Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
16,561Advisories collected
6,295Published or updated in 30 days
6,867Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

16,561 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Apple Security Releases149230
Severity not listed

iOS 27.2 and iPadOS 27.2

Open the original vendor bulletin for the full description and affected-version details.

Affected productsiPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later
CVE-2026-86971CVE-2026-84493CVE-2026-113898CVE-2026-112446CVE-2026-112612CVE-2026-112692
Read the vendor advisory
Microsoft Security Response CenterCVE-2026-114148
High

ASP.NET Core Elevation of Privilege Vulnerability

Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.

Affected products.NET 8.0 installed on Windows, .NET 8.0 installed on Linux, .NET 8.0 installed on Mac OS, .NET 9.0 installed on Windows
Fixed versions8.0.427, 9.0.320, 10.0.403, 11.0.100-rc.3
Vendor guidance

Release Notes Install KB5133964. Install KB5133965. Install KB5133966.

CVE-2026-114148
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-70197
HighCVSS 8.1

.NET and Visual Studio Remote Code Execution Vulnerability

Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.

Affected productsMicrosoft Visual Studio 2026 version 18.10, Microsoft Visual Studio 2022 version 17.14, .NET 10.0 runtime installed on Windows, .NET 8.0 runtime installed on Windows
Fixed versions18.10.4, 17.14.43, 10.0.13, 8.0.32
Vendor guidance

Release Notes Install KB5130036. Install KB5130034. Install KB5130035. Install KB5133964. Install KB5133965. Install KB5133966.

CVE-2026-70197
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-102870
HighCVSS 8.8

ASP.NET Core Remote Code Execution Vulnerability

Improper control of generation of code ('code injection') in ASP.NET Core allows an unauthorized attacker to execute code over a network.

Affected productsMicrosoft Visual Studio 2026 version 18.10, Microsoft Visual Studio 2022 version 17.14, Microsoft.AspNetCore.Components.WebAssembly.Server on .NET 10.0 runtime installed on Windows, Microsoft.AspNetCore.Components.WebAssembly.Server on .NET 10.0 runtime installed on Linux
Fixed versions18.10.4, 17.14.43, 10.0.13, 11.0.0-rc.2.26478.115
Vendor guidance

Release Notes Install KB5133966.

CVE-2026-102870
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources