Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
16,941Advisories collected
6,373Published or updated in 30 days
7,004Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

16,941 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2024-47691
HighCVSS 7.8

f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.56.1-5 on Azure Linux 3.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-47691
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-20380
HighCVSS 7.5

ClamAV HTML Parser Denial of Service Vulnerability

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 clamav 1.0.7-1 on CBL Mariner 2.0, cbl2 clamav 1.0.7-1 on CBL-Mariner 2.0, azl3 clamav 1.0.7-2 on Azure Linux 3.0
CVE-2024-20380
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-27282
MediumCVSS 6.6

An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the Ruby regex compiler it is possible to extract arbitrary heap data relative to the start of the text including pointers and sensitive strings. The fixed versions are 3.0.7 3.1.5 3.2.4 and 3.3.1.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 ruby 3.1.4-5 on CBL Mariner 2.0, azl3 ruby 3.3.3-1 on Azure Linux 3.0, azl3 ruby 3.3.0-4 on Azure Linux 3.0, cbl2 ruby 3.1.4-9 on CBL Mariner 2.0
Fixed versions3.1.4-5, 3.3.3-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-27282
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-57908
HighCVSS 7.1

iio: imu: kmx61: fix information leak in triggered buffer

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Fixed versions6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-57908
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21981
MediumCVSS 5.5

ice: fix memory leak in aRFS after reset

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.85.1-2 on Azure Linux 3.0
Fixed versions5.15.180.1-1, 6.6.85.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2025-21981
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21962
MediumCVSS 5.5

cifs: Fix integer overflow while processing closetimeo mount option

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.82.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, cbl2 kernel 5.15.176.3-3 on CBL-Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0
Fixed versions6.6.85.1-2, 5.15.180.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21962
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-36623
HighCVSS 8.1

moby through v25.0.3 has a Race Condition vulnerability in the streamformatter package which can be used to trigger multiple concurrent write operations resulting in data corruption or application crashes.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 moby-engine 24.0.9-11 on CBL Mariner 2.0, cbl2 moby-compose 2.17.3-8 on CBL Mariner 2.0, cbl2 moby-cli 24.0.9-5 on CBL Mariner 2.0, azl3 docker-cli 25.0.3-3 on Azure Linux 3.0
Fixed versions24.0.9-11, 2.17.3-8, 24.0.9-5, 25.0.3-3
Vendor guidance

CBL-Mariner Releases

CVE-2024-36623
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-47707
Medium

ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.179.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0
Fixed versions5.15.179.1-1, 6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-47707
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42101
MediumCVSS 5.5

drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.164.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.47.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.162.2-1 on CBL Mariner 2.0, azl3 kernel 6.6.35.1-5 on Azure Linux 3.0
Fixed versions5.15.164.1-1, 6.6.47.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-42101
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49962
Medium

ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-2 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.57.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-49962
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-26686
MediumCVSS 5.5

fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.82.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Fixed versions6.6.82.1-1, 5.15.182.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-26686
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21776
Medium

USB: hub: Ignore non-compliant devices with too many configs or interfaces

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.179.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.79.1-1 on Azure Linux 3.0
Fixed versions5.15.179.1-1, 6.6.79.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21776
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-4207
MediumCVSS 5.9

PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscm2 postgresql 14.18-1 on CBL Mariner 2.0, azl3 postgresql 16.9-1 on Azure Linux 3.0, azl3 postgresql 16.7-1 on Azure Linux 3.0, cbl2 postgresql 14.16-1 on CBL Mariner 2.0
Fixed versions14.18-1, 16.9-1, 1.90.0-4
Vendor guidance

CBL-Mariner Releases

CVE-2025-4207
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42159
HighCVSS 7.8

scsi: mpi3mr: Sanitise num_phys

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.43.1-7 on Azure Linux 3.0, azl3 kernel 6.6.35.1-5 on Azure Linux 3.0
Fixed versions6.6.43.1-7
Vendor guidance

CBL-Mariner Releases

CVE-2024-42159
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-47671
Medium

USB: usbtmc: prevent kernel-usb-infoleak

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.180.1-1 on CBL-Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-47671
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50116
Medium

nilfs2: fix kernel bug due to missing clearing of buffer delay flag

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50116
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56538
HighCVSS 7.8

drm: zynqmp_kms: Unplug DRM device before removal

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56538
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50257
HighCVSS 7.8

netfilter: Fix use-after-free in get_info()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50257
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21613
HighCVSS 9.8

go-git has an Argument Injection via the URL field

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 packer 1.9.5-5 on CBL Mariner 2.0, cbl2 packer 1.9.5-7 on CBL Mariner 2.0, cbl2 cri-o 1.22.3-12 on CBL Mariner 2.0, azl3 packer 1.9.5-5 on Azure Linux 3.0
Fixed versions1.9.5-7, 1.22.3-12, 1.9.5-5
Vendor guidance

CBL-Mariner Releases

CVE-2025-21613
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21967
HighCVSS 7.8

ksmbd: fix use-after-free in ksmbd_free_work_struct

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.82.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Fixed versions6.6.85.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2025-21967
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-26993
Medium

fs: sysfs: Fix reference leak in sysfs_break_active_protection()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 hyperv-daemons 5.15.158.1-1 on CBL Mariner 2.0, azl3 hyperv-daemons 6.6.35.1-1 on Azure Linux 3.0, cbl2 hyperv-daemons 5.15.153.1-1 on CBL Mariner 2.0, azl3 hyperv-daemons 6.6.22.1-2 on Azure Linux 3.0
Fixed versions5.15.158.1-1, 6.6.35.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-26993
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49214
Medium

QUIC in HAProxy 3.1.x before 3.1-dev7, 3.0.x before 3.0.5, and 2.9.x before 2.9.11 allows opening a 0-RTT session with a spoofed IP address. This can bypass the IP allow/block list functionality.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 haproxy 2.4.24-1 on CBL Mariner 2.0
Fixed versions2.4.24-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-49214
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-24928
HighCVSS 7.8

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To exploit this, DTD validation must occur for an untrusted document or untrusted DTD. NOTE: this is similar to CVE-2017-9047.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 libxml2 2.10.4-6 on CBL Mariner 2.0, cbl2 libxml2 2.10.4-6 on CBL-Mariner 2.0, azl3 libxml2 2.11.5-4 on Azure Linux 3.0, azl3 libxml2 2.11.5-5 on Azure Linux 3.0
Fixed versions2.10.4-6, 2.11.5-4
Vendor guidance

CBL-Mariner Releases

CVE-2017-9047CVE-2025-24928
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-22010
MediumCVSS 5.5

RDMA/hns: Fix soft lockup during bt pages loop

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.85.1-2 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0
Fixed versions5.15.180.1-1, 6.6.85.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2025-22010
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources