Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
18,986 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
Microsoft Purview eDiscovery Elevation of Privilege Vulnerability
Server-side request forgery (ssrf) in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network.
Microsoft Partner Center Elevation of Privilege Vulnerability
Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network.
Azure IoT Central Elevation of Privilege Vulnerability
Exposure of sensitive information to an unauthorized actor in Azure IOT Central allows an authorized attacker to elevate privileges over a network.
Dnsmasq: dnsmasq: denial of service due to out-of-bounds write in dhcp bootreply processing
Mariner
.NET Denial of Service Vulnerability
Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a network.
Release Notes Install KB5086095. Install KB5086096. Install KB5086097.
fontconfig before 2.17.1 has an off-by-one error in allocation during sfnt capability handling, leading to a one-byte out-of-bounds write, and potentially a crash or code execution. This is in FcFontCapabilities in fcfreetype.c.
Mariner
net: ethernet: mtk_eth_soc: Reset prog ptr to old_prog in case of error in mtk_xdp_setup()
Mariner
CBL-Mariner Releases
can: usb: f81604: correctly anchor the urb in the read bulk callback
Mariner
CBL-Mariner Releases
nfc: pn533: properly drop the usb interface reference on disconnect
Mariner
CBL-Mariner Releases
usb: gadget: f_ncm: align net_device lifecycle with bind/unbind
Mariner
can: usb: f81604: handle short interrupt urb messages properly
Mariner
CBL-Mariner Releases
Acceptance of CertificateVerify Message before ClientKeyExchange in TLS 1.2
Mariner
Heap buffer overflow in session parsing with wolfSSL_d2i_SSL_SESSION() function
Mariner
Buffer Overflow in HPKE via Oversized ECH Config
Mariner
Non-constant time multiplication subroutine __muldi3 on RISC-V RV32I
Mariner
Fault injection attack with ML-DSA and ML-KEM on ARM
Mariner
Improper key_share validation in TLS 1.3 HelloRetryRequest
Mariner
Stack buffer overflow in PKCS7 SignedData encoding with custom signed attributes
Mariner
Windows USB Printing Stack (usbprint.sys) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows USB Print Driver allows an unauthorized attacker to elevate privileges with a physical attack.
Install KB5082063. Install KB5083769. Install KB5083768.
GitHub Copilot and Visual Studio Code Remote Code Execution Vulnerability
Time-of-check time-of-use (toctou) race condition in GitHub Copilot and Visual Studio allows an authorized attacker to execute code over a network.
Release Notes
.NET and Visual Studio Denial of Service Vulnerability
Stack-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to deny service over a network.
Release Notes Install KB5086095. Install KB5086096. Install KB5086097.
Windows UPnP Device Host Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.
Install KB5083768. Install KB5082123. Install KB5082142. Install KB5082200. Install KB5082063. Install KB5083769. Install KB5082052. Install KB5082060. Install KB5082198. Install KB5082127. Install KB5082806. Install ...
@adonisjs/http-server has an Open Redirect vulnerability
Mariner
Chromium: CVE-2026-6307 Type Confusion in Turbofan
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Release Notes
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.