Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
18,540 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
iio: event: Fix event FIFO reset race
Mariner
CBL-Mariner Releases
bpf: Reject fragmented frames in devmap
Mariner
CBL-Mariner Releases
ALSA: usb-audio: avoid kobject path lookup in DualSense match
Mariner
CBL-Mariner Releases
Bluetooth: btusb: fix use-after-free on marvell probe failure
Mariner
CBL-Mariner Releases
isofs: bound Rock Ridge symlink components to the SL record
Mariner
CBL-Mariner Releases
tracing: Prevent out-of-bounds read in glob matching
Mariner
CBL-Mariner Releases
ACPI: NFIT: core: Fix acpi_nfit_init() error cleanup
Mariner
CBL-Mariner Releases
partitions: aix: bound the pp_count scan to the ppe array
Mariner
CBL-Mariner Releases
staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop
Mariner
CBL-Mariner Releases
udf: validate VAT header length against the VAT inode size
Mariner
CBL-Mariner Releases
ACPI: driver: Check ACPI_COMPANION() against NULL during probe
Mariner
Input: elan_i2c - validate firmware size before use
Mariner
drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async
Mariner
DHCP Server Service Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
Install KB5099538. Install KB5099540. Install KB5099536. Install KB5099535. Install KB5099445. Install KB5099444.
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Exposure of sensitive information to an unauthorized actor in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
Install KB5099538. Install KB5099540. Install KB5099539. Install KB5099536. Install KB5101650. Install KB5101649. Install KB5099535. Install KB5099445. Install KB5099444.
Microsoft Install Service Elevation of Privilege Vulnerability
Improper privilege management in Microsoft Install Service allows an authorized attacker to elevate privileges locally.
Install KB5099538. Install KB5099540. Install KB5099539. Install KB5099536. Install KB5101650. Install KB5101649.
Rpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbdump() short-mode version-list formatting
Mariner
CBL-Mariner Releases
HTTP::Daemon versions before 6.17 for Perl allow OS command injection via send_file()
Mariner
CBL-Mariner Releases
Rpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbaddrlist()
Mariner
CBL-Mariner Releases
VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)
Mariner
CBL-Mariner Releases
Nano: gnu nano: arbitrary memory writes, information disclosure, or denial of service via format string vulnerability in error handling.
Mariner
Chromium: CVE-2026-16807 Out of bounds write in Codecs
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Release Notes
Chromium: CVE-2026-16806 Use after free in WebMCP
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Release Notes
Chromium: CVE-2026-16805 Use after free in Blink
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Release Notes
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.