Search threats, CVEs… ⌘K
Vendor advisories

Microsoft Security Response Center

Browse 15,985 advisories from this official source. Search by product, CVE, severity, or advisory ID.

Current Checked 4 hours ago Checked every 6 hours
All vendor sources Official source

15,985 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2024-42078
MediumCVSS 5.5

nfsd: initialise nfsd_info.mutex early.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.162.2-1 on CBL Mariner 2.0, azl3 kernel 6.6.43.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Fixed versions5.15.162.2-1, 6.6.43.1-7
Vendor guidance

CBL-Mariner Releases

CVE-2024-42078
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2020-21528
MediumCVSS 5.5

A Segmentation Fault issue discovered in in ieee_segment function in outieee.c in nasm 2.14.03 and 2.15 allows remote attackers to cause a denial of service via crafted assembly file.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 tensorflow 2.16.1-9 on Azure Linux 3.0, cbl2 tensorflow 2.11.1-2 on CBL-Mariner 2.0, cbl2 tensorflow 2.11.1-2 on CBL Mariner 2.0
CVE-2020-21528
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-47738
LowCVSS 3.3

wifi: mac80211: don't use rate mask for offchannel TX either

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.56.1-5 on Azure Linux 3.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-47738
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42073
MediumCVSS 5.5

mlxsw: spectrum_buffers: Fix memory corruptions on Spectrum-4 systems

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.162.2-1 on CBL Mariner 2.0, azl3 kernel 6.6.43.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL-Mariner 2.0
Fixed versions5.15.162.2-1, 6.6.43.1-7
Vendor guidance

CBL-Mariner Releases

CVE-2024-42073
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2022-27649
HighCVSS 7.5

A flaw was found in Podman where containers were started incorrectly with non-empty default permissions. A vulnerability was found in Moby (Docker Engine) where containers were started incorrectly with non-empty inheritable Linux process capabilities. This flaw allows an attacker with access to programs with inheritable file capabilities to elevate those capabilities to the permitted set when execve(2) runs.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 podman 4.1.1-1 on CBL Mariner 2.0, cbl2 cri-o 1.21.7-3 on CBL Mariner 2.0, cbl2 cri-o 1.21.7-3 on CBL-Mariner 2.0
Fixed versions4.1.1-1, 1.22.3-1
Vendor guidance

CBL-Mariner Releases

CVE-2022-27649
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-40982
MediumCVSS 5.5

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1, cbl2 kernel 5.15.176.3-1 on CBL-Mariner 2.0
CVE-2024-40982
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42066
MediumCVSS 5.5

drm/xe: Fix potential integer overflow in page size calculation

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.96.2-2 on Azure Linux 3.0, azl3 kernel 6.6.112.1-2 on Azure Linux 3.0, azl3 kernel 6.6.117.1-1 on Azure Linux 3.0, azl3 kernel 6.6.119.3-1 on Azure Linux 3.0
CVE-2024-42066
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-47693
Medium

IB/core: Fix ib_cache_setup_one error flow cleanup

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-47693
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-40965
MediumCVSS 5.5

i2c: lpi2c: Avoid calling clk_get_rate during transfer

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-9 on Azure Linux 3.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0
Fixed versions6.6.64.2-9
Vendor guidance

CBL-Mariner Releases

CVE-2024-40965
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-31228
MediumCVSS 5.5

Denial-of-service due to unbounded pattern matching in Redis

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 redis 6.2.16-1 on CBL Mariner 2.0, azl3 valkey 8.0.1-1 on Azure Linux 3.0, cbl2 redis 6.2.14-2 on CBL-Mariner 2.0, cbl2 redis 6.2.14-2 on CBL Mariner 2.0
Fixed versions6.2.16-1, 8.0.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-31228
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-34064
MediumCVSS 5.4

Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 nodejs18 18.20.3-4 on CBL Mariner 2.0, cbl2 python-jinja2 3.0.3-4 on CBL Mariner 2.0, azl3 nodejs 20.14.0-1 on Azure Linux 3.0, azl3 python-jinja2 3.1.2-2 on Azure Linux 3.0
Fixed versions18.20.3-4, 3.0.3-4, 20.14.0-1, 3.1.2-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-34064
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42068
MediumCVSS 5.5

bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.162.2-1 on CBL Mariner 2.0, azl3 kernel 6.6.43.1-7 on Azure Linux 3.0, azl3 kernel 6.6.35.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.160.1-1 on CBL Mariner 2.0
Fixed versions5.15.162.2-1, 6.6.43.1-7
Vendor guidance

CBL-Mariner Releases

CVE-2024-42068
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-47698
HighCVSS 7.8

drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-47698
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-40969
MediumCVSS 5.5

f2fs: don't set RO when shutting down f2fs

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
CVE-2024-40969
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-8925
LowCVSS 5.3

Erroneous parsing of multipart form data

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 php 8.1.30-1 on CBL Mariner 2.0, azl3 php 8.3.12-1 on Azure Linux 3.0, cbl2 php 8.1.29-1 on CBL Mariner 2.0, azl3 php 8.3.8-1 on Azure Linux 3.0
Fixed versions8.1.30-1, 8.3.12-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-8925
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-40973
MediumCVSS 5.5

media: mtk-vcodec: potential null pointer deference in SCP

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
CVE-2024-40973
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49852
High

scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-49852
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42074
MediumCVSS 5.5

ASoC: amd: acp: add a null check for chip_pdev structure

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.162.2-1 on CBL Mariner 2.0, azl3 kernel 6.6.43.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL-Mariner 2.0
Fixed versions5.15.162.2-1, 6.6.43.1-7
Vendor guidance

CBL-Mariner Releases

CVE-2024-42074
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-34069
HighCVSS 7.5

Werkzeug's improper usage of a pathname and improper CSRF protection results in the remote command execution

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 python-werkzeug 2.3.7-2 on CBL Mariner 2.0, azl3 python-werkzeug 3.0.3-1 on Azure Linux 3.0, azl3 python-werkzeug 3.0.1-1 on Azure Linux 3.0, cbl2 python-werkzeug 2.3.7-3 on CBL Mariner 2.0
Fixed versions2.3.7-2, 3.0.3-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-34069
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-31951
MediumCVSS 6.5

In the Opaque LSA Extended Link parser in FRRouting (FRR) through 9.1 there can be a buffer overflow and daemon crash in ospf_te_parse_ext_link for OSPF LSA packets during an attempt to read Segment Routing Adjacency SID subTLVs (lengths are not validated).

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 frr 8.5.5-1 on CBL Mariner 2.0, cbl2 frr 8.5.3-6 on CBL Mariner 2.0, cbl2 frr 8.5.3-6 on CBL-Mariner 2.0
Fixed versions8.5.5-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-31951
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-36478
MediumCVSS 5.5

null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.57.1-1 on Azure Linux 3.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0
Fixed versions6.6.57.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-36478
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-21165
MediumCVSS 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Pluggable Auth). Supported versions that are affected are 8.0.37 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mysql 8.0.40-1 on CBL Mariner 2.0, azl3 mysql 8.0.40-1 on Azure Linux 3.0, cbl2 mysql 8.0.36-1 on CBL Mariner 2.0, cbl2 mysql 8.0.36-1 on CBL-Mariner 2.0
Fixed versions8.0.40-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-21165
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-2511
MediumCVSS 5.9

Unbounded memory growth with session handling in TLSv1.3

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 hvloader 1.0.1-6 on CBL Mariner 2.0, cbl2 openssl 1.1.1k-30 on CBL Mariner 2.0, cbl2 cloud-hypervisor-cvm 38.0.72.2-1 on CBL Mariner 2.0, azl3 cloud-hypervisor-cvm 38.0.72.2-1 on Azure Linux 3.0
Fixed versions1.0.1-6, 1.1.1k-30, -, 20240524git3e722403cd16-8
Vendor guidance

CBL-Mariner Releases

CVE-2024-2511
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42065
MediumCVSS 5.5

drm/xe: Add a NULL check in xe_ttm_stolen_mgr_init

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.96.2-1 on Azure Linux 3.0, azl3 kernel 6.6.104.2-4 on Azure Linux 3.0, azl3 kernel 6.6.112.1-2 on Azure Linux 3.0, azl3 kernel 6.6.117.1-1 on Azure Linux 3.0
CVE-2024-42065
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources