Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
16,941Advisories collected
6,373Published or updated in 30 days
7,004Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

16,941 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2025-30204
HighCVSS 7.5

jwt-go allows excessive memory allocation during header parsing

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 flannel 0.24.2-14 on Azure Linux 3.0, azl3 etcd 3.5.18-1 on Azure Linux 3.0, azl3 coredns 1.11.4-6 on Azure Linux 3.0, azl3 telegraf 1.31.0-10 on Azure Linux 3.0
Fixed versions0.24.2-12, 3.5.21-1, 1.11.4-5, 1.31.0-7
Vendor guidance

CBL-Mariner Releases

CVE-2025-30204
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50101
Medium

iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI devices

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50101
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-2757
HighCVSS 7.5

PHP mb_encode_mimeheader runs endlessly for some inputs

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 php 8.3.6-1 on Azure Linux 3.0, azl3 php 8.3.4-1 on Azure Linux 3.0
Fixed versions8.3.6-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-2757
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-52634
MediumCVSS 5.5

drm/amd/display: Fix disable_otg_wa logic

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
CVE-2023-52634
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50057
Low

usb: typec: tipd: Free IRQ only if it was requested before

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.57.1-1 on Azure Linux 3.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0
Fixed versions6.6.57.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50057
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50208
MediumCVSS 5.5

RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50208
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21787
Medium

team: better TEAM_OPTION_TYPE_STRING validation

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.78.1-3 on Azure Linux 3.0, cbl2 kernel 5.15.179.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.79.1-1 on Azure Linux 3.0
Fixed versions6.6.79.1-1, 5.15.179.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21787
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-52006
Low

Newline confusion in credential helpers can lead to credential exfiltration in git

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 git 2.40.4-1 on CBL Mariner 2.0, azl3 git 2.45.3-1 on Azure Linux 3.0, cbl2 git 2.39.4-1 on CBL Mariner 2.0, azl3 git 2.45.2-1 on Azure Linux 3.0
Fixed versions2.40.4-1, 2.45.3-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-52006
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-32622
CriticalCVSS 9.1

HDF5 Library through 1.14.3 contains a out-of-bounds read operation in H5FL_arr_malloc in H5FL.c (called from H5S_set_extent_simple in H5S.c).

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 hdf5 1.14.4-1 on CBL Mariner 2.0, azl3 hdf5 1.14.4.3-1 on Azure Linux 3.0, azl3 hdf5 1.14.3-1 on Azure Linux 3.0, cbl2 hdf5 1.12.1-13 on CBL-Mariner 2.0
Fixed versions1.14.4-1, 1.14.4.3-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-32622
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-45781
MediumCVSS 6.7

Grub2: fs/ufs: oob write in the heap

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 grub2 2.06-14 on CBL Mariner 2.0, cbl2 grub2 2.06-15 on CBL Mariner 2.0, azl3 grub2 2.06-25 on Azure Linux 3.0, azl3 grub2 2.06-24 on Azure Linux 3.0
Fixed versions2.06-15, 2.06-25
Vendor guidance

CBL-Mariner Releases

CVE-2024-45781
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21915
HighCVSS 7.8

cdx: Fix possible UAF error in driver_override_show()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.82.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Fixed versions6.6.85.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2025-21915
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56608
HighCVSS 7.8

drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Fixed versions5.15.182.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56608
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-46836
MediumCVSS 6.6

net-tools Stack-based Buffer Overflow vulnerability

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscm2 net-tools 2.10-4 on CBL Mariner 2.0, azl3 net-tools 2.10-4 on Azure Linux 3.0, cbl2 net-tools 2.10-4 on CBL Mariner 2.0, cbl2 net-tools 2.10-4 on CBL-Mariner 2.0
Fixed versions2.10-4
Vendor guidance

CBL-Mariner Releases

CVE-2025-46836
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49860
HighCVSS 7.1

ACPI: sysfs: validate return type of _STR method

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-49860
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-40972
MediumCVSS 5.5

ext4: do not create EA inode under buffer lock

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
CVE-2024-40972
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-21219
MediumCVSS 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.39 and prior 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mysql 8.0.40-1 on CBL Mariner 2.0, azl3 mysql 8.0.40-1 on Azure Linux 3.0, cbl2 mysql 8.0.36-1 on CBL Mariner 2.0, azl3 mysql 8.0.36-1 on Azure Linux 3.0
Fixed versions8.0.40-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-21219
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-32728
MediumCVSS 4.3

In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent forwarding.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 openssh 8.9p1-8 on CBL Mariner 2.0, cbl2 openssh 8.9p1-8 on CBL-Mariner 2.0, azl3 openssh 9.8p1-4 on Azure Linux 3.0
Fixed versions8.9p1-8, 9.8p1-4
Vendor guidance

CBL-Mariner Releases

CVE-2025-32728
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50096
MediumCVSS 5.5

nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50096
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-26714
MediumCVSS 5.5

interconnect: qcom: sc8180x: Mark CO0 BCM keepalive

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
CVE-2024-26714
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-1874
CriticalCVSS 9.4

Command injection via array-ish $command parameter of proc_open()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 php 8.3.8-1 on Azure Linux 3.0, azl3 php 8.3.6-1 on Azure Linux 3.0
Fixed versions8.3.8-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-1874
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53063
Medium

media: dvbdev: prevent the risk of out of memory access

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-53063
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49863
Medium

vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-49863
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50211
LowCVSS 7.8

udf: refactor inode_bmap() to handle error

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50211
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-12085
HighCVSS 7.5

Rsync: info leak via uninitialized stack contents

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 rsync 3.4.1-1 on CBL Mariner 2.0, azl3 rsync 3.4.1-1 on Azure Linux 3.0, azl3 rsync 3.2.7-1 on Azure Linux 3.0, cbl2 rsync 3.2.5-1 on CBL Mariner 2.0
Fixed versions3.4.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-12085
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources