Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
16,922 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
Libevent: `evtag_unmarshal_header()` decodes a wire `uint32` length into a signed `int` return value.
Mariner
OCSP stapling bypass with Apple SecTrust
Mariner
Native CA trust persist
Mariner
WS Auto-PONG memory exhaustion
Mariner
Citrix Workspace App for Mac Security Bulletin for CVE-2026-18751
Cloud Software Group strongly urges affected customers of Citrix Workspace App for Mac to install the relevant updated versions of Citrix Workspace App for Mac as soon as possible:
USN-8671-1: FFmpeg vulnerabilities
Adrian Junge was discovered that FFmpeg incorrectly handled certain media files. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2026-66036, CVE-2026-66039) Adrian Junge discovered that FFmpeg incorrectly handled certain m...
USN-8670-1: curl vulnerability
Joshua Rogers discovered that curl incorrectly handled reusing connections when client certificate settings changed. This could result in the wrong client certificates being used, contrary to expectations.
watchdog: at91sam9_wdt: prevent timer rearm during teardown
Mariner
net: thunderbolt: Tear down DMA paths before stopping the rings
Mariner
staging: rtl8723bs: fix OOB read in WMM_param_handler()
Mariner
NTB: ntb_netdev: Preserve RX queue depth on allocation failure
Mariner
soc: aspeed: lpc-snoop: Fix usercopy overflow in snoop_file_read
Mariner
usb: gadget: f_ncm: Use unsigned int for ndp_index
Mariner
thunderbolt: Bound the DROM dual link port number before indexing sw->ports
Mariner
staging: rtl8723bs: validate monitor transmit frame lengths
Mariner
staging: rtl8723bs: fix OOB read in rtw_get_wpa_ie()
Mariner
staging: rtl8723bs: fix missing shared-key auth challenge length check
Mariner
net: prestera: validate firmware header length
Mariner
mm/page_table_check: skip special zero mappings
Mariner
In strongSwan before 6.0.7, identity parsing/cloning is mishandled. Parsed EAP-Identities that result in an empty but non-NULL encoding are not correctly cloned and trigger a double-free once the duplicates are destroyed.
Mariner
misc: fastrpc: take fl->lock when moving mmaps on interrupted invoke
Mariner
usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm()
Mariner
net: bridge: mrp: fix uninitialised bytes on the wire
Mariner
ALSA: usx2y: bound the hwdep mmap fault offset
Mariner
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.