Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

11Vendor sources
16,884Advisories collected
6,374Published or updated in 30 days
6,999Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

16,884 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2025-69648
MediumCVSS 7.4

GNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF .debug_rnglists data. A logic flaw in the DWARF parsing path causes readelf to repeatedly print the same warning message without making forward progress, resulting in a non-terminating output loop that requires manual interruption. No evidence of memory corruption or code execution was observed.

Mariner

Affected productscbl2 binutils 2.37-20 on CBL Mariner 2.0, azl3 binutils 2.41-10 on Azure Linux 3.0, cbl2 binutils 2.37-20, cbl2 binutils 2.37-20 on CBL-Mariner 2.0
Vendor guidance

Release Notes

Microsoft Security Response CenterCVE-2025-69647
MediumCVSS 6.2

GNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF loclists data. A logic flaw in the DWARF parsing code can cause readelf to repeatedly print the same table output without making forward progress, resulting in an unbounded output loop that never terminates unless externally interrupted. A local attacker can trigger this behavior by supplying a malicious input file, causing excessive CPU and I/O usage and preventing readelf from completing its analysis.

Mariner

Affected productscbl2 binutils 2.37-20 on CBL Mariner 2.0, azl3 binutils 2.41-10 on Azure Linux 3.0, azl3 binutils 2.41-11 on Azure Linux 3.0, cbl2 binutils 2.37-20
Fixed versions2.41-11
Vendor guidance

CBL-Mariner Releases Release Notes

Microsoft Security Response CenterCVE-2026-22702
MediumCVSS 4.5

virtualenv Has TOCTOU Vulnerabilities in Directory Creation

Mariner

Affected productscbl2 python-virtualenv 20.26.6-3 on CBL Mariner 2.0, cbl2 python-virtualenv 20.26.6-2 on CBL Mariner 2.0, azl3 python-virtualenv 20.25.0-3 on Azure Linux 3.0, cbl2 python-virtualenv 20.26.6-3 on CBL-Mariner 2.0
Fixed versions20.36.1-1
Vendor guidance

CBL-Mariner Releases Release Notes

Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources