Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
16,943Advisories collected
6,375Published or updated in 30 days
7,004Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

16,943 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2024-47704
MediumCVSS 5.5

drm/amd/display: Check link_res->hpo_dp_link_enc before using it

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.56.1-5 on Azure Linux 3.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-47704
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56745
MediumCVSS 3.3

PCI: Fix reset_method_store() memory leak

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56745
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-52585
MediumCVSS 5.5

drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, azl3 kernel 6.6.79.1-1 on Azure Linux 3.0
Fixed versions5.15.176.3-3, 6.6.79.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2023-52585
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-34397
MediumCVSS 5.2

An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a GDBus-based client subscribes to signals from a trusted system service such as NetworkManager on a shared computer, other users of the same computer can send spoofed D-Bus signals that the GDBus-based client will wrongly interpret as having been sent by the trusted system service. This could lead to the GDBus-based client behaving incorrectly, with an application-dependent impact.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 glib 2.78.6-1 on Azure Linux 3.0, cbl2 glib 2.71.0-5 on CBL Mariner 2.0, cbl2 glib 2.71.0-6 on CBL Mariner 2.0, cbl2 glib 2.71.0-7 on CBL-Mariner 2.0
Fixed versions2.78.6-1, 2.71.0-7
Vendor guidance

CBL-Mariner Releases

CVE-2024-34397
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-37942
MediumCVSS 5.5

HID: pidff: Make sure to fetch pool before checking SIMULTANEOUS_MAX

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.96.2-2 on Azure Linux 3.0, azl3 kernel 6.6.112.1-2 on Azure Linux 3.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.96.2-1 on Azure Linux 3.0
CVE-2025-37942
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21722
HighCVSS 7.8

nilfs2: do not force clear folio if buffer is referenced

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.176.3-3 on CBL-Mariner 2.0
Fixed versions5.15.180.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21722
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50134
Medium

drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50134
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-10977
LowCVSS 3.7

PostgreSQL libpq retains an error message from man-in-the-middle

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 postgresql 14.14-1 on CBL Mariner 2.0, azl3 postgresql 16.5-1 on Azure Linux 3.0, cbl2 postgresql 14.13-1 on CBL-Mariner 2.0, cbl2 postgresql 14.13-1 on CBL Mariner 2.0
Fixed versions14.14-1, 16.5-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-10977
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-3220
Low

Default mimetype known files writeable on Windows

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 tensorflow 2.16.1-9 on Azure Linux 3.0, cbl2 python3 3.9.19-13 on CBL-Mariner 2.0, azl3 python3 3.12.9-1 on Azure Linux 3.0, cbl2 python3 3.9.19-13 on CBL Mariner 2.0
CVE-2024-3220
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-27810
MediumCVSS 5.4

Mbed TLS before 2.28.10 and 3.x before 3.6.3, in some cases of failed memory allocation or hardware errors, uses uninitialized stack memory to compose the TLS Finished message, potentially leading to authentication bypasses such as replays.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 qemu 6.2.0-24 on CBL Mariner 2.0, cbl2 qemu 6.2.0-24 on CBL-Mariner 2.0, azl3 qemu 8.2.0-16 on Azure Linux 3.0
CVE-2025-27810
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-39493
MediumCVSS 5.5

crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.162.2-1 on CBL Mariner 2.0, cbl2 kernel 5.15.160.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.160.1-1 on CBL-Mariner 2.0
Fixed versions5.15.162.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-39493
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21794
HighCVSS 7.1

HID: hid-thrustmaster: fix stack-out-of-bounds read in usb_check_int_endpoints()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.78.1-3 on Azure Linux 3.0, azl3 kernel 6.6.79.1-1 on Azure Linux 3.0
Fixed versions6.6.79.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21794
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-39463
HighCVSS 7.8

9p: add missing locking around taking dentry fid list

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Fixed versions5.15.176.3-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-39463
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50602
MediumCVSS 5.9

An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 expat 2.6.3-2 on Azure Linux 3.0, cbl2 expat 2.6.3-2 on CBL Mariner 2.0, cbl2 expat 2.6.3-2 on CBL-Mariner 2.0
Fixed versions2.6.3-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-50602
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-47679
MediumCVSS 4.7

vfs: fix race between evice_inodes() and find_inode()&iput()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-47679
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50150
HighCVSS 7.8

usb: typec: altmode should keep reference to parent

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50150
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56746
MediumCVSS 5.5

fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.173.1-2 on CBL-Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56746
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53205
Medium

phy: realtek: usb: fix NULL deref in rtk_usb2phy_probe

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.85.1-1 on Azure Linux 3.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0
Fixed versions6.6.85.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-53205
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-24912
LowCVSS 3.7

hostapd fails to process crafted RADIUS packets properly. When hostapd authenticates wi-fi devices with RADIUS authentication, an attacker in the position between the hostapd and the RADIUS server may inject crafted RADIUS packets and force RADIUS authentications to fail.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 wpa_supplicant 2.10-3 on CBL Mariner 2.0, cbl2 wpa_supplicant 2.10-3 on CBL-Mariner 2.0, azl3 wpa_supplicant 2.10-3 on Azure Linux 3.0
Fixed versions2.10-3
Vendor guidance

CBL-Mariner Releases

CVE-2025-24912
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-4418
MediumCVSS 6.2

Libvirt: stack use-after-free in virnetclientioeventloop()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 libvirt 10.0.0-5 on Azure Linux 3.0, cbl2 libvirt 7.10.0-10 on CBL Mariner 2.0, cbl2 libvirt 7.10.0-10 on CBL-Mariner 2.0
Fixed versions10.0.0-5, 7.10.0-10
Vendor guidance

CBL-Mariner Releases

CVE-2024-4418
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-46420
MediumCVSS 6.5

Libsoup: memory leak on soup_header_parse_quality_list() via soup-headers.c

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 libsoup 3.0.4-6 on CBL Mariner 2.0, azl3 libsoup 3.4.4-6 on Azure Linux 3.0, cbl2 libsoup 3.0.4-6 on CBL-Mariner 2.0, cbl2 libsoup 3.0.4-5 on CBL Mariner 2.0
Fixed versions3.0.4-5, 3.4.4-5
Vendor guidance

CBL-Mariner Releases

CVE-2025-46420
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-33976
HighCVSS 7.5

TensorFlow segfault in array_ops.upper_bound

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 tensorflow 2.11.1-2 on CBL Mariner 2.0, cbl2 tensorflow 2.11.1-2 on CBL-Mariner 2.0
Fixed versions2.11.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2023-33976
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21793
MediumCVSS 5.5

spi: sn-f-ospi: Fix division by zero

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.79.1-1 on Azure Linux 3.0, azl3 kernel 6.6.78.1-3 on Azure Linux 3.0
Fixed versions6.6.79.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21793
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources