Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
16,938Advisories collected
6,370Published or updated in 30 days
7,004Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

16,938 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2024-56603
HighCVSS 7.8

net: af_can: do not leave a dangling sk pointer in can_create()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.76.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.173.1-2 on CBL-Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56603
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53920
HighCVSS 8.8

In elisp-mode.el in GNU Emacs before 30.1, a user who chooses to invoke elisp-completion-at-point (for code completion) on untrusted Emacs Lisp source code can trigger unsafe Lisp macro expansion that allows attackers to execute arbitrary code. (This unsafe expansion also occurs if a user chooses to enable on-the-fly diagnosis that byte compiles untrusted Emacs Lisp source code.)

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 emacs 29.4-3 on CBL Mariner 2.0, azl3 emacs 29.4-3 on Azure Linux 3.0, cbl2 emacs 29.4-3 on CBL-Mariner 2.0
Fixed versions29.4-3
Vendor guidance

CBL-Mariner Releases

CVE-2024-53920
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56657
MediumCVSS 5.5

ALSA: control: Avoid WARN() for symlink errors

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.76.1-1 on Azure Linux 3.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56657
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-35878
MediumCVSS 5.3

of: module: prevent NULL pointer dereference in vsnprintf()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
CVE-2024-35878
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49989
HighCVSS 7.8

drm/amd/display: fix double free issue during amdgpu module unload

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.57.1-2 on Azure Linux 3.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL-Mariner 2.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions6.6.57.1-2, 5.15.182.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-49989
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-51744
LowCVSS 3.1

Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 telegraf 1.29.4-14 on CBL Mariner 2.0, cbl2 kubevirt 0.59.0-27 on CBL Mariner 2.0, cbl2 azcopy 10.25.1-4 on CBL Mariner 2.0, cbl2 application-gateway-kubernetes-ingress 1.4.0-25 on CBL Mariner 2.0
Fixed versions1.29.4-14, 0.59.0-27, 10.25.1-4, 1.4.0-25
Vendor guidance

CBL-Mariner Releases

CVE-2024-51744
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-35869
HighCVSS 8.4

smb: client: guarantee refcounted children from parent session

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
CVE-2024-35869
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42139
MediumCVSS 5.5

ice: Fix improper extts handling

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.104.2-4 on Azure Linux 3.0, azl3 kernel 6.6.112.1-2 on Azure Linux 3.0, azl3 kernel 6.6.117.1-1 on Azure Linux 3.0, azl3 kernel 6.6.119.3-3 on Azure Linux 3.0
CVE-2024-42139
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-44905
MediumCVSS 7.3

hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5Z__filter_scaleoffset function.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 hdf5 1.14.4.3-1 on Azure Linux 3.0, cbl2 hdf5 1.14.4-1 on CBL Mariner 2.0, cbl2 hdf5 1.14.6-1 on CBL-Mariner 2.0, cbl2 hdf5 1.14.6-1 on CBL Mariner 2.0
Fixed versions1.14.6-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-44905
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-26598
HighCVSS 7.8

Xorg: xwayland: out-of-bounds write in createpointerbarrierclient()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 xorg-x11-server-Xwayland 24.1.1-3 on Azure Linux 3.0, cbl2 xorg-x11-server 1.20.10-15 on CBL Mariner 2.0, cbl2 xorg-x11-server 1.20.10-15 on CBL-Mariner 2.0, azl3 xorg-x11-server-Xwayland 24.1.6-1 on Azure Linux 3.0
Fixed versions24.1.6-1, 1.20.10-15
Vendor guidance

CBL-Mariner Releases

CVE-2025-26598
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-52926
HighCVSS 7.8

io_uring/rw: split io_read() into a helper

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
CVE-2023-52926
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56756
MediumCVSS 5.5

nvme-pci: fix freeing of the HMB descriptor table

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions5.15.176.3-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56756
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50193
HighCVSS 7.1

x86/entry_32: Clear CPU buffers after register restore in NMI return

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50193
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21853
MediumCVSS 5.5

bpf: avoid holding freeze_mutex during mmap operation

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.78.1-3 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0, azl3 kernel 6.6.82.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0
Fixed versions6.6.82.1-1, 5.15.182.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21853
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-35843
MediumCVSS 6.8

iommu/vt-d: Use device rbtree in iopf reporting path

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
CVE-2024-35843
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-22041
HighCVSS 7.8

ksmbd: fix use-after-free in ksmbd_sessions_deregister()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.85.1-4 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Fixed versions6.6.92.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-22041
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50000
Medium

net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-2 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.57.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-50000
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53130
MediumCVSS 5.5

nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.180.1-1 on CBL-Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-53130
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-12718
MediumCVSS 5.3

Bypass extraction filter to modify file metadata outside extraction directory

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 python3 3.12.9-1 on Azure Linux 3.0, cbl2 python3 3.9.19-14 on CBL Mariner 2.0, cbl2 python3 3.9.19-13 on CBL Mariner 2.0, cbl2 python3 3.9.19-13 on CBL-Mariner 2.0
Fixed versions3.12.9-2, 3.9.19-14
Vendor guidance

CBL-Mariner Releases

CVE-2024-12718
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53204
MediumCVSS 5.5

phy: realtek: usb: fix NULL deref in rtk_usb3phy_probe

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.85.1-1 on Azure Linux 3.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0
Fixed versions6.6.85.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-53204
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56658
HighCVSS 7.8

net: defer final 'struct net' free in netns dismantle

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.76.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Fixed versions6.6.76.1-1, 5.15.182.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56658
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-26599
HighCVSS 7.8

Xorg: xwayland: use of uninitialized pointer in compredirectwindow()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 xorg-x11-server-Xwayland 24.1.1-3 on Azure Linux 3.0, azl3 xorg-x11-server-Xwayland 24.1.6-1 on Azure Linux 3.0, cbl2 xorg-x11-server 1.20.10-15 on CBL Mariner 2.0, cbl2 xorg-x11-server 1.20.10-15 on CBL-Mariner 2.0
Fixed versions24.1.6-1, 1.20.10-15
Vendor guidance

CBL-Mariner Releases

CVE-2025-26599
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources