Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
18,508Advisories collected
6,543Published or updated in 30 days
8,309Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

18,508 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2022-49742
MediumCVSS 5.5

f2fs: initialize locks earlier in f2fs_fill_super()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1
CVE-2022-49742
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-4574
MediumCVSS 4.8

Crossbeam-channel: crossbeam-channel vulnerable to double free on drop

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 rust 1.75.0-16 on Azure Linux 3.0, azl3 kata-containers-cc 3.15.0.aks0-4 on Azure Linux 3.0, azl3 kata-containers-cc 3.15.0.aks0-5 on Azure Linux 3.0, azl3 kata-containers-cc 3.15.0.aks0-6 on Azure Linux 3.0
Fixed versions1.75.0-16, 1.86.0-3, 1.0.2-2, 3.18.0.kata0-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-4574
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-21247
LowCVSS 3.8

Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump). Supported versions that are affected are 8.0.39 and prior 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Client. Successful attacks of this vulnerability can result in unauthorized update insert or delete access to some of MySQL Client accessible data as well as unauthorized read access to a subset of MySQL Client accessible data. CVSS 3.1 Base Score 3.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N).

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mysql 8.0.40-1 on CBL Mariner 2.0, azl3 mysql 8.0.40-1 on Azure Linux 3.0, cbl2 mysql 8.0.36-1 on CBL Mariner 2.0, azl3 mysql 8.0.36-1 on Azure Linux 3.0
Fixed versions8.0.40-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-21247
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42158
MediumCVSS 4.1

s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.96.2-2 on Azure Linux 3.0, azl3 kernel 6.6.104.2-4 on Azure Linux 3.0, azl3 kernel 6.6.112.1-2 on Azure Linux 3.0, azl3 kernel 6.6.117.1-1 on Azure Linux 3.0
CVE-2024-42158
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-32624
CriticalCVSS 7.4

HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5T__ref_mem_setnull in H5Tref.c (called from H5T__conv_ref in H5Tconv.c) resulting in the corruption of the instruction pointer.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 hdf5 1.14.4-1 on CBL Mariner 2.0, azl3 hdf5 1.14.4.3-1 on Azure Linux 3.0, cbl2 hdf5 1.14.4-1 on CBL-Mariner 2.0
Fixed versions1.14.4-1, 1.14.4.3-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-32624
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-45774
MediumCVSS 6.7

Grub2: reader/jpeg: heap oob write during jpeg parsing

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 grub2 2.06-14 on CBL Mariner 2.0, azl3 grub2 2.06-24 on Azure Linux 3.0, cbl2 grub2 2.06-15 on CBL Mariner 2.0, cbl2 grub2 2.06-15 on CBL-Mariner 2.0
Fixed versions2.06-15, 2.06-25
Vendor guidance

CBL-Mariner Releases

CVE-2024-45774
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-43863
MediumCVSS 5.5

drm/vmwgfx: Fix a deadlock in dma buf fence polling

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.167.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.164.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.164.1-1 on CBL Mariner 2.0
Fixed versions5.15.167.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-43863
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49978
MediumCVSS 7.5

gso: fix udp gso fraglist segmentation after pull from frag_list

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.57.1-2 on Azure Linux 3.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions6.6.57.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-49978
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-44940
HighCVSS 7.8

fou: remove warn in gue_gro_receive on unsupported protocol

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL-Mariner 2.0
Fixed versions5.15.176.3-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-44940
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-36621
MediumCVSS 6.8

moby v25.0.5 is affected by a Race Condition in builder/builder-next/adapters/snapshot/layer.go. The vulnerability could be used to trigger concurrent builds that call the EnsureLayer function resulting in resource leaks/exhaustion.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 moby-engine 24.0.9-11 on CBL Mariner 2.0, azl3 moby-engine 25.0.3-8 on Azure Linux 3.0, cbl2 moby-engine 24.0.9-16 on CBL-Mariner 2.0, azl3 moby-engine 25.0.3-13 on Azure Linux 3.0
Fixed versions24.0.9-11, 25.0.3-8
Vendor guidance

CBL-Mariner Releases

CVE-2024-36621
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42313
HighCVSS 7.8

media: venus: fix use after free in vdec_close

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.167.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.47.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.164.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.43.1-7 on Azure Linux 3.0
Fixed versions5.15.167.1-1, 6.6.47.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-42313
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50033
High

slip: make slhc_remember() more robust against malicious packets

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.57.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50033
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21941
MediumCVSS 5.5

drm/amd/display: Fix null check for pipe_ctx->plane_state in resource_build_scaling_params

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, azl3 kernel 6.6.82.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.85.1-2 on Azure Linux 3.0
Fixed versions5.15.180.1-1, 6.6.85.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2025-21941
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21634
MediumCVSS 5.5

cgroup/cpuset: remove kernfs active break

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.96.2-1 on Azure Linux 3.0, azl3 kernel 6.6.96.2-2 on Azure Linux 3.0, azl3 kernel 6.6.104.2-4 on Azure Linux 3.0
CVE-2025-21634
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-52837
MediumCVSS 6.7

nbd: fix uaf in nbd_open

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1
CVE-2023-52837
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2022-49471
HighCVSS 7.8

rtw89: cfo: check mac_id to avoid out-of-bounds

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0
CVE-2022-49471
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2022-49303
MediumCVSS 5.5

drivers: staging: rtl8192eu: Fix deadlock in rtw_joinbss_event_prehandle

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
CVE-2022-49303
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-55553
HighCVSS 7.5

In FRRouting (FRR) all routes are re-validated if the total size of an update received via RTR exceeds the internal socket's buffer size

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscm2 frr 8.5.5-3 on CBL Mariner 2.0, azl3 frr 9.1.1-3 on Azure Linux 3.0, cbl2 frr 8.5.5-3 on CBL Mariner 2.0, cbl2 frr 8.5.5-3 on CBL-Mariner 2.0
Fixed versions8.5.5-3, 9.1.1-3
Vendor guidance

CBL-Mariner Releases

CVE-2024-55553
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21792
MediumCVSS 7.8

ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.78.1-3 on Azure Linux 3.0, azl3 kernel 6.6.79.1-1 on Azure Linux 3.0
Fixed versions6.6.79.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21792
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2021-3672
MediumCVSS 5.6

A flaw was found in c-ares library where a missing input validation check of host names returned by DNS (Domain Name Servers) can lead to output of wrong hostnames which might potentially lead to Domain Hijacking. The highest threat from this vulnerability is to confidentiality and integrity as well as system availability.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscm1 pgbouncer 1.16.1-1 on CBL Mariner 1.0, cm1 c-ares 1.18.1-1 on CBL Mariner 1.0, cbl2 pgbouncer 1.16.1-1 on CBL Mariner 2.0, azl3 ceph 18.2.2-1 on Azure Linux 3.0
Fixed versions1.16.1-1, 1.18.1-1, 18.2.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2021-3672
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50156
Medium

drm/msm: Avoid NULL dereference in msm_disp_state_print_regs()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50156
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-10963
HighCVSS 7.4

Pam: improper hostname interpretation in pam_access leads to access control bypass

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 pam 1.5.3-3 on Azure Linux 3.0, azl3 pam 1.5.3-4 on Azure Linux 3.0
Fixed versions1.5.3-3
Vendor guidance

CBL-Mariner Releases

CVE-2024-10963
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-41957
MediumCVSS 5.3

Vim double free in src/alloc.c:616

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 vim 9.0.2121-4 on CBL Mariner 2.0, azl3 vim 9.0.2190-4 on Azure Linux 3.0, cbl2 vim 9.0.2121-5 on CBL Mariner 2.0, azl3 vim 9.0.2190-6 on Azure Linux 3.0
Fixed versions9.0.2121-4, 9.0.2190-4
Vendor guidance

CBL-Mariner Releases

CVE-2024-41957
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-47696
HighCVSS 7.8

RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-47696
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources