Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
18,986 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
Chromium: CVE-2026-6310 Use after free in Dawn
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Release Notes
Chromium: CVE-2026-6309 Use after free in Viz
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Release Notes
Chromium: CVE-2026-6308 Out of bounds read in Media
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Release Notes
Windows Admin Center Elevation of Privilege Vulnerability
Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges locally.
Release Notes
.NET Framework Denial of Service Vulnerability
Improper input validation in .NET Framework allows an unauthorized attacker to deny service over a network.
Install KB5082411. Install KB5082403. Install KB5082404. Install KB5082414. Install KB5082427. Install KB5082426. Install KB5082413. Install KB5082400. Install KB5082402. Install KB5082425. Install KB5082419. Install ...
Infinite loop in github.com/antchfx/xpath
Mariner
Integer overflow vulnerabilities in InsightSoftwareConsortium/ITK
Mariner
zlib before 1.3.2 allows CPU consumption via crc32_combine64 and crc32_combine_gen64 because x2nmodp can do right shifts within a loop that has no termination condition.
Mariner
CBL-Mariner Releases
FileInfo can escape from a Root in os
Mariner
Libsoup: libsoup: duplicate host header handling causes host-parsing discrepancy (first- vs last-value wins)
Mariner
Handlebars.js has JavaScript Injection via AST Type Confusion when passing an object as dynamic partial
Mariner
Handlebars.js has Denial of Service via Malformed Decorator Syntax in Template Compilation
Mariner
Handlebars.js has JavaScript Injection in CLI Precompiler via Unescaped Names and Options
Mariner
Handlebars.js has JavaScript Injection via AST Type Confusion by tampering @partial-block
Mariner
Forge has Denial of Service via Infinite Loop in BigInteger.modInverse() with Zero Input
Mariner
Forge has a basicConstraints bypass in its certificate chain verification (RFC 5280 violation)
Mariner
Forge has signature forgery in Ed25519 due to missing S > L check
Mariner
Null byte termination in hostnames
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
CBL-Mariner Releases
LIBPNG has ARM NEON Palette Expansion Out-of-Bounds Read on AArch64
Mariner
CBL-Mariner Releases
LIBPNG has use-after-free via pointer aliasing in `png_set_tRNS` and `png_set_PLTE`
Mariner
CBL-Mariner Releases
Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509
Mariner
CBL-Mariner Releases
Libsoup: libsoup: denial of service via use-after-free in soupserver during tls handshake
Mariner
CBL-Mariner Releases
GNU Binutils prdbg.c tg_tag_type return value
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
CBL-Mariner Releases
April 2026 Security Update
Ivanti releases standard security patches on the second Tuesday of every month. Our vulnerability management program is central to our commitment to maintaining secure products. Our philosophy is simple: discovering and communicating vulnerabilities, and sharing that informati...
Ivanti releases standard security patches on the second Tuesday of every month.
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.