Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
18,531Advisories collected
6,564Published or updated in 30 days
8,312Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

18,531 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2023-52589
MediumCVSS 4.7

media: rkisp1: Fix IRQ disable race issue

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0
CVE-2023-52589
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50058
Medium

serial: protect uart_port_dtr_rts() in uart_shutdown() too

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL-Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.57.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50058
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-26828
MediumCVSS 6.7

cifs: fix underflow in parse_server_interfaces()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
CVE-2024-26828
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50242
HighCVSS 7.8

fs/ntfs3: Additional check in ntfs_file_release

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.180.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0
Fixed versions6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50242
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-1545
HighCVSS 5.9

Fault Injection of RSA encryption in WolfCrypt

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mariadb 10.6.9-6, cbl2 mariadb 10.6.9-6 on CBL-Mariner 2.0, azl3 mariadb 10.11.6-3 on Azure Linux 3.0
CVE-2024-1545
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42270
MediumCVSS 5.5

netfilter: iptables: Fix null-ptr-deref in iptable_nat_table_init().

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.167.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.47.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL-Mariner 2.0
Fixed versions5.15.167.1-1, 6.6.47.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-42270
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42067
MediumCVSS 7.8

bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.43.1-7 on Azure Linux 3.0, azl3 kernel 6.6.35.1-5 on Azure Linux 3.0
Fixed versions6.6.43.1-7
Vendor guidance

CBL-Mariner Releases

CVE-2024-42067
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53216
HighCVSS 7.8

nfsd: release svc_expkey/svc_export with rcu_work

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0
CVE-2024-53216
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-41066
MediumCVSS 5.5

ibmvnic: Add tx check to prevent skb leak

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
CVE-2024-41066
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-45828
MediumCVSS 5.5

i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.76.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.173.1-2 on CBL-Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-45828
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-52590
MediumCVSS 6.1

ocfs2: Avoid touching renamed directory if parent does not change

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0
CVE-2023-52590
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-27041
MediumCVSS 5.5

drm/amd/display: fix NULL checks for adev->dm.dc in amdgpu_dm_fini()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
CVE-2024-27041
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-31950
MediumCVSS 6.5

In FRRouting (FRR) through 9.1 there can be a buffer overflow and daemon crash in ospf_te_parse_ri for OSPF LSA packets during an attempt to read Segment Routing subTLVs (their size is not validated).

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 frr 8.5.5-1 on CBL Mariner 2.0, cbl2 frr 8.5.3-6 on CBL-Mariner 2.0, cbl2 frr 8.5.3-6 on CBL Mariner 2.0
Fixed versions8.5.5-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-31950
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-22134
MediumCVSS 4.2

heap-buffer-overflow with visual mode in Vim < 9.1.1003

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 vim 9.1.0791-4 on CBL-Mariner 2.0, cbl2 vim 9.1.0791-2 on CBL Mariner 2.0, azl3 vim 9.1.0791-2 on Azure Linux 3.0, azl3 vim 9.1.0791-4 on Azure Linux 3.0
Fixed versions9.1.0791-2
Vendor guidance

CBL-Mariner Releases

CVE-2025-22134
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-52593
Medium

wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0
Fixed versions5.15.173.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2023-52593
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-26928
HighCVSS 7.8

smb: client: fix potential UAF in cifs_debug_files_proc_show()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Fixed versions5.15.180.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-26928
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-52616
MediumCVSS 5.3

Avahi: avahi wide-area dns predictable transaction ids

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 avahi 0.8-5 on Azure Linux 3.0, cbl2 avahi 0.8-4 on CBL Mariner 2.0, cbl2 avahi 0.8-4 on CBL-Mariner 2.0
Fixed versions0.8-5, 0.8-4
Vendor guidance

CBL-Mariner Releases

CVE-2024-52616
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-45490
HighCVSS 9.8

An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for XML_ParseBuffer.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 expat 2.6.3-1 on CBL Mariner 2.0, azl3 expat 2.6.3-1 on Azure Linux 3.0, azl3 expat 2.6.2-1 on Azure Linux 3.0, cbl2 expat 2.6.2-2 on CBL Mariner 2.0
Fixed versions2.6.3-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-45490
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-43894
MediumCVSS 5.5

drm/client: fix null pointer dereference in drm_client_modeset_probe

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.167.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.164.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.164.1-1 on CBL-Mariner 2.0
Fixed versions5.15.167.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-43894
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-27032
MediumCVSS 6.3

f2fs: fix to avoid potential panic during recovery

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
CVE-2024-27032
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42269
MediumCVSS 5.5

netfilter: iptables: Fix potential null-ptr-deref in ip6table_nat_table_init().

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.167.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.47.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Fixed versions5.15.167.1-1, 6.6.47.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-42269
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49881
Medium

ext4: update orig_path in ext4_find_extent()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-2 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.57.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-49881
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42081
MediumCVSS 5.5

drm/xe/xe_devcoredump: Check NULL before assignments

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.96.2-2 on Azure Linux 3.0, azl3 kernel 6.6.112.1-2 on Azure Linux 3.0, azl3 kernel 6.6.117.1-1 on Azure Linux 3.0, azl3 kernel 6.6.119.3-1 on Azure Linux 3.0
CVE-2024-42081
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-53121
Medium

net/mlx5: fs, lock FTE when checking if active

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-1 on Azure Linux 3.0, azl3 kernel 6.6.57.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.180.1-1 on CBL-Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.64.2-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-53121
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources