Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
16,884 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
Bluetooth: eir: Fix possible crashes on eir_create_adv_data
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Release Notes
net: add xmit recursion limit to tunnel xmit functions
Mariner
Release Notes
f2fs: fix to bail out in get_new_segment()
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Release Notes
scsi: core: Wake up the error handler when final completions race against each other
Mariner
Release Notes
Gfs2-utils: gfs2-utils: stack overflow via alloca(i_height) in metadata walk
Mariner
Release Notes
wifi: iwlwifi: don't warn when if there is a FW error
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Release Notes
Gfs2-utils: gfs2-utils: stack overflow via alloca(1
Mariner
Release Notes
tcp: secure_seq: add back ports to TS offset
Mariner
Release Notes
Gfs2-utils: gfs2-utils: heap out-of-bounds read via unchecked ea_num_ptrs in extended attribute processing
Mariner
Release Notes
md: Don't register sync_thread for reshape directly
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Release Notes
tracing: Fix crash on synthetic stacktrace field usage
Mariner
Release Notes
Gfs2-utils: gfs2-utils: stack out-of-bounds write via unchecked height in savemeta
Mariner
Release Notes
dm: limit swapping tables for devices with zone write plugs
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Release Notes
vsock/virtio: cap TX credit to local buffer size
Mariner
Release Notes
Gfs2-utils: gfs2-utils: stack out-of-bounds write via unchecked di_height in gfs2_edit
Mariner
Release Notes
vsock/virtio: fix potential underflow in virtio_transport_get_credit()
Mariner
Release Notes
rxrpc: Fix recvmsg() unconditional requeue
Mariner
Release Notes
tls: Fix race condition in tls_sw_cancel_work_tx()
Mariner
Release Notes
md/dm-raid: don't call md_reap_sync_thread() directly
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
CBL-Mariner Releases Release Notes
accel/ivpu: Fix locking order in ivpu_job_submit
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Release Notes
drm/amd/display: Disable idle reallow as part of command/gpint execution
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Release Notes
drm/amd/display: fix incorrect mpc_combine array size
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Release Notes
btrfs: zoned: fix use-after-free in do_zone_finish()
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Release Notes
tracing: Verify event formats that have "%*p.."
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
CBL-Mariner Releases Release Notes
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.