Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
18,508Advisories collected
7,709Published or updated in 30 days
8,309Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

18,508 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2024-56549
Medium

cachefiles: Fix NULL pointer dereference in object->file

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.78.1-1 on Azure Linux 3.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0
Fixed versions6.6.78.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56549
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21790
MediumCVSS 5.5

vxlan: check vxlan_vnigroup_init() return value

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.79.1-1 on Azure Linux 3.0, azl3 kernel 6.6.78.1-3 on Azure Linux 3.0
Fixed versions6.6.79.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21790
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49903
HighCVSS 7.0

jfs: Fix uaf in dbFreeBits

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-2 on Azure Linux 3.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.57.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-49903
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49898
MediumCVSS 5.5

drm/amd/display: Check null-initialized variables

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-9 on Azure Linux 3.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0
Fixed versions6.6.64.2-9
Vendor guidance

CBL-Mariner Releases

CVE-2024-49898
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-57872
MediumCVSS 5.5

scsi: ufs: pltfrm: Dellocate HBA during ufshcd_pltfrm_remove()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.96.2-1 on Azure Linux 3.0, azl3 kernel 6.6.104.2-4 on Azure Linux 3.0, azl3 kernel 6.6.112.1-2 on Azure Linux 3.0, azl3 kernel 6.6.119.3-1 on Azure Linux 3.0
CVE-2024-57872
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-1734
MediumCVSS 5.3

Streams HTTP wrapper does not fail for headers with invalid name and no colon

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 php 8.1.31-1 on CBL Mariner 2.0, cbl2 php 8.1.32-1 on CBL Mariner 2.0, azl3 php 8.3.19-1 on Azure Linux 3.0, azl3 php 8.3.14-1 on Azure Linux 3.0
Fixed versions8.1.32-1, 8.3.19-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-1734
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53091
MediumCVSS 7.8

bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-53091
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53066
Medium

nfs: Fix KMSAN warning in decode_getfattr_attrs()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-53066
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21682
HighCVSS 7.3

eth: bnxt: always recalculate features after XDP clearing, fix null-deref

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.126.1-1 on Azure Linux 3.0
Fixed versions6.6.130.1-3
Vendor guidance

CBL-Mariner Releases

CVE-2025-21682
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49944
Medium

sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-49944
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-32912
MediumCVSS 6.5

Libsoup: null pointer dereference in client when server omits the "nonce" parameter in an unauthorized response with digest authentication

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 libsoup 3.0.4-7 on CBL Mariner 2.0, azl3 libsoup 3.4.4-3 on Azure Linux 3.0, azl3 libsoup 3.4.4-6 on Azure Linux 3.0, cbl2 libsoup 3.0.4-7 on CBL-Mariner 2.0
Fixed versions3.0.4-7, 3.4.4-3
Vendor guidance

CBL-Mariner Releases

CVE-2025-32912
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-32619
HighCVSS 7.4

HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5T_copy_reopen in H5T.c resulting in the corruption of the instruction pointer.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 hdf5 1.14.4-1 on CBL Mariner 2.0, azl3 hdf5 1.14.4.3-1 on Azure Linux 3.0, azl3 hdf5 1.14.3-1 on Azure Linux 3.0, cbl2 hdf5 1.12.1-13 on CBL Mariner 2.0
Fixed versions1.14.4-1, 1.14.4.3-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-32619
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53222
MediumCVSS 5.5

zram: fix NULL pointer in comp_algorithm_show()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.85.1-1 on Azure Linux 3.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0
Fixed versions6.6.85.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-53222
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21773
MediumCVSS 5.5

can: etas_es58x: fix potential NULL pointer dereference on udev->serial

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.78.1-3 on Azure Linux 3.0, azl3 kernel 6.6.79.1-1 on Azure Linux 3.0
Fixed versions6.6.79.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21773
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53899
HighCVSS 8.4

virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not quoted correctly when replacing. NOTE: this is not the same as CVE-2024-9287.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 python-virtualenv 20.26.6-1 on CBL Mariner 2.0, azl3 python-virtualenv 20.25.0-3 on Azure Linux 3.0, cbl2 python-virtualenv 20.14.0-6 on CBL Mariner 2.0, cbl2 python-virtualenv 20.14.0-6 on CBL-Mariner 2.0
Fixed versions20.26.6-1, 20.25.0-3
Vendor guidance

CBL-Mariner Releases

CVE-2024-9287CVE-2024-53899
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49998
Medium

net: dsa: improve shutdown sequence

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.112.1-2 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.117.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-49998
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-21130
MediumCVSS 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mysql 8.0.40-1 on CBL Mariner 2.0, azl3 mysql 8.0.40-1 on Azure Linux 3.0, azl3 mysql 8.0.36-1 on Azure Linux 3.0, cbl2 mysql 8.0.36-1 on CBL Mariner 2.0
Fixed versions8.0.40-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-21130
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53089
MediumCVSS 5.5

LoongArch: KVM: Mark hrtimer to expire in hard interrupt context

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.96.2-1 on Azure Linux 3.0, azl3 kernel 6.6.104.2-4 on Azure Linux 3.0, azl3 kernel 6.6.112.1-2 on Azure Linux 3.0, azl3 kernel 6.6.117.1-1 on Azure Linux 3.0
CVE-2024-53089
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49907
Medium

drm/amd/display: Check null pointers before using dc->clk_mgr

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-49907
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-53154
LowCVSS 2.9

parse_string in cJSON before 1.7.18 has a heap-based buffer over-read via {"1":1, with no trailing newline if cJSON_ParseWithLength is called.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 apparmor 3.0.4-4 on CBL Mariner 2.0, cbl2 apparmor 3.0.4-5 on CBL Mariner 2.0, azl3 apparmor 3.1.7-1 on Azure Linux 3.0, cbl2 apparmor 3.0.4-5 on CBL-Mariner 2.0
Fixed versions3.0.4-5, 3.1.7-1
Vendor guidance

CBL-Mariner Releases

CVE-2023-53154
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56606
HighCVSS 7.8

af_packet: avoid erroring out after sock_init_data() in packet_create()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.76.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0
Fixed versions5.15.176.3-1, 6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56606
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21783
MediumCVSS 5.5

gpiolib: Fix crash on error in gpiochip_get_ngpios()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.78.1-3 on Azure Linux 3.0, azl3 kernel 6.6.79.1-1 on Azure Linux 3.0
Fixed versions6.6.79.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21783
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42236
MediumCVSS 5.5

usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.164.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.43.1-7 on Azure Linux 3.0, azl3 kernel 6.6.35.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.162.2-1 on CBL Mariner 2.0
Fixed versions5.15.164.1-1, 6.6.43.1-7
Vendor guidance

CBL-Mariner Releases

CVE-2024-42236
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21673
MediumCVSS 9.8

smb: client: fix double free of TCP_Server_Info::hostname

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-9 on Azure Linux 3.0, azl3 kernel 6.6.76.1-1 on Azure Linux 3.0
Fixed versions6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21673
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources