Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
16,938Advisories collected
6,370Published or updated in 30 days
7,004Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

16,938 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2025-30721
MediumCVSS 4.0

Vulnerability in the MySQL Server product of Oracle MySQL

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mysql 8.0.42-1 on CBL Mariner 2.0, azl3 mysql 8.0.42-1 on Azure Linux 3.0, azl3 mysql 8.0.41-1 on Azure Linux 3.0, cbl2 mysql 8.0.41-1 on CBL Mariner 2.0
Fixed versions8.0.42-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-30721
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-10220
HighCVSS 8.1

Arbitrary command execution through gitRepo volume

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kubernetes 1.28.4-14 on CBL Mariner 2.0, azl3 kubernetes 1.30.3-1 on Azure Linux 3.0, azl3 kubernetes 1.30.1-4 on Azure Linux 3.0, cbl2 kubernetes 1.28.4-17 on CBL Mariner 2.0
Fixed versions1.28.4-14, 1.30.3-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-10220
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-57259
HighCVSS 7.1

sqfs_search_dir in Das U-Boot before 2025.01-rc1 exhibits an off-by-one error and resultant heap memory corruption for squashfs directory listing because the path separator is not considered in a size calculation.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 qemu 6.2.0-24 on CBL Mariner 2.0, cbl2 qemu 6.2.0-24 on CBL-Mariner 2.0, azl3 qemu 8.2.0-16 on Azure Linux 3.0
CVE-2024-57259
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21605
HighCVSS 7.5

Redis DoS Vulnerability due to unlimited growth of output buffers abused by unauthenticated client

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 redis 6.2.18-3 on CBL Mariner 2.0, cbl2 redis 6.2.20-1 on CBL Mariner 2.0, cbl2 redis 6.2.20-1 on CBL-Mariner 2.0, azl3 valkey 8.0.3-1 on Azure Linux 3.0
Fixed versions8.0.3-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21605
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56574
MediumCVSS 5.5

media: ts2020: fix null-ptr-deref in ts2020_probe()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions5.15.176.3-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56574
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-36924
MediumCVSS 5.5

scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
CVE-2024-36924
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-52572
HighCVSS 7.8

cifs: Fix UAF in cifs_demultiplex_thread()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Fixed versions5.15.182.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2023-52572
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-32051
MediumCVSS 5.9

Libsoup: segmentation fault when parsing malformed data uri

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 libsoup 3.0.4-6 on CBL Mariner 2.0, cbl2 libsoup 3.0.4-5 on CBL Mariner 2.0, azl3 libsoup 3.4.4-5 on Azure Linux 3.0, azl3 libsoup 3.4.4-6 on Azure Linux 3.0
Fixed versions3.0.4-5, 3.4.4-5
Vendor guidance

CBL-Mariner Releases

CVE-2025-32051
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49994
Medium

block: fix integer overflow in BLKSECDISCARD

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.76.1-1 on Azure Linux 3.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0
Fixed versions6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-49994
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-1179
MediumCVSS 5.0

GNU Binutils ld libbfd.c bfd_putl64 memory corruption

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 binutils 2.41-7 on Azure Linux 3.0, cbl2 binutils 2.37-15 on CBL-Mariner 2.0, cbl2 gdb 11.2-6 on CBL-Mariner 2.0, azl3 gdb 13.2-4 on Azure Linux 3.0
CVE-2025-1179
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50232
Medium

iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50232
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2022-49535
HighCVSS 7.8

scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Fixed versions5.15.182.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2022-49535
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21584
MediumCVSS 4.9

Vulnerability in the MySQL Server product of Oracle MySQL

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mysql 8.0.42-1 on CBL Mariner 2.0, azl3 mysql 8.0.42-1 on Azure Linux 3.0, cbl2 mysql 8.0.41-1 on CBL Mariner 2.0, azl3 mysql 8.0.41-1 on Azure Linux 3.0
Fixed versions8.0.42-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21584
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56716
MediumCVSS 5.5

netdevsim: prevent bad user input in nsim_dev_health_break_write()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.76.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0
Fixed versions5.15.176.3-1, 6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56716
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50265
Medium

ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50265
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53131
Medium

nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL-Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-53131
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-52757
MediumCVSS 5.5

smb: client: fix potential deadlock when releasing mids

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Fixed versions5.15.182.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2023-52757
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50245
Medium

fs/ntfs3: Fix possible deadlock in mi_read

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50245
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50038
MediumCVSS 5.5

netfilter: xtables: avoid NFPROTO_UNSPEC where needed

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.57.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50038
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-23090
High

Rejected reason: This CVE record has been withdrawn due to a duplicate entry CVE-2025-23083.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 nodejs 20.14.0-4 on Azure Linux 3.0, azl3 nodejs 20.14.0-8 on Azure Linux 3.0
Fixed versions20.14.0-4
Vendor guidance

CBL-Mariner Releases

CVE-2025-23083CVE-2025-23090
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-26785
MediumCVSS 5.5

iommufd: Fix protection fault in iommufd_test_syz_conv_iova

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.85.1-1 on Azure Linux 3.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0
Fixed versions6.6.85.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-26785
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-30688
MediumCVSS 6.5

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mysql 8.0.42-1 on CBL Mariner 2.0, azl3 mysql 8.0.42-1 on Azure Linux 3.0, azl3 mysql 8.0.41-1 on Azure Linux 3.0, cbl2 mysql 8.0.41-1 on CBL Mariner 2.0
Fixed versions8.0.42-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-30688
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56665
MediumCVSS 5.5

bpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.76.1-1 on Azure Linux 3.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0
Fixed versions6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56665
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-23016
CriticalCVSS 9.3

FastCGI fcgi2 (aka fcgi) 2.x through 2.4.4 has an integer overflow (and resultant heap-based buffer overflow) via crafted nameLen or valueLen values in data to the IPC socket. This occurs in ReadParams in fcgiapp.c.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 fcgi 2.4.0-7 on CBL Mariner 2.0, azl3 fcgi 2.4.0-7 on Azure Linux 3.0, cbl2 fcgi 2.4.0-7 on CBL-Mariner 2.0, cbl2 fcgi 2.4.5-1 on CBL Mariner 2.0
Fixed versions2.4.5-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-23016
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources