Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
16,939Advisories collected
6,371Published or updated in 30 days
7,004Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

16,939 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2025-32914
HighCVSS 7.4

Libsoup: oob read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of process

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 libsoup 3.0.4-6 on CBL Mariner 2.0, cbl2 libsoup 3.0.4-6 on CBL-Mariner 2.0, cbl2 libsoup 3.0.4-4 on CBL Mariner 2.0, azl3 libsoup 3.4.4-4 on Azure Linux 3.0
Fixed versions3.0.4-4, 3.4.4-4
Vendor guidance

CBL-Mariner Releases

CVE-2025-32914
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49875
Medium

nfsd: map the EBADMSG to nfserr_io to avoid warning

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-49875
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-32610
MediumCVSS 5.7

HDF5 Library through 1.14.3 has a SEGV in H5T_close_real in H5T.c resulting in a corrupted instruction pointer.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 hdf5 1.14.4-1 on CBL Mariner 2.0, azl3 hdf5 1.14.4.3-1 on Azure Linux 3.0, azl3 hdf5 1.14.3-1 on Azure Linux 3.0, cbl2 hdf5 1.12.1-13 on CBL Mariner 2.0
Fixed versions1.14.4-1, 1.14.4.3-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-32610
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50258
MediumCVSS 5.5

net: fix crash when config small gso_max_size/gso_ipv4_max_size

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Fixed versions6.6.64.2-1, 5.15.182.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50258
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56642
HighCVSS 7.8

tipc: Fix use-after-free of kernel socket in cleanup_bearer().

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.76.1-1 on Azure Linux 3.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL-Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56642
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21742
HighCVSS 7.1

usbnet: ipheth: use static NDP16 location in URB

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-9 on Azure Linux 3.0, azl3 kernel 6.6.78.1-1 on Azure Linux 3.0
Fixed versions6.6.78.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21742
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-4969
MediumCVSS 6.5

Libsoup: off-by-one out-of-bounds read in find_boundary() in soup-multipart.c

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 libsoup 3.0.4-7 on CBL Mariner 2.0, azl3 libsoup 3.4.4-9 on Azure Linux 3.0, cbl2 libsoup 3.0.4-9 on CBL Mariner 2.0, cbl2 libsoup 3.0.4-9 on CBL-Mariner 2.0
Fixed versions3.0.4-9, 3.4.4-9
Vendor guidance

CBL-Mariner Releases

CVE-2025-4969
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-43098
MediumCVSS 5.5

i3c: Use i3cdev->desc->info instead of calling i3c_device_get_info() to avoid deadlock

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.76.1-1 on Azure Linux 3.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-43098
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-32386
MediumCVSS 6.5

Helm Allows A Specially Crafted Chart Archive To Cause Out Of Memory Termination

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 cert-manager 1.12.15-4 on Azure Linux 3.0, cbl2 cert-manager 1.11.2-23 on CBL-Mariner 2.0, azl3 helm 3.15.2-3 on Azure Linux 3.0, cbl2 helm 3.14.2-6 on CBL Mariner 2.0
Fixed versions1.12.15-4, 1.11.2-23, 3.15.2-3, 3.14.2-6
Vendor guidance

CBL-Mariner Releases

CVE-2025-32386
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2022-49476
MediumCVSS 5.5

mt76: mt7921: fix kernel crash at mt7921_pci_remove

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
CVE-2022-49476
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50090
HighCVSS 7.8

drm/xe/oa: Fix overflow in oa batch buffer

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.96.2-1 on Azure Linux 3.0, azl3 kernel 6.6.96.2-2 on Azure Linux 3.0, azl3 kernel 6.6.112.1-2 on Azure Linux 3.0
CVE-2024-50090
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-2312
MediumCVSS 5.9

cifs.upcall makes an upcall to the wrong namespace in containerized environments

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 cifs-utils 6.14-3 on CBL Mariner 2.0, azl3 cifs-utils 7.0-2 on Azure Linux 3.0, azl3 cifs-utils 7.3-1 on Azure Linux 3.0, cbl2 cifs-utils 6.14-3 on CBL-Mariner 2.0
Fixed versions6.14-3, 7.3-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-2312
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-26900
MediumCVSS 5.5

md: fix kmemleak of rdev->serial

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.159.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.35.1-4 on Azure Linux 3.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0
Fixed versions5.15.159.1-1, 6.6.35.1-4
Vendor guidance

CBL-Mariner Releases

CVE-2024-26900
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-26962
MediumCVSS 5.5

dm-raid456, md/raid456: fix a deadlock for dm-raid456 while io concurrent with reshape

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.104.2-4 on Azure Linux 3.0, azl3 kernel 6.6.117.1-1 on Azure Linux 3.0, azl3 kernel 6.6.119.3-1 on Azure Linux 3.0, azl3 kernel 6.6.119.3-3 on Azure Linux 3.0
CVE-2024-26962
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-41088
MediumCVSS 5.5

can: mcp251xfd: fix infinite loop when xmit fails

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.47.1-1 on Azure Linux 3.0, azl3 kernel 6.6.35.1-5 on Azure Linux 3.0
Fixed versions6.6.47.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-41088
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-21201
MediumCVSS 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.39 and prior 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mysql 8.0.40-1 on CBL Mariner 2.0, azl3 mysql 8.0.40-1 on Azure Linux 3.0, cbl2 mysql 8.0.36-1 on CBL Mariner 2.0, cbl2 mysql 8.0.36-1 on CBL-Mariner 2.0
Fixed versions8.0.40-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-21201
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53079
MediumCVSS 7.8

mm/thp: fix deferred split unqueue naming and locking

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-53079
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-58005
MediumCVSS 5.5

tpm: Change to kvalloc() in eventlog/acpi.c

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.179.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.78.1-3 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0
Fixed versions5.15.179.1-1, 6.6.78.1-3
Vendor guidance

CBL-Mariner Releases

CVE-2024-58005
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-57912
HighCVSS 7.1

iio: pressure: zpa2326: fix information leak in triggered buffer

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0
Fixed versions6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-57912
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-52939
MediumCVSS 5.5

mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1
CVE-2023-52939
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49877
Medium

ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-49877
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-52621
MediumCVSS 5.5

bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Fixed versions5.15.182.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2023-52621
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-32621
CriticalCVSS 9.8

HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5HG_read in H5HG.c (called from H5VL__native_blob_get in H5VLnative_blob.c) resulting in the corruption of the instruction pointer.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 hdf5 1.14.4-1 on CBL Mariner 2.0, azl3 hdf5 1.14.4.3-1 on Azure Linux 3.0, azl3 hdf5 1.14.3-1 on Azure Linux 3.0, cbl2 hdf5 1.12.1-13 on CBL Mariner 2.0
Fixed versions1.14.4-1, 1.14.4.3-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-32621
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50091
HighCVSS 7.8

dm vdo: don't refer to dedupe_context after releasing it

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.96.2-2 on Azure Linux 3.0, azl3 kernel 6.6.117.1-1 on Azure Linux 3.0, azl3 kernel 6.6.119.3-3 on Azure Linux 3.0
CVE-2024-50091
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources