azure Linux 3.0, cbl2 edk2 20230301gitf80f052277c8-41 on CBL Mariner 2.0
Fixed versions20230301gitf80f052277c8-39, 1.0.1-3, 20240524git3e722403cd16-1
Vendor guidance
CBL-Mariner Releases
Microsoft Security Response CenterCVE-2025-1181
LowCVSS 5.0
GNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec memory corruption
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Affected productsazl3 binutils 2.41-5 on Azure Linux 3.0, cbl2 gdb 11.2-6 on CBL-Mariner 2.0, cbl2 binutils 2.37-12 on CBL Mariner 2.0, azl3 binutils 2.41-3 on Azure Linux 3.0
Fixed versions2.41-3, 2.37-12
Vendor guidance
CBL-Mariner Releases
Microsoft Security Response CenterCVE-2024-30161
MediumCVSS 6.5
In Qt 6.5.4, 6.5.5, and 6.6.2, QNetworkReply header data might be accessed via a dangling pointer in Qt for WebAssembly (wasm). (Earlier and later versions are unaffected.)
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Affected productsazl3 qtbase 6.6.3-2 on Azure Linux 3.0, azl3 qtbase 6.6.2-1 on Azure Linux 3.0
Fixed versions6.6.3-2
Vendor guidance
CBL-Mariner Releases
Before you act
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.