Vendor Security Advisory
A vendor security advisory is a vendor's official notice of a vulnerability in its product, listing affected and fixed versions, workarounds and sometimes indicators of compromise. It is the primary source for patch decisions.