Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
18,531Advisories collected
6,564Published or updated in 30 days
8,312Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

18,531 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2023-52596
MediumCVSS 5.5

sysctl: Fix out of bounds access for empty sysctl registers

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
CVE-2023-52596
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-9902
MediumCVSS 6.3

Ansible-core: ansible-core user may read/write unauthorized content

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 ansible 2.14.18-1 on CBL Mariner 2.0, azl3 ansible 2.17.11-1 on Azure Linux 3.0, azl3 ansible 2.17.0-1 on Azure Linux 3.0, cbl2 ansible 2.14.12-2 on CBL Mariner 2.0
Fixed versions2.14.18-1, 2.17.11-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-9902
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-26775
MediumCVSS 5.5

aoe: avoid potential deadlock at set_capacity

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0
CVE-2024-26775
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-27423
HighCVSS 7.1

Improper Input Validation in Vim

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 vim 9.1.0791-4 on Azure Linux 3.0, cbl2 vim 9.1.0791-4 on CBL Mariner 2.0, cbl2 vim 9.1.0791-4 on CBL-Mariner 2.0, cbl2 vim 9.1.1164-1 on CBL Mariner 2.0
Fixed versions9.1.1164-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-27423
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50267
HighCVSS 7.8

USB: serial: io_edgeport: fix use after free in debug printk

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50267
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-21866
MediumCVSS 5.5

powerpc/code-patching: Fix KASAN hit by not flagging text patching area as VM_ALLOC

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0, azl3 kernel 6.6.78.1-3 on Azure Linux 3.0
Fixed versions6.6.82.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2025-21866
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50059
High

ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.57.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50059
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2025-46421
MediumCVSS 6.8

Libsoup: information disclosure may leads libsoup client sends authorization header to a different host when being redirected by a server

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 libsoup 3.0.4-6 on CBL-Mariner 2.0, cbl2 libsoup 3.0.4-5 on CBL Mariner 2.0, azl3 libsoup 3.4.4-5 on Azure Linux 3.0, cbl2 libsoup 3.0.4-6 on CBL Mariner 2.0
Fixed versions3.0.4-5, 3.4.4-5
Vendor guidance

CBL-Mariner Releases

CVE-2025-46421
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-43895
MediumCVSS 5.5

drm/amd/display: Skip Recompute DSC Params if no Stream on Link

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.186.1-1 on CBL-Mariner 2.0
CVE-2024-43895
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-56587
MediumCVSS 5.5

leds: class: Protect brightness_show() with led_cdev->led_access mutex

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.76.1-1 on Azure Linux 3.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0, cbl2 kernel 5.15.173.1-2 on CBL-Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-56587
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-47736
MediumCVSS 5.5

erofs: handle overlapped pclusters out of crafted images properly

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.76.1-1 on Azure Linux 3.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0
Fixed versions6.6.76.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-47736
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2022-27651
MediumCVSS 6.8

A flaw was found in buildah where containers were incorrectly started with non-empty default permissions. A bug was found in Moby (Docker Engine) where containers were incorrectly started with non-empty inheritable Linux process capabilities enabling an attacker with access to programs with inheritable file capabilities to elevate those capabilities to the permitted set when execve(2) runs. This has the potential to impact confidentiality and integrity.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 cri-o 1.21.7-3 on CBL Mariner 2.0, cbl2 cri-o 1.21.7-3 on CBL-Mariner 2.0
Fixed versions1.21.7-2
Vendor guidance

CBL-Mariner Releases

CVE-2022-27651
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42078
MediumCVSS 5.5

nfsd: initialise nfsd_info.mutex early.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.162.2-1 on CBL Mariner 2.0, azl3 kernel 6.6.43.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Fixed versions5.15.162.2-1, 6.6.43.1-7
Vendor guidance

CBL-Mariner Releases

CVE-2024-42078
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42271
HighCVSS 7.8

net/iucv: fix use after free in iucv_sock_close()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.167.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.47.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.164.1-1 on CBL-Mariner 2.0, azl3 kernel 6.6.43.1-7 on Azure Linux 3.0
Fixed versions5.15.167.1-1, 6.6.47.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-42271
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2020-21528
MediumCVSS 5.5

A Segmentation Fault issue discovered in in ieee_segment function in outieee.c in nasm 2.14.03 and 2.15 allows remote attackers to cause a denial of service via crafted assembly file.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 tensorflow 2.16.1-9 on Azure Linux 3.0, cbl2 tensorflow 2.11.1-2 on CBL-Mariner 2.0, cbl2 tensorflow 2.11.1-2 on CBL Mariner 2.0
CVE-2020-21528
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42287
MediumCVSS 4.7

scsi: qla2xxx: Complete command early within lock

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.167.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.164.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.164.1-1 on CBL-Mariner 2.0
Fixed versions5.15.167.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-42287
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-47738
LowCVSS 3.3

wifi: mac80211: don't use rate mask for offchannel TX either

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.56.1-5 on Azure Linux 3.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-47738
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42073
MediumCVSS 5.5

mlxsw: spectrum_buffers: Fix memory corruptions on Spectrum-4 systems

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.162.2-1 on CBL Mariner 2.0, azl3 kernel 6.6.43.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL-Mariner 2.0
Fixed versions5.15.162.2-1, 6.6.43.1-7
Vendor guidance

CBL-Mariner Releases

CVE-2024-42073
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42286
MediumCVSS 5.5

scsi: qla2xxx: validate nvme_local_port correctly

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.167.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.164.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.164.1-1 on CBL-Mariner 2.0
Fixed versions5.15.167.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-42286
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2022-27649
HighCVSS 7.5

A flaw was found in Podman where containers were started incorrectly with non-empty default permissions. A vulnerability was found in Moby (Docker Engine) where containers were started incorrectly with non-empty inheritable Linux process capabilities. This flaw allows an attacker with access to programs with inheritable file capabilities to elevate those capabilities to the permitted set when execve(2) runs.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 podman 4.1.1-1 on CBL Mariner 2.0, cbl2 cri-o 1.21.7-3 on CBL Mariner 2.0, cbl2 cri-o 1.21.7-3 on CBL-Mariner 2.0
Fixed versions4.1.1-1, 1.22.3-1
Vendor guidance

CBL-Mariner Releases

CVE-2022-27649
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-5288
MediumCVSS 5.1

Safe-error attack on TLS 1.3 Protocol

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 mariadb 10.11.6-3 on Azure Linux 3.0, cbl2 mariadb 10.6.9-6, cbl2 mariadb 10.6.9-6 on CBL-Mariner 2.0
CVE-2024-5288
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-52889
MediumCVSS 5.5

apparmor: Fix null pointer deref when receiving skb during sock creation

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.164.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.167.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.47.1-1 on Azure Linux 3.0, azl3 kernel 6.6.43.1-7 on Azure Linux 3.0
Fixed versions5.15.167.1-1, 6.6.47.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2023-52889
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-40982
MediumCVSS 5.5

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1, cbl2 kernel 5.15.176.3-1 on CBL-Mariner 2.0
CVE-2024-40982
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42066
MediumCVSS 5.5

drm/xe: Fix potential integer overflow in page size calculation

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.96.2-2 on Azure Linux 3.0, azl3 kernel 6.6.112.1-2 on Azure Linux 3.0, azl3 kernel 6.6.117.1-1 on Azure Linux 3.0, azl3 kernel 6.6.119.3-1 on Azure Linux 3.0
CVE-2024-42066
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources