Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
18,508Advisories collected
7,710Published or updated in 30 days
8,309Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

18,508 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2023-52969
MediumCVSS 4.9

MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, and 11.0 through 11.0.* can sometimes crash with an empty backtrace log. This may be related to make_aggr_tables_info and optimize_stage2.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 mariadb 10.11.11-1 on Azure Linux 3.0, cbl2 mariadb 10.6.21-1 on CBL Mariner 2.0, cbl2 mariadb 10.6.24-1 on CBL Mariner 2.0, cbl2 mariadb 10.6.24-1 on CBL-Mariner 2.0
Fixed versions10.11.15-1, 10.6.24-1
Vendor guidance

CBL-Mariner Releases

CVE-2023-52969
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50228
HighCVSS 7.0

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.57.1-4 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
CVE-2024-50228
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-57254
HighCVSS 7.1

An integer overflow in sqfs_inode_size in Das U-Boot before 2025.01-rc1 occurs in the symlink size calculation via a crafted squashfs filesystem.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 qemu 8.2.0-16 on Azure Linux 3.0, cbl2 qemu 6.2.0-24 on CBL Mariner 2.0, cbl2 qemu 6.2.0-24 on CBL-Mariner 2.0
CVE-2024-57254
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-30687
MediumCVSS 6.5

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mysql 8.0.42-1 on CBL Mariner 2.0, azl3 mysql 8.0.42-1 on Azure Linux 3.0, azl3 mysql 8.0.41-1 on Azure Linux 3.0, cbl2 mysql 8.0.41-1 on CBL Mariner 2.0
Fixed versions8.0.42-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-30687
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50007
HighCVSS 7.8

ALSA: asihpi: Fix potential OOB array access

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-2 on Azure Linux 3.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.57.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-50007
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-58083
HighCVSS 7.8

KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, cbl2 kernel 5.15.176.3-3 on CBL-Mariner 2.0
Fixed versions5.15.180.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-58083
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56647
MediumCVSS 5.5

net: Fix icmp host relookup triggering ip_rt_bug

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.141.1-1 on Azure Linux 3.0
Fixed versions6.6.141.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56647
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50183
MediumCVSS 4.7

scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
CVE-2024-50183
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-57925
HighCVSS 7.1

ksmbd: fix a missing return value check bug

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Fixed versions6.6.78.1-3
Vendor guidance

CBL-Mariner Releases

CVE-2024-57925
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56774
MediumCVSS 5.5

btrfs: add a sanity check for btrfs root in btrfs_search_slot()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56774
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53858
MediumCVSS 6.5

Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in the gh cli

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 gh 2.13.0-24 on CBL Mariner 2.0, azl3 gh 2.62.0-5 on Azure Linux 3.0, azl3 gh 2.62.0-8 on Azure Linux 3.0
Fixed versions2.13.0-24, 2.62.0-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-53858
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-36476
MediumCVSS 5.5

RDMA/rtrs: Ensure 'ib_sge list' is accessible

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.76.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0
Fixed versions5.15.176.3-1, 6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-36476
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21811
HighCVSS 7.8

nilfs2: protect access to buffers with no active references

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, cbl2 kernel 5.15.176.3-3 on CBL-Mariner 2.0
Fixed versions5.15.180.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21811
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50243
Medium

fs/ntfs3: Fix general protection fault in run_is_mapped_full

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50243
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-52970
MediumCVSS 4.9

MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, 11.0 through 11.0.*, and 11.1 through 11.4.* crashes in Item_direct_view_ref::derived_field_transformer_for_where.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mariadb 10.6.21-1 on CBL Mariner 2.0, azl3 mariadb 10.11.11-1 on Azure Linux 3.0, cbl2 mariadb 10.6.21-1 on CBL-Mariner 2.0
Fixed versions10.6.24-1, 10.11.15-1
Vendor guidance

CBL-Mariner Releases

CVE-2023-52970
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-36013
MediumCVSS 6.8

Bluetooth: L2CAP: Fix slab-use-after-free in l2cap_connect()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
CVE-2024-36013
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-22866
HighCVSS 8.4

Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 golang 1.23.3-3 on Azure Linux 3.0, cbl2 golang 1.18.8-7 on CBL Mariner 2.0, azl3 golang 1.22.10-2 on Azure Linux 3.0, cbl2 golang 1.22.7-3 on CBL Mariner 2.0
Fixed versions1.23.7-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-22866
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-30682
MediumCVSS 6.5

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mysql 8.0.42-1 on CBL Mariner 2.0, azl3 mysql 8.0.42-1 on Azure Linux 3.0, azl3 mysql 8.0.41-1 on Azure Linux 3.0, cbl2 mysql 8.0.41-1 on CBL Mariner 2.0
Fixed versions8.0.42-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-30682
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-22872
MediumCVSS 6.5

Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 cri-tools 1.32.0-2 on Azure Linux 3.0, azl3 docker-buildx 0.14.0-6 on Azure Linux 3.0, cbl2 cert-manager 1.11.2-23 on CBL Mariner 2.0, azl3 containerd2 2.0.0-12 on Azure Linux 3.0
Fixed versions1.32.0-2, 0.14.0-6, 1.11.2-23, 2.0.0-9
Vendor guidance

CBL-Mariner Releases

CVE-2025-22872
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21640
MediumCVSS 5.5

sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0, cbl2 kernel 5.15.179.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.78.1-3 on Azure Linux 3.0
Fixed versions6.6.78.1-3, 5.15.179.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21640
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21796
MediumCVSS 7.8

nfsd: clear acl_access/acl_default after releasing them

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, cbl2 kernel 5.15.176.3-3 on CBL-Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.82.1-1 on Azure Linux 3.0
Fixed versions5.15.180.1-1, 6.6.82.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21796
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56785
MediumCVSS 5.5

MIPS: Loongson64: DTS: Really fix PCIe port nodes for ls7a

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.76.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0
Fixed versions5.15.176.3-1, 6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56785
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50040
Medium

igb: Do not bring the device up after non-fatal error

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.57.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50040
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-57892
HighCVSS 7.8

ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Fixed versions6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-57892
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources