Search threats, CVEs… ⌘K
Vendor advisories

Microsoft Security Response Center

Browse 15,977 advisories from this official source. Search by product, CVE, severity, or advisory ID.

Current Checked about an hour ago Checked every 6 hours
All vendor sources Official source

15,977 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2024-57255
HighCVSS 7.1

An integer overflow in sqfs_resolve_symlink in Das U-Boot before 2025.01-rc1 occurs via a crafted squashfs filesystem with an inode size of 0xffffffff, resulting in a malloc of zero and resultant memory overwrite.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 qemu 6.2.0-24 on CBL Mariner 2.0, azl3 qemu 8.2.0-16 on Azure Linux 3.0, cbl2 qemu 6.2.0-24 on CBL-Mariner 2.0
CVE-2024-57255
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-32434
CriticalCVSS 9.8

PyTorch: `torch.load` with `weights_only=True` leads to remote code execution

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 pytorch 2.0.0-9 on CBL Mariner 2.0, cbl2 pytorch 2.0.0-9 on CBL-Mariner 2.0, cbl2 pytorch 2.0.0-8 on CBL Mariner 2.0, azl3 pytorch 2.2.2-6 on Azure Linux 3.0
Fixed versions2.0.0-8, 2.2.2-6
Vendor guidance

CBL-Mariner Releases

CVE-2025-32434
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-30693
MediumCVSS 5.5

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mysql 8.0.42-1 on CBL Mariner 2.0, azl3 mysql 8.0.42-1 on Azure Linux 3.0, azl3 mysql 8.0.41-1 on Azure Linux 3.0, cbl2 mysql 8.0.41-1 on CBL Mariner 2.0
Fixed versions8.0.42-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-30693
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56786
MediumCVSS 6.7

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.76.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Fixed versions6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56786
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-11235
CriticalCVSS 8.1

Reference counting in php_request_shutdown causes Use-After-Free

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 php 8.1.32-1 on CBL Mariner 2.0, cbl2 php 8.1.32-1 on CBL-Mariner 2.0
CVE-2024-11235
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21703
HighCVSS 7.8

netem: Update sch->q.qlen before qdisc_tree_reduce_backlog()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, cbl2 kernel 5.15.176.3-3 on CBL-Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0
Fixed versions5.15.180.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21703
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-13176
MediumCVSS 4.7

Timing side-channel in ECDSA signature computation

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 edk2 20240524git3e722403cd16-6 on Azure Linux 3.0, azl3 openssl 3.3.3-1 on Azure Linux 3.0, azl3 openssl 3.3.2-2 on Azure Linux 3.0, cbl2 openssl 1.1.1k-36 on CBL Mariner 2.0
Fixed versions20240524git3e722403cd16-6, 3.3.3-1, 1.1.1k-36
Vendor guidance

CBL-Mariner Releases

CVE-2024-13176
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-52530
HighCVSS 7.5

GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 libsoup 3.0.4-2 on CBL Mariner 2.0, azl3 libsoup 3.4.4-2 on Azure Linux 3.0, cbl2 libsoup 3.0.4-6 on CBL Mariner 2.0, cbl2 libsoup 3.0.4-6 on CBL-Mariner 2.0
Fixed versions3.0.4-2, 3.4.4-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-52530
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42134
MediumCVSS 5.5

virtio-pci: Check if is_avq is NULL

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.112.1-2 on Azure Linux 3.0, azl3 kernel 6.6.117.1-1 on Azure Linux 3.0, azl3 kernel 6.6.119.3-1 on Azure Linux 3.0, azl3 kernel 6.6.119.3-3 on Azure Linux 3.0
CVE-2024-42134
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56670
MediumCVSS 5.5

usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointer

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.76.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL-Mariner 2.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56670
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-30699
MediumCVSS 4.9

Vulnerability in the MySQL Server product of Oracle MySQL

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mysql 8.0.42-1 on CBL Mariner 2.0, azl3 mysql 8.0.42-1 on Azure Linux 3.0, azl3 mysql 8.0.41-1 on Azure Linux 3.0, cbl2 mysql 8.0.41-1 on CBL Mariner 2.0
Fixed versions8.0.42-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-30699
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21760
HighCVSS 7.8

ndisc: extend RCU protection in ndisc_send_skb()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-3 on CBL-Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.82.1-1 on Azure Linux 3.0, azl3 kernel 6.6.78.1-3 on Azure Linux 3.0
Fixed versions5.15.180.1-1, 6.6.82.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21760
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-6505
MediumCVSS 6.8

Qemu-kvm: virtio-net: queue index out-of-bounds access in software rss

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 qemu 6.2.0-24 on CBL Mariner 2.0, azl3 qemu 8.2.0-14 on Azure Linux 3.0, azl3 qemu 8.2.0-16 on Azure Linux 3.0, cbl2 qemu 6.2.0-24 on CBL-Mariner 2.0
Fixed versions6.2.0-24, 8.2.0-14
Vendor guidance

CBL-Mariner Releases

CVE-2024-6505
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56715
Medium

ionic: Fix netdev notifier unregister on failure

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.76.1-1 on Azure Linux 3.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56715
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50282
HighCVSS 7.8

drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50282
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50012
Medium

cpufreq: Avoid a bad reference count on CPU node

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.57.1-2 on Azure Linux 3.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions6.6.57.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-50012
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50009
MediumCVSS 5.5

cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.76.1-1 on Azure Linux 3.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0
Fixed versions6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50009
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53138
Medium

net/mlx5e: kTLS, Fix incorrect page refcounting

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-53138
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-52601
HighCVSS 7.8

jfs: fix array-index-out-of-bounds in dbAdjTree

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-5 on Azure Linux 3.0
Fixed versions5.15.167.1-2, 6.6.57.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2023-52601
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56748
MediumCVSS 3.3

scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0
Fixed versions5.15.173.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56748
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-30685
MediumCVSS 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mysql 8.0.42-1 on CBL Mariner 2.0, azl3 mysql 8.0.42-1 on Azure Linux 3.0, azl3 mysql 8.0.41-1 on Azure Linux 3.0, cbl2 mysql 8.0.41-1 on CBL Mariner 2.0
Fixed versions8.0.42-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-30685
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-2153
MediumCVSS 6.8

HDF5 h5 File H5SM.c H5SM_delete heap-based overflow

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 hdf5 1.14.4.3-1 on Azure Linux 3.0, cbl2 hdf5 1.14.4-1 on CBL Mariner 2.0, cbl2 hdf5 1.14.6-1 on CBL Mariner 2.0, cbl2 hdf5 1.14.6-1 on CBL-Mariner 2.0
Fixed versions1.14.6-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-2153
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49868
Medium

btrfs: fix a NULL pointer dereference when failed to start a new trasacntion

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-2 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.57.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-49868
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56784
HighCVSS 7.8

drm/amd/display: Adding array index check to prevent memory corruption

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.92.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
CVE-2024-56784
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources