CurrentChecked 11 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
11Vendor sources
18,986Advisories collected
6,744Published or updated in 30 days
8,727Marked critical or high
Coverage
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
CurrentChecked 16 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
Check delayedChecked 31 days ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 26 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 16 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 16 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 11 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 5 hours ago
Checked every 6 hours
Browse this vendor's advisories
Official source
CurrentChecked 16 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
Check delayedChecked 4 days ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 16 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
18,986 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
Microsoft Security Response CenterCVE-2026-31469
HighCVSS 7.1
virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false
Mariner
Affected productsazl3 kernel 6.6.130.1-3 on Azure Linux 3.0
Fixed versions6.6.134.1-2
Vendor guidance
CBL-Mariner Releases
Microsoft Security Response CenterCVE-2026-31441
MediumCVSS 5.5
dmaengine: idxd: Fix memory leak when a wq is reset
Mariner
Affected productsazl3 kernel 6.6.130.1-3 on Azure Linux 3.0
Fixed versions6.6.134.1-2
Vendor guidance
CBL-Mariner Releases
Microsoft Security Response CenterCVE-2026-21246
HighCVSS 7.8
Windows Graphics Component Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.8389, 10.0.20348.4773, 10.0.20348.4711, 10.0.19044.6937
Vendor guidance
Install KB5075904. Install KB5075906. Install KB5075943. Install KB5075912. Install KB5075899. Install KB5075942. Install KB5077181. Install KB5077212. Install KB5075941. Install KB5075897. Install KB5075999. Install ...
Microsoft Security Response CenterCVE-2026-6920
Severity not listed
Chromium: CVE-2026-6920 Out of bounds read in GPU
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Affected productsMicrosoft Edge (Chromium-based)
Fixed versions147.0.3912.87
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-40372
HighCVSS 9.1
ASP.NET Core Elevation of Privilege Vulnerability
Improper verification of cryptographic signature in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.
Affected productsASP.NET Core 10.0, Microsoft Visual Studio 2026 version 18.5
Fixed versions10.0.7, 18.5.2
Vendor guidance
Release Notes Install KB5091596.
Microsoft Security Response CenterCVE-2026-33103
HighCVSS 5.5
Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability
Improper access control in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to disclose information locally.
Affected productsMicrosoft Dynamics 365 (on-premises) version 9.0
Fixed versions9.1.0044.0015
Vendor guidance
Install KB5078943.
Microsoft Security Response CenterCVE-2026-6919
Severity not listed
Chromium: CVE-2026-6919 Use after free in DevTools
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Affected productsMicrosoft Edge for Android, Microsoft Edge (Chromium-based)
Fixed versions147.0.3912.87, 147.0.3912.86
Vendor guidance
Release Notes
Citrix Security BulletinsCTX696527
High
XenServer Security Update for Multiple Issues
An issue that may, in some circumstances, allow a malicious privileged user in a guest VM to compromise the host. This issue has the following identifier:
Affected productsXenServer
Vendor guidance
We have pushed updates to both the Early Access and Normal update channels of XenServer 8.4. We recommend that customers update to the latest version from their chosen channel following the instructions at https://doc...
Microsoft Security Response CenterCVE-2026-26149
HighCVSS 9.0
Microsoft Power Apps Desktop Client Spoofing Vulnerability
Improper neutralization of escape, meta, or control sequences in Microsoft Power Apps allows an authorized attacker to perform spoofing over a network.
Affected productsMicrosoft Power Apps Desktop Client
Fixed versions3.26032.10.0
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-6921
Severity not listed
Chromium: CVE-2026-6921 Race in GPU
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Affected productsMicrosoft Edge (Chromium-based)
Fixed versions147.0.3912.86
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-22015
MediumCVSS 4.3
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).
Mariner
Affected productsazl3 mysql 8.0.45-2 on Azure Linux 3.0, cbl2 mysql 8.0.45-3 on CBL Mariner 2.0
Fixed versions8.0.46-1
Vendor guidance
CBL-Mariner Releases
Microsoft Security Response CenterCVE-2026-22005
MediumCVSS 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
Mariner
Affected productsazl3 mysql 8.0.45-2 on Azure Linux 3.0, cbl2 mysql 8.0.45-3 on CBL Mariner 2.0
Fixed versions8.0.46-1
Vendor guidance
CBL-Mariner Releases
Microsoft Security Response CenterCVE-2026-22004
MediumCVSS 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
Mariner
Affected productscbl2 mysql 8.0.45-3 on CBL Mariner 2.0, azl3 mysql 8.0.45-2 on Azure Linux 3.0
Fixed versions8.0.46-1
Vendor guidance
CBL-Mariner Releases
Microsoft Security Response CenterCVE-2026-22001
LowCVSS 2.7
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 2.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N).
Mariner
Affected productsazl3 mysql 8.0.45-2 on Azure Linux 3.0, cbl2 mysql 8.0.45-3 on CBL Mariner 2.0
Fixed versions8.0.46-1
Vendor guidance
CBL-Mariner Releases
Microsoft Security Response CenterCVE-2026-22017
MediumCVSS 6.5
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
Mariner
Affected productsazl3 mysql 8.0.45-2 on Azure Linux 3.0, cbl2 mysql 8.0.45-3 on CBL Mariner 2.0
Fixed versions8.0.46-1
Vendor guidance
CBL-Mariner Releases
Microsoft Security Response CenterCVE-2026-22002
MediumCVSS 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
Mariner
Affected productscbl2 mysql 8.0.45-3 on CBL Mariner 2.0, azl3 mysql 8.0.45-2 on Azure Linux 3.0
Fixed versions8.0.46-1
Vendor guidance
CBL-Mariner Releases
Microsoft Security Response CenterCVE-2026-22009
MediumCVSS 6.5
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
Mariner
Affected productscbl2 mysql 8.0.45-3 on CBL Mariner 2.0, azl3 mysql 8.0.45-2 on Azure Linux 3.0
Fixed versions8.0.46-1
Vendor guidance
CBL-Mariner Releases
Microsoft Security Response CenterCVE-2026-21998
MediumCVSS 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
Mariner
Affected productscbl2 mysql 8.0.45-3 on CBL Mariner 2.0, azl3 mysql 8.0.45-2 on Azure Linux 3.0
Fixed versions8.0.46-1
Vendor guidance
CBL-Mariner Releases
Microsoft Security Response CenterCVE-2026-31461
MediumCVSS 5.5
drm/amd/display: Fix drm_edid leak in amdgpu_dm
Mariner
Affected productsazl3 kernel 6.6.130.1-3 on Azure Linux 3.0
Microsoft Security Response CenterCVE-2026-35431
CriticalCVSS 10.0
Microsoft Entra ID Entitlement Management Spoofing Vulnerability
Server-side request forgery (ssrf) in Microsoft Entra ID Entitlement Management allows an unauthorized attacker to perform spoofing over a network.
Affected productsMicrosoft Entra ID
Microsoft Security Response CenterCVE-2026-33819
CriticalCVSS 10.0
Microsoft Bing Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Bing allows an unauthorized attacker to execute code over a network.
Affected productsMicrosoft Bing
Microsoft Security Response CenterCVE-2026-33102
CriticalCVSS 9.3
Microsoft 365 Copilot Elevation of Privilege Vulnerability
Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker to elevate privileges over a network.
Affected productsMicrosoft 365 Copilot
Microsoft Security Response CenterCVE-2026-32210
CriticalCVSS 9.3
Microsoft Dynamics 365 (online) Spoofing Vulnerability
Server-side request forgery (ssrf) in Microsoft Dynamics 365 (Online) allows an unauthorized attacker to perform spoofing over a network.
Affected productsMicrosoft Dynamics 365 (online)
Microsoft Security Response CenterCVE-2026-32172
CriticalCVSS 8.0
Microsoft Power Apps Remote Code Execution Vulnerability
Uncontrolled search path element in Microsoft Power Apps allows an unauthorized attacker to execute code over a network.
Affected productsMicrosoft Power Apps
Before you act
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.