Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
16,938Advisories collected
6,370Published or updated in 30 days
7,004Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

16,938 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2024-26945
HighCVSS 8.4

crypto: iaa - Fix nr_cpus < nr_iaa case

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.92.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
CVE-2024-26945
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56738
MediumCVSS 6.7

GNU GRUB (aka GRUB2) through 2.12 does not use a constant-time algorithm for grub_crypto_memcmp and thus allows side-channel attacks.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 grub2 2.06-14 on CBL Mariner 2.0, azl3 grub2 2.06-24 on Azure Linux 3.0, azl3 grub2 2.06-27 on Azure Linux 3.0, cbl2 grub2 2.06-16
CVE-2024-56738
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-3416
LowCVSS 3.7

Rust-openssl: rust-openssl use-after-free in `md::fetch` and `cipher::fetch`

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 rpm-ostree 2024.4-3 on Azure Linux 3.0, azl3 python-cryptography 42.0.5-3 on Azure Linux 3.0, azl3 rust 1.75.0-14 on Azure Linux 3.0, azl3 rust 1.86.0-1 on Azure Linux 3.0
CVE-2025-3416
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-2914
LowCVSS 3.3

HDF5 H5FScache.c H5FS__sinfo_Srialize_Sct_cb heap-based overflow

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 hdf5 1.14.4-1 on CBL Mariner 2.0, cbl2 hdf5 1.14.6-1 on CBL Mariner 2.0, azl3 hdf5 1.14.4.3-1 on Azure Linux 3.0, azl3 hdf5 1.14.6-1 on Azure Linux 3.0
Fixed versions1.14.6-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-2914
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-30683
MediumCVSS 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mysql 8.0.42-1 on CBL Mariner 2.0, azl3 mysql 8.0.42-1 on Azure Linux 3.0, azl3 mysql 8.0.41-1 on Azure Linux 3.0, cbl2 mysql 8.0.41-1 on CBL Mariner 2.0
Fixed versions8.0.42-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-30683
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50163
Medium

bpf: Make sure internal and UAPI bpf_redirect flags don't overlap

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50163
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-52569
MediumCVSS 5.5

btrfs: remove BUG() after failure to insert delayed dir index item

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
CVE-2023-52569
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-28319
HighCVSS 7.5

A use after free vulnerability exists in curl

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 rust 1.72.0-2 on CBL Mariner 2.0, cbl2 mysql 8.0.34-1 on CBL Mariner 2.0, cbl2 curl 8.2.1-1 on CBL Mariner 2.0, azl3 tensorflow 2.16.1-1 on Azure Linux 3.0
Fixed versions1.72.0-2, 8.0.34-1, 8.2.1-1, 2.16.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2023-28319
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49899
Medium

drm/amd/display: Initialize denominators' default to 1

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-9 on Azure Linux 3.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0
Fixed versions6.6.64.2-9
Vendor guidance

CBL-Mariner Releases

CVE-2024-49899
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-0495
Medium

Secrets leakage to telemetry endpoint via cache backend configuration via buildx

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 docker-buildx 0.14.0-5 on Azure Linux 3.0, cbl2 moby-buildx 0.7.1-25 on CBL Mariner 2.0, cbl2 moby-buildx 0.7.1-25 on CBL-Mariner 2.0
Fixed versions0.14.0-5, 0.7.1-25
Vendor guidance

CBL-Mariner Releases

CVE-2025-0495
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-35861
HighCVSS 7.8

smb: client: fix potential UAF in cifs_signal_cifsd_for_reconnect()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL-Mariner 2.0
CVE-2024-35861
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-21160
MediumCVSS 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mysql 8.0.40-1 on CBL Mariner 2.0, azl3 mysql 8.0.40-1 on Azure Linux 3.0, cbl2 mysql 8.0.36-1 on CBL Mariner 2.0, azl3 mysql 8.0.36-1 on Azure Linux 3.0
Fixed versions8.0.40-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-21160
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-6531
MediumCVSS 6.4

Rejected reason: This was not a security issue in Bootstrap. Bootstrap’s JavaScript is not intended to sanitize unsafe or intentionally dangerous HTML. As such, the reported behavior fell outside the scope of Bootstrap’s security model, and the associated CVE has been rescinded.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 opa 0.63.0-4 on CBL Mariner 2.0, cbl2 prometheus 2.37.9-5 on CBL Mariner 2.0, cbl2 prometheus 2.37.9-6 on CBL Mariner 2.0, cbl2 prometheus 2.37.9-4 on CBL Mariner 2.0
CVE-2024-6531
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49935
MediumCVSS 5.5

ACPI: PAD: fix crash in exit_round_robin()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-49935
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-0690
MediumCVSS 6.1

Grub2: read: integer overflow may lead to out-of-bounds write

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 grub2 2.06-14 on CBL Mariner 2.0, cbl2 grub2 2.06-15 on CBL Mariner 2.0, azl3 grub2 2.06-25 on Azure Linux 3.0, cbl2 grub2 2.06-15 on CBL-Mariner 2.0
Fixed versions2.06-15, 2.06-25
Vendor guidance

CBL-Mariner Releases

CVE-2025-0690
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21711
Medium

net/rose: prevent integer overflows in rose_setsockopt()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.179.1-1 on CBL Mariner 2.0
Fixed versions6.6.78.1-3, 5.15.179.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21711
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-52532
MediumCVSS 5.5

net: mana: Fix TX CQE error handling

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
CVE-2023-52532
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56724
MediumCVSS 5.5

mfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56724
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-0725
HighCVSS 7.3

gzip integer overflow

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mysql 8.0.41-1 on CBL Mariner 2.0, cbl2 mysql 8.0.41-1 on CBL-Mariner 2.0, cbl2 mysql 8.0.40-4 on CBL Mariner 2.0, azl3 curl 8.11.1-3 on Azure Linux 3.0
Fixed versions8.0.40-4, 8.11.1-3, 8.0.40-6, 8.0.42-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-0725
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-2924
LowCVSS 3.3

HDF5 H5HLcache.c H5HL__fl_deserialize heap-based overflow

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 hdf5 1.14.4-1 on CBL Mariner 2.0, azl3 hdf5 1.14.4.3-1 on Azure Linux 3.0, cbl2 hdf5 1.14.6-1 on CBL Mariner 2.0, azl3 hdf5 1.14.6-1 on Azure Linux 3.0
Fixed versions1.14.6-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-2924
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-30703
LowCVSS 2.7

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 5.7.32 and prior and 8.0.22 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Client. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Client. CVSS 3.1 Base Score 5.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H).

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mysql 8.0.42-1 on CBL Mariner 2.0, azl3 mysql 8.0.42-1 on Azure Linux 3.0, cbl2 mysql 8.0.41-1 on CBL-Mariner 2.0, azl3 mysql 8.0.41-1 on Azure Linux 3.0
Fixed versions8.0.42-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-30703
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-35864
HighCVSS 7.8

smb: client: fix potential UAF in smb2_is_valid_lease_break()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1
CVE-2024-35864
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50304
MediumCVSS 5.5

ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.179.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.76.1-1 on Azure Linux 3.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0
Fixed versions5.15.179.1-1, 6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50304
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50031
MediumCVSS 5.5

drm/v3d: Stop the active perfmon before being destroyed

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.57.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50031
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources