Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
18,508Advisories collected
7,709Published or updated in 30 days
8,309Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

18,508 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2024-56588
Medium

scsi: hisi_sas: Create all dump files during debugfs initialization

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.76.1-1 on Azure Linux 3.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0
Fixed versions6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56588
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-53001
Severity not listed

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.184.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.184.1-1 on CBL-Mariner 2.0
CVE-2023-53001
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-41076
MediumCVSS 5.5

NFSv4: Fix memory leak in nfs4_set_security_label

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.47.1-1 on Azure Linux 3.0, azl3 kernel 6.6.35.1-5 on Azure Linux 3.0
Fixed versions6.6.47.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-41076
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50143
HighCVSS 7.8

udf: fix uninit-value use in udf_get_fileshortad

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50143
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53052
Medium

io_uring/rw: fix missing NOWAIT check for O_DIRECT start write

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-53052
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-21213
MediumCVSS 4.2

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.39 and prior 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.2 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H).

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mysql 8.0.40-1 on CBL Mariner 2.0, azl3 mysql 8.0.40-1 on Azure Linux 3.0, cbl2 mysql 8.0.36-1 on CBL Mariner 2.0, azl3 mysql 8.0.36-1 on Azure Linux 3.0
Fixed versions8.0.40-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-21213
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-26740
MediumCVSS 5.5

net/sched: act_mirred: use the backlog for mirred ingress

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
CVE-2024-26740
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-58020
MediumCVSS 5.5

HID: multitouch: Add NULL check in mt_input_configured

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.179.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.79.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.78.1-3 on Azure Linux 3.0
Fixed versions5.15.179.1-1, 6.6.79.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-58020
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42461
CriticalCVSS 9.1

In the Elliptic package 6.5.6 for Node.js ECDSA signature malleability occurs because BER-encoded signatures are allowed.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 reaper 3.1.1-11 on CBL Mariner 2.0, cbl2 reaper 3.1.1-18 on CBL Mariner 2.0, cbl2 reaper 3.1.1-18 on CBL-Mariner 2.0
Fixed versions3.1.1-11
Vendor guidance

CBL-Mariner Releases

CVE-2024-42461
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-32605
HighCVSS 8.8

HDF5 Library through 1.14.3 has a heap-based buffer over-read in H5VM_memcpyvv in H5VM.c (called from H5D__compact_readvv in H5Dcompact.c).

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 hdf5 1.14.4-1 on CBL Mariner 2.0, azl3 hdf5 1.14.4.3-1 on Azure Linux 3.0, azl3 hdf5 1.14.3-1 on Azure Linux 3.0, cbl2 hdf5 1.12.1-13 on CBL Mariner 2.0
Fixed versions1.14.4-1, 1.14.4.3-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-32605
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49952
MediumCVSS 5.5

netfilter: nf_tables: prevent nf_skb_duplicated corruption

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-49952
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21898
MediumCVSS 5.5

ftrace: Avoid potential division by zero in function_stat_show()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-3 on CBL-Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0
Fixed versions5.15.180.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21898
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-47712
Medium

wifi: wilc1000: fix potential RCU dereference issue in wilc_parse_join_bss_param

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-47712
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-26656
MediumCVSS 5.5

drm/amdgpu: fix use-after-free bug

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.82.1-1 on Azure Linux 3.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0
Fixed versions6.6.82.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-26656
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21692
HighCVSS 7.8

net: sched: fix ets qdisc OOB Indexing

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0, cbl2 kernel 5.15.176.3-3 on CBL-Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0
Fixed versions5.15.180.1-1, 6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21692
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-26814
Medium

vfio/fsl-mc: Block calling interrupt handler without trigger

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Fixed versions5.15.176.3-3
Vendor guidance

CBL-Mariner Releases

CVE-2024-26814
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50612
MediumCVSS 5.3

libsndfile through 1.2.2 has an ogg_vorbis.c vorbis_analysis_wrote out-of-bounds read.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 libsndfile 1.2.2-3 on Azure Linux 3.0, cbl2 libsndfile 1.0.31-3 on CBL Mariner 2.0, cbl2 libsndfile 1.0.31-4 on CBL Mariner 2.0, cbl2 libsndfile 1.0.31-4 on CBL-Mariner 2.0
Fixed versions1.2.2-3, 1.0.31-4
Vendor guidance

CBL-Mariner Releases

CVE-2024-50612
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-43860
MediumCVSS 5.5

remoteproc: imx_rproc: Skip over memory region when node value is NULL

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.167.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.47.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.164.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.164.1-1 on CBL-Mariner 2.0
Fixed versions5.15.167.1-1, 6.6.47.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-43860
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-52905
MediumCVSS 5.5

octeontx2-pf: Fix resource leakage in VF driver unbind

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL-Mariner 2.0
CVE-2023-52905
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50209
HighCVSS 7.8

RDMA/bnxt_re: Add a check for memory allocation

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50209
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53061
HighCVSS 7.8

media: s5p-jpeg: prevent buffer overflows

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-53061
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42459
MediumCVSS 5.3

In the Elliptic package 6.5.6 for Node.js EDDSA signature malleability occurs because there is a missing signature length check and thus zero-valued bytes can be removed or appended.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 reaper 3.1.1-11 on CBL Mariner 2.0, cbl2 reaper 3.1.1-18 on CBL Mariner 2.0, cbl2 reaper 3.1.1-18 on CBL-Mariner 2.0
Fixed versions3.1.1-11
Vendor guidance

CBL-Mariner Releases

CVE-2024-42459
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-21231
LowCVSS 3.1

Vulnerability in the MySQL Server product of Oracle MySQL (component: Client programs). Supported versions that are affected are 8.0.39 and prior 8.4.2 and prior and 9.0.1 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.1 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L).

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mysql 8.0.40-1 on CBL Mariner 2.0, azl3 mysql 8.0.40-1 on Azure Linux 3.0, cbl2 mysql 8.0.36-1 on CBL Mariner 2.0, azl3 mysql 8.0.36-1 on Azure Linux 3.0
Fixed versions8.0.40-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-21231
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-52533
CriticalCVSS 9.8

gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\0' character.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 glib 2.71.0-3 on CBL Mariner 2.0, azl3 glib 2.78.1-5 on Azure Linux 3.0, cbl2 glib 2.71.0-4 on CBL Mariner 2.0, azl3 glib 2.78.6-1 on Azure Linux 3.0
Fixed versions2.71.0-3, 2.78.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-52533
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources