Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
16,905 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
NULL Dereference in Certificate Verification with OCSP Checking
Mariner
See the Microsoft Security Update Guide for the update that applies to your product.
Double-free When Checking OCSP Stapled Response
Mariner
See the Microsoft Security Update Guide for the update that applies to your product.
crypto: sun8i-ss - Remove crypto_rng interface
Mariner
See the Microsoft Security Update Guide for the update that applies to your product.
gtp: serialize PDP context updates
Mariner
crypto: qce - fix CCM AAD buffer underallocation
Mariner
See the Microsoft Security Update Guide for the update that applies to your product.
xfrm: espintcp: fix UAF during close
Mariner
See the Microsoft Security Update Guide for the update that applies to your product.
nfc: st21nfca: validate ATR_REQ length against the received frame
Mariner
See the Microsoft Security Update Guide for the update that applies to your product.
net: ks8851: Handle softirqs at the end of IRQ thread to fix hang
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
See the Microsoft Security Update Guide for the update that applies to your product.
erofs: cap LZMA stream pool size
Mariner
See the Microsoft Security Update Guide for the update that applies to your product.
An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster() function when computing strip buffer sizes can result in an undersized heap allocation and subsequent heap-based buffer overflow during YCbCr conversion of a crafted TIFF image
Mariner
See the Microsoft Security Update Guide for the update that applies to your product.
drm/vc4: don't check if plane->state->fb == state->fb
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
See the Microsoft Security Update Guide for the update that applies to your product.
ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses
Mariner
See the Microsoft Security Update Guide for the update that applies to your product.
usb: gadget: f_tcm: keep port count until LUN teardown completes
Mariner
See the Microsoft Security Update Guide for the update that applies to your product.
nfc: microread: validate target discovery payload lengths
Mariner
See the Microsoft Security Update Guide for the update that applies to your product.
nilfs2: reject invalid block index in GC ioctl
Mariner
See the Microsoft Security Update Guide for the update that applies to your product.
nfc: nci: add data_len bound checks to activation parameter extractors
Mariner
See the Microsoft Security Update Guide for the update that applies to your product.
nfc: nci: fix uninit-value in the RF discover/activated NTF handlers
Mariner
See the Microsoft Security Update Guide for the update that applies to your product.
nfc: pn533: purge fragmented skbs during cleanup
Mariner
See the Microsoft Security Update Guide for the update that applies to your product.
ax25: fix use-after-free bugs caused by ax25_ds_del_timer
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
See the Microsoft Security Update Guide for the update that applies to your product.
smb: client: fix potential UAF in cifs_stats_proc_write()
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
See the Microsoft Security Update Guide for the update that applies to your product.
ALSA: hda/tas2781: Cancel async firmware request at unbind
Mariner
See the Microsoft Security Update Guide for the update that applies to your product.
can: isotp: fix timer drain order, wakeup handling and tx_gen ordering
Mariner
See the Microsoft Security Update Guide for the update that applies to your product.
xfs: don't livelock in scrub on a circular unlinked list
Mariner
See the Microsoft Security Update Guide for the update that applies to your product.
node-forge through 1.4.0 RSA PKCS#1 v1.5 Signature Forgery via Nested DigestAlgorithm Padding
Mariner
See the Microsoft Security Update Guide for the update that applies to your product.
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.