Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
18,541 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
Packet of death for a DNSCrypt misconfigured Unbound
Mariner
CBL-Mariner Releases
Possible heap use-after-free in an error path when a DoT forwarded query is jostled out
Mariner
CBL-Mariner Releases
Assertion in libngtcp2 when under pressure in high concurrency DNS-over-QUIC environments
Mariner
CBL-Mariner Releases
Extra fix for CVE-2026-40622 to also clamp the TTL of A/AAAA records disallowing a one-time 'ghost domain' delegation renewal via glue records
Mariner
CBL-Mariner Releases
A wildcard replay, as another piece of data, triggers poisoning in the serve expired reply path
Mariner
CBL-Mariner Releases
DNS Cookie bypass when combined with proxy-protocol use
Mariner
CBL-Mariner Releases
Degradation of resolution service when 'discard-timeout' and 'serve-expired-client-timeout' are combined in unusual configuration
Mariner
CBL-Mariner Releases
Remote DNS-over-QUIC denial of service due to `quic-size` budget bypass
Mariner
CBL-Mariner Releases
Packet of death for DNSCrypt over TCP
Mariner
CBL-Mariner Releases
'serve-expired-client-timeout' and 'response-ip' CNAME redirect could lead to a crash
Mariner
CBL-Mariner Releases
Libunbound applications configured with 'unwanted-reply-threshold' could eventually be abruptly terminated
Mariner
CBL-Mariner Releases
Possible heap buffer overflow when validator canonicalizes RDATA that contains domain name
Mariner
CBL-Mariner Releases
Memory corruption could lead to crash and denial of service
Mariner
CBL-Mariner Releases
Privacy/configuration issue when adding local data in views through 'unbound-control'
Mariner
CBL-Mariner Releases
Cross-zone wildcard cache poisoning via RRSIG.labels manipulation
Mariner
CBL-Mariner Releases
BOGUS configured primary hostname accepted for XFR in auth/rpz zones
Mariner
CBL-Mariner Releases
'max-global-quota' reset by DNSSEC validation restarts
Mariner
CBL-Mariner Releases
Off-by-one error in 'harden-below-nxdomain' logic can shadow a stub/forward zone by a legitimate parent's NXDOMAIN
Mariner
CBL-Mariner Releases
'dns-error-reporting: yes' leads to stack buffer overflow
Mariner
CBL-Mariner Releases
Azure Key Vault Elevation of Privilege Vulnerability
Improper authentication in Azure Key Vault allows an unauthorized attacker to elevate privileges over a network.
Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability
Improper access control in Azure App Service allows an unauthorized attacker to elevate privileges over a network.
Azure DNS Elevation of Privilege Vulnerability
Missing authorization in Azure DNS allows an unauthorized attacker to elevate privileges over a network.
Data Quality Elevation of Privilege Vulnerability
Server-side request forgery (ssrf) in Data Quality allows an unauthorized attacker to elevate privileges over a network.
Microsoft Exchange Online Tampering Vulnerability
Improper authentication in Microsoft Exchange Online allows an unauthorized attacker to perform tampering over a network.
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.