Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
18,243 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
incomplete mTLS config matching in conn reuse
Mariner
CBL-Mariner Releases
Grub2: udf: heap based buffer overflow in grub_udf_read_block() may lead to arbitrary code execution
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
CBL-Mariner Releases
HSTS subdomain overwrites parent cache entry
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
CBL-Mariner Releases
usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes()
Mariner
wrong reuse for different services
Mariner
CBL-Mariner Releases
Redis' Lua library commands may lead to remote code execution
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
CBL-Mariner Releases
Grub2: fs/bfs: integer overflow leads to heap oob read in the bfs parser
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
CBL-Mariner Releases
trailing dot domain super cookie
Mariner
powerpc/hv-gpci: fix preempt count leak in sysfs show paths
Mariner
drm/amd/display: Fix late derefrence 'dsc' check in 'link_set_dsc_pps_packet()'
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Grub2: fs/tar: integer overflow causes heap oob write
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
CBL-Mariner Releases
cross-origin Digest auth state leak
Mariner
CBL-Mariner Releases
virtio_ring: Fix data race by tagging event_triggered as racy for KCSAN
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
ksmbd: validate SID in parent security descriptor during ACL inheritance
Mariner
gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
CBL-Mariner Releases
drm/amd/display: Fix MST Null Ptr for RV
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Rejected reason: This CVE ID was assigned as a duplicate of CVE-2026-50292
Mariner
Out-of-bounds Write in radare2
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
CBL-Mariner Releases
net: atlantic: eliminate double free in error handling logic
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
exposing HTTP/3 early data
Mariner
ALSA: pcm: oss: Fix setup list UAF on proc write error
Mariner
Potential DoS via quadratic complexity in unicodedata.normalize()
Mariner
CBL-Mariner Releases
net/sched: act_mirred: don't override retval if we already lost the skb
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
CBL-Mariner Releases
dlm: fix possible lkb_resource null dereference
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
CBL-Mariner Releases
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.