Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
18,531Advisories collected
6,564Published or updated in 30 days
8,312Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

18,531 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2024-47693
Medium

IB/core: Fix ib_cache_setup_one error flow cleanup

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-47693
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-1544
MediumCVSS 4.1

ECDSA nonce bias caused by truncation

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 mariadb 10.11.6-3 on Azure Linux 3.0, cbl2 mariadb 10.6.9-6 on CBL-Mariner 2.0, cbl2 mariadb 10.6.9-6
CVE-2024-1544
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-40965
MediumCVSS 5.5

i2c: lpi2c: Avoid calling clk_get_rate during transfer

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.64.2-9 on Azure Linux 3.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0
Fixed versions6.6.64.2-9
Vendor guidance

CBL-Mariner Releases

CVE-2024-40965
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-31228
MediumCVSS 5.5

Denial-of-service due to unbounded pattern matching in Redis

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 redis 6.2.16-1 on CBL Mariner 2.0, azl3 valkey 8.0.1-1 on Azure Linux 3.0, cbl2 redis 6.2.14-2 on CBL-Mariner 2.0, cbl2 redis 6.2.14-2 on CBL Mariner 2.0
Fixed versions6.2.16-1, 8.0.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-31228
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-34064
MediumCVSS 5.4

Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 nodejs18 18.20.3-4 on CBL Mariner 2.0, cbl2 python-jinja2 3.0.3-4 on CBL Mariner 2.0, azl3 nodejs 20.14.0-1 on Azure Linux 3.0, azl3 python-jinja2 3.1.2-2 on Azure Linux 3.0
Fixed versions18.20.3-4, 3.0.3-4, 20.14.0-1, 3.1.2-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-34064
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42283
MediumCVSS 5.5

net: nexthop: Initialize all fields in dumped nexthops

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.167.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.47.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.164.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.164.1-1 on CBL-Mariner 2.0
Fixed versions5.15.167.1-1, 6.6.47.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-42283
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42068
MediumCVSS 5.5

bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.162.2-1 on CBL Mariner 2.0, azl3 kernel 6.6.43.1-7 on Azure Linux 3.0, azl3 kernel 6.6.35.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.160.1-1 on CBL Mariner 2.0
Fixed versions5.15.162.2-1, 6.6.43.1-7
Vendor guidance

CBL-Mariner Releases

CVE-2024-42068
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-47698
HighCVSS 7.8

drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions5.15.173.1-1, 6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-47698
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-5814
MediumCVSS 5.3

Unverifed Ciphersuite used on a client-side TLS1.3 Downgrade

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mariadb 10.6.9-6, cbl2 mariadb 10.6.9-6 on CBL-Mariner 2.0, azl3 mariadb 10.11.6-3 on Azure Linux 3.0
CVE-2024-5814
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-40969
MediumCVSS 5.5

f2fs: don't set RO when shutting down f2fs

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
CVE-2024-40969
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-8925
LowCVSS 5.3

Erroneous parsing of multipart form data

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 php 8.1.30-1 on CBL Mariner 2.0, azl3 php 8.3.12-1 on Azure Linux 3.0, cbl2 php 8.1.29-1 on CBL Mariner 2.0, azl3 php 8.3.8-1 on Azure Linux 3.0
Fixed versions8.1.30-1, 8.3.12-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-8925
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42284
HighCVSS 7.8

tipc: Return non-zero value from tipc_udp_addr2str() on error

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.167.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.47.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.164.1-1 on CBL-Mariner 2.0, azl3 kernel 6.6.43.1-7 on Azure Linux 3.0
Fixed versions5.15.167.1-1, 6.6.47.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-42284
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-40973
MediumCVSS 5.5

media: mtk-vcodec: potential null pointer deference in SCP

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
CVE-2024-40973
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-5991
CriticalCVSS 7.5

Buffer overread in domain name matching

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mariadb 10.6.9-4 on CBL Mariner 2.0, azl3 mariadb 10.6.9-6 on Azure Linux 3.0
Fixed versions10.6.9-4, 10.6.9-6
Vendor guidance

CBL-Mariner Releases

CVE-2024-5991
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49852
High

scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-49852
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42074
MediumCVSS 5.5

ASoC: amd: acp: add a null check for chip_pdev structure

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.162.2-1 on CBL Mariner 2.0, azl3 kernel 6.6.43.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL-Mariner 2.0
Fixed versions5.15.162.2-1, 6.6.43.1-7
Vendor guidance

CBL-Mariner Releases

CVE-2024-42074
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-34069
HighCVSS 7.5

Werkzeug's improper usage of a pathname and improper CSRF protection results in the remote command execution

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 python-werkzeug 2.3.7-2 on CBL Mariner 2.0, azl3 python-werkzeug 3.0.3-1 on Azure Linux 3.0, azl3 python-werkzeug 3.0.1-1 on Azure Linux 3.0, cbl2 python-werkzeug 2.3.7-3 on CBL Mariner 2.0
Fixed versions2.3.7-2, 3.0.3-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-34069
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-31951
MediumCVSS 6.5

In the Opaque LSA Extended Link parser in FRRouting (FRR) through 9.1 there can be a buffer overflow and daemon crash in ospf_te_parse_ext_link for OSPF LSA packets during an attempt to read Segment Routing Adjacency SID subTLVs (lengths are not validated).

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 frr 8.5.5-1 on CBL Mariner 2.0, cbl2 frr 8.5.3-6 on CBL Mariner 2.0, cbl2 frr 8.5.3-6 on CBL-Mariner 2.0
Fixed versions8.5.5-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-31951
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-36478
MediumCVSS 5.5

null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.57.1-1 on Azure Linux 3.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0
Fixed versions6.6.57.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-36478
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-21165
MediumCVSS 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Pluggable Auth). Supported versions that are affected are 8.0.37 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mysql 8.0.40-1 on CBL Mariner 2.0, azl3 mysql 8.0.40-1 on Azure Linux 3.0, cbl2 mysql 8.0.36-1 on CBL Mariner 2.0, cbl2 mysql 8.0.36-1 on CBL-Mariner 2.0
Fixed versions8.0.40-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-21165
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-2511
MediumCVSS 5.9

Unbounded memory growth with session handling in TLSv1.3

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 hvloader 1.0.1-6 on CBL Mariner 2.0, cbl2 openssl 1.1.1k-30 on CBL Mariner 2.0, cbl2 cloud-hypervisor-cvm 38.0.72.2-1 on CBL Mariner 2.0, azl3 cloud-hypervisor-cvm 38.0.72.2-1 on Azure Linux 3.0
Fixed versions1.0.1-6, 1.1.1k-30, -, 20240524git3e722403cd16-8
Vendor guidance

CBL-Mariner Releases

CVE-2024-2511
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42065
MediumCVSS 5.5

drm/xe: Add a NULL check in xe_ttm_stolen_mgr_init

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.96.2-1 on Azure Linux 3.0, azl3 kernel 6.6.104.2-4 on Azure Linux 3.0, azl3 kernel 6.6.112.1-2 on Azure Linux 3.0, azl3 kernel 6.6.117.1-1 on Azure Linux 3.0
CVE-2024-42065
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-38381
HighCVSS 7.1

nfc: nci: Fix uninit-value in nci_rx_work

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.162.2-1 on CBL Mariner 2.0, azl3 kernel 6.6.51.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, cbl2 kernel 5.15.176.3-3 on CBL-Mariner 2.0
Fixed versions5.15.162.2-1, 6.6.51.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-38381
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-7347
MediumCVSS 4.7

NGINX MP4 module vulnerability

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 nginx 1.22.1-12 on CBL Mariner 2.0, azl3 nginx 1.25.4-2 on Azure Linux 3.0, cbl2 nginx 1.22.1-13 on CBL Mariner 2.0, azl3 nginx 1.25.4-4 on Azure Linux 3.0
Fixed versions1.22.1-12, 1.25.4-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-7347
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources