Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
18,986 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
Integer Truncation on SQLite
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
CBL-Mariner Releases Release Notes Install KB5073723. Install KB5073457. Install KB5073724. Install KB5073379. Install KB5074109. Install KB5073455. Install KB5073450. Install KB5073722.
SFTP READLINK Leaks Absolute Backend Filesystem Path When Root Is Configured
Mariner
CBL-Mariner Releases
Stack buffer overflow in SCTP error cause parsing in inet_drv allows remote VM crash
Mariner
CBL-Mariner Releases
Distribution-over-TLS LAN allowlist silently bypassed due to sockname/peername confusion in inet_tls_dist
Mariner
CBL-Mariner Releases
httpc leaks Authorization header to cross-origin redirect targets
Mariner
CBL-Mariner Releases
ftp client PASV response IP not validated against control peer, enabling SSRF and FTP bounce attacks
Mariner
CBL-Mariner Releases
Stack Buffer Overflow in ei_s_print_term at Very Large Integer
Mariner
CBL-Mariner Releases
M365 Copilot Information Disclosure Vulnerability
Missing authentication for critical function in M365 Copilot allows an unauthorized attacker to disclose information over a network.
Microsoft Azure Synapse Elevation of Privilege Vulnerability
Execution with unnecessary privileges in Azure Synapse allows an authorized attacker to elevate privileges over a network.
Microsoft Exchange Online Elevation of Privilege Vulnerability
Missing authorization in Microsoft Exchange Online allows an authorized attacker to elevate privileges over a network.
Dynamics 365 Elevation of Privilege Vulnerability
Improper access control in Microsoft Dynamics 365 allows an authorized attacker to elevate privileges over a network.
Dynamics 365 Customer Voice Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Dynamics 365 Customer Voice allows an unauthorized attacker to perform spoofing over a network.
Microsoft 365 Copilot's Business Chat Elevation of Privilege Vulnerability
Url redirection to untrusted site ('open redirect') in Microsoft 365 Copilot's Business Chat allows an unauthorized attacker to elevate privileges over a network.
Microsoft Cost Management Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Cost Management Interactive Experiences allows an unauthorized attacker to disclose information over a network.
Azure Active Directory Elevation of Privilege Vulnerability
Improper authentication in Azure Active Directory allows an unauthorized attacker to elevate privileges over a network.
Microsoft Copilot Tampering Vulnerability
Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to perform tampering over a network.
Azure Bot Service Elevation of Privilege Vulnerability
Improper authentication in Azure Bot Service allows an authorized attacker to elevate privileges over a network.
crypto: caam - guard HMAC key hex dumps in hash_digest_key
Mariner
CBL-Mariner Releases
io-wq: check that the predecessor is hashed in io_wq_remove_pending()
Mariner
CBL-Mariner Releases
pmdomain: core: Fix detach procedure for virtual devices in genpd
Mariner
CBL-Mariner Releases
net/sched: act_ct: Only release RCU read lock after ct_ft
Mariner
CBL-Mariner Releases
isofs: validate Rock Ridge CE continuation extent against volume size
Mariner
CBL-Mariner Releases
hfsplus: fix held lock freed on hfsplus_fill_super()
Mariner
CBL-Mariner Releases
nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free
Mariner
CBL-Mariner Releases
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.