Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed

11Vendor sources

18,986Advisories collected

6,818Published or updated in 30 days

8,727Marked critical or high

Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

AWS Security Bulletins 182 advisories

CurrentChecked 15 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Apple Security Releases 40 advisories

CurrentChecked 44 minutes ago

Checked hourly Browse this vendor's advisories Official source

Cisco Security Advisories 107 advisories

Check delayedChecked 30 days ago

Checked every 15 minutes Browse this vendor's advisories Official source

Citrix Security Bulletins 30 advisories

CurrentChecked 45 minutes ago

Checked hourly Browse this vendor's advisories Official source

Delinea Security Advisories 14 advisories

CurrentChecked 44 minutes ago

Checked hourly Browse this vendor's advisories Official source

Fortinet PSIRT Advisories 112 advisories

CurrentChecked just now

Checked every 15 minutes Browse this vendor's advisories Official source

Ivanti Security Advisories 10 advisories

CurrentChecked 15 minutes ago

Checked every 15 minutes Browse this vendor's advisories Official source

Microsoft Security Response Center 17,903 advisories

CurrentChecked 5 hours ago

Checked every 6 hours Browse this vendor's advisories Official source

Palo Alto Networks Security Advisories 69 advisories

CurrentChecked just now

Checked every 15 minutes Browse this vendor's advisories Official source

SonicWall PSIRT Advisories 12 advisories

Check delayedChecked 3 days ago

Checked hourly Browse this vendor's advisories Official source

Ubuntu Security Notices 507 advisories

CurrentChecked just now

Checked every 15 minutes Browse this vendor's advisories Official source

18,986 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results

Microsoft Security Response CenterCVE-2026-11647

Published Jun 26, 2026

Severity not listed

Chromium: CVE-2026-11647 Use after free in Printing

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.67

Vendor guidance

Release Notes

CVE-2026-11647

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-13038

Published Jun 26, 2026

Severity not listed

Chromium: CVE-2026-13038 Use after free in Autofill

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.96

Vendor guidance

Release Notes

CVE-2026-13038

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-13036

Published Jun 26, 2026

Severity not listed

Chromium: CVE-2026-13036 Use after free in Blink

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.96

Vendor guidance

Release Notes

CVE-2026-13036

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-13035

Published Jun 26, 2026

Severity not listed

Chromium: CVE-2026-13035 Use after free in Bluetooth

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.96

Vendor guidance

Release Notes

CVE-2026-13035

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-13034

Published Jun 26, 2026

Severity not listed

Chromium: CVE-2026-13034 Inappropriate implementation in Passwords

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.96

Vendor guidance

Release Notes

CVE-2026-13034

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-13033

Published Jun 26, 2026

Severity not listed

Chromium: CVE-2026-13033 Out of bounds read in Blink>InterestGroups

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.96

Vendor guidance

Release Notes

CVE-2026-13033

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-13031

Published Jun 26, 2026

Severity not listed

Chromium: CVE-2026-13031 Use after free in Blink

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.96

Vendor guidance

Release Notes

CVE-2026-13031

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-13029

Published Jun 26, 2026

Severity not listed

Chromium: CVE-2026-13029 Use after free in Web Authentication

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.96

Vendor guidance

Release Notes

CVE-2026-13029

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-13027

Published Jun 26, 2026

Severity not listed

Chromium: CVE-2026-13027 Use after free in FileSystem

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.96

Vendor guidance

Release Notes

CVE-2026-13027

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-13026

Published Jun 26, 2026

Severity not listed

Chromium: CVE-2026-13026 Use after free in Digital Credentials

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.96

Vendor guidance

Release Notes

CVE-2026-13026

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-13025

Published Jun 26, 2026

Severity not listed

Chromium: CVE-2026-13025 Insufficient validation of untrusted input in DevTools

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.96

Vendor guidance

Release Notes

CVE-2026-13025

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-13024

Published Jun 26, 2026

Severity not listed

Chromium: CVE-2026-13024 Insufficient validation of untrusted input in Navigation

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.96

Vendor guidance

Release Notes

CVE-2026-13024

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-13023

Published Jun 26, 2026

Severity not listed

Chromium: CVE-2026-13023 Uninitialized Use in GPU

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.96

Vendor guidance

Release Notes

CVE-2026-13023

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-13022

Published Jun 26, 2026

Severity not listed

Chromium: CVE-2026-13022 Inappropriate implementation in Autofill

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.96

Vendor guidance

Release Notes

CVE-2026-13022

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-13021

Published Jun 26, 2026

Severity not listed

Chromium: CVE-2026-13021 Inappropriate implementation in DeviceBoundSessionCredentials

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected productsMicrosoft Edge (Chromium-based)

Fixed versions149.0.4022.96

Vendor guidance

Release Notes

CVE-2026-13021

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2025-68768

Updated Jun 26, 2026

MediumCVSS 5.5

inet: frags: flush pending skbs in fqdir_pre_exit()

Mariner

Affected productsazl3 kernel 6.6.119.3-1 on Azure Linux 3.0, azl3 kernel 6.6.119.3-3 on Azure Linux 3.0, azl3 kernel 6.6.130.1-3 on Azure Linux 3.0, azl3 kernel 6.6.134.1-2 on Azure Linux 3.0

Fixed versions6.6.143.1-1

Vendor guidance

CBL-Mariner Releases

CVE-2025-68768

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-4367

Updated Jun 26, 2026

MediumCVSS 5.5

Libxpm: libxpm: denial of service via out-of-bounds read in xpm file parsing

Mariner

Affected productsazl3 libXpm 3.5.17-1 on Azure Linux 3.0

Fixed versions3.5.19-1

Vendor guidance

CBL-Mariner Releases

CVE-2026-4367

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-46320

Updated Jun 26, 2026

HighCVSS 7.1

tap: free page on error paths in tap_get_user_xdp()

Mariner

Affected productsazl3 kernel 6.6.139.1-1 on Azure Linux 3.0, azl3 kernel 6.6.141.1-1 on Azure Linux 3.0

Fixed versions6.6.143.1-1

Vendor guidance

CBL-Mariner Releases

CVE-2026-46320

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-46322

Updated Jun 26, 2026

MediumCVSS 6.1

tun: free page on build_skb failure in tun_xdp_one()

Mariner

Affected productsazl3 kernel 6.6.141.1-1 on Azure Linux 3.0, azl3 kernel 6.6.139.1-1 on Azure Linux 3.0

Fixed versions6.6.143.1-1

Vendor guidance

CBL-Mariner Releases

CVE-2026-46322

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-46321

Updated Jun 26, 2026

MediumCVSS 5.5

tun: free page on short-frame rejection in tun_xdp_one()

Mariner

Affected productsazl3 kernel 6.6.139.1-1 on Azure Linux 3.0, azl3 kernel 6.6.141.1-1 on Azure Linux 3.0

Fixed versions6.6.143.1-1

Vendor guidance

CBL-Mariner Releases

CVE-2026-46321

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-45930

Updated Jun 26, 2026

MediumCVSS 6.6

net: mctp: ensure our nlmsg responses are initialised

Mariner

Affected productsazl3 kernel 6.6.139.1-1 on Azure Linux 3.0, azl3 kernel 6.6.141.1-1 on Azure Linux 3.0

Fixed versions6.6.143.1-1

Vendor guidance

CBL-Mariner Releases

CVE-2026-45930

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2026-45850

Updated Jun 26, 2026

MediumCVSS 7.5

ipvs: skip ipv6 extension headers for csum checks

Mariner

Affected productsazl3 kernel 6.6.139.1-1 on Azure Linux 3.0, azl3 kernel 6.6.141.1-1 on Azure Linux 3.0

Fixed versions6.6.143.1-1

Vendor guidance

CBL-Mariner Releases

CVE-2026-45850

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2025-68736

Updated Jun 26, 2026

MediumCVSS 6.1

landlock: Fix handling of disconnected directories

Mariner

Affected productsazl3 kernel 6.6.117.1-1 on Azure Linux 3.0, azl3 kernel 6.6.119.3-1 on Azure Linux 3.0, azl3 kernel 6.6.119.3-3 on Azure Linux 3.0, azl3 kernel 6.6.126.1-1 on Azure Linux 3.0

Fixed versions6.6.143.1-1

Vendor guidance

CBL-Mariner Releases

CVE-2025-68736

Read the vendor advisory Watch this product

Microsoft Security Response CenterCVE-2025-68296

Updated Jun 26, 2026

MediumCVSS 5.5

drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup

Mariner

Affected productsazl3 kernel 6.6.117.1-1 on Azure Linux 3.0, azl3 kernel 6.6.119.3-1 on Azure Linux 3.0, azl3 kernel 6.6.119.3-3 on Azure Linux 3.0, azl3 kernel 6.6.121.1-1 on Azure Linux 3.0

Fixed versions6.6.143.1-1

Vendor guidance

CBL-Mariner Releases

CVE-2025-68296

Read the vendor advisory Watch this product

Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources