Vendor advisories

Microsoft Security Response Center

Browse 15,985 advisories from this official source. Search by product, CVE, severity, or advisory ID.

Current Checked 3 hours ago Checked every 6 hours

15,985 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2024-50115
HighCVSS 7.1

KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-47737
MediumCVSS 5.5

nfsd: call cache_put if xdr_reserve_space returns NULL

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-58097
MediumCVSS 5.5

wifi: ath11k: fix RCU stall while reaping monitor destination ring

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Microsoft Security Response CenterCVE-2024-40997
MediumCVSS 5.5

cpufreq: amd-pstate: fix memory leak on CPU EPP exit

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.47.1-1 on Azure Linux 3.0, azl3 kernel 6.6.35.1-5 on Azure Linux 3.0
Fixed versions6.6.47.1-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-55549
HighCVSS 7.8

xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 libxslt 1.1.43-1 on Azure Linux 3.0, cbl2 libxslt 1.1.34-8 on CBL Mariner 2.0, cbl2 libxslt 1.1.34-8 on CBL-Mariner 2.0, azl3 libxslt 1.1.39-1 on Azure Linux 3.0
Fixed versions1.1.43-1, 1.1.34-8
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-58010
MediumCVSS 5.5

binfmt_flat: Fix integer overflow bug on 32 bit systems

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.179.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.78.1-3 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0
Fixed versions5.15.179.1-1, 6.6.78.1-3
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-52981
MediumCVSS 4.9

An issue was discovered in Elasticsearch, where a large recursion using the Well-KnownText formatted string with nested GeometryCollection objects could cause a stackoverflow.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 rubygem-elasticsearch 8.3.0-1 on CBL Mariner 2.0, azl3 rubygem-elasticsearch 8.9.0-1 on Azure Linux 3.0, cbl2 rubygem-elasticsearch 8.3.0-1 on CBL-Mariner 2.0
Microsoft Security Response CenterCVE-2024-53217
Medium

NFSD: Prevent NULL dereference in nfsd4_process_cb_update()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, cbl2 kernel 5.15.173.1-2 on CBL-Mariner 2.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0
Fixed versions5.15.176.3-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-31583
MediumCVSS 7.8

Pytorch before version v2.2.0 was discovered to contain a use-after-free vulnerability in torch/csrc/jit/mobile/interpreter.cpp.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 pytorch 2.0.0-4 on CBL Mariner 2.0, cbl2 pytorch 2.0.0-8 on CBL Mariner 2.0, cbl2 pytorch 2.0.0-8 on CBL-Mariner 2.0
Fixed versions2.0.0-4
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-49923
MediumCVSS 5.5

drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.79.1-1 on Azure Linux 3.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0
Fixed versions6.6.79.1-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2025-21700
MediumCVSS 7.8

net: sched: Disallow replacing of child qdisc from one parent to another

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-3 on CBL-Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0
Fixed versions5.15.180.1-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-26965
Medium

clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 hyperv-daemons 5.15.158.1-1 on CBL Mariner 2.0, azl3 hyperv-daemons 6.6.35.1-1 on Azure Linux 3.0, cbl2 hyperv-daemons 5.15.153.1-1 on CBL Mariner 2.0, azl3 hyperv-daemons 6.6.22.1-2 on Azure Linux 3.0
Fixed versions5.15.158.1-1, 6.6.35.1-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-56763
MediumCVSS 5.5

tracing: Prevent bad count for tracing_cpumask_write

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.76.1-1 on Azure Linux 3.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-57256
HighCVSS 7.1

An integer overflow in ext4fs_read_symlink in Das U-Boot before 2025.01-rc1 occurs for zalloc (adding one to an le32 variable) via a crafted ext4 filesystem with an inode size of 0xffffffff, resulting in a malloc of zero and resultant memory overwrite.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 qemu 6.2.0-24 on CBL Mariner 2.0, cbl2 qemu 6.2.0-24 on CBL-Mariner 2.0, azl3 qemu 8.2.0-16 on Azure Linux 3.0
Microsoft Security Response CenterCVE-2024-45337
CriticalCVSS 9.1

Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 moby-engine 24.0.9-12 on CBL Mariner 2.0, cbl2 cert-manager 1.11.2-16 on CBL Mariner 2.0, cbl2 moby-compose 2.17.3-9 on CBL Mariner 2.0, cbl2 telegraf 1.29.4-10 on CBL Mariner 2.0
Fixed versions24.0.9-12, 1.11.2-16, 2.17.3-9, 1.29.4-10
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2025-1118
MediumCVSS 4.4

Grub2: commands/dump: the dump command is not in lockdown when secure boot is enabled

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 grub2 2.06-14 on CBL Mariner 2.0, cbl2 grub2 2.06-15 on CBL Mariner 2.0, azl3 grub2 2.06-25 on Azure Linux 3.0, cbl2 grub2 2.06-15 on CBL-Mariner 2.0
Fixed versions2.06-15, 2.06-25
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-10041
MediumCVSS 4.7

Pam: libpam: libpam vulnerable to read hashed password

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 pam 1.5.3-4 on Azure Linux 3.0, cbl2 pam 1.5.1-7 on CBL-Mariner 2.0, cbl2 pam 1.5.1-7 on CBL Mariner 2.0
Fixed versions1.5.3-4, 1.5.1-7
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-7264
MediumCVSS 6.5

ASN.1 date parser overread

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 rust 1.68.0-1 on CBL Mariner 2.0, azl3 cmake 3.30.3-4 on Azure Linux 3.0, azl3 cmake 3.30.3-6 on Azure Linux 3.0
Fixed versions1.68.0-1, 3.30.3-4
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-50302
MediumCVSS 5.5

HID: core: zero-initialize the report buffer

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-50125
HighCVSS 7.8

Bluetooth: SCO: Fix UAF on sco_sock_timeout

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Fixed versions6.6.64.2-1, 5.15.182.1-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-56569
MediumCVSS 5.5

ftrace: Fix regression with module command in stack_trace_filter

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.173.1-2 on CBL-Mariner 2.0
Fixed versions5.15.176.3-1
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-3817
CriticalCVSS 9.8

HashiCorp go-getter Vulnerable to Argument Injection When Fetching Remote Default Git Branches

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 terraform 1.3.2-14 on CBL Mariner 2.0, cbl2 terraform 1.3.2-25 on CBL Mariner 2.0, cbl2 terraform 1.3.2-25 on CBL-Mariner 2.0
Fixed versions1.3.2-14
Vendor guidance

CBL-Mariner Releases

Microsoft Security Response CenterCVE-2024-26662
MediumCVSS 5.5

drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources