Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
16,938Advisories collected
6,370Published or updated in 30 days
7,004Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

16,938 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2024-50233
MediumCVSS 5.5

staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50233
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50196
MediumCVSS 5.5

pinctrl: ocelot: fix system hang on level based interrupts

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50196
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-35865
MediumCVSS 5.5

smb: client: fix potential UAF in smb2_is_valid_oplock_break()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0
CVE-2024-35865
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-1178
MediumCVSS 5.6

GNU Binutils ld libbfd.c bfd_putl64 memory corruption

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 binutils 2.37-14 on CBL Mariner 2.0, azl3 binutils 2.41-5 on Azure Linux 3.0, azl3 gdb 13.2-7 on Azure Linux 3.0, azl3 gdb 13.2-9 on Azure Linux 3.0
Fixed versions2.37-13, 2.41-3, 13.2-9
Vendor guidance

CBL-Mariner Releases

CVE-2025-1178
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21753
HighCVSS 7.8

btrfs: fix use-after-free when attempting to join an aborted transaction

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, cbl2 kernel 5.15.176.3-3 on CBL-Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0
Fixed versions5.15.180.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21753
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2022-49125
MediumCVSS 5.5

drm/sprd: fix potential NULL dereference

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0
CVE-2022-49125
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-39735
HighCVSS 7.1

jfs: fix slab-out-of-bounds read in ea_get()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.85.1-4 on Azure Linux 3.0, cbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, cbl2 kernel 5.15.176.3-3 on CBL-Mariner 2.0
Fixed versions6.6.92.2-1, 5.15.180.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-39735
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-26770
MediumCVSS 5.5

HID: nvidia-shield: Add missing null pointer checks to LED initialization

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
CVE-2024-26770
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49936
High

net/xen-netback: prevent UAF in xenvif_flush_hash()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-2 on Azure Linux 3.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.57.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-49936
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-57257
LowCVSS 2.0

A stack consumption issue in sqfs_size in Das U-Boot before 2025.01-rc1 occurs via a crafted squashfs filesystem with deep symlink nesting.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 qemu 6.2.0-24 on CBL Mariner 2.0, azl3 qemu 8.2.0-16 on Azure Linux 3.0, cbl2 qemu 6.2.0-24 on CBL-Mariner 2.0
CVE-2024-57257
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-35870
MediumCVSS 4.4

smb: client: fix UAF in smb2_reconnect_server()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
CVE-2024-35870
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2022-49108
MediumCVSS 5.5

clk: mediatek: Fix memory leaks on probe

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0
CVE-2022-49108
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-22868
HighCVSS 7.5

Unexpected memory consumption during token parsing in golang.org/x/oauth2

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 azcopy 10.25.1-4 on Azure Linux 3.0, azl3 cert-manager 1.12.15-3 on Azure Linux 3.0, azl3 prometheus 2.45.4-12 on Azure Linux 3.0, azl3 influxdb 2.7.5-5 on Azure Linux 3.0
Fixed versions10.25.1-2, 1.12.15-2, 2.45.4-8, 2.7.5-2
Vendor guidance

CBL-Mariner Releases

CVE-2025-22868
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56659
MediumCVSS 5.5

net: lapb: increase LAPB_HEADER_LEN

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.76.1-1 on Azure Linux 3.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL-Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56659
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-11053
HighCVSS 7.5

netrc and redirect credential leak

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mysql 8.0.41-1 on CBL Mariner 2.0, cbl2 cmake 3.21.4-15 on CBL Mariner 2.0, cbl2 curl 8.8.0-4 on CBL Mariner 2.0, azl3 mysql 8.0.41-1 on Azure Linux 3.0
Fixed versions8.0.41-1, 3.21.4-15, 8.8.0-4, 3.30.3-3
Vendor guidance

CBL-Mariner Releases

CVE-2024-11053
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21739
HighCVSS 7.8

scsi: ufs: core: Fix use-after free in init error and remove paths

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.117.1-1 on Azure Linux 3.0, azl3 kernel 6.6.119.3-1 on Azure Linux 3.0, azl3 kernel 6.6.119.3-3 on Azure Linux 3.0, azl3 kernel 6.6.121.1-1 on Azure Linux 3.0
Fixed versions6.6.137.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2025-21739
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-30359
MediumCVSS 5.3

webpack-dev-server users' source code may be stolen when they access a malicious web site

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0, cbl2 reaper 3.1.1-18 on CBL-Mariner 2.0
CVE-2025-30359
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50178
MediumCVSS 5.5

cpufreq: loongson3: Use raw_smp_processor_id() in do_service_request()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.96.2-2 on Azure Linux 3.0, azl3 kernel 6.6.112.1-2 on Azure Linux 3.0, azl3 kernel 6.6.117.1-1 on Azure Linux 3.0, azl3 kernel 6.6.119.3-1 on Azure Linux 3.0
CVE-2024-50178
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-26866
MediumCVSS 5.5

spi: lpspi: Avoid potential use-after-free in probe()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
CVE-2024-26866
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-52506
MediumCVSS 5.5

LoongArch: Set all reserved memblocks on Node#0 at initialization

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
CVE-2023-52506
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-37838
HighCVSS 7.8

HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due to Race Condition

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.85.1-4 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0
Fixed versions6.6.92.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-37838
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50171
MediumCVSS 5.5

net: systemport: fix potential memory leak in bcm_sysport_xmit()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50171
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-32050
MediumCVSS 5.9

Libsoup: integer overflow in append_param_quoted

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 libsoup 3.4.4-6 on Azure Linux 3.0, cbl2 libsoup 3.0.4-6 on CBL Mariner 2.0, cbl2 libsoup 3.0.4-6 on CBL-Mariner 2.0, cbl2 libsoup 3.0.4-5 on CBL Mariner 2.0
Fixed versions3.4.4-5, 3.0.4-5
Vendor guidance

CBL-Mariner Releases

CVE-2025-32050
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21791
HighCVSS 7.8

vrf: use RCU protection in l3mdev_l3_out()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.179.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.82.1-1 on Azure Linux 3.0
Fixed versions5.15.179.1-1, 6.6.82.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21791
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources