Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
18,508Advisories collected
7,709Published or updated in 30 days
8,309Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

18,508 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2024-54661
MediumCVSS 5.0

readline.sh in socat before1.8.0.2 relies on the /tmp/$USER/stderr2 file.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 socat 1.7.4.4-2 on Azure Linux 3.0, cbl2 socat 1.7.4.3-2 on CBL Mariner 2.0, cbl2 socat 1.7.4.3-2 on CBL-Mariner 2.0
Fixed versions1.7.4.4-2, 1.7.4.3-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-54661
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42063
MediumCVSS 5.5

bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
CVE-2024-42063
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-32611
CriticalCVSS 9.8

HDF5 Library through 1.14.3 may use an uninitialized value in H5A__attr_release_table in H5Aint.c.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 hdf5 1.14.4-1 on CBL Mariner 2.0, azl3 hdf5 1.14.4.3-1 on Azure Linux 3.0, cbl2 hdf5 1.12.1-13 on CBL Mariner 2.0, cbl2 hdf5 1.12.1-13 on CBL-Mariner 2.0
Fixed versions1.14.4-1, 1.14.4.3-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-32611
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21928
HighCVSS 7.8

HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, cbl2 kernel 5.15.176.3-3 on CBL-Mariner 2.0, azl3 kernel 6.6.82.1-1 on Azure Linux 3.0
Fixed versions5.15.180.1-1, 6.6.85.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2025-21928
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-4947
MediumCVSS 6.5

QUIC certificate check skip with wolfSSL

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 cmake 3.30.3-7 on Azure Linux 3.0
Fixed versions3.30.3-7
Vendor guidance

CBL-Mariner Releases

CVE-2025-4947
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21669
MediumCVSS 5.5

vsock/virtio: discard packets if the transport changes

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-9 on Azure Linux 3.0, cbl2 kernel 5.15.176.3-3 on CBL-Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.76.1-1 on Azure Linux 3.0
Fixed versions6.6.76.1-1, 5.15.180.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21669
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-26812
MediumCVSS 5.5

vfio/pci: Create persistent INTx handler

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Fixed versions5.15.176.3-3
Vendor guidance

CBL-Mariner Releases

CVE-2024-26812
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50002
MediumCVSS 5.5

static_call: Handle module init failure correctly in static_call_del_module()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-2 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.57.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-50002
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-48615
HighCVSS 7.5

Null Pointer Dereference vulnerability in libarchive 3.7.6 and earlier when running program bsdtar in function header_pax_extension at rchive_read_support_format_tar.c:1844:8.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 cmake 3.21.4-17 on CBL Mariner 2.0, azl3 cmake 3.30.3-6 on Azure Linux 3.0, cbl2 cmake 3.21.4-18 on CBL Mariner 2.0, cbl2 libarchive 3.6.1-6 on CBL Mariner 2.0
Fixed versions3.21.4-17, 3.30.3-6, 3.6.1-6
Vendor guidance

CBL-Mariner Releases

CVE-2024-48615
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49902
Medium

jfs: check if leafidx greater than num leaves per dmap tree

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-49902
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53096
HighCVSS 7.8

mm: resolve faulty mmap_region() error path behaviour

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.173.1-2 on CBL-Mariner 2.0
Fixed versions6.6.64.2-1, 5.15.176.3-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-53096
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49977
MediumCVSS 5.5

net: stmmac: Fix zero-division error when disabling tc cbs

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-2 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.57.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-49977
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-58007
HighCVSS 7.1

soc: qcom: socinfo: Avoid out of bounds read of serial number

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Fixed versions6.6.78.1-3
Vendor guidance

CBL-Mariner Releases

CVE-2024-58007
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53203
HighCVSS 7.8

usb: typec: fix potential array underflow in ucsi_ccg_sync_control()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Fixed versions6.6.90.1-1, 5.15.184.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-53203
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49905
MediumCVSS 5.5

drm/amd/display: Add null check for 'afb' in amdgpu_dm_plane_handle_cursor_update (v2)

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.56.1-5 on Azure Linux 3.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-49905
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53088
Medium

i40e: fix race condition by adding filter's intermediate sync state

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-53088
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-32907
HighCVSS 7.5

Libsoup: denial of service in server when client requests a large amount of overlapping ranges with range header

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscm2 libsoup 3.0.4-7 on CBL Mariner 2.0, azl3 libsoup 3.4.4-7 on Azure Linux 3.0, cbl2 libsoup 3.0.4-7 on CBL Mariner 2.0, cbl2 libsoup 3.0.4-7 on CBL-Mariner 2.0
Fixed versions3.0.4-7, 3.4.4-7
Vendor guidance

CBL-Mariner Releases

CVE-2025-32907
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-26765
MediumCVSS 5.5

LoongArch: Disable IRQ before init_fn() for nonboot CPUs

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
CVE-2024-26765
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-32612
HighCVSS 7.4

HDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5HL__fl_deserialize in H5HLcache.c resulting in the corruption of the instruction pointer a different vulnerability than CVE-2024-32613.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 hdf5 1.14.4-1 on CBL Mariner 2.0, azl3 hdf5 1.14.4.3-1 on Azure Linux 3.0, azl3 hdf5 1.14.3-1 on Azure Linux 3.0, cbl2 hdf5 1.12.1-13 on CBL-Mariner 2.0
Fixed versions1.14.4-1, 1.14.4.3-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-32613CVE-2024-32612
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21917
MediumCVSS 5.5

usb: renesas_usbhs: Flush the notify_hotplug_work

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.82.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.85.1-2 on Azure Linux 3.0, cbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0
Fixed versions6.6.85.1-2, 5.15.180.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21917
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-43912
MediumCVSS 5.5

wifi: nl80211: disallow setting special AP channel widths

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
CVE-2024-43912
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50195
Medium

posix-clock: Fix missing timespec64 check in pc_clock_settime()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50195
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-43835
MediumCVSS 5.5

virtio_net: Fix napi_skb_cache_put warning

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.64.2-9
Vendor guidance

CBL-Mariner Releases

CVE-2024-43835
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42153
MediumCVSS 5.5

i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.164.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.43.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.162.2-1 on CBL Mariner 2.0, azl3 kernel 6.6.35.1-5 on Azure Linux 3.0
Fixed versions5.15.164.1-1, 6.6.43.1-7
Vendor guidance

CBL-Mariner Releases

CVE-2024-42153
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources