Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
18,531Advisories collected
6,564Published or updated in 30 days
8,312Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

18,531 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2024-38545
HighCVSS 7.8

RDMA/hns: Fix UAF for cq async event

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL-Mariner 2.0
Fixed versions5.15.176.3-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-38545
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42075
MediumCVSS 5.5

bpf: Fix remap of arena.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.162.2-1 on CBL Mariner 2.0, azl3 kernel 6.6.43.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.180.1-1 on CBL-Mariner 2.0
Fixed versions5.15.162.2-1, 6.6.43.1-7
Vendor guidance

CBL-Mariner Releases

CVE-2024-42075
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-31852
MediumCVSS 5.9

LLVM before 18.1.3 generates code in which the LR register can be overwritten without data being saved to the stack and thus there can sometimes be an exploitable error in the flow of control. This affects the ARM backend and can be demonstrated with Clang. NOTE: the vendor perspective is "we don't have strong objections for a CVE to be created ... It does seem that the likelihood of this miscompile enabling an exploit remains very low because the miscompile resulting in this JOP gadget is such that the function is most likely to crash on most valid inputs to the function. So if this function is covered by any testing the miscompile is most likely to be discovered before the binary is shipped to production."

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 rust 1.72.0-8 on CBL Mariner 2.0, cbl2 clang16 16.0.0-1 on CBL Mariner 2.0, azl3 libcxx 18.1.2-3 on Azure Linux 3.0, azl3 compiler-rt 18.1.2-2 on Azure Linux 3.0
Fixed versions1.72.0-8, 16.0.0-1, 18.1.2-3, 18.1.2-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-31852
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-41011
HighCVSS 7.8

drm/amdkfd: don't allow mapping the MMIO HDP page with large pages

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.167.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.164.1-1 on CBL-Mariner 2.0, cbl2 kernel 5.15.164.1-1 on CBL Mariner 2.0
Fixed versions5.15.167.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-41011
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-28182
MediumCVSS 5.3

Reading unbounded number of HTTP/2 CONTINUATION frames to cause excessive CPU usage

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 fluent-bit 3.0.6-1 on CBL Mariner 2.0, cbl2 rust 1.68.0-1 on CBL Mariner 2.0, cbl2 nodejs18 18.20.3-1 on CBL Mariner 2.0, cbl2 cmake 3.21.4-14 on CBL Mariner 2.0
Fixed versions3.0.6-1, 1.68.0-1, 18.20.3-1, 3.21.4-14
Vendor guidance

CBL-Mariner Releases

CVE-2024-28182
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-34062
MediumCVSS 4.8

tqdm CLI arguments injection attack

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 conda 24.1.2-2 on Azure Linux 3.0, azl3 python-tqdm 4.66.2-2 on Azure Linux 3.0, azl3 conda 4.11.0-1 on Azure Linux 3.0, cbl2 python-tqdm 4.63.1-3 on CBL Mariner 2.0
Fixed versions24.1.2-2, 4.66.2-2, 4.63.1-3
Vendor guidance

CBL-Mariner Releases

CVE-2024-34062
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-43802
MediumCVSS 4.5

heap-buffer-overflow in ins_typebuf() in Vim < 9.1.0697

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 vim 9.1.0697-1 on CBL Mariner 2.0, azl3 vim 9.1.0697-1 on Azure Linux 3.0, cbl2 vim 9.1.0791-4 on CBL-Mariner 2.0, azl3 vim 9.1.0791-4 on Azure Linux 3.0
Fixed versions9.1.0697-1, 9.1.1164-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-43802
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-47684
MediumCVSS 5.5

tcp: check skb is non-NULL in tcp_rto_delta_us()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-47684
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42253
MediumCVSS 4.7

gpio: pca953x: fix pca953x_irq_bus_sync_unlock race

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1
CVE-2024-42253
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-2975
MediumCVSS 5.3

AES-SIV implementation ignores empty associated data entries

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 hvloader 1.0.1-5 on CBL Mariner 2.0, cbl2 hvloader 1.0.1-6 on CBL Mariner 2.0, cbl2 hvloader 1.0.1-5 on CBL-Mariner 2.0
Fixed versions1.0.1-6
Vendor guidance

CBL-Mariner Releases

CVE-2023-2975
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2019-20503
MediumCVSS 6.5

usrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 usrsctp 0.9.5.0-1 on CBL Mariner 2.0, azl3 usrsctp 0.9.5.0-1 on Azure Linux 3.0
Fixed versions0.9.5.0-1
Vendor guidance

CBL-Mariner Releases

CVE-2019-20503
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49859
MediumCVSS 7.8

f2fs: fix to check atomic_file in f2fs ioctl interfaces

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.56.1-5 on Azure Linux 3.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-49859
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-49582
MediumCVSS 5.5

Apache Portable Runtime (APR): Unexpected lax shared memory permissions

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 apr 1.7.4-1 on Azure Linux 3.0, cbl2 apr 1.7.2-2 on CBL Mariner 2.0, cbl2 apr 1.7.2-2 on CBL-Mariner 2.0, cbl2 apr 1.7.5-1 on CBL Mariner 2.0
Fixed versions1.7.5-1
Vendor guidance

CBL-Mariner Releases

CVE-2023-49582
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42225
HighCVSS 7.5

wifi: mt76: replace skb_put with skb_put_zero

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.163.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.43.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.162.2-1 on CBL Mariner 2.0, azl3 kernel 6.6.35.1-5 on Azure Linux 3.0
Fixed versions5.15.163.1-1, 6.6.43.1-7, 5.15.164.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-42225
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-4133
MediumCVSS 5.5

Kernel: cxgb4: use-after-free in ch_flower_stats_cb()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 hyperv-daemons 5.15.180.1-1, cbl2 hyperv-daemons 5.15.180.1-1 on CBL-Mariner 2.0
CVE-2023-4133
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-47757
HighCVSS 7.1

nilfs2: fix potential oob read in nilfs_btree_check_delete()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-47757
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2022-48887
MediumCVSS 5.5

drm/vmwgfx: Remove rcu locks from user resources

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1
CVE-2022-48887
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-43886
MediumCVSS 5.5

drm/amd/display: Add null check in resource_log_pipe_topology_update

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.112.1-2 on Azure Linux 3.0, azl3 kernel 6.6.117.1-1 on Azure Linux 3.0, azl3 kernel 6.6.119.3-1 on Azure Linux 3.0
CVE-2024-43886
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-35955
HighCVSS 8.8

kprobes: Fix possible use-after-free issue on kprobe registration

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.157.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.28.1-1 on Azure Linux 3.0, azl3 kernel 6.6.82.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0
Fixed versions5.15.157.1-1, 6.6.28.1-1, 5.15.179.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-35955
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42083
MediumCVSS 5.5

ionic: fix kernel panic due to multi-buffer handling

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.162.2-1 on CBL Mariner 2.0, azl3 kernel 6.6.43.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.92.2-1 on Azure Linux 3.0
Fixed versions5.15.162.2-1, 6.6.43.1-7
Vendor guidance

CBL-Mariner Releases

CVE-2024-42083
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-34088
HighCVSS 7.5

In FRRouting (FRR) through 9.1 it is possible for the get_edge() function in ospf_te.c in the OSPF daemon to return a NULL pointer. In cases where calling functions do not handle the returned NULL value the OSPF daemon crashes leading to denial of service.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 frr 8.5.3-6 on CBL Mariner 2.0, cbl2 frr 8.5.3-6 on CBL-Mariner 2.0
Fixed versions8.5.3-6
Vendor guidance

CBL-Mariner Releases

CVE-2024-34088
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-52755
HighCVSS 8.4

ksmbd: fix slab out of bounds write in smb_inherit_dacl()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.82.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0, cbl2 kernel 5.15.176.3-3 on CBL-Mariner 2.0, cbl2 kernel 5.15.140.1-1 on CBL Mariner 2.0
Fixed versions6.6.3.1-1, 5.15.179.1-1, 5.15.140.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2023-52755
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-6874
MediumCVSS 4.3

macidn punycode buffer overread

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 curl 8.8.0-1 on CBL Mariner 2.0, azl3 cmake 3.30.3-2 on Azure Linux 3.0, azl3 curl 8.8.0-1 on Azure Linux 3.0, azl3 cmake 3.30.3-6 on Azure Linux 3.0
Fixed versions8.8.0-1, 3.30.3-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-6874
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-36972
HighCVSS 7.5

af_unix: Update unix_sk(sk)->oob_skb under sk_receive_queue lock.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0, azl3 kernel 6.6.64.2-9 on Azure Linux 3.0, azl3 kernel 6.6.78.1-3 on Azure Linux 3.0, cbl2 kernel 5.15.176.3-3 on CBL Mariner 2.0
Fixed versions5.15.176.3-1, 6.6.64.2-9, 5.15.179.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-36972
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources