Search threats, CVEs… ⌘K
Vendor advisories

Microsoft Security Response Center

Browse 15,985 advisories from this official source. Search by product, CVE, severity, or advisory ID.

Current Checked 5 hours ago Checked every 6 hours
All vendor sources Official source

15,985 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2024-31083
HighCVSS 7.8

Xorg-x11-server: use-after-free in procrenderaddglyphs

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 xorg-x11-server 1.20.10-11 on CBL Mariner 2.0, cbl2 xorg-x11-server 1.20.10-15 on CBL Mariner 2.0, cbl2 xorg-x11-server 1.20.10-15 on CBL-Mariner 2.0
Fixed versions1.20.10-11
Vendor guidance

CBL-Mariner Releases

CVE-2024-31083
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-40644
MediumCVSS 6.8

gitoxide's gix-path can use a fake program files location

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 rust 1.75.0-14 on Azure Linux 3.0, cbl2 rust 1.72.0-10 on CBL Mariner 2.0, cbl2 rust 1.72.0-10 on CBL-Mariner 2.0, azl3 rust 1.86.0-1 on Azure Linux 3.0
CVE-2024-40644
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-41098
MediumCVSS 5.5

ata: libata-core: Fix null pointer dereference on error

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.167.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.43.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Fixed versions5.15.167.1-1, 6.6.43.1-7
Vendor guidance

CBL-Mariner Releases

CVE-2024-41098
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-31081
HighCVSS 7.3

Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevice

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 xorg-x11-server 1.20.10-11 on CBL Mariner 2.0, cbl2 xorg-x11-server 1.20.10-15 on CBL Mariner 2.0, cbl2 xorg-x11-server 1.20.10-15 on CBL-Mariner 2.0
Fixed versions1.20.10-11
Vendor guidance

CBL-Mariner Releases

CVE-2024-31081
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2020-8127
MediumCVSS 6.1

Insufficient validation in cross-origin communication (postMessage) in reveal.js version 3.9.1 and earlier allow attackers to perform cross-site scripting attacks.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 orangefs 2.9.8-3 on Azure Linux 3.0, cbl2 orangefs 2.9.8-3 on CBL Mariner 2.0, cbl2 orangefs 2.9.8-3 on CBL-Mariner 2.0
CVE-2020-8127
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-47674
MediumCVSS 5.5

mm: avoid leaving partial pfn mappings around in error case

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-47674
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-31082
HighCVSS 7.3

Xorg-x11-server: heap buffer overread/data leakage in procappledricreatepixmap

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 xorg-x11-server 1.20.10-11 on CBL Mariner 2.0, cbl2 xorg-x11-server 1.20.10-15 on CBL Mariner 2.0, cbl2 xorg-x11-server 1.20.10-15 on CBL-Mariner 2.0
Fixed versions1.20.10-11
Vendor guidance

CBL-Mariner Releases

CVE-2024-31082
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-39496
HighCVSS 7.8

btrfs: zoned: fix use-after-free due to race with dev replace

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.35.1-5 on Azure Linux 3.0, azl3 kernel 6.6.22.1-2 on Azure Linux 3.0
Fixed versions-, 6.6.35.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-39496
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2020-8910
MediumCVSS 6.5

Auth Bypass in Google's Closure-Library

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 python-tensorboard 2.11.0-3 on CBL-Mariner 2.0, azl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0, cbl2 python-tensorboard 2.11.0-3 on CBL Mariner 2.0
CVE-2020-8910
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-21166
MediumCVSS 5.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized creation deletion or modification access to critical data or all MySQL Server accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 5.9 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H).

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mysql 8.0.40-1 on CBL Mariner 2.0, azl3 mysql 8.0.40-1 on Azure Linux 3.0, cbl2 mysql 8.0.36-1 on CBL Mariner 2.0, azl3 mysql 8.0.36-1 on Azure Linux 3.0
Fixed versions8.0.40-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-21166
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-1975
HighCVSS 7.5

SIG(0) can be used to exhaust CPU resources

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 bind 9.20.0-1 on Azure Linux 3.0, cbl2 bind 9.16.50-1 on CBL Mariner 2.0, cbl2 dhcp 4.4.3.P1-2 on CBL Mariner 2.0, cbl2 bind 9.16.50-1 on CBL-Mariner 2.0
Fixed versions9.20.0-1, 9.16.50-1, 4.4.3.P1-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-1975
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-21162
MediumCVSS 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mysql 8.0.40-1 on CBL Mariner 2.0, azl3 mysql 8.0.40-1 on Azure Linux 3.0, cbl2 mysql 8.0.36-1 on CBL Mariner 2.0, azl3 mysql 8.0.36-1 on Azure Linux 3.0
Fixed versions8.0.40-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-21162
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-0874
MediumCVSS 5.3

Coredns: cd bit response is cached and served later

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 coredns 1.11.1-8 on CBL Mariner 2.0, azl3 coredns 1.11.1-2 on Azure Linux 3.0, azl3 coredns 1.11.1-4 on Azure Linux 3.0, cbl2 coredns 1.11.1-18 on CBL Mariner 2.0
Fixed versions1.11.1-8, 1.11.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-0874
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42154
MediumCVSS 4.4

tcp_metrics: validate source addr length

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.164.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.43.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.162.2-1 on CBL-Mariner 2.0, azl3 kernel 6.6.35.1-5 on Azure Linux 3.0
Fixed versions5.15.164.1-1, 6.6.43.1-7
Vendor guidance

CBL-Mariner Releases

CVE-2024-42154
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-39908
MediumCVSS 4.3

Denial of service in REXML

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 ruby 3.3.5-1 on Azure Linux 3.0, azl3 rubygem-rexml 3.3.4-1 on Azure Linux 3.0, cbl2 rubygem-rexml 3.2.7-4 on CBL Mariner 2.0, cbl2 ruby 3.1.4-9 on CBL Mariner 2.0
Fixed versions3.3.5-1, 3.3.4-1, 3.2.7-4, 3.1.7-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-39908
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-4076
HighCVSS 7.5

Assertion failure when serving both stale cache data and authoritative zone content

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 bind 9.20.0-1 on Azure Linux 3.0, cbl2 bind 9.16.50-1 on CBL Mariner 2.0, azl3 bind 9.19.21-1 on Azure Linux 3.0, cbl2 bind 9.16.50-1 on CBL-Mariner 2.0
Fixed versions9.20.0-1, 9.16.50-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-4076
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-21127
MediumCVSS 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mysql 8.0.40-1 on CBL Mariner 2.0, azl3 mysql 8.0.40-1 on Azure Linux 3.0, azl3 mysql 8.0.36-1 on Azure Linux 3.0, cbl2 mysql 8.0.36-1 on CBL Mariner 2.0
Fixed versions8.0.40-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-21127
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42123
MediumCVSS 4.4

drm/amdgpu: fix double free err_addr pointer warnings

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.96.2-1 on Azure Linux 3.0, azl3 kernel 6.6.112.1-2 on Azure Linux 3.0, azl3 kernel 6.6.117.1-1 on Azure Linux 3.0, azl3 kernel 6.6.121.1-1 on Azure Linux 3.0
CVE-2024-42123
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-38665
MediumCVSS 5.5

Null pointer dereference in ieee_write_file in nasm 2.16rc0 allows attackers to cause a denial of service (crash).

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 tensorflow 2.16.1-9 on Azure Linux 3.0, azl3 nasm 2.16.01-2 on Azure Linux 3.0, azl3 nasm 2.16.01-1 on Azure Linux 3.0, cbl2 tensorflow 2.11.1-2 on CBL Mariner 2.0
CVE-2023-38665
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2020-18780
MediumCVSS 5.5

A Use After Free vulnerability in function new_Token in asm/preproc.c in nasm 2.14.02 allows attackers to cause a denial of service via crafted nasm command.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 tensorflow 2.11.1-2 on CBL Mariner 2.0, azl3 tensorflow 2.16.1-9 on Azure Linux 3.0, cbl2 tensorflow 2.11.1-2 on CBL-Mariner 2.0
CVE-2020-18780
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-21142
MediumCVSS 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mysql 8.0.40-1 on CBL Mariner 2.0, azl3 mysql 8.0.40-1 on Azure Linux 3.0, azl3 mysql 8.0.36-1 on Azure Linux 3.0, cbl2 mysql 8.0.36-1 on CBL Mariner 2.0
Fixed versions8.0.40-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-21142
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-8508
MediumCVSS 5.3

Unbounded name compression could lead to Denial of Service

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 unbound 1.19.1-4 on Azure Linux 3.0, cbl2 unbound 1.19.1-3 on CBL Mariner 2.0, cbl2 unbound 1.19.1-3 on CBL-Mariner 2.0
Fixed versions1.19.1-4, 1.19.1-3
Vendor guidance

CBL-Mariner Releases

CVE-2024-8508
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-41184
CriticalCVSS 9.8

In the vrrp_ipsets_handler handler (fglobal_parser.c) of keepalived through 2.3.1 an integer overflow can occur. NOTE: this CVE Record might not be worthwhile because an empty ipset name must be configured by the user.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 keepalived 2.3.1-1 on Azure Linux 3.0, cbl2 keepalived 2.3.1-1 on CBL Mariner 2.0, cbl2 keepalived 2.3.1-1 on CBL-Mariner 2.0
Fixed versions2.3.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-41184
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42155
LowCVSS 1.9

s390/pkey: Wipe copies of protected- and secure-keys

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.96.2-1 on Azure Linux 3.0, azl3 kernel 6.6.96.2-2 on Azure Linux 3.0, azl3 kernel 6.6.117.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0
CVE-2024-42155
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources