Search threats, CVEs… ⌘K
Vendor advisories

Microsoft Security Response Center

Browse 15,985 advisories from this official source. Search by product, CVE, severity, or advisory ID.

Current Checked 2 hours ago Checked every 6 hours
All vendor sources Official source

15,985 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2025-21665
MediumCVSS 5.5

filemap: avoid truncating 64-bit offset to 32 bits

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.76.1-1 on Azure Linux 3.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0
Fixed versions5.15.180.1-1, 6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21665
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42160
HighCVSS 7.8

f2fs: check validation of fault attrs in f2fs_build_fault_attr()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.43.1-7 on Azure Linux 3.0, azl3 kernel 6.6.35.1-5 on Azure Linux 3.0
Fixed versions6.6.43.1-7
Vendor guidance

CBL-Mariner Releases

CVE-2024-42160
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50099
Medium

arm64: probes: Remove broken LDR (literal) uprobe support

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50099
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-27219
MediumCVSS 5.3

In the CGI gem before 0.4.2 for Ruby, the CGI::Cookie.parse method in the CGI library contains a potential Denial of Service (DoS) vulnerability. The method does not impose any limit on the length of the raw cookie value it processes. This oversight can lead to excessive resource consumption when parsing extremely large cookies.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 ruby 3.1.4-9 on CBL Mariner 2.0, azl3 ruby 3.3.5-3 on Azure Linux 3.0, cbl2 ruby 3.1.4-9 on CBL-Mariner 2.0
Fixed versions3.1.4-9, 3.3.5-3
Vendor guidance

CBL-Mariner Releases

CVE-2025-27219
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-26306
MediumCVSS 5.9

iPerf3 before 3.17 when used with OpenSSL before 3.2.0 as a server with RSA authentication allows a timing side channel in RSA decryption operations. This side channel could be sufficient for an attacker to recover credential plaintext. It requires the attacker to send a large number of messages for decryption as described in "Everlasting ROBOT: the Marvin Attack" by Hubert Kario.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 iperf3 3.17-1 on CBL Mariner 2.0, azl3 iperf3 3.17.1-1 on Azure Linux 3.0, azl3 iperf3 3.16-1 on Azure Linux 3.0, cbl2 iperf3 3.14-2 on CBL Mariner 2.0
Fixed versions3.17-1, 3.17.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-26306
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-47692
MediumCVSS 6.5

nfsd: return -EINVAL when namelen is 0

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-47692
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-21239
MediumCVSS 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.39 and prior 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mysql 8.0.40-1 on CBL Mariner 2.0, azl3 mysql 8.0.40-1 on Azure Linux 3.0, azl3 mysql 8.0.36-1 on Azure Linux 3.0, cbl2 mysql 8.0.36-1 on CBL Mariner 2.0
Fixed versions8.0.40-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-21239
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21993
HighCVSS 7.1

iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.85.1-2 on Azure Linux 3.0, azl3 kernel 6.6.82.1-1 on Azure Linux 3.0
Fixed versions5.15.180.1-1, 6.6.85.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2025-21993
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2022-49750
MediumCVSS 5.5

cpufreq: CPPC: Add u64 casts to avoid overflowing

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1
CVE-2022-49750
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-31584
HighCVSS 5.5

Pytorch before v2.2.0 has an Out-of-bounds Read vulnerability via the component torch/csrc/jit/mobile/flatbuffer_loader.cpp.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 pytorch 2.0.0-5 on CBL Mariner 2.0, cbl2 pytorch 2.0.0-8 on CBL Mariner 2.0, cbl2 pytorch 2.0.0-8 on CBL-Mariner 2.0
Fixed versions2.0.0-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-31584
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-45783
MediumCVSS 4.4

Grub2: fs/hfs+: refcount can be decremented twice

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 grub2 2.06-24 on Azure Linux 3.0, cbl2 grub2 2.06-15 on CBL Mariner 2.0, cbl2 grub2 2.06-14 on CBL Mariner 2.0, azl3 grub2 2.06-25 on Azure Linux 3.0
Fixed versions2.06-25, 2.06-15
Vendor guidance

CBL-Mariner Releases

CVE-2024-45783
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50251
MediumCVSS 6.2

netfilter: nft_payload: sanitize offset and length before calling skb_checksum()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50251
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53058
Medium

net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-53058
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50067
HighCVSS 7.8

uprobe: avoid out-of-bounds memory access of fetching args

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-9 on Azure Linux 3.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0
Fixed versions6.6.64.2-9
Vendor guidance

CBL-Mariner Releases

CVE-2024-50067
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50041
Medium

i40e: Fix macvlan leak by synchronizing access to mac_filter_hash

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-1 on Azure Linux 3.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.57.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50041
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53263
High

Git LFS permits exfiltration of credentials via crafted HTTP URLs

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 git-lfs 3.5.1-4 on CBL Mariner 2.0, azl3 git-lfs 3.6.1-1 on Azure Linux 3.0, azl3 git-lfs 3.4.1-1 on Azure Linux 3.0, cbl2 git-lfs 3.5.1-5 on CBL-Mariner 2.0
Fixed versions3.5.1-4, 3.6.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-53263
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-52639
MediumCVSS 4.7

KVM: s390: vsie: fix race during shadow creation

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
CVE-2023-52639
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-53002
MediumCVSS 5.5

drm/i915: Fix a memory leak with reused mmap_offset

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1
CVE-2023-53002
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21749
MediumCVSS 5.5

net: rose: lock the socket in rose_bind()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-9 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.179.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.78.1-3 on Azure Linux 3.0
Fixed versions6.6.78.1-3, 5.15.179.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21749
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-35904
MediumCVSS 5.5

selinux: avoid dereference of garbage after mount failure

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
CVE-2024-35904
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-33877
HighCVSS 8.8

HDF5 Library through 1.14.3 has a heap-based buffer overflow in H5T__conv_struct_opt in H5Tconv.c.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 hdf5 1.14.4-1 on CBL Mariner 2.0, azl3 hdf5 1.14.4.3-1 on Azure Linux 3.0, azl3 hdf5 1.14.3-1 on Azure Linux 3.0, cbl2 hdf5 1.12.1-13 on CBL Mariner 2.0
Fixed versions1.14.4-1, 1.14.4.3-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-33877
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-21538
HighCVSS 7.5

Versions of the package cross-spawn before 7.0.5 are vulnerable to Regular Expression Denial of Service (ReDoS) due to improper input sanitization.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 reaper 3.1.1-15 on CBL Mariner 2.0, cbl2 nodejs18 18.20.3-2 on CBL Mariner 2.0, azl3 nodejs 20.14.0-3 on Azure Linux 3.0, cbl2 nodejs18 18.20.3-5 on CBL Mariner 2.0
Fixed versions3.1.1-15, 18.20.3-2, 20.14.0-3
Vendor guidance

CBL-Mariner Releases

CVE-2024-21538
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-4516
Medium

Use-after-free in "unicode_escape" decoder with error handler

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 python3 3.9.19-14 on CBL Mariner 2.0, azl3 python3 3.12.9-2 on Azure Linux 3.0, cbl2 python3 3.9.19-13 on CBL Mariner 2.0, cbl2 python3 3.9.19-13 on CBL-Mariner 2.0
Fixed versions3.9.19-14, 3.12.9-2
Vendor guidance

CBL-Mariner Releases

CVE-2025-4516
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources