Vendor advisories

Microsoft Security Response Center

Browse 15,972 advisories from this official source. Search by product, CVE, severity, or advisory ID.

Current Checked 4 hours ago Checked every 6 hours

15,972 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2025-39677
MediumCVSS 7.0

net/sched: Fix backlog accounting in qdisc_dequeue_internal

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.96.2-2 on Azure Linux 3.0, azl3 kernel 6.6.112.1-2 on Azure Linux 3.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.117.1-1 on Azure Linux 3.0
Vendor guidance

Release Notes

Microsoft Security Response CenterCVE-2025-22026
MediumCVSS 5.5

nfsd: don't ignore the return code of svc_proc_register()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.96.2-1 on Azure Linux 3.0, azl3 kernel 6.6.96.2-2 on Azure Linux 3.0, azl3 kernel 6.6.112.1-2 on Azure Linux 3.0, azl3 kernel 6.6.117.1-1 on Azure Linux 3.0
Fixed versions6.6.126.1-1
Vendor guidance

CBL-Mariner Releases Release Notes

Microsoft Security Response CenterCVE-2025-29477
LowCVSS 3.3

An issue in fluent-bit v.3.7.2 allows a local attacker to cause a denial of service via the function consume_event.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 fluent-bit 3.0.6-2 on CBL Mariner 2.0, cbl2 fluent-bit 3.0.6-3 on CBL Mariner 2.0, cbl2 fluent-bit 3.0.6-4 on CBL Mariner 2.0, azl3 fluent-bit 3.1.10-4 on Azure Linux 3.0
Vendor guidance

Release Notes

Microsoft Security Response CenterCVE-2025-39705
MediumCVSS 5.5

drm/amd/display: fix a Null pointer dereference vulnerability

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.96.2-1 on Azure Linux 3.0, azl3 kernel 6.6.96.2-2 on Azure Linux 3.0, azl3 kernel 6.6.112.1-2 on Azure Linux 3.0, azl3 kernel 6.6.117.1-1 on Azure Linux 3.0
Vendor guidance

Release Notes

Microsoft Security Response CenterCVE-2025-3010
LowCVSS 3.3

Khronos Group glslang Intermediate.cpp isConversionAllowed null pointer dereference

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 glslang 14.0.0-2 on Azure Linux 3.0
Vendor guidance

Release Notes

Microsoft Security Response CenterCVE-2024-53195
MediumCVSS 5.5

KVM: arm64: Get rid of userspace_irqchip_in_use

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
Vendor guidance

Release Notes

Microsoft Security Response CenterCVE-2024-53219
MediumCVSS 5.5

virtiofs: use pages instead of pointer for kernel direct IO

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.96.2-2 on Azure Linux 3.0, azl3 kernel 6.6.104.2-4 on Azure Linux 3.0, azl3 kernel 6.6.112.1-2 on Azure Linux 3.0, azl3 kernel 6.6.117.1-1 on Azure Linux 3.0
Vendor guidance

Release Notes

Microsoft Security Response CenterCVE-2025-31179
MediumCVSS 6.2

Gnuplot: gnuplot segmentation fault on xstrftime

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 gnuplot 5.4.3-1 on CBL Mariner 2.0, cbl2 gnuplot 5.4.3-1, azl3 gnuplot 5.4.8-1 on Azure Linux 3.0, cbl2 gnuplot 5.4.3-1 on CBL-Mariner 2.0
Vendor guidance

Release Notes

Microsoft Security Response CenterCVE-2025-4035
MediumCVSS 4.3

Libsoup: cookie domain validation bypass via uppercase characters in libsoup

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 libsoup 3.0.4-7 on CBL Mariner 2.0, azl3 libsoup 3.4.4-9 on Azure Linux 3.0, cbl2 libsoup 3.0.4-9 on CBL Mariner 2.0, azl3 libsoup 3.4.4-10 on Azure Linux 3.0
Vendor guidance

Release Notes

Microsoft Security Response CenterCVE-2024-53426
MediumCVSS 6.2

A heap-buffer-overflow vulnerability has been identified in ntopng 6.2 in the Flow::dissectMDNS function.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 ntopng 5.2.1-3 on CBL Mariner 2.0, azl3 ntopng 5.2.1-6 on Azure Linux 3.0, cbl2 ntopng 5.2.1-4, azl3 ntopng 5.2.1-5 on Azure Linux 3.0
Vendor guidance

Release Notes

Microsoft Security Response CenterCVE-2023-52586
HighCVSS 7.0

drm/msm/dpu: Add mutex lock in control vblank irq

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.96.2-1 on Azure Linux 3.0, azl3 kernel 6.6.96.2-2 on Azure Linux 3.0, azl3 kernel 6.6.112.1-2 on Azure Linux 3.0, azl3 kernel 6.6.117.1-1 on Azure Linux 3.0
Vendor guidance

Release Notes

Microsoft Security Response CenterCVE-2024-57798
HighCVSS 7.8

drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.76.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0
Fixed versions6.6.76.1-1
Vendor guidance

CBL-Mariner Releases Release Notes

Microsoft Security Response CenterCVE-2024-37676
MediumCVSS 8.4

An issue in htop-dev htop v.2.20 allows a local attacker to cause an out-of-bounds access in the Header_populateFromSettings function.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 htop 3.0.5-5, cbl2 htop 3.0.5-5 on CBL-Mariner 2.0, azl3 htop 3.2.2-1 on Azure Linux 3.0, cbl2 htop 3.0.5-5 on CBL Mariner 2.0
Vendor guidance

Release Notes CBL-Mariner Releases

Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources