Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
16,884Advisories collected
6,314Published or updated in 30 days
6,999Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

16,884 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2022-48667
LowCVSS 3.3

smb3: fix temporary data corruption in insert range

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2022-48667
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-24539
HighCVSS 7.3

Improper sanitization of CSS values in html/template

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 golang 1.21.6-1 on CBL Mariner 2.0, cbl2 msft-golang 1.20.11-1 on CBL Mariner 2.0, cbl2 golang 1.20.7-1 on CBL Mariner 2.0, azl3 golang 1.20.7-1 on Azure Linux 3.0
Fixed versions1.21.6-1, 1.20.11-1, 1.20.7-1
Vendor guidance

CBL-Mariner Releases

CVE-2023-24539
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2021-47432
MediumCVSS 5.5

lib/generic-radix-tree.c: Don't overflow in peek()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2021-47432
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2022-49359
HighCVSS 7.8

drm/panfrost: Job should reference MMU not file_priv

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2022-49359
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-45336
MediumCVSS 7.4

Sensitive headers incorrectly sent after cross-domain redirect in net/http

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 msft-golang 1.23.3-2 on CBL Mariner 2.0, cbl2 golang 1.22.7-2 on CBL Mariner 2.0, azl3 golang 1.23.7-1 on Azure Linux 3.0, azl3 golang 1.23.9-1 on Azure Linux 3.0
Fixed versions1.23.3-2, 1.22.7-2, 1.23.7-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-45336
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2022-49218
HighCVSS 7.1

drm/dp: Fix OOB read when handling Post Cursor2 register

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2022-49218
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2022-49177
MediumCVSS 5.5

hwrng: cavium - fix NULL but dereferenced coccicheck error

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2022-49177
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2022-49134
MediumCVSS 5.5

mlxsw: spectrum: Guard against invalid local ports

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2022-49134
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2022-49342
MediumCVSS 5.5

net: ethernet: bgmac: Fix refcount leak in bcma_mdio_mii_register

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2022-49342
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-29400
HighCVSS 7.3

Improper handling of empty HTML attributes in html/template

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 golang 1.21.6-1 on CBL Mariner 2.0, cbl2 msft-golang 1.20.7-1 on CBL Mariner 2.0, cbl2 golang 1.20.7-1 on CBL Mariner 2.0, azl3 golang 1.20.7-1 on Azure Linux 3.0
Fixed versions1.21.6-1, 1.20.7-1
Vendor guidance

CBL-Mariner Releases

CVE-2023-29400
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2022-48766
MediumCVSS 5.5

drm/amd/display: Wrap dcn301_calculate_wm_and_dlg for FPU.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2022-48766
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-24534
HighCVSS 7.5

Excessive memory allocation in net/http and net/textproto

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 golang 1.21.6-1 on CBL Mariner 2.0, cbl2 msft-golang 1.20.7-1 on CBL Mariner 2.0, cbl2 golang 1.20.7-1 on CBL Mariner 2.0, azl3 golang 1.20.7-1 on Azure Linux 3.0
Fixed versions1.21.6-1, 1.20.7-1
Vendor guidance

CBL-Mariner Releases

CVE-2023-24534
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-24791
HighCVSS 7.5

Denial of service due to improper 100-continue handling in net/http

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 golang 1.22.5-1 on Azure Linux 3.0, azl3 golang 1.27.0-1 on Azure Linux 3.0
Fixed versions1.22.5-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-24791
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-61725
HighCVSS 7.5

Excessive CPU consumption in ParseAddress in net/mail

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 golang 1.22.7-5 on CBL Mariner 2.0, azl3 golang 1.25.3-1 on Azure Linux 3.0, azl3 golang 1.25.5-1 on Azure Linux 3.0, azl3 golang 1.25.6-1 on Azure Linux 3.0
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2025-61725
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-4673
MediumCVSS 6.8

Sensitive headers not cleared on cross-origin redirect in net/http

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscm2 msft-golang 1.24.1-3 on CBL Mariner 2.0, azl3 golang 1.23.10-1 on Azure Linux 3.0, cbl2 golang 1.18.8-8 on CBL Mariner 2.0, cbl2 golang 1.22.7-4 on CBL Mariner 2.0
Fixed versions1.24.1-3, 1.23.10-1, 1.18.8-9, 1.22.7-5
Vendor guidance

CBL-Mariner Releases

CVE-2025-4673
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources