Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
16,884 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
md/md-bitmap: Synchronize bitmap_get_stats() with bitmap lifetime
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
See the Microsoft Security Update Guide for the update that applies to your product.
HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint check
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
See the Microsoft Security Update Guide for the update that applies to your product.
Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
See the Microsoft Security Update Guide for the update that applies to your product.
drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
CBL-Mariner Releases
CVE-2026-94450 - Potential denial of service when configured to send Retry packets in s2n-quic
Bulletin ID: 2026-116-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 09/22/2026 13:00 PM PDT Description: s2n-quic is a Rust implementation of the QUIC protocol. We identified CVE-2026-94450, an issue with improper validation of the Destination C...
CVE-2026-9291 - Insecure Deserialization in Amazon Braket SDK Job Results Processing
Open the original vendor bulletin for the full description and affected-version details.
CVE-2026-9133 - Arbitrary file read in rabbitmq-aws plugin
Open the original vendor bulletin for the full description and affected-version details.
CVE-2026-11393 - Code Injection via Improper Triple-Quote Escaping in AgentCore CLI Bedrock Agent Import
Open the original vendor bulletin for the full description and affected-version details.
CVE-2026-10584 - HTTPS Fallback to HTTP in Graph Explorer
Open the original vendor bulletin for the full description and affected-version details.
CVE-2026-18481 - Stored XSS in Participant URL Field leads to Account Takeover via Session Token Theft
Open the original vendor bulletin for the full description and affected-version details.
CVE-2026-18655 - Broker Credential and OAuth Token Disclosure in AWS Labs Amazon MQ MCP Server via Prompt Injection
Open the original vendor bulletin for the full description and affected-version details.
CVE-2026-94384 - Missing Authorization in AmazonConnectSalesforceLambda sfExecuteAWSService
Bulletin ID: 2026-115-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 09/22/2026 10:00 AM PDT Description: Amazon Connect Salesforce Lambda (AmazonConnectSalesforceLambda) is a Serverless Application Repository application that provides Lambda fun...
USN-8733-2: Gzip vulnerabilities
USN-8733-1 fixed vulnerabilities in Gzip. This update provides the corresponding fix for Gzip on Ubuntu 14.04 LTS, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. Original advisory details: Michał Majchrowicz and Marcin Wyczechowski discovered that Gzip's gzexe utility created temporar...
USN-8733-1 fixed vulnerabilities in Gzip.
ntopng before 6.7.260717 Missing Authorization on the Host Pool Bulk Delete Handler
Mariner
See the Microsoft Security Update Guide for the update that applies to your product.
go-chi chi 0.9.0 before 5.3.0 IP Spoofing via X-Forwarded-For
Mariner
CBL-Mariner Releases
ice: Fix memory corruption in VF driver
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
See the Microsoft Security Update Guide for the update that applies to your product.
filemap: Handle sibling entries in filemap_get_read_batch()
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
See the Microsoft Security Update Guide for the update that applies to your product.
KVM: VMX: Prevent RSB underflow before vmenter
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
See the Microsoft Security Update Guide for the update that applies to your product.
bpf: Fix combination of jit blinding and pointers to bpf subprogs.
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
See the Microsoft Security Update Guide for the update that applies to your product.
btrfs: fix anon_dev leak in create_subvol()
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
See the Microsoft Security Update Guide for the update that applies to your product.
scsi: lpfc: Inhibit aborts if external loopback plug is inserted
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
See the Microsoft Security Update Guide for the update that applies to your product.
net: annotate races around sk->sk_bound_dev_if
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
See the Microsoft Security Update Guide for the update that applies to your product.
srcu: Tighten cleanup_srcu_struct() GP checks
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
See the Microsoft Security Update Guide for the update that applies to your product.
node-tar Symlink Path Traversal via Drive-Relative Linkpath
Mariner
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.