Search threats, CVEs… ⌘K
Vendor advisories

Microsoft Security Response Center

Browse 15,985 advisories from this official source. Search by product, CVE, severity, or advisory ID.

Current Checked 2 minutes ago Checked every 6 hours
All vendor sources Official source

15,985 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2024-11236
CriticalCVSS 9.8

Integer overflow in the firebird and dblib quoters causing OOB writes

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 php 8.1.31-1 on CBL Mariner 2.0, azl3 php 8.3.14-1 on Azure Linux 3.0, cbl2 php 8.1.30-1 on CBL Mariner 2.0, cbl2 php 8.1.30-1 on CBL-Mariner 2.0
Fixed versions8.1.31-1, 8.3.14-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-11236
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-12905
HighCVSS 7.5

An Improper Link Resolution Before File Access ("Link Following") and Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal"). This vulnerability occurs when extracting a maliciously crafted tar file, which can result in unauthorized file writes or overwrites outside the intended extraction directory. The issue is associated with index.js in the tar-fs package. This issue affects tar-fs: from 0.0.0 before 1.16.4, from 2.0.0 before 2.1.2, from 3.0.0 before 3.0.8.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 reaper 3.1.1-18 on CBL Mariner 2.0, cbl2 reaper 3.1.1-18 on CBL-Mariner 2.0
Fixed versions3.1.1-18
Vendor guidance

CBL-Mariner Releases

CVE-2024-12905
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49973
Medium

r8169: add tally counter fields added with RTL8125

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-2 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.57.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-49973
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50160
MediumCVSS 5.5

ALSA: hda/cs8409: Fix possible NULL dereference

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50160
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-52582
MediumCVSS 5.5

netfs: Only call folio_start_fscache() one time for each folio

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
CVE-2023-52582
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-21090
HighCVSS 7.5

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Python). Supported versions that are affected are 8.3.0 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Connectors. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 mysql 8.0.41-1 on Azure Linux 3.0, cbl2 mysql 8.0.41-1 on CBL Mariner 2.0, cbl2 mysql 8.0.41-1 on CBL-Mariner 2.0
CVE-2024-21090
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-1632
LowCVSS 3.3

libarchive bsdunzip.c list null pointer dereference

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 libarchive 3.7.7-2 on Azure Linux 3.0
Fixed versions3.7.7-2
Vendor guidance

CBL-Mariner Releases

CVE-2025-1632
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-26945
HighCVSS 8.4

crypto: iaa - Fix nr_cpus < nr_iaa case

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.92.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
CVE-2024-26945
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56738
MediumCVSS 6.7

GNU GRUB (aka GRUB2) through 2.12 does not use a constant-time algorithm for grub_crypto_memcmp and thus allows side-channel attacks.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 grub2 2.06-14 on CBL Mariner 2.0, azl3 grub2 2.06-24 on Azure Linux 3.0, azl3 grub2 2.06-27 on Azure Linux 3.0, cbl2 grub2 2.06-16
CVE-2024-56738
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-3416
LowCVSS 3.7

Rust-openssl: rust-openssl use-after-free in `md::fetch` and `cipher::fetch`

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 rpm-ostree 2024.4-3 on Azure Linux 3.0, azl3 python-cryptography 42.0.5-3 on Azure Linux 3.0, azl3 rust 1.75.0-14 on Azure Linux 3.0, azl3 rust 1.86.0-1 on Azure Linux 3.0
CVE-2025-3416
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-2914
LowCVSS 3.3

HDF5 H5FScache.c H5FS__sinfo_Srialize_Sct_cb heap-based overflow

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 hdf5 1.14.4-1 on CBL Mariner 2.0, cbl2 hdf5 1.14.6-1 on CBL Mariner 2.0, azl3 hdf5 1.14.4.3-1 on Azure Linux 3.0, azl3 hdf5 1.14.6-1 on Azure Linux 3.0
Fixed versions1.14.6-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-2914
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-30683
MediumCVSS 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mysql 8.0.42-1 on CBL Mariner 2.0, azl3 mysql 8.0.42-1 on Azure Linux 3.0, azl3 mysql 8.0.41-1 on Azure Linux 3.0, cbl2 mysql 8.0.41-1 on CBL Mariner 2.0
Fixed versions8.0.42-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-30683
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50163
Medium

bpf: Make sure internal and UAPI bpf_redirect flags don't overlap

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50163
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-52569
MediumCVSS 5.5

btrfs: remove BUG() after failure to insert delayed dir index item

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
CVE-2023-52569
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-28319
HighCVSS 7.5

A use after free vulnerability exists in curl

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 rust 1.72.0-2 on CBL Mariner 2.0, cbl2 mysql 8.0.34-1 on CBL Mariner 2.0, cbl2 curl 8.2.1-1 on CBL Mariner 2.0, azl3 tensorflow 2.16.1-1 on Azure Linux 3.0
Fixed versions1.72.0-2, 8.0.34-1, 8.2.1-1, 2.16.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2023-28319
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49899
Medium

drm/amd/display: Initialize denominators' default to 1

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-9 on Azure Linux 3.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0
Fixed versions6.6.64.2-9
Vendor guidance

CBL-Mariner Releases

CVE-2024-49899
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-0495
Medium

Secrets leakage to telemetry endpoint via cache backend configuration via buildx

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 docker-buildx 0.14.0-5 on Azure Linux 3.0, cbl2 moby-buildx 0.7.1-25 on CBL Mariner 2.0, cbl2 moby-buildx 0.7.1-25 on CBL-Mariner 2.0
Fixed versions0.14.0-5, 0.7.1-25
Vendor guidance

CBL-Mariner Releases

CVE-2025-0495
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-35861
HighCVSS 7.8

smb: client: fix potential UAF in cifs_signal_cifsd_for_reconnect()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL-Mariner 2.0
CVE-2024-35861
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-21160
MediumCVSS 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mysql 8.0.40-1 on CBL Mariner 2.0, azl3 mysql 8.0.40-1 on Azure Linux 3.0, cbl2 mysql 8.0.36-1 on CBL Mariner 2.0, azl3 mysql 8.0.36-1 on Azure Linux 3.0
Fixed versions8.0.40-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-21160
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-6531
MediumCVSS 6.4

Rejected reason: This was not a security issue in Bootstrap. Bootstrap’s JavaScript is not intended to sanitize unsafe or intentionally dangerous HTML. As such, the reported behavior fell outside the scope of Bootstrap’s security model, and the associated CVE has been rescinded.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 opa 0.63.0-4 on CBL Mariner 2.0, cbl2 prometheus 2.37.9-5 on CBL Mariner 2.0, cbl2 prometheus 2.37.9-6 on CBL Mariner 2.0, cbl2 prometheus 2.37.9-4 on CBL Mariner 2.0
CVE-2024-6531
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49935
MediumCVSS 5.5

ACPI: PAD: fix crash in exit_round_robin()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-49935
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-0690
MediumCVSS 6.1

Grub2: read: integer overflow may lead to out-of-bounds write

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 grub2 2.06-14 on CBL Mariner 2.0, cbl2 grub2 2.06-15 on CBL Mariner 2.0, azl3 grub2 2.06-25 on Azure Linux 3.0, cbl2 grub2 2.06-15 on CBL-Mariner 2.0
Fixed versions2.06-15, 2.06-25
Vendor guidance

CBL-Mariner Releases

CVE-2025-0690
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21711
Medium

net/rose: prevent integer overflows in rose_setsockopt()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.179.1-1 on CBL Mariner 2.0
Fixed versions6.6.78.1-3, 5.15.179.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21711
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-52532
MediumCVSS 5.5

net: mana: Fix TX CQE error handling

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
CVE-2023-52532
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources