Vendor advisories

Microsoft Security Response Center

Browse 15,985 advisories from this official source. Search by product, CVE, severity, or advisory ID.

Current Checked 34 minutes ago Checked every 6 hours

15,985 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2025-2291
HighCVSS 8.1

PgBouncer default auth_query does not take Postgres password expiry into account

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 pgbouncer 1.16.1-1 on CBL Mariner 2.0, cbl2 pgbouncer 1.24.1-1 on CBL Mariner 2.0, azl3 pgbouncer 1.24.1-1 on Azure Linux 3.0, azl3 pgbouncer 1.20.1-1 on Azure Linux 3.0
Fixed versions1.24.1-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-54661
MediumCVSS 5.0

readline.sh in socat before1.8.0.2 relies on the /tmp/$USER/stderr2 file.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 socat 1.7.4.4-2 on Azure Linux 3.0, cbl2 socat 1.7.4.3-2 on CBL Mariner 2.0, cbl2 socat 1.7.4.3-2 on CBL-Mariner 2.0
Fixed versions1.7.4.4-2, 1.7.4.3-2
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-42063
MediumCVSS 5.5

bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
Microsoft Security Response CenterCVE-2024-32611
CriticalCVSS 9.8

HDF5 Library through 1.14.3 may use an uninitialized value in H5A__attr_release_table in H5Aint.c.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 hdf5 1.14.4-1 on CBL Mariner 2.0, azl3 hdf5 1.14.4.3-1 on Azure Linux 3.0, cbl2 hdf5 1.12.1-13 on CBL Mariner 2.0, cbl2 hdf5 1.12.1-13 on CBL-Mariner 2.0
Fixed versions1.14.4-1, 1.14.4.3-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2025-21928
HighCVSS 7.8

HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, cbl2 kernel 5.15.176.3-3 on CBL-Mariner 2.0, azl3 kernel 6.6.82.1-1 on Azure Linux 3.0
Fixed versions5.15.180.1-1, 6.6.85.1-2
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2025-4947
MediumCVSS 6.5

QUIC certificate check skip with wolfSSL

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 cmake 3.30.3-7 on Azure Linux 3.0
Fixed versions3.30.3-7
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2025-21669
MediumCVSS 5.5

vsock/virtio: discard packets if the transport changes

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-9 on Azure Linux 3.0, cbl2 kernel 5.15.176.3-3 on CBL-Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.76.1-1 on Azure Linux 3.0
Fixed versions6.6.76.1-1, 5.15.180.1-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-26812
MediumCVSS 5.5

vfio/pci: Create persistent INTx handler

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Fixed versions5.15.176.3-3
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-50002
MediumCVSS 5.5

static_call: Handle module init failure correctly in static_call_del_module()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-2 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.57.1-2
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-48615
HighCVSS 7.5

Null Pointer Dereference vulnerability in libarchive 3.7.6 and earlier when running program bsdtar in function header_pax_extension at rchive_read_support_format_tar.c:1844:8.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 cmake 3.21.4-17 on CBL Mariner 2.0, azl3 cmake 3.30.3-6 on Azure Linux 3.0, cbl2 cmake 3.21.4-18 on CBL Mariner 2.0, cbl2 libarchive 3.6.1-6 on CBL Mariner 2.0
Fixed versions3.21.4-17, 3.30.3-6, 3.6.1-6
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-49902
Medium

jfs: check if leafidx greater than num leaves per dmap tree

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-53096
HighCVSS 7.8

mm: resolve faulty mmap_region() error path behaviour

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.173.1-2 on CBL-Mariner 2.0
Fixed versions6.6.64.2-1, 5.15.176.3-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-49977
MediumCVSS 5.5

net: stmmac: Fix zero-division error when disabling tc cbs

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-2 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.57.1-2
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-58007
HighCVSS 7.1

soc: qcom: socinfo: Avoid out of bounds read of serial number

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Fixed versions6.6.78.1-3
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-53203
HighCVSS 7.8

usb: typec: fix potential array underflow in ucsi_ccg_sync_control()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Fixed versions6.6.90.1-1, 5.15.184.1-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-49905
MediumCVSS 5.5

drm/amd/display: Add null check for 'afb' in amdgpu_dm_plane_handle_cursor_update (v2)

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.56.1-5 on Azure Linux 3.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-53088
Medium

i40e: fix race condition by adding filter's intermediate sync state

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2025-32907
HighCVSS 7.5

Libsoup: denial of service in server when client requests a large amount of overlapping ranges with range header

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscm2 libsoup 3.0.4-7 on CBL Mariner 2.0, azl3 libsoup 3.4.4-7 on Azure Linux 3.0, cbl2 libsoup 3.0.4-7 on CBL Mariner 2.0, cbl2 libsoup 3.0.4-7 on CBL-Mariner 2.0
Fixed versions3.0.4-7, 3.4.4-7
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-26765
MediumCVSS 5.5

LoongArch: Disable IRQ before init_fn() for nonboot CPUs

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Microsoft Security Response CenterCVE-2024-32612
HighCVSS 7.4

HDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5HL__fl_deserialize in H5HLcache.c resulting in the corruption of the instruction pointer a different vulnerability than CVE-2024-32613.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 hdf5 1.14.4-1 on CBL Mariner 2.0, azl3 hdf5 1.14.4.3-1 on Azure Linux 3.0, azl3 hdf5 1.14.3-1 on Azure Linux 3.0, cbl2 hdf5 1.12.1-13 on CBL-Mariner 2.0
Fixed versions1.14.4-1, 1.14.4.3-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2025-21917
MediumCVSS 5.5

usb: renesas_usbhs: Flush the notify_hotplug_work

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.82.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.85.1-2 on Azure Linux 3.0, cbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0
Fixed versions6.6.85.1-2, 5.15.180.1-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-50195
Medium

posix-clock: Fix missing timespec64 check in pc_clock_settime()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-42153
MediumCVSS 5.5

i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.164.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.43.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.162.2-1 on CBL Mariner 2.0, azl3 kernel 6.6.35.1-5 on Azure Linux 3.0
Fixed versions5.15.164.1-1, 6.6.43.1-7
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-56549
Medium

cachefiles: Fix NULL pointer dereference in object->file

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.78.1-1 on Azure Linux 3.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0
Fixed versions6.6.78.1-1
Vendor guidance

CBL-Mariner Releases

Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources