Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

11Vendor sources
18,986Advisories collected
6,744Published or updated in 30 days
8,727Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

18,986 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2026-23666
CriticalCVSS 7.5

.NET Framework Denial of Service Vulnerability

Improper input validation in .NET Framework allows an unauthorized attacker to deny service over a network.

Affected productsMicrosoft .NET Framework 4.8 on Windows 10 Version 1607 for 32-bit Systems, Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for x64-based Systems, Microsoft .NET Framework 4.8 on Windows Server 2012, Microsoft .NET Framework 4.8 on Windows Server 2012 (Server Core installation)
Fixed versions4.8.4801.0, 2.0.50727.9068 & 3.0.30729.9065 & 4.8.4801.0, 2.0.50727.9181 & 3.0.30729.9165 & 4.8.4801.0, 2.0.50727.9068 & 3.0.30729.9065 & 4.7.4141.0
Vendor guidance

Install KB5082411. Install KB5082403. Install KB5082404. Install KB5082414. Install KB5082427. Install KB5082426. Install KB5082413. Install KB5082400. Install KB5082402. Install KB5082425. Install KB5082419. Install ...

Microsoft Security Response CenterCVE-2025-1220
LowCVSS 3.7

Null byte termination in hostnames

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 php 8.1.33-1 on CBL Mariner 2.0, azl3 php 8.3.23-1 on Azure Linux 3.0, cbl2 php 8.1.32-1 on CBL Mariner 2.0, azl3 php 8.3.29-1 on Azure Linux 3.0
Fixed versions8.1.33-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2025-11839
LowCVSS 3.3

GNU Binutils prdbg.c tg_tag_type return value

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 binutils 2.41-9 on Azure Linux 3.0, azl3 binutils 2.41-10 on Azure Linux 3.0, cbl2 binutils 2.37-17 on CBL Mariner 2.0, cbl2 binutils 2.37-19 on CBL Mariner 2.0
Fixed versions2.41-11, 2.37-20
Vendor guidance

CBL-Mariner Releases

Ivanti Security AdvisoriesIVANTI-APRIL-2026-SECURITY-UPDATE
Severity not listedPriority signal

April 2026 Security Update

Ivanti releases standard security patches on the second Tuesday of every month. Our vulnerability management program is central to our commitment to maintaining secure products. Our philosophy is simple: discovering and communicating vulnerabilities, and sharing that informati...

Vendor guidance

Ivanti releases standard security patches on the second Tuesday of every month.

Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources