Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
18,531Advisories collected
6,565Published or updated in 30 days
8,312Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

18,531 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2024-49923
MediumCVSS 5.5

drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.79.1-1 on Azure Linux 3.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0
Fixed versions6.6.79.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-49923
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21700
MediumCVSS 7.8

net: sched: Disallow replacing of child qdisc from one parent to another

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-3 on CBL-Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0
Fixed versions5.15.180.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21700
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-26965
Medium

clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 hyperv-daemons 5.15.158.1-1 on CBL Mariner 2.0, azl3 hyperv-daemons 6.6.35.1-1 on Azure Linux 3.0, cbl2 hyperv-daemons 5.15.153.1-1 on CBL Mariner 2.0, azl3 hyperv-daemons 6.6.22.1-2 on Azure Linux 3.0
Fixed versions5.15.158.1-1, 6.6.35.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-26965
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56763
MediumCVSS 5.5

tracing: Prevent bad count for tracing_cpumask_write

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.76.1-1 on Azure Linux 3.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56763
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-57256
HighCVSS 7.1

An integer overflow in ext4fs_read_symlink in Das U-Boot before 2025.01-rc1 occurs for zalloc (adding one to an le32 variable) via a crafted ext4 filesystem with an inode size of 0xffffffff, resulting in a malloc of zero and resultant memory overwrite.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 qemu 6.2.0-24 on CBL Mariner 2.0, cbl2 qemu 6.2.0-24 on CBL-Mariner 2.0, azl3 qemu 8.2.0-16 on Azure Linux 3.0
CVE-2024-57256
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-45337
CriticalCVSS 9.1

Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 moby-engine 24.0.9-12 on CBL Mariner 2.0, cbl2 cert-manager 1.11.2-16 on CBL Mariner 2.0, cbl2 moby-compose 2.17.3-9 on CBL Mariner 2.0, cbl2 telegraf 1.29.4-10 on CBL Mariner 2.0
Fixed versions24.0.9-12, 1.11.2-16, 2.17.3-9, 1.29.4-10
Vendor guidance

CBL-Mariner Releases

CVE-2024-45337
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-1118
MediumCVSS 4.4

Grub2: commands/dump: the dump command is not in lockdown when secure boot is enabled

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 grub2 2.06-14 on CBL Mariner 2.0, cbl2 grub2 2.06-15 on CBL Mariner 2.0, azl3 grub2 2.06-25 on Azure Linux 3.0, cbl2 grub2 2.06-15 on CBL-Mariner 2.0
Fixed versions2.06-15, 2.06-25
Vendor guidance

CBL-Mariner Releases

CVE-2025-1118
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-10041
MediumCVSS 4.7

Pam: libpam: libpam vulnerable to read hashed password

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 pam 1.5.3-4 on Azure Linux 3.0, cbl2 pam 1.5.1-7 on CBL-Mariner 2.0, cbl2 pam 1.5.1-7 on CBL Mariner 2.0
Fixed versions1.5.3-4, 1.5.1-7
Vendor guidance

CBL-Mariner Releases

CVE-2024-10041
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-7264
MediumCVSS 6.5

ASN.1 date parser overread

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 rust 1.68.0-1 on CBL Mariner 2.0, azl3 cmake 3.30.3-4 on Azure Linux 3.0, azl3 cmake 3.30.3-6 on Azure Linux 3.0
Fixed versions1.68.0-1, 3.30.3-4
Vendor guidance

CBL-Mariner Releases

CVE-2024-7264
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50302
MediumCVSS 5.5

HID: core: zero-initialize the report buffer

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50302
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50125
HighCVSS 7.8

Bluetooth: SCO: Fix UAF on sco_sock_timeout

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-1 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Fixed versions6.6.64.2-1, 5.15.182.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50125
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56569
MediumCVSS 5.5

ftrace: Fix regression with module command in stack_trace_filter

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.173.1-2 on CBL-Mariner 2.0
Fixed versions5.15.176.3-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56569
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-3817
CriticalCVSS 9.8

HashiCorp go-getter Vulnerable to Argument Injection When Fetching Remote Default Git Branches

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 terraform 1.3.2-14 on CBL Mariner 2.0, cbl2 terraform 1.3.2-25 on CBL Mariner 2.0, cbl2 terraform 1.3.2-25 on CBL-Mariner 2.0
Fixed versions1.3.2-14
Vendor guidance

CBL-Mariner Releases

CVE-2024-3817
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-43826
MediumCVSS 4.7

nfs: pass explicit offset/count to trace events

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.96.2-2 on Azure Linux 3.0, azl3 kernel 6.6.104.2-4 on Azure Linux 3.0, azl3 kernel 6.6.112.1-2 on Azure Linux 3.0, azl3 kernel 6.6.117.1-1 on Azure Linux 3.0
Fixed versions6.6.130.1-3
Vendor guidance

CBL-Mariner Releases

CVE-2024-43826
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-26662
MediumCVSS 5.5

drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0
CVE-2024-26662
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-52584
LowCVSS 3.8

spmi: mediatek: Fix UAF on device remove

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
CVE-2023-52584
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-57795
HighCVSS 7.8

RDMA/rxe: Remove the direct link to net_device

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.96.2-2 on Azure Linux 3.0, azl3 kernel 6.6.117.1-1 on Azure Linux 3.0, azl3 kernel 6.6.119.3-1 on Azure Linux 3.0, azl3 kernel 6.6.119.3-3 on Azure Linux 3.0
Fixed versions6.6.121.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-57795
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-47710
Medium

sock_map: Add a cond_resched() in sock_hash_free()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-47710
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56640
HighCVSS 7.8

net/smc: fix LGR and link use-after-free issue

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.76.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.173.1-2 on CBL-Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56640
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-26984
MediumCVSS 5.5

nouveau: fix instmem race condition around ptr stores

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 hyperv-daemons 5.15.158.1-1 on CBL Mariner 2.0, azl3 hyperv-daemons 6.6.35.1-1 on Azure Linux 3.0, cbl2 hyperv-daemons 5.15.153.1-1 on CBL Mariner 2.0, azl3 hyperv-daemons 6.6.22.1-2 on Azure Linux 3.0
Fixed versions5.15.158.1-1, 6.6.35.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-26984
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-45491
CriticalCVSS 9.8

An issue was discovered in libexpat before 2.6.3. dtdCopy in xmlparse.c can have an integer overflow for nDefaultAtts on 32-bit platforms (where UINT_MAX equals SIZE_MAX).

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 expat 2.6.3-1 on CBL Mariner 2.0, azl3 expat 2.6.3-1 on Azure Linux 3.0, cbl2 expat 2.6.2-2 on CBL Mariner 2.0, cbl2 expat 2.6.2-2 on CBL-Mariner 2.0
Fixed versions2.6.3-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-45491
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-10978
MediumCVSS 4.2

PostgreSQL SET ROLE SET SESSION AUTHORIZATION reset to wrong user ID

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 postgresql 14.14-1 on CBL Mariner 2.0, azl3 postgresql 16.5-1 on Azure Linux 3.0, cbl2 postgresql 14.13-1 on CBL Mariner 2.0, azl3 postgresql 16.4-2 on Azure Linux 3.0
Fixed versions14.14-1, 16.5-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-10978
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources