Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
18,531Advisories collected
6,564Published or updated in 30 days
8,312Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

18,531 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2024-22189
HighCVSS 7.5

QUIC's Connection ID Mechanism vulnerable to Memory Exhaustion Attack

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 coredns 1.11.1-6 on CBL Mariner 2.0, azl3 coredns 1.11.1-2 on Azure Linux 3.0, azl3 coredns 1.11.1-4 on Azure Linux 3.0, cbl2 coredns 1.11.1-18 on CBL Mariner 2.0
Fixed versions1.11.1-6, 1.11.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-22189
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-33602
MediumCVSS 8.6

nscd: netgroup cache assumes NSS callback uses in-buffer strings

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 glibc 2.38-10 on Azure Linux 3.0, cbl2 glibc 2.35-7 on CBL Mariner 2.0
Fixed versions2.35-7
Vendor guidance

CBL-Mariner Releases

CVE-2024-33602
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-43909
MediumCVSS 5.5

drm/amdgpu/pm: Fix the null pointer dereference for smu7

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.167.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.164.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.164.1-1 on CBL-Mariner 2.0
Fixed versions5.15.167.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-43909
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-47764
Medium

cookie accepts cookie name path and domain with out of bounds characters

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 reaper 3.1.1-13 on CBL Mariner 2.0, cbl2 reaper 3.1.1-18 on CBL-Mariner 2.0, cbl2 reaper 3.1.1-18 on CBL Mariner 2.0
Fixed versions3.1.1-13
Vendor guidance

CBL-Mariner Releases

CVE-2024-47764
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-47747
HighCVSS 7.0

net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-47747
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42227
MediumCVSS 4.7

drm/amd/display: Fix overlapping copy within dml_core_mode_programming

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.96.2-1 on Azure Linux 3.0, azl3 kernel 6.6.96.2-2 on Azure Linux 3.0, azl3 kernel 6.6.104.2-4 on Azure Linux 3.0
CVE-2024-42227
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-44935
MediumCVSS 5.5

sctp: Fix null-ptr-deref in reuseport_add_sock().

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.167.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.164.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.164.1-1 on CBL Mariner 2.0
Fixed versions5.15.167.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-44935
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-33599
HighCVSS 8.1

nscd: Stack-based buffer overflow in netgroup cache

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 glibc 2.38-11 on Azure Linux 3.0, cbl2 glibc 2.35-7 on CBL Mariner 2.0, cbl2 glibc 2.35-7 on CBL-Mariner 2.0
Fixed versions2.38-11, 2.35-7
Vendor guidance

CBL-Mariner Releases

CVE-2024-33599
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-49921
MediumCVSS 5.2

An issue was discovered by Elastic whereby Watcher search input logged the search query results on DEBUG log level. This could lead to raw contents of documents stored in Elasticsearch to be printed in logs. Elastic has released 8.11.2 and 7.17.16 that resolves this issue by removing this excessive logging. This issue only affects users that use Watcher and have a Watch defined that uses the search input and additionally have set the search input’s logger to DEBUG or finer, for example using: org.elasticsearch.xpack.watcher.input.search, org.elasticsearch.xpack.watcher.input, org.elasticsearch.xpack.watcher, or wider, since the loggers are hierarchical.

Mariner

Affected productscbl2 rubygem-elasticsearch 8.3.0-1, azl3 rubygem-elasticsearch 8.9.0-1 on Azure Linux 3.0, cbl2 rubygem-elasticsearch 8.3.0-1 on CBL-Mariner 2.0
CVE-2023-49921
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-26875
Medium

media: pvrusb2: fix uaf in pvr2_context_set_notify

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-5 on Azure Linux 3.0
Fixed versions5.15.167.1-2, 6.6.57.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-26875
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-47755
Medium

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions5.15.167.1-2, 6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-47755
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-43907
MediumCVSS 5.5

drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.167.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.164.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.164.1-1 on CBL Mariner 2.0
Fixed versions5.15.167.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-43907
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-33601
HighCVSS 7.5

nscd: netgroup cache may terminate daemon on memory allocation failure

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 glibc 2.38-11 on Azure Linux 3.0, cbl2 glibc 2.35-7 on CBL Mariner 2.0, cbl2 glibc 2.35-7 on CBL-Mariner 2.0
Fixed versions2.38-11, 2.35-7
Vendor guidance

CBL-Mariner Releases

CVE-2024-33601
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-41810
MediumCVSS 6.1

HTML injection in HTTP redirect body

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 python-twisted 22.10.0-3 on CBL Mariner 2.0, azl3 python-twisted 22.10.0-3 on Azure Linux 3.0, azl3 python-twisted 22.10.0-4 on Azure Linux 3.0, cbl2 python-twisted 22.10.0-4 on CBL Mariner 2.0
Fixed versions22.10.0-3
Vendor guidance

CBL-Mariner Releases

CVE-2024-41810
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-30260
LowCVSS 4.3

Undici's Proxy-Authorization header not cleared on cross-origin redirect for dispatch request stream pipeline

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 nodejs18 18.20.2-1 on CBL Mariner 2.0, azl3 nodejs 20.14.0-1 on Azure Linux 3.0, azl3 nodejs 20.10.0-2 on Azure Linux 3.0, cbl2 nodejs18 18.18.2-7 on CBL Mariner 2.0
Fixed versions18.20.2-1, 20.14.0-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-30260
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2021-47324
HighCVSS 8.8

watchdog: Fix possible use-after-free in wdt_startup()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, cbl2 kernel 5.15.176.3-3 on CBL-Mariner 2.0, azl3 kernel 6.6.82.1-1 on Azure Linux 3.0
Fixed versions5.15.179.1-1, 6.6.85.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2021-47324
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-47749
MediumCVSS 5.5

RDMA/cxgb4: Added NULL check for lookup_atid

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-47749
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-43905
MediumCVSS 5.5

drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.167.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Fixed versions5.15.167.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-43905
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-33600
MediumCVSS 5.9

nscd: Null pointer crashes after notfound response

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 glibc 2.38-11 on Azure Linux 3.0, cbl2 glibc 2.35-7 on CBL-Mariner 2.0, cbl2 glibc 2.35-7 on CBL Mariner 2.0
Fixed versions2.38-11, 2.35-7
Vendor guidance

CBL-Mariner Releases

CVE-2024-33600
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42230
MediumCVSS 4.4

powerpc/pseries: Fix scv instruction crash with kexec

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.43.1-7 on Azure Linux 3.0, azl3 kernel 6.6.35.1-5 on Azure Linux 3.0
Fixed versions6.6.43.1-7
Vendor guidance

CBL-Mariner Releases

CVE-2024-42230
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-50966
HighCVSS 5.3

erlang-jose (aka JOSE for Erlang and Elixir) through 1.11.6 allow attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value in a JOSE header.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 rabbitmq-server 3.11.24-2 on CBL Mariner 2.0, azl3 rabbitmq-server 3.13.7-1 on Azure Linux 3.0, azl3 rabbitmq-server 3.13.0-1 on Azure Linux 3.0, cbl2 rabbitmq-server 3.11.24-3 on CBL Mariner 2.0
Fixed versions3.11.24-2, 3.13.7-1
Vendor guidance

CBL-Mariner Releases

CVE-2023-50966
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42152
MediumCVSS 4.7

nvmet: fix a possible leak when destroy a ctrl during qp establishment

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.164.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.43.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.162.2-1 on CBL-Mariner 2.0, azl3 kernel 6.6.35.1-5 on Azure Linux 3.0
Fixed versions5.15.164.1-1, 6.6.43.1-7
Vendor guidance

CBL-Mariner Releases

CVE-2024-42152
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-43902
MediumCVSS 5.5

drm/amd/display: Add null checker before passing variables

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.167.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.164.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.164.1-1 on CBL-Mariner 2.0
Fixed versions5.15.167.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-43902
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-47554
MediumCVSS 5.3

Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 apache-commons-io 2.14.0-1 on CBL Mariner 2.0, azl3 apache-commons-io 2.14.0-1 on Azure Linux 3.0, cbl2 javapackages-bootstrap 1.5.0-6 on CBL Mariner 2.0
Fixed versions2.14.0-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-47554
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources