Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
16,656 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
ext4: fix out-of-bounds read in ext4_read_inline_dir()
Mariner
Release Notes
fs/ntfs3: fix out-of-bounds read of INDEX_ROOT in reparse/objid init
Mariner
Release Notes
SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6
Mariner
Release Notes
xfrm6: fix out-of-bounds write in xfrm6_input_addr() when secpath is full
Mariner
Release Notes
fs/ntfs3: fix out-of-bounds read in read_log_rec_buf()
Mariner
Release Notes
fs/ntfs3: validate ef->size covers the record's name and value
Mariner
Release Notes
isofs: fix out-of-bounds page array access on empty zisofs block
Mariner
Release Notes
vfio/pci: clear vdev->msi_perm after freeing it on init failure
Mariner
Release Notes
Apache HTTP Server: mod_proxy_html: crash in dump_content
Mariner
Release Notes
libexpat before 2.8.2 does not consider XML_TOK_DATA_CHARS in doCdataSection and thus lacks handler call depth tracking for various calls from within handlers in cases of a policy violation. Thus, a use-after-free can occur. NOTE: this issue exists because of an incomplete fix for CVE-2026-50219.
Mariner
CBL-Mariner Releases
xmlwf in libexpat before 2.8.2 has an integer overflow in endDoctypeDecl via NOTATION declarations.
Mariner
CBL-Mariner Releases
xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId.
Mariner
CBL-Mariner Releases
xmlwf in libexpat before 2.8.2 has an integer overflow for the output filename when -d outputDir is used.
Mariner
CBL-Mariner Releases
libexpat before 2.8.2 has an integer overflow in doProlog that is related to storeEntityValue and entity textLen.
Mariner
CBL-Mariner Releases
libexpat before 2.8.2 has an integer overflow in XML_ParseBuffer because it lacked a check that was present in XML_Parse.
Mariner
CBL-Mariner Releases
libexpat before 2.8.2 has an integer overflow in getAttributeId.
Mariner
CBL-Mariner Releases
libexpat before 2.8.2 has an integer overflow in addBinding.
Mariner
CBL-Mariner Releases
libexpat before 2.8.2 has an integer overflow in storeAtts.
Mariner
CBL-Mariner Releases
Heap-based Buffer Overflow in GNU coreutils
Mariner
Out‑of‑bounds Read in GNU coreutils
Mariner
Release Notes
Arbitrary Output Location Change in GNU Bison
Mariner
CBL-Mariner Releases
Arbitrary Command Execution in GNU Bison
Mariner
CBL-Mariner Releases
util-linux LIBMOUNT_FORCE_MOUNT2 allows nosuid and noexec bypass
Mariner
Release Notes
HarfBuzz 8.0.0 through 14.6.0 WebAssembly Shaper NULL Pointer Dereference DoS
Mariner
Release Notes
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.