Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
18,508Advisories collected
6,543Published or updated in 30 days
8,309Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

18,508 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2024-3177
LowCVSS 2.7

Bypassing mountable secrets policy imposed by the ServiceAccount admission plugin

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kubernetes 1.30.1-1 on Azure Linux 3.0, azl3 kubernetes 1.29.1-4 on Azure Linux 3.0
Fixed versions1.30.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-3177
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-43873
HighCVSS 7.8

vhost/vsock: always initialize seqpacket_allow

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.167.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.164.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.164.1-1 on CBL Mariner 2.0
Fixed versions5.15.167.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-43873
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-21238
MediumCVSS 5.3

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). Supported versions that are affected are 8.0.39 and prior 8.4.1 and prior and 9.0.1 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mysql 8.0.40-1 on CBL Mariner 2.0, azl3 mysql 8.0.40-1 on Azure Linux 3.0, cbl2 mysql 8.0.36-1 on CBL Mariner 2.0, azl3 mysql 8.0.36-1 on Azure Linux 3.0
Fixed versions8.0.40-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-21238
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-45775
MediumCVSS 5.2

Grub2: commands/extcmd: missing check for failed allocation

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 grub2 2.06-14 on CBL Mariner 2.0, azl3 grub2 2.06-24 on Azure Linux 3.0, azl3 grub2 2.06-25 on Azure Linux 3.0, cbl2 grub2 2.06-15 on CBL-Mariner 2.0
Fixed versions2.06-15, 2.06-25
Vendor guidance

CBL-Mariner Releases

CVE-2024-45775
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-27281
MediumCVSS 4.5

An issue was discovered in RDoc 6.3.3 through 6.6.2 as distributed in Ruby 3.x through 3.3.0. When parsing .rdoc_options (used for configuration in RDoc) as a YAML file object injection and resultant remote code execution are possible because there are no restrictions on the classes that can be restored. (When loading the documentation cache object injection and resultant remote code execution are also possible if there were a crafted cache.) The main fixed version is 6.6.3.1. For Ruby 3.0 users a fixed version is rdoc 6.3.4.1. For Ruby 3.1 users a fixed version is rdoc 6.4.1.1. For Ruby 3.2 users a fixed version is rdoc 6.5.1.1.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 ruby 3.1.4-4 on CBL Mariner 2.0, azl3 ruby 3.3.3-1 on Azure Linux 3.0, cbl2 ruby 3.1.4-9 on CBL-Mariner 2.0, azl3 ruby 3.3.0-4 on Azure Linux 3.0
Fixed versions3.1.4-4, 3.3.3-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-27281
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2022-48706
MediumCVSS 5.5

vdpa: ifcvf: Do proper cleanup if IFCVF init fails

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0
CVE-2022-48706
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53259
MediumCVSS 6.5

quic-go affected by an ICMP Packet Too Large Injection Attack on Linux

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 coredns 1.11.1-15 on CBL Mariner 2.0, azl3 coredns 1.11.4-1 on Azure Linux 3.0, azl3 coredns 1.11.4-6 on Azure Linux 3.0, cbl2 coredns 1.11.1-18 on CBL-Mariner 2.0
Fixed versions1.11.1-15, 1.11.4-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-53259
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-47705
MediumCVSS 5.5

block: fix potential invalid pointer dereference in blk_add_partition

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-47705
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21947
MediumCVSS 8.1

ksmbd: fix type confusion via race condition when using ipc_msg_send_request

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.85.1-2 on Azure Linux 3.0, azl3 kernel 6.6.82.1-1 on Azure Linux 3.0
Fixed versions6.6.85.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2025-21947
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21968
HighCVSS 7.8

drm/amd/display: Fix slab-use-after-free on hdcp_work

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.82.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, cbl2 kernel 5.15.176.3-3 on CBL-Mariner 2.0
Fixed versions6.6.85.1-2, 5.15.180.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21968
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-43853
MediumCVSS 5.5

cgroup/cpuset: Prevent UAF in proc_cpuset_show()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.167.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.47.1-1 on Azure Linux 3.0, azl3 kernel 6.6.43.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Fixed versions5.15.167.1-1, 6.6.47.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-43853
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21868
MediumCVSS 5.5

net: allow small head cache usage with large MAX_SKB_FRAGS values

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.112.1-2 on Azure Linux 3.0
Fixed versions6.6.117.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21868
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-52913
MediumCVSS 5.5

drm/i915: Fix potential context UAFs

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Fixed versions5.15.176.3-1
Vendor guidance

CBL-Mariner Releases

CVE-2023-52913
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49957
Medium

ocfs2: fix null-ptr-deref when journal load failed.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-2 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.57.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-49957
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56629
Medium

HID: wacom: fix when get product name maybe null pointer

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.76.1-1 on Azure Linux 3.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL-Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56629
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-43824
MediumCVSS 5.5

PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.96.2-2 on Azure Linux 3.0, azl3 kernel 6.6.104.2-4 on Azure Linux 3.0, azl3 kernel 6.6.112.1-2 on Azure Linux 3.0
CVE-2024-43824
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21779
Medium

KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.179.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.79.1-1 on Azure Linux 3.0
Fixed versions5.15.179.1-1, 6.6.79.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21779
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42224
MediumCVSS 6.1

net: dsa: mv88e6xxx: Correct check for empty list

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.163.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.43.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.162.2-1 on CBL Mariner 2.0, azl3 kernel 6.6.35.1-5 on Azure Linux 3.0
Fixed versions5.15.163.1-1, 6.6.43.1-7, 5.15.164.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-42224
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-52625
MediumCVSS 5.5

drm/amd/display: Refactor DMCUB enter/exit idle interface

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
CVE-2023-52625
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21614
HighCVSS 7.5

go-git clients vulnerable to DoS via maliciously crafted Git server replies

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 packer 1.9.5-6 on Azure Linux 3.0, cbl2 packer 1.9.5-5 on CBL Mariner 2.0, cbl2 cri-o 1.22.3-14 on CBL Mariner 2.0, cbl2 packer 1.9.5-5 on CBL-Mariner 2.0
Fixed versions1.9.5-5, 1.9.5-7, 1.22.3-13
Vendor guidance

CBL-Mariner Releases

CVE-2025-21614
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-46712
LowCVSS 3.7

Erlang/OTP SSH Has Strict KEX Violations

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscm2 erlang 25.3.2.21-1 on CBL Mariner 2.0, azl3 erlang 26.2.5.12-1 on Azure Linux 3.0, cbl2 erlang 25.3.2.20-1 on CBL Mariner 2.0, azl3 erlang 26.2.5.11-1 on Azure Linux 3.0
Fixed versions25.3.2.21-1, 26.2.5.12-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-46712
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53161
MediumCVSS 5.5

EDAC/bluefield: Fix potential integer overflow

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.173.1-2 on CBL-Mariner 2.0
Fixed versions5.15.176.3-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-53161
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-47691
HighCVSS 7.8

f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.56.1-5 on Azure Linux 3.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-47691
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources