Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
18,531Advisories collected
6,565Published or updated in 30 days
8,312Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

18,531 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2024-38577
HighCVSS 7.8

rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.167.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.35.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL-Mariner 2.0
Fixed versions5.15.167.1-1, -, 6.6.35.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-38577
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50189
MediumCVSS 5.5

HID: amd_sfh: Switch to device-managed dmam_alloc_coherent()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0
Fixed versions5.15.173.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50189
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49915
MediumCVSS 5.5

drm/amd/display: Add NULL check for clk_mgr in dcn32_init_hw

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-9 on Azure Linux 3.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0
Fixed versions6.6.64.2-9
Vendor guidance

CBL-Mariner Releases

CVE-2024-49915
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-52980
MediumCVSS 6.5

Elasticsearch Uncontrolled Resource Consumption vulnerability

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 rubygem-elasticsearch 8.3.0-1 on CBL Mariner 2.0, azl3 rubygem-elasticsearch 8.9.0-1 on Azure Linux 3.0, cbl2 rubygem-elasticsearch 8.3.0-1 on CBL-Mariner 2.0
CVE-2024-52980
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-26947
MediumCVSS 5.5

ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 hyperv-daemons 6.6.35.1-1 on Azure Linux 3.0, azl3 hyperv-daemons 6.6.22.1-2 on Azure Linux 3.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0
Fixed versions6.6.35.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-26947
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-12401
MediumCVSS 4.4

Cert-manager: potential dos when parsing specially crafted pem inputs

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 cert-manager 1.11.2-18 on CBL Mariner 2.0, azl3 cert-manager 1.12.15-1 on Azure Linux 3.0, cbl2 cert-manager 1.11.2-22 on CBL-Mariner 2.0, cbl2 cert-manager 1.11.2-22 on CBL Mariner 2.0
Fixed versions1.11.2-18, 1.12.15-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-12401
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21687
HighCVSS 7.8

vfio/platform: check the bounds of read/write syscalls

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0, cbl2 kernel 5.15.176.3-3 on CBL-Mariner 2.0
Fixed versions5.15.180.1-1, 6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21687
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-36927
MediumCVSS 4.7

ipv4: Fix uninit-value access in __ip_make_skb()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0
CVE-2024-36927
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56761
MediumCVSS 5.5

x86/fred: Clear WFE in missing-ENDBRANCH #CPs

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.76.1-1 on Azure Linux 3.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0
Fixed versions6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56761
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21833
MediumCVSS 5.5

iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.112.1-2 on Azure Linux 3.0, azl3 kernel 6.6.117.1-1 on Azure Linux 3.0, azl3 kernel 6.6.119.3-1 on Azure Linux 3.0
CVE-2025-21833
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-8006
MediumCVSS 4.4

NULL pointer dereference in libpcap before 1.10.5 with remote packet capture support

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 libpcap 1.10.1-3 on CBL Mariner 2.0, azl3 nmap 7.95-2 on Azure Linux 3.0, azl3 libpcap 1.10.5-1 on Azure Linux 3.0, azl3 libpcap 1.10.4-1 on Azure Linux 3.0
Fixed versions1.10.1-3, 7.95-2, 1.10.5-1, 7.93-3
Vendor guidance

CBL-Mariner Releases

CVE-2024-8006
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49995
HighCVSS 7.8

tipc: guard against string buffer overrun

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-2 on Azure Linux 3.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.57.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-49995
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-4134
MediumCVSS 5.5

Kernel: cyttsp4_core: use-after-free in cyttsp4_watchdog_work()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0
CVE-2023-4134
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50141
Medium

ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50141
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53210
Medium

s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0
Fixed versions6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-53210
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50115
HighCVSS 7.1

KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50115
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-47737
MediumCVSS 5.5

nfsd: call cache_put if xdr_reserve_space returns NULL

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-47737
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-58097
MediumCVSS 5.5

wifi: ath11k: fix RCU stall while reaping monitor destination ring

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
CVE-2024-58097
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-40997
MediumCVSS 5.5

cpufreq: amd-pstate: fix memory leak on CPU EPP exit

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.47.1-1 on Azure Linux 3.0, azl3 kernel 6.6.35.1-5 on Azure Linux 3.0
Fixed versions6.6.47.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-40997
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-55549
HighCVSS 7.8

xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 libxslt 1.1.43-1 on Azure Linux 3.0, cbl2 libxslt 1.1.34-8 on CBL Mariner 2.0, cbl2 libxslt 1.1.34-8 on CBL-Mariner 2.0, azl3 libxslt 1.1.39-1 on Azure Linux 3.0
Fixed versions1.1.43-1, 1.1.34-8
Vendor guidance

CBL-Mariner Releases

CVE-2024-55549
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-58010
MediumCVSS 5.5

binfmt_flat: Fix integer overflow bug on 32 bit systems

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.179.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.78.1-3 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0
Fixed versions5.15.179.1-1, 6.6.78.1-3
Vendor guidance

CBL-Mariner Releases

CVE-2024-58010
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-52981
MediumCVSS 4.9

An issue was discovered in Elasticsearch, where a large recursion using the Well-KnownText formatted string with nested GeometryCollection objects could cause a stackoverflow.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 rubygem-elasticsearch 8.3.0-1 on CBL Mariner 2.0, azl3 rubygem-elasticsearch 8.9.0-1 on Azure Linux 3.0, cbl2 rubygem-elasticsearch 8.3.0-1 on CBL-Mariner 2.0
CVE-2024-52981
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53217
Medium

NFSD: Prevent NULL dereference in nfsd4_process_cb_update()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, cbl2 kernel 5.15.173.1-2 on CBL-Mariner 2.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0
Fixed versions5.15.176.3-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-53217
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-31583
MediumCVSS 7.8

Pytorch before version v2.2.0 was discovered to contain a use-after-free vulnerability in torch/csrc/jit/mobile/interpreter.cpp.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 pytorch 2.0.0-4 on CBL Mariner 2.0, cbl2 pytorch 2.0.0-8 on CBL Mariner 2.0, cbl2 pytorch 2.0.0-8 on CBL-Mariner 2.0
Fixed versions2.0.0-4
Vendor guidance

CBL-Mariner Releases

CVE-2024-31583
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources