Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
16,884 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
ipv4: start using dst_dev_rcu()
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Release Notes
net: ipv6: clear suppressed fib6 rule result
Mariner
Release Notes
ASoC: SOF: sof-audio: Fix error path in sof_widget_setup_unlocked()
Mariner
Release Notes
crypto: starfive - Do not free stack buffer
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Release Notes
net/sched: cls_route: fix fastmap use-after-free on filter
Mariner
Release Notes
NFSD: Prevent lock owner use-after-free during client teardown
Mariner
Release Notes
s390/vfio_ccw: Move cp cleanup out of not operational
Mariner
Release Notes
ALSA: usb-audio: Complete cleanup after system-resume errors
Mariner
Release Notes
RabbitMQ: Incomplete fix for CVE-2026-44838: `escape_regex_char/1` does not escape `-`, leaving room for an MQTT topic permission bypass
Mariner
Release Notes
packet: use consistent hard_header_len in non-ring send paths
Mariner
Release Notes
drm/amdgpu: validate GEM_CREATE domain combinations
Mariner
Release Notes
selinux: require every boolean value to be defined
Mariner
Release Notes
vhost: reset the vring metadata cache on vring reconfiguration
Mariner
Release Notes
HID: roccat: free buffered reports when destroying device
Mariner
Release Notes
drm/amdgpu: disallow multiple FENCE chunks in one submit
Mariner
Release Notes
rndis_host: add overflow check in rndis_rx_fixup()
Mariner
Release Notes
drm/bridge: tc358767: clamp the reported AUX read size to the request
Mariner
Release Notes
`HTTPPasswordMgr` can send saved HTTPS credentials via HTTP because of incorrect scheme matching
Mariner
Release Notes
net/sched: act_api: fix TOCTOU NULL deref on a->goto_chain
Mariner
Release Notes
dmaengine: sun6i-dma: Fix reclaim descriptors while terminating DMA
Mariner
Release Notes
netfilter: nft_payload: fix mask build for partial field offload
Mariner
Release Notes
ip6_gre: fix hardware header length for NBMA tunnels
Mariner
Release Notes
net/sched: cls_u32: skip hash tables in u32_bind_class()
Mariner
Release Notes
selinux: reject an unclaimed class value in security_get_classes()
Mariner
Release Notes
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.