Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
18,508Advisories collected
7,709Published or updated in 30 days
8,309Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

18,508 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2024-50045
Medium

netfilter: br_netfilter: fix panic with metadata_dst skb

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.57.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50045
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49866
Medium

tracing/timerlat: Fix a race during cpuhp processing

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-49866
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-39804
MediumCVSS 6.2

In GNU tar before 1.35 mishandled extension attributes in a PAX archive can lead to an application crash in xheader.c.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 tar 1.34-3 on CBL Mariner 2.0, cbl2 tar 1.34-3 on CBL-Mariner 2.0
Fixed versions1.34-3
Vendor guidance

CBL-Mariner Releases

CVE-2023-39804
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-32906
HighCVSS 7.5

Libsoup: out of bounds reads in soup_headers_parse_request()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 libsoup 3.4.4-6 on Azure Linux 3.0, cbl2 libsoup 3.0.4-3 on CBL Mariner 2.0, azl3 libsoup 3.4.4-3 on Azure Linux 3.0, cbl2 libsoup 3.0.4-6 on CBL Mariner 2.0
Fixed versions3.4.4-3, 3.0.4-3
Vendor guidance

CBL-Mariner Releases

CVE-2025-32906
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56688
Medium

sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56688
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21741
HighCVSS 7.1

usbnet: ipheth: fix DPE OoB read

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.78.1-1 on Azure Linux 3.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0
Fixed versions6.6.78.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21741
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-26904
Medium

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.158.2-1 on CBL Mariner 2.0, azl3 kernel 6.6.29.1-3 on Azure Linux 3.0, azl3 kernel 6.6.22.1-2 on Azure Linux 3.0, cbl2 kernel 5.15.153.1-2 on CBL Mariner 2.0
Fixed versions5.15.158.2-1, 6.6.29.1-3
Vendor guidance

CBL-Mariner Releases

CVE-2024-26904
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-43914
MediumCVSS 5.5

md/raid5: avoid BUG_ON() while continue reshape after reassembling

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.167.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.164.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.164.1-1 on CBL-Mariner 2.0
Fixed versions5.15.167.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-43914
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53068
HighCVSS 7.8

firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-53068
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-30219
MediumCVSS 6.1

RabbitMQ has XSS Vulnerability in an Error Message in Management UI

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 rabbitmq-server 3.11.24-3 on CBL Mariner 2.0, azl3 rabbitmq-server 3.13.7-2 on Azure Linux 3.0, cbl2 rabbitmq-server 3.11.24-3 on CBL-Mariner 2.0
Fixed versions3.11.24-3, 3.13.7-2
Vendor guidance

CBL-Mariner Releases

CVE-2025-30219
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-27011
Medium

netfilter: nf_tables: fix memleak in map from abort path

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-9 on Azure Linux 3.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0
Fixed versions6.6.64.2-9
Vendor guidance

CBL-Mariner Releases

CVE-2024-27011
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-41080
MediumCVSS 5.5

io_uring: fix possible deadlock in io_register_iowq_max_workers()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0
Fixed versions5.15.176.3-1, 6.6.64.2-9
Vendor guidance

CBL-Mariner Releases

CVE-2024-41080
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2022-4968
MediumCVSS 6.5

netplan leaks the private key of wireguard to local users.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 netplan 0.95-3 on CBL Mariner 2.0, azl3 netplan 1.0.1-1 on Azure Linux 3.0, azl3 netplan 1.0-1 on Azure Linux 3.0, cbl2 netplan 0.95-3 on CBL-Mariner 2.0
Fixed versions0.95-3, 1.0.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2022-4968
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49948
Medium

net: add more sanity checks to qdisc_pkt_len_init()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-49948
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56369
MediumCVSS 5.5

drm/modes: Avoid divide by zero harder in drm_mode_vrefresh()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.76.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0
Fixed versions5.15.176.3-1, 6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56369
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-21218
MediumCVSS 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.39 and prior 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mysql 8.0.40-1 on CBL Mariner 2.0, azl3 mysql 8.0.40-1 on Azure Linux 3.0, azl3 mysql 8.0.36-1 on Azure Linux 3.0, cbl2 mysql 8.0.36-1 on CBL Mariner 2.0
Fixed versions8.0.40-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-21218
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-26726
MediumCVSS 5.5

btrfs: don't drop extent_map for free space inode on write error

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
CVE-2024-26726
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2020-28366
HighCVSS 7.5

Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 python-tensorboard 2.11.0-3 on Azure Linux 3.0, cm1 golang 1.15.13-1 on CBL Mariner 1.0, azl3 python-tensorboard 2.16.2-1 on Azure Linux 3.0
Fixed versions2.16.2-1, 1.15.13-1
Vendor guidance

CBL-Mariner Releases

CVE-2020-28366
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-32914
HighCVSS 7.4

Libsoup: oob read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of process

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 libsoup 3.0.4-6 on CBL Mariner 2.0, cbl2 libsoup 3.0.4-6 on CBL-Mariner 2.0, cbl2 libsoup 3.0.4-4 on CBL Mariner 2.0, azl3 libsoup 3.4.4-4 on Azure Linux 3.0
Fixed versions3.0.4-4, 3.4.4-4
Vendor guidance

CBL-Mariner Releases

CVE-2025-32914
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49875
Medium

nfsd: map the EBADMSG to nfserr_io to avoid warning

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-49875
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-32610
MediumCVSS 5.7

HDF5 Library through 1.14.3 has a SEGV in H5T_close_real in H5T.c resulting in a corrupted instruction pointer.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 hdf5 1.14.4-1 on CBL Mariner 2.0, azl3 hdf5 1.14.4.3-1 on Azure Linux 3.0, azl3 hdf5 1.14.3-1 on Azure Linux 3.0, cbl2 hdf5 1.12.1-13 on CBL Mariner 2.0
Fixed versions1.14.4-1, 1.14.4.3-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-32610
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50258
MediumCVSS 5.5

net: fix crash when config small gso_max_size/gso_ipv4_max_size

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Fixed versions6.6.64.2-1, 5.15.182.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50258
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42460
MediumCVSS 5.3

In the Elliptic package 6.5.6 for Node.js ECDSA signature malleability occurs because there is a missing check for whether the leading bit of r and s is zero.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 reaper 3.1.1-11 on CBL Mariner 2.0, cbl2 reaper 3.1.1-18 on CBL Mariner 2.0, cbl2 reaper 3.1.1-18 on CBL-Mariner 2.0
Fixed versions3.1.1-11
Vendor guidance

CBL-Mariner Releases

CVE-2024-42460
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56642
HighCVSS 7.8

tipc: Fix use-after-free of kernel socket in cleanup_bearer().

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.76.1-1 on Azure Linux 3.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL-Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56642
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources