Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
18,531Advisories collected
6,564Published or updated in 30 days
8,312Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

18,531 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2024-31080
HighCVSS 7.3

Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedevents

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 xorg-x11-server 1.20.10-11 on CBL Mariner 2.0, cbl2 xorg-x11-server 1.20.10-15 on CBL Mariner 2.0, cbl2 xorg-x11-server 1.20.10-15 on CBL-Mariner 2.0
Fixed versions1.20.10-11
Vendor guidance

CBL-Mariner Releases

CVE-2024-31080
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-21193
MediumCVSS 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS). Supported versions that are affected are 8.0.39 and prior 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mysql 8.0.40-1 on CBL Mariner 2.0, azl3 mysql 8.0.40-1 on Azure Linux 3.0, cbl2 mysql 8.0.36-1 on CBL Mariner 2.0, azl3 mysql 8.0.36-1 on Azure Linux 3.0
Fixed versions8.0.40-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-21193
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-31083
HighCVSS 7.8

Xorg-x11-server: use-after-free in procrenderaddglyphs

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 xorg-x11-server 1.20.10-11 on CBL Mariner 2.0, cbl2 xorg-x11-server 1.20.10-15 on CBL Mariner 2.0, cbl2 xorg-x11-server 1.20.10-15 on CBL-Mariner 2.0
Fixed versions1.20.10-11
Vendor guidance

CBL-Mariner Releases

CVE-2024-31083
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-40644
MediumCVSS 6.8

gitoxide's gix-path can use a fake program files location

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 rust 1.75.0-14 on Azure Linux 3.0, cbl2 rust 1.72.0-10 on CBL Mariner 2.0, cbl2 rust 1.72.0-10 on CBL-Mariner 2.0, azl3 rust 1.86.0-1 on Azure Linux 3.0
CVE-2024-40644
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-41098
MediumCVSS 5.5

ata: libata-core: Fix null pointer dereference on error

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.167.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.43.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
Fixed versions5.15.167.1-1, 6.6.43.1-7
Vendor guidance

CBL-Mariner Releases

CVE-2024-41098
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-31081
HighCVSS 7.3

Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevice

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 xorg-x11-server 1.20.10-11 on CBL Mariner 2.0, cbl2 xorg-x11-server 1.20.10-15 on CBL Mariner 2.0, cbl2 xorg-x11-server 1.20.10-15 on CBL-Mariner 2.0
Fixed versions1.20.10-11
Vendor guidance

CBL-Mariner Releases

CVE-2024-31081
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2020-8127
MediumCVSS 6.1

Insufficient validation in cross-origin communication (postMessage) in reveal.js version 3.9.1 and earlier allow attackers to perform cross-site scripting attacks.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 orangefs 2.9.8-3 on Azure Linux 3.0, cbl2 orangefs 2.9.8-3 on CBL Mariner 2.0, cbl2 orangefs 2.9.8-3 on CBL-Mariner 2.0
CVE-2020-8127
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-47674
MediumCVSS 5.5

mm: avoid leaving partial pfn mappings around in error case

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-47674
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-43398
MediumCVSS 5.9

REXML denial of service vulnerability

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 ruby 3.3.5-1 on Azure Linux 3.0, azl3 rubygem-rexml 3.3.9-1 on Azure Linux 3.0, cbl2 ruby 3.1.4-9 on CBL Mariner 2.0, cbl2 rubygem-rexml 3.2.9-1 on CBL Mariner 2.0
Fixed versions3.3.5-1, 3.3.9-1, 3.1.7-1, 3.2.9-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-43398
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-31082
HighCVSS 7.3

Xorg-x11-server: heap buffer overread/data leakage in procappledricreatepixmap

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 xorg-x11-server 1.20.10-11 on CBL Mariner 2.0, cbl2 xorg-x11-server 1.20.10-15 on CBL Mariner 2.0, cbl2 xorg-x11-server 1.20.10-15 on CBL-Mariner 2.0
Fixed versions1.20.10-11
Vendor guidance

CBL-Mariner Releases

CVE-2024-31082
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-39496
HighCVSS 7.8

btrfs: zoned: fix use-after-free due to race with dev replace

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.35.1-5 on Azure Linux 3.0, azl3 kernel 6.6.22.1-2 on Azure Linux 3.0
Fixed versions-, 6.6.35.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-39496
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2020-8910
MediumCVSS 6.5

Auth Bypass in Google's Closure-Library

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 python-tensorboard 2.11.0-3 on CBL-Mariner 2.0, azl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0, cbl2 python-tensorboard 2.11.0-3 on CBL Mariner 2.0
CVE-2020-8910
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-21166
MediumCVSS 5.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized creation deletion or modification access to critical data or all MySQL Server accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 5.9 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H).

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mysql 8.0.40-1 on CBL Mariner 2.0, azl3 mysql 8.0.40-1 on Azure Linux 3.0, cbl2 mysql 8.0.36-1 on CBL Mariner 2.0, azl3 mysql 8.0.36-1 on Azure Linux 3.0
Fixed versions8.0.40-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-21166
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42240
MediumCVSS 5.5

x86/bhi: Avoid warning in #DB handler due to BHI mitigation

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.167.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.43.1-7 on Azure Linux 3.0, azl3 kernel 6.6.35.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.180.1-1 on CBL-Mariner 2.0
Fixed versions5.15.167.1-1, 6.6.43.1-7
Vendor guidance

CBL-Mariner Releases

CVE-2024-42240
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-1975
HighCVSS 7.5

SIG(0) can be used to exhaust CPU resources

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 bind 9.20.0-1 on Azure Linux 3.0, cbl2 bind 9.16.50-1 on CBL Mariner 2.0, cbl2 dhcp 4.4.3.P1-2 on CBL Mariner 2.0, cbl2 bind 9.16.50-1 on CBL-Mariner 2.0
Fixed versions9.20.0-1, 9.16.50-1, 4.4.3.P1-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-1975
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-21162
MediumCVSS 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mysql 8.0.40-1 on CBL Mariner 2.0, azl3 mysql 8.0.40-1 on Azure Linux 3.0, cbl2 mysql 8.0.36-1 on CBL Mariner 2.0, azl3 mysql 8.0.36-1 on Azure Linux 3.0
Fixed versions8.0.40-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-21162
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-8088
High

Infinite loop when iterating over zip archive entry names from zipfile.Path

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 python3 3.9.19-5 on CBL Mariner 2.0, azl3 tensorflow 2.16.1-7 on Azure Linux 3.0, azl3 python3 3.12.3-4 on Azure Linux 3.0, cbl2 python3 3.9.19-13 on CBL Mariner 2.0
Fixed versions3.9.19-5, 2.16.1-7, 3.12.3-4
Vendor guidance

CBL-Mariner Releases

CVE-2024-8088
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-0874
MediumCVSS 5.3

Coredns: cd bit response is cached and served later

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 coredns 1.11.1-8 on CBL Mariner 2.0, azl3 coredns 1.11.1-2 on Azure Linux 3.0, azl3 coredns 1.11.1-4 on Azure Linux 3.0, cbl2 coredns 1.11.1-18 on CBL Mariner 2.0
Fixed versions1.11.1-8, 1.11.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2024-0874
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42154
MediumCVSS 4.4

tcp_metrics: validate source addr length

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.164.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.43.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.162.2-1 on CBL-Mariner 2.0, azl3 kernel 6.6.35.1-5 on Azure Linux 3.0
Fixed versions5.15.164.1-1, 6.6.43.1-7
Vendor guidance

CBL-Mariner Releases

CVE-2024-42154
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-39908
MediumCVSS 4.3

Denial of service in REXML

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 ruby 3.3.5-1 on Azure Linux 3.0, azl3 rubygem-rexml 3.3.4-1 on Azure Linux 3.0, cbl2 rubygem-rexml 3.2.7-4 on CBL Mariner 2.0, cbl2 ruby 3.1.4-9 on CBL Mariner 2.0
Fixed versions3.3.5-1, 3.3.4-1, 3.2.7-4, 3.1.7-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-39908
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-4076
HighCVSS 7.5

Assertion failure when serving both stale cache data and authoritative zone content

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 bind 9.20.0-1 on Azure Linux 3.0, cbl2 bind 9.16.50-1 on CBL Mariner 2.0, azl3 bind 9.19.21-1 on Azure Linux 3.0, cbl2 bind 9.16.50-1 on CBL-Mariner 2.0
Fixed versions9.20.0-1, 9.16.50-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-4076
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-21127
MediumCVSS 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 mysql 8.0.40-1 on CBL Mariner 2.0, azl3 mysql 8.0.40-1 on Azure Linux 3.0, azl3 mysql 8.0.36-1 on Azure Linux 3.0, cbl2 mysql 8.0.36-1 on CBL Mariner 2.0
Fixed versions8.0.40-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-21127
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42123
MediumCVSS 4.4

drm/amdgpu: fix double free err_addr pointer warnings

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.96.2-1 on Azure Linux 3.0, azl3 kernel 6.6.112.1-2 on Azure Linux 3.0, azl3 kernel 6.6.117.1-1 on Azure Linux 3.0, azl3 kernel 6.6.121.1-1 on Azure Linux 3.0
CVE-2024-42123
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-38665
MediumCVSS 5.5

Null pointer dereference in ieee_write_file in nasm 2.16rc0 allows attackers to cause a denial of service (crash).

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 tensorflow 2.16.1-9 on Azure Linux 3.0, azl3 nasm 2.16.01-2 on Azure Linux 3.0, azl3 nasm 2.16.01-1 on Azure Linux 3.0, cbl2 tensorflow 2.11.1-2 on CBL Mariner 2.0
CVE-2023-38665
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources