CurrentChecked 10 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
11Vendor sources
16,884Advisories collected
6,374Published or updated in 30 days
6,999Marked critical or high
Coverage
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
CurrentChecked 45 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
Check delayedChecked 24 days ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 46 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 45 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked just now
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked just now
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 5 hours ago
Checked every 6 hours
Browse this vendor's advisories
Official source
CurrentChecked just now
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 45 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 11 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
16,884 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
Microsoft Security Response CenterCVE-2026-93207
CriticalCVSS 9.8
SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry
Mariner
Affected productsazl3 kernel 6.6.150.1-1 on Azure Linux 3.0
Fixed versions6.6.157.1-1
Vendor guidance
Release Notes
Citrix Security BulletinsCTX696300
CriticalCVSS 9.3
NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-3055 and CVE-2026-4368
NetScaler ADC and NetScaler Gateway are affected by the vulnerabilities mentioned below:
Affected productsNetScaler ADC and NetScaler Gateway, The following supported versions of NetScaler ADC and NetScaler Gateway are affected by the vulnerabilities: CVE-2026-3055: NetScaler ADC and NetScaler Gateway 14.1 BEFORE 14.1-60.58 NetScaler ADC and NetScaler Gateway 13.1 BEFORE 13.1-62.23 NetScaler ADC FIPS and NDcPP BEFORE 13.1-37.262 CVE-2026-4368: NetScaler ADC and NetScaler Gateway 14.1-66.54 Note: CVE-2026-4368 only impacts build version 14.1-66.54.
Fixed versionsNetScaler ADC and NetScaler Gateway 14.1-66.59 and later releases, NetScaler ADC and NetScaler Gateway 13.1-62.23 and later releases of 13.1, NetScaler ADC 13.1-FIPS and 13.1-NDcPP 13.1.37.262 and later releases of 13.1-FIPS and 13.1-NDcPP
Vendor guidance
CVE 2026-3055 was identified internally through our ongoing security reviews and broader efforts to strengthen the security of the product. Cloud Software Group strongly urges affected customers of NetScaler ADC and N...
Microsoft Security Response CenterCVE-2026-23231
HighCVSS 7.8
netfilter: nf_tables: fix use-after-free in nf_tables_addchain()
Mariner
Affected productscbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.126.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
Fixed versions6.6.130.1-1
Vendor guidance
CBL-Mariner Releases Release Notes
Microsoft Security Response CenterCVE-2026-2297
Medium
SourcelessFileLoader does not use io.open_code()
Mariner
Affected productscbl2 python3 3.9.19-19 on CBL Mariner 2.0, azl3 python3 3.12.9-9 on Azure Linux 3.0, azl3 python3 3.12.9-10 on Azure Linux 3.0, cbl2 python3 3.9.19-19
Fixed versions3.12.9-14
Vendor guidance
CBL-Mariner Releases Release Notes
Microsoft Security Response CenterCVE-2025-10502
HighCVSS 8.8
Chromium: CVE-2025-10502 Heap buffer overflow in ANGLE
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Affected productscbl2 qt5-qtbase 5.12.11-19 on CBL-Mariner 2.0, Microsoft Edge (Chromium-based)
Fixed versions140.0.3485.81
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2026-2443
MediumCVSS 5.3
Libsoup: out-of-bounds read in libsoup handle_partial_get() leading to heap information disclosure
Mariner
Affected productsazl3 libsoup 3.4.4-11 on Azure Linux 3.0, cbl2 libsoup 3.0.4-10 on CBL Mariner 2.0, cbl2 libsoup 3.0.4-12 on CBL Mariner 2.0, azl3 libsoup 3.4.4-14 on Azure Linux 3.0
Fixed versions3.4.4-14, 3.0.4-14, 3.4.4-13
Vendor guidance
CBL-Mariner Releases Release Notes
Microsoft Security Response CenterCVE-2025-39770
MediumCVSS 5.5
net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM
Mariner
Affected productscbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2025-39759
HighCVSS 7.0
btrfs: qgroup: fix race between quota disable and quota rescan ioctl
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Affected productsazl3 kernel 6.6.96.2-2 on Azure Linux 3.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
Fixed versions6.6.104.2-1
Vendor guidance
CBL-Mariner Releases Release Notes
Microsoft Security Response CenterCVE-2025-39764
MediumCVSS 5.5
netfilter: ctnetlink: remove refcounting in expectation dumpers
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Affected productsazl3 kernel 6.6.96.2-2 on Azure Linux 3.0, azl3 kernel 6.6.104.2-4 on Azure Linux 3.0, azl3 kernel 6.6.112.1-2 on Azure Linux 3.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2025-39763
MediumCVSS 5.5
ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Affected productsazl3 kernel 6.6.96.2-2 on Azure Linux 3.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0
Fixed versions6.6.104.2-1
Vendor guidance
CBL-Mariner Releases Release Notes
Microsoft Security Response CenterCVE-2025-39748
MediumCVSS 5.5
bpf: Forget ranges when refining tnum after JSET
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Affected productsazl3 kernel 6.6.96.2-2 on Azure Linux 3.0, azl3 kernel 6.6.112.1-2 on Azure Linux 3.0, azl3 kernel 6.6.117.1-1 on Azure Linux 3.0, azl3 kernel 6.6.119.3-3 on Azure Linux 3.0
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2025-39744
MediumCVSS 5.5
rcu: Fix rcu_read_unlock() deadloop due to IRQ work
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Affected productsazl3 kernel 6.6.96.2-2 on Azure Linux 3.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0
Fixed versions6.6.104.2-1
Vendor guidance
CBL-Mariner Releases Release Notes
Microsoft Security Response CenterCVE-2025-39797
MediumCVSS 6.1
xfrm: Duplicate SPI Handling
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Affected productscbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.96.2-2 on Azure Linux 3.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0
Fixed versions6.6.104.2-1
Vendor guidance
CBL-Mariner Releases Release Notes
Microsoft Security Response CenterCVE-2024-58237
MediumCVSS 5.5
bpf: consider that tail calls invalidate packet pointers
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Affected productsazl3 kernel 6.6.92.2-1 on Azure Linux 3.0, azl3 kernel 6.6.85.1-4 on Azure Linux 3.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0
Fixed versions6.6.92.2-1
Vendor guidance
CBL-Mariner Releases Release Notes
Microsoft Security Response CenterCVE-2024-58100
MediumCVSS 5.5
bpf: check changes_pkt_data property for extension programs
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Affected productsazl3 kernel 6.6.92.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1
Fixed versions6.6.92.2-1
Vendor guidance
CBL-Mariner Releases Release Notes
Microsoft Security Response CenterCVE-2024-58098
MediumCVSS 5.5
bpf: track changes_pkt_data property for global functions
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Affected productsazl3 kernel 6.6.92.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1
Fixed versions6.6.92.2-1
Vendor guidance
CBL-Mariner Releases Release Notes
Microsoft Security Response CenterCVE-2024-56641
MediumCVSS 5.5
net/smc: initialize close_work early to avoid warning
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2024-36911
MediumCVSS 5.5
hv_netvsc: Don't free decrypted memory
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Affected productscbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2024-36909
MediumCVSS 5.5
Drivers: hv: vmbus: Don't free ring buffers that couldn't be re-encrypted
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2023-52732
MediumCVSS 5.5
ceph: blocklist the kclient when receiving corrupted snap trace
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Affected productscbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2024-36914
MediumCVSS 7.1
drm/amd/display: Skip on writeback when it's not applicable
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2025-39789
MediumCVSS 5.5
crypto: x86/aegis - Add missing error checks
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Affected productsazl3 kernel 6.6.96.2-2 on Azure Linux 3.0, azl3 kernel 6.6.104.2-4 on Azure Linux 3.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.119.3-3 on Azure Linux 3.0
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2025-39747
MediumCVSS 5.5
drm/msm: Add error handling for krealloc in metadata setup
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Affected productsazl3 kernel 6.6.96.2-2 on Azure Linux 3.0, azl3 kernel 6.6.112.1-2 on Azure Linux 3.0, azl3 kernel 6.6.117.1-1 on Azure Linux 3.0, azl3 kernel 6.6.119.3-1 on Azure Linux 3.0
Vendor guidance
Release Notes
Microsoft Security Response CenterCVE-2025-39746
MediumCVSS 7.0
wifi: ath10k: shutdown driver when hardware is unreliable
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Affected productsazl3 kernel 6.6.96.2-2 on Azure Linux 3.0, azl3 kernel 6.6.112.1-2 on Azure Linux 3.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.117.1-1 on Azure Linux 3.0
Vendor guidance
Release Notes
Before you act
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.