Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
16,884 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
wifi: rt2x00usb: fix devres lifetime
Mariner
CBL-Mariner Releases Release Notes
Sleuth Kit tsk_recover Path Traversal
Mariner
CBL-Mariner Releases Release Notes
genirq/irq_sim: Initialize work context pointers properly
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Release Notes
xfrm_user: fix info leak in build_report()
Mariner
CBL-Mariner Releases Release Notes
Sleuth Kit ISO9660 SUSP Extension Reference Out-of-Bounds Read
Mariner
Release Notes CBL-Mariner Releases
Prometheus: remote read endpoint allows denial of service via crafted snappy payload
Mariner
CBL-Mariner Releases
net: clear the dst when changing skb protocol
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
CBL-Mariner Releases Release Notes
net: rfkill: prevent unlimited numbers of rfkill events from being created
Mariner
CBL-Mariner Releases Release Notes
Prometheus Azure AD remote write OAuth client secret exposed via config API
Mariner
CBL-Mariner Releases
Sleuth Kit APFS Keybag Parser Out-of-Bounds Read
Mariner
CBL-Mariner Releases Release Notes
dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
CBL-Mariner Releases Release Notes
seg6: separate dst_cache for input and output paths in seg6 lwtunnel
Mariner
CBL-Mariner Releases Release Notes
Code execution vulnerability in SWIG code generation in cmd/go
Mariner
Release Notes
sched/rt: Fix race in push_rt_task
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Release Notes
Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Shell executes to compromise MySQL Shell. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Shell. CVSS 3.1 Base Score 5.0 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H).
Mariner
Release Notes
Unexpected work during chain building in crypto/x509
Mariner
Release Notes
Input: uinput - fix circular locking dependency with ff-core
Mariner
CBL-Mariner Releases Release Notes
NFSD: fix race between nfsd registration and exports_proc
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Release Notes
xfs: stop reclaim before pushing AIL during unmount
Mariner
CBL-Mariner Releases
Missing bound checks can lead to memory corruption in safe Go in cmd/compile
Mariner
Release Notes
netfilter: nft_ct: fix use-after-free in timeout object destroy
Mariner
CBL-Mariner Releases Release Notes
smb: client: add NULL check in automount_fullpath
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
CBL-Mariner Releases Release Notes
ip6_tunnel: clear skb2->cb[] in ip4ip6_err()
Mariner
Release Notes
Miscompilation allows memory corruption via CONVNOP-wrapped array copy in cmd/compile
Mariner
Release Notes
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.