Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
16,905 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
xmldom: Quadratic-memory consumption
Mariner
See the Microsoft Security Update Guide for the update that applies to your product.
xmldom: Quadratic-time parsing via the malformed-input recovery path - `parseElementStartPart` re-scan and `normalize()` adjacent-text merge
Mariner
See the Microsoft Security Update Guide for the update that applies to your product.
xmldom: Processing Instruction Target Injection Bypasses requireWellFormed
Mariner
See the Microsoft Security Update Guide for the update that applies to your product.
xmldom: Attribute name injection via setAttribute() bypasses requireWellFormed
Mariner
See the Microsoft Security Update Guide for the update that applies to your product.
xmldom: DocType `name` Injection Bypasses requireWellFormed
Mariner
See the Microsoft Security Update Guide for the update that applies to your product.
xmldom: Element name injection via createElement() bypasses requireWellFormed
Mariner
See the Microsoft Security Update Guide for the update that applies to your product.
block: Fix page refcounts for unaligned buffers in __bio_release_pages()
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
See the Microsoft Security Update Guide for the update that applies to your product.
dmaengine: dw-edma: eDMA: Add sync read before starting the DMA transfer in remote setup
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
See the Microsoft Security Update Guide for the update that applies to your product.
valkey-io valkey Blocked-on-keys blocked.c handleClientsBlockedOnKey use after free
Mariner
See the Microsoft Security Update Guide for the update that applies to your product.
KVM: s390: pci: Validate AIBV and AISB before pinning guest pages
Mariner
nfc: fdp: bound the device-reported read length and fix an skb leak
Mariner
ocfs2: fix missing metadata reservation for large xattrs
Mariner
Sudo through 1.9.17p2 Intercept Policy Bypass via execveat
Mariner
See the Microsoft Security Update Guide for the update that applies to your product.
An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the libtiff/tools/thumbnail.c: main() component
Mariner
See the Microsoft Security Update Guide for the update that applies to your product.
Unbounded Memory Growth in QUIC Server Incoming Channel Queue
Mariner
See the Microsoft Security Update Guide for the update that applies to your product.
Expat Denial of Service via storeAtts() Quadratic Complexity
Mariner
See the Microsoft Security Update Guide for the update that applies to your product.
Emacs: local shell command injection through the user field in emacs tramp
Mariner
See the Microsoft Security Update Guide for the update that applies to your product.
GoPacket's sFlow ExtendedGatewayFlow decoder: unbounded attacker-controlled allocation (104-byte UDP datagram -> up to 16 GiB make) -> unauthenticated remote DoS
Mariner
CBL-Mariner Releases
Packer vulnerable to arbitrary file write via crafted plugin archive during installation
Mariner
See the Microsoft Security Update Guide for the update that applies to your product.
rubyzip before 3.4.0 Path Traversal in Zip::Entry#extract via Sibling-Directory Prefix
Mariner
See the Microsoft Security Update Guide for the update that applies to your product.
Colord: Slow rejection of oversized malformed color strings
Mariner
See the Microsoft Security Update Guide for the update that applies to your product.
USN-8714-2: Linux kernel vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - OCFS2 file system; - SCTP protocol; (CVE-2026-53043, CVE-2026-53224, CVE-2026-53225, CVE-2026-5...
This update corrects flaws in the following subsystems: - OCFS2 file system; - SCTP protocol; (CVE-2026-53043, CVE-2026-53224, CVE-2026-53225, CVE-2026-53246, CVE-2026-53309)
USN-8725-1: Linux kernel vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - NVIDIA Tegra memory controller driver; - File systems infrastructure; - Network file system (NF...
This update corrects flaws in the following subsystems: - NVIDIA Tegra memory controller driver; - File systems infrastructure; - Network file system (NFS) server daemon; - OCFS2 file system; - B.A.T.M.A.N.
SonicWall NSM On-Prem Affected By Multiple Vulnerabilities
1) CVE-2026-78327 - Authenticated Command Injection Vulnerability An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the SonicWall Network Security Manager (NSM) On-Prem Management interface allows an authenticated at...
Install the applicable fixed SonicWall release for your product and branch. Fixed Product(s): Fixed Versions Network Security Manager (NSM) On-Prem (VMWare, Hyper-V, Azure and KVM): 4.3.1-R4 and higher versions.
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.