Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
16,933Advisories collected
6,365Published or updated in 30 days
7,004Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

16,933 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2020-27545
MediumCVSS 6.5

libdwarf before 20201017 has a one-byte out-of-bounds read because of an invalid pointer dereference via an invalid line table in a crafted object.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 libdwarf 0.9.0 on CBL Mariner 2.0, azl3 libdwarf 0.9.0-1 on Azure Linux 3.0
Fixed versions0.9.0, 0.9.0-1
Vendor guidance

CBL-Mariner Releases

CVE-2020-27545
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-28320
MediumCVSS 5.9

A denial of service vulnerability exists in curl

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 rust 1.72.0-2 on CBL Mariner 2.0, cbl2 mysql 8.0.34-1 on CBL Mariner 2.0, cbl2 curl 8.2.1-1 on CBL Mariner 2.0, cbl2 cmake 3.21.4-11 on CBL Mariner 2.0
Fixed versions1.72.0-2, 8.0.34-1, 8.2.1-1, 3.21.4-11
Vendor guidance

CBL-Mariner Releases

CVE-2023-28320
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-2398
HighCVSS 8.6

HTTP/2 push headers memory-leak

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 curl 8.8.0-1 on CBL Mariner 2.0, cbl2 cmake 3.21.4-14 on CBL Mariner 2.0, azl3 curl 8.8.0-1 on Azure Linux 3.0, azl3 cmake 3.30.3-2 on Azure Linux 3.0
Fixed versions8.8.0-1, 3.21.4-14, 3.30.3-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-2398
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-28322
LowCVSS 3.7

An information disclosure vulnerability exists in curl

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 tensorflow 2.11.1-1 on Azure Linux 3.0, cm1 curl 7.88.1-2 on CBL Mariner 1.0, cbl2 curl 8.0.1-2 on CBL Mariner 2.0, cbl2 cmake 3.21.4-6 on CBL Mariner 2.0
Fixed versions2.16.1-1, 7.88.1-2, 8.0.1-2, 3.21.4-6
Vendor guidance

CBL-Mariner Releases

CVE-2023-28322
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-4603
MediumCVSS 5.3

Excessive time spent checking DSA keys and parameters

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 hvloader 1.0.1-6 on CBL Mariner 2.0, cbl2 cloud-hypervisor-cvm 38.0.72.2-1 on CBL Mariner 2.0, azl3 cloud-hypervisor-cvm 38.0.72.2-1 on Azure Linux 3.0, azl3 edk2 20240524git3e722403cd16-8 on Azure Linux 3.0
Fixed versions1.0.1-6, -, 20240524git3e722403cd16-8, 20.14.0-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-4603
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-28849
MediumCVSS 6.5

Proxy-Authorization header kept across hosts in follow-redirects

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 reaper 3.1.1-9 on CBL Mariner 2.0, cbl2 reaper 3.1.1-8 on CBL Mariner 2.0
Fixed versions3.1.1-9
Vendor guidance

CBL-Mariner Releases

CVE-2024-28849
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2022-24735
LowCVSS 7.8

Lua scripts can be manipulated to overcome ACL rules in Redis

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscm1 redis 6.2.7-1 on CBL Mariner 1.0, cbl2 redis 6.2.7-1 on CBL Mariner 2.0, cbl2 ceph 16.2.10-10 on CBL Mariner 2.0
Fixed versions6.2.7-1
Vendor guidance

CBL-Mariner Releases

CVE-2022-24735
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-4068
HighCVSS 7.5

Memory Exhaustion in braces

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 reaper 3.1.1-9 on CBL Mariner 2.0, cbl2 reaper 3.1.1-8 on CBL Mariner 2.0
Fixed versions3.1.1-9
Vendor guidance

CBL-Mariner Releases

CVE-2024-4068
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-22017
HighCVSS 7.3

setuid() does not affect libuv's internal io_uring operations if initialized before the call to setuid(). This allows the process to perform privileged operations despite presumably having dropped such privileges through a call to setuid(). This vulnerability affects all users using version greater or equal than Node.js 18.18.0 Node.js 20.4.0 and Node.js 21.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 nodejs 20.14.0-1 on Azure Linux 3.0, azl3 libuv 1.48.0-1 on Azure Linux 3.0, azl3 libuv 1.46.0-1 on Azure Linux 3.0, azl3 nodejs 20.10.0-2 on Azure Linux 3.0
Fixed versions20.14.0-1, 1.48.0-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-22017
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-2357
MediumCVSS 6.5

IKEv2 misconfiguration can cause libreswan to abort and restart

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 libreswan 4.15-1 on Azure Linux 3.0
CVE-2024-2357
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-56188
CriticalCVSS 9.8

Windows Server Network driver Remote Code Execution Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Server Network driver allows an unauthorized attacker to execute code over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9020, 10.0.20348.5386, 10.0.19044.7548, 10.0.19045.7548
Vendor guidance

Install KB5099538. Install KB5099540. Install KB5099539. Install KB5099536. Install KB5101650. Install KB5101649. Install KB5099535. Install KB5099445. Install KB5099444.

CVE-2026-56188
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-66807
CriticalCVSS 7.8

Microsoft Office Graphics Component Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

Affected productsMicrosoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2019 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office 2019 for 64-bit editions
Fixed versionshttps://aka.ms/OfficeSecurityReleases, 16.112.26081010
Vendor guidance

Click to Run Release Notes

CVE-2026-66807
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-63519
CriticalCVSS 7.8

Microsoft Office Graphics Component Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

Affected productsMicrosoft Office 365 for Mac, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems
Fixed versions16.112.26081010, https://aka.ms/OfficeSecurityReleases
Vendor guidance

Release Notes Click to Run

CVE-2026-63519
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-63518
CriticalCVSS 7.8

Microsoft Office Word Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Affected productsMicrosoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems
Fixed versionshttps://aka.ms/OfficeSecurityReleases, 16.112.26081010, 16.0.5565.1000
Vendor guidance

Click to Run Release Notes Install KB5002755.

CVE-2026-63518
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-63513
CriticalCVSS 7.8

Microsoft Office Graphics Component Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

Affected productsMicrosoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems
Fixed versionshttps://aka.ms/OfficeSecurityReleases, 16.112.26081010, 16.0.5565.1001
Vendor guidance

Click to Run Release Notes Install KB5002897.

CVE-2026-63513
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-62886
HighCVSS 7.8

.NET Elevation of Privilege Vulnerability

Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.

Affected productsMicrosoft .NET Framework 3.5 on Windows Server 2012, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012, Microsoft .NET Framework 4.8 on Windows Server 2012, Microsoft .NET Framework 4.8 on Windows Server 2012 R2
Fixed versions2.0.50727.8987 AND 3.0.30729.8982, 4.7.4145.0, 4.8.4806.0, 2.0.50727.9073 AND 3.0.30729.9070 AND 4.7.4150.0
Vendor guidance

Install KB5127660. Install KB5126044. Install KB5126049. Install KB5126051. Install KB5126047. Install KB5127666. Install KB5127685. Install KB5127693. Install KB5126043. Install KB5126421. Install KB5126046. Install ...

CVE-2026-62886
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-62771
HighCVSS 7.8

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9121, 10.0.20348.5499, 10.0.20348.5440, 10.0.19044.7663
Vendor guidance

Install KB5120238. Install KB5120242. Install KB5120229. Install KB5120249. Install KB5120233. Install KB5120228. Install KB5121003. Install KB5120994. Install KB5120240. Install KB5121000.

CVE-2026-62771
Read the vendor advisory Watch this product
Apple Security Releases148282
Severity not listed

iOS 26.6.1 and iPadOS 26.6.1

Open the original vendor bulletin for the full description and affected-version details.

Affected productsiPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later
CVE-2026-65339CVE-2026-65355CVE-2026-65347CVE-2026-65346CVE-2026-64788CVE-2026-64736
Read the vendor advisory
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources