Search threats, CVEs… ⌘K
Vendor advisories

Microsoft Security Response Center

Browse 15,977 advisories from this official source. Search by product, CVE, severity, or advisory ID.

Current Checked 4 hours ago Checked every 6 hours
All vendor sources Official source

15,977 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2025-50181
MediumCVSS 5.3

urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 python-urllib3 2.0.7-2 on Azure Linux 3.0, cbl2 python-virtualenv 20.26.6-1 on CBL Mariner 2.0, cbl2 python-urllib3 1.26.19-2 on CBL Mariner 2.0, cbl2 python-virtualenv 20.26.6-2 on CBL Mariner 2.0
Fixed versions2.0.7-2, 20.26.6-2, 1.26.19-2, 24.2-3
Vendor guidance

CBL-Mariner Releases

CVE-2025-50181
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-26982
MediumCVSS 7.1

Squashfs: check the inode number is not the invalid value of zero

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.179.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Fixed versions5.15.179.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-26982
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-6020
HighCVSS 7.8

Linux-pam: linux-pam directory traversal

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 pam 1.5.1-8 on CBL Mariner 2.0, azl3 pam 1.5.3-5 on Azure Linux 3.0, cbl2 pam 1.5.1-7 on CBL Mariner 2.0, cbl2 pam 1.5.1-7 on CBL-Mariner 2.0
Fixed versions1.5.1-8, 1.5.3-5
Vendor guidance

CBL-Mariner Releases

CVE-2025-6020
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-26876
MediumCVSS 5.5

drm/bridge: adv7511: fix crash on irq during probe

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
CVE-2024-26876
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-26954
MediumCVSS 6.1

ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.96.2-1 on Azure Linux 3.0, azl3 kernel 6.6.96.2-2 on Azure Linux 3.0
Fixed versions6.6.96.2-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-26954
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-6021
MediumCVSS 7.5

Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscm2 libxml2 2.10.4-8 on CBL Mariner 2.0, azl3 libxml2 2.11.5-6 on Azure Linux 3.0, cbl2 libxml2 2.10.4-8 on CBL Mariner 2.0, cbl2 libxml2 2.10.4-8 on CBL-Mariner 2.0
Fixed versions2.10.4-8, 2.11.5-6
Vendor guidance

CBL-Mariner Releases

CVE-2025-6021
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-25724
MediumCVSS 4.0

list_item_verbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or unspecified other impact via a crafted TAR archive that is read with a verbose value of 2. For example, the 100-byte buffer may not be sufficient for a custom locale.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 libarchive 3.6.1-6 on CBL Mariner 2.0, cbl2 libarchive 3.6.1-5 on CBL Mariner 2.0, azl3 libarchive 3.7.7-2 on Azure Linux 3.0, cbl2 libarchive 3.6.1-6 on CBL-Mariner 2.0
Fixed versions3.6.1-5, 3.7.7-2
Vendor guidance

CBL-Mariner Releases

CVE-2025-25724
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-49795
MediumCVSS 7.5

Libxml: null pointer dereference leads to denial of service (dos)

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 libxml2 2.10.4-8 on CBL Mariner 2.0, azl3 libxml2 2.11.5-6 on Azure Linux 3.0, azl3 libxml2 2.11.5-7 on Azure Linux 3.0, cbl2 libxml2 2.10.4-9 on CBL-Mariner 2.0
Fixed versions2.10.4-9, 2.11.5-7
Vendor guidance

CBL-Mariner Releases

CVE-2025-49795
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-57850
HighCVSS 7.8

jffs2: Prevent rtime decompress memory corruption

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-2 on CBL-Mariner 2.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0
Fixed versions5.15.176.3-3, 6.6.78.1-3
Vendor guidance

CBL-Mariner Releases

CVE-2024-57850
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-49794
CriticalCVSS 9.1

Libxml: heap use after free (uaf) leads to denial of service (dos)

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscm2 libxml2 2.10.4-8 on CBL Mariner 2.0, azl3 libxml2 2.11.5-6 on Azure Linux 3.0, cbl2 libxml2 2.10.4-8 on CBL Mariner 2.0, cbl2 libxml2 2.10.4-8 on CBL-Mariner 2.0
Fixed versions2.10.4-8, 2.11.5-6
Vendor guidance

CBL-Mariner Releases

CVE-2025-49794
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-45778
MediumCVSS 4.1

Grub2: fs/bfs: integer overflow in the bfs parser.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 grub2 2.06-14 on CBL Mariner 2.0, azl3 grub2 2.06-24 on Azure Linux 3.0, cbl2 grub2 2.06-15 on CBL Mariner 2.0, cbl2 grub2 2.06-15 on CBL-Mariner 2.0
Fixed versions2.06-15, 2.06-25
Vendor guidance

CBL-Mariner Releases

CVE-2024-45778
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-52670
MediumCVSS 6.6

rpmsg: virtio: Free driver_override when rpmsg_remove()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0
Fixed versions5.15.182.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2023-52670
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-49796
CriticalCVSS 9.1

Libxml: type confusion leads to denial of service (dos)

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscm2 libxml2 2.10.4-8 on CBL Mariner 2.0, azl3 libxml2 2.11.5-6 on Azure Linux 3.0, cbl2 libxml2 2.10.4-8 on CBL Mariner 2.0, cbl2 libxml2 2.10.4-8 on CBL-Mariner 2.0
Fixed versions2.10.4-8, 2.11.5-6
Vendor guidance

CBL-Mariner Releases

CVE-2025-49796
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-0685
MediumCVSS 6.4

Grub2: jfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading data

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 grub2 2.06-15 on CBL Mariner 2.0, cbl2 grub2 2.06-15 on CBL-Mariner 2.0, cbl2 grub2 2.06-14 on CBL Mariner 2.0, azl3 grub2 2.06-24 on Azure Linux 3.0
Fixed versions2.06-15, 2.06-25
Vendor guidance

CBL-Mariner Releases

CVE-2025-0685
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-47268
MediumCVSS 6.5

ping in iputils before 20250602 allows a denial of service

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 iputils 20211215-3 on CBL-Mariner 2.0, azl3 iputils 20240117-2 on Azure Linux 3.0, cbl2 iputils 20211215-3 on CBL Mariner 2.0
Fixed versions20211215-3, 20240117-2
Vendor guidance

CBL-Mariner Releases

CVE-2025-47268
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-0684
MediumCVSS 6.4

Grub2: reiserfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading data

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 grub2 2.06-24 on Azure Linux 3.0, cbl2 grub2 2.06-15 on CBL-Mariner 2.0, cbl2 grub2 2.06-14 on CBL Mariner 2.0, cbl2 grub2 2.06-15 on CBL Mariner 2.0
Fixed versions2.06-25, 2.06-15
Vendor guidance

CBL-Mariner Releases

CVE-2025-0684
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-47950
HighCVSS 7.5

CoreDNS Vulnerable to DoQ Memory Exhaustion via Stream Amplification

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscm2 coredns 1.11.1-19 on CBL Mariner 2.0, azl3 coredns 1.11.4-7 on Azure Linux 3.0, cbl2 coredns 1.11.1-19 on CBL-Mariner 2.0, cbl2 coredns 1.11.1-19 on CBL Mariner 2.0
Fixed versions1.11.1-19, 1.11.4-7
Vendor guidance

CBL-Mariner Releases

CVE-2025-47950
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources