Search threats, CVEs… ⌘K
Vendor advisories

Microsoft Security Response Center

Browse 15,667 advisories from this official source. Search by product, CVE, severity, or advisory ID.

Current Checked 8 minutes ago Checked every 6 hours
All vendor sources Official source

15,667 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2026-103658
MediumCVSS 5.9

GNU Aspell 0.60.8.2 (first vulnerable version is not known) contains a heap-based buffer overflow write (CWE-122) in its read-only dictionary loader. String::reserve() in common/string.hpp computes its capacity check with a signed int ((int)s + 1), so a requested size of 0x7FFFFFFF wraps negative and the backing buffer is never grown. ReadOnlyDict::load() in modules/speller/default/readonly_ws.cpp passes the unvalidated 32-bit size fields from a .rws dictionary header into this path, so a crafted .rws file with a valid endian marker (12345678) and an oversized length field (e.g. lang_name_size = 0x7FFFFFFF) causes attacker-controlled data to be written out of bounds past an undersized heap allocation. An attacker who induces a victim to load a malicious dictionary - for example via aspell dump master - can corrupt heap memory, resulting in denial of service and potentially code execution. Fixed in b830b6e and will be fixed in release 0.60.8.3.

Mariner

Affected productsazl3 aspell 0.60.8.1-1 on Azure Linux 3.0
Fixed versions0.60.8.1-2
Vendor guidance

Release Notes

CVE-2026-103658
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2022-48990
HighCVSS 7.8

drm/amdgpu: fix use-after-free during gpu recovery

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
Vendor guidance

Release Notes

CVE-2022-48990
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2019-20633
MediumCVSS 5.5

GNU patch through 2.7.6 contains a free(p_line[p_end]) Double Free vulnerability in the function another_hunk in pch.c that can cause a denial of service via a crafted patch file. NOTE: this issue exists because of an incomplete fix for CVE-2018-6952.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 patch 2.7.6-9 on Azure Linux 3.0, azl3 patch 2.7.6-10 on Azure Linux 3.0, cm1 patch 2.7.6-7 on CBL Mariner 1.0, cbl2 patch 2.7.6-8 on CBL Mariner 2.0
Fixed versions2.7.6-7, 2.7.6-8
Vendor guidance

Release Notes CBL-Mariner Releases

CVE-2018-6952CVE-2019-20633
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources