Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
16,940Advisories collected
6,372Published or updated in 30 days
7,004Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

16,940 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2025-0624
HighCVSS 7.6

Grub2: net: out-of-bounds write in grub_net_search_config_file()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscm2 grub2 2.06-14 on CBL Mariner 2.0, azl3 grub2 2.06-24 on Azure Linux 3.0, cbl2 grub2 2.06-14 on CBL Mariner 2.0, cbl2 grub2 2.06-14 on CBL-Mariner 2.0
Fixed versions2.06-14, 2.06-24
Vendor guidance

CBL-Mariner Releases

CVE-2025-0624
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-26669
HighCVSS 7.1

net/sched: flower: Fix chain template offload

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
CVE-2024-26669
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56694
Medium

bpf: fix recursive lock when verdict program return SK_PASS

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL-Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56694
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-45338
HighCVSS 7.5

Non-linear parsing of case-insensitive content in golang.org/x/net/html

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 cri-o 1.22.3-9 on CBL Mariner 2.0, cbl2 keda 2.4.0-25 on CBL Mariner 2.0, cbl2 telegraf 1.29.4-10 on CBL Mariner 2.0, cbl2 application-gateway-kubernetes-ingress 1.4.0-24 on CBL Mariner 2.0
Fixed versions1.22.3-9, 2.4.0-25, 1.29.4-10, 1.4.0-24
Vendor guidance

CBL-Mariner Releases

CVE-2024-45338
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42162
HighCVSS 7.0

gve: Account for stopped queues when reading NIC stats

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
CVE-2024-42162
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-57874
MediumCVSS 6.1

arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.76.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.173.1-2 on CBL-Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-57874
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50049
MediumCVSS 5.5

drm/amd/display: Check null pointer before dereferencing se

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-1 on Azure Linux 3.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.57.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50049
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49761
HighCVSS 7.5

REXML ReDoS vulnerability

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 rubygem-rexml 3.2.7-3 on CBL Mariner 2.0, cbl2 ruby 3.1.4-8 on CBL Mariner 2.0, azl3 ruby 3.3.5-1 on Azure Linux 3.0, cbl2 rubygem-rexml 3.2.7-4 on CBL Mariner 2.0
Fixed versions3.2.7-3, 3.1.4-8, 3.3.5-1, 3.3.9-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-49761
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-21236
MediumCVSS 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.39 and prior 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mysql 8.0.40-1 on CBL Mariner 2.0, azl3 mysql 8.0.40-1 on Azure Linux 3.0, cbl2 mysql 8.0.36-1 on CBL Mariner 2.0, azl3 mysql 8.0.36-1 on Azure Linux 3.0
Fixed versions8.0.40-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-21236
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21904
MediumCVSS 5.5

caif_virtio: fix wrong pointer check in cfv_probe()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.82.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.176.3-3 on CBL-Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.85.1-2 on Azure Linux 3.0
Fixed versions6.6.85.1-2, 5.15.180.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21904
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-3096
MediumCVSS 6.5

PHP function password_verify can erroneously return true when argument contains NUL

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 php 8.1.28-1 on CBL Mariner 2.0, azl3 php 8.3.4-1 on Azure Linux 3.0, azl3 php 8.1.22-2 on Azure Linux 3.0, cbl2 php 8.1.22-2 on CBL Mariner 2.0
Fixed versions8.1.28-1, 8.3.4-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-3096
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-26718
MediumCVSS 5.5

dm-crypt, dm-verity: disable tasklets

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Fixed versions5.15.176.3-3
Vendor guidance

CBL-Mariner Releases

CVE-2024-26718
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49914
Medium

drm/amd/display: Add null check for pipe_ctx->plane_state in dcn20_program_pipe

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-9 on Azure Linux 3.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0
Fixed versions6.6.64.2-9
Vendor guidance

CBL-Mariner Releases

CVE-2024-49914
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-36923
Severity not listed

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.186.1-1 on CBL-Mariner 2.0
CVE-2024-36923
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-12088
MediumCVSS 6.5

Rsync: --safe-links option bypass leads to path traversal

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 rsync 3.4.1-1 on CBL Mariner 2.0, azl3 rsync 3.4.1-1 on Azure Linux 3.0, cbl2 rsync 3.2.5-1 on CBL Mariner 2.0, azl3 rsync 3.2.7-1 on Azure Linux 3.0
Fixed versions3.4.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-12088
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-32623
HighCVSS 8.8

HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5VM_array_fill in H5VM.c (called from H5S_select_elements in H5Spoint.c).

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 hdf5 1.14.4-1 on CBL Mariner 2.0, azl3 hdf5 1.14.4.3-1 on Azure Linux 3.0, azl3 hdf5 1.14.3-1 on Azure Linux 3.0, cbl2 hdf5 1.12.1-13 on CBL Mariner 2.0
Fixed versions1.14.4-1, 1.14.4.3-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-32623
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-29087
CriticalCVSS 9.8

In SQLite 3.44.0 through 3.49.0 before 3.49.1, the concat_ws() SQL function can cause memory to be written beyond the end of a malloc-allocated buffer. If the separator argument is attacker-controlled and has a large string (e.g., 2MB or more), an integer overflow occurs in calculating the size of the result buffer, and thus malloc may not allocate enough memory.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 libdb 5.3.28-7 on CBL Mariner 2.0, azl3 libdb 5.3.28-9 on Azure Linux 3.0, cbl2 sqlite 3.39.2-3 on CBL Mariner 2.0, azl3 sqlite 3.44.0-1 on Azure Linux 3.0
CVE-2025-29087
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-57950
MediumCVSS 5.5

drm/amd/display: Initialize denominator defaults to 1

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
CVE-2024-57950
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42223
MediumCVSS 5.5

media: dvb-frontends: tda10048: Fix integer overflow

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.164.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.43.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.162.2-1 on CBL Mariner 2.0, azl3 kernel 6.6.35.1-5 on Azure Linux 3.0
Fixed versions5.15.164.1-1, 6.6.43.1-7
Vendor guidance

CBL-Mariner Releases

CVE-2024-42223
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56623
MediumCVSS 7.8

scsi: qla2xxx: Fix use after free on unload

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.76.1-1 on Azure Linux 3.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56623
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53085
MediumCVSS 5.5

tpm: Lock TPM chip in tpm_pm_suspend() first

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-9 on Azure Linux 3.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0
Fixed versions6.6.64.2-9
Vendor guidance

CBL-Mariner Releases

CVE-2024-53085
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-4476
MediumCVSS 4.3

Libsoup: null pointer dereference in libsoup may lead to denial of service

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscm2 libsoup 3.0.4-7 on CBL Mariner 2.0, azl3 libsoup 3.4.4-7 on Azure Linux 3.0, cbl2 libsoup 3.0.4-7 on CBL Mariner 2.0, cbl2 libsoup 3.0.4-7 on CBL-Mariner 2.0
Fixed versions3.0.4-7, 3.4.4-7
Vendor guidance

CBL-Mariner Releases

CVE-2025-4476
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-38556
HighCVSS 7.8

net/mlx5: Add a timeout to acquire the command queue semaphore

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
CVE-2024-38556
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources