Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
16,884 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys
Mariner
Release Notes
Improper validation of PBMAC1 parameters in PKCS#12 MAC verification
Mariner
Release Notes
NULL dereference in SSL_CIPHER_find() function on unknown cipher ID
Mariner
Release Notes
Missing ASN1_TYPE validation in TS_RESP_verify_response() function
Mariner
Release Notes
Heap out-of-bounds write in BIO_f_linebuffer on short writes
Mariner
Release Notes
TLS 1.3 CompressedCertificate excessive memory allocation
Mariner
Release Notes
'openssl dgst' one-shot codepath silently truncates inputs >16MB
Mariner
Release Notes
Unauthenticated/unencrypted trailing bytes with low-level OCB function calls
Mariner
Release Notes
NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
Mariner
Release Notes
NULL Pointer Dereference in QUIC Server Initial Packet Handling
Mariner
Release Notes
ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function
Mariner
Release Notes
Missing ASN1_TYPE validation in PKCS#12 parsing
Mariner
Release Notes
Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion
Mariner
Release Notes
Chromium: CVE-2025-12433 Inappropriate implementation in V8
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Release Notes
Chromium: CVE-2025-12441 Out of bounds read in V8
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Release Notes
EUC_JISX0213 decoding may hang on crafted input
Mariner
Release Notes
Chromium: CVE-2025-12432 Race in V8
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Release Notes
SHIFT_JISX0213 decoding may hang on crafted input
Mariner
Release Notes
Citrix NetScaler ADC and Citrix NetScaler Gateway Security Bulletin for CVE-2026-88779
NetScaler ADC and NetScaler Gateway is affected by the vulnerability described below
Cloud Software Group strongly urges affected customers of NetScaler ADC and NetScaler Gateway to install the relevant updated versions as soon as possible: NetScaler ADC and NetScaler Gateway 14.1-73.41 and later rele...
MIPS: ftrace: Fix memory corruption when kernel is located beyond 32 bits
Mariner
Release Notes
Helm Allows A Specially Crafted JSON Schema To Cause A Stack Overflow
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
CBL-Mariner Releases Release Notes
There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1.0.2m and 1.1.0 before 1.1.0g. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be very significant and likely only accessible to a limited number of attackers. An attacker would additionally need online access to an unpatched system using the target private key in a scenario with persistent DH parameters and a private key that is shared between multiple clients. This only affects processors that support the BMI1, BMI2 and ADX extensions like Intel Broadwell (5th generation) and later or AMD Ryzen.
Mariner
net: stmmac: fix the crash issue for zero copy XDP_TX action
Mariner
CBL-Mariner Releases Release Notes
functionfs: fix the open/removal races
Mariner
Release Notes
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.