Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
16,939Advisories collected
6,371Published or updated in 30 days
7,004Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

16,939 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2025-2925
LowCVSS 3.3

HDF5 H5MM.c H5MM_realloc double free

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 hdf5 1.14.4-1 on CBL Mariner 2.0, azl3 hdf5 1.14.4.3-1 on Azure Linux 3.0, cbl2 hdf5 1.14.6-1 on CBL Mariner 2.0, azl3 hdf5 1.14.6-1 on Azure Linux 3.0
Fixed versions1.14.6-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-2925
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21922
MediumCVSS 5.5

ppp: Fix KMSAN uninit-value warning with bpf

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.85.1-2 on Azure Linux 3.0, azl3 kernel 6.6.82.1-1 on Azure Linux 3.0
Fixed versions5.15.180.1-1, 6.6.85.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2025-21922
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56692
Medium

f2fs: fix to do sanity check on node blkaddr in truncate_node()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56692
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42136
HighCVSS 7.8

cdrom: rearrange last_media_change check to avoid unintentional overflow

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL-Mariner 2.0
CVE-2024-42136
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-32433
CriticalCVSS 10.0

Erlang/OTP SSH Vulnerable to Pre-Authentication RCE

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 erlang 26.2.5.9-1 on Azure Linux 3.0, cbl2 erlang 25.3.2.20-1 on CBL Mariner 2.0, azl3 erlang 26.2.5.11-1 on Azure Linux 3.0, cbl2 erlang 25.2-3 on CBL Mariner 2.0
Fixed versions26.2.5.11-1, 25.3.2.20-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-32433
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56326
MediumCVSS 7.8

Jinja has a sandbox breakout through indirect reference to format method

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 python-jinja2 3.0.3-5 on CBL Mariner 2.0, azl3 python-jinja2 3.1.2-2 on Azure Linux 3.0, cbl2 python-jinja2 3.0.3-7 on CBL Mariner 2.0, azl3 python-jinja2 3.1.2-3 on Azure Linux 3.0
Fixed versions3.0.3-5, 3.1.2-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-56326
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-32620
HighCVSS 7.4

HDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5F_addr_decode_len in H5Fint.c resulting in the corruption of the instruction pointer.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 hdf5 1.14.4-1 on CBL Mariner 2.0, azl3 hdf5 1.14.4.3-1 on Azure Linux 3.0, cbl2 hdf5 1.12.1-13 on CBL Mariner 2.0, cbl2 hdf5 1.12.1-13 on CBL-Mariner 2.0
Fixed versions1.14.4-1, 1.14.4.3-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-32620
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50157
MediumCVSS 5.5

RDMA/bnxt_re: Avoid CPU lockups due fifo occupancy check loop

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.76.1-1 on Azure Linux 3.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0
Fixed versions6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50157
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50168
Medium

net/sun3_82586: fix potential memory leak in sun3_82586_send_packet()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50168
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42122
MediumCVSS 5.5

drm/amd/display: Add NULL pointer check for kzalloc

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-9 on Azure Linux 3.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0
Fixed versions6.6.64.2-9
Vendor guidance

CBL-Mariner Releases

CVE-2024-42122
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-2913
LowCVSS 3.3

HDF5 H5FL.c H5FL__blk_gc_list use after free

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 hdf5 1.14.4-1 on CBL Mariner 2.0, azl3 hdf5 1.14.4.3-1 on Azure Linux 3.0
Fixed versions1.14.6-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-2913
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-52508
MediumCVSS 5.5

nvme-fc: Prevent null pointer dereference in nvme_fc_io_getuuid()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
CVE-2023-52508
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50013
Medium

exfat: fix memory leak in exfat_load_bitmap()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-2 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.57.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-50013
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50192
Medium

irqchip/gic-v4: Don't allow a VMOVP on a dying VPE

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50192
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21707
Medium

mptcp: consolidate suboption status

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.179.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.78.1-3 on Azure Linux 3.0
Fixed versions5.15.179.1-1, 6.6.78.1-3
Vendor guidance

CBL-Mariner Releases

CVE-2025-21707
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-55916
MediumCVSS 5.5

Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.76.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0
Fixed versions5.15.176.3-1, 6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-55916
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49906
Medium

drm/amd/display: Check null pointer before try to access it

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-9 on Azure Linux 3.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0
Fixed versions6.6.64.2-9
Vendor guidance

CBL-Mariner Releases

CVE-2024-49906
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56722
Medium

RDMA/hns: Fix cpu stuck caused by printings during reset

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56722
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-2291
HighCVSS 8.1

PgBouncer default auth_query does not take Postgres password expiry into account

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 pgbouncer 1.16.1-1 on CBL Mariner 2.0, cbl2 pgbouncer 1.24.1-1 on CBL Mariner 2.0, azl3 pgbouncer 1.24.1-1 on Azure Linux 3.0, azl3 pgbouncer 1.20.1-1 on Azure Linux 3.0
Fixed versions1.24.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-2291
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-54661
MediumCVSS 5.0

readline.sh in socat before1.8.0.2 relies on the /tmp/$USER/stderr2 file.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 socat 1.7.4.4-2 on Azure Linux 3.0, cbl2 socat 1.7.4.3-2 on CBL Mariner 2.0, cbl2 socat 1.7.4.3-2 on CBL-Mariner 2.0
Fixed versions1.7.4.4-2, 1.7.4.3-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-54661
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42063
MediumCVSS 5.5

bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
CVE-2024-42063
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-32611
CriticalCVSS 9.8

HDF5 Library through 1.14.3 may use an uninitialized value in H5A__attr_release_table in H5Aint.c.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 hdf5 1.14.4-1 on CBL Mariner 2.0, azl3 hdf5 1.14.4.3-1 on Azure Linux 3.0, cbl2 hdf5 1.12.1-13 on CBL Mariner 2.0, cbl2 hdf5 1.12.1-13 on CBL-Mariner 2.0
Fixed versions1.14.4-1, 1.14.4.3-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-32611
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21928
HighCVSS 7.8

HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, cbl2 kernel 5.15.176.3-3 on CBL-Mariner 2.0, azl3 kernel 6.6.82.1-1 on Azure Linux 3.0
Fixed versions5.15.180.1-1, 6.6.85.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2025-21928
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-4947
MediumCVSS 6.5

QUIC certificate check skip with wolfSSL

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 cmake 3.30.3-7 on Azure Linux 3.0
Fixed versions3.30.3-7
Vendor guidance

CBL-Mariner Releases

CVE-2025-4947
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources