Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
16,938Advisories collected
6,370Published or updated in 30 days
7,004Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

16,938 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2024-49931
HighCVSS 7.8

wifi: ath12k: fix array out-of-bound access in SoC stats

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.57.1-2 on Azure Linux 3.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions6.6.57.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-49931
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21855
HighCVSS 7.8

ibmvnic: Don't reference skb after sending to VIOS

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.78.1-3 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Fixed versions6.6.82.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21855
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-23136
MediumCVSS 5.5

thermal: int340x: Add NULL check for adev

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, azl3 kernel 6.6.85.1-4 on Azure Linux 3.0, cbl2 kernel 5.15.176.3-3 on CBL-Mariner 2.0
Fixed versions5.15.180.1-1, 6.6.92.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-23136
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53124
Medium

net: fix data-races around sk->sk_forward_alloc

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.179.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.76.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL-Mariner 2.0
Fixed versions5.15.179.1-1, 6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-53124
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-1094
HighCVSS 8.1

PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 postgresql 16.5-2 on Azure Linux 3.0, cbl2 postgresql 14.16-1 on CBL Mariner 2.0, azl3 postgresql 16.7-1 on Azure Linux 3.0, cbl2 postgresql 14.14-1 on CBL Mariner 2.0
Fixed versions16.7-1, 14.16-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-1094
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-26601
HighCVSS 7.8

Xorg: xwayland: use-after-free in syncinittrigger()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 xorg-x11-server-Xwayland 24.1.1-3 on Azure Linux 3.0, cbl2 xorg-x11-server 1.20.10-15 on CBL Mariner 2.0, cbl2 xorg-x11-server 1.20.10-15 on CBL-Mariner 2.0, azl3 xorg-x11-server-Xwayland 24.1.6-1 on Azure Linux 3.0
Fixed versions24.1.6-1, 1.20.10-15
Vendor guidance

CBL-Mariner Releases

CVE-2025-26601
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49959
MediumCVSS 5.5

jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-2 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.57.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-49959
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-37802
MediumCVSS 5.5

ksmbd: fix WARNING "do not call blocking ops when !TASK_RUNNING"

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.92.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
CVE-2025-37802
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-22056
HighCVSS 7.8

netfilter: nft_tunnel: fix geneve_opt type confusion addition

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, azl3 kernel 6.6.85.1-4 on Azure Linux 3.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.176.3-3 on CBL-Mariner 2.0
Fixed versions5.15.180.1-1, 6.6.92.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-22056
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49919
Medium

drm/amd/display: Add null check for head_pipe in dcn201_acquire_free_pipe_for_layer

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.79.1-1 on Azure Linux 3.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0
Fixed versions6.6.79.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-49919
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-23084
MediumCVSS 5.6

A vulnerability has been identified in Node.js, specifically affecting the handling of drive names in the Windows environment. Certain Node.js functions do not treat drive names as special on Windows. As a result, although Node.js assumes a relative path, it actually refers to the root directory. On Windows, a path that does not start with the file separator is treated as relative to the current directory. This vulnerability affects Windows users of `path.join` API.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 nodejs18 18.20.3-6 on CBL-Mariner 2.0, azl3 nodejs 20.14.0-8 on Azure Linux 3.0, cbl2 nodejs18 18.20.3-6 on CBL Mariner 2.0
CVE-2025-23084
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-52561
MediumCVSS 5.5

arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
CVE-2023-52561
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21858
HighCVSS 7.8

geneve: Fix use-after-free in geneve_find_dev().

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.78.1-3 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.179.1-1 on CBL Mariner 2.0
Fixed versions6.6.82.1-1, 5.15.179.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21858
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-12797
HighCVSS 7.3

RFC7250 handshakes with unauthenticated servers don't abort as expected

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 openssl 3.3.3-1 on Azure Linux 3.0, azl3 cloud-hypervisor-cvm 38.0.72.2-3 on Azure Linux 3.0, azl3 cloud-hypervisor-cvm 41.0.79-3 on Azure Linux 3.0, cbl2 cloud-hypervisor-cvm 38.0.72.2-5 on CBL Mariner 2.0
Fixed versions3.3.3-1, 38.0.72.2-3, 38.0.72.2-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-12797
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53122
MediumCVSS 5.5

mptcp: cope racing subflow creation in mptcp_rcv_space_adjust

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-53122
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-26596
HighCVSS 7.8

Xorg: xwayland: heap overflow in xkbwritekeysyms()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 xorg-x11-server-Xwayland 24.1.1-3 on Azure Linux 3.0, azl3 xorg-x11-server-Xwayland 24.1.6-1 on Azure Linux 3.0, cbl2 xorg-x11-server 1.20.10-15 on CBL Mariner 2.0, cbl2 xorg-x11-server 1.20.10-15 on CBL-Mariner 2.0
Fixed versions24.1.6-1, 1.20.10-15
Vendor guidance

CBL-Mariner Releases

CVE-2025-26596
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-4517
HighCVSS 9.4

Arbitrary writes via tarfile realpath overflow

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 python3 3.9.19-14 on CBL Mariner 2.0, azl3 python3 3.12.9-2 on Azure Linux 3.0, cbl2 python3 3.9.19-13 on CBL Mariner 2.0, cbl2 python3 3.9.19-13 on CBL-Mariner 2.0
Fixed versions3.9.19-14, 3.12.9-2
Vendor guidance

CBL-Mariner Releases

CVE-2025-4517
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-52576
MediumCVSS 5.5

x86/mm, kexec, ima: Use memblock_free_late() from ima_free_kexec_buffer()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
CVE-2023-52576
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49867
Medium

btrfs: wait for fixup workers before stopping cleaner kthread during umount

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-2 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.57.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-49867
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49968
MediumCVSS 5.5

ext4: filesystems without casefold feature cannot be mounted with siphash

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.121.1-1 on Azure Linux 3.0
Fixed versions6.6.121.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-49968
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-39728
MediumCVSS 5.5

clk: samsung: Fix UBSAN panic in samsung_clk_init()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, azl3 kernel 6.6.85.1-4 on Azure Linux 3.0, cbl2 kernel 5.15.176.3-3 on CBL-Mariner 2.0
Fixed versions5.15.180.1-1, 6.6.92.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-39728
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources