Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
18,453Advisories collected
7,752Published or updated in 30 days
8,293Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

18,453 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2024-36924
MediumCVSS 5.5

scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
CVE-2024-36924
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-52572
HighCVSS 7.8

cifs: Fix UAF in cifs_demultiplex_thread()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Fixed versions5.15.182.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2023-52572
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-32051
MediumCVSS 5.9

Libsoup: segmentation fault when parsing malformed data uri

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 libsoup 3.0.4-6 on CBL Mariner 2.0, cbl2 libsoup 3.0.4-5 on CBL Mariner 2.0, azl3 libsoup 3.4.4-5 on Azure Linux 3.0, azl3 libsoup 3.4.4-6 on Azure Linux 3.0
Fixed versions3.0.4-5, 3.4.4-5
Vendor guidance

CBL-Mariner Releases

CVE-2025-32051
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49994
Medium

block: fix integer overflow in BLKSECDISCARD

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.76.1-1 on Azure Linux 3.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0
Fixed versions6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-49994
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-1179
MediumCVSS 5.0

GNU Binutils ld libbfd.c bfd_putl64 memory corruption

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 binutils 2.41-7 on Azure Linux 3.0, cbl2 binutils 2.37-15 on CBL-Mariner 2.0, cbl2 gdb 11.2-6 on CBL-Mariner 2.0, azl3 gdb 13.2-4 on Azure Linux 3.0
CVE-2025-1179
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50232
Medium

iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50232
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2022-49535
HighCVSS 7.8

scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Fixed versions5.15.182.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2022-49535
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21584
MediumCVSS 4.9

Vulnerability in the MySQL Server product of Oracle MySQL

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mysql 8.0.42-1 on CBL Mariner 2.0, azl3 mysql 8.0.42-1 on Azure Linux 3.0, cbl2 mysql 8.0.41-1 on CBL Mariner 2.0, azl3 mysql 8.0.41-1 on Azure Linux 3.0
Fixed versions8.0.42-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21584
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56716
MediumCVSS 5.5

netdevsim: prevent bad user input in nsim_dev_health_break_write()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.76.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0
Fixed versions5.15.176.3-1, 6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56716
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50265
Medium

ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50265
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-7409
HighCVSS 7.5

Qemu: denial of service via improper synchronization in qemu nbd server during socket closure

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 qemu 6.2.0-24 on CBL Mariner 2.0, azl3 qemu 8.2.0-17 on Azure Linux 3.0, cbl2 qemu 6.2.0-25 on CBL Mariner 2.0, cbl2 qemu 6.2.0-25 on CBL-Mariner 2.0
Fixed versions8.2.0-18, 6.2.0-26
Vendor guidance

CBL-Mariner Releases

CVE-2024-7409
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53131
Medium

nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL-Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-53131
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-52757
MediumCVSS 5.5

smb: client: fix potential deadlock when releasing mids

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Fixed versions5.15.182.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2023-52757
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50245
Medium

fs/ntfs3: Fix possible deadlock in mi_read

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50245
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50038
MediumCVSS 5.5

netfilter: xtables: avoid NFPROTO_UNSPEC where needed

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.57.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50038
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-23090
High

Rejected reason: This CVE record has been withdrawn due to a duplicate entry CVE-2025-23083.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 nodejs 20.14.0-4 on Azure Linux 3.0, azl3 nodejs 20.14.0-8 on Azure Linux 3.0
Fixed versions20.14.0-4
Vendor guidance

CBL-Mariner Releases

CVE-2025-23083CVE-2025-23090
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-26785
MediumCVSS 5.5

iommufd: Fix protection fault in iommufd_test_syz_conv_iova

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.85.1-1 on Azure Linux 3.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0
Fixed versions6.6.85.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-26785
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-30688
MediumCVSS 6.5

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mysql 8.0.42-1 on CBL Mariner 2.0, azl3 mysql 8.0.42-1 on Azure Linux 3.0, azl3 mysql 8.0.41-1 on Azure Linux 3.0, cbl2 mysql 8.0.41-1 on CBL Mariner 2.0
Fixed versions8.0.42-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-30688
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56665
MediumCVSS 5.5

bpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.76.1-1 on Azure Linux 3.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0
Fixed versions6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56665
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-23016
CriticalCVSS 9.3

FastCGI fcgi2 (aka fcgi) 2.x through 2.4.4 has an integer overflow (and resultant heap-based buffer overflow) via crafted nameLen or valueLen values in data to the IPC socket. This occurs in ReadParams in fcgiapp.c.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 fcgi 2.4.0-7 on CBL Mariner 2.0, azl3 fcgi 2.4.0-7 on Azure Linux 3.0, cbl2 fcgi 2.4.0-7 on CBL-Mariner 2.0, cbl2 fcgi 2.4.5-1 on CBL Mariner 2.0
Fixed versions2.4.5-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-23016
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-4467
HighCVSS 7.8

Qemu-kvm: 'qemu-img info' leads to host file read/write

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 qemu 6.2.0-24 on CBL Mariner 2.0, azl3 qemu 8.2.0-14 on Azure Linux 3.0, azl3 qemu 8.2.0-16 on Azure Linux 3.0, cbl2 qemu 6.2.0-24 on CBL-Mariner 2.0
Fixed versions6.2.0-24, 8.2.0-14
Vendor guidance

CBL-Mariner Releases

CVE-2024-4467
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53126
HighCVSS 7.8

vdpa: solidrun: Fix UB bug with devres

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-53126
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50272
Medium

filemap: Fix bounds checking in filemap_read()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL-Mariner 2.0
Fixed versions6.6.64.2-1, 5.15.182.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50272
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-1176
MediumCVSS 5.0

GNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec heap-based overflow

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 gdb 11.2-6 on CBL Mariner 2.0, azl3 gdb 13.2-7 on Azure Linux 3.0, cbl2 gdb 11.2-6 on CBL-Mariner 2.0, cbl2 binutils 2.37-14 on CBL-Mariner 2.0
Fixed versions11.2-4, 13.2-9, 2.37-12, 2.41-3
Vendor guidance

CBL-Mariner Releases

CVE-2025-1176
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources