Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
16,941Advisories collected
6,373Published or updated in 30 days
7,004Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

16,941 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2024-42934
MediumCVSS 5.0

OpenIPMI before 2.0.36 has an out-of-bounds array access (for authentication type) in the ipmi_sim simulator resulting in denial of service or (with very low probability) authentication bypass or code execution.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 OpenIPMI 2.0.36-1 on CBL Mariner 2.0, azl3 OpenIPMI 2.0.36-1 on Azure Linux 3.0, azl3 OpenIPMI 2.0.33-1 on Azure Linux 3.0, cbl2 OpenIPMI 2.0.32-1 on CBL Mariner 2.0
Fixed versions2.0.36-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-42934
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50061
HighCVSS 7.0

i3c: master: cdns: Fix use after free vulnerability in cdns_i3c_master Driver Due to Race Condition

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.57.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0
Fixed versions6.6.57.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50061
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-4287
LowCVSS 3.3

PyTorch nccl.py torch.cuda.nccl.reduce denial of service

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 pytorch 2.2.2-7 on Azure Linux 3.0, cbl2 pytorch 2.0.0-9 on CBL-Mariner 2.0, cbl2 pytorch 2.0.0-9 on CBL Mariner 2.0
CVE-2025-4287
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50111
MediumCVSS 5.5

LoongArch: Enable IRQ if do_ale() triggered in irq-enabled context

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50111
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-58017
MediumCVSS 5.5

printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.179.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.78.1-3 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0
Fixed versions5.15.179.1-1, 6.6.78.1-3
Vendor guidance

CBL-Mariner Releases

CVE-2024-58017
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53179
HighCVSS 7.8

smb: client: fix use-after-free of signing key

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.76.1-1 on Azure Linux 3.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0
Fixed versions6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-53179
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-27002
MediumCVSS 5.5

clk: mediatek: Do a runtime PM get on controllers during probe

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 hyperv-daemons 6.6.35.1-1 on Azure Linux 3.0, azl3 hyperv-daemons 6.6.22.1-2 on Azure Linux 3.0
Fixed versions6.6.35.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-27002
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-58069
HighCVSS 7.8

rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, cbl2 kernel 5.15.176.3-3 on CBL-Mariner 2.0
Fixed versions5.15.180.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-58069
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-52921
HighCVSS 7.8

drm/amdgpu: fix possible UAF in amdgpu_cs_pass1()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0
CVE-2023-52921
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56171
HighCVSS 7.8

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 libxml2 2.11.5-4 on Azure Linux 3.0, cbl2 libxml2 2.10.4-6 on CBL Mariner 2.0, azl3 libxml2 2.11.5-5 on Azure Linux 3.0, cbl2 libxml2 2.10.4-6 on CBL-Mariner 2.0
Fixed versions2.11.5-4, 2.10.4-6
Vendor guidance

CBL-Mariner Releases

CVE-2024-56171
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21943
MediumCVSS 4.7

gpio: aggregator: protect driver attr handlers against module unload

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, azl3 kernel 6.6.82.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.176.3-3 on CBL-Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0
Fixed versions5.15.180.1-1, 6.6.85.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2025-21943
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-47718
HighCVSS 7.8

wifi: rtw88: always wait for both firmware loading attempts

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-47718
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-24795
MediumCVSS 6.3

Apache HTTP Server: HTTP Response Splitting in multiple modules

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 httpd 2.4.59-1 on CBL Mariner 2.0, azl3 httpd 2.4.61-1 on Azure Linux 3.0, cbl2 httpd 2.4.58-1 on CBL-Mariner 2.0, azl3 httpd 2.4.58-4 on Azure Linux 3.0
Fixed versions2.4.59-1, 2.4.61-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-24795
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21964
MediumCVSS 5.5

cifs: Fix integer overflow while processing acregmax mount option

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.82.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, cbl2 kernel 5.15.176.3-3 on CBL-Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0
Fixed versions6.6.85.1-2, 5.15.180.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21964
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56747
MediumCVSS 3.3

scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56747
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49987
MediumCVSS 5.5

bpftool: Fix undefined behavior in qsort(NULL 0 ...)

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.57.1-2 on Azure Linux 3.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions6.6.57.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-49987
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-48957
HighCVSS 7.8

execute_filter_audio in archive_read_support_format_rar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can move beyond dst.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 libarchive 3.6.1-4 on CBL Mariner 2.0, azl3 libarchive 3.7.7-1 on Azure Linux 3.0, cbl2 libarchive 3.6.1-6 on CBL-Mariner 2.0, azl3 libarchive 3.7.1-2 on Azure Linux 3.0
Fixed versions3.6.1-4, 3.7.7-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-48957
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-38571
MediumCVSS 5.5

thermal/drivers/tsens: Fix null pointer dereference

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.162.2-1 on CBL Mariner 2.0, azl3 kernel 6.6.35.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.160.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.22.1-2 on Azure Linux 3.0
Fixed versions5.15.162.2-1, -, 6.6.35.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-38571
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50127
HighCVSS 7.8

net: sched: fix use-after-free in taprio_change()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50127
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-35937
HighCVSS 7.1

wifi: cfg80211: check A-MSDU format more carefully

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
CVE-2024-35937
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50182
Medium

secretmem: disable memfd_secret() if arch cannot set direct map

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50182
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-47143
Medium

dma-debug: fix a possible deadlock on radix_lock

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.76.1-1 on Azure Linux 3.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL-Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-47143
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53206
MediumCVSS 7.8

tcp: Fix use-after-free of nreq in reqsk_timer_handler().

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, cbl2 kernel 5.15.173.1-2 on CBL-Mariner 2.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0
Fixed versions5.15.176.3-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-53206
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50256
MediumCVSS 7.5

netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50256
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources