Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
18,986 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
Chromium: CVE-2026-12008 Use after free DigitalCredentials
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Release Notes
Chromium: CVE-2026-12007 Use after free Core
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Release Notes
Microsoft Edge (Chromium-based) Spoofing Vulnerability
User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
Release Notes
lldpd: Heap OOB Read in VLAN Decapsulation memmove
Mariner
CBL-Mariner Releases
proxy credentials leak over redirect-to proxy
Mariner
CBL-Mariner Releases
wrong reuse of HTTP Negotiate connection
Mariner
CBL-Mariner Releases
netrc credential leak with reused proxy connection
Mariner
CBL-Mariner Releases
Information Disclosure on SSLVPN endpoint
CVSSv3 Score: 3.9 An Exposure of Sensitive Information to an Unauthorized Actor vulnerability [CWE-200] in FortiOS SSL-VPN web-mode may allow an authenticated user to access full SSL-VPN settings via crafted URL. Revised on 2026-06-15 00:00:00
CVE-2026-0249: GlobalProtect App: Certificate Validation Bypass Vulnerabilities
Multiple improper certificate validation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enables an attacker to intercept encrypted communications and potentially compromise the endpoint. This can enable a local non-administrative operating system user or an attac...
VERSION MINOR VERSION SUGGESTED SOLUTION GlobalProtect App 6.1 on Android 6.1.0 through 6.1.13 Upgrade to 6.1.14 or later. GlobalProtect App 6.0 on Android 6.0.0 through 6.0.13 Upgrade to 6.0.14 or later. GlobalProtec...
Insufficient verification that responses belong to a query
Mariner
CBL-Mariner Releases
SQLite before 3.53.2 Memory Corruption in FTS5 Extension
Mariner
CBL-Mariner Releases
SQLite before 3.53.2 Heap Buffer Overflow via FTS5 fts5ChunkIterate
Mariner
CBL-Mariner Releases
gitoxide - Command Injection via Partial .gitmodules Override in gix-submodule
Mariner
CBL-Mariner Releases
Cargo can be coerced to share credentials between registries
Mariner
CBL-Mariner Releases
Crates in third party registries can override the cached source of other crates
Mariner
CBL-Mariner Releases
connection reuse ignores TLS requirement
Mariner
CBL-Mariner Releases
stale custom cookie host causes cookie leak
Mariner
CBL-Mariner Releases
Vim: Arbitrary Code Execution via Python Omni-Completion
Mariner
CBL-Mariner Releases
Vim: Vimscript Code Injection in netrw NetrwBookHistSave() via crafted directory name
Mariner
CBL-Mariner Releases
Vim: Vimscript Code Injection in cucumber filetype plugin via crafted step-definition regex
Mariner
CBL-Mariner Releases
Vim: Out-of-bounds Read in Terminal Screen Snapshot
Mariner
CBL-Mariner Releases
Vim: Arbitrary Code Execution via Python Omni-Completion
Mariner
CBL-Mariner Releases
Apache HTTP Server: mod_http2 denial of service
Mariner
CBL-Mariner Releases
HTML::Entities versions before 3.84 for Perl read freed heap memory in _decode_entities
Mariner
CBL-Mariner Releases
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.