Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
16,938Advisories collected
6,370Published or updated in 30 days
7,004Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

16,938 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2025-26595
HighCVSS 7.8

Xorg: xwayland: buffer overflow in xkbvmodmasktext()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 xorg-x11-server-Xwayland 24.1.1-3 on Azure Linux 3.0, cbl2 xorg-x11-server 1.20.10-15 on CBL Mariner 2.0, cbl2 xorg-x11-server 1.20.10-15 on CBL-Mariner 2.0, azl3 xorg-x11-server-Xwayland 24.1.6-1 on Azure Linux 3.0
Fixed versions24.1.6-1, 1.20.10-15
Vendor guidance

CBL-Mariner Releases

CVE-2025-26595
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-52653
MediumCVSS 5.5

SUNRPC: fix a memleak in gss_import_v2_context

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
CVE-2023-52653
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-47712
MediumCVSS 4.3

Nbd: nbdkit: integer overflow triggers an assertion resulting in denial of service

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscm2 nbdkit 1.35.3-4 on CBL Mariner 2.0, azl3 nbdkit 1.35.3-7 on Azure Linux 3.0, cbl2 nbdkit 1.35.3-4 on CBL Mariner 2.0, cbl2 nbdkit 1.35.3-4 on CBL-Mariner 2.0
Fixed versions1.35.3-4, 1.35.3-7
Vendor guidance

CBL-Mariner Releases

CVE-2025-47712
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49981
High

media: venus: fix use after free bug in venus_remove due to race condition

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-2 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.57.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-49981
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49954
MediumCVSS 5.5

static_call: Replace pointless WARN_ON() in static_call_module_notify()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-2 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.57.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-49954
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53140
MediumCVSS 5.5

netlink: terminate outstanding dump on socket close

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-53140
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-12133
HighCVSS 7.5

Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 gnutls 3.7.11-2 on CBL Mariner 2.0, azl3 gnutls 3.8.3-3 on Azure Linux 3.0, azl3 libtasn1 4.19.0-2 on Azure Linux 3.0, cbl2 libtasn1 4.19.0-2 on CBL Mariner 2.0
Fixed versions3.7.11-2, 3.8.3-3, 4.19.0-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-12133
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-3360
LowCVSS 3.7

Glibc: glib prior to 2.82.5 is vulnerable to integer overflow and buffer under-read when parsing a very long invalid iso 8601 timestamp with g_date_time_new_from_iso8601().

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscm2 glib 2.71.0-5 on CBL Mariner 2.0, azl3 glib 2.78.6-2 on Azure Linux 3.0, cbl2 glib 2.71.0-5 on CBL Mariner 2.0, cbl2 glib 2.71.0-5 on CBL-Mariner 2.0
Fixed versions2.71.0-5, 2.78.6-2
Vendor guidance

CBL-Mariner Releases

CVE-2025-3360
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-30360
MediumCVSS 6.5

webpack-dev-server users' source code may be stolen when they access a malicious web site with non-Chromium based browser

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0, cbl2 reaper 3.1.1-18 on CBL-Mariner 2.0
CVE-2025-30360
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50198
Medium

iio: light: veml6030: fix IIO device retrieval from embedded device

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50198
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21848
MediumCVSS 5.5

nfp: bpf: Add check for nfp_app_ctrl_msg_alloc()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.179.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.82.1-1 on Azure Linux 3.0, azl3 kernel 6.6.78.1-3 on Azure Linux 3.0
Fixed versions5.15.179.1-1, 6.6.82.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21848
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53427
HighCVSS 8.1

decNumberCopy in decNumber.c in jq through 1.7.1 does not properly consider that NaN is interpreted as numeric, which has a resultant stack-based buffer overflow and out-of-bounds write, as demonstrated by use of --slurp with subtraction, such as a filter of .-. when the input has a certain form of digit string with NaN (e.g., "1 NaN123" immediately followed by many more digits).

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 jq 1.7.1-2 on Azure Linux 3.0
Fixed versions1.7.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-53427
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56600
HighCVSS 7.8

net: inet6: do not leave a dangling sk pointer in inet6_create()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.76.1-1 on Azure Linux 3.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56600
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-5915
LowCVSS 3.9

Libarchive: heap buffer over read in copy_from_lzss_window() at archive_read_support_format_rar.c

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 libarchive 3.7.7-2 on Azure Linux 3.0, cbl2 libarchive 3.6.1-6 on CBL Mariner 2.0, cbl2 libarchive 3.6.1-7 on CBL Mariner 2.0, cbl2 libarchive 3.6.1-7 on CBL-Mariner 2.0
Fixed versions3.7.7-3, 3.6.1-7
Vendor guidance

CBL-Mariner Releases

CVE-2025-5915
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49900
High

jfs: Fix uninit-value access of new_ea in ea_buffer

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-2 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.57.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-49900
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56611
MediumCVSS 5.5

mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.76.1-1 on Azure Linux 3.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0
Fixed versions6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56611
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49965
Medium

ocfs2: remove unreasonable unlock in ocfs2_read_blocks

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-2 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.57.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-49965
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-4330
HighCVSS 8.1

Extraction filter bypass for linking outside extraction directory

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 python3 3.9.19-14 on CBL Mariner 2.0, azl3 python3 3.12.9-1 on Azure Linux 3.0, cbl2 python3 3.9.19-13 on CBL Mariner 2.0, cbl2 python3 3.9.19-13 on CBL-Mariner 2.0
Fixed versions3.9.19-14, 3.12.9-2
Vendor guidance

CBL-Mariner Releases

CVE-2025-4330
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-26594
HighCVSS 7.8

X.org: xwayland: use-after-free of the root cursor

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 xorg-x11-server-Xwayland 24.1.1-3 on Azure Linux 3.0, cbl2 xorg-x11-server 1.20.10-15 on CBL Mariner 2.0, cbl2 xorg-x11-server 1.20.10-15 on CBL-Mariner 2.0, azl3 xorg-x11-server-Xwayland 24.1.6-1 on Azure Linux 3.0
Fixed versions24.1.6-1, 1.20.10-15
Vendor guidance

CBL-Mariner Releases

CVE-2025-26594
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21859
MediumCVSS 5.5

USB: gadget: f_midi: f_midi_complete to call queue_work

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.78.1-3 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.179.1-1 on CBL Mariner 2.0
Fixed versions6.6.82.1-1, 5.15.179.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21859
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-5914
LowCVSS 3.9

Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 libarchive 3.6.1-7 on CBL Mariner 2.0, cbl2 libarchive 3.6.1-7 on CBL-Mariner 2.0, azl3 libarchive 3.7.7-2 on Azure Linux 3.0, cbl2 libarchive 3.6.1-6 on CBL Mariner 2.0
Fixed versions3.6.1-7, 3.7.7-3
Vendor guidance

CBL-Mariner Releases

CVE-2025-5914
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources