Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
16,656 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
ext4: check dir entry fits before reading the hash trailer in ext4_search_dir()
Mariner
Release Notes
Panic parsing crafted input in x/text/secure/precis in golang.org/x/text
Mariner
Release Notes
ext4: fix out-of-bounds read in ext4_read_inline_dir()
Mariner
Release Notes
fs/ntfs3: fix out-of-bounds read of INDEX_ROOT in reparse/objid init
Mariner
Release Notes
SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6
Mariner
Release Notes
xfrm6: fix out-of-bounds write in xfrm6_input_addr() when secpath is full
Mariner
Release Notes
fs/ntfs3: fix out-of-bounds read in read_log_rec_buf()
Mariner
Release Notes
fs/ntfs3: validate ef->size covers the record's name and value
Mariner
Release Notes
isofs: fix out-of-bounds page array access on empty zisofs block
Mariner
Release Notes
vfio/pci: clear vdev->msi_perm after freeing it on init failure
Mariner
Release Notes
Apache HTTP Server: mod_proxy_html: crash in dump_content
Mariner
Release Notes
libexpat before 2.8.2 does not consider XML_TOK_DATA_CHARS in doCdataSection and thus lacks handler call depth tracking for various calls from within handlers in cases of a policy violation. Thus, a use-after-free can occur. NOTE: this issue exists because of an incomplete fix for CVE-2026-50219.
Mariner
CBL-Mariner Releases
mm/mglru: fix and remove redundant unevictable folio handling
Mariner
Release Notes
mm/migrate_device: clear stale mapping after freeing swapcache
Mariner
Release Notes
xmlwf in libexpat before 2.8.2 has an integer overflow in endDoctypeDecl via NOTATION declarations.
Mariner
CBL-Mariner Releases
xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId.
Mariner
CBL-Mariner Releases
lockd, nfsd: RCU-protect nlmsvc_ops dispatch
Mariner
Release Notes
xmlwf in libexpat before 2.8.2 has an integer overflow for the output filename when -d outputDir is used.
Mariner
CBL-Mariner Releases
nfsd: fix clock domain mismatch in clients_still_reclaiming()
Mariner
Release Notes
libexpat before 2.8.2 has an integer overflow in doProlog that is related to storeEntityValue and entity textLen.
Mariner
CBL-Mariner Releases
NFSD: Prevent client use-after-free during delegation revoke
Mariner
Release Notes
libexpat before 2.8.2 has an integer overflow in XML_ParseBuffer because it lacked a check that was present in XML_Parse.
Mariner
CBL-Mariner Releases
ceph: cap delegated inode count in ceph_parse_deleg_inos()
Mariner
Release Notes
cifs: call pagecache_isize_extended() in cifs_setsize() when extending
Mariner
Release Notes
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.