Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed

11Vendor sources

18,541Advisories collected

6,563Published or updated in 30 days

8,317Marked critical or high

Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

AWS Security Bulletins 181 advisories

CurrentChecked 12 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Apple Security Releases 38 advisories

CurrentChecked 17 minutes ago

Checked hourly Browse this vendor's advisories Official source

Cisco Security Advisories 107 advisories

Check delayedChecked 29 days ago

Checked every 15 minutes Browse this vendor's advisories Official source

Citrix Security Bulletins 30 advisories

CurrentChecked 27 minutes ago

Checked hourly Browse this vendor's advisories Official source

Delinea Security Advisories 14 advisories

CurrentChecked 26 minutes ago

Checked hourly Browse this vendor's advisories Official source

Fortinet PSIRT Advisories 110 advisories

CurrentChecked 2 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Ivanti Security Advisories 10 advisories

CurrentChecked 12 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Microsoft Security Response Center 17,484 advisories

CurrentChecked 6 hours ago

Checked every 6 hours Browse this vendor's advisories Official source

Palo Alto Networks Security Advisories 69 advisories

CurrentChecked 1 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

SonicWall PSIRT Advisories 12 advisories

Check delayedChecked 2 days ago

Checked hourly Browse this vendor's advisories Official source

Ubuntu Security Notices 486 advisories

CurrentChecked 1 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

18,541 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results

Microsoft Security Response CenterCVE-2026-56167

Published Jul 23, 2026

CriticalCVSS 8.5

Azure AI Search Elevation of Privilege Vulnerability

Server-side request forgery (ssrf) in Azure AI Search allows an authorized attacker to elevate privileges over a network.

Affected productsAzure AI Search

CVE-2026-56167

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-56165

Published Jul 23, 2026

CriticalCVSS 9.8

Microsoft Account Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Account allows an unauthorized attacker to execute code over a network.

Affected productsMicrosoft Account

CVE-2026-56165

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-56163

Published Jul 23, 2026

CriticalCVSS 10.0

Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability

Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.

Affected productsAzure Kubernetes Service

CVE-2026-56163

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-56160

Published Jul 23, 2026

Critical

Azure Red Hat OpenShift (ARO) Elevation of Privilege Vulnerability

Improper authorization in Azure Red Hat OpenShift (ARO) allows an authorized attacker to elevate privileges over a network.

Affected productsAzure Red Hat OpenShift (ARO)

CVE-2026-56160

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-54120

Published Jul 23, 2026

CriticalCVSS 9.9

Microsoft Surface Remote Code Execution Vulnerability

Improper input validation in Microsoft Surface allows an authorized attacker to execute code over a network.

Affected productsSurface Management Services

CVE-2026-54120

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-50517

Published Jul 23, 2026

CriticalCVSS 9.9

Microsoft M365 Copilot Remote Code Execution Vulnerability

Deserialization of untrusted data in M365 Copilot allows an authorized attacker to execute code over a network.

Affected productsMicrosoft 365 Copilot

CVE-2026-50517

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-49159

Published Jul 23, 2026

CriticalCVSS 6.5

Microsoft Graph Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose information over a network.

Affected productsMicrosoft Graph

CVE-2026-49159

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-35425

Published Jul 23, 2026

CriticalCVSS 8.0

Azure API Management (APIM) Remote Code Execution Vulnerability

Improper access control in Azure API Management (APIM) allows an authorized attacker to execute code over a network.

Affected productsAzure API Management (APIM)

CVE-2026-35425

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-50458

Updated Jul 22, 2026

HighCVSS 7.8

Microsoft Brokering File System Elevation of Privilege Vulnerability

Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.

Affected productsWindows Server 2025 (Server Core installation), Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems

Fixed versions10.0.26100.33158, 10.0.26200.8875, 10.0.26100.8875, 10.0.28000.2525

Vendor guidance

Install KB5099536. Install KB5101650. Install KB5101649.

CVE-2026-50458

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-50407

Updated Jul 22, 2026

HighCVSS 7.8

Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9020, 10.0.20348.5386, 10.0.19044.7548, 10.0.19045.7548

Vendor guidance

Install KB5099538. Install KB5099540. Install KB5099539. Install KB5099536. Install KB5101650. Install KB5101649. Install KB5099535.

CVE-2026-50407

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-50377

Updated Jul 22, 2026

HighCVSS 5.5

Windows Kernel Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9020, 10.0.20348.5386, 10.0.19044.7548, 10.0.19045.7548

Vendor guidance

Install KB5099538. Install KB5099540. Install KB5099539. Install KB5099536. Install KB5101650. Install KB5099535. Install KB5101649.

CVE-2026-50377

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-56434

Updated Jul 22, 2026

HighCVSS 6.5

NGINX ngx_http_ssi_module vulnerability

Mariner

Affected productsazl3 nginx 1.28.3-6 on Azure Linux 3.0

Fixed versions1.28.3-8

Vendor guidance

CBL-Mariner Releases

CVE-2026-56434

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-42533

Updated Jul 22, 2026

CriticalCVSS 8.1

NGINX Map directive and Regex matching vulnerability

Mariner

Affected productsazl3 nginx 1.28.3-6 on Azure Linux 3.0

Fixed versions1.28.3-8

Vendor guidance

CBL-Mariner Releases

CVE-2026-42533

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-59886

Updated Jul 22, 2026

HighCVSS 7.5

pyasn1: Uncontrolled resource consumption when converting decoded REAL values

Mariner

Affected productsazl3 python-pyasn1 0.4.8-2 on Azure Linux 3.0

Fixed versions0.4.8-3

Vendor guidance

CBL-Mariner Releases

CVE-2026-59886

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-59884

Updated Jul 22, 2026

HighCVSS 7.5

pyasn1 BER/CER/DER decoder denial of service via unbounded long-form tag IDs

Mariner

Affected productsazl3 python-pyasn1 0.4.8-2 on Azure Linux 3.0

Fixed versions0.4.8-3

Vendor guidance

CBL-Mariner Releases

CVE-2026-59884

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-59885

Updated Jul 22, 2026

HighCVSS 7.5

pyasn1: Quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows denial of service

Mariner

Affected productsazl3 python-pyasn1 0.4.8-2 on Azure Linux 3.0

Fixed versions0.4.8-3

Vendor guidance

CBL-Mariner Releases

CVE-2026-59885

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-58640

Updated Jul 21, 2026

HighCVSS 7.3

Windows NTFS Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9020, 10.0.20348.5386, 10.0.19044.7548, 10.0.19045.7548

Vendor guidance

Install KB5099538. Install KB5099540. Install KB5099539. Install KB5099536. Install KB5101650. Install KB5099414. Install KB5101649. Install KB5099535. Install KB5099445. Install KB5099444.

CVE-2026-58640

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-50653

Updated Jul 21, 2026

HighCVSS 7.5

Azure Active Directory Denial of Service Vulnerability

Loop with unreachable exit condition ('infinite loop') in Azure Active Directory allows an unauthorized attacker to deny service over a network.

Affected productsAzure Active Directory, Microsoft .NET Framework 3.5 on Windows 11 Version 26H1 for ARM64-based Systems, Microsoft .NET Framework 3.5 on Windows 11 version 26H1 for x64-based Systems, Microsoft .NET Framework 4.8.1 on Windows 11 Version 26H1 for ARM64-based Systems

Fixed versions8.19.2, 7.7.3, 5.7.1, 2.0.50727.9182 & 3.0.30729.9168

Vendor guidance

Release Notes Install KB5101014. Install KB5101002. Install KB5101007. Install KB5101009. Install KB5101011. Install KB5101008. Install KB5101010. Install KB5101006. Install KB5100989. Install KB5099535. Install KB510...

CVE-2026-50653

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-50652

Updated Jul 21, 2026

HighCVSS 7.5

Azure Active Directory Denial of Service Vulnerability

Deserialization of untrusted data in Azure Active Directory allows an unauthorized attacker to deny service over a network.

Fixed versions5.7.1, 7.7.3, 8.19.2, 2.0.50727.9182 & 3.0.30729.9168

Vendor guidance

CVE-2026-50652

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-50649

Updated Jul 21, 2026

HighCVSS 7.8

.NET Remote Code Execution Vulnerability

Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally.

Affected products.NET 8.0 runtime installed on Windows, .NET 9.0 runtime installed on Windows, Microsoft .NET Framework 3.5 on Windows 11 version 26H1 for x64-based Systems, Microsoft .NET Framework 4.8.1 on Windows 11 version 26H1 for x64-based Systems

Fixed versions8.0.29, 9.0.18, 2.0.50727.9182 & 3.0.30729.9168, 4.8.9340.0

Vendor guidance

Release Notes Install KB5104032. Install KB5104033. Install KB5101014. Install KB5101002. Install KB5101007. Install KB5101009. Install KB5101011. Install KB5101008. Install KB5101010. Install KB5101006. Install KB510...

CVE-2026-50649

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-50647

Updated Jul 21, 2026

HighCVSS 7.5

Active Directory Federation Server Denial of Service Vulnerability

Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9020, 10.0.20348.5386, 10.0.19044.7548, 10.0.19045.7548

Vendor guidance

Install KB5099538. Install KB5099540. Install KB5099539. Install KB5099536. Install KB5101650. Install KB5101649. Install KB5099535. Install KB5099445. Install KB5099444. Install KB5101007. Install KB5101009. Install ...

CVE-2026-50647

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-50525

Updated Jul 21, 2026

HighCVSS 7.5

.NET Denial of Service Vulnerability

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.

Affected productsMicrosoft Visual Studio 2022 version 17.12, .NET 10.0 runtime installed on Mac OS, .NET 10.0 runtime installed on Linux, .NET 8.0 runtime installed on Windows

Fixed versions17.12.22, 10.0.10, 8.0.29, 17.14.36

Vendor guidance

Release Notes Install KB5104034. Install KB5104032. Install KB5104033. Install KB5101014. Install KB5101002. Install KB5101007. Install KB5101009. Install KB5101011. Install KB5101008. Install KB5101010. Install KB510...

CVE-2026-50525

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-50411

Updated Jul 21, 2026

HighCVSS 7.5

Windows Active Directory Federation Services Denial of Service Vulnerability

Stack-based buffer overflow in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9020, 10.0.20348.5386, 10.0.19044.7548, 10.0.19045.7548

Vendor guidance

CVE-2026-50411

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-50368

Updated Jul 21, 2026

HighCVSS 7.5

Windows Active Directory Federation Services Denial of Service Vulnerability

Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)

Fixed versions10.0.17763.9020, 10.0.20348.5386, 10.0.26100.33158, 10.0.14393.9339

Vendor guidance

Install KB5099538. Install KB5099540. Install KB5099536. Install KB5099535. Install KB5099445. Install KB5099444. Install KB5101007. Install KB5101009. Install KB5101011. Install KB5101008. Install KB5101010. Install ...

CVE-2026-50368

Read the vendor advisory Watch this product

Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources