Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
16,938Advisories collected
6,370Published or updated in 30 days
7,004Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

16,938 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2024-50019
Medium

kthread: unpark only parked kthread

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.57.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50019
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-26893
MediumCVSS 5.5

firmware: arm_scmi: Fix double free in SMC transport cleanup path

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0
CVE-2024-26893
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56704
HighCVSS 7.8

9p/xen: fix release of IRQ

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56704
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56672
HighCVSS 7.8

blk-cgroup: Fix UAF in blkcg_unpin_online()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.76.1-1 on Azure Linux 3.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56672
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-52337
MediumCVSS 5.5

Tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 tuned 2.21.0-2 on Azure Linux 3.0, cbl2 tuned 2.15.0-5 on CBL-Mariner 2.0, cbl2 tuned 2.15.0-5 on CBL Mariner 2.0
Fixed versions2.21.0-2, 2.15.0-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-52337
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-27809
MediumCVSS 5.4

Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have trusted certificates for arbitrary hostnames unless the TLS client application calls mbedtls_ssl_set_hostname.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 qemu 6.2.0-24 on CBL Mariner 2.0, azl3 qemu 8.2.0-16 on Azure Linux 3.0, cbl2 qemu 6.2.0-24 on CBL-Mariner 2.0
CVE-2025-27809
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50280
HighCVSS 7.8

dm cache: fix flushing uninitialized delayed_work on cache_ctr error

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
CVE-2024-50280
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-0665
LowCVSS 3.7

eventfd double close

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 curl 8.11.1-3 on Azure Linux 3.0
Fixed versions8.11.1-3
Vendor guidance

CBL-Mariner Releases

CVE-2025-0665
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-22097
HighCVSS 7.8

drm/vkms: Fix use after free and double free on init error

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.85.1-4 on Azure Linux 3.0, cbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.176.3-3 on CBL-Mariner 2.0
Fixed versions6.6.92.2-1, 5.15.180.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-22097
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2022-49043
CriticalCVSS 10.0

xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 libxml2 2.10.4-5 on CBL Mariner 2.0, cbl2 libxml2 2.10.4-6 on CBL Mariner 2.0, cbl2 libxml2 2.10.4-6 on CBL-Mariner 2.0
Fixed versions2.10.4-5
Vendor guidance

CBL-Mariner Releases

CVE-2022-49043
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-32049
HighCVSS 7.5

Libsoup: denial of service attack to websocket server

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 libsoup 3.0.4-7 on CBL Mariner 2.0, azl3 libsoup 3.4.4-9 on Azure Linux 3.0, azl3 libsoup 3.4.4-10 on Azure Linux 3.0, cbl2 libsoup 3.0.4-10 on CBL-Mariner 2.0
Fixed versions3.0.4-11, 3.4.4-12
Vendor guidance

CBL-Mariner Releases

CVE-2025-32049
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50039
Medium

net/sched: accept TCA_STAB only for root qdisc

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.57.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50039
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21490
MediumCVSS 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mysql 8.0.40-4 on CBL Mariner 2.0, cbl2 mariadb 10.6.20-1 on CBL Mariner 2.0, cbl2 mysql 8.0.40-4 on CBL-Mariner 2.0, cbl2 mariadb 10.6.20-1 on CBL-Mariner 2.0
Fixed versions8.0.41-1, 10.6.21-1, 10.11.11-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21490
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50229
MediumCVSS 5.5

nilfs2: fix potential deadlock with newly created symlinks

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50229
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56662
HighCVSS 7.1

acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.76.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0
Fixed versions5.15.176.3-1, 6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56662
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2022-49063
HighCVSS 7.8

ice: arfs: fix use-after-free when freeing @rx_cpu_rmap

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
CVE-2022-49063
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-35998
MediumCVSS 5.5

smb3: fix lock ordering potential deadlock in cifs_sync_mid_result

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0
CVE-2024-35998
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50151
HighCVSS 7.8

smb: client: fix OOBs when building SMB2_IOCTL request

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50151
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-48387
HighCVSS 8.2

tar-fs has issue where extract can write outside the specified dir with a specific tarball

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscm2 reaper 3.1.1-19 on CBL Mariner 2.0, cbl2 reaper 3.1.1-19 on CBL-Mariner 2.0, cbl2 reaper 3.1.1-19 on CBL Mariner 2.0
Fixed versions3.1.1-19
Vendor guidance

CBL-Mariner Releases

CVE-2025-48387
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2022-49465
HighCVSS 7.8

blk-throttle: Set BIO_THROTTLED when bio has been throttled

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.186.1-1 on CBL-Mariner 2.0
Fixed versions5.15.200.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2022-49465
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-2784
HighCVSS 7.0

Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 libsoup 3.0.4-6 on CBL Mariner 2.0, azl3 libsoup 3.4.4-6 on Azure Linux 3.0, cbl2 libsoup 3.0.4-6 on CBL-Mariner 2.0, cbl2 libsoup 3.0.4-5 on CBL Mariner 2.0
Fixed versions3.0.4-5, 3.4.4-5
Vendor guidance

CBL-Mariner Releases

CVE-2025-2784
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-0395
LowCVSS 2.9

When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 glibc 2.38-11 on Azure Linux 3.0, cbl2 glibc 2.35-7 on CBL Mariner 2.0, cbl2 glibc 2.35-9 on CBL-Mariner 2.0, cbl2 glibc 2.35-9 on CBL Mariner 2.0
Fixed versions2.38-11, 2.35-8
Vendor guidance

CBL-Mariner Releases

CVE-2025-0395
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-52531
HighCVSS 8.4

GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in soup_header_parse_param_list_strict.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 libsoup 3.0.4-2 on CBL Mariner 2.0, azl3 libsoup 3.4.4-2 on Azure Linux 3.0, azl3 libsoup 3.4.4-6 on Azure Linux 3.0, cbl2 libsoup 3.0.4-4 on CBL Mariner 2.0
Fixed versions3.0.4-2, 3.4.4-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-52531
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56770
MediumCVSS 5.5

net/sched: netem: account for backlog updates from child qdisc

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.76.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0
Fixed versions5.15.176.3-1, 6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56770
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources