Vendor advisories

Microsoft Security Response Center

Browse 15,977 advisories from this official source. Search by product, CVE, severity, or advisory ID.

Current Checked 5 hours ago Checked every 6 hours

15,977 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2025-39728
MediumCVSS 5.5

clk: samsung: Fix UBSAN panic in samsung_clk_init()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, azl3 kernel 6.6.85.1-4 on Azure Linux 3.0, cbl2 kernel 5.15.176.3-3 on CBL-Mariner 2.0
Fixed versions5.15.180.1-1, 6.6.92.2-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2025-5889
LowCVSS 3.1

juliangruber brace-expansion index.js expand redos

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 nodejs18 18.20.3-8 on CBL Mariner 2.0, cbl2 nodejs18 18.20.3-9 on CBL Mariner 2.0, cbl2 nodejs18 18.20.3-9 on CBL-Mariner 2.0
Fixed versions18.20.3-9
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-9042
MediumCVSS 5.9

This CVE affects only Windows worker nodes. Your worker node is vulnerable to this issue if it is running one of the affected versions listed below.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kubernetes 1.28.4-18 on CBL Mariner 2.0, cbl2 kubernetes 1.28.4-18 on CBL-Mariner 2.0
Microsoft Security Response CenterCVE-2024-53120
Medium

net/mlx5e: CT: Fix null-ptr-deref in add rule err flow

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL-Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2025-26600
HighCVSS 7.8

Xorg: xwayland: use-after-free in playreleasedevents()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 xorg-x11-server-Xwayland 24.1.1-3 on Azure Linux 3.0, cbl2 xorg-x11-server 1.20.10-15 on CBL Mariner 2.0, cbl2 xorg-x11-server 1.20.10-15 on CBL-Mariner 2.0, azl3 xorg-x11-server-Xwayland 24.1.6-1 on Azure Linux 3.0
Fixed versions24.1.6-1, 1.20.10-15
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2025-21999
HighCVSS 7.8

proc: fix UAF in proc_get_inode()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.85.1-2 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0
Fixed versions5.15.180.1-1, 6.6.85.1-2
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2025-4138
HighCVSS 8.1

Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 python3 3.9.19-14 on CBL Mariner 2.0, cbl2 python3 3.9.19-13 on CBL Mariner 2.0, azl3 python3 3.12.9-1 on Azure Linux 3.0, cbl2 python3 3.9.19-13 on CBL-Mariner 2.0
Fixed versions3.9.19-14, 3.12.9-2
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2025-37925
MediumCVSS 5.5

jfs: reject on-disk inodes of an unsupported type

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Microsoft Security Response CenterCVE-2024-49958
Medium

ocfs2: reserve space for inline xattr before attaching reflink tree

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-2 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.57.1-2
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2025-1244
HighCVSS 8.8

Emacs: shell injection vulnerability in gnu emacs via custom "man" uri scheme

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 emacs 29.4-3 on CBL Mariner 2.0, cbl2 emacs 29.4-3 on CBL-Mariner 2.0, cbl2 emacs 29.4-2 on CBL Mariner 2.0, azl3 emacs 29.4-2 on Azure Linux 3.0
Fixed versions29.4-2
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-53119
MediumCVSS 5.5

virtio/vsock: Fix accept_queue memory leak

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-27407
HighCVSS 8.4

fs/ntfs3: Fixed overflow check in mi_enum_attr()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Microsoft Security Response CenterCVE-2025-26597
HighCVSS 7.8

Xorg: xwayland: buffer overflow in xkbchangetypesofkey()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 xorg-x11-server-Xwayland 24.1.1-3 on Azure Linux 3.0, cbl2 xorg-x11-server 1.20.10-15 on CBL Mariner 2.0, cbl2 xorg-x11-server 1.20.10-15 on CBL-Mariner 2.0, azl3 xorg-x11-server-Xwayland 24.1.6-1 on Azure Linux 3.0
Fixed versions24.1.6-1, 1.20.10-15
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-50285
MediumCVSS 7.5

ksmbd: check outstanding simultaneous SMB operations

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2025-47711
MediumCVSS 4.3

Nbdkit: nbdkit-server: off-by-one error when processing block status may lead to a denial of service

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscm2 nbdkit 1.35.3-4 on CBL Mariner 2.0, azl3 nbdkit 1.35.3-7 on Azure Linux 3.0, cbl2 nbdkit 1.35.3-4 on CBL Mariner 2.0, cbl2 nbdkit 1.35.3-4 on CBL-Mariner 2.0
Fixed versions1.35.3-4, 1.35.3-7
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-49889
High

ext4: avoid use-after-free in ext4_ext_show_leaf()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-2 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.57.1-2
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2025-38152
MediumCVSS 5.5

remoteproc: core: Clear table_sz when rproc_shutdown

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, cbl2 kernel 5.15.176.3-3 on CBL-Mariner 2.0, azl3 kernel 6.6.85.1-4 on Azure Linux 3.0
Fixed versions5.15.180.1-1, 6.6.92.2-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-50008
MediumCVSS 5.5

wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-2 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.57.1-2
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2025-4373
MediumCVSS 6.5

Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 glib 2.71.0-5 on CBL Mariner 2.0, cbl2 glib 2.71.0-7 on CBL Mariner 2.0, cbl2 glib 2.71.0-6 on CBL Mariner 2.0, cbl2 glib 2.71.0-7 on CBL-Mariner 2.0
Fixed versions2.71.0-6, 2.71.0-7, 2.78.6-3
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2025-21862
MediumCVSS 5.5

drop_monitor: fix incorrect initialization order

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.78.1-3 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.179.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.82.1-1 on Azure Linux 3.0
Fixed versions6.6.82.1-1, 5.15.179.1-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-26648
MediumCVSS 5.5

drm/amd/display: Fix variable deferencing before NULL check in edp_setup_replay()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Microsoft Security Response CenterCVE-2025-1215
LowCVSS 2.8

vim main.c memory corruption

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 vim 9.1.0791-4 on Azure Linux 3.0, cbl2 vim 9.1.0791-4 on CBL Mariner 2.0, cbl2 vim 9.1.0791-4 on CBL-Mariner 2.0
Fixed versions9.1.0791-4
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-53136
Medium

mm: revert "mm: shmem: fix data-race in shmem_getattr()"

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL-Mariner 2.0
Fixed versions5.15.176.3-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2023-52749
MediumCVSS 4.7

spi: Fix null dereference on suspend

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources