Vendor advisories

Microsoft Security Response Center

Browse 15,985 advisories from this official source. Search by product, CVE, severity, or advisory ID.

Current Checked 2 hours ago Checked every 6 hours

15,985 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2023-52625
MediumCVSS 5.5

drm/amd/display: Refactor DMCUB enter/exit idle interface

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Microsoft Security Response CenterCVE-2025-21614
HighCVSS 7.5

go-git clients vulnerable to DoS via maliciously crafted Git server replies

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 packer 1.9.5-6 on Azure Linux 3.0, cbl2 packer 1.9.5-5 on CBL Mariner 2.0, cbl2 cri-o 1.22.3-14 on CBL Mariner 2.0, cbl2 packer 1.9.5-5 on CBL-Mariner 2.0
Fixed versions1.9.5-5, 1.9.5-7, 1.22.3-13
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2025-46712
LowCVSS 3.7

Erlang/OTP SSH Has Strict KEX Violations

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscm2 erlang 25.3.2.21-1 on CBL Mariner 2.0, azl3 erlang 26.2.5.12-1 on Azure Linux 3.0, cbl2 erlang 25.3.2.20-1 on CBL Mariner 2.0, azl3 erlang 26.2.5.11-1 on Azure Linux 3.0
Fixed versions25.3.2.21-1, 26.2.5.12-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-53161
MediumCVSS 5.5

EDAC/bluefield: Fix potential integer overflow

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.173.1-2 on CBL-Mariner 2.0
Fixed versions5.15.176.3-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-47691
HighCVSS 7.8

f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.56.1-5 on Azure Linux 3.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-20380
HighCVSS 7.5

ClamAV HTML Parser Denial of Service Vulnerability

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 clamav 1.0.7-1 on CBL Mariner 2.0, cbl2 clamav 1.0.7-1 on CBL-Mariner 2.0, azl3 clamav 1.0.7-2 on Azure Linux 3.0
Microsoft Security Response CenterCVE-2024-27282
MediumCVSS 6.6

An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the Ruby regex compiler it is possible to extract arbitrary heap data relative to the start of the text including pointers and sensitive strings. The fixed versions are 3.0.7 3.1.5 3.2.4 and 3.3.1.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 ruby 3.1.4-5 on CBL Mariner 2.0, azl3 ruby 3.3.3-1 on Azure Linux 3.0, azl3 ruby 3.3.0-4 on Azure Linux 3.0, cbl2 ruby 3.1.4-9 on CBL Mariner 2.0
Fixed versions3.1.4-5, 3.3.3-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-57908
HighCVSS 7.1

iio: imu: kmx61: fix information leak in triggered buffer

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Fixed versions6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2025-21981
MediumCVSS 5.5

ice: fix memory leak in aRFS after reset

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.85.1-2 on Azure Linux 3.0
Fixed versions5.15.180.1-1, 6.6.85.1-2
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2025-21962
MediumCVSS 5.5

cifs: Fix integer overflow while processing closetimeo mount option

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.82.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, cbl2 kernel 5.15.176.3-3 on CBL-Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0
Fixed versions6.6.85.1-2, 5.15.180.1-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-36623
HighCVSS 8.1

moby through v25.0.3 has a Race Condition vulnerability in the streamformatter package which can be used to trigger multiple concurrent write operations resulting in data corruption or application crashes.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 moby-engine 24.0.9-11 on CBL Mariner 2.0, cbl2 moby-compose 2.17.3-8 on CBL Mariner 2.0, cbl2 moby-cli 24.0.9-5 on CBL Mariner 2.0, azl3 docker-cli 25.0.3-3 on Azure Linux 3.0
Fixed versions24.0.9-11, 2.17.3-8, 24.0.9-5, 25.0.3-3
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-47707
Medium

ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.179.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0
Fixed versions5.15.179.1-1, 6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-42101
MediumCVSS 5.5

drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.164.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.47.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.162.2-1 on CBL Mariner 2.0, azl3 kernel 6.6.35.1-5 on Azure Linux 3.0
Fixed versions5.15.164.1-1, 6.6.47.1-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-49962
Medium

ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-2 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.57.1-2
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-26686
MediumCVSS 5.5

fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.82.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Fixed versions6.6.82.1-1, 5.15.182.1-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2025-21776
Medium

USB: hub: Ignore non-compliant devices with too many configs or interfaces

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.179.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.79.1-1 on Azure Linux 3.0
Fixed versions5.15.179.1-1, 6.6.79.1-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2025-4207
MediumCVSS 5.9

PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscm2 postgresql 14.18-1 on CBL Mariner 2.0, azl3 postgresql 16.9-1 on Azure Linux 3.0, azl3 postgresql 16.7-1 on Azure Linux 3.0, cbl2 postgresql 14.16-1 on CBL Mariner 2.0
Fixed versions14.18-1, 16.9-1, 1.90.0-4
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-42159
HighCVSS 7.8

scsi: mpi3mr: Sanitise num_phys

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.43.1-7 on Azure Linux 3.0, azl3 kernel 6.6.35.1-5 on Azure Linux 3.0
Fixed versions6.6.43.1-7
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-47671
Medium

USB: usbtmc: prevent kernel-usb-infoleak

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.180.1-1 on CBL-Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-50116
Medium

nilfs2: fix kernel bug due to missing clearing of buffer delay flag

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-56538
HighCVSS 7.8

drm: zynqmp_kms: Unplug DRM device before removal

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-50257
HighCVSS 7.8

netfilter: Fix use-after-free in get_info()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2025-21613
HighCVSS 9.8

go-git has an Argument Injection via the URL field

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 packer 1.9.5-5 on CBL Mariner 2.0, cbl2 packer 1.9.5-7 on CBL Mariner 2.0, cbl2 cri-o 1.22.3-12 on CBL Mariner 2.0, azl3 packer 1.9.5-5 on Azure Linux 3.0
Fixed versions1.9.5-7, 1.22.3-12, 1.9.5-5
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2025-21967
HighCVSS 7.8

ksmbd: fix use-after-free in ksmbd_free_work_struct

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.82.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Fixed versions6.6.85.1-2
Vendor guidance

CBL-Mariner Releases

Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources