CurrentChecked 3 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
11Vendor sources
16,933Advisories collected
6,365Published or updated in 30 days
7,004Marked critical or high
Coverage
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
CurrentChecked 18 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
Check delayedChecked 26 days ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 28 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 18 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 13 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 3 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 2 hours ago
Checked every 6 hours
Browse this vendor's advisories
Official source
CurrentChecked 3 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 18 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 3 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
16,933 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
Ubuntu Security NoticesUSN-8636-2
Severity not listed
USN-8636-2: Linux kernel (Oracle) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - InfiniBand drivers; - Media drivers; - Network drivers; - Mellanox network ...
Vendor guidance
This update corrects flaws in the following subsystems: - x86 architecture; - InfiniBand drivers; - Media drivers; - Network drivers; - Mellanox network drivers; - Texas Instruments network drivers; - NVME drivers; - ...
Microsoft Security Response CenterCVE-2026-56642
HighCVSS 8.8
Microsoft Fabric Data Warehouse Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Fabric Data Warehouse allows an authorized attacker to execute code over a network.
Affected productsFabric Data Warehouse
Microsoft Security Response CenterCVE-2026-50419
HighCVSS 3.3
Windows Kernel Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose information locally.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9020, 10.0.20348.5386, 10.0.19044.7548, 10.0.19045.7548
Vendor guidance
Install KB5099538. Install KB5099540. Install KB5099539. Install KB5099536. Install KB5101650. Install KB5101649. Install KB5099535. Install KB5099445. Install KB5099444.
Microsoft Security Response CenterCVE-2026-47632
HighCVSS 8.8
Azure Connected Machine Agent Elevation of Privilege Vulnerability
Improper certificate validation in Azure Connected Machine Agent allows an unauthorized attacker to elevate privileges over an adjacent network.
Affected productsAzure Connected Machine Agent
Fixed versions1.65
Vendor guidance
Release Notes
Apple Security Releases148286
Severity not listed
Safari 26.6.1
Open the original vendor bulletin for the full description and affected-version details.
Affected productsmacOS Sonoma and macOS Sequoia
Microsoft Security Response CenterCVE-2025-1767
MediumCVSS 6.5
This CVE only affects Kubernetes clusters that utilize the in-tree gitRepo volume to clone git repositories from other pods within the same node. Since the in-tree gitRepo volume feature has been deprecated and will not receive security updates upstream, any cluster still using this feature remains vulnerable.
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Affected productsazl3 kubernetes 1.30.10-7 on Azure Linux 3.0, cbl2 kubernetes 1.28.4-18 on CBL Mariner 2.0, cbl2 kubernetes 1.28.4-18 on CBL-Mariner 2.0
Microsoft Security Response CenterCVE-2023-2650
MediumCVSS 6.5
Possible DoS translating ASN.1 object identifiers
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Affected productscbl2 hvloader 1.0.1-11 on CBL Mariner 2.0, cm1 openssl 1.1.1k-16 on CBL Mariner 1.0, cbl2 hvloader 1.0.1-9 on CBL Mariner 2.0, cbl2 edk2 20230301gitf80f052277c8-37 on CBL Mariner 2.0
Fixed versions1.0.1-3, 1.1.1k-16, 1.0.1-9, 20230301gitf80f052277c8-37
Vendor guidance
CBL-Mariner Releases
Microsoft Security Response CenterCVE-2024-1298
MediumCVSS 6.0
Integer Overflow caused by divide by zero during S3 suspension
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Affected productscbl2 edk2 20230301gitf80f052277c8-39 on CBL Mariner 2.0, cbl2 hvloader 1.0.1-3 on CBL Mariner 2.0, azl3 edk2 20240524git3e722403cd16-1 on Azure Linux 3.0, cbl2 edk2 20230301gitf80f052277c8-41 on CBL Mariner 2.0
Fixed versions20230301gitf80f052277c8-39, 1.0.1-3, 20240524git3e722403cd16-1
Vendor guidance
CBL-Mariner Releases
Microsoft Security Response CenterCVE-2025-1181
LowCVSS 5.0
GNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec memory corruption
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Affected productsazl3 binutils 2.41-5 on Azure Linux 3.0, cbl2 gdb 11.2-6 on CBL-Mariner 2.0, cbl2 binutils 2.37-12 on CBL Mariner 2.0, azl3 binutils 2.41-3 on Azure Linux 3.0
Fixed versions2.41-3, 2.37-12
Vendor guidance
CBL-Mariner Releases
Microsoft Security Response CenterCVE-2024-30161
MediumCVSS 6.5
In Qt 6.5.4, 6.5.5, and 6.6.2, QNetworkReply header data might be accessed via a dangling pointer in Qt for WebAssembly (wasm). (Earlier and later versions are unaffected.)
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Affected productsazl3 qtbase 6.6.3-2 on Azure Linux 3.0, azl3 qtbase 6.6.2-1 on Azure Linux 3.0
Fixed versions6.6.3-2
Vendor guidance
CBL-Mariner Releases
Microsoft Security Response CenterCVE-2023-52760
HighCVSS 7.8
gfs2: Fix slab-use-after-free in gfs2_qd_dealloc
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Affected productscbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0
Fixed versions5.15.167.1-2
Vendor guidance
CBL-Mariner Releases
Microsoft Security Response CenterCVE-2023-39130
MediumCVSS 5.5
GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap buffer overflow via the function pe_as16() at /gdb/coff-pe-read.c.
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Affected productscbl2 gdb 11.2-3 on CBL Mariner 2.0, cbl2 crash 8.0.1-3 on CBL Mariner 2.0, azl3 gdb 13.2-3 on Azure Linux 3.0, azl3 crash 8.0.4-3 on Azure Linux 3.0
Fixed versions11.2-3, 8.0.1-3, 13.2-3, 8.0.4-3
Vendor guidance
CBL-Mariner Releases
Microsoft Security Response CenterCVE-2023-39129
MediumCVSS 5.5
GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap use after free via the function add_pe_exported_sym() at /gdb/coff-pe-read.c.
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Affected productsazl3 crash 8.0.4-4 on Azure Linux 3.0, cbl2 gdb 11.2-3 on CBL Mariner 2.0, cbl2 crash 8.0.1-3 on CBL Mariner 2.0, azl3 gdb 13.2-3 on Azure Linux 3.0
Fixed versions8.0.4-3, 11.2-3, 8.0.1-3, 13.2-3
Vendor guidance
CBL-Mariner Releases
Microsoft Security Response CenterCVE-2022-24736
LowCVSS 5.5
A Malformed Lua script can crash Redis
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Affected productscm1 redis 6.2.7-1 on CBL Mariner 1.0, cbl2 redis 6.2.7-1 on CBL Mariner 2.0, cbl2 ceph 16.2.10-10 on CBL Mariner 2.0
Fixed versions6.2.7-1
Vendor guidance
CBL-Mariner Releases
Microsoft Security Response CenterCVE-2023-45929
MediumCVSS 6.2
S-Lang 2.3.2 was discovered to contain a segmentation fault via the function fixup_tgetstr().
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Affected productsazl3 slang 2.3.3-1 on Azure Linux 3.0, cbl2 slang 2.3.2-4 on CBL Mariner 2.0, cbl2 slang 2.3.2-4 on CBL-Mariner 2.0
Microsoft Security Response CenterCVE-2023-39128
MediumCVSS 5.5
GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a stack overflow via the function ada_decode at /gdb/ada-lang.c.
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Affected productsazl3 crash 8.0.4-4 on Azure Linux 3.0, azl3 gdb 13.2-4 on Azure Linux 3.0, cbl2 gdb 11.2-3 on CBL Mariner 2.0, cbl2 crash 8.0.1-3 on CBL Mariner 2.0
Fixed versions8.0.4-3, 13.2-3, 11.2-3, 8.0.1-3
Vendor guidance
CBL-Mariner Releases
Microsoft Security Response CenterCVE-2024-28863
MediumCVSS 6.5
node-tar vulnerable to denial of service while parsing a tar file due to lack of folders count validation
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Affected productscbl2 reaper 3.1.1-17 on CBL Mariner 2.0, cbl2 nodejs18 18.20.3-1 on CBL Mariner 2.0, azl3 nodejs 20.14.0-1 on Azure Linux 3.0, cbl2 reaper 3.1.1-18 on CBL Mariner 2.0
Fixed versions3.1.1-17, 18.20.3-1, 20.14.0-1
Vendor guidance
CBL-Mariner Releases
Microsoft Security Response CenterCVE-2024-0901
HighCVSS 7.5
SEGV and out of bounds memory read from malicious packet
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Affected productsazl3 mariadb 10.11.6-3 on Azure Linux 3.0
Fixed versions10.11.6-3
Vendor guidance
CBL-Mariner Releases
Microsoft Security Response CenterCVE-2023-52752
HighCVSS 7.8
smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Affected productscbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0
Fixed versions5.15.167.1-2
Vendor guidance
CBL-Mariner Releases
Microsoft Security Response CenterCVE-2024-28835
MediumCVSS 5.0
Gnutls: potential crash during chain building/verification
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Affected productscbl2 gnutls 3.7.11-1 on CBL Mariner 2.0, azl3 gnutls 3.8.3-2 on Azure Linux 3.0, azl3 gnutls 3.8.3-4 on Azure Linux 3.0
Fixed versions3.7.11-1, 3.8.3-2
Vendor guidance
CBL-Mariner Releases
Microsoft Security Response CenterCVE-2024-28834
MediumCVSS 5.3
Gnutls: vulnerable to minerva side-channel information leak
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Affected productscbl2 gnutls 3.7.11-1 on CBL Mariner 2.0, azl3 gnutls 3.8.3-2 on Azure Linux 3.0, azl3 gnutls 3.8.3-4 on Azure Linux 3.0
Fixed versions3.7.11-1, 3.8.3-2
Vendor guidance
CBL-Mariner Releases
Microsoft Security Response CenterCVE-2024-30204
LowCVSS 2.8
In Emacs before 29.3, LaTeX preview is enabled by default for e-mail attachments.
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Affected productsazl3 emacs 29.3 on Azure Linux 3.0
Fixed versions29.3
Vendor guidance
CBL-Mariner Releases
Microsoft Security Response CenterCVE-2024-2004
LowCVSS 3.5
Usage of disabled protocol
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Affected productscbl2 mysql 8.0.40-1 on CBL Mariner 2.0, cbl2 curl 8.8.0-1 on CBL Mariner 2.0, azl3 mysql 8.0.40-1 on Azure Linux 3.0, azl3 curl 8.8.0-1 on Azure Linux 3.0
Fixed versions8.0.40-1, 8.8.0-1, 3.30.3-2
Vendor guidance
CBL-Mariner Releases
Microsoft Security Response CenterCVE-2020-28163
MediumCVSS 6.5
libdwarf before 20201201 allows a dwarf_print_lines.c NULL pointer dereference and application crash via a DWARF5 line-table header that has an invalid FORM for a pathname.
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Affected productscbl2 libdwarf 0.9.0 on CBL Mariner 2.0, azl3 libdwarf 0.9.0-1 on Azure Linux 3.0
Fixed versions0.9.0, 0.9.0-1
Vendor guidance
CBL-Mariner Releases
Before you act
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.