Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
18,453Advisories collected
7,756Published or updated in 30 days
8,293Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

18,453 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2025-4138
HighCVSS 8.1

Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 python3 3.9.19-14 on CBL Mariner 2.0, cbl2 python3 3.9.19-13 on CBL Mariner 2.0, azl3 python3 3.12.9-1 on Azure Linux 3.0, cbl2 python3 3.9.19-13 on CBL-Mariner 2.0
Fixed versions3.9.19-14, 3.12.9-2
Vendor guidance

CBL-Mariner Releases

CVE-2025-4138
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-37925
MediumCVSS 5.5

jfs: reject on-disk inodes of an unsupported type

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
CVE-2025-37925
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49958
Medium

ocfs2: reserve space for inline xattr before attaching reflink tree

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-2 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.57.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-49958
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-1244
HighCVSS 8.8

Emacs: shell injection vulnerability in gnu emacs via custom "man" uri scheme

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 emacs 29.4-3 on CBL Mariner 2.0, cbl2 emacs 29.4-3 on CBL-Mariner 2.0, cbl2 emacs 29.4-2 on CBL Mariner 2.0, azl3 emacs 29.4-2 on Azure Linux 3.0
Fixed versions29.4-2
Vendor guidance

CBL-Mariner Releases

CVE-2025-1244
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53119
MediumCVSS 5.5

virtio/vsock: Fix accept_queue memory leak

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-53119
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-27407
HighCVSS 8.4

fs/ntfs3: Fixed overflow check in mi_enum_attr()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
CVE-2024-27407
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-26597
HighCVSS 7.8

Xorg: xwayland: buffer overflow in xkbchangetypesofkey()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 xorg-x11-server-Xwayland 24.1.1-3 on Azure Linux 3.0, cbl2 xorg-x11-server 1.20.10-15 on CBL Mariner 2.0, cbl2 xorg-x11-server 1.20.10-15 on CBL-Mariner 2.0, azl3 xorg-x11-server-Xwayland 24.1.6-1 on Azure Linux 3.0
Fixed versions24.1.6-1, 1.20.10-15
Vendor guidance

CBL-Mariner Releases

CVE-2025-26597
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50285
MediumCVSS 7.5

ksmbd: check outstanding simultaneous SMB operations

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50285
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-47711
MediumCVSS 4.3

Nbdkit: nbdkit-server: off-by-one error when processing block status may lead to a denial of service

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscm2 nbdkit 1.35.3-4 on CBL Mariner 2.0, azl3 nbdkit 1.35.3-7 on Azure Linux 3.0, cbl2 nbdkit 1.35.3-4 on CBL Mariner 2.0, cbl2 nbdkit 1.35.3-4 on CBL-Mariner 2.0
Fixed versions1.35.3-4, 1.35.3-7
Vendor guidance

CBL-Mariner Releases

CVE-2025-47711
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49889
High

ext4: avoid use-after-free in ext4_ext_show_leaf()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-2 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.57.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-49889
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-38152
MediumCVSS 5.5

remoteproc: core: Clear table_sz when rproc_shutdown

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, cbl2 kernel 5.15.176.3-3 on CBL-Mariner 2.0, azl3 kernel 6.6.85.1-4 on Azure Linux 3.0
Fixed versions5.15.180.1-1, 6.6.92.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-38152
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50008
MediumCVSS 5.5

wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-2 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.57.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-50008
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-4373
MediumCVSS 6.5

Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 glib 2.71.0-5 on CBL Mariner 2.0, cbl2 glib 2.71.0-7 on CBL Mariner 2.0, cbl2 glib 2.71.0-6 on CBL Mariner 2.0, cbl2 glib 2.71.0-7 on CBL-Mariner 2.0
Fixed versions2.71.0-6, 2.71.0-7, 2.78.6-3
Vendor guidance

CBL-Mariner Releases

CVE-2025-4373
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21862
MediumCVSS 5.5

drop_monitor: fix incorrect initialization order

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.78.1-3 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.179.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.82.1-1 on Azure Linux 3.0
Fixed versions6.6.82.1-1, 5.15.179.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21862
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-26648
MediumCVSS 5.5

drm/amd/display: Fix variable deferencing before NULL check in edp_setup_replay()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
CVE-2024-26648
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-1215
LowCVSS 2.8

vim main.c memory corruption

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 vim 9.1.0791-4 on Azure Linux 3.0, cbl2 vim 9.1.0791-4 on CBL Mariner 2.0, cbl2 vim 9.1.0791-4 on CBL-Mariner 2.0
Fixed versions9.1.0791-4
Vendor guidance

CBL-Mariner Releases

CVE-2025-1215
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53136
Medium

mm: revert "mm: shmem: fix data-race in shmem_getattr()"

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL-Mariner 2.0
Fixed versions5.15.176.3-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-53136
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-52749
MediumCVSS 4.7

spi: Fix null dereference on suspend

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0
CVE-2023-52749
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50299
MediumCVSS 5.5

sctp: properly validate chunk size in sctp_sf_ootb()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50299
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-26595
HighCVSS 7.8

Xorg: xwayland: buffer overflow in xkbvmodmasktext()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 xorg-x11-server-Xwayland 24.1.1-3 on Azure Linux 3.0, cbl2 xorg-x11-server 1.20.10-15 on CBL Mariner 2.0, cbl2 xorg-x11-server 1.20.10-15 on CBL-Mariner 2.0, azl3 xorg-x11-server-Xwayland 24.1.6-1 on Azure Linux 3.0
Fixed versions24.1.6-1, 1.20.10-15
Vendor guidance

CBL-Mariner Releases

CVE-2025-26595
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-52653
MediumCVSS 5.5

SUNRPC: fix a memleak in gss_import_v2_context

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
CVE-2023-52653
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-47712
MediumCVSS 4.3

Nbd: nbdkit: integer overflow triggers an assertion resulting in denial of service

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscm2 nbdkit 1.35.3-4 on CBL Mariner 2.0, azl3 nbdkit 1.35.3-7 on Azure Linux 3.0, cbl2 nbdkit 1.35.3-4 on CBL Mariner 2.0, cbl2 nbdkit 1.35.3-4 on CBL-Mariner 2.0
Fixed versions1.35.3-4, 1.35.3-7
Vendor guidance

CBL-Mariner Releases

CVE-2025-47712
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49981
High

media: venus: fix use after free bug in venus_remove due to race condition

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-2 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.57.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-49981
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49954
MediumCVSS 5.5

static_call: Replace pointless WARN_ON() in static_call_module_notify()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-2 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.57.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-49954
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources