Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
18,531 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
CVE-2026-19152 Inappropriate implementation in Navigation
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Release Notes
CVE-2026-19151 Use after free in V8
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Release Notes
CVE-2026-19150 Inappropriate implementation in V8
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Release Notes
CVE-2026-19149 Use after free in Aura
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Release Notes
CVE-2026-19148 Out of bounds write in GPU
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Release Notes
CVE-2026-19147 Use after free in Aura
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Release Notes
CVE-2026-19146 Uninitialized Use in GPU
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Release Notes
CVE-2026-19145 Use after free in Translate
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Release Notes
CVE-2026-19144 Use after free in HTML
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Release Notes
CVE-2026-19142 Use after free in Views
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Release Notes
CVE-2026-19140 Use after free in GPU
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Release Notes
CVE-2026-19139 Race in CredentialProvider
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Release Notes
CVE-2026-19138 Heap buffer overflow in CrashReporting
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Release Notes
CVE-2026-19137 Use after free in WebGL
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Release Notes
August 2026 Security Update
Ivanti releases standard security patches on the second Tuesday of every month. In today’s rapidly evolving technology and threat landscape, we believe responsible transparency should be a cornerstone of any product security program. AI is compressing the time-to-exploit, and ...
Ivanti releases standard security patches on the second Tuesday of every month.
Libssh: libssh: use-after-free via data callbacks on closed channels
Mariner
CBL-Mariner Releases
Libssh: libssh: denial of service via oversized sftp read length
Mariner
CBL-Mariner Releases
Libssh: libssh: denial of service via unchecked proxycommand fork() failure
Mariner
CBL-Mariner Releases
Libssh: libssh: integrity downgrade via openssl aes-gcm tag verification
Mariner
CBL-Mariner Releases
Libssh: libssh: denial of service via zero advertised channel packet size
Mariner
CBL-Mariner Releases
Libssh: libssh: denial of service via sftp responses with unknown request ids
Mariner
CBL-Mariner Releases
SonicWall GMS Security Affected By Multiple Vulnerabilities
SonicWall GMS (Virtual Appliance, Windows) - 9.5.1 and earlier versions are vulnerable to the following security issues. 1) CVE-2026-66145 - An unauthenticated remote code execution vulnerability An unauthenticated remote code execution vulnerability was identified in GMS 9.5....
Install the applicable fixed SonicWall release for your product and branch. GMS - Virtual Appliance and Windows: 9.5.2
SonicWall Email Security Affected By Multiple Vulnerabilities
1) CVE-2026-66149 - Improper Control of Generation of Code ('Code Injection') Vulnerability via netmask Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email Security appliance allows an authenticated attacker with access to the SonicWa...
Install the applicable fixed SonicWall release for your product and branch. Fixed Product(s): Fixed Versions Email Security (ES Appliance 5000, 5050, 7000, 7050, 9000, VMWare and Hyper-V): 10.0.36 and higher versions.
SonicOS Improper Neutralization of HTTP Headers Vulnerability
A improper neutralization of HTTP Headers for Scripting Syntax vulnerability in SonicOS could allow a remote attacker to manipulate the Host header and redirect firewall management users to arbitrary web domains.
Install the applicable fixed SonicWall release for your product and branch. Fixed Platforms: Fixed Versions Gen6 Hardware Firewalls - SOHO 250, SOHO 250W, TZ 350, TZ 350W, TZ 500, TZ 500W, NSa 4600, NSa 4650, NSa 5600...
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.