Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
18,508Advisories collected
6,543Published or updated in 30 days
8,309Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

18,508 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2024-49214
Medium

QUIC in HAProxy 3.1.x before 3.1-dev7, 3.0.x before 3.0.5, and 2.9.x before 2.9.11 allows opening a 0-RTT session with a spoofed IP address. This can bypass the IP allow/block list functionality.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 haproxy 2.4.24-1 on CBL Mariner 2.0
Fixed versions2.4.24-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-49214
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-24928
HighCVSS 7.8

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To exploit this, DTD validation must occur for an untrusted document or untrusted DTD. NOTE: this is similar to CVE-2017-9047.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 libxml2 2.10.4-6 on CBL Mariner 2.0, cbl2 libxml2 2.10.4-6 on CBL-Mariner 2.0, azl3 libxml2 2.11.5-4 on Azure Linux 3.0, azl3 libxml2 2.11.5-5 on Azure Linux 3.0
Fixed versions2.10.4-6, 2.11.5-4
Vendor guidance

CBL-Mariner Releases

CVE-2017-9047CVE-2025-24928
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-22010
MediumCVSS 5.5

RDMA/hns: Fix soft lockup during bt pages loop

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.85.1-2 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0
Fixed versions5.15.180.1-1, 6.6.85.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2025-22010
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-27316
HighCVSS 7.5

Apache HTTP Server: HTTP/2 DoS by memory exhaustion on endless continuation frames

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 httpd 2.4.59-1 on CBL Mariner 2.0, azl3 mod_http2 2.0.29-3 on Azure Linux 3.0, azl3 httpd 2.4.61-1 on Azure Linux 3.0, cbl2 httpd 2.4.58-1 on CBL Mariner 2.0
Fixed versions2.4.59-1, 2.0.29-3, 2.4.61-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-27316
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49913
Medium

drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-49913
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-43828
MediumCVSS 5.5

ext4: fix infinite loop when replaying fast_commit

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.167.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.47.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.164.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.43.1-7 on Azure Linux 3.0
Fixed versions5.15.167.1-1, 6.6.47.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-43828
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-57911
MediumCVSS 7.1

iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.76.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, cbl2 kernel 5.15.176.3-3 on CBL-Mariner 2.0
Fixed versions5.15.180.1-1, 6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-57911
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49985
Medium

i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-2 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.57.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-49985
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42259
MediumCVSS 5.5

drm/i915/gem: Fix Virtual Memory mapping boundaries calculation

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.167.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.164.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.164.1-1 on CBL-Mariner 2.0
Fixed versions5.15.167.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-42259
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-26677
MediumCVSS 5.5

rxrpc: Fix delayed ACKs to not set the reference serial number

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
CVE-2024-26677
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-41946
HighCVSS 7.5

REXML DoS vulnerability

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 rubygem-rexml 3.2.7-2 on CBL Mariner 2.0, cbl2 ruby 3.1.4-7 on CBL Mariner 2.0, azl3 rubygem-rexml 3.3.4-1 on Azure Linux 3.0, azl3 ruby 3.3.3-2 on Azure Linux 3.0
Fixed versions3.2.7-2, 3.1.4-7, 3.3.4-1, 3.3.3-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-41946
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-47739
Medium

padata: use integer wrap around to prevent deadlock on seq_nr overflow

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-47739
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-47619
HighCVSS 7.5

tranport: TLS host name wildcard matching too lax

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 syslog-ng 4.3.1-3 on Azure Linux 3.0, cbl2 syslog-ng 3.33.2-8 on CBL Mariner 2.0, cbl2 syslog-ng 3.33.2-8 on CBL-Mariner 2.0
Fixed versions4.3.1-3, 3.33.2-8
Vendor guidance

CBL-Mariner Releases

CVE-2024-47619
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21785
HighCVSS 7.8

arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.79.1-1 on Azure Linux 3.0, azl3 kernel 6.6.78.1-3 on Azure Linux 3.0
Fixed versions6.6.79.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21785
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53173
HighCVSS 7.8

NFSv4.0: Fix a use-after-free problem in the asynchronous open()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL-Mariner 2.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-53173
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50093
Medium

thermal: intel: int340x: processor: Fix warning during module unload

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-2 on Azure Linux 3.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.57.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-50093
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-43823
MediumCVSS 5.5

PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
CVE-2024-43823
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-48949
CriticalCVSS 9.1

The verify function in lib/elliptic/eddsa/index.js in the Elliptic package before 6.5.6 for Node.js omits "sig.S().gte(sig.eddsa.curve.n) || sig.S().isNeg()" validation.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 reaper 3.1.1-13 on CBL Mariner 2.0, cbl2 reaper 3.1.1-18 on CBL-Mariner 2.0, cbl2 reaper 3.1.1-18 on CBL Mariner 2.0
Fixed versions3.1.1-13
Vendor guidance

CBL-Mariner Releases

CVE-2024-48949
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21963
MediumCVSS 5.5

cifs: Fix integer overflow while processing acdirmax mount option

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.82.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.176.3-3 on CBL-Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.85.1-2 on Azure Linux 3.0
Fixed versions6.6.85.1-2, 5.15.180.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21963
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50146
Medium

net/mlx5e: Don't call cleanup on profile rollback failure

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.82.1-1 on Azure Linux 3.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0
Fixed versions6.6.82.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50146
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-26953
Medium

net: esp: fix bad handling of pages from page_pool

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 hyperv-daemons 5.15.158.2-1 on CBL Mariner 2.0, azl3 hyperv-daemons 6.6.35.1-1 on Azure Linux 3.0, cbl2 hyperv-daemons 5.15.164.1-1 on CBL Mariner 2.0, azl3 hyperv-daemons 6.6.22.1-2 on Azure Linux 3.0
Fixed versions5.15.158.2-1, 6.6.35.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-26953
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-45776
MediumCVSS 6.7

Grub2: grub-core/gettext: integer overflow leads to heap oob write and read.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 grub2 2.06-14 on CBL Mariner 2.0, azl3 grub2 2.06-24 on Azure Linux 3.0, cbl2 grub2 2.06-15 on CBL Mariner 2.0, cbl2 grub2 2.06-15 on CBL-Mariner 2.0
Fixed versions2.06-15, 2.06-25
Vendor guidance

CBL-Mariner Releases

CVE-2024-45776
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-22007
MediumCVSS 5.5

Bluetooth: Fix error code in chan_alloc_skb_cb()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.82.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0
Fixed versions6.6.85.1-2, 5.15.180.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-22007
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49917
MediumCVSS 5.5

drm/amd/display: Add NULL check for clk_mgr and clk_mgr->funcs in dcn30_init_hw

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-9 on Azure Linux 3.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0
Fixed versions6.6.64.2-9
Vendor guidance

CBL-Mariner Releases

CVE-2024-49917
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources