Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
16,938Advisories collected
6,370Published or updated in 30 days
7,004Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

16,938 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2025-5889
LowCVSS 3.1

juliangruber brace-expansion index.js expand redos

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 nodejs18 18.20.3-8 on CBL Mariner 2.0, cbl2 nodejs18 18.20.3-9 on CBL Mariner 2.0, cbl2 nodejs18 18.20.3-9 on CBL-Mariner 2.0
Fixed versions18.20.3-9
Vendor guidance

CBL-Mariner Releases

CVE-2025-5889
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-9042
MediumCVSS 5.9

This CVE affects only Windows worker nodes. Your worker node is vulnerable to this issue if it is running one of the affected versions listed below.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kubernetes 1.28.4-18 on CBL Mariner 2.0, cbl2 kubernetes 1.28.4-18 on CBL-Mariner 2.0
CVE-2024-9042
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53120
Medium

net/mlx5e: CT: Fix null-ptr-deref in add rule err flow

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL-Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-53120
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-26600
HighCVSS 7.8

Xorg: xwayland: use-after-free in playreleasedevents()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 xorg-x11-server-Xwayland 24.1.1-3 on Azure Linux 3.0, cbl2 xorg-x11-server 1.20.10-15 on CBL Mariner 2.0, cbl2 xorg-x11-server 1.20.10-15 on CBL-Mariner 2.0, azl3 xorg-x11-server-Xwayland 24.1.6-1 on Azure Linux 3.0
Fixed versions24.1.6-1, 1.20.10-15
Vendor guidance

CBL-Mariner Releases

CVE-2025-26600
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21999
HighCVSS 7.8

proc: fix UAF in proc_get_inode()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.85.1-2 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0
Fixed versions5.15.180.1-1, 6.6.85.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2025-21999
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-4138
HighCVSS 8.1

Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 python3 3.9.19-14 on CBL Mariner 2.0, cbl2 python3 3.9.19-13 on CBL Mariner 2.0, azl3 python3 3.12.9-1 on Azure Linux 3.0, cbl2 python3 3.9.19-13 on CBL-Mariner 2.0
Fixed versions3.9.19-14, 3.12.9-2
Vendor guidance

CBL-Mariner Releases

CVE-2025-4138
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-37925
MediumCVSS 5.5

jfs: reject on-disk inodes of an unsupported type

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
CVE-2025-37925
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49958
Medium

ocfs2: reserve space for inline xattr before attaching reflink tree

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-2 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.57.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-49958
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-1244
HighCVSS 8.8

Emacs: shell injection vulnerability in gnu emacs via custom "man" uri scheme

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 emacs 29.4-3 on CBL Mariner 2.0, cbl2 emacs 29.4-3 on CBL-Mariner 2.0, cbl2 emacs 29.4-2 on CBL Mariner 2.0, azl3 emacs 29.4-2 on Azure Linux 3.0
Fixed versions29.4-2
Vendor guidance

CBL-Mariner Releases

CVE-2025-1244
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53119
MediumCVSS 5.5

virtio/vsock: Fix accept_queue memory leak

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-53119
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-27407
HighCVSS 8.4

fs/ntfs3: Fixed overflow check in mi_enum_attr()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
CVE-2024-27407
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-26597
HighCVSS 7.8

Xorg: xwayland: buffer overflow in xkbchangetypesofkey()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 xorg-x11-server-Xwayland 24.1.1-3 on Azure Linux 3.0, cbl2 xorg-x11-server 1.20.10-15 on CBL Mariner 2.0, cbl2 xorg-x11-server 1.20.10-15 on CBL-Mariner 2.0, azl3 xorg-x11-server-Xwayland 24.1.6-1 on Azure Linux 3.0
Fixed versions24.1.6-1, 1.20.10-15
Vendor guidance

CBL-Mariner Releases

CVE-2025-26597
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50285
MediumCVSS 7.5

ksmbd: check outstanding simultaneous SMB operations

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50285
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-47711
MediumCVSS 4.3

Nbdkit: nbdkit-server: off-by-one error when processing block status may lead to a denial of service

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscm2 nbdkit 1.35.3-4 on CBL Mariner 2.0, azl3 nbdkit 1.35.3-7 on Azure Linux 3.0, cbl2 nbdkit 1.35.3-4 on CBL Mariner 2.0, cbl2 nbdkit 1.35.3-4 on CBL-Mariner 2.0
Fixed versions1.35.3-4, 1.35.3-7
Vendor guidance

CBL-Mariner Releases

CVE-2025-47711
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49889
High

ext4: avoid use-after-free in ext4_ext_show_leaf()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-2 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.57.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-49889
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-38152
MediumCVSS 5.5

remoteproc: core: Clear table_sz when rproc_shutdown

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, cbl2 kernel 5.15.176.3-3 on CBL-Mariner 2.0, azl3 kernel 6.6.85.1-4 on Azure Linux 3.0
Fixed versions5.15.180.1-1, 6.6.92.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-38152
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50008
MediumCVSS 5.5

wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-2 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.57.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-50008
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-4373
MediumCVSS 6.5

Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 glib 2.71.0-5 on CBL Mariner 2.0, cbl2 glib 2.71.0-7 on CBL Mariner 2.0, cbl2 glib 2.71.0-6 on CBL Mariner 2.0, cbl2 glib 2.71.0-7 on CBL-Mariner 2.0
Fixed versions2.71.0-6, 2.71.0-7, 2.78.6-3
Vendor guidance

CBL-Mariner Releases

CVE-2025-4373
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21862
MediumCVSS 5.5

drop_monitor: fix incorrect initialization order

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.78.1-3 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.179.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.82.1-1 on Azure Linux 3.0
Fixed versions6.6.82.1-1, 5.15.179.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21862
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-26648
MediumCVSS 5.5

drm/amd/display: Fix variable deferencing before NULL check in edp_setup_replay()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
CVE-2024-26648
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-1215
LowCVSS 2.8

vim main.c memory corruption

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 vim 9.1.0791-4 on Azure Linux 3.0, cbl2 vim 9.1.0791-4 on CBL Mariner 2.0, cbl2 vim 9.1.0791-4 on CBL-Mariner 2.0
Fixed versions9.1.0791-4
Vendor guidance

CBL-Mariner Releases

CVE-2025-1215
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53136
Medium

mm: revert "mm: shmem: fix data-race in shmem_getattr()"

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL-Mariner 2.0
Fixed versions5.15.176.3-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-53136
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-52749
MediumCVSS 4.7

spi: Fix null dereference on suspend

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0
CVE-2023-52749
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50299
MediumCVSS 5.5

sctp: properly validate chunk size in sctp_sf_ootb()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50299
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources