Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
16,562Advisories collected
6,267Published or updated in 30 days
6,867Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

16,562 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Citrix Security BulletinsCTX697257
High

XenServer Security Update for CVE-2026-114406

XenServer's internal list of trusted certificate authorities (CAs) included a public CA whose intermediate certificates have been found to have weak keys. This would allow a malicious attacker on the management network to forge TLS certificates that appeared to be signed by th...

Affected productsXenServer
Vendor guidance

We have pushed updates to both the Early Access and Normal update channels of each of XenServer 8.4 and XenServer 9. We recommend that customers update to the latest version from their chosen channel following the ins...

CVE-2026-114406
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-83862
HighCVSS 8.8

Windows Network Load Balancing Remote Code Execution Vulnerability

Use after free in Windows Network Load Balancing allows an unauthorized attacker to execute code over an adjacent network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9376, 10.0.20348.5761, 10.0.26100.33650, 10.0.14393.9612
Vendor guidance

Install KB5126651. Install KB5126655. Install KB5126646. Install KB5126868. Install KB5126835. Install KB5126836.

CVE-2026-83862
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-102208
HighCVSS 7.0

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

Affected productsWindows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation)
Fixed versions6.2.9200.26434, 6.3.9600.23470, 10.0.14393.9612, 10.0.17763.9376
Vendor guidance

Install KB5126835. Install KB5126836. Install KB5126868. Install KB5126651. Install KB5126657. Install KB5126655. Install KB5126653.

CVE-2026-102208
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-67030
HighCVSS 8.8

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code

Mariner

Affected productscbl2 javapackages-bootstrap 1.5.0-7 on CBL Mariner 2.0, azl3 plexus-utils 3.3.0-5 on Azure Linux 3.0, cbl2 plexus-utils 3.3.0-4 on CBL Mariner 2.0, azl3 plexus-utils 3.3.0-4 on Azure Linux 3.0
Fixed versions3.3.0-5, 3.3.0-4
Vendor guidance

CBL-Mariner Releases Release Notes

CVE-2025-67030
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-38029
MediumCVSS 4.1

kasan: avoid sleepable page allocation from atomic context

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.104.2-4 on Azure Linux 3.0, azl3 kernel 6.6.112.1-2 on Azure Linux 3.0, azl3 kernel 6.6.117.1-1 on Azure Linux 3.0, azl3 kernel 6.6.121.1-1 on Azure Linux 3.0
Vendor guidance

Release Notes

CVE-2025-38029
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-38041
MediumCVSS 7.0

clk: sunxi-ng: h616: Reparent GPU clock during frequency changes

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.96.2-1 on Azure Linux 3.0, azl3 kernel 6.6.96.2-2 on Azure Linux 3.0, azl3 kernel 6.6.112.1-2 on Azure Linux 3.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0
Vendor guidance

Release Notes

CVE-2025-38041
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources