Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
18,453Advisories collected
7,720Published or updated in 30 days
8,293Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

18,453 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2025-21658
MediumCVSS 5.5

btrfs: avoid NULL pointer dereference if no valid extent tree

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-9 on Azure Linux 3.0, azl3 kernel 6.6.76.1-1 on Azure Linux 3.0
Fixed versions6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21658
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-26789
HighCVSS 7.1

crypto: arm64/neonbs - fix out-of-bounds access on short input

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.85.1-1 on Azure Linux 3.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0
Fixed versions6.6.85.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-26789
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49901
MediumCVSS 5.5

drm/msm/adreno: Assign msm_gpu->pdev earlier to avoid nullptrs

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.57.1-2 on Azure Linux 3.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions6.6.57.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-49901
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50246
HighCVSS 7.8

fs/ntfs3: Add rough attr alloc_size check

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50246
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-22869
HighCVSS 7.5

Potential denial of service in golang.org/x/crypto

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kubernetes 1.30.10-7 on Azure Linux 3.0, azl3 cf-cli 8.7.11-3 on Azure Linux 3.0, azl3 gh 2.62.0-8 on Azure Linux 3.0, azl3 docker-buildx 0.14.0-5 on Azure Linux 3.0
Fixed versions1.30.10-3, 8.7.11-2, 2.62.0-7, 0.14.0-4
Vendor guidance

CBL-Mariner Releases

CVE-2025-22869
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-2953
MediumCVSS 3.3

PyTorch torch.mkldnn_max_pool2d denial of service

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 pytorch 2.0.0-9 on CBL-Mariner 2.0, azl3 pytorch 2.2.2-7 on Azure Linux 3.0, cbl2 pytorch 2.0.0-9 on CBL Mariner 2.0
Fixed versions2.0.0-9, 2.2.2-7
Vendor guidance

CBL-Mariner Releases

CVE-2025-2953
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-30696
MediumCVSS 4.9

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 5.7.32 and prior and 8.0.22 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Client. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Client. CVSS 3.1 Base Score 5.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H).

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mysql 8.0.42-1 on CBL Mariner 2.0, azl3 mysql 8.0.42-1 on Azure Linux 3.0, cbl2 mysql 8.0.41-1 on CBL Mariner 2.0, azl3 mysql 8.0.41-1 on Azure Linux 3.0
Fixed versions8.0.42-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-30696
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56718
Medium

net/smc: protect link down work from execute after lgr freed

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.76.1-1 on Azure Linux 3.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0
Fixed versions6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56718
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-57940
Medium

exfat: fix the infinite loop in exfat_readdir()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.179.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.76.1-1 on Azure Linux 3.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0
Fixed versions5.15.179.1-1, 6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-57940
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49929
Medium

wifi: iwlwifi: mvm: avoid NULL pointer dereference

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.57.1-2 on Azure Linux 3.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions6.6.57.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-49929
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50268
HighCVSS 7.1

usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50268
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53113
MediumCVSS 5.5

mm: fix NULL pointer dereference in alloc_pages_bulk_noprof

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-53113
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56751
Medium

ipv6: release nexthop on device removal

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Fixed versions6.6.64.2-1, 5.15.182.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56751
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-30681
LowCVSS 2.7

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.1 Base Score 2.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L).

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mysql 8.0.42-1 on CBL Mariner 2.0, azl3 mysql 8.0.42-1 on Azure Linux 3.0, azl3 mysql 8.0.41-1 on Azure Linux 3.0, cbl2 mysql 8.0.41-1 on CBL Mariner 2.0
Fixed versions8.0.42-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-30681
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50262
HighCVSS 7.8

bpf: Fix out-of-bounds write in trie_get_next_key()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50262
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53227
HighCVSS 7.8

scsi: bfa: Fix use-after-free in bfad_im_module_exit()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions5.15.176.3-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-53227
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-3576
MediumCVSS 5.9

Krb5: kerberos rc4-hmac-md5 checksum vulnerability enabling message spoofing via md5 collisions

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 krb5 1.19.4-3 on CBL Mariner 2.0, cbl2 krb5 1.19.4-4 on CBL Mariner 2.0, cbl2 krb5 1.19.4-4 on CBL-Mariner 2.0, azl3 krb5 1.21.3-2 on Azure Linux 3.0
Fixed versions1.19.4-4
Vendor guidance

CBL-Mariner Releases

CVE-2025-3576
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-57938
Medium

net/sctp: Prevent autoclose integer overflow in sctp_association_init()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.76.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.173.1-2 on CBL-Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-57938
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50264
HighCVSS 7.8

vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50264
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-57255
HighCVSS 7.1

An integer overflow in sqfs_resolve_symlink in Das U-Boot before 2025.01-rc1 occurs via a crafted squashfs filesystem with an inode size of 0xffffffff, resulting in a malloc of zero and resultant memory overwrite.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 qemu 6.2.0-24 on CBL Mariner 2.0, azl3 qemu 8.2.0-16 on Azure Linux 3.0, cbl2 qemu 6.2.0-24 on CBL-Mariner 2.0
CVE-2024-57255
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-32434
CriticalCVSS 9.8

PyTorch: `torch.load` with `weights_only=True` leads to remote code execution

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 pytorch 2.0.0-9 on CBL Mariner 2.0, cbl2 pytorch 2.0.0-9 on CBL-Mariner 2.0, cbl2 pytorch 2.0.0-8 on CBL Mariner 2.0, azl3 pytorch 2.2.2-6 on Azure Linux 3.0
Fixed versions2.0.0-8, 2.2.2-6
Vendor guidance

CBL-Mariner Releases

CVE-2025-32434
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-30693
MediumCVSS 5.5

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mysql 8.0.42-1 on CBL Mariner 2.0, azl3 mysql 8.0.42-1 on Azure Linux 3.0, azl3 mysql 8.0.41-1 on Azure Linux 3.0, cbl2 mysql 8.0.41-1 on CBL Mariner 2.0
Fixed versions8.0.42-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-30693
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56786
MediumCVSS 6.7

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.76.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Fixed versions6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56786
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-11235
CriticalCVSS 8.1

Reference counting in php_request_shutdown causes Use-After-Free

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 php 8.1.32-1 on CBL Mariner 2.0, cbl2 php 8.1.32-1 on CBL-Mariner 2.0
CVE-2024-11235
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources