Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
18,508Advisories collected
7,709Published or updated in 30 days
8,309Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

18,508 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2024-21203
MediumCVSS 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions that are affected are 8.0.39 and prior 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mysql 8.0.40-1 on CBL Mariner 2.0, azl3 mysql 8.0.40-1 on Azure Linux 3.0, azl3 mysql 8.0.36-1 on Azure Linux 3.0, cbl2 mysql 8.0.36-1 on CBL-Mariner 2.0
Fixed versions8.0.40-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-21203
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53098
HighCVSS 7.8

drm/xe/ufence: Prefetch ufence addr to catch bogus address

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.180.1-1 on CBL-Mariner 2.0
CVE-2024-53098
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-1861
MediumCVSS 9.8

Stream HTTP wrapper truncates redirect location to 1024 bytes

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 php 8.3.14-1 on Azure Linux 3.0, cbl2 php 8.1.31-1 on CBL Mariner 2.0, cbl2 php 8.1.32-1 on CBL Mariner 2.0, azl3 php 8.3.19-1 on Azure Linux 3.0
Fixed versions8.3.19-1, 8.1.32-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-1861
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56620
MediumCVSS 5.5

scsi: ufs: qcom: Only free platform MSIs when ESI is enabled

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.92.2-1 on Azure Linux 3.0
Fixed versions6.6.90.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56620
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49938
Medium

wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-49938
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21744
Medium

wifi: brcmfmac: fix NULL pointer dereference in brcmf_txfinalize()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.179.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.78.1-3 on Azure Linux 3.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0
Fixed versions5.15.179.1-1, 6.6.78.1-3
Vendor guidance

CBL-Mariner Releases

CVE-2025-21744
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-5290
HighCVSS 8.8

An issue was discovered in Ubuntu wpa_supplicant that resulted in loading of arbitrary shared objects, which allows a local unprivileged attacker to escalate privileges to the user that wpa_supplicant runs as (usually root). Membership in the netdev group or access to the dbus interface of wpa_supplicant allow an unprivileged user to specify an arbitrary path to a module to be loaded by the wpa_supplicant process; other escalation paths might exist.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 wpa_supplicant 2.10-3 on Azure Linux 3.0, cbl2 wpa_supplicant 2.10-3 on CBL Mariner 2.0, cbl2 wpa_supplicant 2.10-3 on CBL-Mariner 2.0
CVE-2024-5290
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-10224
MediumCVSS 5.3

Qualys discovered that if unsanitized input was used with the library Modules: ScanDeps

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 perl-Module-ScanDeps 1.35-2 on CBL Mariner 2.0, azl3 perl-Module-ScanDeps 1.35-3 on Azure Linux 3.0, cbl2 perl-Module-ScanDeps 1.35-3 on CBL Mariner 2.0, cbl2 perl-Module-ScanDeps 1.35-3 on CBL-Mariner 2.0
Fixed versions1.35-2, 1.35-3
Vendor guidance

CBL-Mariner Releases

CVE-2024-10224
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50085
HighCVSS 7.8

mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50085
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-32616
HighCVSS 7.4

HDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5O__dtype_encode_helper in H5Odtype.c.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 hdf5 1.14.4-1 on CBL Mariner 2.0, azl3 hdf5 1.14.4.3-1 on Azure Linux 3.0, cbl2 hdf5 1.12.1-13 on CBL Mariner 2.0, azl3 hdf5 1.14.3-1 on Azure Linux 3.0
Fixed versions1.14.4-1, 1.14.4.3-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-32616
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-41073
HighCVSS 7.8

nvme: avoid double free special payload

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.164.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.47.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.162.2-1 on CBL Mariner 2.0, azl3 kernel 6.6.35.1-5 on Azure Linux 3.0
Fixed versions5.15.164.1-1, 6.6.47.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-41073
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-43913
MediumCVSS 7.0

nvme: apple: fix device reference counting

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-9 on Azure Linux 3.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0
Fixed versions6.6.64.2-9
Vendor guidance

CBL-Mariner Releases

CVE-2024-43913
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-5244
MediumCVSS 5.3

GNU Binutils ld elflink.c elf_gc_sweep memory corruption

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 binutils 2.41-6 on Azure Linux 3.0, cbl2 gdb 11.2-6 on CBL Mariner 2.0, cbl2 gdb 11.2-7 on CBL Mariner 2.0, cbl2 binutils 2.37-15 on CBL Mariner 2.0
Fixed versions2.41-6, 11.2-9, 2.37-15, 11.2-10
Vendor guidance

CBL-Mariner Releases

CVE-2025-5244
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49886
Medium

platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-49886
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-21230
MediumCVSS 6.5

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.39 and prior 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mysql 8.0.40-1 on CBL Mariner 2.0, azl3 mysql 8.0.40-1 on Azure Linux 3.0, azl3 mysql 8.0.36-1 on Azure Linux 3.0, cbl2 mysql 8.0.36-1 on CBL Mariner 2.0
Fixed versions8.0.40-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-21230
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-26719
MediumCVSS 5.5

nouveau: offload fence uevents work to workqueue

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
CVE-2024-26719
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-32910
MediumCVSS 6.5

Libsoup: null pointer deference on libsoup via /auth/soup-auth-digest.c through "soup_auth_digest_authenticate" on client when server omits the "realm" parameter in an unauthorized response with digest authentication

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 libsoup 3.0.4-7 on CBL Mariner 2.0, azl3 libsoup 3.4.4-3 on Azure Linux 3.0, azl3 libsoup 3.4.4-6 on Azure Linux 3.0, cbl2 libsoup 3.0.4-7 on CBL-Mariner 2.0
Fixed versions3.0.4-7, 3.4.4-3
Vendor guidance

CBL-Mariner Releases

CVE-2025-32910
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56631
HighCVSS 7.8

scsi: sg: Fix slab-use-after-free read in sg_release()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.179.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.76.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0
Fixed versions5.15.179.1-1, 6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56631
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53093
MediumCVSS 7.5

nvme-multipath: defer partition scanning

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-53093
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42239
MediumCVSS 5.5

bpf: Fail bpf_timer_cancel when callback is being cancelled

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.43.1-7 on Azure Linux 3.0, azl3 kernel 6.6.35.1-5 on Azure Linux 3.0
Fixed versions6.6.43.1-7
Vendor guidance

CBL-Mariner Releases

CVE-2024-42239
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-1736
MediumCVSS 7.3

Stream HTTP wrapper header check might omit basic auth header

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 php 8.1.31-1 on CBL Mariner 2.0, azl3 php 8.3.14-1 on Azure Linux 3.0, cbl2 php 8.1.32-1 on CBL Mariner 2.0, azl3 php 8.3.19-1 on Azure Linux 3.0
Fixed versions8.1.32-1, 8.3.19-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-1736
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49909
MediumCVSS 5.5

drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-9 on Azure Linux 3.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0
Fixed versions6.6.64.2-9
Vendor guidance

CBL-Mariner Releases

CVE-2024-49909
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21745
Medium

blk-cgroup: Fix class @block_class's subsystem refcount leakage

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-9 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.179.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.78.1-3 on Azure Linux 3.0
Fixed versions6.6.78.1-3, 5.15.179.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21745
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53055
Medium

wifi: iwlwifi: mvm: fix 6 GHz scan construction

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-53055
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources