Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
16,884Advisories collected
6,352Published or updated in 30 days
6,999Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

16,884 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2024-58251
LowCVSS 2.5

In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 busybox 1.36.1-17 on Azure Linux 3.0, azl3 busybox 1.36.1-18 on Azure Linux 3.0, azl3 busybox 1.36.1-19 on Azure Linux 3.0, azl3 busybox 1.36.1-21 on Azure Linux 3.0
Vendor guidance

Release Notes

CVE-2024-58251
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-45927
MediumCVSS 6.2

S-Lang 2.3.2 was discovered to contain an arithmetic exception via the function tt_sprintf().

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 slang 2.3.3-1 on Azure Linux 3.0, cbl2 slang 2.3.2-4 on CBL Mariner 2.0, cbl2 slang 2.3.2-4, cbl2 slang 2.3.2-4 on CBL-Mariner 2.0
Vendor guidance

Release Notes

CVE-2023-45927
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-31724
HighCVSS 7.8

yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function do_directive at /nasm/nasm-pp.c.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 yasm 1.3.0-17 on Azure Linux 3.0
Vendor guidance

Release Notes

CVE-2023-31724
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-38734
MediumCVSS 5.5

net/smc: fix UAF on smcsk after smc_listen_out()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.96.2-1 on Azure Linux 3.0, azl3 kernel 6.6.96.2-2 on Azure Linux 3.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0
Fixed versions6.6.104.2-1
Vendor guidance

CBL-Mariner Releases Release Notes

CVE-2025-38734
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-23167
MediumCVSS 6.5

A flaw in Node.js 20's HTTP parser allows improper termination of HTTP/1 headers using `\r\n\rX` instead of the required `\r\n\r\n`. This inconsistency enables request smuggling, allowing attackers to bypass proxy-based access controls and submit unauthorized requests. The issue was resolved by upgrading `llhttp` to version 9, which enforces correct header termination. Impact: * This vulnerability affects only Node.js 20.x users prior to the `llhttp` v9 upgrade.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 nodejs 20.14.0-9 on Azure Linux 3.0, azl3 fluent-bit 3.1.9-4 on Azure Linux 3.0, cbl2 fluent-bit 3.0.6-2 on CBL Mariner 2.0, cbl2 nodejs18 18.20.3-8 on CBL Mariner 2.0
Vendor guidance

CBL-Mariner Releases Release Notes

CVE-2025-23167
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-38736
MediumCVSS 5.5

net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.96.2-2 on Azure Linux 3.0, azl3 kernel 6.6.96.2-1 on Azure Linux 3.0
Fixed versions6.6.104.2-3
Vendor guidance

Release Notes

CVE-2025-38736
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-39707
MediumCVSS 5.5

drm/amdgpu: check if hubbub is NULL in debugfs/amdgpu_dm_capabilities

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.96.2-2 on Azure Linux 3.0, azl3 kernel 6.6.112.1-2 on Azure Linux 3.0, azl3 kernel 6.6.117.1-1 on Azure Linux 3.0, azl3 kernel 6.6.119.3-3 on Azure Linux 3.0
Vendor guidance

Release Notes

CVE-2025-39707
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-38590
MediumCVSS 4.7

net/mlx5e: Remove skb secpath if xfrm state is not found

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.96.2-1 on Azure Linux 3.0, azl3 kernel 6.6.96.2-2 on Azure Linux 3.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0
Fixed versions6.6.104.2-1
Vendor guidance

CBL-Mariner Releases Release Notes

CVE-2025-38590
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-38250
HighCVSS 7.3

Bluetooth: hci_core: Fix use-after-free in vhci_flush()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.96.2-1 on Azure Linux 3.0, azl3 kernel 6.6.96.2-2 on Azure Linux 3.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0
Fixed versions6.6.104.2-1
Vendor guidance

CBL-Mariner Releases Release Notes

CVE-2025-38250
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-29478
LowCVSS 3.6

An issue in fluent-bit v.3.7.2 allows a local attacker to cause a denial of service via the cfl_list_size in cfl_list.h:165.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 fluent-bit 3.0.6-2 on CBL Mariner 2.0, azl3 fluent-bit 3.1.9-4 on Azure Linux 3.0, cbl2 fluent-bit 3.0.6-3 on CBL Mariner 2.0, cbl2 fluent-bit 3.0.6-4 on CBL Mariner 2.0
Vendor guidance

Release Notes

CVE-2025-29478
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-39677
MediumCVSS 7.0

net/sched: Fix backlog accounting in qdisc_dequeue_internal

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.96.2-2 on Azure Linux 3.0, azl3 kernel 6.6.112.1-2 on Azure Linux 3.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.117.1-1 on Azure Linux 3.0
Vendor guidance

Release Notes

CVE-2025-39677
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-22026
MediumCVSS 5.5

nfsd: don't ignore the return code of svc_proc_register()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.96.2-1 on Azure Linux 3.0, azl3 kernel 6.6.96.2-2 on Azure Linux 3.0, azl3 kernel 6.6.112.1-2 on Azure Linux 3.0, azl3 kernel 6.6.117.1-1 on Azure Linux 3.0
Fixed versions6.6.126.1-1
Vendor guidance

CBL-Mariner Releases Release Notes

CVE-2025-22026
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-29477
LowCVSS 3.3

An issue in fluent-bit v.3.7.2 allows a local attacker to cause a denial of service via the function consume_event.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 fluent-bit 3.0.6-2 on CBL Mariner 2.0, cbl2 fluent-bit 3.0.6-3 on CBL Mariner 2.0, cbl2 fluent-bit 3.0.6-4 on CBL Mariner 2.0, azl3 fluent-bit 3.1.10-4 on Azure Linux 3.0
Vendor guidance

Release Notes

CVE-2025-29477
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-39705
MediumCVSS 5.5

drm/amd/display: fix a Null pointer dereference vulnerability

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.96.2-1 on Azure Linux 3.0, azl3 kernel 6.6.96.2-2 on Azure Linux 3.0, azl3 kernel 6.6.112.1-2 on Azure Linux 3.0, azl3 kernel 6.6.117.1-1 on Azure Linux 3.0
Vendor guidance

Release Notes

CVE-2025-39705
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources