Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
16,941Advisories collected
6,373Published or updated in 30 days
7,004Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

16,941 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2022-49303
MediumCVSS 5.5

drivers: staging: rtl8192eu: Fix deadlock in rtw_joinbss_event_prehandle

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
CVE-2022-49303
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-55553
HighCVSS 7.5

In FRRouting (FRR) all routes are re-validated if the total size of an update received via RTR exceeds the internal socket's buffer size

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscm2 frr 8.5.5-3 on CBL Mariner 2.0, azl3 frr 9.1.1-3 on Azure Linux 3.0, cbl2 frr 8.5.5-3 on CBL Mariner 2.0, cbl2 frr 8.5.5-3 on CBL-Mariner 2.0
Fixed versions8.5.5-3, 9.1.1-3
Vendor guidance

CBL-Mariner Releases

CVE-2024-55553
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21792
MediumCVSS 7.8

ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.78.1-3 on Azure Linux 3.0, azl3 kernel 6.6.79.1-1 on Azure Linux 3.0
Fixed versions6.6.79.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21792
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50156
Medium

drm/msm: Avoid NULL dereference in msm_disp_state_print_regs()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50156
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-10963
HighCVSS 7.4

Pam: improper hostname interpretation in pam_access leads to access control bypass

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 pam 1.5.3-3 on Azure Linux 3.0, azl3 pam 1.5.3-4 on Azure Linux 3.0
Fixed versions1.5.3-3
Vendor guidance

CBL-Mariner Releases

CVE-2024-10963
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-47696
HighCVSS 7.8

RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-47696
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-3177
LowCVSS 2.7

Bypassing mountable secrets policy imposed by the ServiceAccount admission plugin

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kubernetes 1.30.1-1 on Azure Linux 3.0, azl3 kubernetes 1.29.1-4 on Azure Linux 3.0
Fixed versions1.30.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-3177
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-21238
MediumCVSS 5.3

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). Supported versions that are affected are 8.0.39 and prior 8.4.1 and prior and 9.0.1 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mysql 8.0.40-1 on CBL Mariner 2.0, azl3 mysql 8.0.40-1 on Azure Linux 3.0, cbl2 mysql 8.0.36-1 on CBL Mariner 2.0, azl3 mysql 8.0.36-1 on Azure Linux 3.0
Fixed versions8.0.40-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-21238
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-45775
MediumCVSS 5.2

Grub2: commands/extcmd: missing check for failed allocation

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 grub2 2.06-14 on CBL Mariner 2.0, azl3 grub2 2.06-24 on Azure Linux 3.0, azl3 grub2 2.06-25 on Azure Linux 3.0, cbl2 grub2 2.06-15 on CBL-Mariner 2.0
Fixed versions2.06-15, 2.06-25
Vendor guidance

CBL-Mariner Releases

CVE-2024-45775
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-27281
MediumCVSS 4.5

An issue was discovered in RDoc 6.3.3 through 6.6.2 as distributed in Ruby 3.x through 3.3.0. When parsing .rdoc_options (used for configuration in RDoc) as a YAML file object injection and resultant remote code execution are possible because there are no restrictions on the classes that can be restored. (When loading the documentation cache object injection and resultant remote code execution are also possible if there were a crafted cache.) The main fixed version is 6.6.3.1. For Ruby 3.0 users a fixed version is rdoc 6.3.4.1. For Ruby 3.1 users a fixed version is rdoc 6.4.1.1. For Ruby 3.2 users a fixed version is rdoc 6.5.1.1.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 ruby 3.1.4-4 on CBL Mariner 2.0, azl3 ruby 3.3.3-1 on Azure Linux 3.0, cbl2 ruby 3.1.4-9 on CBL-Mariner 2.0, azl3 ruby 3.3.0-4 on Azure Linux 3.0
Fixed versions3.1.4-4, 3.3.3-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-27281
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2022-48706
MediumCVSS 5.5

vdpa: ifcvf: Do proper cleanup if IFCVF init fails

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0
CVE-2022-48706
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53259
MediumCVSS 6.5

quic-go affected by an ICMP Packet Too Large Injection Attack on Linux

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 coredns 1.11.1-15 on CBL Mariner 2.0, azl3 coredns 1.11.4-1 on Azure Linux 3.0, azl3 coredns 1.11.4-6 on Azure Linux 3.0, cbl2 coredns 1.11.1-18 on CBL-Mariner 2.0
Fixed versions1.11.1-15, 1.11.4-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-53259
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-47705
MediumCVSS 5.5

block: fix potential invalid pointer dereference in blk_add_partition

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-47705
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21947
MediumCVSS 8.1

ksmbd: fix type confusion via race condition when using ipc_msg_send_request

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.85.1-2 on Azure Linux 3.0, azl3 kernel 6.6.82.1-1 on Azure Linux 3.0
Fixed versions6.6.85.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2025-21947
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21968
HighCVSS 7.8

drm/amd/display: Fix slab-use-after-free on hdcp_work

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.82.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, cbl2 kernel 5.15.176.3-3 on CBL-Mariner 2.0
Fixed versions6.6.85.1-2, 5.15.180.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21968
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21868
MediumCVSS 5.5

net: allow small head cache usage with large MAX_SKB_FRAGS values

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.112.1-2 on Azure Linux 3.0
Fixed versions6.6.117.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21868
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49957
Medium

ocfs2: fix null-ptr-deref when journal load failed.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-2 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.57.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-49957
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56629
Medium

HID: wacom: fix when get product name maybe null pointer

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.76.1-1 on Azure Linux 3.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL-Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56629
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21779
Medium

KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.179.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.79.1-1 on Azure Linux 3.0
Fixed versions5.15.179.1-1, 6.6.79.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21779
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42224
MediumCVSS 6.1

net: dsa: mv88e6xxx: Correct check for empty list

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.163.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.43.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.162.2-1 on CBL Mariner 2.0, azl3 kernel 6.6.35.1-5 on Azure Linux 3.0
Fixed versions5.15.163.1-1, 6.6.43.1-7, 5.15.164.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-42224
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-52625
MediumCVSS 5.5

drm/amd/display: Refactor DMCUB enter/exit idle interface

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
CVE-2023-52625
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21614
HighCVSS 7.5

go-git clients vulnerable to DoS via maliciously crafted Git server replies

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 packer 1.9.5-6 on Azure Linux 3.0, cbl2 packer 1.9.5-5 on CBL Mariner 2.0, cbl2 cri-o 1.22.3-14 on CBL Mariner 2.0, cbl2 packer 1.9.5-5 on CBL-Mariner 2.0
Fixed versions1.9.5-5, 1.9.5-7, 1.22.3-13
Vendor guidance

CBL-Mariner Releases

CVE-2025-21614
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-46712
LowCVSS 3.7

Erlang/OTP SSH Has Strict KEX Violations

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscm2 erlang 25.3.2.21-1 on CBL Mariner 2.0, azl3 erlang 26.2.5.12-1 on Azure Linux 3.0, cbl2 erlang 25.3.2.20-1 on CBL Mariner 2.0, azl3 erlang 26.2.5.11-1 on Azure Linux 3.0
Fixed versions25.3.2.21-1, 26.2.5.12-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-46712
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53161
MediumCVSS 5.5

EDAC/bluefield: Fix potential integer overflow

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.173.1-2 on CBL-Mariner 2.0
Fixed versions5.15.176.3-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-53161
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources