Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
16,938Advisories collected
6,370Published or updated in 30 days
7,004Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

16,938 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2024-49927
MediumCVSS 5.5

x86/ioapic: Handle allocation failures gracefully

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-49927
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21957
MediumCVSS 5.5

scsi: qla1280: Fix kernel oops when debug level > 2

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.85.1-2 on Azure Linux 3.0, azl3 kernel 6.6.82.1-1 on Azure Linux 3.0
Fixed versions5.15.180.1-1, 6.6.85.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2025-21957
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-21159
MediumCVSS 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mysql 8.0.40-1 on CBL Mariner 2.0, azl3 mysql 8.0.40-1 on Azure Linux 3.0, cbl2 mysql 8.0.36-1 on CBL Mariner 2.0, azl3 mysql 8.0.36-1 on Azure Linux 3.0
Fixed versions8.0.40-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-21159
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-9632
HighCVSS 7.8

Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 xorg-x11-server 1.20.10-13 on CBL Mariner 2.0, azl3 xorg-x11-server-Xwayland 24.1.1-3 on Azure Linux 3.0, cbl2 xorg-x11-server 1.20.10-15 on CBL Mariner 2.0, cbl2 xorg-x11-server 1.20.10-15 on CBL-Mariner 2.0
Fixed versions1.20.10-13, 24.1.1-3
Vendor guidance

CBL-Mariner Releases

CVE-2024-9632
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-54132
Medium

GitHub CLI allows downloading malicious GitHub Actions workflow artifact to result in path traversal vulnerability

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 gh 2.13.0-23 on CBL Mariner 2.0, azl3 gh 2.62.0-2 on Azure Linux 3.0, azl3 gh 2.62.0-8 on Azure Linux 3.0, cbl2 gh 2.13.0-24 on CBL Mariner 2.0
Fixed versions2.13.0-23, 2.62.0-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-54132
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56723
MediumCVSS 5.5

mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions5.15.176.3-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56723
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-1211
Medium

Versions of the package hackney before 1.21.0 are vulnerable to Server-side Request Forgery (SSRF) due to improper parsing of URLs by URI built-in module and hackey. Given the URL http://127.0.0.1?@127.2.2.2/, the URI function will parse and see the host as 127.0.0.1 (which is correct), and hackney will refer the host as 127.2.2.2/. This vulnerability can be exploited when users rely on the URL function for host checking.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 rabbitmq-server 3.11.24-3 on CBL Mariner 2.0, cbl2 rabbitmq-server 3.11.24-3 on CBL-Mariner 2.0
CVE-2025-1211
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-54683
MediumCVSS 5.5

netfilter: IDLETIMER: Fix for possible ABBA deadlock

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.76.1-1 on Azure Linux 3.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0
Fixed versions6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-54683
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56737
MediumCVSS 6.7

GNU GRUB (aka GRUB2) through 2.12 has a heap-based buffer overflow in fs/hfs.c via crafted sblock data in an HFS filesystem.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 grub2 2.06-25 on Azure Linux 3.0, cbl2 grub2 2.06-14 on CBL Mariner 2.0, azl3 grub2 2.06-24 on Azure Linux 3.0, cbl2 grub2 2.06-15 on CBL Mariner 2.0
Fixed versions2.06-25, 2.06-15
Vendor guidance

CBL-Mariner Releases

CVE-2024-56737
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-27144
Medium

Go JOSE's Parsing Vulnerable to Denial of Service

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 skopeo 1.14.4-5 on Azure Linux 3.0, cbl2 influxdb 2.6.1-22 on CBL Mariner 2.0, azl3 ig 0.37.0-4 on Azure Linux 3.0, cbl2 kube-vip-cloud-provider 0.0.2-22 on CBL Mariner 2.0
Fixed versions1.14.4-4, 2.6.1-21, 0.37.0-2, 0.0.2-20
Vendor guidance

CBL-Mariner Releases

CVE-2025-27144
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-2923
LowCVSS 3.3

HDF5 H5Fint.c H5F_addr_encode_len heap-based overflow

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 hdf5 1.14.4.3-1 on Azure Linux 3.0, cbl2 hdf5 1.14.4-1 on CBL Mariner 2.0
Fixed versions1.14.6-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-2923
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-40909
MediumCVSS 5.9

Perl threads have a working directory race condition where file operations may target unintended paths

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscm2 perl 5.34.1-491 on CBL Mariner 2.0, cbl2 perl 5.34.1-491 on CBL Mariner 2.0, azl3 perl 5.38.2-509 on Azure Linux 3.0, cbl2 perl 5.34.1-491 on CBL-Mariner 2.0
Fixed versions5.34.1-491, 5.38.2-509
Vendor guidance

CBL-Mariner Releases

CVE-2025-40909
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49933
Medium

blk_iocost: fix more out of bound shifts

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-49933
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21948
MediumCVSS 5.5

HID: appleir: Fix potential NULL dereference at raw event handle

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.82.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.85.1-2 on Azure Linux 3.0
Fixed versions6.6.85.1-2, 5.15.180.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21948
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-29786
HighCVSS 7.5

Memory Exhaustion in Expr Parser with Unrestricted Input

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 ig 0.37.0-4 on Azure Linux 3.0, azl3 keda 2.14.1-7 on Azure Linux 3.0, cbl2 coredns 1.11.1-18 on CBL-Mariner 2.0, cbl2 coredns 1.11.1-17 on CBL Mariner 2.0
Fixed versions0.37.0-3, 2.14.1-4, 1.11.1-17, 1.11.4-4
Vendor guidance

CBL-Mariner Releases

CVE-2025-29786
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-32618
HighCVSS 7.4

HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5T__get_native_type in H5Tnative.c resulting in the corruption of the instruction pointer.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 hdf5 1.14.4-1 on CBL Mariner 2.0, azl3 hdf5 1.14.4.3-1 on Azure Linux 3.0, azl3 hdf5 1.14.3-1 on Azure Linux 3.0, cbl2 hdf5 1.12.1-13 on CBL-Mariner 2.0
Fixed versions1.14.4-1, 1.14.4.3-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-32618
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-21135
MediumCVSS 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mysql 8.0.40-1 on CBL Mariner 2.0, azl3 mysql 8.0.40-1 on Azure Linux 3.0, cbl2 mysql 8.0.36-1 on CBL Mariner 2.0, azl3 mysql 8.0.36-1 on Azure Linux 3.0
Fixed versions8.0.40-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-21135
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56720
MediumCVSS 5.5

bpf, sockmap: Several fixes to bpf_msg_pop_data

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56720
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56615
HighCVSS 7.8

bpf: fix OOB devmap writes when deleting elements

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.76.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.173.1-2 on CBL-Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56615
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53059
HighCVSS 7.8

wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-53059
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-30211
HighCVSS 7.5

KEX init error results with excessive memory usage

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 erlang 25.2-3 on CBL Mariner 2.0, cbl2 erlang 25.2-4 on CBL Mariner 2.0, azl3 erlang 26.2.5.10-1 on Azure Linux 3.0, azl3 erlang 26.2.5.9-1 on Azure Linux 3.0
Fixed versions25.2-4, 26.2.5.10-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-30211
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-57996
Medium

net_sched: sch_sfq: don't allow 1 packet limit

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.78.1-3 on Azure Linux 3.0, cbl2 kernel 5.15.184.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.184.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0
Fixed versions6.6.78.1-3, 5.15.186.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-57996
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56433
LowCVSS 3.6

shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior (e.g., uid 100000 through 165535 for the first user account) that can realistically conflict with the uids of users defined on locally administered networks, potentially leading to account takeover, e.g., by leveraging newuidmap for access to an NFS home directory (or same-host resources in the case of remote logins by these local network users). NOTE: it may also be argued that system administrators should not have assigned uids, within local networks, that are within the range that can occur in /etc/subuid.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 shadow-utils shadow-utils_4.18.0 on Azure Linux 3.0, cbl2 shadow-utils 4.9-14 on CBL Mariner 2.0
Fixed versionsshadow-utils_4.18.0
Vendor guidance

CBL-Mariner Releases

CVE-2024-56433
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50194
Medium

arm64: probes: Fix uprobes for big-endian kernels

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50194
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources