Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
18,986 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
Copilot Chat (Microsoft Edge) Information Disclosure Vulnerability
Improper neutralization of special elements in output used by a downstream component ('injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to disclose information over a network.
Microsoft M365 Copilot Remote Code Execution Vulnerability
Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an authorized attacker to execute code over a network.
M365 Copilot Information Disclosure Vulnerability
Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information over a network.
Kubevirt: kubevirt virt-handler: privilege escalation and node compromise via symlink following vulnerability
Mariner
CBL-Mariner Releases
jq: stack overflow in module loading on mutual `include`
Mariner
CBL-Mariner Releases
XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences
Mariner
CBL-Mariner Releases
jq: Embedded NUL truncates top-level jq programs loaded with -f
Mariner
CBL-Mariner Releases
Mistune Image Directive CSS Injection Vulnerability
Mariner
CBL-Mariner Releases
jq: Stack overflow via unbounded recursion in jv_contains
Mariner
CBL-Mariner Releases
Mistune: XSS via unescaped figclass/figwidth in Figure directive
Mariner
CBL-Mariner Releases
jq: Embedded NUL in jq import paths causes local redaction-policy bypass and preserves sensitive fields in published artifacts
Mariner
CBL-Mariner Releases
jq: Stack Overflow in Recursive Object Merge
Mariner
CBL-Mariner Releases
jq: Signed-int overflow in `stack_reallocate` (jq VM stack)
Mariner
CBL-Mariner Releases
Unbounded buffer accumulation in multipart header parsing causes denial of service in cowboy
Mariner
CBL-Mariner Releases
Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly
Mariner
CBL-Mariner Releases
Gnutls: gnutls: denial of service via dtls packet reordering vulnerability
Mariner
CBL-Mariner Releases
Bytes is vulnerable to integer overflow in BytesMut::reserve
Mariner
CBL-Mariner Releases
GNU Binutils objdump bucomm.c display_info memory leak
Mariner
CBL-Mariner Releases
LWP::UserAgent versions before 6.83 for Perl leak Authorization and Proxy-Authorization headers on cross-origin redirects
Mariner
CBL-Mariner Releases
CR Injection in SSE Encoder Enables Event Splitting via cow_sse:event/1
Mariner
CBL-Mariner Releases
Unbounded chunk-size hex digits in cowlib cause quadratic CPU and memory DoS
Mariner
CBL-Mariner Releases
Openvswitch: open vswitch: denial of service via malformed ftp epasv command
Mariner
CBL-Mariner Releases
Gnutls: gnutls: authentication bypass via nul character in username
Mariner
CBL-Mariner Releases
CVE-2026-4890
Mariner
CBL-Mariner Releases
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.