Search threats, CVEs… ⌘K
Vendor advisories

Microsoft Security Response Center

Browse 15,985 advisories from this official source. Search by product, CVE, severity, or advisory ID.

Current Checked 50 minutes ago Checked every 6 hours
All vendor sources Official source

15,985 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2025-30215
CriticalCVSS 9.6

NATS-Server Fails to Authorize Certain Jetstream Admin APIs

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 telegraf 1.29.4-16 on CBL Mariner 2.0, cbl2 telegraf 1.29.4-15 on CBL Mariner 2.0, azl3 telegraf 1.31.0-9 on Azure Linux 3.0, azl3 telegraf 1.31.0-10 on Azure Linux 3.0
Fixed versions1.29.4-15, 1.31.0-9
Vendor guidance

CBL-Mariner Releases

CVE-2025-30215
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-33874
CriticalCVSS 9.8

HDF5 Library through 1.14.3 has a heap buffer overflow in H5O__mtime_new_encode in H5Omtime.c.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 hdf5 1.14.4-1 on CBL Mariner 2.0, azl3 hdf5 1.14.4.3-1 on Azure Linux 3.0, cbl2 hdf5 1.12.1-13 on CBL Mariner 2.0, azl3 hdf5 1.14.3-1 on Azure Linux 3.0
Fixed versions1.14.4-1, 1.14.4.3-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-33874
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50273
MediumCVSS 5.5

btrfs: reinitialize delayed ref list after deleting it from the list

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50273
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-2310
MediumCVSS 5.3

HDF5 Metadata Attribute Decoder H5MM_strndup heap-based overflow

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 hdf5 1.14.4.3-1 on Azure Linux 3.0, cbl2 hdf5 1.14.4-1 on CBL Mariner 2.0, cbl2 hdf5 1.14.6-1 on CBL Mariner 2.0, azl3 hdf5 1.14.6-1 on Azure Linux 3.0
Fixed versions1.14.6-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-2310
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49996
HighCVSS 7.8

cifs: Fix buffer overflow when parsing NFS reparse points

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-2 on Azure Linux 3.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions5.15.176.3-1, 6.6.57.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-49996
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21743
HighCVSS 7.1

usbnet: ipheth: fix possible overflow in DPE length check

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.78.1-1 on Azure Linux 3.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0
Fixed versions6.6.78.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21743
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-21163
MediumCVSS 5.5

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mysql 8.0.40-1 on CBL Mariner 2.0, azl3 mysql 8.0.40-1 on Azure Linux 3.0, cbl2 mysql 8.0.36-1 on CBL Mariner 2.0, azl3 mysql 8.0.36-1 on Azure Linux 3.0
Fixed versions8.0.40-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-21163
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-57807
MediumCVSS 5.5

scsi: megaraid_sas: Fix for a potential deadlock

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.76.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0
Fixed versions5.15.176.3-1, 6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-57807
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53090
HighCVSS 7.5

afs: Fix lock recursion

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.96.2-2 on Azure Linux 3.0, azl3 kernel 6.6.104.2-4 on Azure Linux 3.0, azl3 kernel 6.6.112.1-2 on Azure Linux 3.0
CVE-2024-53090
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49934
MediumCVSS 7.1

fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-9 on Azure Linux 3.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0
Fixed versions6.6.64.2-9
Vendor guidance

CBL-Mariner Releases

CVE-2024-49934
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49911
MediumCVSS 5.5

drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-9 on Azure Linux 3.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0
Fixed versions6.6.64.2-9
Vendor guidance

CBL-Mariner Releases

CVE-2024-49911
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21680
HighCVSS 7.8

pktgen: Avoid out-of-bounds access in get_imix_entries

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, cbl2 kernel 5.15.176.3-3 on CBL-Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.76.1-1 on Azure Linux 3.0
Fixed versions5.15.180.1-1, 6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21680
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42107
MediumCVSS 4.7

ice: Don't process extts if PTP is disabled

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.96.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.96.2-2 on Azure Linux 3.0, azl3 kernel 6.6.104.2-4 on Azure Linux 3.0
CVE-2024-42107
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21951
MediumCVSS 5.5

bus: mhi: host: pci_generic: Use pci_try_reset_function() to avoid deadlock

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.82.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.85.1-2 on Azure Linux 3.0, cbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0
Fixed versions6.6.85.1-2, 5.15.180.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21951
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-33875
MediumCVSS 5.7

HDF5 Library through 1.14.3 has a heap-based buffer overflow in H5O__layout_encode in H5Olayout.c resulting in the corruption of the instruction pointer.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 hdf5 1.14.4-1 on CBL Mariner 2.0, azl3 hdf5 1.14.4.3-1 on Azure Linux 3.0, azl3 hdf5 1.14.3-1 on Azure Linux 3.0, cbl2 hdf5 1.12.1-13 on CBL Mariner 2.0
Fixed versions1.14.4-1, 1.14.4.3-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-33875
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53209
Medium

bnxt_en: Fix receive ring space parameters when XDP is active

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.85.1-1 on Azure Linux 3.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0
Fixed versions6.6.85.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-53209
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53042
Medium

ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.169.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.169.1-1 on CBL-Mariner 2.0
Fixed versions6.6.64.2-1, 5.15.173.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-53042
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-5245
MediumCVSS 5.3

GNU Binutils objdump debug.c debug_type_samep memory corruption

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 binutils 2.41-6 on Azure Linux 3.0, cbl2 binutils 2.37-15 on CBL Mariner 2.0, cbl2 binutils 2.37-15 on CBL-Mariner 2.0
Fixed versions2.41-6, 2.37-15
Vendor guidance

CBL-Mariner Releases

CVE-2025-5245
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-2295
LowCVSS 3.5

Potential iSCSI R2T PDU Vulnerability

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 edk2 20230301gitf80f052277c8-42 on CBL Mariner 2.0, cbl2 edk2 20230301gitf80f052277c8-43 on CBL Mariner 2.0, cbl2 hvloader 1.0.1-14 on CBL Mariner 2.0, cbl2 edk2 20230301gitf80f052277c8-44 on CBL Mariner 2.0
Fixed versions1.0.1-16, 20240524git3e722403cd16-14, 20230301gitf80f052277c8-45
Vendor guidance

CBL-Mariner Releases

CVE-2025-2295
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-32909
MediumCVSS 5.3

Libsoup: null pointer dereference on libsoup through function "sniff_mp4" in soup-content-sniffer.c

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 libsoup 3.4.4-6 on Azure Linux 3.0, cbl2 libsoup 3.0.4-7 on CBL-Mariner 2.0, azl3 libsoup 3.4.4-3 on Azure Linux 3.0, cbl2 libsoup 3.0.4-7 on CBL Mariner 2.0
Fixed versions3.4.4-3, 3.0.4-7
Vendor guidance

CBL-Mariner Releases

CVE-2025-32909
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-21203
MediumCVSS 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions that are affected are 8.0.39 and prior 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mysql 8.0.40-1 on CBL Mariner 2.0, azl3 mysql 8.0.40-1 on Azure Linux 3.0, azl3 mysql 8.0.36-1 on Azure Linux 3.0, cbl2 mysql 8.0.36-1 on CBL-Mariner 2.0
Fixed versions8.0.40-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-21203
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53098
HighCVSS 7.8

drm/xe/ufence: Prefetch ufence addr to catch bogus address

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.180.1-1 on CBL-Mariner 2.0
CVE-2024-53098
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-1861
MediumCVSS 9.8

Stream HTTP wrapper truncates redirect location to 1024 bytes

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 php 8.3.14-1 on Azure Linux 3.0, cbl2 php 8.1.31-1 on CBL Mariner 2.0, cbl2 php 8.1.32-1 on CBL Mariner 2.0, azl3 php 8.3.19-1 on Azure Linux 3.0
Fixed versions8.3.19-1, 8.1.32-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-1861
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56620
MediumCVSS 5.5

scsi: ufs: qcom: Only free platform MSIs when ESI is enabled

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.92.2-1 on Azure Linux 3.0
Fixed versions6.6.90.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56620
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources