Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
16,941Advisories collected
6,373Published or updated in 30 days
7,004Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

16,941 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2024-27316
HighCVSS 7.5

Apache HTTP Server: HTTP/2 DoS by memory exhaustion on endless continuation frames

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 httpd 2.4.59-1 on CBL Mariner 2.0, azl3 mod_http2 2.0.29-3 on Azure Linux 3.0, azl3 httpd 2.4.61-1 on Azure Linux 3.0, cbl2 httpd 2.4.58-1 on CBL Mariner 2.0
Fixed versions2.4.59-1, 2.0.29-3, 2.4.61-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-27316
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49913
Medium

drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-49913
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-57911
MediumCVSS 7.1

iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.76.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, cbl2 kernel 5.15.176.3-3 on CBL-Mariner 2.0
Fixed versions5.15.180.1-1, 6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-57911
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49985
Medium

i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-2 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.57.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-49985
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-26677
MediumCVSS 5.5

rxrpc: Fix delayed ACKs to not set the reference serial number

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
CVE-2024-26677
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-47739
Medium

padata: use integer wrap around to prevent deadlock on seq_nr overflow

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-47739
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-47619
HighCVSS 7.5

tranport: TLS host name wildcard matching too lax

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 syslog-ng 4.3.1-3 on Azure Linux 3.0, cbl2 syslog-ng 3.33.2-8 on CBL Mariner 2.0, cbl2 syslog-ng 3.33.2-8 on CBL-Mariner 2.0
Fixed versions4.3.1-3, 3.33.2-8
Vendor guidance

CBL-Mariner Releases

CVE-2024-47619
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21785
HighCVSS 7.8

arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.79.1-1 on Azure Linux 3.0, azl3 kernel 6.6.78.1-3 on Azure Linux 3.0
Fixed versions6.6.79.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21785
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53173
HighCVSS 7.8

NFSv4.0: Fix a use-after-free problem in the asynchronous open()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL-Mariner 2.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-53173
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50093
Medium

thermal: intel: int340x: processor: Fix warning during module unload

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-2 on Azure Linux 3.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.57.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-50093
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-48949
CriticalCVSS 9.1

The verify function in lib/elliptic/eddsa/index.js in the Elliptic package before 6.5.6 for Node.js omits "sig.S().gte(sig.eddsa.curve.n) || sig.S().isNeg()" validation.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 reaper 3.1.1-13 on CBL Mariner 2.0, cbl2 reaper 3.1.1-18 on CBL-Mariner 2.0, cbl2 reaper 3.1.1-18 on CBL Mariner 2.0
Fixed versions3.1.1-13
Vendor guidance

CBL-Mariner Releases

CVE-2024-48949
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21963
MediumCVSS 5.5

cifs: Fix integer overflow while processing acdirmax mount option

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.82.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.176.3-3 on CBL-Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.85.1-2 on Azure Linux 3.0
Fixed versions6.6.85.1-2, 5.15.180.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21963
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50146
Medium

net/mlx5e: Don't call cleanup on profile rollback failure

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.82.1-1 on Azure Linux 3.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0
Fixed versions6.6.82.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50146
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-26953
Medium

net: esp: fix bad handling of pages from page_pool

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 hyperv-daemons 5.15.158.2-1 on CBL Mariner 2.0, azl3 hyperv-daemons 6.6.35.1-1 on Azure Linux 3.0, cbl2 hyperv-daemons 5.15.164.1-1 on CBL Mariner 2.0, azl3 hyperv-daemons 6.6.22.1-2 on Azure Linux 3.0
Fixed versions5.15.158.2-1, 6.6.35.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-26953
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-45776
MediumCVSS 6.7

Grub2: grub-core/gettext: integer overflow leads to heap oob write and read.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 grub2 2.06-14 on CBL Mariner 2.0, azl3 grub2 2.06-24 on Azure Linux 3.0, cbl2 grub2 2.06-15 on CBL Mariner 2.0, cbl2 grub2 2.06-15 on CBL-Mariner 2.0
Fixed versions2.06-15, 2.06-25
Vendor guidance

CBL-Mariner Releases

CVE-2024-45776
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-22007
MediumCVSS 5.5

Bluetooth: Fix error code in chan_alloc_skb_cb()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.82.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0
Fixed versions6.6.85.1-2, 5.15.180.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-22007
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49917
MediumCVSS 5.5

drm/amd/display: Add NULL check for clk_mgr and clk_mgr->funcs in dcn30_init_hw

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-9 on Azure Linux 3.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0
Fixed versions6.6.64.2-9
Vendor guidance

CBL-Mariner Releases

CVE-2024-49917
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-31744
HighCVSS 7.5

In Jasper 4.2.2 the jpc_streamlist_remove function in src/libjasper/jpc/jpc_dec.c:2407 has an assertion failure vulnerability allowing attackers to cause a denial of service attack through a specific image file.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 jasper 4.2.1-2 on Azure Linux 3.0
Fixed versions4.2.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-31744
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-21171
MediumCVSS 6.5

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mysql 8.0.40-1 on CBL Mariner 2.0, azl3 mysql 8.0.40-1 on Azure Linux 3.0, azl3 mysql 8.0.36-1 on Azure Linux 3.0, cbl2 mysql 8.0.36-1 on CBL Mariner 2.0
Fixed versions8.0.40-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-21171
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56769
MediumCVSS 5.5

media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.76.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56769
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49988
MediumCVSS 8.8

ksmbd: add refcnt to ksmbd_conn struct

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.57.1-2 on Azure Linux 3.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions6.6.57.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-49988
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-58071
MediumCVSS 5.5

team: prevent adding a device which is already a team device lower

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, cbl2 kernel 5.15.176.3-3 on CBL-Mariner 2.0
Fixed versions5.15.180.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-58071
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-0938
Medium

URL parser allowed square brackets in domain names

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 python3 3.9.19-13 on CBL-Mariner 2.0, cbl2 python3 3.9.19-10 on CBL Mariner 2.0, azl3 python3 3.12.9-1 on Azure Linux 3.0, azl3 python3 3.12.3-5 on Azure Linux 3.0
Fixed versions3.9.19-10, 3.12.9-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-0938
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50179
Medium

ceph: remove the incorrect Fw reference check when dirtying pages

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50179
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources