Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
16,941Advisories collected
6,373Published or updated in 30 days
7,004Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

16,941 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2024-38556
HighCVSS 7.8

net/mlx5: Add a timeout to acquire the command queue semaphore

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
CVE-2024-38556
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21666
MediumCVSS 5.5

vsock: prevent null-ptr-deref in vsock_*[has_data|has_space]

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.76.1-1 on Azure Linux 3.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0, cbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0
Fixed versions5.15.180.1-1, 6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21666
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-21199
MediumCVSS 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.39 and prior 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mysql 8.0.40-1 on CBL Mariner 2.0, azl3 mysql 8.0.40-1 on Azure Linux 3.0, cbl2 mysql 8.0.36-1 on CBL Mariner 2.0, azl3 mysql 8.0.36-1 on Azure Linux 3.0
Fixed versions8.0.40-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-21199
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21905
MediumCVSS 7.1

wifi: iwlwifi: limit printed string from FW file

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.85.1-2 on Azure Linux 3.0, azl3 kernel 6.6.82.1-1 on Azure Linux 3.0
Fixed versions5.15.180.1-1, 6.6.85.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2025-21905
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-7776
HighCVSS 8.1

Arbitrary File Overwrite in onnx/onnx

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 pytorch 2.2.2-5 on Azure Linux 3.0, azl3 pytorch 2.2.2-7 on Azure Linux 3.0
Fixed versions2.2.2-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-7776
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2022-49496
MediumCVSS 5.5

media: mediatek: vcodec: prevent kernel crash when rmmod mtk-vcodec-dec.ko

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
CVE-2022-49496
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-47699
Medium

nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-47699
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2020-21687
MediumCVSS 5.5

Buffer Overflow vulnerability in scan function in stdscan.c in nasm 2.15rc0 allows remote attackers to cause a denial of service via crafted asm file.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 tensorflow 2.16.1-9 on Azure Linux 3.0, cbl2 tensorflow 2.11.1-2 on CBL Mariner 2.0, cbl2 tensorflow 2.11.1-2 on CBL-Mariner 2.0
CVE-2020-21687
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50098
Medium

scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50098
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-2756
MediumCVSS 6.5

__Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 php 8.1.28-1 on CBL Mariner 2.0, cbl2 php 8.1.22-2 on CBL Mariner 2.0, cbl2 php 8.1.22-2 on CBL-Mariner 2.0
Fixed versions8.1.28-1
Vendor guidance

CBL-Mariner Releases

CVE-2022-31629CVE-2024-2756
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50046
Medium

NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.57.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50046
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-12087
MediumCVSS 6.5

Rsync: path traversal vulnerability in rsync

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 rsync 3.4.1-1 on CBL Mariner 2.0, azl3 rsync 3.4.1-1 on Azure Linux 3.0, cbl2 rsync 3.2.5-1 on CBL Mariner 2.0, azl3 rsync 3.2.7-1 on Azure Linux 3.0
Fixed versions3.4.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-12087
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-58011
MediumCVSS 5.5

platform/x86: int3472: Check for adev == NULL

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.78.1-3 on Azure Linux 3.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0
Fixed versions6.6.78.1-3
Vendor guidance

CBL-Mariner Releases

CVE-2024-58011
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-26687
MediumCVSS 5.5

xen/events: close evtchn after mapping cleanup

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Fixed versions5.15.176.3-3
Vendor guidance

CBL-Mariner Releases

CVE-2024-26687
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2022-48635
MediumCVSS 6.2

fsdax: Fix infinite loop in dax_iomap_rw()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, azl3 kernel 6.6.76.1-1 on Azure Linux 3.0, azl3 kernel 6.6.78.1-3 on Azure Linux 3.0, cbl2 kernel 5.15.176.3-3 on CBL-Mariner 2.0
Fixed versions6.6.76.1-1, 5.15.176.3-1
Vendor guidance

CBL-Mariner Releases

CVE-2022-48635
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-27397
Medium

netfilter: nf_tables: use timestamp to check for set element timeout

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 hyperv-daemons 5.15.158.2-1 on CBL Mariner 2.0, azl3 hyperv-daemons 6.6.56.1-1 on Azure Linux 3.0, azl3 hyperv-daemons 6.6.51.1-1 on Azure Linux 3.0, cbl2 hyperv-daemons 5.15.164.1-1 on CBL Mariner 2.0
Fixed versions5.15.158.2-1, 6.6.56.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-27397
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42156
MediumCVSS 4.1

s390/pkey: Wipe copies of clear-key structures on failure

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-9 on Azure Linux 3.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0
Fixed versions6.6.64.2-9
Vendor guidance

CBL-Mariner Releases

CVE-2024-42156
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21912
Medium

gpio: rcar: Use raw_spinlock to protect register access

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.82.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.85.1-2 on Azure Linux 3.0
Fixed versions6.6.85.1-2, 5.15.180.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21912
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56593
Medium

wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.76.1-1 on Azure Linux 3.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56593
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-21241
MediumCVSS 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.39 and prior 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mysql 8.0.40-1 on CBL Mariner 2.0, azl3 mysql 8.0.40-1 on Azure Linux 3.0, cbl2 mysql 8.0.36-1 on CBL Mariner 2.0, azl3 mysql 8.0.36-1 on Azure Linux 3.0
Fixed versions8.0.40-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-21241
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56568
MediumCVSS 4.7

iommu/arm-smmu: Defer probe of clients after smmu device bound

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.76.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0
Fixed versions5.15.176.3-1, 6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56568
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-47279
LowCVSS 3.1

undici Denial of Service attack via bad certificate data

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 nodejs 20.14.0-8 on Azure Linux 3.0, cbl2 nodejs18 18.20.3-6 on CBL Mariner 2.0, azl3 nodejs 20.14.0-9 on Azure Linux 3.0, cbl2 nodejs18 18.20.3-6 on CBL-Mariner 2.0
Fixed versions20.14.0-8, 18.20.3-6
Vendor guidance

CBL-Mariner Releases

CVE-2025-47279
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-47734
Medium

bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-47734
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21945
HighCVSS 7.8

ksmbd: fix use-after-free in smb2_lock

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.82.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Fixed versions6.6.85.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2025-21945
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources