Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
18,986 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
nfc: llcp: add missing return after LLCP_CLOSED checks
Mariner
CBL-Mariner Releases
rxrpc: Fix key reference count leak from call->key
Mariner
CBL-Mariner Releases
ASoC: qcom: q6apm: move component registration to unmanaged version
Mariner
CBL-Mariner Releases
PCI: endpoint: pci-epf-vntb: Remove duplicate resource teardown
Mariner
CBL-Mariner Releases
staging: rtl8723bs: initialize le_tmp64 in rtw_BIP_verify()
Mariner
CBL-Mariner Releases
rxrpc: Only put the call ref if one was acquired
Mariner
CBL-Mariner Releases
media: em28xx: fix use-after-free in em28xx_v4l2_open()
Mariner
CBL-Mariner Releases
net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool()
Mariner
CBL-Mariner Releases
X.509: Fix out-of-bounds access when parsing extensions
Mariner
CBL-Mariner Releases
netfilter: conntrack: add missing netlink policy validations
Mariner
CBL-Mariner Releases
net: annotate data-races around sk->sk_{data_ready,write_space}
Mariner
CBL-Mariner Releases
i40e: Fix preempt count leak in napi poll tracepoint
Mariner
CBL-Mariner Releases
net: add proper RCU protection to /proc/net/ptype
Mariner
CBL-Mariner Releases
bcache: fix cached_dev.sb_bio use-after-free and crash
Mariner
XenServer Security Update for CVE-2026-23562 and CVE-2026-42486
Two issues have been identified that affect XenServer 8.4 that each may allow a logged-in host administrator to escalate their privileges to a higher level than defined by their RBAC role. These issues have the following identifiers:
We have pushed updates to both the Early Access and Normal update channels of XenServer 8.4. We recommend that customers update to the latest version from their chosen channel following the instructions at https://doc...
Microsoft Defender Elevation of Privilege Vulnerability
Insufficient granularity of access control in Microsoft Defender allows an authorized attacker to elevate privileges locally.
Release Notes
OpenTelemetry-Go Affected by Arbitrary Code Execution via PATH Hijacking
Mariner
bridge: mrp: reject zero test interval to avoid OOM panic
Mariner
media: mediatek: vcodec: fix use-after-free in encoder release path
Mariner
ksmbd: do not expire session on binding failure
Mariner
CBL-Mariner Releases
mm/kasan: fix double free for kasan pXds
Mariner
ALSA: 6fire: fix use-after-free on disconnect
Mariner
OpenPrinting CUPS: Path traversal in RSS notify-recipient-uri enables file write outside CacheDir/rss (and clobbering of job.cache)
Mariner
CBL-Mariner Releases
ksmbd: use volume UUID in FS_OBJECT_ID_INFORMATION
Mariner
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.