Search threats, CVEs… ⌘K
Vendor advisories

Microsoft Security Response Center

Browse 15,972 advisories from this official source. Search by product, CVE, severity, or advisory ID.

Current Checked 2 hours ago Checked every 6 hours
All vendor sources Official source

15,972 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2025-38125
MediumCVSS 7.0

net: stmmac: make sure that ptp_rate is not 0 before configuring EST

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.96.2-2 on Azure Linux 3.0, azl3 kernel 6.6.104.2-4 on Azure Linux 3.0, azl3 kernel 6.6.112.1-2 on Azure Linux 3.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0
Vendor guidance

Release Notes

CVE-2025-38125
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-38117
MediumCVSS 5.5

Bluetooth: MGMT: Protect mgmt_pending list with its own lock

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.96.1-1 on Azure Linux 3.0, azl3 kernel 6.6.92.2-2 on Azure Linux 3.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0
Fixed versions6.6.96.1-1
Vendor guidance

CBL-Mariner Releases Release Notes

CVE-2025-38117
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-35931
MediumCVSS 5.5

drm/amdgpu: Skip do PCI error slot reset during RAS recovery

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.96.2-2 on Azure Linux 3.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.112.1-2 on Azure Linux 3.0, azl3 kernel 6.6.117.1-1 on Azure Linux 3.0
Vendor guidance

Release Notes

CVE-2024-35931
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42118
MediumCVSS 7.8

drm/amd/display: Do not return negative stream id for array

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.96.2-2 on Azure Linux 3.0, azl3 kernel 6.6.104.2-4 on Azure Linux 3.0, azl3 kernel 6.6.112.1-2 on Azure Linux 3.0, azl3 kernel 6.6.117.1-1 on Azure Linux 3.0
Vendor guidance

Release Notes

CVE-2024-42118
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-38105
MediumCVSS 7.0

ALSA: usb-audio: Kill timer properly at removal

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.96.2-1 on Azure Linux 3.0, azl3 kernel 6.6.96.2-2 on Azure Linux 3.0, azl3 kernel 6.6.104.2-4 on Azure Linux 3.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0
Fixed versions6.6.112.1-1
Vendor guidance

CBL-Mariner Releases Release Notes

CVE-2025-38105
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-37834
MediumCVSS 5.5

mm/vmscan: don't try to reclaim hwpoison folio

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.96.2-1 on Azure Linux 3.0, azl3 kernel 6.6.96.2-2 on Azure Linux 3.0, azl3 kernel 6.6.112.1-2 on Azure Linux 3.0, azl3 kernel 6.6.117.1-1 on Azure Linux 3.0
Vendor guidance

Release Notes

CVE-2025-37834
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-37903
HighCVSS 7.0

drm/amd/display: Fix slab-use-after-free in hdcp

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.92.2-1 on Azure Linux 3.0, azl3 kernel 6.6.85.1-4 on Azure Linux 3.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0
Fixed versions6.6.92.2-1
Vendor guidance

CBL-Mariner Releases Release Notes

CVE-2025-37903
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-37980
MediumCVSS 5.5

block: fix resource leak in blk_register_queue() error path

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.92.2-1 on Azure Linux 3.0, azl3 kernel 6.6.85.1-4 on Azure Linux 3.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0
Fixed versions6.6.92.2-1
Vendor guidance

CBL-Mariner Releases Release Notes

CVE-2025-37980
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-37957
MediumCVSS 5.5

KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.92.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0
Fixed versions6.6.92.2-1
Vendor guidance

CBL-Mariner Releases Release Notes

CVE-2025-37957
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-26819
LowCVSS 2.9

cJSON 1.7.15 might allow a denial of service via a crafted JSON document such as {"a": true, "b": [ null,9999999999999999999999999999999999999999999999912345678901234567]}.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 ceph 18.2.2-10 on Azure Linux 3.0, azl3 libglvnd 1.7.0-3 on Azure Linux 3.0, azl3 ceph 18.2.2-11 on Azure Linux 3.0, azl3 ceph 18.2.2-13 on Azure Linux 3.0
Fixed versions1.7.0-3
Vendor guidance

CBL-Mariner Releases Release Notes

CVE-2023-26819
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-86137
LowCVSS 2.9

In libxml2 before 2.15.4, xmlFAParsePosCharGroup has an out-of-bounds read, aka an out-of-bounds read in the NXT macro in xmlregexp.

Mariner

Affected productsazl3 libxml2 2.11.5-10 on Azure Linux 3.0, azl3 libxml2 2.11.5-11 on Azure Linux 3.0
Fixed versions2.11.5-11
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2026-86137
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-86142
MediumCVSS 6.9

In libxml2 before 2.15.4, there is a heap-based buffer overflow in xmlXPtrEvalXPtrPart because of xmlXPtrEval xpointer length saturation.

Mariner

Affected productsazl3 libxml2 2.11.5-10 on Azure Linux 3.0, azl3 libxml2 2.11.5-11 on Azure Linux 3.0
Fixed versions2.11.5-11
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2026-86142
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-86138
MediumCVSS 6.9

In libxml2 before 2.15.4, xmlDictAddQString in dict.c has an integer overflow and resultant heap-based buffer overflow.

Mariner

Affected productsazl3 libxml2 2.11.5-10 on Azure Linux 3.0, azl3 libxml2 2.11.5-11 on Azure Linux 3.0
Fixed versions2.11.5-11
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2026-86138
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21750
MediumCVSS 5.5

wifi: brcmfmac: Check the return value of of_property_read_string_index()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2025-21750
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21738
MediumCVSS 5.5

ata: libata-sff: Ensure that we cannot write outside the allocated buffer

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2025-21738
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21816
MediumCVSS 5.5

hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2025-21816
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21712
MediumCVSS 5.5

md/md-bitmap: Synchronize bitmap_get_stats() with bitmap lifetime

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2025-21712
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-57993
MediumCVSS 5.5

HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint check

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2024-57993
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources