Search threats, CVEs… ⌘K
Vendor advisories

Microsoft Security Response Center

Browse 15,972 advisories from this official source. Search by product, CVE, severity, or advisory ID.

Current Checked 4 hours ago Checked every 6 hours
All vendor sources Official source

15,972 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2025-0913
MediumCVSS 5.5

Inconsistent handling of O_CREATE|O_EXCL on Unix and Windows in os in syscall

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 golang 1.27.0-1 on Azure Linux 3.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2025-0913
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2021-47658
MediumCVSS 5.5

drm/amd/pm: fix a potential gpu_metrics_table memory leak

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2021-47658
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-47912
MediumCVSS 7.7

Insufficient validation of bracketed IPv6 hostnames in net/url

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 golang 1.18.8-10 on CBL Mariner 2.0, cbl2 golang 1.22.7-5 on CBL Mariner 2.0, cbl2 msft-golang 1.24.8-1 on CBL Mariner 2.0, azl3 golang 1.23.12-1 on Azure Linux 3.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2025-47912
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2022-49234
MediumCVSS 5.5

net: dsa: Avoid cross-chip syncing of VLAN filtering

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2022-49234
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-24536
HighCVSS 7.5

Excessive resource consumption in net/http, net/textproto and mime/multipart

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 golang 1.17.13-2 on CBL Mariner 2.0, cbl2 golang 1.18.8-7 on CBL Mariner 2.0, cbl2 golang 1.21.6-1 on CBL Mariner 2.0, cbl2 msft-golang 1.20.7-1 on CBL Mariner 2.0
Fixed versions1.21.6-1, 1.20.7-1
Vendor guidance

CBL-Mariner Releases

CVE-2023-24536
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2022-48668
LowCVSS 3.3

smb3: fix temporary data corruption in collapse range

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2022-48668
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-58185
MediumCVSS 7.5

Parsing DER payload can cause memory exhaustion in encoding/asn1

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 golang 1.18.8-10 on CBL Mariner 2.0, cbl2 golang 1.22.7-5 on CBL Mariner 2.0, cbl2 msft-golang 1.24.9-1 on CBL Mariner 2.0, azl3 golang 1.25.5-1 on Azure Linux 3.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2025-58185
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2022-48667
LowCVSS 3.3

smb3: fix temporary data corruption in insert range

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2022-48667
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-24539
HighCVSS 7.3

Improper sanitization of CSS values in html/template

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 golang 1.21.6-1 on CBL Mariner 2.0, cbl2 msft-golang 1.20.11-1 on CBL Mariner 2.0, cbl2 golang 1.20.7-1 on CBL Mariner 2.0, azl3 golang 1.20.7-1 on Azure Linux 3.0
Fixed versions1.21.6-1, 1.20.11-1, 1.20.7-1
Vendor guidance

CBL-Mariner Releases

CVE-2023-24539
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2021-47432
MediumCVSS 5.5

lib/generic-radix-tree.c: Don't overflow in peek()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2021-47432
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2022-49359
HighCVSS 7.8

drm/panfrost: Job should reference MMU not file_priv

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2022-49359
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-45336
MediumCVSS 7.4

Sensitive headers incorrectly sent after cross-domain redirect in net/http

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 msft-golang 1.23.3-2 on CBL Mariner 2.0, cbl2 golang 1.22.7-2 on CBL Mariner 2.0, azl3 golang 1.23.7-1 on Azure Linux 3.0, azl3 golang 1.23.9-1 on Azure Linux 3.0
Fixed versions1.23.3-2, 1.22.7-2, 1.23.7-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-45336
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2022-49218
HighCVSS 7.1

drm/dp: Fix OOB read when handling Post Cursor2 register

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2022-49218
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2022-49177
MediumCVSS 5.5

hwrng: cavium - fix NULL but dereferenced coccicheck error

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2022-49177
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2022-49134
MediumCVSS 5.5

mlxsw: spectrum: Guard against invalid local ports

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2022-49134
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2022-49342
MediumCVSS 5.5

net: ethernet: bgmac: Fix refcount leak in bcma_mdio_mii_register

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2022-49342
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-29400
HighCVSS 7.3

Improper handling of empty HTML attributes in html/template

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 golang 1.21.6-1 on CBL Mariner 2.0, cbl2 msft-golang 1.20.7-1 on CBL Mariner 2.0, cbl2 golang 1.20.7-1 on CBL Mariner 2.0, azl3 golang 1.20.7-1 on Azure Linux 3.0
Fixed versions1.21.6-1, 1.20.7-1
Vendor guidance

CBL-Mariner Releases

CVE-2023-29400
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2022-48766
MediumCVSS 5.5

drm/amd/display: Wrap dcn301_calculate_wm_and_dlg for FPU.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2022-48766
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-24534
HighCVSS 7.5

Excessive memory allocation in net/http and net/textproto

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 golang 1.21.6-1 on CBL Mariner 2.0, cbl2 msft-golang 1.20.7-1 on CBL Mariner 2.0, cbl2 golang 1.20.7-1 on CBL Mariner 2.0, azl3 golang 1.20.7-1 on Azure Linux 3.0
Fixed versions1.21.6-1, 1.20.7-1
Vendor guidance

CBL-Mariner Releases

CVE-2023-24534
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources