Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
16,942Advisories collected
6,374Published or updated in 30 days
7,004Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

16,942 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2024-40997
MediumCVSS 5.5

cpufreq: amd-pstate: fix memory leak on CPU EPP exit

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.47.1-1 on Azure Linux 3.0, azl3 kernel 6.6.35.1-5 on Azure Linux 3.0
Fixed versions6.6.47.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-40997
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-55549
HighCVSS 7.8

xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 libxslt 1.1.43-1 on Azure Linux 3.0, cbl2 libxslt 1.1.34-8 on CBL Mariner 2.0, cbl2 libxslt 1.1.34-8 on CBL-Mariner 2.0, azl3 libxslt 1.1.39-1 on Azure Linux 3.0
Fixed versions1.1.43-1, 1.1.34-8
Vendor guidance

CBL-Mariner Releases

CVE-2024-55549
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-58010
MediumCVSS 5.5

binfmt_flat: Fix integer overflow bug on 32 bit systems

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.179.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.78.1-3 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0
Fixed versions5.15.179.1-1, 6.6.78.1-3
Vendor guidance

CBL-Mariner Releases

CVE-2024-58010
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-52981
MediumCVSS 4.9

An issue was discovered in Elasticsearch, where a large recursion using the Well-KnownText formatted string with nested GeometryCollection objects could cause a stackoverflow.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 rubygem-elasticsearch 8.3.0-1 on CBL Mariner 2.0, azl3 rubygem-elasticsearch 8.9.0-1 on Azure Linux 3.0, cbl2 rubygem-elasticsearch 8.3.0-1 on CBL-Mariner 2.0
CVE-2024-52981
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53217
Medium

NFSD: Prevent NULL dereference in nfsd4_process_cb_update()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, cbl2 kernel 5.15.173.1-2 on CBL-Mariner 2.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0
Fixed versions5.15.176.3-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-53217
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-31583
MediumCVSS 7.8

Pytorch before version v2.2.0 was discovered to contain a use-after-free vulnerability in torch/csrc/jit/mobile/interpreter.cpp.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 pytorch 2.0.0-4 on CBL Mariner 2.0, cbl2 pytorch 2.0.0-8 on CBL Mariner 2.0, cbl2 pytorch 2.0.0-8 on CBL-Mariner 2.0
Fixed versions2.0.0-4
Vendor guidance

CBL-Mariner Releases

CVE-2024-31583
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49923
MediumCVSS 5.5

drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.79.1-1 on Azure Linux 3.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0
Fixed versions6.6.79.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-49923
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21700
MediumCVSS 7.8

net: sched: Disallow replacing of child qdisc from one parent to another

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-3 on CBL-Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0
Fixed versions5.15.180.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21700
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-26965
Medium

clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 hyperv-daemons 5.15.158.1-1 on CBL Mariner 2.0, azl3 hyperv-daemons 6.6.35.1-1 on Azure Linux 3.0, cbl2 hyperv-daemons 5.15.153.1-1 on CBL Mariner 2.0, azl3 hyperv-daemons 6.6.22.1-2 on Azure Linux 3.0
Fixed versions5.15.158.1-1, 6.6.35.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-26965
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56763
MediumCVSS 5.5

tracing: Prevent bad count for tracing_cpumask_write

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.76.1-1 on Azure Linux 3.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56763
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-57256
HighCVSS 7.1

An integer overflow in ext4fs_read_symlink in Das U-Boot before 2025.01-rc1 occurs for zalloc (adding one to an le32 variable) via a crafted ext4 filesystem with an inode size of 0xffffffff, resulting in a malloc of zero and resultant memory overwrite.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 qemu 6.2.0-24 on CBL Mariner 2.0, cbl2 qemu 6.2.0-24 on CBL-Mariner 2.0, azl3 qemu 8.2.0-16 on Azure Linux 3.0
CVE-2024-57256
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-45337
CriticalCVSS 9.1

Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 moby-engine 24.0.9-12 on CBL Mariner 2.0, cbl2 cert-manager 1.11.2-16 on CBL Mariner 2.0, cbl2 moby-compose 2.17.3-9 on CBL Mariner 2.0, cbl2 telegraf 1.29.4-10 on CBL Mariner 2.0
Fixed versions24.0.9-12, 1.11.2-16, 2.17.3-9, 1.29.4-10
Vendor guidance

CBL-Mariner Releases

CVE-2024-45337
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-1118
MediumCVSS 4.4

Grub2: commands/dump: the dump command is not in lockdown when secure boot is enabled

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 grub2 2.06-14 on CBL Mariner 2.0, cbl2 grub2 2.06-15 on CBL Mariner 2.0, azl3 grub2 2.06-25 on Azure Linux 3.0, cbl2 grub2 2.06-15 on CBL-Mariner 2.0
Fixed versions2.06-15, 2.06-25
Vendor guidance

CBL-Mariner Releases

CVE-2025-1118
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-10041
MediumCVSS 4.7

Pam: libpam: libpam vulnerable to read hashed password

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 pam 1.5.3-4 on Azure Linux 3.0, cbl2 pam 1.5.1-7 on CBL-Mariner 2.0, cbl2 pam 1.5.1-7 on CBL Mariner 2.0
Fixed versions1.5.3-4, 1.5.1-7
Vendor guidance

CBL-Mariner Releases

CVE-2024-10041
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-7264
MediumCVSS 6.5

ASN.1 date parser overread

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 rust 1.68.0-1 on CBL Mariner 2.0, azl3 cmake 3.30.3-4 on Azure Linux 3.0, azl3 cmake 3.30.3-6 on Azure Linux 3.0
Fixed versions1.68.0-1, 3.30.3-4
Vendor guidance

CBL-Mariner Releases

CVE-2024-7264
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50302
MediumCVSS 5.5

HID: core: zero-initialize the report buffer

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50302
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50125
HighCVSS 7.8

Bluetooth: SCO: Fix UAF on sco_sock_timeout

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Fixed versions6.6.64.2-1, 5.15.182.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50125
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56569
MediumCVSS 5.5

ftrace: Fix regression with module command in stack_trace_filter

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.173.1-2 on CBL-Mariner 2.0
Fixed versions5.15.176.3-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56569
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-3817
CriticalCVSS 9.8

HashiCorp go-getter Vulnerable to Argument Injection When Fetching Remote Default Git Branches

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 terraform 1.3.2-14 on CBL Mariner 2.0, cbl2 terraform 1.3.2-25 on CBL Mariner 2.0, cbl2 terraform 1.3.2-25 on CBL-Mariner 2.0
Fixed versions1.3.2-14
Vendor guidance

CBL-Mariner Releases

CVE-2024-3817
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-26662
MediumCVSS 5.5

drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0
CVE-2024-26662
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-52584
LowCVSS 3.8

spmi: mediatek: Fix UAF on device remove

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
CVE-2023-52584
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-57795
HighCVSS 7.8

RDMA/rxe: Remove the direct link to net_device

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.96.2-2 on Azure Linux 3.0, azl3 kernel 6.6.117.1-1 on Azure Linux 3.0, azl3 kernel 6.6.119.3-1 on Azure Linux 3.0, azl3 kernel 6.6.119.3-3 on Azure Linux 3.0
Fixed versions6.6.121.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-57795
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources