Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
16,884Advisories collected
6,352Published or updated in 30 days
6,999Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

16,884 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2025-38248
HighCVSS 7.6

bridge: mcast: Fix use-after-free during router port configuration

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.96.2-1 on Azure Linux 3.0, azl3 kernel 6.6.96.2-2 on Azure Linux 3.0, azl3 kernel 6.6.112.1-2 on Azure Linux 3.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0
Vendor guidance

Release Notes

CVE-2025-38248
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-12058
Medium

Vulnerability in Keras Model.load_model Leading to Arbitrary Local File Loading and SSRF

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 keras 2.11.0-3 on CBL-Mariner 2.0, azl3 keras 3.3.3-5 on Azure Linux 3.0, azl3 keras 3.3.3-6 on Azure Linux 3.0, azl3 keras 3.3.3-7 on Azure Linux 3.0
Vendor guidance

Release Notes

CVE-2025-12058
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-61724
MediumCVSS 7.5

Excessive CPU consumption in Reader.ReadResponse in net/textproto

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 msft-golang 1.25.8-1 on CBL-Mariner 2.0, cbl2 msft-golang 1.24.8-1 on CBL Mariner 2.0, cbl2 msft-golang 1.24.9-1 on CBL Mariner 2.0, cbl2 msft-golang 1.24.11-1 on CBL Mariner 2.0
Vendor guidance

Release Notes

CVE-2025-61724
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-58188
HighCVSS 7.5

Panic when validating certificates with DSA public keys in crypto/x509

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 msft-golang 1.25.8-1 on CBL-Mariner 2.0, cbl2 golang 1.18.8-10 on CBL Mariner 2.0, cbl2 golang 1.22.7-5 on CBL Mariner 2.0, azl3 golang 1.25.3-1 on Azure Linux 3.0
Vendor guidance

Release Notes

CVE-2025-58188
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-58186
MediumCVSS 5.3

Lack of limit when parsing cookies can cause memory exhaustion in net/http

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 msft-golang 1.25.8-1 on CBL-Mariner 2.0, cbl2 golang 1.18.8-10 on CBL Mariner 2.0, azl3 golang 1.23.12-1 on Azure Linux 3.0, cbl2 msft-golang 1.24.9-1 on CBL Mariner 2.0
Vendor guidance

Release Notes

CVE-2025-58186
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21831
MediumCVSS 5.5

PCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen1

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1
Vendor guidance

Release Notes

CVE-2025-21831
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-58053
MediumCVSS 5.5

rxrpc: Fix handling of received connection abort

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
Vendor guidance

Release Notes

CVE-2024-58053
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-57924
MediumCVSS 5.5

fs: relax assertions on failure to encode file handles

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0
Vendor guidance

Release Notes

CVE-2024-57924
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-26869
MediumCVSS 4.7

f2fs: fix to truncate meta inode pages forcely

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
Vendor guidance

Release Notes

CVE-2024-26869
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-26853
MediumCVSS 5.5

igc: avoid returning frame twice in XDP_REDIRECT

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1
Vendor guidance

Release Notes

CVE-2024-26853
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-26830
MediumCVSS 6.3

i40e: Do not allow untrusted VF to remove administratively set MAC

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
Vendor guidance

Release Notes

CVE-2024-26830
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-26759
MediumCVSS 5.5

mm/swap: fix race when skipping swapcache

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0
Vendor guidance

Release Notes

CVE-2024-26759
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-26706
MediumCVSS 5.5

parisc: Fix random data corruption from exception handler

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1
Vendor guidance

Release Notes

CVE-2024-26706
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-26865
HighCVSS 7.8

rds: tcp: Fix use-after-free of net in reqsk_timer_handler().

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
Vendor guidance

Release Notes

CVE-2024-26865
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-26792
HighCVSS 7.8

btrfs: fix double free of anonymous device after snapshot creation failure

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
Vendor guidance

Release Notes

CVE-2024-26792
Read the vendor advisory Watch this product
Ubuntu Security NoticesUSN-8847-2
Severity not listed

USN-8847-2: OpenSSL vulnerabilities

USN-8847-1 fixed vulnerabilities in OpenSSL. This update provides the corresponding fix for OpenSSL on Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. Original advisory details: It was discovered that OpenSSL incorrectly handled certain certificate r...

Vendor guidance

USN-8847-1 fixed vulnerabilities in OpenSSL.

CVE-2026-35189CVE-2026-54872CVE-2026-77696CVE-2026-84782
Read the vendor advisory
Ubuntu Security NoticesUSN-8847-1
Severity not listed

USN-8847-1: OpenSSL vulnerabilities

It was discovered that OpenSSL incorrectly handled certain certificate revocation list distribution point names. An attacker could possibly use this issue to cause OpenSSL to consume excessive memory, resulting in a denial of service. (CVE-2026-35189) It was discovered that Op...

CVE-2026-35189CVE-2026-35191CVE-2026-54872CVE-2026-54875CVE-2026-72897CVE-2026-75804
Read the vendor advisory
Ubuntu Security NoticesUSN-8844-1
Severity not listed

USN-8844-1: c-ares vulnerability

It was discovered that c-ares incorrectly handled certain query completion callbacks. An attacker could possibly use this issue to trigger a use- after-free or double-free, resulting in a denial of service or arbitrary code execution.

Read the vendor advisory
Ubuntu Security NoticesUSN-8843-1
Severity not listed

USN-8843-1: FreeIPMI vulnerabilities

It was discovered that FreeIPMI incorrectly handled certain malformed Fujitsu SEL long-text responses, leading to a stack-based buffer overflow. An attacker in control of a malicious IPMI device could possibly use this issue to cause FreeIPMI to crash, resulting in a denial of...

CVE-2026-85504CVE-2026-85505CVE-2026-85506CVE-2026-85508CVE-2026-85507CVE-2026-85509
Read the vendor advisory
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources