Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
16,939Advisories collected
6,371Published or updated in 30 days
7,004Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

16,939 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2024-53066
Medium

nfs: Fix KMSAN warning in decode_getfattr_attrs()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-53066
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21682
HighCVSS 7.3

eth: bnxt: always recalculate features after XDP clearing, fix null-deref

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.126.1-1 on Azure Linux 3.0
Fixed versions6.6.130.1-3
Vendor guidance

CBL-Mariner Releases

CVE-2025-21682
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49944
Medium

sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-49944
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-32912
MediumCVSS 6.5

Libsoup: null pointer dereference in client when server omits the "nonce" parameter in an unauthorized response with digest authentication

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 libsoup 3.0.4-7 on CBL Mariner 2.0, azl3 libsoup 3.4.4-3 on Azure Linux 3.0, azl3 libsoup 3.4.4-6 on Azure Linux 3.0, cbl2 libsoup 3.0.4-7 on CBL-Mariner 2.0
Fixed versions3.0.4-7, 3.4.4-3
Vendor guidance

CBL-Mariner Releases

CVE-2025-32912
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-32619
HighCVSS 7.4

HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5T_copy_reopen in H5T.c resulting in the corruption of the instruction pointer.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 hdf5 1.14.4-1 on CBL Mariner 2.0, azl3 hdf5 1.14.4.3-1 on Azure Linux 3.0, azl3 hdf5 1.14.3-1 on Azure Linux 3.0, cbl2 hdf5 1.12.1-13 on CBL Mariner 2.0
Fixed versions1.14.4-1, 1.14.4.3-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-32619
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53222
MediumCVSS 5.5

zram: fix NULL pointer in comp_algorithm_show()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.85.1-1 on Azure Linux 3.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0
Fixed versions6.6.85.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-53222
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21773
MediumCVSS 5.5

can: etas_es58x: fix potential NULL pointer dereference on udev->serial

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.78.1-3 on Azure Linux 3.0, azl3 kernel 6.6.79.1-1 on Azure Linux 3.0
Fixed versions6.6.79.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21773
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53899
HighCVSS 8.4

virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not quoted correctly when replacing. NOTE: this is not the same as CVE-2024-9287.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 python-virtualenv 20.26.6-1 on CBL Mariner 2.0, azl3 python-virtualenv 20.25.0-3 on Azure Linux 3.0, cbl2 python-virtualenv 20.14.0-6 on CBL Mariner 2.0, cbl2 python-virtualenv 20.14.0-6 on CBL-Mariner 2.0
Fixed versions20.26.6-1, 20.25.0-3
Vendor guidance

CBL-Mariner Releases

CVE-2024-9287CVE-2024-53899
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49998
Medium

net: dsa: improve shutdown sequence

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.112.1-2 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.117.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-49998
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-21130
MediumCVSS 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mysql 8.0.40-1 on CBL Mariner 2.0, azl3 mysql 8.0.40-1 on Azure Linux 3.0, azl3 mysql 8.0.36-1 on Azure Linux 3.0, cbl2 mysql 8.0.36-1 on CBL Mariner 2.0
Fixed versions8.0.40-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-21130
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53089
MediumCVSS 5.5

LoongArch: KVM: Mark hrtimer to expire in hard interrupt context

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.96.2-1 on Azure Linux 3.0, azl3 kernel 6.6.104.2-4 on Azure Linux 3.0, azl3 kernel 6.6.112.1-2 on Azure Linux 3.0, azl3 kernel 6.6.117.1-1 on Azure Linux 3.0
CVE-2024-53089
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49907
Medium

drm/amd/display: Check null pointers before using dc->clk_mgr

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-49907
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-53154
LowCVSS 2.9

parse_string in cJSON before 1.7.18 has a heap-based buffer over-read via {"1":1, with no trailing newline if cJSON_ParseWithLength is called.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 apparmor 3.0.4-4 on CBL Mariner 2.0, cbl2 apparmor 3.0.4-5 on CBL Mariner 2.0, azl3 apparmor 3.1.7-1 on Azure Linux 3.0, cbl2 apparmor 3.0.4-5 on CBL-Mariner 2.0
Fixed versions3.0.4-5, 3.1.7-1
Vendor guidance

CBL-Mariner Releases

CVE-2023-53154
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56606
HighCVSS 7.8

af_packet: avoid erroring out after sock_init_data() in packet_create()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.76.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0
Fixed versions5.15.176.3-1, 6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56606
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21783
MediumCVSS 5.5

gpiolib: Fix crash on error in gpiochip_get_ngpios()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.78.1-3 on Azure Linux 3.0, azl3 kernel 6.6.79.1-1 on Azure Linux 3.0
Fixed versions6.6.79.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21783
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21673
MediumCVSS 9.8

smb: client: fix double free of TCP_Server_Info::hostname

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-9 on Azure Linux 3.0, azl3 kernel 6.6.76.1-1 on Azure Linux 3.0
Fixed versions6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21673
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53050
MediumCVSS 5.5

drm/i915/hdcp: Add encoder check in hdcp2_get_capability

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.96.2-1 on Azure Linux 3.0, azl3 kernel 6.6.112.1-2 on Azure Linux 3.0, azl3 kernel 6.6.117.1-1 on Azure Linux 3.0, azl3 kernel 6.6.119.3-1 on Azure Linux 3.0
CVE-2024-53050
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21919
HighCVSS 7.8

sched/fair: Fix potential memory corruption in child_cfs_rq_on_list

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.85.1-2 on Azure Linux 3.0, azl3 kernel 6.6.82.1-1 on Azure Linux 3.0
Fixed versions5.15.180.1-1, 6.6.85.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2025-21919
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-30215
CriticalCVSS 9.6

NATS-Server Fails to Authorize Certain Jetstream Admin APIs

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 telegraf 1.29.4-16 on CBL Mariner 2.0, cbl2 telegraf 1.29.4-15 on CBL Mariner 2.0, azl3 telegraf 1.31.0-9 on Azure Linux 3.0, azl3 telegraf 1.31.0-10 on Azure Linux 3.0
Fixed versions1.29.4-15, 1.31.0-9
Vendor guidance

CBL-Mariner Releases

CVE-2025-30215
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-33874
CriticalCVSS 9.8

HDF5 Library through 1.14.3 has a heap buffer overflow in H5O__mtime_new_encode in H5Omtime.c.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 hdf5 1.14.4-1 on CBL Mariner 2.0, azl3 hdf5 1.14.4.3-1 on Azure Linux 3.0, cbl2 hdf5 1.12.1-13 on CBL Mariner 2.0, azl3 hdf5 1.14.3-1 on Azure Linux 3.0
Fixed versions1.14.4-1, 1.14.4.3-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-33874
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50273
MediumCVSS 5.5

btrfs: reinitialize delayed ref list after deleting it from the list

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50273
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-2310
MediumCVSS 5.3

HDF5 Metadata Attribute Decoder H5MM_strndup heap-based overflow

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 hdf5 1.14.4.3-1 on Azure Linux 3.0, cbl2 hdf5 1.14.4-1 on CBL Mariner 2.0, cbl2 hdf5 1.14.6-1 on CBL Mariner 2.0, azl3 hdf5 1.14.6-1 on Azure Linux 3.0
Fixed versions1.14.6-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-2310
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49996
HighCVSS 7.8

cifs: Fix buffer overflow when parsing NFS reparse points

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-2 on Azure Linux 3.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions5.15.176.3-1, 6.6.57.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-49996
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21743
HighCVSS 7.1

usbnet: ipheth: fix possible overflow in DPE length check

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.78.1-1 on Azure Linux 3.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0
Fixed versions6.6.78.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21743
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources