Search threats, CVEs… ⌘K
Vendor advisories

Microsoft Security Response Center

Browse 15,972 advisories from this official source. Search by product, CVE, severity, or advisory ID.

Current Checked 4 hours ago Checked every 6 hours
All vendor sources Official source

15,972 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2023-29406
MediumCVSS 6.5

Insufficient sanitization of Host header in net/http

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 golang 1.17.13-2 on CBL Mariner 2.0, cbl2 golang 1.21.6-1 on CBL Mariner 2.0, cbl2 msft-golang 1.20.7-1 on CBL Mariner 2.0, cbl2 golang 1.20.7-1 on CBL Mariner 2.0
Fixed versions1.21.6-1, 1.20.7-1
Vendor guidance

CBL-Mariner Releases

CVE-2023-29406
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-45341
MediumCVSS 6.1

Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 golang 1.18.8-5 on CBL Mariner 2.0, cbl2 golang 1.22.7-2 on CBL Mariner 2.0, cbl2 msft-golang 1.23.3-2 on CBL Mariner 2.0, cbl2 msft-golang 1.24.1-3 on CBL Mariner 2.0
Fixed versions1.18.8-5, 1.22.7-2, 1.23.3-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-45341
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-24788
MediumCVSS 5.9

Malformed DNS message can cause infinite loop in net

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 golang 1.22.3 on CBL Mariner 2.0, cbl2 golang 1.22.3-1 on CBL Mariner 2.0, cbl2 msft-golang 1.22.3 on CBL Mariner 2.0, azl3 golang 1.22.3-1 on Azure Linux 3.0
Fixed versions1.22.3, 1.22.3-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-24788
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-61729
HighCVSS 7.5

Excessive resource consumption when printing error string for host certificate validation in crypto/x509

Mariner

Affected productsazl3 golang 1.25.5-1 on Azure Linux 3.0, cbl2 msft-golang 1.24.13-1 on CBL Mariner 2.0, azl3 golang 1.26.0-1 on Azure Linux 3.0, azl3 golang 1.25.7-1 on Azure Linux 3.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2025-61729
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-24783
MediumCVSS 5.9

Verify panics on certificates with an unknown public key algorithm in crypto/x509

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 golang 1.21.6-1 on CBL Mariner 2.0, cbl2 golang 1.17.13-2 on CBL Mariner 2.0, azl3 golang 1.27.0-1 on Azure Linux 3.0, cbl2 golang 1.18.8-7 on CBL Mariner 2.0
Fixed versions1.21.6-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-24783
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-22874
HighCVSS 7.5

Usage of ExtKeyUsageAny disables policy validation in crypto/x509

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscm2 msft-golang 1.24.1-3 on CBL Mariner 2.0, azl3 golang 1.24.6-1 on Azure Linux 3.0, cbl2 msft-golang 1.24.1-3 on CBL Mariner 2.0, cbl2 msft-golang 1.24.1-3 on CBL-Mariner 2.0
Fixed versions1.24.1-3, 1.24.4-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-22874
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-29409
MediumCVSS 5.3

Large RSA keys can cause high CPU usage in crypto/tls

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 golang 1.18.8-7 on CBL Mariner 2.0, azl3 golang 1.27.0-1 on Azure Linux 3.0, cbl2 golang 1.21.6-1 on CBL Mariner 2.0, cbl2 msft-golang 1.20.7-1 on CBL Mariner 2.0
Fixed versions1.21.6-1, 1.20.7-1
Vendor guidance

CBL-Mariner Releases

CVE-2023-29409
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2022-49333
MediumCVSS 5.5

net/mlx5: E-Switch, pair only capable devices

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2022-49333
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-45290
MediumCVSS 6.5

Memory exhaustion in multipart form parsing in net/textproto and net/http

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 golang 1.18.8-7 on CBL Mariner 2.0, cbl2 golang 1.21.6-1 on CBL Mariner 2.0, cbl2 golang 1.17.13-2 on CBL Mariner 2.0, azl3 golang 1.27.0-1 on Azure Linux 3.0
Fixed versions1.21.6-1
Vendor guidance

CBL-Mariner Releases

CVE-2023-45290
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2022-49306
MediumCVSS 4.4

usb: dwc3: host: Stop setting the ACPI companion

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2022-49306
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2022-49124
MediumCVSS 5.5

x86/mce: Work around an erratum on fast string copy instructions

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2022-49124
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-24787
MediumCVSS 6.4

Arbitrary code execution during build on Darwin in cmd/go

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 msft-golang 1.22.3 on CBL Mariner 2.0, cbl2 msft-golang 1.24.1-2 on CBL Mariner 2.0, azl3 golang 1.24.3-1 on Azure Linux 3.0, cbl2 msft-golang 1.24.1-2 on CBL-Mariner 2.0
Fixed versions1.22.3
Vendor guidance

CBL-Mariner Releases

CVE-2024-24787
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2022-48744
HighCVSS 7.8

net/mlx5e: Avoid field-overflowing memcpy()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2022-48744
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-58189
MediumCVSS 7.5

ALPN negotiation error contains attacker controlled information in crypto/tls

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 golang 1.18.8-10 on CBL Mariner 2.0, cbl2 golang 1.22.7-5 on CBL Mariner 2.0, azl3 golang 1.23.12-1 on Azure Linux 3.0, cbl2 msft-golang 1.24.8-1 on CBL Mariner 2.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2025-58189
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-22870
MediumCVSS 4.4

HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 influxdb 2.6.1-22 on CBL Mariner 2.0, cbl2 golang 1.22.7-4 on CBL Mariner 2.0, cbl2 packer 1.9.5-13 on CBL Mariner 2.0, cbl2 azcopy 10.25.1-5 on CBL Mariner 2.0
Fixed versions2.6.1-22, 1.22.7-4, 1.9.5-11, 10.25.1-4
Vendor guidance

CBL-Mariner Releases

CVE-2025-22870
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2022-49178
MediumCVSS 5.5

memstick/mspro_block: fix handling of read-only devices

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2022-49178
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2022-49138
MediumCVSS 5.7

Bluetooth: hci_event: Ignore multiple conn complete events

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2022-49138
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources