Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
16,922 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
ptp: ocp: Fix board ID over-read
Mariner
misc: fastrpc: Remove buffer from list prior to unmap operation
Mariner
s390/ism: Fix UAF of sba and ieq during ism_dev_exit()
Mariner
serial: qcom-geni: fix TX DMA buffer flush
Mariner
drm/v3d: Serialize the scheduler timeout handlers
Mariner
eventfs: Fix use-after-free in eventfs_remove_rec()
Mariner
Windows BitLocker Security Feature Bypass Vulnerability
Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
Install KB5099538. Install KB5099540. Install KB5099539. Install KB5099536. Install KB5101650. Install KB5101649. Install KB5099535.
libexpat before 2.8.4 lacks handler call depth tracking with custom encoding callbacks. Thus, a use-after-free can occur. NOTE: this is similar to CVE-2026-50219, CVE-2026-56131 and CVE-2026-56412.
Mariner
rsync < 3.5.0 Symlink Following Arbitrary File Overwrite
Mariner
rsync < 3.5.0 Symlink Race Condition via --remove-source-files
Mariner
rsync 3.2.5 < 3.5.0 Heap Out-of-Bounds Write via files-from Entry
Mariner
CBL-Mariner Releases
rsync < 3.5.0 Arbitrary File Deletion via Malicious File List
Mariner
rsync 3.0.0 < 3.5.0 Out-of-Bounds Write via FLAG_HLINKED Handling
Mariner
CBL-Mariner Releases
PostgreSQL pg_trgm picksplit reads past end of buffer
Mariner
CBL-Mariner Releases
PostgreSQL refint plan cache type confusion executes arbitrary code
Mariner
CBL-Mariner Releases
PostgreSQL fuzzystrmatch writes effectively-arbitrary addresses, via integer wraparound
Mariner
CBL-Mariner Releases
PostgreSQL 32-bit pltcl and plperl undersize allocations, via integer wraparound
Mariner
CBL-Mariner Releases
PostgreSQL psql COPY FROM STDIN early failure processes data lines as psql commands
Mariner
CBL-Mariner Releases
PostgreSQL fails to check type USAGE privilege
Mariner
CBL-Mariner Releases
PostgreSQL tsvector and tsquery undersize allocations, via integer wraparound
Mariner
CBL-Mariner Releases
PostgreSQL ascii() function reads past end of buffer
Mariner
CBL-Mariner Releases
PostgreSQL regexp heap buffer overflow executes arbitrary code
Mariner
CBL-Mariner Releases
PostgreSQL row security caching disregards role modifications
Mariner
CBL-Mariner Releases
PostgreSQL pgcrypto, for OpenSSL-disabled ciphers, silently encrypts to and decrypts from cleartext
Mariner
CBL-Mariner Releases
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.