Vendor advisories

Microsoft Security Response Center

Browse 15,977 advisories from this official source. Search by product, CVE, severity, or advisory ID.

Current Checked 5 hours ago Checked every 6 hours

15,977 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2024-49955
Medium

ACPI: battery: Fix possible crash when unregistering a battery hook

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-2 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.57.1-2
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-49931
HighCVSS 7.8

wifi: ath12k: fix array out-of-bound access in SoC stats

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.57.1-2 on Azure Linux 3.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions6.6.57.1-2
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2025-21855
HighCVSS 7.8

ibmvnic: Don't reference skb after sending to VIOS

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.78.1-3 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Fixed versions6.6.82.1-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2025-23136
MediumCVSS 5.5

thermal: int340x: Add NULL check for adev

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, azl3 kernel 6.6.85.1-4 on Azure Linux 3.0, cbl2 kernel 5.15.176.3-3 on CBL-Mariner 2.0
Fixed versions5.15.180.1-1, 6.6.92.2-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-53124
Medium

net: fix data-races around sk->sk_forward_alloc

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.179.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.76.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL-Mariner 2.0
Fixed versions5.15.179.1-1, 6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2025-1094
HighCVSS 8.1

PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 postgresql 16.5-2 on Azure Linux 3.0, cbl2 postgresql 14.16-1 on CBL Mariner 2.0, azl3 postgresql 16.7-1 on Azure Linux 3.0, cbl2 postgresql 14.14-1 on CBL Mariner 2.0
Fixed versions16.7-1, 14.16-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2025-26601
HighCVSS 7.8

Xorg: xwayland: use-after-free in syncinittrigger()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 xorg-x11-server-Xwayland 24.1.1-3 on Azure Linux 3.0, cbl2 xorg-x11-server 1.20.10-15 on CBL Mariner 2.0, cbl2 xorg-x11-server 1.20.10-15 on CBL-Mariner 2.0, azl3 xorg-x11-server-Xwayland 24.1.6-1 on Azure Linux 3.0
Fixed versions24.1.6-1, 1.20.10-15
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-49959
MediumCVSS 5.5

jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-2 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.57.1-2
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2025-37802
MediumCVSS 5.5

ksmbd: fix WARNING "do not call blocking ops when !TASK_RUNNING"

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.92.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Microsoft Security Response CenterCVE-2025-22056
HighCVSS 7.8

netfilter: nft_tunnel: fix geneve_opt type confusion addition

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, azl3 kernel 6.6.85.1-4 on Azure Linux 3.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.176.3-3 on CBL-Mariner 2.0
Fixed versions5.15.180.1-1, 6.6.92.2-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-49919
Medium

drm/amd/display: Add null check for head_pipe in dcn201_acquire_free_pipe_for_layer

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.79.1-1 on Azure Linux 3.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0
Fixed versions6.6.79.1-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2025-23084
MediumCVSS 5.6

A vulnerability has been identified in Node.js, specifically affecting the handling of drive names in the Windows environment. Certain Node.js functions do not treat drive names as special on Windows. As a result, although Node.js assumes a relative path, it actually refers to the root directory. On Windows, a path that does not start with the file separator is treated as relative to the current directory. This vulnerability affects Windows users of `path.join` API.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 nodejs18 18.20.3-6 on CBL-Mariner 2.0, azl3 nodejs 20.14.0-8 on Azure Linux 3.0, cbl2 nodejs18 18.20.3-6 on CBL Mariner 2.0
Microsoft Security Response CenterCVE-2023-52561
MediumCVSS 5.5

arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
Microsoft Security Response CenterCVE-2025-21858
HighCVSS 7.8

geneve: Fix use-after-free in geneve_find_dev().

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.78.1-3 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.179.1-1 on CBL Mariner 2.0
Fixed versions6.6.82.1-1, 5.15.179.1-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-12797
HighCVSS 7.3

RFC7250 handshakes with unauthenticated servers don't abort as expected

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 openssl 3.3.3-1 on Azure Linux 3.0, azl3 cloud-hypervisor-cvm 38.0.72.2-3 on Azure Linux 3.0, azl3 cloud-hypervisor-cvm 41.0.79-3 on Azure Linux 3.0, cbl2 cloud-hypervisor-cvm 38.0.72.2-5 on CBL Mariner 2.0
Fixed versions3.3.3-1, 38.0.72.2-3, 38.0.72.2-5
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-53122
MediumCVSS 5.5

mptcp: cope racing subflow creation in mptcp_rcv_space_adjust

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2025-26596
HighCVSS 7.8

Xorg: xwayland: heap overflow in xkbwritekeysyms()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 xorg-x11-server-Xwayland 24.1.1-3 on Azure Linux 3.0, azl3 xorg-x11-server-Xwayland 24.1.6-1 on Azure Linux 3.0, cbl2 xorg-x11-server 1.20.10-15 on CBL Mariner 2.0, cbl2 xorg-x11-server 1.20.10-15 on CBL-Mariner 2.0
Fixed versions24.1.6-1, 1.20.10-15
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2025-4517
HighCVSS 9.4

Arbitrary writes via tarfile realpath overflow

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 python3 3.9.19-14 on CBL Mariner 2.0, azl3 python3 3.12.9-2 on Azure Linux 3.0, cbl2 python3 3.9.19-13 on CBL Mariner 2.0, cbl2 python3 3.9.19-13 on CBL-Mariner 2.0
Fixed versions3.9.19-14, 3.12.9-2
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2023-52576
MediumCVSS 5.5

x86/mm, kexec, ima: Use memblock_free_late() from ima_free_kexec_buffer()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Microsoft Security Response CenterCVE-2024-49867
Medium

btrfs: wait for fixup workers before stopping cleaner kthread during umount

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-2 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.57.1-2
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-49968
MediumCVSS 5.5

ext4: filesystems without casefold feature cannot be mounted with siphash

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.121.1-1 on Azure Linux 3.0
Fixed versions6.6.121.1-1
Vendor guidance

CBL-Mariner Releases

Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources