Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
16,938Advisories collected
6,370Published or updated in 30 days
7,004Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

16,938 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2024-50248
MediumCVSS 7.1

ntfs3: Add bounds checking to mi_enum_attr()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50248
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-32415
LowCVSS 2.9

In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-based buffer under-read. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 libxml2 2.11.5-5 on Azure Linux 3.0, cbl2 libxml2 2.10.4-7 on CBL Mariner 2.0, cbl2 libxml2 2.10.4-7 on CBL-Mariner 2.0
Fixed versions2.11.5-5, 2.10.4-7
Vendor guidance

CBL-Mariner Releases

CVE-2025-32415
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50271
MediumCVSS 5.5

signal: restore the override_rlimit logic

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50271
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50003
Medium

drm/amd/display: Fix system hang while resume with TBT monitor

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-2 on Azure Linux 3.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.57.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-50003
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56754
MediumCVSS 5.5

crypto: caam - Fix the pointer passed to caam_qi_shutdown()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions5.15.176.3-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56754
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-30705
MediumCVSS 4.9

Vulnerability in the MySQL Server product of Oracle MySQL

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mysql 8.0.42-1 on CBL Mariner 2.0, azl3 mysql 8.0.42-1 on Azure Linux 3.0, azl3 mysql 8.0.41-1 on Azure Linux 3.0, cbl2 mysql 8.0.41-1 on CBL Mariner 2.0
Fixed versions8.0.42-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-30705
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-11831
MediumCVSS 5.4

Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 reaper 3.1.1-18 on CBL Mariner 2.0, cbl2 reaper 3.1.1-18 on CBL-Mariner 2.0, azl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0
CVE-2024-11831
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56782
MediumCVSS 5.5

ACPI: x86: Add adev NULL check to acpi_quirk_skip_serdev_enumeration()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.96.2-2 on Azure Linux 3.0, azl3 kernel 6.6.117.1-1 on Azure Linux 3.0, azl3 kernel 6.6.119.3-1 on Azure Linux 3.0
CVE-2024-56782
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-30348
MediumCVSS 5.8

encodeText in QDom in Qt before 6.8.0 has a complex algorithm involving XML string copy and inline replacement of parts of a string (with relocation of later data).

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 qt5-qtbase 5.12.11-16 on CBL Mariner 2.0, cbl2 qt5-qtbase 5.12.11-16 on CBL-Mariner 2.0, azl3 qtbase 6.6.3-3 on Azure Linux 3.0
Fixed versions5.12.11-16, 6.6.3-3
Vendor guidance

CBL-Mariner Releases

CVE-2025-30348
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50205
Medium

ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50205
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2022-49636
Medium

vlan: fix memory leak in vlan_newlink()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0
Fixed versions5.15.180.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2022-49636
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50162
MediumCVSS 5.5

bpf: devmap: provide rxq after redirect

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50162
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42135
MediumCVSS 5.5

vhost_task: Handle SIGKILL by flushing work and exiting

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0
CVE-2024-42135
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-26841
MediumCVSS 5.5

LoongArch: Update cpu_sibling_map when disabling nonboot CPUs

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0
CVE-2024-26841
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21581
MediumCVSS 4.9

Vulnerability in the MySQL Server product of Oracle MySQL

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mysql 8.0.42-1 on CBL Mariner 2.0, azl3 mysql 8.0.42-1 on Azure Linux 3.0, azl3 mysql 8.0.41-1 on Azure Linux 3.0, cbl2 mysql 8.0.41-1 on CBL Mariner 2.0
Fixed versions8.0.42-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21581
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56777
MediumCVSS 5.5

drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL-Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56777
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56651
HighCVSS 7.8

can: hi311x: hi3110_can_ist(): fix potential use-after-free

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.76.1-1 on Azure Linux 3.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56651
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49897
MediumCVSS 5.5

drm/amd/display: Check phantom_stream before it is used

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-9 on Azure Linux 3.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0
Fixed versions6.6.64.2-9
Vendor guidance

CBL-Mariner Releases

CVE-2024-49897
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50027
Medium

thermal: core: Free tzp copy along with the thermal zone

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-9 on Azure Linux 3.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0
Fixed versions6.6.64.2-9
Vendor guidance

CBL-Mariner Releases

CVE-2024-50027
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-2588
MediumCVSS 3.3

Hercules Augeas fa.c re_case_expand null pointer dereference

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 augeas 1.12.0-6 on CBL Mariner 2.0, cbl2 augeas 1.12.0-6 on CBL-Mariner 2.0, azl3 augeas 1.12.0-6 on Azure Linux 3.0
Fixed versions1.12.0-6
Vendor guidance

CBL-Mariner Releases

CVE-2025-2588
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-3730
MediumCVSS 3.3

PyTorch LossCTC.cpp torch.nn.functional.ctc_loss denial of service

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 pytorch 2.2.2-7 on Azure Linux 3.0, cbl2 pytorch 2.0.0-8 on CBL Mariner 2.0, azl3 pytorch 2.2.2-6 on Azure Linux 3.0, cbl2 pytorch 2.0.0-9 on CBL Mariner 2.0
Fixed versions2.2.2-6, 2.0.0-8
Vendor guidance

CBL-Mariner Releases

CVE-2025-3730
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53141
HighCVSS 7.8

netfilter: ipset: add missing range check in bitmap_ip_uadt

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-53141
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-27363
HighCVSS 8.1Priority signal

An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parse font subglyph structures related to TrueType GX and variable font files. The vulnerable code assigns a signed short value to an unsigned long and then adds a static value causing it to wrap around and allocate too small of a heap buffer. The code then writes up to 6 signed long integers out of bounds relative to this buffer. This may result in arbitrary code execution. This vulnerability may have been exploited in the wild.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 freetype 2.13.0-1 on CBL-Mariner 2.0, cbl2 freetype 2.13.1-1 on CBL Mariner 2.0, cbl2 freetype 2.13.0-1 on CBL Mariner 2.0
Fixed versions2.13.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-27363
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources