Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
16,884Advisories collected
6,314Published or updated in 30 days
6,999Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

16,884 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2024-24783
MediumCVSS 5.9

Verify panics on certificates with an unknown public key algorithm in crypto/x509

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 golang 1.21.6-1 on CBL Mariner 2.0, cbl2 golang 1.17.13-2 on CBL Mariner 2.0, azl3 golang 1.27.0-1 on Azure Linux 3.0, cbl2 golang 1.18.8-7 on CBL Mariner 2.0
Fixed versions1.21.6-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-24783
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-22874
HighCVSS 7.5

Usage of ExtKeyUsageAny disables policy validation in crypto/x509

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscm2 msft-golang 1.24.1-3 on CBL Mariner 2.0, azl3 golang 1.24.6-1 on Azure Linux 3.0, cbl2 msft-golang 1.24.1-3 on CBL Mariner 2.0, cbl2 msft-golang 1.24.1-3 on CBL-Mariner 2.0
Fixed versions1.24.1-3, 1.24.4-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-22874
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-29409
MediumCVSS 5.3

Large RSA keys can cause high CPU usage in crypto/tls

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 golang 1.18.8-7 on CBL Mariner 2.0, azl3 golang 1.27.0-1 on Azure Linux 3.0, cbl2 golang 1.21.6-1 on CBL Mariner 2.0, cbl2 msft-golang 1.20.7-1 on CBL Mariner 2.0
Fixed versions1.21.6-1, 1.20.7-1
Vendor guidance

CBL-Mariner Releases

CVE-2023-29409
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2022-49333
MediumCVSS 5.5

net/mlx5: E-Switch, pair only capable devices

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2022-49333
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-45290
MediumCVSS 6.5

Memory exhaustion in multipart form parsing in net/textproto and net/http

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 golang 1.18.8-7 on CBL Mariner 2.0, cbl2 golang 1.21.6-1 on CBL Mariner 2.0, cbl2 golang 1.17.13-2 on CBL Mariner 2.0, azl3 golang 1.27.0-1 on Azure Linux 3.0
Fixed versions1.21.6-1
Vendor guidance

CBL-Mariner Releases

CVE-2023-45290
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2022-49306
MediumCVSS 4.4

usb: dwc3: host: Stop setting the ACPI companion

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2022-49306
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2022-49124
MediumCVSS 5.5

x86/mce: Work around an erratum on fast string copy instructions

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2022-49124
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-24787
MediumCVSS 6.4

Arbitrary code execution during build on Darwin in cmd/go

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 msft-golang 1.22.3 on CBL Mariner 2.0, cbl2 msft-golang 1.24.1-2 on CBL Mariner 2.0, azl3 golang 1.24.3-1 on Azure Linux 3.0, cbl2 msft-golang 1.24.1-2 on CBL-Mariner 2.0
Fixed versions1.22.3
Vendor guidance

CBL-Mariner Releases

CVE-2024-24787
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2022-48744
HighCVSS 7.8

net/mlx5e: Avoid field-overflowing memcpy()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2022-48744
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-58189
MediumCVSS 7.5

ALPN negotiation error contains attacker controlled information in crypto/tls

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 golang 1.18.8-10 on CBL Mariner 2.0, cbl2 golang 1.22.7-5 on CBL Mariner 2.0, azl3 golang 1.23.12-1 on Azure Linux 3.0, cbl2 msft-golang 1.24.8-1 on CBL Mariner 2.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2025-58189
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-22870
MediumCVSS 4.4

HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 influxdb 2.6.1-22 on CBL Mariner 2.0, cbl2 golang 1.22.7-4 on CBL Mariner 2.0, cbl2 packer 1.9.5-13 on CBL Mariner 2.0, cbl2 azcopy 10.25.1-5 on CBL Mariner 2.0
Fixed versions2.6.1-22, 1.22.7-4, 1.9.5-11, 10.25.1-4
Vendor guidance

CBL-Mariner Releases

CVE-2025-22870
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2022-49178
MediumCVSS 5.5

memstick/mspro_block: fix handling of read-only devices

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2022-49178
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2022-49138
MediumCVSS 5.7

Bluetooth: hci_event: Ignore multiple conn complete events

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2022-49138
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-0913
MediumCVSS 5.5

Inconsistent handling of O_CREATE|O_EXCL on Unix and Windows in os in syscall

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 golang 1.27.0-1 on Azure Linux 3.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2025-0913
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2021-47658
MediumCVSS 5.5

drm/amd/pm: fix a potential gpu_metrics_table memory leak

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2021-47658
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-47912
MediumCVSS 7.7

Insufficient validation of bracketed IPv6 hostnames in net/url

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 golang 1.18.8-10 on CBL Mariner 2.0, cbl2 golang 1.22.7-5 on CBL Mariner 2.0, cbl2 msft-golang 1.24.8-1 on CBL Mariner 2.0, azl3 golang 1.23.12-1 on Azure Linux 3.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2025-47912
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2022-49234
MediumCVSS 5.5

net: dsa: Avoid cross-chip syncing of VLAN filtering

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2022-49234
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-24536
HighCVSS 7.5

Excessive resource consumption in net/http, net/textproto and mime/multipart

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 golang 1.17.13-2 on CBL Mariner 2.0, cbl2 golang 1.18.8-7 on CBL Mariner 2.0, cbl2 golang 1.21.6-1 on CBL Mariner 2.0, cbl2 msft-golang 1.20.7-1 on CBL Mariner 2.0
Fixed versions1.21.6-1, 1.20.7-1
Vendor guidance

CBL-Mariner Releases

CVE-2023-24536
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2022-48668
LowCVSS 3.3

smb3: fix temporary data corruption in collapse range

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2022-48668
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-58185
MediumCVSS 7.5

Parsing DER payload can cause memory exhaustion in encoding/asn1

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 golang 1.18.8-10 on CBL Mariner 2.0, cbl2 golang 1.22.7-5 on CBL Mariner 2.0, cbl2 msft-golang 1.24.9-1 on CBL Mariner 2.0, azl3 golang 1.25.5-1 on Azure Linux 3.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2025-58185
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources