Search threats, CVEs… ⌘K
Vendor advisories

Microsoft Security Response Center

Browse 15,972 advisories from this official source. Search by product, CVE, severity, or advisory ID.

Current Checked 4 hours ago Checked every 6 hours
All vendor sources Official source

15,972 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2025-39716
MediumCVSS 5.5

parisc: Revise __get_user() to probe user read access

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0, azl3 kernel 6.6.96.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0
Fixed versions6.6.104.2-1
Vendor guidance

Release Notes CBL-Mariner Releases

CVE-2025-39716
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-8843
MediumCVSS 5.3

NASM Netwide Assember outmacho.c macho_no_dead_strip heap-based overflow

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 nasm 2.16-2 on CBL-Mariner 2.0, cbl2 nasm 2.16-1 on CBL Mariner 2.0, cbl2 nasm 2.16-2 on CBL Mariner 2.0, azl3 nasm 2.16.01-1 on Azure Linux 3.0
Vendor guidance

Release Notes

CVE-2025-8843
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-38485
HighCVSS 7.8

iio: accel: fxls8962af: Fix use after free in fxls8962af_fifo_flush

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.96.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.96.2-2 on Azure Linux 3.0
Fixed versions6.6.104.2-1
Vendor guidance

CBL-Mariner Releases Release Notes

CVE-2025-38485
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-8842
MediumCVSS 5.3

NASM Netwide Assember preproc.c do_directive use after free

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 nasm 2.16-2 on CBL-Mariner 2.0, cbl2 nasm 2.16-1 on CBL Mariner 2.0, azl3 nasm 2.16.01-1 on Azure Linux 3.0, cbl2 nasm 2.16-2 on CBL Mariner 2.0
Vendor guidance

Release Notes

CVE-2025-8842
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53234
LowCVSS 3.3

erofs: handle NONHEAD !delta[1] lclusters gracefully

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
Vendor guidance

Release Notes

CVE-2024-53234
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-58251
LowCVSS 2.5

In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 busybox 1.36.1-17 on Azure Linux 3.0, azl3 busybox 1.36.1-18 on Azure Linux 3.0, azl3 busybox 1.36.1-19 on Azure Linux 3.0, azl3 busybox 1.36.1-21 on Azure Linux 3.0
Vendor guidance

Release Notes

CVE-2024-58251
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-45927
MediumCVSS 6.2

S-Lang 2.3.2 was discovered to contain an arithmetic exception via the function tt_sprintf().

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 slang 2.3.3-1 on Azure Linux 3.0, cbl2 slang 2.3.2-4 on CBL Mariner 2.0, cbl2 slang 2.3.2-4, cbl2 slang 2.3.2-4 on CBL-Mariner 2.0
Vendor guidance

Release Notes

CVE-2023-45927
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-31724
HighCVSS 7.8

yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function do_directive at /nasm/nasm-pp.c.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 yasm 1.3.0-17 on Azure Linux 3.0
Vendor guidance

Release Notes

CVE-2023-31724
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-38734
MediumCVSS 5.5

net/smc: fix UAF on smcsk after smc_listen_out()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.96.2-1 on Azure Linux 3.0, azl3 kernel 6.6.96.2-2 on Azure Linux 3.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0
Fixed versions6.6.104.2-1
Vendor guidance

CBL-Mariner Releases Release Notes

CVE-2025-38734
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-23167
MediumCVSS 6.5

A flaw in Node.js 20's HTTP parser allows improper termination of HTTP/1 headers using `\r\n\rX` instead of the required `\r\n\r\n`. This inconsistency enables request smuggling, allowing attackers to bypass proxy-based access controls and submit unauthorized requests. The issue was resolved by upgrading `llhttp` to version 9, which enforces correct header termination. Impact: * This vulnerability affects only Node.js 20.x users prior to the `llhttp` v9 upgrade.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 nodejs 20.14.0-9 on Azure Linux 3.0, azl3 fluent-bit 3.1.9-4 on Azure Linux 3.0, cbl2 fluent-bit 3.0.6-2 on CBL Mariner 2.0, cbl2 nodejs18 18.20.3-8 on CBL Mariner 2.0
Vendor guidance

CBL-Mariner Releases Release Notes

CVE-2025-23167
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-38736
MediumCVSS 5.5

net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.96.2-2 on Azure Linux 3.0, azl3 kernel 6.6.96.2-1 on Azure Linux 3.0
Fixed versions6.6.104.2-3
Vendor guidance

Release Notes

CVE-2025-38736
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-39707
MediumCVSS 5.5

drm/amdgpu: check if hubbub is NULL in debugfs/amdgpu_dm_capabilities

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.96.2-2 on Azure Linux 3.0, azl3 kernel 6.6.112.1-2 on Azure Linux 3.0, azl3 kernel 6.6.117.1-1 on Azure Linux 3.0, azl3 kernel 6.6.119.3-3 on Azure Linux 3.0
Vendor guidance

Release Notes

CVE-2025-39707
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-38590
MediumCVSS 4.7

net/mlx5e: Remove skb secpath if xfrm state is not found

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.96.2-1 on Azure Linux 3.0, azl3 kernel 6.6.96.2-2 on Azure Linux 3.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0
Fixed versions6.6.104.2-1
Vendor guidance

CBL-Mariner Releases Release Notes

CVE-2025-38590
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-38250
HighCVSS 7.3

Bluetooth: hci_core: Fix use-after-free in vhci_flush()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.96.2-1 on Azure Linux 3.0, azl3 kernel 6.6.96.2-2 on Azure Linux 3.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0
Fixed versions6.6.104.2-1
Vendor guidance

CBL-Mariner Releases Release Notes

CVE-2025-38250
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-29478
LowCVSS 3.6

An issue in fluent-bit v.3.7.2 allows a local attacker to cause a denial of service via the cfl_list_size in cfl_list.h:165.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 fluent-bit 3.0.6-2 on CBL Mariner 2.0, azl3 fluent-bit 3.1.9-4 on Azure Linux 3.0, cbl2 fluent-bit 3.0.6-3 on CBL Mariner 2.0, cbl2 fluent-bit 3.0.6-4 on CBL Mariner 2.0
Vendor guidance

Release Notes

CVE-2025-29478
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources