Vendor advisories

Microsoft Security Response Center

Browse 15,977 advisories from this official source. Search by product, CVE, severity, or advisory ID.

Current Checked 2 hours ago Checked every 6 hours

15,977 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2023-39130
MediumCVSS 5.5

GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap buffer overflow via the function pe_as16() at /gdb/coff-pe-read.c.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 gdb 11.2-3 on CBL Mariner 2.0, cbl2 crash 8.0.1-3 on CBL Mariner 2.0, azl3 gdb 13.2-3 on Azure Linux 3.0, azl3 crash 8.0.4-3 on Azure Linux 3.0
Fixed versions11.2-3, 8.0.1-3, 13.2-3, 8.0.4-3
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2023-39129
MediumCVSS 5.5

GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap use after free via the function add_pe_exported_sym() at /gdb/coff-pe-read.c.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 crash 8.0.4-4 on Azure Linux 3.0, cbl2 gdb 11.2-3 on CBL Mariner 2.0, cbl2 crash 8.0.1-3 on CBL Mariner 2.0, azl3 gdb 13.2-3 on Azure Linux 3.0
Fixed versions8.0.4-3, 11.2-3, 8.0.1-3, 13.2-3
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2023-45929
MediumCVSS 6.2

S-Lang 2.3.2 was discovered to contain a segmentation fault via the function fixup_tgetstr().

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 slang 2.3.3-1 on Azure Linux 3.0, cbl2 slang 2.3.2-4 on CBL Mariner 2.0, cbl2 slang 2.3.2-4 on CBL-Mariner 2.0
Microsoft Security Response CenterCVE-2023-39128
MediumCVSS 5.5

GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a stack overflow via the function ada_decode at /gdb/ada-lang.c.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 crash 8.0.4-4 on Azure Linux 3.0, azl3 gdb 13.2-4 on Azure Linux 3.0, cbl2 gdb 11.2-3 on CBL Mariner 2.0, cbl2 crash 8.0.1-3 on CBL Mariner 2.0
Fixed versions8.0.4-3, 13.2-3, 11.2-3, 8.0.1-3
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-28863
MediumCVSS 6.5

node-tar vulnerable to denial of service while parsing a tar file due to lack of folders count validation

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 reaper 3.1.1-17 on CBL Mariner 2.0, cbl2 nodejs18 18.20.3-1 on CBL Mariner 2.0, azl3 nodejs 20.14.0-1 on Azure Linux 3.0, cbl2 reaper 3.1.1-18 on CBL Mariner 2.0
Fixed versions3.1.1-17, 18.20.3-1, 20.14.0-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-0901
HighCVSS 7.5

SEGV and out of bounds memory read from malicious packet

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 mariadb 10.11.6-3 on Azure Linux 3.0
Fixed versions10.11.6-3
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2023-52752
HighCVSS 7.8

smb: client: fix use-after-free bug in cifs_debug_data_proc_show()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0
Fixed versions5.15.167.1-2
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-28835
MediumCVSS 5.0

Gnutls: potential crash during chain building/verification

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 gnutls 3.7.11-1 on CBL Mariner 2.0, azl3 gnutls 3.8.3-2 on Azure Linux 3.0, azl3 gnutls 3.8.3-4 on Azure Linux 3.0
Fixed versions3.7.11-1, 3.8.3-2
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-28834
MediumCVSS 5.3

Gnutls: vulnerable to minerva side-channel information leak

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 gnutls 3.7.11-1 on CBL Mariner 2.0, azl3 gnutls 3.8.3-2 on Azure Linux 3.0, azl3 gnutls 3.8.3-4 on Azure Linux 3.0
Fixed versions3.7.11-1, 3.8.3-2
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-30204
LowCVSS 2.8

In Emacs before 29.3, LaTeX preview is enabled by default for e-mail attachments.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 emacs 29.3 on Azure Linux 3.0
Fixed versions29.3
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-2004
LowCVSS 3.5

Usage of disabled protocol

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mysql 8.0.40-1 on CBL Mariner 2.0, cbl2 curl 8.8.0-1 on CBL Mariner 2.0, azl3 mysql 8.0.40-1 on Azure Linux 3.0, azl3 curl 8.8.0-1 on Azure Linux 3.0
Fixed versions8.0.40-1, 8.8.0-1, 3.30.3-2
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2020-28163
MediumCVSS 6.5

libdwarf before 20201201 allows a dwarf_print_lines.c NULL pointer dereference and application crash via a DWARF5 line-table header that has an invalid FORM for a pathname.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 libdwarf 0.9.0 on CBL Mariner 2.0, azl3 libdwarf 0.9.0-1 on Azure Linux 3.0
Fixed versions0.9.0, 0.9.0-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2020-27545
MediumCVSS 6.5

libdwarf before 20201017 has a one-byte out-of-bounds read because of an invalid pointer dereference via an invalid line table in a crafted object.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 libdwarf 0.9.0 on CBL Mariner 2.0, azl3 libdwarf 0.9.0-1 on Azure Linux 3.0
Fixed versions0.9.0, 0.9.0-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2023-28320
MediumCVSS 5.9

A denial of service vulnerability exists in curl

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 rust 1.72.0-2 on CBL Mariner 2.0, cbl2 mysql 8.0.34-1 on CBL Mariner 2.0, cbl2 curl 8.2.1-1 on CBL Mariner 2.0, cbl2 cmake 3.21.4-11 on CBL Mariner 2.0
Fixed versions1.72.0-2, 8.0.34-1, 8.2.1-1, 3.21.4-11
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-2398
HighCVSS 8.6

HTTP/2 push headers memory-leak

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 curl 8.8.0-1 on CBL Mariner 2.0, cbl2 cmake 3.21.4-14 on CBL Mariner 2.0, azl3 curl 8.8.0-1 on Azure Linux 3.0, azl3 cmake 3.30.3-2 on Azure Linux 3.0
Fixed versions8.8.0-1, 3.21.4-14, 3.30.3-2
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2023-28322
LowCVSS 3.7

An information disclosure vulnerability exists in curl

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 tensorflow 2.11.1-1 on Azure Linux 3.0, cm1 curl 7.88.1-2 on CBL Mariner 1.0, cbl2 curl 8.0.1-2 on CBL Mariner 2.0, cbl2 cmake 3.21.4-6 on CBL Mariner 2.0
Fixed versions2.16.1-1, 7.88.1-2, 8.0.1-2, 3.21.4-6
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-4603
MediumCVSS 5.3

Excessive time spent checking DSA keys and parameters

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 hvloader 1.0.1-6 on CBL Mariner 2.0, cbl2 cloud-hypervisor-cvm 38.0.72.2-1 on CBL Mariner 2.0, azl3 cloud-hypervisor-cvm 38.0.72.2-1 on Azure Linux 3.0, azl3 edk2 20240524git3e722403cd16-8 on Azure Linux 3.0
Fixed versions1.0.1-6, -, 20240524git3e722403cd16-8, 20.14.0-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-28849
MediumCVSS 6.5

Proxy-Authorization header kept across hosts in follow-redirects

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 reaper 3.1.1-9 on CBL Mariner 2.0, cbl2 reaper 3.1.1-8 on CBL Mariner 2.0
Fixed versions3.1.1-9
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-4068
HighCVSS 7.5

Memory Exhaustion in braces

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 reaper 3.1.1-9 on CBL Mariner 2.0, cbl2 reaper 3.1.1-8 on CBL Mariner 2.0
Fixed versions3.1.1-9
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-22017
HighCVSS 7.3

setuid() does not affect libuv's internal io_uring operations if initialized before the call to setuid(). This allows the process to perform privileged operations despite presumably having dropped such privileges through a call to setuid(). This vulnerability affects all users using version greater or equal than Node.js 18.18.0 Node.js 20.4.0 and Node.js 21.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 nodejs 20.14.0-1 on Azure Linux 3.0, azl3 libuv 1.48.0-1 on Azure Linux 3.0, azl3 libuv 1.46.0-1 on Azure Linux 3.0, azl3 nodejs 20.10.0-2 on Azure Linux 3.0
Fixed versions20.14.0-1, 1.48.0-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-2357
MediumCVSS 6.5

IKEv2 misconfiguration can cause libreswan to abort and restart

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 libreswan 4.15-1 on Azure Linux 3.0
Microsoft Security Response CenterCVE-2026-56188
CriticalCVSS 9.8

Windows Server Network driver Remote Code Execution Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Server Network driver allows an unauthorized attacker to execute code over a network.

Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9020, 10.0.20348.5386, 10.0.19044.7548, 10.0.19045.7548
Vendor guidance

Install KB5099538. Install KB5099540. Install KB5099539. Install KB5099536. Install KB5101650. Install KB5101649. Install KB5099535. Install KB5099445. Install KB5099444.

Microsoft Security Response CenterCVE-2026-66807
CriticalCVSS 7.8

Microsoft Office Graphics Component Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

Affected productsMicrosoft 365 Apps for Enterprise for 64-bit Systems, Microsoft Office 2019 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office 2019 for 64-bit editions
Fixed versionshttps://aka.ms/OfficeSecurityReleases, 16.112.26081010
Vendor guidance

Click to Run Release Notes

Microsoft Security Response CenterCVE-2026-63519
CriticalCVSS 7.8

Microsoft Office Graphics Component Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

Affected productsMicrosoft Office 365 for Mac, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit Systems
Fixed versions16.112.26081010, https://aka.ms/OfficeSecurityReleases
Vendor guidance

Release Notes Click to Run

Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources