Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
16,745 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
util-linux mount hook_owner TOCTOU allows local privilege escalation
Mariner
Release Notes
util-linux mount target TOCTOU allows local privilege escalation
Mariner
Release Notes
qs.stringify with arrayFormat comma throws TypeError on array elements that cannot be coerced to a string
Mariner
Release Notes
NGINX ngx_http_js_module vulnerability
Mariner
Release Notes
Openssh: openssh: sftp can write outside the destination directory from a server-supplied path
Mariner
Release Notes
Buffer Overflow vulnerability in zserge jsmn jsmn HEAD 25647e6 allows a remote attacker to cause a denial of service via the jsmn.h, jsmn_parse(), example/jsondump.c, dump() components
Mariner
Release Notes
HTTP/2 upload Use-After-Free
Mariner
Release Notes
Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation
Mariner
Release Notes
Buffer Overflow vulnerability in madmurphy libconfini v.1.16.4 allows a remote attacker to cause a denial of service via an allocation-size mismatch between its bundled load_ini_buffer utility and strip_ini_cache()
Mariner
Release Notes
libmspack through 0.11alpha Uninitialized Pointer Free via kwajd_open Error Path
Mariner
Release Notes
Dpdk: dpdk: guest can trigger infinite loop in vhost-crypto writeback chain cleanup
Mariner
Release Notes
libsmi through 0.5.0 Out-of-Bounds Write via smiValueAsString OCTET STRING DEFVAL
Mariner
Release Notes
AdonisJS HTTP Server: Uncontrolled Resource Consumption and Inefficient Regular Expression Complexity
Mariner
Release Notes
CVE-2026-0307: GlobalProtect App: Local Privilege Escalation Vulnerabilities
Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allows a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands...
VERSION MINOR VERSION SUGGESTED SOLUTION GlobalProtect App 6.2/6.3 on Linux 6.2.0 through 6.3.3-h14 Upgrade to 6.3.3-h15 (6.3.3-c63) or later. GlobalProtect App 6.0 on Linux 6.0.0 through 6.0.14 Upgrade to 6.0.15 or l...
CVE-2026-109587 & CVE-2026-109588 - Issue with FreeRTOS-Kernel
Read this article
CVE-2026-102551 & CVE-2026-102552 - Issue with FreeRTOS-Plus-TCP
Read this article
Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability
Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
Install KB5126655. Install KB5126657. Install KB5126646. Install KB5127648. Install KB5126653. Install KB5127646.
Chromium CVE-2026-110165: Use after free
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Release Notes
Chromium CVE-2026-110152: Buffer overflow
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Release Notes
Chromium CVE-2026-110149: Use after free
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Release Notes
Chromium CVE-2026-106382: Use after free
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Release Notes
Chromium CVE-2026-106197: Use after free
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Release Notes
Microsoft Office Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Release Notes Install KB5002928.
Active Directory Federation Services (AD FS) Spoofing Vulnerability
Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
Release Notes Install KB5126651. Install KB5126655. Install KB5126646. Install KB5126868. Install KB5126836. Install KB5127689. Install KB5127690. Install KB5127691. Install KB5127692. Install KB5127693. Install KB512...
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.