CurrentChecked 17 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
11Vendor sources
18,536Advisories collected
6,560Published or updated in 30 days
8,317Marked critical or high
Coverage
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
CurrentChecked 22 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
Check delayedChecked 29 days ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 32 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 32 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 7 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 17 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked about an hour ago
Checked every 6 hours
Browse this vendor's advisories
Official source
CurrentChecked 7 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
Check delayedChecked yesterday
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 7 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
18,536 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
Microsoft Security Response CenterCVE-2026-62918
CriticalCVSS 7.5
Microsoft Teams Spoofing Vulnerability
Improper verification of cryptographic signature in Microsoft Teams allows an unauthorized attacker to perform spoofing over a network.
Affected productsMicrosoft Teams
Microsoft Security Response CenterCVE-2026-59115
CriticalCVSS 9.9
Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability
'.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network.
Affected productsMicrosoft Entra Provisioning Service
Microsoft Security Response CenterCVE-2026-50515
CriticalCVSS 9.9
Azure Service Bus Remote Code Execution Vulnerability
Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute code over a network.
Affected productsAzure Service Bus
Microsoft Security Response CenterCVE-2026-65668
CriticalCVSS 8.8
Microsoft Purview eDiscovery Elevation of Privilege Vulnerability
Improper access control in Microsoft Purview eDiscovery allows an authorized attacker to elevate privileges over a network.
Affected productsMicrosoft Purview eDiscovery
Microsoft Security Response CenterCVE-2026-62836
CriticalCVSS 8.7
Azure SQL Managed Instance Elevation of Privilege Vulnerability
Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network.
Affected productsAzure SQL Managed Instance
Microsoft Security Response CenterCVE-2026-62896
CriticalCVSS 9.6
Microsoft Teams Elevation of Privilege Vulnerability
Improper authentication in Microsoft Teams allows an authorized attacker to elevate privileges over a network.
Affected productsMicrosoft Teams
Microsoft Security Response CenterCVE-2026-55050
HighCVSS 5.5
Microsoft Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
Affected productsMicrosoft Office 365 for Mac, Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft Office 2019 for 32-bit editions
Fixed versions16.111.26071215, 16.0.5561.1001, 16.0.10417.20175, https://aka.ms/OfficeSecurityReleases
Vendor guidance
Release Notes Click to Run Install KB5002891. Install KB5002892. Install KB5002883. Install KB5002885. Install KB5002882. Install KB5002890.
Cisco Security Advisoriescisco-sa-notice-L4XfJg8S
Informational
Cisco Advance Notification for Publication of August 5, 2026, Security Advisories
On August 5, 2026, the Cisco Product Security Incident Response Team (PSIRT) published the following advisories:
Cisco Security Advisoriescisco-sa-hardening-iosxe-V8NMuMZJ
CriticalPriority signal
Cisco IOS XE Software Security Hardening Release: August 2026
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered v...
Vendor guidance
To assist customers in patching and to streamline the disclosure process, Cisco has grouped these issues by their underlying vulnerability class ��� Common Weakness Enumeration (CWE) ��� and assigned a single Common V...
Cisco Security Advisoriescisco-sa-hardening-sdwan-faLcR3K
CriticalPriority signal
Cisco Catalyst SD-WAN Software Security Hardening Release: August 2026
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally dis...
Vendor guidance
To assist customers in patching and streamline the disclosure process, Cisco has grouped these issues by their underlying vulnerability class - Common Weakness Enumeration (CWE) - and assigned a single Common Vulnerab...
Cisco Security Advisoriescisco-sa-ios-xmcp-thbAr34t
High
Cisco IOS Software and IOS XE Software Extensible Messaging Client Protocol Denial of Service Vulnerability
A vulnerability in the Extensible Messaging Client Protocol (XMCP), also referred to as the External Client protocol, of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected dev...
Vendor guidance
Cisco has released software updates that address this vulnerability.
Cisco Security Advisoriescisco-sa-iosxe-snmp-dos-ZAqNm4MD
High
Cisco IOS XE Software SNMP Denial of Service Vulnerability
A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. This vulnerability is due to improper erro...
Vendor guidance
Cisco has released software updates that address this vulnerability.
Cisco Security Advisoriescisco-sa-iosxe-bing-MGHrFAkd
High
Cisco IOS XE Software Blocks Extensible Exchange Protocol Denial of Service Vulnerability
A vulnerability in the Blocks Extensible Exchange Protocol (BEEP) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper handling when parsing a ...
Vendor guidance
Cisco has released software updates that address this vulnerability.
Cisco Security Advisoriescisco-sa-webui-dos-qdc7qx3
Medium
Cisco IOS XE Software Web-Based Management Interface Denial of Service Vulnerability
A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, remote attacker with low privileges to perform a denial of service (DoS) attack against an affected device. This vulnerability is due to insufficient input validation. ...
Vendor guidance
Cisco has released software updates that address this vulnerability.
Cisco Security Advisoriescisco-sa-ts-agent-fw-bypass-MYBTMrev
Medium
Cisco Terminal Services Agent Firewall Rules Bypass Vulnerability
A vulnerability in the network driver of Cisco Terminal Service (TS) Agent could allow an authenticated, remote attacker to bypass firewall rules that are associated with the account of the attacker. This vulnerability is due to an incorrect mapping of network connections to u...
Vendor guidance
Cisco has released software updates that address this vulnerability.
Cisco Security Advisoriescisco-sa-roomos-infodisc-qBXjfmWm
Medium
Cisco RoomOS Logging Subsystem Information Disclosure Vulnerability
A vulnerability in the logging subsystem of Cisco RoomOS could allow an authenticated, local attacker with low privileges to access sensitive information. This vulnerability is due to the logging of sensitive information. An attacker could exploit this vulnerability by enablin...
Vendor guidance
Cisco has released software updates that address this vulnerability.
Cisco Security Advisoriescisco-sa-cimc-xss-7EhBFxBp
Medium
Cisco Integrated Management Controller Cross-Site Scripting Vulnerability
A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability is due to insufficient validat...
Vendor guidance
Cisco has released software updates that address this vulnerability.
Cisco Security Advisoriescisco-sa-xe-webui-dos-PtAODAWW
Medium
Cisco IOS XE Software Web-Based Management Interface Denial of Service Vulnerability
A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, remote attacker with low privileges to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient error handling in the ...
Vendor guidance
Cisco has released software updates that address this vulnerability.
Microsoft Security Response CenterCVE-2026-50493
HighCVSS 7.8
DirectX Graphics Kernel Elevation of Privilege Vulnerability
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9020, 10.0.20348.5386, 10.0.19044.7548, 10.0.19045.7548
Vendor guidance
Install KB5099538. Install KB5099540. Install KB5099539. Install KB5099536. Install KB5101650. Install KB5101649.
Microsoft Security Response CenterCVE-2026-50416
HighCVSS 3.3
Win32k Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an authorized attacker to disclose information locally.
Affected productsWindows Server 2025 (Server Core installation), Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems
Fixed versions10.0.26100.33158, 10.0.26200.8875, 10.0.26100.8875, 10.0.28000.2525
Vendor guidance
Install KB5099536. Install KB5101650. Install KB5101649.
Microsoft Security Response CenterCVE-2026-50341
HighCVSS 5.5
Windows NTFS Information Disclosure Vulnerability
Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9020, 10.0.20348.5386, 10.0.19044.7548, 10.0.19045.7548
Vendor guidance
Install KB5099538. Install KB5099540. Install KB5099539. Install KB5099536. Install KB5101650. Install KB5101649. Install KB5099535. Install KB5099445. Install KB5099444.
Microsoft Security Response CenterCVE-2026-66326
HighCVSS 6.5
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Missing authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
Affected productsMicrosoft Edge (Chromium-based)
Fixed versions151.0.4129.59
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-66325
HighCVSS 6.1
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
Affected productsMicrosoft Edge (Chromium-based)
Fixed versions151.0.4129.59
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-66322
HighCVSS 7.1
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
Affected productsMicrosoft Edge (Chromium-based)
Fixed versions151.0.4129.59
Vendor guidance
Release Notes
Before you act
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.