Search threats, CVEs… ⌘K
Vendor advisories

Microsoft Security Response Center

Browse 15,977 advisories from this official source. Search by product, CVE, severity, or advisory ID.

Current Checked 4 hours ago Checked every 6 hours
All vendor sources Official source

15,977 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2025-5791
MediumCVSS 7.1

Users: `root` appended to group listings

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kata-containers-cc 3.15.0.aks0-4 on Azure Linux 3.0, azl3 kata-containers-cc 3.15.0.aks0-5 on Azure Linux 3.0, azl3 kata-containers-cc 3.15.0.aks0-6 on Azure Linux 3.0, azl3 kata-containers-cc 3.15.0.aks0-7 on Azure Linux 3.0
Fixed versions3.15.0.aks0-14, 3.2.0.azl2-7
Vendor guidance

CBL-Mariner Releases

CVE-2025-5791
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-5916
LowCVSS 3.9

Libarchive: integer overflow while reading warc files at archive_read_support_format_warc.c

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 cmake 3.30.3-8 on Azure Linux 3.0, azl3 libarchive 3.7.7-2 on Azure Linux 3.0, cbl2 libarchive 3.6.1-6 on CBL Mariner 2.0, azl3 libarchive 3.7.7-3 on Azure Linux 3.0
Fixed versions3.30.3-8, 3.7.7-3, 3.6.1-7, 3.21.4-20
Vendor guidance

CBL-Mariner Releases

CVE-2025-5916
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-5917
LowCVSS 2.8

Libarchive: off by one error in build_ustar_entry_name() at archive_write_set_format_pax.c

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 cmake 3.30.3-8 on Azure Linux 3.0, azl3 libarchive 3.7.7-2 on Azure Linux 3.0, cbl2 cmake 3.21.4-18 on CBL Mariner 2.0, cbl2 libarchive 3.6.1-6 on CBL Mariner 2.0
Fixed versions3.30.3-8, 3.7.7-3, 3.6.1-7, 3.21.4-20
Vendor guidance

CBL-Mariner Releases

CVE-2025-5917
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-36922
MediumCVSS 5.1

wifi: iwlwifi: read txq->read_ptr under lock

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1
CVE-2024-36922
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-5918
LowCVSS 3.9

Libarchive: reading past eof may be triggered for piped file streams

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 cmake 3.30.3-8 on Azure Linux 3.0, azl3 libarchive 3.7.7-2 on Azure Linux 3.0, cbl2 libarchive 3.6.1-6 on CBL Mariner 2.0, cbl2 libarchive 3.6.1-7 on CBL Mariner 2.0
Fixed versions3.30.3-8, 3.7.7-3, 3.6.1-7, 3.21.4-20
Vendor guidance

CBL-Mariner Releases

CVE-2025-5918
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-22653
MediumCVSS 4.8

yasm commit 9defefae was discovered to contain a NULL pointer dereference via the yasm_section_bcs_append function at section.c.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 yasm 1.3.0-17 on Azure Linux 3.0, cbl2 yasm 1.3.0-17 on CBL Mariner 2.0, cbl2 yasm 1.3.0-17 on CBL-Mariner 2.0
Fixed versions1.3.0-17
Vendor guidance

CBL-Mariner Releases

CVE-2024-22653
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-49179
MediumCVSS 7.3

Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x record extension

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 xorg-x11-server-Xwayland 24.1.6-2 on Azure Linux 3.0, azl3 wayland 1.22.0-1 on Azure Linux 3.0, cbl2 xorg-x11-server 1.20.10-16 on CBL-Mariner 2.0, cbl2 xorg-x11-server 1.20.10-16 on CBL Mariner 2.0
Fixed versions24.1.6-2, 1.20.10-16
Vendor guidance

CBL-Mariner Releases

CVE-2025-49179
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-49175
MediumCVSS 6.1

Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: out-of-bounds read in x rendering extension animated cursors

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 xorg-x11-server-Xwayland 24.1.6-2 on Azure Linux 3.0, cbl2 xorg-x11-server 1.20.10-16 on CBL Mariner 2.0, azl3 wayland 1.22.0-1 on Azure Linux 3.0, cbl2 xorg-x11-server 1.20.10-16 on CBL-Mariner 2.0
Fixed versions24.1.6-2, 1.20.10-16
Vendor guidance

CBL-Mariner Releases

CVE-2025-49175
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-47081
MediumCVSS 5.3

Requests vulnerable to .netrc credentials leak via malicious URLs

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 python-requests 2.31.0-3 on Azure Linux 3.0, cbl2 python-requests 2.27.1-8 on CBL Mariner 2.0, cm2 python-requests 2.27.1-8 on CBL Mariner 2.0, cbl2 python-requests 2.27.1-8 on CBL-Mariner 2.0
Fixed versions2.31.0-3, 2.27.1-8
Vendor guidance

CBL-Mariner Releases

CVE-2024-47081
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-49176
MediumCVSS 7.3

Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in big requests extension

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 xorg-x11-server 1.20.10-16 on CBL Mariner 2.0, azl3 wayland 1.22.0-1 on Azure Linux 3.0, cbl2 xorg-x11-server 1.20.10-16 on CBL-Mariner 2.0
Fixed versions1.20.10-16
Vendor guidance

CBL-Mariner Releases

CVE-2025-49176
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-49178
MediumCVSS 5.5

Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: unprocessed client request due to bytes to ignore

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 xorg-x11-server-Xwayland 24.1.6-2 on Azure Linux 3.0, cbl2 xorg-x11-server 1.20.10-16 on CBL Mariner 2.0, cbl2 xorg-x11-server 1.20.10-16 on CBL-Mariner 2.0
Fixed versions24.1.6-2, 1.20.10-16
Vendor guidance

CBL-Mariner Releases

CVE-2025-49178
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-49180
MediumCVSS 6.1

Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: integer overflow in x resize, rotate and reflect (randr) extension

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 xorg-x11-server-Xwayland 24.1.6-2 on Azure Linux 3.0, cbl2 xorg-x11-server 1.20.10-16 on CBL-Mariner 2.0, cbl2 xorg-x11-server 1.20.10-16 on CBL Mariner 2.0
Fixed versions24.1.6-2, 1.20.10-16
Vendor guidance

CBL-Mariner Releases

CVE-2025-49180
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-20260
CriticalCVSS 9.8

ClamAV PDF Scanning Buffer Overflow Vulnerability

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 clamav 1.0.9-1 on CBL Mariner 2.0, azl3 clamav 1.0.9-1 on Azure Linux 3.0, azl3 clamav 1.0.7-2 on Azure Linux 3.0, cbl2 clamav 1.0.7-1 on CBL-Mariner 2.0
Fixed versions1.0.9-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-20260
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-6069
MediumCVSS 4.3

HTMLParser quadratic complexity when processing malformed inputs

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 python3 3.9.19-14 on CBL Mariner 2.0, azl3 python3 3.12.9-3 on Azure Linux 3.0, cbl2 python3 3.9.19-13 on CBL Mariner 2.0, cbl2 python3 3.9.19-13 on CBL-Mariner 2.0
Fixed versions3.9.19-14, 3.12.9-3
Vendor guidance

CBL-Mariner Releases

CVE-2025-6069
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources