Search threats, CVEs… ⌘K
Vendor advisories

Microsoft Security Response Center

Browse 15,985 advisories from this official source. Search by product, CVE, severity, or advisory ID.

Current Checked 8 minutes ago Checked every 6 hours
All vendor sources Official source

15,985 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2024-56724
MediumCVSS 5.5

mfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56724
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-0725
HighCVSS 7.3

gzip integer overflow

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mysql 8.0.41-1 on CBL Mariner 2.0, cbl2 mysql 8.0.41-1 on CBL-Mariner 2.0, cbl2 mysql 8.0.40-4 on CBL Mariner 2.0, azl3 curl 8.11.1-3 on Azure Linux 3.0
Fixed versions8.0.40-4, 8.11.1-3, 8.0.40-6, 8.0.42-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-0725
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-2924
LowCVSS 3.3

HDF5 H5HLcache.c H5HL__fl_deserialize heap-based overflow

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 hdf5 1.14.4-1 on CBL Mariner 2.0, azl3 hdf5 1.14.4.3-1 on Azure Linux 3.0, cbl2 hdf5 1.14.6-1 on CBL Mariner 2.0, azl3 hdf5 1.14.6-1 on Azure Linux 3.0
Fixed versions1.14.6-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-2924
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-30703
LowCVSS 2.7

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 5.7.32 and prior and 8.0.22 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Client. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Client. CVSS 3.1 Base Score 5.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H).

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mysql 8.0.42-1 on CBL Mariner 2.0, azl3 mysql 8.0.42-1 on Azure Linux 3.0, cbl2 mysql 8.0.41-1 on CBL-Mariner 2.0, azl3 mysql 8.0.41-1 on Azure Linux 3.0
Fixed versions8.0.42-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-30703
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-35864
HighCVSS 7.8

smb: client: fix potential UAF in smb2_is_valid_lease_break()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1
CVE-2024-35864
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50304
MediumCVSS 5.5

ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.179.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.76.1-1 on Azure Linux 3.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0
Fixed versions5.15.179.1-1, 6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50304
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50031
MediumCVSS 5.5

drm/v3d: Stop the active perfmon before being destroyed

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.57.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50031
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49927
MediumCVSS 5.5

x86/ioapic: Handle allocation failures gracefully

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-49927
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21957
MediumCVSS 5.5

scsi: qla1280: Fix kernel oops when debug level > 2

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.85.1-2 on Azure Linux 3.0, azl3 kernel 6.6.82.1-1 on Azure Linux 3.0
Fixed versions5.15.180.1-1, 6.6.85.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2025-21957
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-21159
MediumCVSS 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mysql 8.0.40-1 on CBL Mariner 2.0, azl3 mysql 8.0.40-1 on Azure Linux 3.0, cbl2 mysql 8.0.36-1 on CBL Mariner 2.0, azl3 mysql 8.0.36-1 on Azure Linux 3.0
Fixed versions8.0.40-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-21159
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-9632
HighCVSS 7.8

Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 xorg-x11-server 1.20.10-13 on CBL Mariner 2.0, azl3 xorg-x11-server-Xwayland 24.1.1-3 on Azure Linux 3.0, cbl2 xorg-x11-server 1.20.10-15 on CBL Mariner 2.0, cbl2 xorg-x11-server 1.20.10-15 on CBL-Mariner 2.0
Fixed versions1.20.10-13, 24.1.1-3
Vendor guidance

CBL-Mariner Releases

CVE-2024-9632
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-54132
Medium

GitHub CLI allows downloading malicious GitHub Actions workflow artifact to result in path traversal vulnerability

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 gh 2.13.0-23 on CBL Mariner 2.0, azl3 gh 2.62.0-2 on Azure Linux 3.0, azl3 gh 2.62.0-8 on Azure Linux 3.0, cbl2 gh 2.13.0-24 on CBL Mariner 2.0
Fixed versions2.13.0-23, 2.62.0-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-54132
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56723
MediumCVSS 5.5

mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions5.15.176.3-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56723
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-1211
Medium

Versions of the package hackney before 1.21.0 are vulnerable to Server-side Request Forgery (SSRF) due to improper parsing of URLs by URI built-in module and hackey. Given the URL http://127.0.0.1?@127.2.2.2/, the URI function will parse and see the host as 127.0.0.1 (which is correct), and hackney will refer the host as 127.2.2.2/. This vulnerability can be exploited when users rely on the URL function for host checking.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 rabbitmq-server 3.11.24-3 on CBL Mariner 2.0, cbl2 rabbitmq-server 3.11.24-3 on CBL-Mariner 2.0
CVE-2025-1211
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-54683
MediumCVSS 5.5

netfilter: IDLETIMER: Fix for possible ABBA deadlock

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.76.1-1 on Azure Linux 3.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0
Fixed versions6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-54683
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56737
MediumCVSS 6.7

GNU GRUB (aka GRUB2) through 2.12 has a heap-based buffer overflow in fs/hfs.c via crafted sblock data in an HFS filesystem.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 grub2 2.06-25 on Azure Linux 3.0, cbl2 grub2 2.06-14 on CBL Mariner 2.0, azl3 grub2 2.06-24 on Azure Linux 3.0, cbl2 grub2 2.06-15 on CBL Mariner 2.0
Fixed versions2.06-25, 2.06-15
Vendor guidance

CBL-Mariner Releases

CVE-2024-56737
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-27144
Medium

Go JOSE's Parsing Vulnerable to Denial of Service

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 skopeo 1.14.4-5 on Azure Linux 3.0, cbl2 influxdb 2.6.1-22 on CBL Mariner 2.0, azl3 ig 0.37.0-4 on Azure Linux 3.0, cbl2 kube-vip-cloud-provider 0.0.2-22 on CBL Mariner 2.0
Fixed versions1.14.4-4, 2.6.1-21, 0.37.0-2, 0.0.2-20
Vendor guidance

CBL-Mariner Releases

CVE-2025-27144
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-2923
LowCVSS 3.3

HDF5 H5Fint.c H5F_addr_encode_len heap-based overflow

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 hdf5 1.14.4.3-1 on Azure Linux 3.0, cbl2 hdf5 1.14.4-1 on CBL Mariner 2.0
Fixed versions1.14.6-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-2923
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-40909
MediumCVSS 5.9

Perl threads have a working directory race condition where file operations may target unintended paths

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscm2 perl 5.34.1-491 on CBL Mariner 2.0, cbl2 perl 5.34.1-491 on CBL Mariner 2.0, azl3 perl 5.38.2-509 on Azure Linux 3.0, cbl2 perl 5.34.1-491 on CBL-Mariner 2.0
Fixed versions5.34.1-491, 5.38.2-509
Vendor guidance

CBL-Mariner Releases

CVE-2025-40909
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49933
Medium

blk_iocost: fix more out of bound shifts

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-49933
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21948
MediumCVSS 5.5

HID: appleir: Fix potential NULL dereference at raw event handle

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.82.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.85.1-2 on Azure Linux 3.0
Fixed versions6.6.85.1-2, 5.15.180.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21948
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-29786
HighCVSS 7.5

Memory Exhaustion in Expr Parser with Unrestricted Input

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 ig 0.37.0-4 on Azure Linux 3.0, azl3 keda 2.14.1-7 on Azure Linux 3.0, cbl2 coredns 1.11.1-18 on CBL-Mariner 2.0, cbl2 coredns 1.11.1-17 on CBL Mariner 2.0
Fixed versions0.37.0-3, 2.14.1-4, 1.11.1-17, 1.11.4-4
Vendor guidance

CBL-Mariner Releases

CVE-2025-29786
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-32618
HighCVSS 7.4

HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5T__get_native_type in H5Tnative.c resulting in the corruption of the instruction pointer.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 hdf5 1.14.4-1 on CBL Mariner 2.0, azl3 hdf5 1.14.4.3-1 on Azure Linux 3.0, azl3 hdf5 1.14.3-1 on Azure Linux 3.0, cbl2 hdf5 1.12.1-13 on CBL-Mariner 2.0
Fixed versions1.14.4-1, 1.14.4.3-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-32618
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-21135
MediumCVSS 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mysql 8.0.40-1 on CBL Mariner 2.0, azl3 mysql 8.0.40-1 on Azure Linux 3.0, cbl2 mysql 8.0.36-1 on CBL Mariner 2.0, azl3 mysql 8.0.36-1 on Azure Linux 3.0
Fixed versions8.0.40-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-21135
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources