Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
18,243Advisories collected
7,675Published or updated in 30 days
8,209Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

18,243 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2024-56703
MediumCVSS 7.5

ipv6: Fix soft lockups in fib6_select_path under high next hop churn

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.78.1-3 on Azure Linux 3.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0
Fixed versions6.6.78.1-3
Vendor guidance

CBL-Mariner Releases

CVE-2024-56703
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-4748
Medium

Absolute path traversal in zip:unzip/1,2

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 erlang 25.3.2.21-2 on CBL Mariner 2.0, azl3 erlang 26.2.5.13-1 on Azure Linux 3.0, cbl2 erlang 25.3.2.21-2 on CBL-Mariner 2.0, azl3 erlang 26.2.5.15-1 on Azure Linux 3.0
Fixed versions25.3.2.21-2, 26.2.5.13-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-4748
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21521
HighCVSS 7.5

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 mysql 8.0.41-1 on Azure Linux 3.0
Fixed versions8.0.40-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21521
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-54411
MediumCVSS 5.9

Linux-PAM through 1.7.2 contains an observable timing discrepancy (CWE-208) in the pam_userdb module's plaintext-password comparison path in modules/pam_userdb/pam_userdb.c that allows a local or network-adjacent attacker able to repeatedly drive authentication through a calling service to recover the plaintext password of a target account by measuring response-timing differences. The comparison uses strncmp() (or strncasecmp() when PAM_ICASE_ARG is set) preceded by a length-equality check, so the time to reject a candidate depends on the index of the first differing byte and on whether the candidate's length matches the stored password, leaking the password length and individual prefix bytes. The vulnerable path is reached when the administrator configures pam_userdb with crypt=none, with an unrecognized crypt method, or without a crypt= argument, causing the module to store and compare credentials in plaintext.

Mariner

Affected productsazl3 pam 1.5.3-5 on Azure Linux 3.0
CVE-2026-54411
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-57902
MediumCVSS 5.5

af_packet: fix vlan_get_tci() vs MSG_PEEK

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, azl3 kernel 6.6.78.1-3 on Azure Linux 3.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0
Fixed versions5.15.176.3-3, 6.6.78.1-3
Vendor guidance

CBL-Mariner Releases

CVE-2024-57902
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-57939
MediumCVSS 5.5

riscv: Fix sleeping in invalid context in die()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.78.1-3 on Azure Linux 3.0, cbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, cbl2 kernel 5.15.176.3-3 on CBL-Mariner 2.0
Fixed versions5.15.180.1-1, 6.6.78.1-3
Vendor guidance

CBL-Mariner Releases

CVE-2024-57939
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-57946
Medium

virtio-blk: don't keep queue frozen during system suspend

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, azl3 kernel 6.6.78.1-3 on Azure Linux 3.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0
Fixed versions5.15.176.3-3, 6.6.78.1-3
Vendor guidance

CBL-Mariner Releases

CVE-2024-57946
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-38039
MediumCVSS 5.5

net/mlx5e: Avoid WARN_ON when configuring MQPRIO with HTB offload enabled

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0
CVE-2025-38039
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-36921
HighCVSS 7.8

wifi: iwlwifi: mvm: guard against invalid STA ID on removal

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
CVE-2024-36921
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21635
MediumCVSS 5.5

rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.96.2-2 on Azure Linux 3.0, azl3 kernel 6.6.112.1-2 on Azure Linux 3.0, azl3 kernel 6.6.117.1-1 on Azure Linux 3.0, azl3 kernel 6.6.119.3-3 on Azure Linux 3.0
CVE-2025-21635
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-1125
MediumCVSS 6.4

Grub2: fs/hfs: integer overflow may lead to heap based out-of-bounds write

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 grub2 2.06-15 on CBL Mariner 2.0, cbl2 grub2 2.06-15 on CBL-Mariner 2.0, azl3 grub2 2.06-24 on Azure Linux 3.0, cbl2 grub2 2.06-14 on CBL Mariner 2.0
Fixed versions2.06-15, 2.06-25
Vendor guidance

CBL-Mariner Releases

CVE-2025-1125
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-38011
MediumCVSS 5.5

drm/amdgpu: csa unmap use uninterruptible lock

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.121.1-1 on Azure Linux 3.0
Fixed versions6.6.126.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-38011
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources