Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
18,508Advisories collected
7,709Published or updated in 30 days
8,309Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

18,508 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2024-53050
MediumCVSS 5.5

drm/i915/hdcp: Add encoder check in hdcp2_get_capability

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.96.2-1 on Azure Linux 3.0, azl3 kernel 6.6.112.1-2 on Azure Linux 3.0, azl3 kernel 6.6.117.1-1 on Azure Linux 3.0, azl3 kernel 6.6.119.3-1 on Azure Linux 3.0
CVE-2024-53050
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21919
HighCVSS 7.8

sched/fair: Fix potential memory corruption in child_cfs_rq_on_list

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.85.1-2 on Azure Linux 3.0, azl3 kernel 6.6.82.1-1 on Azure Linux 3.0
Fixed versions5.15.180.1-1, 6.6.85.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2025-21919
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-30215
CriticalCVSS 9.6

NATS-Server Fails to Authorize Certain Jetstream Admin APIs

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 telegraf 1.29.4-16 on CBL Mariner 2.0, cbl2 telegraf 1.29.4-15 on CBL Mariner 2.0, azl3 telegraf 1.31.0-9 on Azure Linux 3.0, azl3 telegraf 1.31.0-10 on Azure Linux 3.0
Fixed versions1.29.4-15, 1.31.0-9
Vendor guidance

CBL-Mariner Releases

CVE-2025-30215
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-33874
CriticalCVSS 9.8

HDF5 Library through 1.14.3 has a heap buffer overflow in H5O__mtime_new_encode in H5Omtime.c.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 hdf5 1.14.4-1 on CBL Mariner 2.0, azl3 hdf5 1.14.4.3-1 on Azure Linux 3.0, cbl2 hdf5 1.12.1-13 on CBL Mariner 2.0, azl3 hdf5 1.14.3-1 on Azure Linux 3.0
Fixed versions1.14.4-1, 1.14.4.3-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-33874
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50273
MediumCVSS 5.5

btrfs: reinitialize delayed ref list after deleting it from the list

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50273
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-2310
MediumCVSS 5.3

HDF5 Metadata Attribute Decoder H5MM_strndup heap-based overflow

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 hdf5 1.14.4.3-1 on Azure Linux 3.0, cbl2 hdf5 1.14.4-1 on CBL Mariner 2.0, cbl2 hdf5 1.14.6-1 on CBL Mariner 2.0, azl3 hdf5 1.14.6-1 on Azure Linux 3.0
Fixed versions1.14.6-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-2310
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49996
HighCVSS 7.8

cifs: Fix buffer overflow when parsing NFS reparse points

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-2 on Azure Linux 3.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions5.15.176.3-1, 6.6.57.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-49996
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21743
HighCVSS 7.1

usbnet: ipheth: fix possible overflow in DPE length check

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.78.1-1 on Azure Linux 3.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0
Fixed versions6.6.78.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21743
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-21163
MediumCVSS 5.5

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mysql 8.0.40-1 on CBL Mariner 2.0, azl3 mysql 8.0.40-1 on Azure Linux 3.0, cbl2 mysql 8.0.36-1 on CBL Mariner 2.0, azl3 mysql 8.0.36-1 on Azure Linux 3.0
Fixed versions8.0.40-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-21163
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-57807
MediumCVSS 5.5

scsi: megaraid_sas: Fix for a potential deadlock

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.76.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0
Fixed versions5.15.176.3-1, 6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-57807
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53090
HighCVSS 7.5

afs: Fix lock recursion

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.96.2-2 on Azure Linux 3.0, azl3 kernel 6.6.104.2-4 on Azure Linux 3.0, azl3 kernel 6.6.112.1-2 on Azure Linux 3.0
CVE-2024-53090
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49934
MediumCVSS 7.1

fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-9 on Azure Linux 3.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0
Fixed versions6.6.64.2-9
Vendor guidance

CBL-Mariner Releases

CVE-2024-49934
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49911
MediumCVSS 5.5

drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-9 on Azure Linux 3.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0
Fixed versions6.6.64.2-9
Vendor guidance

CBL-Mariner Releases

CVE-2024-49911
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42288
MediumCVSS 5.5

scsi: qla2xxx: Fix for possible memory corruption

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.167.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.164.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.164.1-1 on CBL Mariner 2.0
Fixed versions5.15.167.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-42288
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21680
HighCVSS 7.8

pktgen: Avoid out-of-bounds access in get_imix_entries

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, cbl2 kernel 5.15.176.3-3 on CBL-Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.76.1-1 on Azure Linux 3.0
Fixed versions5.15.180.1-1, 6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21680
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42107
MediumCVSS 4.7

ice: Don't process extts if PTP is disabled

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.96.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.96.2-2 on Azure Linux 3.0, azl3 kernel 6.6.104.2-4 on Azure Linux 3.0
CVE-2024-42107
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21951
MediumCVSS 5.5

bus: mhi: host: pci_generic: Use pci_try_reset_function() to avoid deadlock

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.82.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.85.1-2 on Azure Linux 3.0, cbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0
Fixed versions6.6.85.1-2, 5.15.180.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21951
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-33875
MediumCVSS 5.7

HDF5 Library through 1.14.3 has a heap-based buffer overflow in H5O__layout_encode in H5Olayout.c resulting in the corruption of the instruction pointer.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 hdf5 1.14.4-1 on CBL Mariner 2.0, azl3 hdf5 1.14.4.3-1 on Azure Linux 3.0, azl3 hdf5 1.14.3-1 on Azure Linux 3.0, cbl2 hdf5 1.12.1-13 on CBL Mariner 2.0
Fixed versions1.14.4-1, 1.14.4.3-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-33875
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53209
Medium

bnxt_en: Fix receive ring space parameters when XDP is active

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.85.1-1 on Azure Linux 3.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0
Fixed versions6.6.85.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-53209
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53042
Medium

ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.169.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.169.1-1 on CBL-Mariner 2.0
Fixed versions6.6.64.2-1, 5.15.173.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-53042
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-5245
MediumCVSS 5.3

GNU Binutils objdump debug.c debug_type_samep memory corruption

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 binutils 2.41-6 on Azure Linux 3.0, cbl2 binutils 2.37-15 on CBL Mariner 2.0, cbl2 binutils 2.37-15 on CBL-Mariner 2.0
Fixed versions2.41-6, 2.37-15
Vendor guidance

CBL-Mariner Releases

CVE-2025-5245
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-2295
LowCVSS 3.5

Potential iSCSI R2T PDU Vulnerability

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 edk2 20230301gitf80f052277c8-42 on CBL Mariner 2.0, cbl2 edk2 20230301gitf80f052277c8-43 on CBL Mariner 2.0, cbl2 hvloader 1.0.1-14 on CBL Mariner 2.0, cbl2 edk2 20230301gitf80f052277c8-44 on CBL Mariner 2.0
Fixed versions1.0.1-16, 20240524git3e722403cd16-14, 20230301gitf80f052277c8-45
Vendor guidance

CBL-Mariner Releases

CVE-2025-2295
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-32909
MediumCVSS 5.3

Libsoup: null pointer dereference on libsoup through function "sniff_mp4" in soup-content-sniffer.c

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 libsoup 3.4.4-6 on Azure Linux 3.0, cbl2 libsoup 3.0.4-7 on CBL-Mariner 2.0, azl3 libsoup 3.4.4-3 on Azure Linux 3.0, cbl2 libsoup 3.0.4-7 on CBL Mariner 2.0
Fixed versions3.4.4-3, 3.0.4-7
Vendor guidance

CBL-Mariner Releases

CVE-2025-32909
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-44931
MediumCVSS 5.5

gpio: prevent potential speculation leaks in gpio_device_get_desc()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL-Mariner 2.0
Fixed versions5.15.176.3-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-44931
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources