September 2024 Security Updates Security Update secure@microsoft.com The Microsoft Security Response Center (MSRC) identifies, monitors, resolves, and responds to security incidents and Microsoft software security vulnerabilities. For more information, see http://www.microsoft.com/security/msrc. 2024-Sep 2024-Sep Final 1.0 537 2026-10-21T01:08:48 September 2024 Security Updates 2024-09-10T00:00:00 2026-10-21T01:08:48 <h2 id="this-release-consists-of-the-following-86-microsoft-cves">This release consists of the following 86 Microsoft CVEs:</h2> <table> <thead> <tr> <th>Tag</th> <th>CVE</th> <th>Base Score</th> <th>CVSS Vector</th> <th>Exploitability</th> <th>FAQs?</th> <th>Workarounds?</th> <th>Mitigations?</th> <th></th> </tr> </thead> <tbody> <tr> <td></td> <td>Windows TCP/IP</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-21416">CVE-2024-21416</a></td> <td>8.1</td> <td>CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td> <td>Exploitation Less Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> </tr> <tr> <td>SQL Server</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-26186">CVE-2024-26186</a></td> <td>8.8</td> <td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td> <td>Exploitation Less Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>SQL Server</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-26191">CVE-2024-26191</a></td> <td>8.8</td> <td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td> <td>Exploitation Less Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Windows Security Zone Mapping</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-30073">CVE-2024-30073</a></td> <td>7.8</td> <td>CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td> <td>Exploitation Less Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>SQL Server</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-37335">CVE-2024-37335</a></td> <td>8.8</td> <td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td> <td>Exploitation Less Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>SQL Server</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-37337">CVE-2024-37337</a></td> <td>7.1</td> <td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C</td> <td>Exploitation Less Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>SQL Server</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-37338">CVE-2024-37338</a></td> <td>8.8</td> <td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td> <td>Exploitation Less Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>SQL Server</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-37339">CVE-2024-37339</a></td> <td>8.8</td> <td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td> <td>Exploitation Less Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>SQL Server</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-37340">CVE-2024-37340</a></td> <td>8.8</td> <td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td> <td>Exploitation Less Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>SQL Server</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-37341">CVE-2024-37341</a></td> <td>8.8</td> <td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td> <td>Exploitation Less Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>SQL Server</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-37342">CVE-2024-37342</a></td> <td>7.1</td> <td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C</td> <td>Exploitation Less Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>SQL Server</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-37965">CVE-2024-37965</a></td> <td>8.8</td> <td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td> <td>Exploitation Less Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>SQL Server</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-37966">CVE-2024-37966</a></td> <td>7.1</td> <td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C</td> <td>Exploitation Less Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>SQL Server</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-37980">CVE-2024-37980</a></td> <td>8.8</td> <td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td> <td>Exploitation Less Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Windows Installer</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-38014">CVE-2024-38014</a></td> <td>7.8</td> <td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C</td> <td>Exploitation Detected</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Microsoft Office Visio</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-38016">CVE-2024-38016</a></td> <td>7.8</td> <td>CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td> <td>Exploitation Less Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Microsoft Office SharePoint</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-38018">CVE-2024-38018</a></td> <td>8.8</td> <td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td> <td>Exploitation More Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Windows TCP/IP</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-38045">CVE-2024-38045</a></td> <td>8.1</td> <td>CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td> <td>Exploitation Less Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Windows PowerShell</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-38046">CVE-2024-38046</a></td> <td>7.8</td> <td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td> <td>Exploitation Less Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Windows Network Address Translation (NAT)</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-38119">CVE-2024-38119</a></td> <td>7.5</td> <td>CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td> <td>Exploitation Less Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>GroupMe</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-38183">CVE-2024-38183</a></td> <td>8.8</td> <td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td> <td>Exploitation Less Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Azure Network Watcher</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-38188">CVE-2024-38188</a></td> <td>7.1</td> <td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C</td> <td>Exploitation Less Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Azure Web Apps</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-38194">CVE-2024-38194</a></td> <td>8.4</td> <td>CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L/E:U/RL:O/RC:C</td> <td>Exploitation Less Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Azure Stack</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-38216">CVE-2024-38216</a></td> <td>8.2</td> <td>CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:L/E:U/RL:O/RC:C</td> <td>Exploitation Less Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Windows Mark of the Web (MOTW)</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-38217">CVE-2024-38217</a></td> <td>5.4</td> <td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:F/RL:O/RC:C</td> <td>Exploitation Detected</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Azure Stack</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-38220">CVE-2024-38220</a></td> <td>9.0</td> <td>CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C</td> <td>Exploitation Less Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Microsoft Edge (Chromium-based)</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-38221">CVE-2024-38221</a></td> <td>4.3</td> <td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C</td> <td>Exploitation Less Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Microsoft Edge (Chromium-based)</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-38222">CVE-2024-38222</a></td> <td>6.5</td> <td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C</td> <td>Exploitation Less Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Dynamics Business Central</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-38225">CVE-2024-38225</a></td> <td>8.8</td> <td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td> <td>Exploitation Less Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Microsoft Office Publisher</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-38226">CVE-2024-38226</a></td> <td>7.3</td> <td>CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C</td> <td>Exploitation Detected</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Microsoft Office SharePoint</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-38227">CVE-2024-38227</a></td> <td>7.2</td> <td>CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td> <td>Exploitation More Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Microsoft Office SharePoint</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-38228">CVE-2024-38228</a></td> <td>7.2</td> <td>CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td> <td>Exploitation More Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Windows Standards-Based Storage Management Service</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-38230">CVE-2024-38230</a></td> <td>6.5</td> <td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C</td> <td>Exploitation Less Likely</td> <td>No</td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Windows Remote Desktop Licensing Service</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-38231">CVE-2024-38231</a></td> <td>6.5</td> <td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C</td> <td>Exploitation Less Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Windows Network Virtualization</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-38232">CVE-2024-38232</a></td> <td>7.5</td> <td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C</td> <td>Exploitation Less Likely</td> <td>No</td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Windows Network Virtualization</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-38233">CVE-2024-38233</a></td> <td>7.5</td> <td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C</td> <td>Exploitation Less Likely</td> <td>No</td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Windows Network Virtualization</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-38234">CVE-2024-38234</a></td> <td>6.5</td> <td>CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C</td> <td>Exploitation Less Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Role: Windows Hyper-V</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-38235">CVE-2024-38235</a></td> <td>6.5</td> <td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C</td> <td>Exploitation Less Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Windows DHCP Server</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-38236">CVE-2024-38236</a></td> <td>7.5</td> <td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C</td> <td>Exploitation Less Likely</td> <td>No</td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Microsoft Streaming Service</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-38237">CVE-2024-38237</a></td> <td>7.8</td> <td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td> <td>Exploitation More Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Microsoft Streaming Service</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-38238">CVE-2024-38238</a></td> <td>7.8</td> <td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td> <td>Exploitation More Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Windows Kerberos</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-38239">CVE-2024-38239</a></td> <td>7.2</td> <td>CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td> <td>Exploitation Less Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Windows Remote Access Connection Manager</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-38240">CVE-2024-38240</a></td> <td>8.1</td> <td>CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td> <td>Exploitation Less Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Microsoft Streaming Service</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-38241">CVE-2024-38241</a></td> <td>7.8</td> <td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td> <td>Exploitation More Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Microsoft Streaming Service</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-38242">CVE-2024-38242</a></td> <td>7.8</td> <td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td> <td>Exploitation More Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Microsoft Streaming Service</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-38243">CVE-2024-38243</a></td> <td>7.8</td> <td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td> <td>Exploitation More Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Microsoft Streaming Service</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-38244">CVE-2024-38244</a></td> <td>7.8</td> <td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td> <td>Exploitation More Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Microsoft Streaming Service</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-38245">CVE-2024-38245</a></td> <td>7.8</td> <td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td> <td>Exploitation More Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Windows Win32K - GRFX</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-38246">CVE-2024-38246</a></td> <td>7.0</td> <td>CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td> <td>Exploitation More Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Microsoft Graphics Component</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-38247">CVE-2024-38247</a></td> <td>7.8</td> <td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td> <td>Exploitation More Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Windows Storage</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-38248">CVE-2024-38248</a></td> <td>7.0</td> <td>CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C</td> <td>Exploitation Less Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Microsoft Graphics Component</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-38249">CVE-2024-38249</a></td> <td>7.8</td> <td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td> <td>Exploitation More Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Microsoft Graphics Component</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-38250">CVE-2024-38250</a></td> <td>7.8</td> <td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td> <td>Exploitation Less Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Windows Win32K - ICOMP</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-38252">CVE-2024-38252</a></td> <td>7.8</td> <td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td> <td>Exploitation More Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Windows Win32K - ICOMP</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-38253">CVE-2024-38253</a></td> <td>7.8</td> <td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td> <td>Exploitation More Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Windows Authentication Methods</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-38254">CVE-2024-38254</a></td> <td>5.5</td> <td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td> <td>Exploitation Less Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Windows Kernel-Mode Drivers</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-38256">CVE-2024-38256</a></td> <td>5.5</td> <td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td> <td>Exploitation Less Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Windows AllJoyn API</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-38257">CVE-2024-38257</a></td> <td>7.5</td> <td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td> <td>Exploitation Less Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Windows Remote Desktop Licensing Service</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-38258">CVE-2024-38258</a></td> <td>6.5</td> <td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td> <td>Exploitation Less Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Microsoft Management Console</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-38259">CVE-2024-38259</a></td> <td>8.8</td> <td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td> <td>Exploitation Less Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Windows Remote Desktop Licensing Service</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-38260">CVE-2024-38260</a></td> <td>8.8</td> <td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td> <td>Exploitation Less Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Windows Remote Desktop Licensing Service</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-38263">CVE-2024-38263</a></td> <td>7.5</td> <td>CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td> <td>Exploitation Less Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Windows Remote Desktop Licensing Service</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-43454">CVE-2024-43454</a></td> <td>7.1</td> <td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L/E:U/RL:O/RC:C</td> <td>Exploitation Less Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Windows Remote Desktop Licensing Service</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-43455">CVE-2024-43455</a></td> <td>8.8</td> <td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td> <td>Exploitation Less Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Windows Setup and Deployment</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-43457">CVE-2024-43457</a></td> <td>7.8</td> <td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td> <td>Exploitation More Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Windows Network Virtualization</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-43458">CVE-2024-43458</a></td> <td>7.7</td> <td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C</td> <td>Exploitation Less Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Dynamics Business Central</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-43460">CVE-2024-43460</a></td> <td>8.1</td> <td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C</td> <td>Exploitation Less Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Windows MSHTML Platform</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-43461">CVE-2024-43461</a></td> <td>8.8</td> <td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C</td> <td>Exploitation Detected</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Microsoft Office Visio</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-43463">CVE-2024-43463</a></td> <td>7.8</td> <td>CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td> <td>Exploitation Less Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Microsoft Office SharePoint</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-43464">CVE-2024-43464</a></td> <td>7.2</td> <td>CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td> <td>Exploitation More Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Microsoft Office Excel</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-43465">CVE-2024-43465</a></td> <td>7.8</td> <td>CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td> <td>Exploitation Less Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Microsoft Office SharePoint</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-43466">CVE-2024-43466</a></td> <td>6.5</td> <td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C</td> <td>Exploitation Less Likely</td> <td>No</td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Windows Remote Desktop Licensing Service</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-43467">CVE-2024-43467</a></td> <td>7.5</td> <td>CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td> <td>Exploitation Less Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Azure CycleCloud</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-43469">CVE-2024-43469</a></td> <td>8.8</td> <td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td> <td>Exploitation Less Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Azure Network Watcher</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-43470">CVE-2024-43470</a></td> <td>7.3</td> <td>CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td> <td>Exploitation Less Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>SQL Server</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-43474">CVE-2024-43474</a></td> <td>7.6</td> <td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L/E:U/RL:O/RC:C</td> <td>Exploitation Less Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Windows Admin Center</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-43475">CVE-2024-43475</a></td> <td>7.3</td> <td>CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C</td> <td>Exploitation Less Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Microsoft Dynamics 365 (on-premises)</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-43476">CVE-2024-43476</a></td> <td>7.6</td> <td>CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C</td> <td>Exploitation Less Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Power Automate</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-43479">CVE-2024-43479</a></td> <td>8.5</td> <td>CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C</td> <td>Exploitation Less Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Microsoft Outlook for iOS</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-43482">CVE-2024-43482</a></td> <td>6.5</td> <td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td> <td>Exploitation Less Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Windows Mark of the Web (MOTW)</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-43487">CVE-2024-43487</a></td> <td>6.5</td> <td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:F/RL:O/RC:C</td> <td>Exploitation More Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Microsoft Edge (Chromium-based)</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-43489">CVE-2024-43489</a></td> <td>6.5</td> <td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C</td> <td>Exploitation Less Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Windows Update</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-43491">CVE-2024-43491</a></td> <td>9.8</td> <td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C</td> <td>Exploitation Detected</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Microsoft AutoUpdate (MAU)</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-43492">CVE-2024-43492</a></td> <td>7.8</td> <td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td> <td>Exploitation Less Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Windows Libarchive</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-43495">CVE-2024-43495</a></td> <td>7.3</td> <td>CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td> <td>Exploitation Less Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> <tr> <td>Microsoft Edge (Chromium-based)</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-43496">CVE-2024-43496</a></td> <td>6.5</td> <td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td> <td>Exploitation Less Likely</td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> <td></td> </tr> </tbody> </table> <h2 id="we-are-republishing-18-non-microsoft-cves">We are republishing 18 non-Microsoft CVEs:</h2> <table> <thead> <tr> <th>CNA</th> <th>Tag</th> <th>CVE</th> <th>FAQs?</th> <th>Workarounds?</th> <th>Mitigations?</th> </tr> </thead> <tbody> <tr> <td>Chrome</td> <td>Microsoft Edge (Chromium-based)</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-7970">CVE-2024-7970</a></td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> </tr> <tr> <td>Chrome</td> <td>Microsoft Edge (Chromium-based)</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-8194">CVE-2024-8194</a></td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> </tr> <tr> <td>Chrome</td> <td>Microsoft Edge (Chromium-based)</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-8198">CVE-2024-8198</a></td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> </tr> <tr> <td>Chrome</td> <td>Microsoft Edge (Chromium-based)</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-8362">CVE-2024-8362</a></td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> </tr> <tr> <td>Chrome</td> <td>Microsoft Edge (Chromium-based)</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-8636">CVE-2024-8636</a></td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> </tr> <tr> <td>Chrome</td> <td>Microsoft Edge (Chromium-based)</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-8637">CVE-2024-8637</a></td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> </tr> <tr> <td>Chrome</td> <td>Microsoft Edge (Chromium-based)</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-8638">CVE-2024-8638</a></td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> </tr> <tr> <td>Chrome</td> <td>Microsoft Edge (Chromium-based)</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-8639">CVE-2024-8639</a></td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> </tr> <tr> <td>Chrome</td> <td>Microsoft Edge (Chromium-based)</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-8904">CVE-2024-8904</a></td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> </tr> <tr> <td>Chrome</td> <td>Microsoft Edge (Chromium-based)</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-8905">CVE-2024-8905</a></td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> </tr> <tr> <td>Chrome</td> <td>Microsoft Edge (Chromium-based)</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-8906">CVE-2024-8906</a></td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> </tr> <tr> <td>Chrome</td> <td>Microsoft Edge (Chromium-based)</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-8907">CVE-2024-8907</a></td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> </tr> <tr> <td>Chrome</td> <td>Microsoft Edge (Chromium-based)</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-8908">CVE-2024-8908</a></td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> </tr> <tr> <td>Chrome</td> <td>Microsoft Edge (Chromium-based)</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-8909">CVE-2024-8909</a></td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> </tr> <tr> <td>Chrome</td> <td>Microsoft Edge (Chromium-based)</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-9120">CVE-2024-9120</a></td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> </tr> <tr> <td>Chrome</td> <td>Microsoft Edge (Chromium-based)</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-9121">CVE-2024-9121</a></td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> </tr> <tr> <td>Chrome</td> <td>Microsoft Edge (Chromium-based)</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-9122">CVE-2024-9122</a></td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> </tr> <tr> <td>Chrome</td> <td>Microsoft Edge (Chromium-based)</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-9123">CVE-2024-9123</a></td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> </tr> </tbody> </table> <h2 id="security-update-guide-blog-posts">Security Update Guide Blog Posts</h2> <table> <thead> <tr> <th>Date</th> <th>Blog Post</th> </tr> </thead> <tbody> <tr> <td>June 27, 2024</td> <td><a href="https://msrc.microsoft.com/blog/2024/06/toward-greater-transparency-unveiling-cloud-service-cves/">Toward greater transparency: Unveiling Cloud Service CVEs</a></td> </tr> <tr> <td>April 9, 2024</td> <td><a href="https://aka.ms/MSRC-CWE-Blog">Toward greater transparency: Security Update Guide now shares CWEs for CVEs</a></td> </tr> <tr> <td>January 6, 2023</td> <td><a href="https://msrc.microsoft.com/blog/2023/01/publishing-cbl-mariner-cves-on-the-security-update-guide-cvrf-api/">Publishing CBL-Mariner CVEs on the Security Update Guide CVRF API</a></td> </tr> <tr> <td>January 11, 2022</td> <td><a href="https://aka.ms/SUGNotificationProfile">Coming Soon: New Security Update Guide Notification System</a></td> </tr> <tr> <td>February 9, 2021</td> <td><a href="https://msrc-blog.microsoft.com/2021/02/09/continuing-to-listen-good-news-about-the-security-update-guide-api/">Continuing to Listen: Good News about the Security Update Guide API</a></td> </tr> <tr> <td>January 13, 2021</td> <td><a href="https://msrc-blog.microsoft.com/2021/01/13/security-update-guide-supports-cves-assigned-by-industry-partners/">Security Update Guide Supports CVEs Assigned by Industry Partners</a></td> </tr> <tr> <td>December 8, 2020</td> <td><a href="https://msrc-blog.microsoft.com/2020/12/08/security-update-guide-lets-keep-the-conversation-going/">Security Update Guide: Let’s keep the conversation going</a></td> </tr> <tr> <td>November 9, 2020</td> <td><a href="https://msrc-blog.microsoft.com/2020/11/09/vulnerability-descriptions-in-the-new-version-of-the-security-update-guide/">Vulnerability Descriptions in the New Version of the Security Update Guide</a></td> </tr> </tbody> </table> <h2 id="relevant-resources">Relevant Resources</h2> <ul> <li>The new Hotpatching feature is now generally available. Please see <a href="https://docs.microsoft.com/en-us/azure/automanage/automanage-hotpatch?WT.mc_id=modinfra-18529-thmaure">Hotpatching feature for Windows Server Azure Edition virtual machines (VMs)</a> for more information.</li> <li>Windows 10 and Windows 11 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10 and Windows 11, in addition to non-security updates. The updates are available via the <a href="https://www.catalog.update.microsoft.com/Home.aspx">Microsoft Update Catalog</a>. For information on lifecycle and support dates for Windows 10 and Windows 11 operating systems, please see <a href="https://docs.microsoft.com/en-us/lifecycle/faq/windows">Windows Lifecycle Facts Sheet</a>.</li> <li>Microsoft is improving Windows Release Notes. For more information, please see <a href="https://techcommunity.microsoft.com/t5/windows-it-pro-blog/what-s-next-for-windows-release-notes/ba-p/1754399">What's next for Windows release notes</a>.</li> <li>A list of the latest servicing stack updates for each operating system can be found in <a href="https://msrc.microsoft.com/update-guide/en-us/vulnerability/ADV990001">ADV990001</a>. This list will be updated whenever a new servicing stack update is released. It is important to install the latest servicing stack update.</li> <li>In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.</li> <li>Customers running Windows Server 2008 R2, or Windows Server 2008 need to purchase the Extended Security Update to continue receiving security updates. See <a href="https://support.microsoft.com/en-us/topic/procedure-to-continue-receiving-security-updates-after-extended-support-ends-on-january-14-2020-48c59204-fe67-3f42-84fc-c3c3145ff28e">4522133</a> for more information.</li> </ul> <h2 id="known-issues">Known Issues</h2> <p>You can see these in more detail from the Deployments tab by selecting <strong>Known Issues</strong> column in the <strong>Edit Columns</strong> panel.</p> <p>For more information about Windows Known Issues, please see <a href="https://docs.microsoft.com/en-us/windows/release-information/windows-message-center">Windows message center</a> (links to currently-supported versions of Windows are in the left pane).</p> <table> <thead> <tr> <th>KB Article</th> <th>Applies To</th> </tr> </thead> <tbody> <tr> <td><a href="https://support.microsoft.com/help/5002624">5002624</a></td> <td>SharePoint Enterprise Server 2016</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5002639">5002639</a></td> <td>SharePoint Server 2019</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5002640">5002640</a></td> <td>SharePoint Server Subscription Edition</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5040438">5040438</a></td> <td>Windows Server, version 23H2</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5040442">5040442</a></td> <td>Windows 11 version 22H2, all editions Windows 11 version 23H2, all editions</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5042207">5042207</a></td> <td>SQL Server 2016 SP3 GDR</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5042209">5042209</a></td> <td>SQL Server 2016 SP3 Azure Connect Feature Pack</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5042211">5042211</a></td> <td>SQL Server 2022 GDR</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5042214">5042214</a></td> <td>SQL Server 2019 GDR</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5042215">5042215</a></td> <td>SQL Server 2017 CU31</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5042217">5042217</a></td> <td>SQL Server 2017 GDR</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5042578">5042578</a></td> <td>SQL Server 2022 CU14</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5042749">5042749</a></td> <td>SQL Server 2019 CU28</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5042881">5042881</a></td> <td>Windows 11, version 21H2</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5043050">5043050</a></td> <td>Windows 10</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5043051">5043051</a></td> <td>Windows 10, version 1607, Windows Server 2016</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5043064">5043064</a></td> <td>Windows 11 version 24H2</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5043067">5043067</a></td> <td>Windows 11, version 21H2</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5043076">5043076</a></td> <td>Windows 11, version 22H2, Windows 11, version 23H2</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5043080">5043080</a></td> <td>Windows 11 version 24H2</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5043083">5043083</a></td> <td>Windows 10</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5043087">5043087</a></td> <td>Windows Server 2008 (Security-only update)</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5043125">5043125</a></td> <td>Windows Server 2012</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5043135">5043135</a></td> <td>Windows Server 2008 (Monthly Rollup)</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5043138">5043138</a></td> <td>Windows Server 2012 R2</td> </tr> </tbody> </table> The information provided in the Microsoft Knowledge Base is provided "as is" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply. Microsoft SQL Server 2017 for x64-based Systems (GDR) Microsoft SQL Server 2019 for x64-based Systems (GDR) Microsoft SQL Server 2017 for x64-based Systems (CU 31) Microsoft SQL Server 2022 for x64-based Systems (GDR) Microsoft SQL Server 2019 for x64-based Systems (CU 28) Microsoft SQL Server 2022 for x64-based Systems (CU 14) Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 (GDR) Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 Azure Connect Feature Pack Microsoft SQL Server 2022 for x64-based Systems (CU 15) Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server 2019 Microsoft SharePoint Server Subscription Edition Microsoft Office LTSC for Mac 2021 Microsoft Office for Android Microsoft Office for Universal Microsoft Office 2019 for 32-bit editions Microsoft Office 2019 for 64-bit editions Microsoft 365 Apps for Enterprise for 32-bit Systems Microsoft 365 Apps for Enterprise for 64-bit Systems Microsoft Office LTSC 2021 for 64-bit editions Microsoft Office LTSC 2021 for 32-bit editions Microsoft Visio 2016 (32-bit edition) Microsoft Visio 2016 (64-bit edition) Outlook for iOS Microsoft AutoUpdate for Mac Microsoft Office Online Server Microsoft Excel 2016 (32-bit edition) Microsoft Excel 2016 (64-bit edition) Microsoft Publisher 2016 (32-bit edition) Microsoft Publisher 2016 (64-bit edition) Azure Stack Hub Azure Network Watcher VM Extension for Windows Azure CycleCloud 8.2.0 Azure CycleCloud 8.0.0 Azure CycleCloud 8.6.0 Azure CycleCloud 8.0.1 Azure CycleCloud 8.0.2 Azure CycleCloud 8.1.0 Azure CycleCloud 8.1.1 Azure CycleCloud 8.2.2 Azure CycleCloud 8.2.1 Azure CycleCloud 8.3.0 Azure CycleCloud 8.4.0 Azure CycleCloud 8.4.1 Azure CycleCloud 8.4.2 Azure CycleCloud 8.5.0 Azure CycleCloud 8.6.1 Azure CycleCloud 8.6.2 Azure CycleCloud 8.6.3 Azure Web Apps Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows Server 2022 (Server Core installation) Windows Server 2016 Windows Server 2016 (Server Core installation) Windows Server 2022, 23H2 Edition (Server Core installation) Windows 10 Version 1809 for 32-bit Systems Windows 10 Version 1809 for x64-based Systems Windows 11 version 21H2 for x64-based Systems Windows 11 version 21H2 for ARM64-based Systems Windows 10 Version 21H2 for 32-bit Systems Windows 10 Version 21H2 for ARM64-based Systems Windows 10 Version 21H2 for x64-based Systems Windows 11 Version 22H2 for ARM64-based Systems Windows 11 Version 22H2 for x64-based Systems Windows 10 Version 22H2 for x64-based Systems Windows 10 Version 22H2 for ARM64-based Systems Windows 10 Version 22H2 for 32-bit Systems Windows 11 Version 23H2 for ARM64-based Systems Windows 11 Version 23H2 for x64-based Systems Windows 11 Version 24H2 for ARM64-based Systems Windows 11 Version 24H2 for x64-based Systems Windows 10 for 32-bit Systems Windows 10 for x64-based Systems Windows 10 Version 1607 for 32-bit Systems Windows 10 Version 1607 for x64-based Systems Windows Server 2012 R2 Windows Server 2012 R2 (Server Core installation) Windows Server 2008 for 32-bit Systems Service Pack 2 Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) Windows Server 2008 for x64-based Systems Service Pack 2 Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) Windows Server 2008 R2 for x64-based Systems Service Pack 1 Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) Windows Server 2012 Windows Server 2012 (Server Core installation) Microsoft Edge (Chromium-based) Microsoft Edge (Chromium-based) Extended Stable Microsoft Dynamics 365 (on-premises) version 9.1 Power Automate for Desktop Dynamics 365 Business Central Online Microsoft Dynamics 365 Business Central 2023 Release Wave 1 Microsoft Dynamics 365 Business Central 2024 Release Wave 1 Microsoft Dynamics 365 Business Central 2023 Release Wave 2 GroupMe CBL Mariner 2.0 x64 CBL Mariner 2.0 ARM Azure Linux 3.0 x64 Azure Linux 3.0 ARM CBL Mariner 1.0 x64 CBL Mariner 1.0 ARM Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) Windows Server 2008 R2 for x64-based Systems Service Pack 1 Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) Windows Server 2012 Windows Server 2012 (Server Core installation) Windows Server 2012 R2 Windows Server 2012 R2 (Server Core installation) Windows 10 for 32-bit Systems Windows 10 for x64-based Systems Microsoft Excel 2016 (32-bit edition) Microsoft Excel 2016 (64-bit edition) Microsoft Visio 2016 (32-bit edition) Microsoft Visio 2016 (64-bit edition) Microsoft Publisher 2016 (32-bit edition) Microsoft Publisher 2016 (64-bit edition) Windows Server 2016 Windows 10 Version 1607 for 32-bit Systems Windows 10 Version 1607 for x64-based Systems Windows Server 2016 (Server Core installation) Microsoft AutoUpdate for Mac Microsoft SharePoint Enterprise Server 2016 Microsoft SQL Server 2017 for x64-based Systems (GDR) Windows 10 Version 1809 for 32-bit Systems Windows 10 Version 1809 for x64-based Systems Windows Server 2019 Windows Server 2019 (Server Core installation) Microsoft Office 2019 for 32-bit editions Microsoft Office 2019 for 64-bit editions Microsoft SharePoint Server 2019 Microsoft Office Online Server Microsoft Edge (Chromium-based) Outlook for iOS Microsoft 365 Apps for Enterprise for 32-bit Systems Microsoft 365 Apps for Enterprise for 64-bit Systems Microsoft SQL Server 2019 for x64-based Systems (GDR) Azure CycleCloud 8.2.0 Microsoft Dynamics 365 (on-premises) version 9.1 Windows Server 2022 Windows Server 2022 (Server Core installation) Windows 11 version 21H2 for x64-based Systems Windows 11 version 21H2 for ARM64-based Systems Windows 10 Version 21H2 for 32-bit Systems Windows 10 Version 21H2 for ARM64-based Systems Windows 10 Version 21H2 for x64-based Systems Azure Stack Hub Microsoft Office LTSC for Mac 2021 Microsoft Office LTSC 2021 for 64-bit editions Microsoft Office LTSC 2021 for 32-bit editions Microsoft SharePoint Server Subscription Edition Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 (GDR) Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 Azure Connect Feature Pack Windows 11 Version 22H2 for ARM64-based Systems Windows 11 Version 22H2 for x64-based Systems Windows 10 Version 22H2 for x64-based Systems Windows 10 Version 22H2 for ARM64-based Systems Windows 10 Version 22H2 for 32-bit Systems Azure CycleCloud 8.0.0 CBL Mariner 1.0 x64 CBL Mariner 1.0 ARM CBL Mariner 2.0 x64 CBL Mariner 2.0 ARM Microsoft Edge (Chromium-based) Extended Stable Microsoft SQL Server 2017 for x64-based Systems (CU 31) Microsoft SQL Server 2022 for x64-based Systems (GDR) Microsoft Office for Android Microsoft Office for Universal Microsoft Dynamics 365 Business Central 2023 Release Wave 1 Windows 11 Version 23H2 for ARM64-based Systems Windows 11 Version 23H2 for x64-based Systems Windows Server 2022, 23H2 Edition (Server Core installation) Microsoft Dynamics 365 Business Central 2023 Release Wave 2 Azure CycleCloud 8.6.0 Microsoft Dynamics 365 Business Central 2024 Release Wave 1 Azure Linux 3.0 x64 Azure Linux 3.0 ARM Azure Network Watcher VM Extension for Windows Azure CycleCloud 8.0.1 Azure CycleCloud 8.0.2 Azure CycleCloud 8.1.0 Azure CycleCloud 8.1.1 Azure CycleCloud 8.2.2 Azure CycleCloud 8.2.1 Azure CycleCloud 8.3.0 Azure CycleCloud 8.4.0 Azure CycleCloud 8.4.1 Azure CycleCloud 8.4.2 Azure CycleCloud 8.5.0 GroupMe Azure Web Apps Windows 11 Version 24H2 for ARM64-based Systems Windows 11 Version 24H2 for x64-based Systems Azure CycleCloud 8.6.2 Azure CycleCloud 8.6.1 Microsoft SQL Server 2022 for x64-based Systems (CU 14) Microsoft SQL Server 2019 for x64-based Systems (CU 28) Azure CycleCloud 8.6.3 Power Automate for Desktop Dynamics 365 Business Central Online Microsoft SQL Server 2022 for x64-based Systems (CU 15) cbl2 cloud-hypervisor-cvm 38.0.72.2-1 on CBL Mariner 2.0 cbl2 cloud-hypervisor-cvm 38.0.72.2-1 on CBL-Mariner 2.0 cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0 cbl2 kernel 5.15.186.1-1 on CBL-Mariner 2.0 cbl2 qemu 6.2.0-24 on CBL Mariner 2.0 cbl2 kernel 5.15.180.1-1 cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0 cbl2 kernel 5.15.180.1-1 on CBL-Mariner 2.0 cbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0 cbl2 mysql 8.0.41-1 on CBL Mariner 2.0 cbl2 mysql 8.0.41-1 on CBL-Mariner 2.0 cbl2 rust 1.72.0-10 cbl2 rust 1.72.0-10 on CBL Mariner 2.0 cbl2 rust 1.72.0-10 on CBL-Mariner 2.0 cbl2 kernel 5.15.167.1-1 on CBL Mariner 2.0 cbl2 reaper 3.1.1-13 on CBL Mariner 2.0 cbl2 nvidia-container-toolkit 1.16.2-1 on CBL Mariner 2.0 cbl2 linuxptp 3.1.1-1 cbl2 linuxptp 3.1.1-1 on CBL Mariner 2.0 cbl2 linuxptp 3.1.1-1 on CBL-Mariner 2.0 cbl2 reaper 3.1.1-12 on CBL Mariner 2.0 cbl2 mysql 8.0.36-1 on CBL Mariner 2.0 cbl2 curl 8.8.0-3 on CBL Mariner 2.0 cbl2 golang 1.18.8-6 on CBL Mariner 2.0 cbl2 hvloader 1.0.1-5 on CBL Mariner 2.0 cbl2 hvloader 1.0.1-5 on CBL Mariner 2.0 cbl2 hvloader 1.0.1-5 on CBL-Mariner 2.0 cbl2 cloud-hypervisor-cvm 38.0.72.2-2 on CBL Mariner 2.0 cbl2 clamav 1.0.7-1 on CBL Mariner 2.0 cbl2 python3 3.9.19-5 on CBL Mariner 2.0 cbl2 kernel 5.15.164.1-1 on CBL Mariner 2.0 cbl2 kernel 5.15.164.1-1 on CBL-Mariner 2.0 azl3 qemu 8.2.0-16 on Azure Linux 3.0 azl3 cmake 3.30.3-6 on Azure Linux 3.0 azl3 kernel 6.6.64.2-9 on Azure Linux 3.0 azl3 mysql 8.0.41-1 on Azure Linux 3.0 azl3 tensorflow 2.16.1-7 on Azure Linux 3.0 azl3 python3 3.12.3-5 on Azure Linux 3.0 azl3 curl 8.8.0-4 on Azure Linux 3.0 azl3 kernel 6.6.57.1-1 on Azure Linux 3.0 azl3 kernel 6.6.56.1-5 on Azure Linux 3.0 azl3 kernel 6.6.51.1-5 on Azure Linux 3.0 azl3 nvidia-container-toolkit 1.16.2-1 on Azure Linux 3.0 azl3 linuxptp 3.1.1-1 on Azure Linux 3.0 azl3 thrift 0.15.0-5 on Azure Linux 3.0 azl3 edk2 20240524git3e722403cd16-8 on Azure Linux 3.0 azl3 cmake 3.30.3-2 on Azure Linux 3.0 azl3 pcp 6.3.2-1 on Azure Linux 3.0 azl3 kernel 6.6.51.1-1 on Azure Linux 3.0 azl3 python-tensorboard 2.16.2-5 on Azure Linux 3.0 azl3 curl 8.8.0-3 on Azure Linux 3.0 azl3 cloud-hypervisor-cvm 38.0.72.2-2 on Azure Linux 3.0 azl3 edk2 20240524git3e722403cd16-3 on Azure Linux 3.0 azl3 openssl 3.3.2-1 on Azure Linux 3.0 azl3 python3 3.12.3-4 on Azure Linux 3.0 azl3 clamav 1.0.7-1 on Azure Linux 3.0 azl3 haproxy 2.9.11-1 on Azure Linux 3.0 azl3 runc 1.2.2-1 on Azure Linux 3.0 azl3 kernel 6.6.47.1-1 on Azure Linux 3.0 azl3 grpc 1.62.3-1 on Azure Linux 3.0 azl3 tensorflow 2.16.1-9 on Azure Linux 3.0 azl3 libcontainers-common 20240213-3 on Azure Linux 3.0 azl3 cri-tools 1.30.1-1 on Azure Linux 3.0 azl3 clamav 1.0.6-1 on Azure Linux 3.0 azl3 ansible 2.17.0-1 on Azure Linux 3.0 cbl2 grpc 1.42.0-11 on CBL Mariner 2.0 cbl2 grpc 1.42.0-11 on CBL-Mariner 2.0 azl3 gcc 13.2.0-7 on Azure Linux 3.0 cbl2 golang 1.22.7-3 on CBL Mariner 2.0 cbl2 golang 1.22.7-3 on CBL-Mariner 2.0 cbl2 gcc 11.2.0-8 on CBL Mariner 2.0 cbl2 gcc 11.2.0-8 on CBL-Mariner 2.0 cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0 cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0 azl3 mysql 8.0.40-6 on Azure Linux 3.0 azl3 kubevirt 1.2.0-17 on Azure Linux 3.0 azl3 kubernetes 1.30.10-7 on Azure Linux 3.0 azl3 pytorch 2.2.2-7 on Azure Linux 3.0 cbl2 pytorch 2.0.0-8 on CBL Mariner 2.0 cbl2 pytorch 2.0.0-8 on CBL-Mariner 2.0 azl3 wireshark 4.4.7-1 on Azure Linux 3.0 azl3 kernel 6.6.92.2-1 on Azure Linux 3.0 cm2 opensc 0.23.0-5 on CBL Mariner 2.0 cbl2 ansible 2.14.18-1 on CBL Mariner 2.0 cbl2 ansible 2.14.18-1 on CBL-Mariner 2.0 azl3 ansible 2.17.11-1 on Azure Linux 3.0 azl3 nodejs 20.14.0-8 on Azure Linux 3.0 cbl2 qemu 6.2.0-24 on CBL Mariner 2.0 cbl2 tensorflow 2.11.1-2 on CBL Mariner 2.0 cbl2 tensorflow 2.11.1-2 on CBL-Mariner 2.0 cbl2 kernel 5.15.164.1-1 on CBL Mariner 2.0 azl3 rust 1.75.0-14 on Azure Linux 3.0 cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0 azl3 golang 1.23.9-1 on Azure Linux 3.0 cbl2 python3 3.9.19-13 on CBL Mariner 2.0 cbl2 python3 3.9.19-13 on CBL-Mariner 2.0 cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0 azl3 kernel 6.6.96.2-1 on Azure Linux 3.0 azl3 rust 1.86.0-1 on Azure Linux 3.0 azl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0 cbl2 kata-containers 3.2.0.azl2-6 on CBL Mariner 2.0 cbl2 kata-containers 3.2.0.azl2-6 on CBL-Mariner 2.0 azl3 golang 1.24.3-1 on Azure Linux 3.0 cbl2 kata-containers-cc 3.2.0.azl2-6 on CBL Mariner 2.0 cbl2 kata-containers-cc 3.2.0.azl2-6 on CBL-Mariner 2.0 azl3 kata-containers 3.15.0.aks0-1 on Azure Linux 3.0 cbl2 python-tensorboard 2.11.0-3 on CBL Mariner 2.0 cbl2 python-tensorboard 2.11.0-3 on CBL-Mariner 2.0 cbl2 gcc 11.2.0-8 on CBL Mariner 2.0 cbl2 rust 1.72.0-10 on CBL Mariner 2.0 azl3 kata-containers-cc 3.15.0.aks0-1 on Azure Linux 3.0 azl3 runc 1.1.12-2 on Azure Linux 3.0 azl3 moby-engine 25.0.3-13 on Azure Linux 3.0 cbl2 msft-golang 1.24.1-2 on CBL Mariner 2.0 cbl2 msft-golang 1.24.1-2 on CBL-Mariner 2.0 cbl2 edk2 20230301gitf80f052277c8-42 on CBL Mariner 2.0 cbl2 edk2 20230301gitf80f052277c8-42 on CBL-Mariner 2.0 azl3 kernel 6.6.85.1-4 on Azure Linux 3.0 cbl2 golang 1.22.7-3 on CBL Mariner 2.0 cbl2 cri-tools 1.29.0-6 on CBL Mariner 2.0 cbl2 cri-tools 1.29.0-6 on CBL-Mariner 2.0 cbl2 golang 1.18.8-8 on CBL Mariner 2.0 cbl2 golang 1.18.8-8 on CBL-Mariner 2.0 cbl2 kubernetes 1.28.4-18 on CBL Mariner 2.0 azl3 golang 1.23.8-1 on Azure Linux 3.0 cbl2 moby-runc 1.1.9-8 on CBL Mariner 2.0 cbl2 moby-runc 1.1.9-8 on CBL-Mariner 2.0 cbl2 cri-o 1.22.3-14 on CBL Mariner 2.0 cbl2 cri-o 1.22.3-14 on CBL-Mariner 2.0 cbl2 ansible 2.14.18-1 on CBL Mariner 2.0 cbl2 kubevirt 0.59.0-28 on CBL Mariner 2.0 cbl2 kubevirt 0.59.0-28 on CBL-Mariner 2.0 cbl2 golang 1.18.8-7 on CBL Mariner 2.0 cbl2 golang 1.18.8-7 on CBL-Mariner 2.0 cbl2 moby-engine 24.0.9-17 on CBL Mariner 2.0 cbl2 moby-engine 24.0.9-17 on CBL-Mariner 2.0 cbl2 libcontainers-common 20210626-7 on CBL Mariner 2.0 cbl2 libcontainers-common 20210626-7 on CBL-Mariner 2.0 cbl2 curl 8.8.0-6 on CBL Mariner 2.0 cbl2 curl 8.8.0-6 on CBL-Mariner 2.0 cbl2 hvloader 1.0.1-5 on CBL Mariner 2.0 azl3 openssl 3.3.0-2 on Azure Linux 3.0 azl3 cloud-hypervisor-cvm 41.0.79-1 on Azure Linux 3.0 cbl2 reaper 3.1.1-18 on CBL Mariner 2.0 cbl2 reaper 3.1.1-18 on CBL-Mariner 2.0 cbl2 cloud-hypervisor-cvm 38.0.72.2-1 on CBL Mariner 2.0 cbl2 mysql 8.0.40-4 on CBL Mariner 2.0 cbl2 mysql 8.0.40-4 on CBL-Mariner 2.0 cbl2 mysql 8.0.41-1 on CBL Mariner 2.0 cbl2 clamav 1.0.6-1 on CBL Mariner 2.0 cbl2 clamav 1.0.6-1 on CBL-Mariner 2.0 cbl2 nodejs18 18.20.3-6 cbl2 nodejs18 18.20.3-6 on CBL-Mariner 2.0 cbl2 grpc 1.42.0-11 on CBL Mariner 2.0 azl3 nodejs 20.14.0-9 on Azure Linux 3.0 cbl2 pytorch 2.0.0-8 on CBL Mariner 2.0 azl3 haproxy 2.9.1-2 on Azure Linux 3.0 azl3 opensc 0.25.1-4 on Azure Linux 3.0 cbl2 opensc 0.23.0-5 on CBL Mariner 2.0 cbl2 opensc 0.23.0-5 on CBL-Mariner 2.0 cbl2 protobuf 3.17.3-3 on CBL Mariner 2.0 cbl2 protobuf 3.17.3-3 on CBL-Mariner 2.0 cbl2 keras 2.11.0-3 on CBL Mariner 2.0 cbl2 keras 2.11.0-3 on CBL-Mariner 2.0 azl3 qemu 8.2.0-17 on Azure Linux 3.0 azl3 protobuf 25.3-4 on Azure Linux 3.0 cbl2 cmake 3.21.4-18 on CBL Mariner 2.0 cbl2 cmake 3.21.4-18 on CBL-Mariner 2.0 cbl2 nodejs18 18.20.3-8 on CBL Mariner 2.0 azl3 nvidia-container-toolkit 1.15.0-1 on Azure Linux 3.0 cbl2 nvidia-container-toolkit 1.13.5-7 on CBL Mariner 2.0 cbl2 nvidia-container-toolkit 1.13.5-7 on CBL-Mariner 2.0 cbl2 hvloader 1.0.1-13 on CBL Mariner 2.0 cbl2 hvloader 1.0.1-13 on CBL-Mariner 2.0 cbl2 kubernetes 1.28.4-19 on CBL Mariner 2.0 cbl2 golang 1.18.8-9 on CBL Mariner 2.0 cbl2 nodejs18 18.20.3-9 on CBL Mariner 2.0 azl3 kernel 6.6.96.2-2 on Azure Linux 3.0 azl3 qemu 8.2.0-19 on Azure Linux 3.0 cbl2 golang 1.18.8-10 on CBL Mariner 2.0 cbl2 golang 1.18.8-10 on CBL-Mariner 2.0 azl3 kernel 6.6.104.2-4 on Azure Linux 3.0 azl3 qemu 8.2.0-21 on Azure Linux 3.0 cbl2 qemu 6.2.0-25 on CBL Mariner 2.0 azl3 kernel 6.6.112.1-2 on Azure Linux 3.0 azl3 qemu 8.2.0-23 on Azure Linux 3.0 cbl2 nodejs18 18.20.3-10 on CBL Mariner 2.0 cbl2 qemu 6.2.0-26 on CBL Mariner 2.0 cbl2 qemu 6.2.0-26 on CBL-Mariner 2.0 azl3 kernel 6.6.117.1-1 on Azure Linux 3.0 azl3 qemu 8.2.0-25 on Azure Linux 3.0 azl3 nodejs 20.14.0-10 on Azure Linux 3.0 cbl2 kubernetes 1.28.4-21 on CBL Mariner 2.0 azl3 kernel 6.6.119.3-1 on Azure Linux 3.0 azl3 kernel 6.6.119.3-3 on Azure Linux 3.0 azl3 kernel 6.6.121.1-1 on Azure Linux 3.0 azl3 nodejs 20.14.0-13 on Azure Linux 3.0 cbl2 kubernetes 1.28.4-23 on CBL Mariner 2.0 azl3 qemu 8.2.0-27 on Azure Linux 3.0 cbl2 nodejs18 18.20.3-11 on CBL Mariner 2.0 cbl2 nodejs18 18.20.3-11 on CBL-Mariner 2.0 cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0 cbl2 kubernetes 1.28.4-25 on CBL Mariner 2.0 cbl2 kubernetes 1.28.4-25 on CBL-Mariner 2.0 azl3 kernel 6.6.126.1-1 on Azure Linux 3.0 azl3 qemu 9.1.0-1 on Azure Linux 3.0 cbl2 kernel 5.15.202.1-1 cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0 cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0 azl3 kernel 6.6.130.1-3 on Azure Linux 3.0 azl3 qemu 9.1.0-3 on Azure Linux 3.0 azl3 nodejs 20.14.0-14 on Azure Linux 3.0 cbl2 qemu 6.2.0-27 on CBL Mariner 2.0 cbl2 qemu 6.2.0-27 on CBL-Mariner 2.0 azl3 kernel 6.6.134.1-2 on Azure Linux 3.0 azl3 nodejs 20.14.0-15 on Azure Linux 3.0 azl3 kernel 6.6.137.1-2 on Azure Linux 3.0 azl3 kernel 6.6.138.1-1 on Azure Linux 3.0 azl3 kernel 6.6.139.1-1 on Azure Linux 3.0 azl3 kernel 6.6.141.1-1 on Azure Linux 3.0 azl3 kernel 6.6.143.1-1 on Azure Linux 3.0 azl3 kernel 6.6.144.1-1 on Azure Linux 3.0 azl3 kernel 6.6.145.2-1 on Azure Linux 3.0 azl3 python-py 1.11.0-1 on Azure Linux 3.0 azl3 kernel 6.6.150.1-1 on Azure Linux 3.0 azl3 golang 1.27.0-1 on Azure Linux 3.0 azl3 qemu 10.1.0-1 on Azure Linux 3.0 azl3 golang 1.27.1-1 on Azure Linux 3.0 azl3 kernel 6.6.152.1-1 on Azure Linux 3.0 azl3 kernel 6.6.157.1-1 on Azure Linux 3.0 Windows Server 2008 for 32-bit Systems Service Pack 2 Windows Server 2008 for x64-based Systems Service Pack 2 Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) NVIDIA Container Toolkit 1.16.1 or earlier contains a vulnerability in the default mode of operation allowing a specially crafted container image to create empty files on the host file system. This does not impact use cases where CDI is used. A successful exploit of this vulnerability may lead to data tampering. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner nvidia Yes CVE-2024-0133 Time-of-check Time-of-use (TOCTOU) Race Condition 17223-16823 17611-17084 20077-17084 20081-21692 20081-17086 17223-16823 17611-17084 20077-17084 20081-21692 20081-17086 Low 17223-16823 Low 17611-17084 Low 20077-17084 Low 20081-21692 Low 20081-17086 3.4 3.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N 17223-16823 3.4 3.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N 17611-17084 3.4 3.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N 20077-17084 3.4 3.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N 20081-21692 3.4 3.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N 20081-17086 CBL-Mariner Releases 17223-16823 17611-17084 20077-17084 20081-21692 20081-17086 No Security Update 1.16.2-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17223-16823 17611-17084 20077-17084 20081-21692 20081-17086 CBL-Mariner Releases 1.1 2026-02-21T02:17:01 <p>Information published.</p> 2.0 2026-08-12T21:47:20 <p>Information published.</p> 1.0 2024-10-10T00:00:00 <p>Information published.</p> ClamAV Memory Handling DoS <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner cisco Yes CVE-2024-20505 Out-of-bounds Read 17240-16823 17638-17084 17815-17084 19868-17086 19868-21692 17240-16823 17638-17084 17815-17084 19868-17086 19868-21692 Important 17240-16823 Important 17638-17084 Moderate 17815-17084 Moderate 19868-17086 Moderate 19868-21692 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 17240-16823 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 17638-17084 4.0 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 17815-17084 4.0 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 19868-17086 4.0 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 19868-21692 CBL-Mariner Releases 17240-16823 17638-17084 17815-17084 19868-17086 19868-21692 No Security Update 1.0.7-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17240-16823 17638-17084 17815-17084 19868-17086 19868-21692 CBL-Mariner Releases 1.0 2024-11-09T00:00:00 <p>Information published.</p> 1.1 2024-11-23T00:00:00 <p>Added clamav to CBL-Mariner 2.0 Added clamav to Azure Linux 3.0</p> 1.2 2026-02-18T01:22:26 <p>Information published.</p> 2.0 2026-08-12T23:02:43 <p>Information published.</p> ClamAV Privilege Handling Escalation Vulnerability <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner cisco Yes CVE-2024-20506 Improper Check for Unusual or Exceptional Conditions 17240-16823 17638-17084 17815-17084 19868-21692 19868-17086 17240-16823 17638-17084 17815-17084 19868-21692 19868-17086 Moderate 17240-16823 Moderate 17638-17084 Moderate 17815-17084 Moderate 19868-21692 Moderate 19868-17086 6.1 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H 17240-16823 6.1 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H 17638-17084 6.1 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H 17815-17084 6.1 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H 19868-21692 6.1 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H 19868-17086 CBL-Mariner Releases 17240-16823 17638-17084 17815-17084 19868-21692 19868-17086 No Security Update 1.0.7-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17240-16823 17638-17084 17815-17084 19868-21692 19868-17086 CBL-Mariner Releases 1.0 2024-11-09T00:00:00 <p>Information published.</p> 1.1 2024-11-23T00:00:00 <p>Added clamav to CBL-Mariner 2.0 Added clamav to Azure Linux 3.0</p> 1.2 2026-02-18T01:17:00 <p>Information published.</p> 2.0 2026-08-12T22:53:59 <p>Information published.</p> Stack exhaustion in all Parse functions in go/parser <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Go Yes CVE-2024-34155 19755-17086 19755-21692 21778-17084 19755-17086 19755-21692 21778-17084 19755-17086 19755-21692 Moderate 21778-17084 4.3 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L 19755-17086 4.3 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L 19755-21692 4.3 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L 21778-17084 CBL-Mariner Releases 19755-17086 19755-21692 No Security Update 1.18.8-8 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19755-17086 19755-21692 CBL-Mariner Releases https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21778-17084 Security Update 21778-17084 2.0 2026-02-18T02:00:35 <p>Information published.</p> 3.0 2026-08-12T21:39:41 <p>Information published.</p> 5.0 2026-09-07T01:45:13 <p>Information published.</p> 1.0 2025-09-03T22:07:10 <p>Information published.</p> 4.0 2026-09-03T01:08:28 <p>Information published.</p> 6.0 2026-09-09T14:52:09 <p>Information published.</p> 7.0 2026-09-17T01:52:19 <p>Information published.</p> Stack exhaustion in Decoder.Decode in encoding/gob <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Go Yes CVE-2024-34156 19755-17086 20366-17086 20519-17086 21778-17084 19755-17086 20366-17086 20519-17086 21778-17084 19755-17086 Important 20366-17086 Important 20519-17086 Important 21778-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 19755-17086 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 20366-17086 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 20519-17086 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21778-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21778-17084 Security Update 21778-17084 3.0 2026-08-12T21:32:56 <p>Information published.</p> 4.0 2026-09-03T01:12:08 <p>Information published.</p> 1.0 2025-09-03T21:38:57 <p>Information published.</p> 2.0 2026-02-18T01:49:58 <p>Information published.</p> 5.0 2026-09-08T14:49:04 <p>Information published.</p> 6.0 2026-09-09T14:58:36 <p>Information published.</p> 7.0 2026-09-17T01:54:11 <p>Information published.</p> Stack exhaustion in Parse in go/build/constraint <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Go Yes CVE-2024-34158 Uncontrolled Recursion 17237-16823 19785-17086 19785-21692 21778-17084 17237-16823 19785-17086 19785-21692 21778-17084 Important 17237-16823 Important 19785-17086 Important 19785-21692 Important 21778-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 17237-16823 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 19785-17086 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 19785-21692 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21778-17084 CBL-Mariner Releases 17237-16823 19785-17086 19785-21692 No Security Update 1.18.8-6 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17237-16823 19785-17086 19785-21692 CBL-Mariner Releases https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21778-17084 Security Update 21778-17084 3.0 2026-08-12T21:35:59 <p>Information published.</p> 7.0 2026-09-17T01:49:38 <p>Information published.</p> 1.0 2025-09-03T21:51:48 <p>Information published.</p> 2.0 2026-02-18T01:55:19 <p>Information published.</p> 4.0 2026-09-03T01:05:30 <p>Information published.</p> 5.0 2026-09-08T14:45:30 <p>Information published.</p> 6.0 2026-09-09T14:47:50 <p>Information published.</p> A vulnerability has been identified in Node.js, affecting users of the experimental permission model when the --allow-fs-write flag is used. Node.js Permission Model do not operate on file descriptors, however, operations such as fs.fchown or fs.fchmod can use a "read-only" file descriptor to change the owner and permissions of a file. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner hackerone Yes CVE-2024-36137 21251-17084 21251-17084 Low 21251-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N 21251-17084 CBL-Mariner Releases 21251-17084 No Security Update 24.14.1-3 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21251-17084 CBL-Mariner Releases 2.0 2025-12-07T01:40:15 <p>Information published.</p> 3.0 2026-02-21T00:19:19 <p>Information published.</p> 4.0 2026-03-31T15:04:33 <p>Information published.</p> 5.0 2026-04-29T14:43:23 <p>Information published.</p> 6.0 2026-05-31T01:40:05 <p>Information published.</p> 1.0 2025-09-03T21:22:37 <p>Information published.</p> Integer overflow in PeCoffLoaderRelocateImage <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner TianoCore Yes CVE-2024-38796 Heap-based Buffer Overflow 17627-17084 19733-17086 20602-17086 20132-21692 19733-21692 20132-17086 19662-17086 17093-17086 17627-17084 19733-17086 20602-17086 20132-21692 19733-21692 20132-17086 19662-17086 17093-17086 Moderate 17627-17084 Moderate 19733-17086 Moderate 20602-17086 Moderate 20132-21692 Moderate 19733-21692 Moderate 20132-17086 19662-17086 Moderate 17093-17086 5.9 5.9 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L 17627-17084 5.9 5.9 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L 19733-17086 5.9 5.9 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L 20602-17086 5.9 5.9 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L 20132-21692 5.9 5.9 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L 19733-21692 5.9 5.9 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L 20132-17086 5.9 5.9 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L 19662-17086 5.9 5.9 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L 17093-17086 CBL-Mariner Releases 17627-17084 No Security Update 20240524git3e722403cd16-8 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17627-17084 CBL-Mariner Releases CBL-Mariner Releases 19733-17086 19733-21692 No Security Update 20230301gitf80f052277c8-42 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19733-17086 19733-21692 CBL-Mariner Releases CBL-Mariner Releases 20132-21692 20132-17086 No Security Update 1.0.1-13 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 20132-21692 20132-17086 CBL-Mariner Releases 1.0 2025-05-27T00:00:00 <p>Information published.</p> 3.1 2026-02-21T02:50:11 <p>Information published.</p> 5.0 2026-08-12T22:22:21 <p>Information published.</p> 2.0 2025-08-06T00:00:00 <p>Added edk2 to CBL-Mariner 2.0 Added hvloader to CBL-Mariner 2.0 Added edk2 to Azure Linux 3.0</p> 3.0 2025-12-06T14:36:03 <p>Information published.</p> 4.0 2026-03-03T01:35:41 <p>Information published.</p> An issue in IEEE 802.1AS linuxptp v.4.2 and before allowing a remote attacker to cause a denial of service via a crafted Pdelay_Req message to the time synchronization function <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2024-42861 17232-16823 17625-17084 17232-16823 17625-17084 Important 17232-16823 Important 17625-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 17232-16823 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 17625-17084 CBL-Mariner Releases 17232-16823 17625-17084 No Security Update 3.1.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17232-16823 17625-17084 CBL-Mariner Releases 3.0 2026-08-12T22:28:32 <p>Information published.</p> 1.0 2025-10-01T23:11:34 <p>Information published.</p> 2.0 2026-08-07T00:53:59 <p>Information published.</p> express vulnerable to XSS via response.redirect() <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner GitHub_M Yes CVE-2024-43796 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 17234-16823 17632-17084 19693-17084 19820-17086 19820-21692 17234-16823 17632-17084 19693-17084 19820-17086 19820-21692 Moderate 17234-16823 Moderate 17632-17084 Moderate 19693-17084 Moderate 19820-17086 Moderate 19820-21692 4.7 4.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N 17234-16823 4.7 4.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N 17632-17084 4.7 4.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N 19693-17084 4.7 4.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N 19820-17086 4.7 4.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N 19820-21692 CBL-Mariner Releases 17234-16823 19820-17086 19820-21692 No Security Update 3.1.1-12 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17234-16823 19820-17086 19820-21692 CBL-Mariner Releases CBL-Mariner Releases 17632-17084 19693-17084 No Security Update 2.16.2-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17632-17084 19693-17084 CBL-Mariner Releases 1.1 2024-10-15T00:00:00 <p>Added python-tensorboard to Azure Linux 3.0 Added reaper to CBL-Mariner 2.0</p> 2.0 2026-08-12T22:10:50 <p>Information published.</p> 1.0 2024-10-12T00:00:00 <p>Information published.</p> 1.2 2026-02-18T02:25:27 <p>Information published.</p> send vulnerable to template injection that can lead to XSS <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner GitHub_M Yes CVE-2024-43799 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 17220-16823 19820-17086 19820-21692 17220-16823 19820-17086 19820-21692 Moderate 17220-16823 Moderate 19820-17086 Moderate 19820-21692 4.7 4.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N 17220-16823 4.7 4.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N 19820-17086 4.7 4.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N 19820-21692 CBL-Mariner Releases 17220-16823 19820-17086 19820-21692 No Security Update 3.1.1-13 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17220-16823 19820-17086 19820-21692 CBL-Mariner Releases 1.1 2024-10-25T00:00:00 <p>Added reaper to CBL-Mariner 2.0</p> 1.2 2024-12-03T00:00:00 <p>Added reaper to CBL-Mariner 2.0</p> 2.0 2026-08-12T22:12:30 <p>Information published.</p> 1.0 2024-10-16T00:00:00 <p>Information published.</p> 1.3 2026-02-18T02:26:42 <p>Information published.</p> serve-static affected by template injection that can lead to XSS <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner GitHub_M Yes CVE-2024-43800 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 17220-16823 19820-17086 19820-21692 17220-16823 19820-17086 19820-21692 Moderate 17220-16823 Moderate 19820-17086 Moderate 19820-21692 4.7 4.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N 17220-16823 4.7 4.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N 19820-17086 4.7 4.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N 19820-21692 CBL-Mariner Releases 17220-16823 19820-17086 19820-21692 No Security Update 3.1.1-13 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17220-16823 19820-17086 19820-21692 CBL-Mariner Releases 2.0 2026-08-12T22:15:51 <p>Information published.</p> 1.0 2024-10-16T00:00:00 <p>Information published.</p> 1.1 2024-10-25T00:00:00 <p>Added reaper to CBL-Mariner 2.0</p> 1.2 2024-12-03T00:00:00 <p>Added reaper to CBL-Mariner 2.0</p> 1.3 2026-02-18T02:28:33 <p>Information published.</p> fuse: Initialize beyond-EOF page contents before setting uptodate <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-44947 Improper Initialization 17207-16823 17631-17084 19670-17086 17651-17084 17250-17086 17250-21692 17207-16823 17631-17084 19670-17086 17651-17084 17250-17086 17250-21692 Moderate 17207-16823 Moderate 17631-17084 19670-17086 Moderate 17651-17084 Moderate 17250-17086 Moderate 17250-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N 17207-16823 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N 17631-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N 19670-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N 17250-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N 17250-21692 CBL-Mariner Releases 17207-16823 19670-17086 17250-17086 17250-21692 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 19670-17086 17250-17086 17250-21692 CBL-Mariner Releases CBL-Mariner Releases 17631-17084 17651-17084 No Security Update 6.6.51.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17631-17084 17651-17084 CBL-Mariner Releases 1.1 2024-10-15T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> 2.0 2026-02-21T01:18:02 <p>Information published.</p> 3.0 2026-08-12T23:04:24 <p>Information published.</p> 1.0 2024-10-12T00:00:00 <p>Information published.</p> parisc: fix a possible DMA corruption <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-44949 17110-16823 18490-21692 19682-17086 18490-17086 17110-16823 18490-21692 19682-17086 18490-17086 Important 17110-16823 Important 18490-21692 19682-17086 Important 18490-17086 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17110-16823 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 18490-21692 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 19682-17086 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 18490-17086 CBL-Mariner Releases 17110-16823 18490-21692 No Security Update 5.15.176.3-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17110-16823 18490-21692 CBL-Mariner Releases CBL-Mariner Releases 19682-17086 No Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19682-17086 CBL-Mariner Releases 1.0 2025-09-03T22:01:16 <p>Information published.</p> 2.0 2026-02-21T02:32:31 <p>Information published.</p> 3.0 2026-08-12T22:04:27 <p>Information published.</p> serial: sc16is7xx: fix invalid FIFO access with special register set <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-44950 17501-17084 19529-17084 17501-17084 19529-17084 Moderate 17501-17084 Moderate 19529-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17501-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19529-17084 CBL-Mariner Releases 17501-17084 19529-17084 No Security Update 6.6.64.2-9 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17501-17084 19529-17084 CBL-Mariner Releases 1.1 2026-02-21T02:19:46 <p>Information published.</p> 2.0 2026-03-03T15:02:47 <p>Information published.</p> 4.0 2026-08-12T21:50:01 <p>Information published.</p> 1.0 2025-09-03T21:38:11 <p>Information published.</p> 3.0 2026-03-31T14:41:04 <p>Information published.</p> serial: sc16is7xx: fix TX fifo corruption <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-44951 Improper Locking 20553-17084 20613-17084 20725-17084 20788-17084 20823-17084 20860-17084 21094-17084 21248-17084 21332-17084 21443-17084 21684-17084 21932-17084 19683-17084 20412-17084 20956-17084 21308-17084 21344-17084 21474-17084 21580-17084 21626-17084 21892-17084 20553-17084 20613-17084 20725-17084 20788-17084 20823-17084 20860-17084 21094-17084 21248-17084 21332-17084 21443-17084 21684-17084 21932-17084 19683-17084 20412-17084 20956-17084 21308-17084 21344-17084 21474-17084 21580-17084 21626-17084 21892-17084 Moderate 20553-17084 Moderate 20613-17084 Moderate 20725-17084 Moderate 20788-17084 Moderate 20823-17084 Moderate 20860-17084 Moderate 21094-17084 Moderate 21248-17084 Moderate 21332-17084 Moderate 21443-17084 Moderate 21684-17084 Moderate 21932-17084 19683-17084 Moderate 20412-17084 Moderate 20956-17084 Moderate 21308-17084 Moderate 21344-17084 Moderate 21474-17084 Moderate 21580-17084 Moderate 21626-17084 Moderate 21892-17084 6.5 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L 20553-17084 6.5 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L 20613-17084 6.5 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L 20725-17084 6.5 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L 20788-17084 6.5 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L 20823-17084 6.5 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L 20860-17084 6.5 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L 21094-17084 6.5 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L 21248-17084 6.5 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L 21332-17084 5.1 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L 21443-17084 5.1 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L 21684-17084 5.1 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L 21932-17084 6.5 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L 19683-17084 6.5 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L 20412-17084 6.5 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L 20956-17084 6.5 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L 21308-17084 5.1 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L 21344-17084 5.1 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L 21474-17084 5.1 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L 21580-17084 5.1 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L 21626-17084 5.1 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L 21892-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Security Update 21684-17084 Release Notes 21932-17084 21892-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 21892-17084 Release Notes 1.0 2025-09-03T21:50:03 <p>Information published.</p> 2.0 2025-12-07T01:41:58 <p>Information published.</p> 4.0 2026-01-20T14:40:42 <p>Information published.</p> 5.0 2026-02-21T02:26:35 <p>Information published.</p> 6.0 2026-03-04T14:39:59 <p>Information published.</p> 8.0 2026-04-29T14:45:29 <p>Information published.</p> 11.1 2026-05-22T01:38:10 <p>Information published.</p> 12.0 2026-06-17T14:45:19 <p>Information published.</p> 18.0 2026-09-23T01:52:10 <p>Information published.</p> 3.0 2026-01-08T14:41:03 <p>Information published.</p> 7.0 2026-03-31T14:40:41 <p>Information published.</p> 9.0 2026-05-06T14:43:21 <p>Information published.</p> 10.0 2026-05-11T01:42:30 <p>Information published.</p> 11.0 2026-05-17T14:43:30 <p>Information published.</p> 13.0 2026-06-28T01:48:21 <p>Information published.</p> 14.0 2026-07-12T14:50:31 <p>Information published.</p> 15.0 2026-08-07T01:00:36 <p>Information published.</p> 16.0 2026-08-10T14:45:16 <p>Information published.</p> 17.0 2026-09-05T01:47:57 <p>Information published.</p> 19.0 2026-09-24T01:46:20 <p>Information published.</p> 20.0 2026-09-24T01:55:17 <p>Information published.</p> Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-44952 17207-16823 19670-17086 17250-17086 17250-21692 17207-16823 19670-17086 17250-17086 17250-21692 Moderate 17207-16823 19670-17086 Moderate 17250-17086 Moderate 17250-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19670-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-21692 CBL-Mariner Releases 17207-16823 19670-17086 17250-17086 17250-21692 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 19670-17086 17250-17086 17250-21692 CBL-Mariner Releases 1.1 2024-11-10T00:00:00 <p>Added kernel to CBL-Mariner 2.0</p> 3.0 2026-08-12T21:27:27 <p>Information published.</p> 1.0 2024-10-12T00:00:00 <p>Information published.</p> 2.0 2026-02-18T01:45:23 <p>Information published.</p> ALSA: line6: Fix racy access to midibuf <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-44954 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 17207-16823 17250-21692 19670-17086 17250-17086 17207-16823 17250-21692 19670-17086 17250-17086 Moderate 17207-16823 Moderate 17250-21692 19670-17086 Moderate 17250-17086 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-21692 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 19670-17086 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-17086 CBL-Mariner Releases 17207-16823 17250-21692 19670-17086 17250-17086 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 17250-21692 19670-17086 17250-17086 CBL-Mariner Releases 3.0 2026-08-12T22:15:00 <p>Information published.</p> 1.0 2024-10-14T00:00:00 <p>Information published.</p> 2.0 2026-02-18T14:04:50 <p>Information published.</p> Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-44955 17501-17084 19529-17084 17501-17084 19529-17084 Moderate 17501-17084 Moderate 19529-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19529-17084 CBL-Mariner Releases 17501-17084 19529-17084 No Security Update 6.6.64.2-9 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17501-17084 19529-17084 CBL-Mariner Releases 2.0 2026-02-18T14:01:51 <p>Information published.</p> 3.0 2026-08-12T22:06:38 <p>Information published.</p> 1.0 2025-09-03T22:07:00 <p>Information published.</p> sched/smt: Fix unbalance sched_smt_present dec/inc <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-44958 17207-16823 19670-17086 17250-17086 17250-21692 17207-16823 19670-17086 17250-17086 17250-21692 Moderate 17207-16823 19670-17086 Moderate 17250-17086 Moderate 17250-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17207-16823 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19670-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-21692 CBL-Mariner Releases 17207-16823 19670-17086 17250-17086 17250-21692 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 19670-17086 17250-17086 17250-21692 CBL-Mariner Releases 2.0 2026-02-18T14:04:22 <p>Information published.</p> 3.0 2026-08-12T22:13:43 <p>Information published.</p> 1.0 2024-10-14T00:00:00 <p>Information published.</p> usb: gadget: core: Check for unset descriptor <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-44960 NULL Pointer Dereference 17207-16823 17250-17086 17250-21692 19670-17086 17207-16823 17250-17086 17250-21692 19670-17086 Moderate 17207-16823 Moderate 17250-17086 Moderate 17250-21692 19670-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19670-17086 CBL-Mariner Releases 17207-16823 17250-17086 17250-21692 19670-17086 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 17250-17086 17250-21692 19670-17086 CBL-Mariner Releases 2.0 2026-02-21T01:50:52 <p>Information published.</p> 3.0 2026-08-12T21:25:48 <p>Information published.</p> 1.0 2024-10-14T00:00:00 <p>Information published.</p> btrfs: do not BUG_ON() when freeing tree block after error <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-44963 17501-17084 19529-17084 17501-17084 19529-17084 Moderate 17501-17084 Moderate 19529-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17501-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19529-17084 CBL-Mariner Releases 17501-17084 19529-17084 No Security Update 6.6.64.2-9 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17501-17084 19529-17084 CBL-Mariner Releases 1.0 2025-09-03T20:09:14 <p>Information published.</p> 1.1 2026-02-21T01:35:06 <p>Information published.</p> 2.0 2026-03-03T15:00:23 <p>Information published.</p> 3.0 2026-03-31T14:36:33 <p>Information published.</p> 4.0 2026-08-12T21:14:23 <p>Information published.</p> x86/mm: Fix pti_clone_pgtable() alignment assumption <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-44965 17207-16823 19670-17086 17250-17086 17250-21692 17207-16823 19670-17086 17250-17086 17250-21692 Moderate 17207-16823 19670-17086 Moderate 17250-17086 Moderate 17250-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17207-16823 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19670-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-21692 CBL-Mariner Releases 17207-16823 19670-17086 17250-17086 17250-21692 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 19670-17086 17250-17086 17250-21692 CBL-Mariner Releases 2.0 2026-02-21T01:51:49 <p>Information published.</p> 3.0 2026-08-12T21:26:34 <p>Information published.</p> 1.0 2024-10-14T00:00:00 <p>Information published.</p> binfmt_flat: Fix corruption when not offsetting data start <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-44966 17207-16823 17250-17086 17250-21692 19670-17086 17207-16823 17250-17086 17250-21692 19670-17086 Moderate 17207-16823 Moderate 17250-17086 Moderate 17250-21692 19670-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19670-17086 CBL-Mariner Releases 17207-16823 17250-17086 17250-21692 19670-17086 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 17250-17086 17250-21692 19670-17086 CBL-Mariner Releases 2.0 2026-02-21T01:49:56 <p>Information published.</p> 3.0 2026-08-12T21:25:06 <p>Information published.</p> 1.0 2024-10-14T00:00:00 <p>Information published.</p> s390/sclp: Prevent release of buffer in I/O <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-44969 Missing Release of Memory after Effective Lifetime 17207-16823 17250-17086 19670-17086 17250-21692 17207-16823 17250-17086 19670-17086 17250-21692 Moderate 17207-16823 Moderate 17250-17086 19670-17086 Moderate 17250-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19670-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-21692 CBL-Mariner Releases 17207-16823 17250-17086 19670-17086 17250-21692 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 17250-17086 19670-17086 17250-21692 CBL-Mariner Releases 1.0 2024-10-12T00:00:00 <p>Information published.</p> 2.0 2026-02-21T01:18:42 <p>Information published.</p> 3.0 2026-08-12T23:10:20 <p>Information published.</p> net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register() <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-44971 Missing Release of Memory after Effective Lifetime 17207-16823 19670-17086 17250-17086 17250-21692 17207-16823 19670-17086 17250-17086 17250-21692 Moderate 17207-16823 19670-17086 Moderate 17250-17086 Moderate 17250-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17207-16823 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19670-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-21692 CBL-Mariner Releases 17207-16823 19670-17086 17250-17086 17250-21692 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 19670-17086 17250-17086 17250-21692 CBL-Mariner Releases 1.0 2024-10-12T00:00:00 <p>Information published.</p> 2.0 2026-02-18T01:23:20 <p>Information published.</p> 3.0 2026-08-12T23:04:53 <p>Information published.</p> mptcp: pm: avoid possible UaF when selecting endp <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-44974 Use After Free 17207-16823 17631-17084 19673-17086 17651-17084 17095-17086 17095-21692 17207-16823 17631-17084 19673-17086 17651-17084 17095-17086 17095-21692 Important 17207-16823 Important 17631-17084 19673-17086 Important 17651-17084 Important 17095-17086 Important 17095-21692 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 19673-17086 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17651-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17095-17086 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17095-21692 CBL-Mariner Releases 17207-16823 19673-17086 17095-17086 17095-21692 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 19673-17086 17095-17086 17095-21692 CBL-Mariner Releases CBL-Mariner Releases 17631-17084 17651-17084 No Security Update 6.6.51.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17631-17084 17651-17084 CBL-Mariner Releases 1.1 2024-10-15T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> 1.3 2024-12-03T00:00:00 <p>Added kernel to CBL-Mariner 2.0 Added kernel to Azure Linux 3.0</p> 2.0 2026-02-18T01:24:44 <p>Information published.</p> 1.0 2024-10-12T00:00:00 <p>Information published.</p> 1.2 2024-11-01T00:00:00 <p>Added kernel to CBL-Mariner 2.0 Added kernel to Azure Linux 3.0</p> 3.0 2026-08-12T23:07:19 <p>Information published.</p> drm/amdgpu: Validate TA binary size <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-44977 Out-of-bounds Write 17610-17084 17651-17084 17610-17084 17651-17084 Important 17610-17084 Important 17651-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17651-17084 CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 2.0 2026-08-12T22:12:28 <p>Information published.</p> 1.0 2024-10-16T00:00:00 <p>Information published.</p> 1.1 2026-02-18T14:03:55 <p>Information published.</p> drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-44982 Incomplete Cleanup 17207-16823 17610-17084 17651-17084 19670-17086 17250-17086 17250-21692 17207-16823 17610-17084 17651-17084 19670-17086 17250-17086 17250-21692 Moderate 17207-16823 Moderate 17610-17084 Moderate 17651-17084 19670-17086 Moderate 17250-17086 Moderate 17250-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19670-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-21692 CBL-Mariner Releases 17207-16823 19670-17086 17250-17086 17250-21692 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 19670-17086 17250-17086 17250-21692 CBL-Mariner Releases CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 2.0 2026-02-18T14:02:45 <p>Information published.</p> 3.0 2026-08-12T22:09:12 <p>Information published.</p> 1.0 2024-10-14T00:00:00 <p>Information published.</p> 1.1 2024-10-16T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> netfilter: flowtable: validate vlan header <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-44983 Use of Uninitialized Resource 17207-16823 17631-17084 19670-17086 17651-17084 17250-17086 17250-21692 17207-16823 17631-17084 19670-17086 17651-17084 17250-17086 17250-21692 Important 17207-16823 Important 17631-17084 19670-17086 Important 17651-17084 Important 17250-17086 Important 17250-21692 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 17207-16823 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 17631-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 19670-17086 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 17651-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 17250-17086 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 17250-21692 CBL-Mariner Releases 17207-16823 19670-17086 17250-17086 17250-21692 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 19670-17086 17250-17086 17250-21692 CBL-Mariner Releases CBL-Mariner Releases 17631-17084 17651-17084 No Security Update 6.6.51.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17631-17084 17651-17084 CBL-Mariner Releases 1.1 2024-10-15T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> 2.0 2026-02-18T02:14:19 <p>Information published.</p> 1.0 2024-10-12T00:00:00 <p>Information published.</p> 3.0 2026-08-12T21:55:18 <p>Information published.</p> bnxt_en: Fix double DMA unmapping for XDP_REDIRECT <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-44984 17610-17084 17651-17084 17610-17084 17651-17084 Moderate 17610-17084 Moderate 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17610-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 1.1 2026-02-18T14:02:05 <p>Information published.</p> 1.0 2024-10-16T00:00:00 <p>Information published.</p> ipv6: prevent possible UAF in ip6_xmit() <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-44985 Use After Free 17207-16823 17631-17084 17651-17084 17250-17086 17250-21692 19670-17086 17207-16823 17631-17084 17651-17084 17250-17086 17250-21692 19670-17086 Important 17207-16823 Important 17631-17084 Important 17651-17084 Important 17250-17086 Important 17250-21692 19670-17086 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17651-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17250-17086 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17250-21692 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 19670-17086 CBL-Mariner Releases 17207-16823 17250-17086 17250-21692 19670-17086 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 17250-17086 17250-21692 19670-17086 CBL-Mariner Releases CBL-Mariner Releases 17631-17084 17651-17084 No Security Update 6.6.51.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17631-17084 17651-17084 CBL-Mariner Releases 1.1 2024-10-15T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> 1.0 2024-10-12T00:00:00 <p>Information published.</p> 2.0 2026-02-18T01:21:21 <p>Information published.</p> 3.0 2026-08-12T23:01:19 <p>Information published.</p> ipv6: fix possible UAF in ip6_finish_output2() <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-44986 Use After Free 17207-16823 17631-17084 17250-21692 19670-17086 17651-17084 17250-17086 17207-16823 17631-17084 17250-21692 19670-17086 17651-17084 17250-17086 Important 17207-16823 Important 17631-17084 Important 17250-21692 19670-17086 Important 17651-17084 Important 17250-17086 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17250-21692 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 19670-17086 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17651-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17250-17086 CBL-Mariner Releases 17207-16823 17250-21692 19670-17086 17250-17086 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 17250-21692 19670-17086 17250-17086 CBL-Mariner Releases CBL-Mariner Releases 17631-17084 17651-17084 No Security Update 6.6.51.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17631-17084 17651-17084 CBL-Mariner Releases 1.1 2024-10-15T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> 1.0 2024-10-12T00:00:00 <p>Information published.</p> 2.0 2026-02-18T01:13:57 <p>Information published.</p> 3.0 2026-08-12T22:48:45 <p>Information published.</p> ipv6: prevent UAF in ip6_send_skb() <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-44987 Use After Free 17207-16823 17631-17084 19670-17086 17651-17084 17250-17086 17250-21692 17207-16823 17631-17084 19670-17086 17651-17084 17250-17086 17250-21692 Important 17207-16823 Important 17631-17084 19670-17086 Important 17651-17084 Important 17250-17086 Important 17250-21692 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 19670-17086 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17651-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17250-17086 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17250-21692 CBL-Mariner Releases 17207-16823 19670-17086 17250-17086 17250-21692 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 19670-17086 17250-17086 17250-21692 CBL-Mariner Releases CBL-Mariner Releases 17631-17084 17651-17084 No Security Update 6.6.51.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17631-17084 17651-17084 CBL-Mariner Releases 1.1 2024-10-15T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> 1.0 2024-10-12T00:00:00 <p>Information published.</p> 2.0 2026-02-18T01:18:07 <p>Information published.</p> 3.0 2026-08-12T22:55:43 <p>Information published.</p> net: dsa: mv88e6xxx: Fix out-of-bound access <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-44988 17207-16823 17610-17084 19670-17086 17250-21692 17651-17084 17250-17086 17207-16823 17610-17084 19670-17086 17250-21692 17651-17084 17250-17086 Moderate 17207-16823 Moderate 17610-17084 19670-17086 Moderate 17250-21692 Moderate 17651-17084 Moderate 17250-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19670-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-17086 CBL-Mariner Releases 17207-16823 19670-17086 17250-21692 17250-17086 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 19670-17086 17250-21692 17250-17086 CBL-Mariner Releases CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 2.0 2026-02-18T14:03:27 <p>Information published.</p> 3.0 2026-08-12T22:11:00 <p>Information published.</p> 1.0 2024-10-14T00:00:00 <p>Information published.</p> 1.1 2024-10-16T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> bonding: fix xfrm real_dev null pointer dereference <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-44989 NULL Pointer Dereference 17207-16823 17631-17084 17250-17086 17651-17084 19670-17086 17250-21692 17207-16823 17631-17084 17250-17086 17651-17084 19670-17086 17250-21692 Moderate 17207-16823 Moderate 17631-17084 Moderate 17250-17086 Moderate 17651-17084 19670-17086 Moderate 17250-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19670-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-21692 CBL-Mariner Releases 17207-16823 17250-17086 19670-17086 17250-21692 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 17250-17086 19670-17086 17250-21692 CBL-Mariner Releases CBL-Mariner Releases 17631-17084 17651-17084 No Security Update 6.6.51.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17631-17084 17651-17084 CBL-Mariner Releases 1.1 2024-10-15T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> 1.0 2024-10-12T00:00:00 <p>Information published.</p> 2.0 2026-02-18T01:34:28 <p>Information published.</p> 3.0 2026-08-12T21:14:09 <p>Information published.</p> bonding: fix null pointer deref in bond_ipsec_offload_ok <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-44990 NULL Pointer Dereference 17207-16823 17631-17084 17651-17084 19670-17086 17250-17086 17250-21692 17207-16823 17631-17084 17651-17084 19670-17086 17250-17086 17250-21692 Moderate 17207-16823 Moderate 17631-17084 Moderate 17651-17084 19670-17086 Moderate 17250-17086 Moderate 17250-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17207-16823 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17631-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19670-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-21692 CBL-Mariner Releases 17207-16823 19670-17086 17250-17086 17250-21692 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 19670-17086 17250-17086 17250-21692 CBL-Mariner Releases CBL-Mariner Releases 17631-17084 17651-17084 No Security Update 6.6.51.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17631-17084 17651-17084 CBL-Mariner Releases 1.1 2024-10-15T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> 2.0 2026-02-18T01:30:09 <p>Information published.</p> 1.0 2024-10-12T00:00:00 <p>Information published.</p> 3.0 2026-08-12T21:09:16 <p>Information published.</p> tcp: prevent concurrent execution of tcp_sk_exit_batch <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-44991 17610-17084 17651-17084 17610-17084 17651-17084 Moderate 17610-17084 Moderate 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17610-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 1.1 2026-02-21T02:29:12 <p>Information published.</p> 1.0 2024-10-16T00:00:00 <p>Information published.</p> net: hns3: fix a deadlock problem when config TC during resetting <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-44995 Improper Locking 17207-16823 17631-17084 17651-17084 19670-17086 17250-17086 17250-21692 17207-16823 17631-17084 17651-17084 19670-17086 17250-17086 17250-21692 Moderate 17207-16823 Moderate 17631-17084 Moderate 17651-17084 19670-17086 Moderate 17250-17086 Moderate 17250-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19670-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-21692 CBL-Mariner Releases 17207-16823 19670-17086 17250-17086 17250-21692 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 19670-17086 17250-17086 17250-21692 CBL-Mariner Releases CBL-Mariner Releases 17631-17084 17651-17084 No Security Update 6.6.51.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17631-17084 17651-17084 CBL-Mariner Releases 1.1 2024-10-15T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> 3.0 2026-08-12T21:18:52 <p>Information published.</p> 1.0 2024-10-12T00:00:00 <p>Information published.</p> 2.0 2026-02-18T01:38:14 <p>Information published.</p> vsock: fix recursive ->recvmsg calls <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-44996 Uncontrolled Recursion 17631-17084 17651-17084 17631-17084 17651-17084 Moderate 17631-17084 Moderate 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 CBL-Mariner Releases 17631-17084 17651-17084 No Security Update 6.6.51.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17631-17084 17651-17084 CBL-Mariner Releases 1.0 2024-10-15T00:00:00 <p>Information published.</p> 1.1 2026-02-21T01:19:17 <p>Information published.</p> net: ethernet: mtk_wed: fix use-after-free panic in mtk_wed_setup_tc_block_cb() <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-44997 Use After Free 17631-17084 17651-17084 17631-17084 17651-17084 Important 17631-17084 Important 17651-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17651-17084 CBL-Mariner Releases 17631-17084 17651-17084 No Security Update 6.6.51.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17631-17084 17651-17084 CBL-Mariner Releases 1.0 2024-10-15T00:00:00 <p>Information published.</p> 1.1 2026-02-18T01:38:51 <p>Information published.</p> atm: idt77252: prevent use after free in dequeue_rx() <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-44998 Use After Free 17207-16823 17631-17084 19670-17086 17651-17084 17250-17086 17250-21692 17207-16823 17631-17084 19670-17086 17651-17084 17250-17086 17250-21692 Important 17207-16823 Important 17631-17084 19670-17086 Important 17651-17084 Important 17250-17086 Important 17250-21692 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 19670-17086 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17651-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17250-17086 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17250-21692 CBL-Mariner Releases 17207-16823 19670-17086 17250-17086 17250-21692 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 19670-17086 17250-17086 17250-21692 CBL-Mariner Releases CBL-Mariner Releases 17631-17084 17651-17084 No Security Update 6.6.51.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17631-17084 17651-17084 CBL-Mariner Releases 1.1 2024-10-15T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> 2.0 2026-02-18T01:36:37 <p>Information published.</p> 3.0 2026-08-12T21:16:58 <p>Information published.</p> 1.0 2024-10-12T00:00:00 <p>Information published.</p> gtp: pull network headers in gtp_dev_xmit() <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-44999 Use of Uninitialized Resource 17207-16823 17631-17084 17250-17086 17250-21692 17651-17084 19670-17086 17207-16823 17631-17084 17250-17086 17250-21692 17651-17084 19670-17086 Important 17207-16823 Important 17631-17084 Important 17250-17086 Important 17250-21692 Important 17651-17084 19670-17086 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 17250-17086 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 17250-21692 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 17651-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 19670-17086 CBL-Mariner Releases 17207-16823 17250-17086 17250-21692 19670-17086 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 17250-17086 17250-21692 19670-17086 CBL-Mariner Releases CBL-Mariner Releases 17631-17084 17651-17084 No Security Update 6.6.51.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17631-17084 17651-17084 CBL-Mariner Releases 1.1 2024-10-15T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> 2.0 2026-02-18T01:33:28 <p>Information published.</p> 3.0 2026-08-12T21:13:13 <p>Information published.</p> 1.0 2024-10-12T00:00:00 <p>Information published.</p> fs/netfs/fscache_cookie: add missing "n_accesses" check <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-45000 NULL Pointer Dereference 17631-17084 17651-17084 17631-17084 17651-17084 Moderate 17631-17084 Moderate 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17631-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 CBL-Mariner Releases 17631-17084 17651-17084 No Security Update 6.6.51.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17631-17084 17651-17084 CBL-Mariner Releases 1.0 2024-10-15T00:00:00 <p>Information published.</p> 1.1 2026-02-18T01:29:03 <p>Information published.</p> net: mana: Fix RX buf alloc_size alignment and atomic op panic <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-45001 17610-17084 17651-17084 17610-17084 17651-17084 Moderate 17610-17084 Moderate 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 1.1 2026-02-21T02:31:39 <p>Information published.</p> 1.0 2024-10-16T00:00:00 <p>Information published.</p> rtla/osnoise: Prevent NULL dereference in error handling <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-45002 NULL Pointer Dereference 17631-17084 17651-17084 17631-17084 17651-17084 Moderate 17631-17084 Moderate 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 CBL-Mariner Releases 17631-17084 17651-17084 No Security Update 6.6.51.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17631-17084 17651-17084 CBL-Mariner Releases 1.0 2024-10-15T00:00:00 <p>Information published.</p> 1.1 2026-02-18T01:40:09 <p>Information published.</p> vfs: Don't evict inode under the inode lru traversing context <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-45003 Improper Locking 17207-16823 17610-17084 17651-17084 19670-17086 17250-21692 17250-17086 17207-16823 17610-17084 17651-17084 19670-17086 17250-21692 17250-17086 Moderate 17207-16823 Moderate 17610-17084 Moderate 17651-17084 19670-17086 Moderate 17250-21692 Moderate 17250-17086 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 19670-17086 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-21692 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-17086 CBL-Mariner Releases 17207-16823 19670-17086 17250-21692 17250-17086 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 19670-17086 17250-21692 17250-17086 CBL-Mariner Releases CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 2.0 2026-02-21T02:28:11 <p>Information published.</p> 3.0 2026-08-12T22:00:13 <p>Information published.</p> 1.0 2024-10-14T00:00:00 <p>Information published.</p> 1.1 2024-10-16T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> KVM: s390: fix validity interception issue when gisa is switched off <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-45005 Use of Uninitialized Resource 17610-17084 17651-17084 17610-17084 17651-17084 Moderate 17610-17084 Moderate 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 1.1 2026-02-21T02:23:13 <p>Information published.</p> 1.0 2024-10-16T00:00:00 <p>Information published.</p> xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-45006 NULL Pointer Dereference 17207-16823 17631-17084 17651-17084 19670-17086 17250-17086 17250-21692 17207-16823 17631-17084 17651-17084 19670-17086 17250-17086 17250-21692 Moderate 17207-16823 Moderate 17631-17084 Moderate 17651-17084 19670-17086 Moderate 17250-17086 Moderate 17250-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19670-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-21692 CBL-Mariner Releases 17207-16823 19670-17086 17250-17086 17250-21692 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 19670-17086 17250-17086 17250-21692 CBL-Mariner Releases CBL-Mariner Releases 17631-17084 17651-17084 No Security Update 6.6.51.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17631-17084 17651-17084 CBL-Mariner Releases 1.1 2024-10-15T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> 3.0 2026-08-12T21:07:47 <p>Information published.</p> 1.0 2024-10-12T00:00:00 <p>Information published.</p> 2.0 2026-02-18T01:28:25 <p>Information published.</p> mptcp: pm: only decrement add_addr_accepted for MPJ req <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-45009 17207-16823 17631-17084 19670-17086 17250-17086 17651-17084 17250-21692 17207-16823 17631-17084 19670-17086 17250-17086 17651-17084 17250-21692 Moderate 17207-16823 Moderate 17631-17084 19670-17086 Moderate 17250-17086 Moderate 17651-17084 Moderate 17250-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19670-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-21692 CBL-Mariner Releases 17207-16823 19670-17086 17250-17086 17250-21692 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 19670-17086 17250-17086 17250-21692 CBL-Mariner Releases CBL-Mariner Releases 17631-17084 17651-17084 No Security Update 6.6.51.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17631-17084 17651-17084 CBL-Mariner Releases 1.1 2024-10-15T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> 2.0 2026-02-18T02:42:35 <p>Information published.</p> 3.0 2026-08-12T22:47:19 <p>Information published.</p> 1.0 2024-10-12T00:00:00 <p>Information published.</p> mptcp: pm: only mark 'subflow' endp as available <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-45010 17631-17084 17651-17084 17631-17084 17651-17084 Moderate 17631-17084 Moderate 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17631-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 CBL-Mariner Releases 17631-17084 17651-17084 No Security Update 6.6.51.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17631-17084 17651-17084 CBL-Mariner Releases 1.0 2024-10-15T00:00:00 <p>Information published.</p> 2.0 2026-03-03T14:52:59 <p>Information published.</p> 3.0 2026-03-31T15:08:45 <p>Information published.</p> 1.1 2026-02-18T02:38:35 <p>Information published.</p> 4.0 2026-08-12T22:39:20 <p>Information published.</p> char: xillybus: Check USB endpoints when probing device <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-45011 17207-16823 17631-17084 19670-17086 17651-17084 17250-17086 17250-21692 17207-16823 17631-17084 19670-17086 17651-17084 17250-17086 17250-21692 Moderate 17207-16823 Moderate 17631-17084 19670-17086 Moderate 17651-17084 Moderate 17250-17086 Moderate 17250-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17207-16823 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17631-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19670-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-21692 CBL-Mariner Releases 17207-16823 19670-17086 17250-17086 17250-21692 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 19670-17086 17250-17086 17250-21692 CBL-Mariner Releases CBL-Mariner Releases 17631-17084 17651-17084 No Security Update 6.6.51.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17631-17084 17651-17084 CBL-Mariner Releases 1.1 2024-10-15T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> 2.0 2026-02-21T00:55:22 <p>Information published.</p> 1.0 2024-10-12T00:00:00 <p>Information published.</p> 3.0 2026-08-12T22:50:51 <p>Information published.</p> nouveau/firmware: use dma non-coherent allocator <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-45012 Allocation of Resources Without Limits or Throttling 17631-17084 17651-17084 17631-17084 17651-17084 Moderate 17631-17084 Moderate 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17631-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 CBL-Mariner Releases 17631-17084 17651-17084 No Security Update 6.6.51.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17631-17084 17651-17084 CBL-Mariner Releases 1.0 2024-10-15T00:00:00 <p>Information published.</p> 1.1 2026-02-21T01:08:25 <p>Information published.</p> drm/msm/dpu: move dpu_encoder's connector assignment to atomic_enable() <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-45015 NULL Pointer Dereference 17631-17084 17651-17084 17631-17084 17651-17084 Moderate 17631-17084 Moderate 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 CBL-Mariner Releases 17631-17084 17651-17084 No Security Update 6.6.51.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17631-17084 17651-17084 CBL-Mariner Releases 1.0 2024-10-15T00:00:00 <p>Information published.</p> 1.1 2026-02-18T02:37:52 <p>Information published.</p> 2.0 2026-03-03T14:52:41 <p>Information published.</p> 3.0 2026-03-31T15:08:21 <p>Information published.</p> 4.0 2026-08-12T22:35:31 <p>Information published.</p> netem: fix return value if duplicate enqueue fails <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-45016 Use After Free 17207-16823 17631-17084 19670-17086 17651-17084 17250-17086 17250-21692 17207-16823 17631-17084 19670-17086 17651-17084 17250-17086 17250-21692 Moderate 17207-16823 Moderate 17631-17084 19670-17086 Moderate 17651-17084 Moderate 17250-17086 Moderate 17250-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19670-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-21692 CBL-Mariner Releases 17207-16823 19670-17086 17250-17086 17250-21692 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 19670-17086 17250-17086 17250-21692 CBL-Mariner Releases CBL-Mariner Releases 17631-17084 17651-17084 No Security Update 6.6.51.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17631-17084 17651-17084 CBL-Mariner Releases 1.1 2024-10-15T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> 3.0 2026-08-12T22:54:15 <p>Information published.</p> 1.0 2024-10-12T00:00:00 <p>Information published.</p> 2.0 2026-02-21T00:59:29 <p>Information published.</p> netfilter: flowtable: initialise extack before use <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-45018 Improper Initialization 17207-16823 17631-17084 19670-17086 17651-17084 17250-17086 17250-21692 17207-16823 17631-17084 19670-17086 17651-17084 17250-17086 17250-21692 Moderate 17207-16823 Moderate 17631-17084 19670-17086 Moderate 17651-17084 Moderate 17250-17086 Moderate 17250-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19670-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-21692 CBL-Mariner Releases 17207-16823 19670-17086 17250-17086 17250-21692 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 19670-17086 17250-17086 17250-21692 CBL-Mariner Releases CBL-Mariner Releases 17631-17084 17651-17084 No Security Update 6.6.51.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17631-17084 17651-17084 CBL-Mariner Releases 1.1 2024-10-15T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> 2.0 2026-02-21T00:57:27 <p>Information published.</p> 1.0 2024-10-12T00:00:00 <p>Information published.</p> 3.0 2026-08-12T22:52:32 <p>Information published.</p> net/mlx5e: Take state lock during tx timeout reporter <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-45019 Improper Locking 17631-17084 17651-17084 17631-17084 17651-17084 Moderate 17631-17084 Moderate 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 CBL-Mariner Releases 17631-17084 17651-17084 No Security Update 6.6.51.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17631-17084 17651-17084 CBL-Mariner Releases 1.0 2024-10-15T00:00:00 <p>Information published.</p> 1.1 2026-02-21T01:09:41 <p>Information published.</p> bpf: Fix a kernel verifier crash in stacksafe() <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-45020 Out-of-bounds Write 17631-17084 17651-17084 17631-17084 17651-17084 Moderate 17631-17084 Moderate 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 CBL-Mariner Releases 17631-17084 17651-17084 No Security Update 6.6.51.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17631-17084 17651-17084 CBL-Mariner Releases 1.0 2024-10-15T00:00:00 <p>Information published.</p> 1.1 2026-02-21T01:03:16 <p>Information published.</p> memcg_write_event_control(): fix a user-triggerable oops <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-45021 NULL Pointer Dereference 17207-16823 17631-17084 19670-17086 17250-17086 17250-21692 17651-17084 17207-16823 17631-17084 19670-17086 17250-17086 17250-21692 17651-17084 Moderate 17207-16823 Moderate 17631-17084 19670-17086 Moderate 17250-17086 Moderate 17250-21692 Moderate 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17207-16823 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17631-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19670-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 CBL-Mariner Releases 17207-16823 19670-17086 17250-17086 17250-21692 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 19670-17086 17250-17086 17250-21692 CBL-Mariner Releases CBL-Mariner Releases 17631-17084 17651-17084 No Security Update 6.6.51.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17631-17084 17651-17084 CBL-Mariner Releases 1.1 2024-10-15T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> 2.0 2026-02-18T02:36:07 <p>Information published.</p> 3.0 2026-08-12T22:31:54 <p>Information published.</p> 1.0 2024-10-12T00:00:00 <p>Information published.</p> mm/vmalloc: fix page mapping if vm_area_alloc_pages() with high order fallback to order 0 <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-45022 Out-of-bounds Write 17631-17084 17651-17084 17631-17084 17651-17084 Moderate 17631-17084 Moderate 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 CBL-Mariner Releases 17631-17084 17651-17084 No Security Update 6.6.51.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17631-17084 17651-17084 CBL-Mariner Releases 1.0 2024-10-15T00:00:00 <p>Information published.</p> 1.1 2026-02-21T01:02:01 <p>Information published.</p> fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-45025 Out-of-bounds Write 17207-16823 17631-17084 19670-17086 17651-17084 17250-17086 17250-21692 17207-16823 17631-17084 19670-17086 17651-17084 17250-17086 17250-21692 Moderate 17207-16823 Moderate 17631-17084 19670-17086 Moderate 17651-17084 Moderate 17250-17086 Moderate 17250-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19670-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-21692 CBL-Mariner Releases 17207-16823 19670-17086 17250-17086 17250-21692 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 19670-17086 17250-17086 17250-21692 CBL-Mariner Releases CBL-Mariner Releases 17631-17084 17651-17084 No Security Update 6.6.51.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17631-17084 17651-17084 CBL-Mariner Releases 1.1 2024-10-15T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> 2.0 2026-02-18T02:40:19 <p>Information published.</p> 3.0 2026-08-12T22:42:56 <p>Information published.</p> 1.0 2024-10-12T00:00:00 <p>Information published.</p> s390/dasd: fix error recovery leading to data corruption on ESE devices <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-45026 Out-of-bounds Write 17207-16823 17631-17084 17651-17084 17250-17086 19670-17086 17250-21692 17207-16823 17631-17084 17651-17084 17250-17086 19670-17086 17250-21692 Important 17207-16823 Important 17631-17084 Important 17651-17084 Important 17250-17086 19670-17086 Important 17250-21692 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17651-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17250-17086 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 19670-17086 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17250-21692 CBL-Mariner Releases 17207-16823 17250-17086 19670-17086 17250-21692 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 17250-17086 19670-17086 17250-21692 CBL-Mariner Releases CBL-Mariner Releases 17631-17084 17651-17084 No Security Update 6.6.51.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17631-17084 17651-17084 CBL-Mariner Releases 1.1 2024-10-15T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> 2.0 2026-02-18T02:39:27 <p>Information published.</p> 1.0 2024-10-12T00:00:00 <p>Information published.</p> 3.0 2026-08-12T22:41:09 <p>Information published.</p> mmc: mmc_test: Fix NULL dereference on allocation failure <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-45028 NULL Pointer Dereference 17207-16823 17631-17084 19670-17086 17250-17086 17651-17084 17250-21692 17207-16823 17631-17084 19670-17086 17250-17086 17651-17084 17250-21692 Moderate 17207-16823 Moderate 17631-17084 19670-17086 Moderate 17250-17086 Moderate 17651-17084 Moderate 17250-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19670-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-21692 CBL-Mariner Releases 17207-16823 19670-17086 17250-17086 17250-21692 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 19670-17086 17250-17086 17250-21692 CBL-Mariner Releases CBL-Mariner Releases 17631-17084 17651-17084 No Security Update 6.6.51.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17631-17084 17651-17084 CBL-Mariner Releases 1.1 2024-10-15T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> 2.0 2026-02-21T00:53:30 <p>Information published.</p> 1.0 2024-10-12T00:00:00 <p>Information published.</p> 3.0 2026-08-12T22:49:06 <p>Information published.</p> i2c: tegra: Do not mark ACPI devices as irq safe <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-45029 Improper Locking 17631-17084 17651-17084 17631-17084 17651-17084 Moderate 17631-17084 Moderate 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17631-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 CBL-Mariner Releases 17631-17084 17651-17084 No Security Update 6.6.51.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17631-17084 17651-17084 CBL-Mariner Releases 1.0 2024-10-15T00:00:00 <p>Information published.</p> 1.1 2026-02-21T01:00:49 <p>Information published.</p> igb: cope with large MAX_SKB_FRAGS <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-45030 Out-of-bounds Write 17631-17084 17651-17084 17631-17084 17651-17084 Moderate 17631-17084 Moderate 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 CBL-Mariner Releases 17631-17084 17651-17084 No Security Update 6.6.51.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17631-17084 17651-17084 CBL-Mariner Releases 1.0 2024-10-15T00:00:00 <p>Information published.</p> 1.1 2026-02-21T01:04:34 <p>Information published.</p> An issue was discovered in Mbed TLS 3.x before 3.6.1. With TLS 1.3, when a server enables optional authentication of the client, if the client-provided certificate does not have appropriate values in if keyUsage or extKeyUsage extensions, then the return value of mbedtls_ssl_get_verify_result() would incorrectly have the MBEDTLS_X509_BADCERT_KEY_USAGE and MBEDTLS_X509_BADCERT_KEY_USAGE bits clear. As a result, an attacker that had a certificate valid for uses other than TLS client authentication would nonetheless be able to use it for TLS client authentication. Only TLS 1.3 servers were affected, and only with optional authentication (with required authentication, the handshake would be aborted with a fatal alert). <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2024-45159 Improper Certificate Validation 17238-17086 17238-21692 19809-17086 17238-17086 17238-21692 19809-17086 Critical 17238-17086 Critical 17238-21692 19809-17086 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 17238-17086 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 17238-21692 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 19809-17086 CBL-Mariner Releases 17238-17086 17238-21692 19809-17086 No Security Update 1.0.1-6 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17238-17086 17238-21692 19809-17086 CBL-Mariner Releases 1.0 2024-11-28T00:00:00 <p>Information published.</p> 3.0 2026-08-12T21:53:37 <p>Information published.</p> 2.0 2026-02-18T02:12:46 <p>Information published.</p> 4.0 2026-09-03T01:06:50 <p>Information published.</p> 5.0 2026-09-09T01:55:05 <p>Information published.</p> path-to-regexp outputs backtracking regular expressions <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner GitHub_M Yes CVE-2024-45296 Inefficient Regular Expression Complexity 17220-16823 19820-21692 19820-17086 17220-16823 19820-21692 19820-17086 Important 17220-16823 Important 19820-21692 Important 19820-17086 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 17220-16823 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 19820-21692 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 19820-17086 CBL-Mariner Releases 17220-16823 19820-21692 19820-17086 No Security Update 3.1.1-13 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17220-16823 19820-21692 19820-17086 CBL-Mariner Releases 1.0 2024-10-16T00:00:00 <p>Information published.</p> 1.1 2024-10-25T00:00:00 <p>Added reaper to CBL-Mariner 2.0</p> 1.2 2024-12-03T00:00:00 <p>Added reaper to CBL-Mariner 2.0</p> 1.3 2026-02-18T02:24:09 <p>Information published.</p> 2.0 2026-08-12T22:08:46 <p>Information published.</p> runc can be confused to create empty files/directories on the host <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner GitHub_M Yes CVE-2024-45310 Race Condition Enabling Link Following 17640-17084 19725-17084 19772-21692 19772-17086 17640-17084 19725-17084 19772-21692 19772-17086 Low 17640-17084 Low 19725-17084 Low 19772-21692 Low 19772-17086 3.6 3.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N 17640-17084 3.6 3.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N 19725-17084 3.6 3.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N 19772-21692 3.6 3.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N 19772-17086 CBL-Mariner Releases 17640-17084 19725-17084 No Security Update 1.2.2-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17640-17084 19725-17084 CBL-Mariner Releases CBL-Mariner Releases 19772-21692 19772-17086 No Security Update 1.1.9-8 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19772-21692 19772-17086 CBL-Mariner Releases 1.0 2025-01-10T00:00:00 <p>Information published.</p> 2.0 2025-02-11T00:00:00 <p>Information published.</p> 3.0 2025-04-05T00:00:00 <p>Information published.</p> 5.0 2026-01-03T01:35:10 <p>Information published.</p> 6.0 2026-02-20T23:29:51 <p>Information published.</p> 7.0 2026-03-03T14:46:43 <p>Information published.</p> 4.0 2025-08-06T00:00:00 <p>Added kata-containers to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added runc to Azure Linux 3.0 Added moby-runc to CBL-Mariner 2.0</p> 5.1 2026-02-18T01:08:42 <p>Information published.</p> 8.0 2026-08-12T22:37:20 <p>Information published.</p> HAProxy 2.9.x before 2.9.10 3.0.x before 3.0.4 and 3.1.x through 3.1-dev6 allows a remote denial of service for HTTP/2 zero-copy forwarding (h2_send loop) under a certain set of conditions as exploited in the wild in 2024. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2024-45506 17639-17084 19918-17084 17639-17084 19918-17084 Important 17639-17084 Important 19918-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 17639-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 19918-17084 CBL-Mariner Releases 17639-17084 19918-17084 No Security Update 2.9.11-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17639-17084 19918-17084 CBL-Mariner Releases 1.0 2024-10-15T00:00:00 <p>Information published.</p> 1.1 2026-02-18T01:26:01 <p>Information published.</p> body-parser vulnerable to denial of service when url encoding is enabled <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner GitHub_M Yes CVE-2024-45590 Asymmetric Resource Consumption (Amplification) 17220-16823 17632-17084 19820-17086 19820-21692 19693-17084 17220-16823 17632-17084 19820-17086 19820-21692 19693-17084 Important 17220-16823 Important 17632-17084 Important 19820-17086 Important 19820-21692 Important 19693-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 17220-16823 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 17632-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 19820-17086 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 19820-21692 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 19693-17084 CBL-Mariner Releases 17220-16823 19820-17086 19820-21692 No Security Update 3.1.1-13 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17220-16823 19820-17086 19820-21692 CBL-Mariner Releases CBL-Mariner Releases 17632-17084 19693-17084 No Security Update 2.16.2-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17632-17084 19693-17084 CBL-Mariner Releases 1.0 2024-10-15T00:00:00 <p>Information published.</p> 1.2 2024-10-25T00:00:00 <p>Added reaper to CBL-Mariner 2.0 Added python-tensorboard to Azure Linux 3.0</p> 1.3 2024-12-03T00:00:00 <p>Added reaper to CBL-Mariner 2.0 Added python-tensorboard to Azure Linux 3.0</p> 1.4 2026-02-18T02:30:01 <p>Information published.</p> 2.0 2026-08-12T22:18:00 <p>Information published.</p> 1.1 2024-10-16T00:00:00 <p>Added reaper to CBL-Mariner 2.0 Added python-tensorboard to Azure Linux 3.0</p> Libopensc: pkcs15init: usage of uninitialized values in libopensc and pkcs15init <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner redhat Yes CVE-2024-45615 Use of Uninitialized Variable 19948-17084 19948-17084 Low 19948-17084 3.9 3.9 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L 19948-17084 CBL-Mariner Releases 19948-17084 No Security Update 0.26.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19948-17084 CBL-Mariner Releases 1.0 2025-09-03T20:45:34 <p>Information published.</p> 2.0 2026-08-12T21:15:56 <p>Information published.</p> Libopensc: uninitialized values after incorrect check or usage of apdu response values in libopensc <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner redhat Yes CVE-2024-45616 Use of Uninitialized Variable 19948-17084 19948-17084 Low 19948-17084 3.9 3.9 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L 19948-17084 CBL-Mariner Releases 19948-17084 No Security Update 0.26.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19948-17084 CBL-Mariner Releases 2.0 2026-08-12T21:15:00 <p>Information published.</p> 1.0 2025-09-03T20:42:27 <p>Information published.</p> Libopensc: uninitialized values after incorrect or missing checking return values of functions in libopensc <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner redhat Yes CVE-2024-45617 Use of Uninitialized Variable 19948-17084 19948-17084 Low 19948-17084 3.9 3.9 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L 19948-17084 CBL-Mariner Releases 19948-17084 No Security Update 0.26.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19948-17084 CBL-Mariner Releases 1.0 2025-09-03T20:51:02 <p>Information published.</p> 2.0 2026-08-12T21:17:54 <p>Information published.</p> Libopensc: uninitialized values after incorrect or missing checking return values of functions in pkcs15init <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner redhat Yes CVE-2024-45618 Use of Uninitialized Variable 19948-17084 19948-17084 Low 19948-17084 3.9 3.9 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L 19948-17084 CBL-Mariner Releases 19948-17084 No Security Update 0.26.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19948-17084 CBL-Mariner Releases 1.0 2025-09-03T20:57:53 <p>Information published.</p> 2.0 2026-08-12T21:20:15 <p>Information published.</p> Libopensc: incorrect handling length of buffers or files in libopensc <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner redhat Yes CVE-2024-45619 Buffer Copy without Checking Size of Input (&#39;Classic Buffer Overflow&#39;) 19948-17084 19952-17086 19952-21692 19538-16823 19948-17084 19952-17086 19952-21692 19538-16823 Moderate 19948-17084 Low 19952-17086 Low 19952-21692 Low 19538-16823 4.3 4.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L 19948-17084 3.5 3.5 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L 19952-17086 3.5 3.5 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L 19952-21692 4.3 4.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L 19538-16823 CBL-Mariner Releases 19948-17084 No Security Update 0.26.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19948-17084 CBL-Mariner Releases CBL-Mariner Releases 19952-17086 19952-21692 19538-16823 No Security Update 0.23.0-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19952-17086 19952-21692 19538-16823 CBL-Mariner Releases 1.1 2026-02-18T01:41:12 <p>Information published.</p> 2.0 2026-08-12T21:21:41 <p>Information published.</p> 1.0 2025-07-11T00:00:00 <p>Information published.</p> Libopensc: incorrect handling of the length of buffers or files in pkcs15init <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner redhat Yes CVE-2024-45620 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') 19948-17084 19948-17084 Low 19948-17084 3.9 3.9 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L 19948-17084 CBL-Mariner Releases 19948-17084 No Security Update 0.26.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19948-17084 CBL-Mariner Releases 1.0 2025-09-03T20:34:57 <p>Information published.</p> 2.0 2026-08-12T21:12:14 <p>Information published.</p> Pcp: pmcd heap corruption through metric pmstore operations <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner redhat Yes CVE-2024-45769 Out-of-bounds Write 17630-17084 17630-17084 Moderate 17630-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17630-17084 CBL-Mariner Releases 17630-17084 No Security Update 6.3.2-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17630-17084 CBL-Mariner Releases 1.0 2025-05-15T00:00:00 <p>Information published.</p> Pcp: pmpost symlink attack allows escalating pcp to root user <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner redhat Yes CVE-2024-45770 Improper Link Resolution Before File Access (&#39;Link Following&#39;) 17630-17084 17630-17084 Moderate 17630-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N 17630-17084 CBL-Mariner Releases 17630-17084 No Security Update 6.3.2-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17630-17084 CBL-Mariner Releases 1.0 2025-05-15T00:00:00 <p>Information published.</p> A use-after-free vulnerability involving upgradeToRocket requests can cause the application to crash or potentially result in code execution or other undesirable effects. This issue affects Facebook Thrift prior to v2024.09.09.00. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner facebook Yes CVE-2024-45773 17626-17084 17626-17084 Important 17626-17084 7.5 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H 17626-17084 CBL-Mariner Releases 17626-17084 No Security Update 0.15.0-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17626-17084 CBL-Mariner Releases 1.0 2025-10-01T23:11:34 <p>Information published.</p> 2.0 2026-08-07T00:53:03 <p>Information published.</p> wifi: brcmfmac: cfg80211: Handle SSID based pmksa deletion <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46672 NULL Pointer Dereference 17631-17084 17651-17084 17631-17084 17651-17084 Moderate 17631-17084 Moderate 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 CBL-Mariner Releases 17631-17084 17651-17084 No Security Update 6.6.51.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17631-17084 17651-17084 CBL-Mariner Releases 1.0 2024-10-15T00:00:00 <p>Information published.</p> 1.1 2026-02-21T01:05:55 <p>Information published.</p> scsi: aacraid: Fix double-free on probe failure <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46673 Double Free 17207-16823 17631-17084 17651-17084 17250-17086 19670-17086 17250-21692 17207-16823 17631-17084 17651-17084 17250-17086 19670-17086 17250-21692 Important 17207-16823 Important 17631-17084 Important 17651-17084 Important 17250-17086 19670-17086 Important 17250-21692 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17651-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17250-17086 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 19670-17086 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17250-21692 CBL-Mariner Releases 17207-16823 17250-17086 19670-17086 17250-21692 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 17250-17086 19670-17086 17250-21692 CBL-Mariner Releases CBL-Mariner Releases 17631-17084 17651-17084 No Security Update 6.6.51.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17631-17084 17651-17084 CBL-Mariner Releases 1.1 2024-10-15T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> 2.0 2026-02-18T02:41:12 <p>Information published.</p> 1.0 2024-10-12T00:00:00 <p>Information published.</p> 3.0 2026-08-12T22:44:32 <p>Information published.</p> usb: dwc3: st: fix probed platform device ref count on probe error path <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46674 Use After Free 17207-16823 17631-17084 17651-17084 17250-17086 19670-17086 17250-21692 17207-16823 17631-17084 17651-17084 17250-17086 19670-17086 17250-21692 Important 17207-16823 Important 17631-17084 Important 17651-17084 Important 17250-17086 19670-17086 Important 17250-21692 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17207-16823 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17631-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17651-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17250-17086 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 19670-17086 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17250-21692 CBL-Mariner Releases 17207-16823 17250-17086 19670-17086 17250-21692 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 17250-17086 19670-17086 17250-21692 CBL-Mariner Releases CBL-Mariner Releases 17631-17084 17651-17084 No Security Update 6.6.51.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17631-17084 17651-17084 CBL-Mariner Releases 1.1 2024-10-15T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> 2.0 2026-02-18T02:37:06 <p>Information published.</p> 1.0 2024-10-12T00:00:00 <p>Information published.</p> 3.0 2026-08-12T22:33:51 <p>Information published.</p> usb: dwc3: core: Prevent USB core invalid event buffer address access <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46675 17207-16823 17610-17084 19670-17086 17250-17086 17651-17084 17250-21692 17207-16823 17610-17084 19670-17086 17250-17086 17651-17084 17250-21692 Moderate 17207-16823 Moderate 17610-17084 19670-17086 Moderate 17250-17086 Moderate 17651-17084 Moderate 17250-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17207-16823 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17610-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19670-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-21692 CBL-Mariner Releases 17207-16823 19670-17086 17250-17086 17250-21692 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 19670-17086 17250-17086 17250-21692 CBL-Mariner Releases CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 2.0 2026-02-21T01:59:21 <p>Information published.</p> 3.0 2026-08-12T21:30:11 <p>Information published.</p> 1.0 2024-10-12T00:00:00 <p>Information published.</p> 1.1 2024-10-16T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> nfc: pn533: Add poll mod list filling check <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46676 Divide By Zero 17207-16823 17610-17084 17250-17086 17250-21692 19670-17086 17651-17084 17207-16823 17610-17084 17250-17086 17250-21692 19670-17086 17651-17084 Moderate 17207-16823 Moderate 17610-17084 Moderate 17250-17086 Moderate 17250-21692 19670-17086 Moderate 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19670-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 CBL-Mariner Releases 17207-16823 17250-17086 17250-21692 19670-17086 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 17250-17086 17250-21692 19670-17086 CBL-Mariner Releases CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 2.0 2026-02-21T02:32:40 <p>Information published.</p> 3.0 2026-08-12T21:58:17 <p>Information published.</p> 1.0 2024-10-12T00:00:00 <p>Information published.</p> 1.1 2024-10-16T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> gtp: fix a potential NULL pointer dereference <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46677 NULL Pointer Dereference 17207-16823 17631-17084 19670-17086 17250-17086 17651-17084 17250-21692 17207-16823 17631-17084 19670-17086 17250-17086 17651-17084 17250-21692 Moderate 17207-16823 Moderate 17631-17084 19670-17086 Moderate 17250-17086 Moderate 17651-17084 Moderate 17250-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19670-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-21692 CBL-Mariner Releases 17207-16823 19670-17086 17250-17086 17250-21692 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 19670-17086 17250-17086 17250-21692 CBL-Mariner Releases CBL-Mariner Releases 17631-17084 17651-17084 No Security Update 6.6.51.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17631-17084 17651-17084 CBL-Mariner Releases 1.1 2024-10-15T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> 2.0 2026-02-18T02:35:13 <p>Information published.</p> 1.0 2024-10-12T00:00:00 <p>Information published.</p> 3.0 2026-08-12T22:30:03 <p>Information published.</p> bonding: change ipsec_lock from spin lock to mutex <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46678 Improper Locking 17610-17084 17651-17084 17610-17084 17651-17084 Moderate 17610-17084 Moderate 17651-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17610-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 3.0 2026-03-31T15:14:17 <p>Information published.</p> 5.0 2026-08-12T22:03:39 <p>Information published.</p> 1.0 2024-10-16T00:00:00 <p>Information published.</p> 1.1 2026-02-21T02:36:23 <p>Information published.</p> 2.0 2026-03-03T14:56:36 <p>Information published.</p> 4.0 2026-08-07T00:50:26 <p>Information published.</p> ethtool: check device is present when getting link settings <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46679 17207-16823 17610-17084 19670-17086 17651-17084 17250-17086 17250-21692 17207-16823 17610-17084 19670-17086 17651-17084 17250-17086 17250-21692 Moderate 17207-16823 Moderate 17610-17084 19670-17086 Moderate 17651-17084 Moderate 17250-17086 Moderate 17250-21692 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 19670-17086 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-17086 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-21692 CBL-Mariner Releases 17207-16823 19670-17086 17250-17086 17250-21692 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 19670-17086 17250-17086 17250-21692 CBL-Mariner Releases CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 2.0 2026-02-21T02:26:23 <p>Information published.</p> 3.0 2026-08-12T21:51:07 <p>Information published.</p> 1.0 2024-10-12T00:00:00 <p>Information published.</p> 1.1 2024-10-16T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> Bluetooth: btnxpuart: Fix random crash seen while removing driver <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46680 17610-17084 17651-17084 17610-17084 17651-17084 Moderate 17610-17084 Moderate 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 1.0 2024-10-16T00:00:00 <p>Information published.</p> 1.1 2026-02-21T02:38:17 <p>Information published.</p> pinctrl: single: fix potential NULL dereference in pcs_get_function() <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46685 NULL Pointer Dereference 17207-16823 17631-17084 19670-17086 17250-17086 17651-17084 17250-21692 17207-16823 17631-17084 19670-17086 17250-17086 17651-17084 17250-21692 Moderate 17207-16823 Moderate 17631-17084 19670-17086 Moderate 17250-17086 Moderate 17651-17084 Moderate 17250-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19670-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-21692 CBL-Mariner Releases 17207-16823 19670-17086 17250-17086 17250-21692 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 19670-17086 17250-17086 17250-21692 CBL-Mariner Releases CBL-Mariner Releases 17631-17084 17651-17084 No Security Update 6.6.51.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17631-17084 17651-17084 CBL-Mariner Releases 1.1 2024-10-15T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> 2.0 2026-02-21T01:13:55 <p>Information published.</p> 3.0 2026-08-12T23:01:41 <p>Information published.</p> 1.0 2024-10-12T00:00:00 <p>Information published.</p> smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req() <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46686 NULL Pointer Dereference 17631-17084 17651-17084 17631-17084 17651-17084 Moderate 17631-17084 Moderate 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17631-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 CBL-Mariner Releases 17631-17084 17651-17084 No Security Update 6.6.51.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17631-17084 17651-17084 CBL-Mariner Releases 1.0 2024-10-15T00:00:00 <p>Information published.</p> 1.1 2026-02-21T01:15:06 <p>Information published.</p> btrfs: fix a use-after-free when hitting errors inside btrfs_submit_chunk() <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46687 Double Free 17631-17084 17651-17084 17631-17084 17651-17084 Important 17631-17084 Important 17651-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17651-17084 CBL-Mariner Releases 17631-17084 17651-17084 No Security Update 6.6.51.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17631-17084 17651-17084 CBL-Mariner Releases 1.0 2024-10-15T00:00:00 <p>Information published.</p> 1.1 2026-02-21T01:16:22 <p>Information published.</p> soc: qcom: cmd-db: Map shared memory as WC not WB <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46689 Out-of-bounds Write 17207-16823 17610-17084 17250-17086 17250-21692 19670-17086 17651-17084 17207-16823 17610-17084 17250-17086 17250-21692 19670-17086 17651-17084 Moderate 17207-16823 Moderate 17610-17084 Moderate 17250-17086 Moderate 17250-21692 19670-17086 Moderate 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19670-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 CBL-Mariner Releases 17207-16823 17250-17086 17250-21692 19670-17086 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 17250-17086 17250-21692 19670-17086 CBL-Mariner Releases CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 2.0 2026-02-21T01:42:35 <p>Information published.</p> 3.0 2026-08-12T21:18:19 <p>Information published.</p> 1.0 2024-10-12T00:00:00 <p>Information published.</p> 1.1 2024-10-16T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> firmware: qcom: scm: Mark get_wq_ctx() as atomic call <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46692 Improper Locking 17631-17084 17651-17084 17631-17084 17651-17084 Moderate 17631-17084 Moderate 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 CBL-Mariner Releases 17631-17084 17651-17084 No Security Update 6.6.51.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17631-17084 17651-17084 CBL-Mariner Releases 1.0 2024-10-15T00:00:00 <p>Information published.</p> 1.1 2026-02-21T01:10:58 <p>Information published.</p> soc: qcom: pmic_glink: Fix race during initialization <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46693 NULL Pointer Dereference 17631-17084 17651-17084 17631-17084 17651-17084 Moderate 17631-17084 Moderate 17651-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 CBL-Mariner Releases 17631-17084 17651-17084 No Security Update 6.6.51.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17631-17084 17651-17084 CBL-Mariner Releases 1.0 2024-10-15T00:00:00 <p>Information published.</p> 1.1 2026-02-21T01:07:13 <p>Information published.</p> drm/amd/display: avoid using null object of framebuffer <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46694 NULL Pointer Dereference 17610-17084 17651-17084 17610-17084 17651-17084 Moderate 17610-17084 Moderate 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 1.1 2026-02-21T01:34:24 <p>Information published.</p> 1.0 2024-10-16T00:00:00 <p>Information published.</p> selinuxsmack: don't bypass permissions check in inode_setsecctx hook <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46695 Incorrect Default Permissions 17110-16823 17610-17084 18490-21692 19682-17086 17651-17084 18490-17086 17110-16823 17610-17084 18490-21692 19682-17086 17651-17084 18490-17086 Moderate 17110-16823 Moderate 17610-17084 Moderate 18490-21692 19682-17086 Moderate 17651-17084 Moderate 18490-17086 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N 17110-16823 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N 17610-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N 18490-21692 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N 19682-17086 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N 17651-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N 18490-17086 CBL-Mariner Releases 17110-16823 18490-21692 No Security Update 5.15.176.3-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17110-16823 18490-21692 CBL-Mariner Releases CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases CBL-Mariner Releases 19682-17086 No Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19682-17086 CBL-Mariner Releases 2.0 2026-02-21T01:32:19 <p>Information published.</p> 1.0 2024-10-16T00:00:00 <p>Information published.</p> 3.0 2026-08-12T21:12:45 <p>Information published.</p> thunderbolt: Mark XDomain as unplugged when router is removed <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46702 17207-16823 17610-17084 17651-17084 17250-21692 19670-17086 17250-17086 17207-16823 17610-17084 17651-17084 17250-21692 19670-17086 17250-17086 Moderate 17207-16823 Moderate 17610-17084 Moderate 17651-17084 Moderate 17250-21692 19670-17086 Moderate 17250-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19670-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-17086 CBL-Mariner Releases 17207-16823 17250-21692 19670-17086 17250-17086 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 17250-21692 19670-17086 17250-17086 CBL-Mariner Releases CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 1.0 2024-10-12T00:00:00 <p>Information published.</p> 1.1 2024-10-16T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> 2.0 2026-02-21T01:29:13 <p>Information published.</p> 3.0 2026-08-12T21:10:41 <p>Information published.</p> tty: serial: fsl_lpuart: mark last busy before uart_add_one_port <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46706 17610-17084 17651-17084 17610-17084 17651-17084 Moderate 17610-17084 Moderate 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 1.1 2026-02-21T01:35:29 <p>Information published.</p> 1.0 2024-10-16T00:00:00 <p>Information published.</p> KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3 <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46707 NULL Pointer Dereference 17207-16823 17610-17084 17651-17084 17250-21692 19670-17086 17250-17086 17207-16823 17610-17084 17651-17084 17250-21692 19670-17086 17250-17086 Moderate 17207-16823 Moderate 17610-17084 Moderate 17651-17084 Moderate 17250-21692 19670-17086 Moderate 17250-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19670-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-17086 CBL-Mariner Releases 17207-16823 17250-21692 19670-17086 17250-17086 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 17250-21692 19670-17086 17250-17086 CBL-Mariner Releases CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 3.0 2026-08-12T21:11:41 <p>Information published.</p> 1.0 2024-10-12T00:00:00 <p>Information published.</p> 1.1 2024-10-16T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> 2.0 2026-02-21T01:30:52 <p>Information published.</p> drm/vmwgfx: Fix prime with external buffers <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46709 17610-17084 17651-17084 17610-17084 17651-17084 Moderate 17610-17084 Moderate 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 1.1 2026-02-21T01:36:35 <p>Information published.</p> 1.0 2024-10-16T00:00:00 <p>Information published.</p> drm/vmwgfx: Prevent unmapping active read buffers <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46710 17601-17084 19529-17084 17601-17084 19529-17084 Moderate 17601-17084 Moderate 19529-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 19529-17084 CBL-Mariner Releases 17601-17084 19529-17084 No Security Update 6.6.57.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17601-17084 19529-17084 CBL-Mariner Releases 1.0 2024-11-09T00:00:00 <p>Information published.</p> 1.1 2026-02-21T01:25:24 <p>Information published.</p> mptcp: pm: fix ID 0 endp usage after multiple re-creations <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46711 17610-17084 17651-17084 17610-17084 17651-17084 Moderate 17610-17084 Moderate 17651-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 17610-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 1.1 2026-02-21T01:33:21 <p>Information published.</p> 1.0 2024-10-16T00:00:00 <p>Information published.</p> drm/amd/display: Skip wbscl_set_scaler_filter if filter is null <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46714 NULL Pointer Dereference 17207-16823 17610-17084 17651-17084 17250-17086 19670-17086 17250-21692 17207-16823 17610-17084 17651-17084 17250-17086 19670-17086 17250-21692 Moderate 17207-16823 Moderate 17610-17084 Moderate 17651-17084 Moderate 17250-17086 19670-17086 Moderate 17250-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19670-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-21692 CBL-Mariner Releases 17207-16823 17250-17086 19670-17086 17250-21692 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 17250-17086 19670-17086 17250-21692 CBL-Mariner Releases CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 2.0 2026-02-21T02:57:41 <p>Information published.</p> 3.0 2026-08-12T22:38:12 <p>Information published.</p> 1.0 2024-10-12T00:00:00 <p>Information published.</p> 1.1 2024-10-16T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46716 Use After Free 17087-17086 20925-17086 21093 21093-17086 17087-17086 20925-17086 21093 21093-17086 Moderate 17087-17086 Moderate 20925-17086 Moderate 21093 Moderate 21093-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17087-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20925-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21093 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21093-17086 1.0 2025-10-28T01:38:24 <p>Information published.</p> 2.0 2026-03-03T14:59:30 <p>Information published.</p> 3.0 2026-03-31T14:37:01 <p>Information published.</p> 4.0 2026-08-07T00:40:04 <p>Information published.</p> net/mlx5e: SHAMPO, Fix incorrect page release <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46717 21093-17086 17087-17086 20925-17086 21093 21093-17086 17087-17086 20925-17086 21093 Moderate 21093-17086 Moderate 17087-17086 Moderate 20925-17086 Moderate 21093 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21093-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17087-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20925-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21093 2.0 2026-03-03T15:02:24 <p>Information published.</p> 4.0 2026-08-07T00:42:35 <p>Information published.</p> 1.0 2025-10-11T01:01:45 <p>Information published.</p> 3.0 2026-03-31T14:39:24 <p>Information published.</p> usb: typec: ucsi: Fix null pointer dereference in trace <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46719 NULL Pointer Dereference 17207-16823 17610-17084 19670-17086 17651-17084 17250-17086 17250-21692 17207-16823 17610-17084 19670-17086 17651-17084 17250-17086 17250-21692 Moderate 17207-16823 Moderate 17610-17084 19670-17086 Moderate 17651-17084 Moderate 17250-17086 Moderate 17250-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19670-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-21692 CBL-Mariner Releases 17207-16823 19670-17086 17250-17086 17250-21692 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 19670-17086 17250-17086 17250-21692 CBL-Mariner Releases CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 2.0 2026-02-21T01:55:20 <p>Information published.</p> 1.0 2024-10-12T00:00:00 <p>Information published.</p> 1.1 2024-10-16T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> 3.0 2026-08-12T21:27:08 <p>Information published.</p> drm/amdgpu: fix dereference after null check <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46720 NULL Pointer Dereference 17610-17084 17651-17084 17610-17084 17651-17084 Moderate 17610-17084 Moderate 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 1.1 2026-02-21T02:00:29 <p>Information published.</p> 2.0 2026-03-03T14:55:11 <p>Information published.</p> 3.0 2026-03-31T15:12:22 <p>Information published.</p> 1.0 2024-10-16T00:00:00 <p>Information published.</p> 4.0 2026-08-12T21:31:04 <p>Information published.</p> apparmor: fix possible NULL pointer dereference <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46721 NULL Pointer Dereference 17207-16823 17610-17084 17250-17086 19670-17086 17651-17084 17250-21692 17207-16823 17610-17084 17250-17086 19670-17086 17651-17084 17250-21692 Moderate 17207-16823 Moderate 17610-17084 Moderate 17250-17086 19670-17086 Moderate 17651-17084 Moderate 17250-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17207-16823 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17610-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19670-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-21692 CBL-Mariner Releases 17207-16823 17250-17086 19670-17086 17250-21692 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 17250-17086 19670-17086 17250-21692 CBL-Mariner Releases CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 2.0 2026-02-21T01:48:24 <p>Information published.</p> 1.0 2024-10-12T00:00:00 <p>Information published.</p> 1.1 2024-10-16T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> 3.0 2026-08-12T21:22:08 <p>Information published.</p> drm/amdgpu: fix mc_data out-of-bounds read warning <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46722 Out-of-bounds Read 17207-16823 17610-17084 17651-17084 17250-17086 19670-17086 17250-21692 17207-16823 17610-17084 17651-17084 17250-17086 19670-17086 17250-21692 Important 17207-16823 Important 17610-17084 Important 17651-17084 Important 17250-17086 19670-17086 Important 17250-21692 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 17651-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 17250-17086 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 19670-17086 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 17250-21692 CBL-Mariner Releases 17207-16823 17250-17086 19670-17086 17250-21692 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 17250-17086 19670-17086 17250-21692 CBL-Mariner Releases CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 2.0 2026-02-21T01:49:51 <p>Information published.</p> 3.0 2026-08-12T21:23:08 <p>Information published.</p> 1.0 2024-10-12T00:00:00 <p>Information published.</p> 1.1 2024-10-16T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> drm/amdgpu: fix ucode out-of-bounds read warning <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46723 Out-of-bounds Read 17207-16823 17610-17084 19670-17086 17250-17086 17651-17084 17250-21692 17207-16823 17610-17084 19670-17086 17250-17086 17651-17084 17250-21692 Important 17207-16823 Important 17610-17084 19670-17086 Important 17250-17086 Important 17651-17084 Important 17250-21692 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 19670-17086 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 17250-17086 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 17651-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 17250-21692 CBL-Mariner Releases 17207-16823 19670-17086 17250-17086 17250-21692 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 19670-17086 17250-17086 17250-21692 CBL-Mariner Releases CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 3.0 2026-08-12T21:24:09 <p>Information published.</p> 1.0 2024-10-12T00:00:00 <p>Information published.</p> 1.1 2024-10-16T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> 2.0 2026-02-21T01:51:13 <p>Information published.</p> drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46724 Out-of-bounds Read 17207-16823 17610-17084 17651-17084 17250-17086 19670-17086 17250-21692 17207-16823 17610-17084 17651-17084 17250-17086 19670-17086 17250-21692 Important 17207-16823 Important 17610-17084 Important 17651-17084 Important 17250-17086 19670-17086 Important 17250-21692 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 17651-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 17250-17086 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 19670-17086 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 17250-21692 CBL-Mariner Releases 17207-16823 17250-17086 19670-17086 17250-21692 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 17250-17086 19670-17086 17250-21692 CBL-Mariner Releases CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 2.0 2026-02-21T01:38:12 <p>Information published.</p> 3.0 2026-08-12T21:15:10 <p>Information published.</p> 1.0 2024-10-12T00:00:00 <p>Information published.</p> 1.1 2024-10-16T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> drm/amdgpu: Fix out-of-bounds write warning <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46725 Out-of-bounds Write 17207-16823 17610-17084 19670-17086 17250-17086 17651-17084 17250-21692 17207-16823 17610-17084 19670-17086 17250-17086 17651-17084 17250-21692 Important 17207-16823 Important 17610-17084 19670-17086 Important 17250-17086 Important 17651-17084 Important 17250-21692 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 19670-17086 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17250-17086 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17651-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17250-21692 CBL-Mariner Releases 17207-16823 19670-17086 17250-17086 17250-21692 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 19670-17086 17250-17086 17250-21692 CBL-Mariner Releases CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 2.0 2026-02-21T01:57:59 <p>Information published.</p> 3.0 2026-08-12T21:29:10 <p>Information published.</p> 1.0 2024-10-12T00:00:00 <p>Information published.</p> 1.1 2024-10-16T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> drm/amd/display: Ensure index calculation will not overflow <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46726 Integer Overflow or Wraparound 17610-17084 17651-17084 17610-17084 17651-17084 Moderate 17610-17084 Moderate 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17610-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 1.1 2026-02-21T01:46:54 <p>Information published.</p> 2.0 2026-03-03T14:54:38 <p>Information published.</p> 3.0 2026-03-31T15:11:33 <p>Information published.</p> 4.0 2026-08-12T21:21:09 <p>Information published.</p> 1.0 2024-10-16T00:00:00 <p>Information published.</p> drm/amd/display: Check index for aux_rd_interval before using <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46728 17610-17084 17651-17084 17610-17084 17651-17084 Moderate 17610-17084 Moderate 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17610-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 2.0 2026-03-03T14:57:33 <p>Information published.</p> 3.0 2026-03-31T15:15:18 <p>Information published.</p> 4.0 2026-08-12T22:11:19 <p>Information published.</p> 1.0 2024-10-16T00:00:00 <p>Information published.</p> 1.1 2026-02-21T02:41:47 <p>Information published.</p> drm/amd/pm: fix the Out-of-bounds read warning <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46731 Out-of-bounds Read 17207-16823 17610-17084 17250-17086 17250-21692 19670-17086 17651-17084 17207-16823 17610-17084 17250-17086 17250-21692 19670-17086 17651-17084 Important 17207-16823 Important 17610-17084 Important 17250-17086 Important 17250-21692 19670-17086 Important 17651-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 17250-17086 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 17250-21692 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 19670-17086 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 17651-17084 CBL-Mariner Releases 17207-16823 17250-17086 17250-21692 19670-17086 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 17250-17086 17250-21692 19670-17086 CBL-Mariner Releases CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 1.0 2024-10-12T00:00:00 <p>Information published.</p> 1.1 2024-10-16T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> 2.0 2026-02-21T02:46:01 <p>Information published.</p> 3.0 2026-08-12T22:16:41 <p>Information published.</p> drm/amd/display: Assign linear_pitch_alignment even for VM <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46732 Divide By Zero 17207-16823 17610-17084 19670-17086 17651-17084 17250-17086 17250-21692 17207-16823 17610-17084 19670-17086 17651-17084 17250-17086 17250-21692 Moderate 17207-16823 Moderate 17610-17084 19670-17086 Moderate 17651-17084 Moderate 17250-17086 Moderate 17250-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19670-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-21692 CBL-Mariner Releases 17207-16823 19670-17086 17250-17086 17250-21692 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 19670-17086 17250-17086 17250-21692 CBL-Mariner Releases CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 2.0 2026-02-21T02:44:19 <p>Information published.</p> 3.0 2026-08-12T22:14:43 <p>Information published.</p> 1.0 2024-10-12T00:00:00 <p>Information published.</p> 1.1 2024-10-16T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> btrfs: fix qgroup reserve leaks in cow_file_range <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46733 19529-17084 17087-17086 20925-17086 21093-17086 19734-17084 19529-17084 17087-17086 20925-17086 21093-17086 19734-17084 Moderate 19529-17084 Moderate 17087-17086 Moderate 20925-17086 Moderate 21093-17086 Moderate 19734-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17087-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20925-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21093-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19734-17084 CBL-Mariner Releases 19529-17084 19734-17084 No Security Update 6.6.92.2-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19529-17084 19734-17084 CBL-Mariner Releases 1.1 2026-02-18T02:54:17 <p>Information published.</p> 3.0 2026-03-31T15:13:46 <p>Information published.</p> 1.0 2025-07-11T00:00:00 <p>Information published.</p> 2.0 2026-03-03T14:52:49 <p>Information published.</p> ublk_drv: fix NULL pointer dereference in ublk_ctrl_start_recovery() <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46735 NULL Pointer Dereference 17610-17084 17651-17084 17610-17084 17651-17084 Moderate 17610-17084 Moderate 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 1.1 2026-02-21T02:09:59 <p>Information published.</p> 1.0 2024-10-16T00:00:00 <p>Information published.</p> nvmet-tcp: fix kernel crash if commands allocation fails <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46737 NULL Pointer Dereference 17207-16823 17610-17084 19670-17086 17250-17086 17250-21692 17651-17084 17207-16823 17610-17084 19670-17086 17250-17086 17250-21692 17651-17084 Moderate 17207-16823 Moderate 17610-17084 19670-17086 Moderate 17250-17086 Moderate 17250-21692 Moderate 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19670-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 CBL-Mariner Releases 17207-16823 19670-17086 17250-17086 17250-21692 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 19670-17086 17250-17086 17250-21692 CBL-Mariner Releases CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 2.0 2026-02-21T02:06:51 <p>Information published.</p> 3.0 2026-08-12T21:36:08 <p>Information published.</p> 1.0 2024-10-12T00:00:00 <p>Information published.</p> 1.1 2024-10-16T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> VMCI: Fix use-after-free when removing resource in vmci_resource_remove() <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46738 Use After Free 17207-16823 17610-17084 19670-17086 17651-17084 17250-17086 17250-21692 17207-16823 17610-17084 19670-17086 17651-17084 17250-17086 17250-21692 Important 17207-16823 Important 17610-17084 19670-17086 Important 17651-17084 Important 17250-17086 Important 17250-21692 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 19670-17086 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17651-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17250-17086 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17250-21692 CBL-Mariner Releases 17207-16823 19670-17086 17250-17086 17250-21692 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 19670-17086 17250-17086 17250-21692 CBL-Mariner Releases CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 2.0 2026-02-21T01:41:09 <p>Information published.</p> 3.0 2026-08-12T21:17:16 <p>Information published.</p> 1.0 2024-10-12T00:00:00 <p>Information published.</p> 1.1 2024-10-16T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46739 NULL Pointer Dereference 17207-16823 17610-17084 17250-17086 17250-21692 19670-17086 17651-17084 17207-16823 17610-17084 17250-17086 17250-21692 19670-17086 17651-17084 Moderate 17207-16823 Moderate 17610-17084 Moderate 17250-17086 Moderate 17250-21692 19670-17086 Moderate 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17207-16823 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17610-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19670-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 CBL-Mariner Releases 17207-16823 17250-17086 17250-21692 19670-17086 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 17250-17086 17250-21692 19670-17086 CBL-Mariner Releases CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 2.0 2026-02-21T01:52:49 <p>Information published.</p> 3.0 2026-08-12T21:25:11 <p>Information published.</p> 1.0 2024-10-12T00:00:00 <p>Information published.</p> 1.1 2024-10-16T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> binder: fix UAF caused by offsets overwrite <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46740 Use After Free 17207-16823 17610-17084 17651-17084 17250-17086 17250-21692 19670-17086 17207-16823 17610-17084 17651-17084 17250-17086 17250-21692 19670-17086 Important 17207-16823 Important 17610-17084 Important 17651-17084 Important 17250-17086 Important 17250-21692 19670-17086 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17207-16823 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17610-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17651-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17250-17086 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17250-21692 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 19670-17086 CBL-Mariner Releases 17207-16823 17250-17086 17250-21692 19670-17086 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 17250-17086 17250-21692 19670-17086 CBL-Mariner Releases CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 2.0 2026-02-21T02:03:03 <p>Information published.</p> 3.0 2026-08-12T21:33:07 <p>Information published.</p> 1.0 2024-10-12T00:00:00 <p>Information published.</p> 1.1 2024-10-16T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> misc: fastrpc: Fix double free of 'buf' in error path <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46741 Double Free 17610-17084 17651-17084 17610-17084 17651-17084 Important 17610-17084 Important 17651-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17651-17084 CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 1.1 2026-02-21T02:08:30 <p>Information published.</p> 1.0 2024-10-16T00:00:00 <p>Information published.</p> smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open() <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46742 NULL Pointer Dereference 17610-17084 17095-17086 17095-21692 19673-17086 17651-17084 17610-17084 17095-17086 17095-21692 19673-17086 17651-17084 Moderate 17610-17084 Moderate 17095-17086 Moderate 17095-21692 19673-17086 Moderate 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17095-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17095-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19673-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases CBL-Mariner Releases 17095-21692 No Security Update 5.15.182.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17095-21692 CBL-Mariner Releases CBL-Mariner Releases 19673-17086 No Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19673-17086 CBL-Mariner Releases 2.0 2026-02-21T02:01:46 <p>Information published.</p> 1.0 2024-10-16T00:00:00 <p>Information published.</p> 3.0 2026-08-12T21:32:05 <p>Information published.</p> of/irq: Prevent device address out-of-bounds read in interrupt map walk <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46743 Out-of-bounds Read 17207-16823 17610-17084 17651-17084 17250-17086 17250-21692 19670-17086 17207-16823 17610-17084 17651-17084 17250-17086 17250-21692 19670-17086 Important 17207-16823 Important 17610-17084 Important 17651-17084 Important 17250-17086 Important 17250-21692 19670-17086 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 17651-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 17250-17086 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 17250-21692 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 19670-17086 CBL-Mariner Releases 17207-16823 17250-17086 17250-21692 19670-17086 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 17250-17086 17250-21692 19670-17086 CBL-Mariner Releases CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 2.0 2026-02-21T02:04:21 <p>Information published.</p> 3.0 2026-08-12T21:34:10 <p>Information published.</p> 1.0 2024-10-12T00:00:00 <p>Information published.</p> 1.1 2024-10-16T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> Squashfs: sanity check symbolic link size <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46744 Improper Link Resolution Before File Access ('Link Following') 17207-16823 17610-17084 17651-17084 19670-17086 17250-21692 17250-17086 17207-16823 17610-17084 17651-17084 19670-17086 17250-21692 17250-17086 Important 17207-16823 Important 17610-17084 Important 17651-17084 19670-17086 Important 17250-21692 Important 17250-17086 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17207-16823 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17610-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17651-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 19670-17086 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17250-21692 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17250-17086 CBL-Mariner Releases 17207-16823 19670-17086 17250-21692 17250-17086 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 19670-17086 17250-21692 17250-17086 CBL-Mariner Releases CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 1.0 2024-10-12T00:00:00 <p>Information published.</p> 1.1 2024-10-16T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> 2.0 2026-02-21T02:56:31 <p>Information published.</p> 3.0 2026-08-12T22:36:21 <p>Information published.</p> HID: amd_sfh: free driver_data after destroying hid device <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46746 Use After Free 17207-16823 17610-17084 19670-17086 17651-17084 17250-17086 17250-21692 17207-16823 17610-17084 19670-17086 17651-17084 17250-17086 17250-21692 Important 17207-16823 Important 17610-17084 19670-17086 Important 17651-17084 Important 17250-17086 Important 17250-21692 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 19670-17086 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17651-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17250-17086 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17250-21692 CBL-Mariner Releases 17207-16823 19670-17086 17250-17086 17250-21692 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 19670-17086 17250-17086 17250-21692 CBL-Mariner Releases CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 2.0 2026-02-21T02:39:40 <p>Information published.</p> 3.0 2026-08-12T22:08:05 <p>Information published.</p> 1.0 2024-10-12T00:00:00 <p>Information published.</p> 1.1 2024-10-16T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46747 Out-of-bounds Read 17207-16823 17610-17084 19670-17086 17651-17084 17250-17086 17250-21692 17207-16823 17610-17084 19670-17086 17651-17084 17250-17086 17250-21692 Important 17207-16823 Important 17610-17084 19670-17086 Important 17651-17084 Important 17250-17086 Important 17250-21692 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 19670-17086 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 17651-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 17250-17086 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 17250-21692 CBL-Mariner Releases 17207-16823 19670-17086 17250-17086 17250-21692 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 19670-17086 17250-17086 17250-21692 CBL-Mariner Releases CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 3.0 2026-08-12T21:16:10 <p>Information published.</p> 1.0 2024-10-12T00:00:00 <p>Information published.</p> 1.1 2024-10-16T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> 2.0 2026-02-21T01:39:46 <p>Information published.</p> Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush() <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46749 NULL Pointer Dereference 17610-17084 17651-17084 17610-17084 17651-17084 Moderate 17610-17084 Moderate 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 1.1 2026-02-21T01:53:57 <p>Information published.</p> 2.0 2026-03-03T14:54:54 <p>Information published.</p> 3.0 2026-03-31T15:11:57 <p>Information published.</p> 4.0 2026-08-12T21:26:09 <p>Information published.</p> 1.0 2024-10-16T00:00:00 <p>Information published.</p> PCI: Add missing bridge lock to pci_bus_lock() <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46750 Improper Locking 17207-16823 17610-17084 19670-17086 17651-17084 17250-17086 17250-21692 17207-16823 17610-17084 19670-17086 17651-17084 17250-17086 17250-21692 Moderate 17207-16823 Moderate 17610-17084 19670-17086 Moderate 17651-17084 Moderate 17250-17086 Moderate 17250-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19670-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-21692 CBL-Mariner Releases 17207-16823 19670-17086 17250-17086 17250-21692 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 19670-17086 17250-17086 17250-21692 CBL-Mariner Releases CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 2.0 2026-02-21T02:55:23 <p>Information published.</p> 1.0 2024-10-12T00:00:00 <p>Information published.</p> 1.1 2024-10-16T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> 3.0 2026-08-12T22:34:31 <p>Information published.</p> btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info() <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46751 18490-21692 19529-17084 19682-17086 18490-17086 18490-21692 19529-17084 19682-17086 18490-17086 Moderate 18490-21692 Moderate 19529-17084 19682-17086 Moderate 18490-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 18490-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19529-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19682-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 18490-17086 CBL-Mariner Releases 18490-21692 No Security Update 5.15.184.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18490-21692 CBL-Mariner Releases CBL-Mariner Releases 19529-17084 No Security Update 6.6.92.2-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19529-17084 CBL-Mariner Releases CBL-Mariner Releases 19682-17086 No Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19682-17086 CBL-Mariner Releases 2.0 2026-02-21T02:51:59 <p>Information published.</p> 1.0 2025-09-03T22:38:08 <p>Information published.</p> 3.0 2026-08-12T22:26:05 <p>Information published.</p> btrfs: handle errors from btrfs_dec_ref() properly <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46753 19529-17084 19734-17084 19529-17084 19734-17084 Moderate 19529-17084 Moderate 19734-17084 6.3 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H 19734-17084 CBL-Mariner Releases 19529-17084 19734-17084 No Security Update 6.6.92.2-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19529-17084 19734-17084 CBL-Mariner Releases 1.0 2025-07-11T00:00:00 <p>Information published.</p> 1.1 2026-02-18T14:17:44 <p>Information published.</p> bpf: Remove tst_run from lwt_seg6local_prog_ops. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46754 20412-17084 17087-17086 20553-17084 20613-17084 20725-17084 20860-17084 20956-17084 21094-17084 21248-17084 21580-17084 21093 19683-17084 20788-17084 20823-17084 20925-17086 21093-17086 21308-17084 21332-17084 21344-17084 21443-17084 21474-17084 21626-17084 21684-17084 21093-21692 21892-17084 21932-17084 20412-17084 17087-17086 20553-17084 20613-17084 20725-17084 20860-17084 20956-17084 21094-17084 21248-17084 21580-17084 21093 19683-17084 20788-17084 20823-17084 20925-17086 21093-17086 21308-17084 21332-17084 21344-17084 21443-17084 21474-17084 21626-17084 21684-17084 21093-21692 21892-17084 21932-17084 Moderate 20412-17084 Moderate 17087-17086 Moderate 20553-17084 Moderate 20613-17084 Moderate 20725-17084 Moderate 20860-17084 Moderate 20956-17084 Moderate 21094-17084 Moderate 21248-17084 Moderate 21580-17084 Moderate 21093 19683-17084 Moderate 20788-17084 Moderate 20823-17084 Moderate 20925-17086 Moderate 21093-17086 Moderate 21308-17084 Moderate 21332-17084 Moderate 21344-17084 Moderate 21443-17084 Moderate 21474-17084 Moderate 21626-17084 Moderate 21684-17084 Moderate 21093-21692 Moderate 21892-17084 Moderate 21932-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20412-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17087-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20553-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20613-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20725-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20860-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20956-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21094-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21248-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21580-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21093 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19683-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20788-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20823-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20925-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21093-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21308-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21332-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21344-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21443-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21474-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21626-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21093-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21892-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 21093-21692 Security Update 21684-17084 21093-21692 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 1.0 2025-09-03T23:16:45 <p>Information published.</p> 2.0 2025-12-07T01:49:45 <p>Information published.</p> 3.0 2026-01-08T14:48:11 <p>Information published.</p> 5.0 2026-02-19T01:46:34 <p>Information published.</p> 6.0 2026-03-03T15:00:07 <p>Information published.</p> 7.0 2026-03-05T01:40:37 <p>Information published.</p> 8.0 2026-03-31T15:05:14 <p>Information published.</p> 9.0 2026-04-29T14:50:09 <p>Information published.</p> 11.0 2026-05-11T01:43:23 <p>Information published.</p> 14.0 2026-06-28T01:50:58 <p>Information published.</p> 15.0 2026-07-12T14:57:08 <p>Information published.</p> 16.0 2026-08-07T00:39:55 <p>Information published.</p> 17.0 2026-08-10T14:46:57 <p>Information published.</p> 18.0 2026-09-05T01:46:10 <p>Information published.</p> 19.0 2026-09-23T02:19:45 <p>Information published.</p> 4.0 2026-01-20T14:44:18 <p>Information published.</p> 10.0 2026-05-06T14:44:31 <p>Information published.</p> 12.0 2026-05-17T14:44:34 <p>Information published.</p> 13.0 2026-06-17T14:46:19 <p>Information published.</p> 20.0 2026-09-24T01:42:42 <p>Information published.</p> 21.0 2026-09-24T01:55:30 <p>Information published.</p> wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id() <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46755 NULL Pointer Dereference 17207-16823 17610-17084 17250-17086 17250-21692 19670-17086 17651-17084 17207-16823 17610-17084 17250-17086 17250-21692 19670-17086 17651-17084 Moderate 17207-16823 Moderate 17610-17084 Moderate 17250-17086 Moderate 17250-21692 19670-17086 Moderate 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19670-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 CBL-Mariner Releases 17207-16823 17250-17086 17250-21692 19670-17086 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 17250-17086 17250-21692 19670-17086 CBL-Mariner Releases CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 3.0 2026-08-12T22:18:23 <p>Information published.</p> 1.0 2024-10-12T00:00:00 <p>Information published.</p> 1.1 2024-10-16T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> 2.0 2026-02-21T02:47:01 <p>Information published.</p> Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46756 17207-16823 17610-17084 19670-17086 17250-17086 17250-21692 17651-17084 17207-16823 17610-17084 19670-17086 17250-17086 17250-21692 17651-17084 Important 17207-16823 Important 17610-17084 19670-17086 Important 17250-17086 Important 17250-21692 Important 17651-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 19670-17086 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17250-17086 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17250-21692 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17651-17084 CBL-Mariner Releases 17207-16823 19670-17086 17250-17086 17250-21692 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 19670-17086 17250-17086 17250-21692 CBL-Mariner Releases CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 2.0 2026-02-21T02:18:55 <p>Information published.</p> 3.0 2026-08-12T21:44:28 <p>Information published.</p> 1.0 2024-10-12T00:00:00 <p>Information published.</p> 1.1 2024-10-16T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> 1.2 2025-01-10T00:00:00 <p>Added kernel to CBL-Mariner 2.0 Added kernel to Azure Linux 3.0</p> Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46757 17207-16823 17610-17084 17250-17086 17250-21692 19670-17086 17651-17084 17207-16823 17610-17084 17250-17086 17250-21692 19670-17086 17651-17084 Important 17207-16823 Important 17610-17084 Important 17250-17086 Important 17250-21692 19670-17086 Important 17651-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17250-17086 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17250-21692 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 19670-17086 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17651-17084 CBL-Mariner Releases 17207-16823 17250-17086 17250-21692 19670-17086 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 17250-17086 17250-21692 19670-17086 CBL-Mariner Releases CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 2.0 2026-02-21T02:29:34 <p>Information published.</p> 3.0 2026-08-12T21:54:39 <p>Information published.</p> 1.0 2024-10-12T00:00:00 <p>Information published.</p> 1.1 2024-10-16T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> 1.2 2025-01-10T00:00:00 <p>Added kernel to CBL-Mariner 2.0 Added kernel to Azure Linux 3.0</p> Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46758 17207-16823 17610-17084 17250-17086 17250-21692 19670-17086 17651-17084 17207-16823 17610-17084 17250-17086 17250-21692 19670-17086 17651-17084 Important 17207-16823 Important 17610-17084 Important 17250-17086 Important 17250-21692 19670-17086 Important 17651-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17250-17086 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17250-21692 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 19670-17086 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17651-17084 CBL-Mariner Releases 17207-16823 17250-17086 17250-21692 19670-17086 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 17250-17086 17250-21692 19670-17086 CBL-Mariner Releases CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 3.0 2026-08-12T21:43:28 <p>Information published.</p> 1.0 2024-10-12T00:00:00 <p>Information published.</p> 1.1 2024-10-16T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> 1.2 2025-01-10T00:00:00 <p>Added kernel to CBL-Mariner 2.0 Added kernel to Azure Linux 3.0</p> 2.0 2026-02-21T02:17:10 <p>Information published.</p> hwmon: (adc128d818) Fix underflows seen when writing limit attributes <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46759 Integer Underflow (Wrap or Wraparound) 17207-16823 17610-17084 19670-17086 17250-17086 17250-21692 17651-17084 17207-16823 17610-17084 19670-17086 17250-17086 17250-21692 17651-17084 Important 17207-16823 Important 17610-17084 19670-17086 Important 17250-17086 Important 17250-21692 Important 17651-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 19670-17086 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17250-17086 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17250-21692 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17651-17084 CBL-Mariner Releases 17207-16823 19670-17086 17250-17086 17250-21692 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 19670-17086 17250-17086 17250-21692 CBL-Mariner Releases CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 2.0 2026-02-21T02:27:58 <p>Information published.</p> 3.0 2026-08-12T21:53:01 <p>Information published.</p> 1.0 2024-10-12T00:00:00 <p>Information published.</p> 1.1 2024-10-16T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> wifi: rtw88: usb: schedule rx work after everything is set up <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46760 NULL Pointer Dereference 17610-17084 17651-17084 17610-17084 17651-17084 Moderate 17610-17084 Moderate 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 2.0 2026-03-03T14:55:43 <p>Information published.</p> 3.0 2026-03-31T15:13:07 <p>Information published.</p> 4.0 2026-08-12T21:45:26 <p>Information published.</p> 1.0 2024-10-16T00:00:00 <p>Information published.</p> 1.1 2026-02-21T02:20:14 <p>Information published.</p> pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46761 NULL Pointer Dereference 17207-16823 17610-17084 17250-17086 17250-21692 19670-17086 17651-17084 17207-16823 17610-17084 17250-17086 17250-21692 19670-17086 17651-17084 Moderate 17207-16823 Moderate 17610-17084 Moderate 17250-17086 Moderate 17250-21692 19670-17086 Moderate 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17207-16823 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17610-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19670-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 CBL-Mariner Releases 17207-16823 17250-17086 17250-21692 19670-17086 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 17250-17086 17250-21692 19670-17086 CBL-Mariner Releases CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 2.0 2026-02-21T02:21:51 <p>Information published.</p> 3.0 2026-08-12T21:46:21 <p>Information published.</p> 1.0 2024-10-12T00:00:00 <p>Information published.</p> 1.1 2024-10-16T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> xen: privcmd: Fix possible access to a freed kirqfd instance <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46762 Use After Free 17610-17084 17651-17084 17610-17084 17651-17084 Moderate 17610-17084 Moderate 17651-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17610-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 1.1 2026-02-21T02:24:49 <p>Information published.</p> 2.0 2026-03-03T14:56:19 <p>Information published.</p> 3.0 2026-03-31T15:13:52 <p>Information published.</p> 4.0 2026-08-07T00:49:47 <p>Information published.</p> 5.0 2026-08-12T21:49:17 <p>Information published.</p> 1.0 2024-10-16T00:00:00 <p>Information published.</p> fou: Fix null-ptr-deref in GRO. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46763 NULL Pointer Dereference 17207-16823 17610-17084 17250-17086 17250-21692 19670-17086 17651-17084 17207-16823 17610-17084 17250-17086 17250-21692 19670-17086 17651-17084 Moderate 17207-16823 Moderate 17610-17084 Moderate 17250-17086 Moderate 17250-21692 19670-17086 Moderate 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19670-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 CBL-Mariner Releases 17207-16823 17250-17086 17250-21692 19670-17086 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 17250-17086 17250-21692 19670-17086 CBL-Mariner Releases CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 2.0 2026-02-21T02:33:56 <p>Information published.</p> 3.0 2026-08-12T22:00:01 <p>Information published.</p> 1.0 2024-10-12T00:00:00 <p>Information published.</p> 1.1 2024-10-16T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> ice: protect XDP configuration with a mutex <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46765 NULL Pointer Dereference 17610-17084 17651-17084 17610-17084 17651-17084 Moderate 17610-17084 Moderate 17651-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17610-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 2.0 2026-03-03T14:57:11 <p>Information published.</p> 3.0 2026-03-31T15:14:57 <p>Information published.</p> 4.0 2026-08-07T00:51:16 <p>Information published.</p> 5.0 2026-08-12T22:09:44 <p>Information published.</p> 1.0 2024-10-16T00:00:00 <p>Information published.</p> 1.1 2026-02-21T02:40:42 <p>Information published.</p> ice: Add netif_device_attach/detach into PF reset flow <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46770 NULL Pointer Dereference 17610-17084 17651-17084 17610-17084 17651-17084 Moderate 17610-17084 Moderate 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 1.1 2026-02-21T02:23:19 <p>Information published.</p> 2.0 2026-03-03T14:56:02 <p>Information published.</p> 1.0 2024-10-16T00:00:00 <p>Information published.</p> 3.0 2026-03-31T15:13:29 <p>Information published.</p> 4.0 2026-08-12T21:47:18 <p>Information published.</p> drm/amd/display: Check denominator crb_pipes before used <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46772 Divide By Zero 19529-17084 19529-17084 Moderate 19529-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19529-17084 CBL-Mariner Releases 19529-17084 No Security Update 6.6.90.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19529-17084 CBL-Mariner Releases 1.1 2026-02-21T02:37:29 <p>Information published.</p> 2.0 2026-03-03T14:56:52 <p>Information published.</p> 4.0 2026-08-12T22:05:31 <p>Information published.</p> 1.0 2025-09-03T21:54:12 <p>Information published.</p> 3.0 2026-03-31T15:14:38 <p>Information published.</p> drm/amd/display: Check denominator pbn_div before used <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46773 Divide By Zero 17610-17084 17651-17084 17610-17084 17651-17084 Moderate 17610-17084 Moderate 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 2.0 2026-03-03T14:55:27 <p>Information published.</p> 3.0 2026-03-31T15:12:47 <p>Information published.</p> 4.0 2026-08-12T21:42:32 <p>Information published.</p> 1.0 2024-10-16T00:00:00 <p>Information published.</p> 1.1 2026-02-21T02:15:14 <p>Information published.</p> nilfs2: fix missing cleanup on rollforward recovery error <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46781 Use After Free 17207-16823 17610-17084 17250-17086 17250-21692 19670-17086 17651-17084 17207-16823 17610-17084 17250-17086 17250-21692 19670-17086 17651-17084 Moderate 17207-16823 Moderate 17610-17084 Moderate 17250-17086 Moderate 17250-21692 19670-17086 Moderate 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17207-16823 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17610-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19670-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 CBL-Mariner Releases 17207-16823 17250-17086 17250-21692 19670-17086 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 17250-17086 17250-21692 19670-17086 CBL-Mariner Releases CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 3.0 2026-08-12T21:56:22 <p>Information published.</p> 1.0 2024-10-12T00:00:00 <p>Information published.</p> 1.1 2024-10-16T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> 2.0 2026-02-21T02:31:10 <p>Information published.</p> ila: call nf_unregister_net_hooks() sooner <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46782 Use After Free 17207-16823 17610-17084 19670-17086 17651-17084 17250-17086 17250-21692 17207-16823 17610-17084 19670-17086 17651-17084 17250-17086 17250-21692 Important 17207-16823 Important 17610-17084 19670-17086 Important 17651-17084 Important 17250-17086 Important 17250-21692 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 19670-17086 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17651-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17250-17086 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17250-21692 CBL-Mariner Releases 17207-16823 19670-17086 17250-17086 17250-21692 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 19670-17086 17250-17086 17250-21692 CBL-Mariner Releases CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 3.0 2026-08-12T22:01:53 <p>Information published.</p> 1.0 2024-10-12T00:00:00 <p>Information published.</p> 1.1 2024-10-16T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> 2.0 2026-02-21T02:35:19 <p>Information published.</p> net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46784 Use of Uninitialized Resource 17610-17084 19673-17086 17651-17084 17095-17086 17095-21692 17610-17084 19673-17086 17651-17084 17095-17086 17095-21692 Moderate 17610-17084 19673-17086 Moderate 17651-17084 Moderate 17095-17086 Moderate 17095-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19673-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17095-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17095-21692 CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases CBL-Mariner Releases 19673-17086 No Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19673-17086 CBL-Mariner Releases CBL-Mariner Releases 17095-21692 No Security Update 5.15.182.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17095-21692 CBL-Mariner Releases 3.0 2026-08-12T22:13:01 <p>Information published.</p> 1.0 2024-10-16T00:00:00 <p>Information published.</p> 2.0 2026-02-21T02:43:02 <p>Information published.</p> fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46786 Use After Free 17610-17084 17651-17084 17610-17084 17651-17084 Important 17610-17084 Important 17651-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17651-17084 CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 1.0 2024-10-16T00:00:00 <p>Information published.</p> 1.1 2026-02-21T02:47:50 <p>Information published.</p> can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46791 Improper Locking 17207-16823 17610-17084 17651-17084 17250-17086 17250-21692 19670-17086 17207-16823 17610-17084 17651-17084 17250-17086 17250-21692 19670-17086 Moderate 17207-16823 Moderate 17610-17084 Moderate 17651-17084 Moderate 17250-17086 Moderate 17250-21692 19670-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19670-17086 CBL-Mariner Releases 17207-16823 17250-17086 17250-21692 19670-17086 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 17250-17086 17250-21692 19670-17086 CBL-Mariner Releases CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 2.0 2026-02-21T01:56:36 <p>Information published.</p> 3.0 2026-08-12T21:28:08 <p>Information published.</p> 1.0 2024-10-12T00:00:00 <p>Information published.</p> 1.1 2024-10-16T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> ksmbd: unset the binding mark of a reused connection <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46795 NULL Pointer Dereference 17207-16823 17610-17084 17651-17084 17250-17086 17250-21692 19670-17086 17207-16823 17610-17084 17651-17084 17250-17086 17250-21692 19670-17086 Moderate 17207-16823 Moderate 17610-17084 Moderate 17651-17084 Moderate 17250-17086 Moderate 17250-21692 19670-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17207-16823 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17610-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19670-17086 CBL-Mariner Releases 17207-16823 17250-17086 17250-21692 19670-17086 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 17250-17086 17250-21692 19670-17086 CBL-Mariner Releases CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 2.0 2026-02-21T01:45:39 <p>Information published.</p> 3.0 2026-08-12T21:20:15 <p>Information published.</p> 1.0 2024-10-12T00:00:00 <p>Information published.</p> 1.1 2024-10-16T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> smb: client: fix double put of @cfile in smb2_set_path_size() <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46796 Use After Free 17610-17084 17651-17084 17610-17084 17651-17084 Important 17610-17084 Important 17651-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17651-17084 CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 1.1 2026-02-21T02:09:15 <p>Information published.</p> 1.0 2024-10-16T00:00:00 <p>Information published.</p> powerpc/qspinlock: Fix deadlock in MCS queue <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46797 Improper Locking 17610-17084 17651-17084 17610-17084 17651-17084 Moderate 17610-17084 Moderate 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 1.1 2026-02-21T02:07:42 <p>Information published.</p> 1.0 2024-10-16T00:00:00 <p>Information published.</p> ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46798 Use After Free 17207-16823 17610-17084 19670-17086 17651-17084 17250-17086 17250-21692 17207-16823 17610-17084 19670-17086 17651-17084 17250-17086 17250-21692 Important 17207-16823 Important 17610-17084 19670-17086 Important 17651-17084 Important 17250-17086 Important 17250-21692 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 19670-17086 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17651-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17250-17086 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17250-21692 CBL-Mariner Releases 17207-16823 19670-17086 17250-17086 17250-21692 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 19670-17086 17250-17086 17250-21692 CBL-Mariner Releases CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 2.0 2026-02-21T02:05:36 <p>Information published.</p> 1.0 2024-10-12T00:00:00 <p>Information published.</p> 1.1 2024-10-16T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> 3.0 2026-08-12T21:35:03 <p>Information published.</p> sch/netem: fix use after free in netem_dequeue <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46800 Use After Free 17207-16823 17610-17084 17651-17084 17250-17086 19670-17086 17250-21692 17207-16823 17610-17084 17651-17084 17250-17086 19670-17086 17250-21692 Important 17207-16823 Important 17610-17084 Important 17651-17084 Important 17250-17086 19670-17086 Important 17250-21692 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17651-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17250-17086 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 19670-17086 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17250-21692 CBL-Mariner Releases 17207-16823 17250-17086 19670-17086 17250-21692 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 17250-17086 19670-17086 17250-21692 CBL-Mariner Releases CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 2.0 2026-02-21T01:44:10 <p>Information published.</p> 1.0 2024-10-12T00:00:00 <p>Information published.</p> 1.1 2024-10-16T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> 3.0 2026-08-12T21:19:16 <p>Information published.</p> drm/amd/display: added NULL check at start of dc_validate_stream <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46802 NULL Pointer Dereference 17610-17084 17651-17084 17610-17084 17651-17084 Moderate 17610-17084 Moderate 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17610-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 1.1 2026-02-21T01:54:58 <p>Information published.</p> 2.0 2026-03-03T15:01:50 <p>Information published.</p> 3.0 2026-03-31T14:38:39 <p>Information published.</p> 1.0 2024-10-16T00:00:00 <p>Information published.</p> 4.0 2026-08-12T21:29:14 <p>Information published.</p> drm/amdkfd: Check debug trap enable before write dbg_ev_file <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46803 NULL Pointer Dereference 17610-17084 17651-17084 17610-17084 17651-17084 Moderate 17610-17084 Moderate 17651-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17610-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 1.1 2026-02-21T01:24:50 <p>Information published.</p> 4.0 2026-08-07T00:56:52 <p>Information published.</p> 1.0 2024-10-16T00:00:00 <p>Information published.</p> 2.0 2026-03-03T15:00:56 <p>Information published.</p> 3.0 2026-03-31T14:37:25 <p>Information published.</p> 5.0 2026-08-12T21:07:18 <p>Information published.</p> drm/amd/display: Add array index check for hdcp ddc access <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46804 Improper Validation of Array Index 17207-16823 17610-17084 17651-17084 17250-17086 19670-17086 17250-21692 17207-16823 17610-17084 17651-17084 17250-17086 19670-17086 17250-21692 Important 17207-16823 Important 17610-17084 Important 17651-17084 Important 17250-17086 19670-17086 Important 17250-21692 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17651-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17250-17086 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 19670-17086 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17250-21692 CBL-Mariner Releases 17207-16823 17250-17086 19670-17086 17250-21692 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 17250-17086 19670-17086 17250-21692 CBL-Mariner Releases CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 2.0 2026-02-21T01:39:49 <p>Information published.</p> 3.0 2026-08-12T21:17:34 <p>Information published.</p> 1.0 2024-10-14T00:00:00 <p>Information published.</p> 1.1 2024-10-16T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> drm/amdgpu: fix the waring dereferencing hive <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46805 NULL Pointer Dereference 17207-16823 17610-17084 19670-17086 17250-21692 17651-17084 17250-17086 17207-16823 17610-17084 19670-17086 17250-21692 17651-17084 17250-17086 Moderate 17207-16823 Moderate 17610-17084 19670-17086 Moderate 17250-21692 Moderate 17651-17084 Moderate 17250-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19670-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-17086 CBL-Mariner Releases 17207-16823 19670-17086 17250-21692 17250-17086 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 19670-17086 17250-21692 17250-17086 CBL-Mariner Releases CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 3.0 2026-08-12T22:58:10 <p>Information published.</p> 1.0 2024-10-12T00:00:00 <p>Information published.</p> 1.1 2024-10-16T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> 2.0 2026-02-21T01:04:54 <p>Information published.</p> drm/amdgpu: Fix the warning division or modulo by zero <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46806 Divide By Zero 17610-17084 17651-17084 17610-17084 17651-17084 Moderate 17610-17084 Moderate 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 1.0 2024-10-16T00:00:00 <p>Information published.</p> 1.1 2026-02-21T00:59:20 <p>Information published.</p> 2.0 2026-03-03T14:58:59 <p>Information published.</p> 3.0 2026-03-31T15:16:51 <p>Information published.</p> 4.0 2026-08-12T22:53:20 <p>Information published.</p> drm/amd/amdgpu: Check tbo resource pointer <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46807 NULL Pointer Dereference 17207-16823 17610-17084 17651-17084 17250-17086 19670-17086 17250-21692 17207-16823 17610-17084 17651-17084 17250-17086 19670-17086 17250-21692 Moderate 17207-16823 Moderate 17610-17084 Moderate 17651-17084 Moderate 17250-17086 19670-17086 Moderate 17250-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17207-16823 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17610-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19670-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-21692 CBL-Mariner Releases 17207-16823 17250-17086 19670-17086 17250-21692 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 17250-17086 19670-17086 17250-21692 CBL-Mariner Releases CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 2.0 2026-02-21T01:33:43 <p>Information published.</p> 3.0 2026-08-12T21:13:24 <p>Information published.</p> 1.0 2024-10-14T00:00:00 <p>Information published.</p> 1.1 2024-10-16T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> drm/amd/display: Check BIOS images before it is used <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46809 NULL Pointer Dereference 17110-16823 17610-17084 17651-17084 19673-17086 17095-17086 17095-21692 17110-16823 17610-17084 17651-17084 19673-17086 17095-17086 17095-21692 Moderate 17110-16823 Moderate 17610-17084 Moderate 17651-17084 19673-17086 Moderate 17095-17086 Moderate 17095-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19673-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17095-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17095-21692 CBL-Mariner Releases 17110-16823 17095-21692 No Security Update 5.15.176.3-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17110-16823 17095-21692 CBL-Mariner Releases CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases CBL-Mariner Releases 19673-17086 No Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19673-17086 CBL-Mariner Releases 2.0 2026-02-21T01:43:51 <p>Information published.</p> 1.0 2024-10-16T00:00:00 <p>Information published.</p> 3.0 2026-08-12T21:20:19 <p>Information published.</p> drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46810 NULL Pointer Dereference 17207-16823 17610-17084 19670-17086 17250-21692 17651-17084 17250-17086 17207-16823 17610-17084 19670-17086 17250-21692 17651-17084 17250-17086 Moderate 17207-16823 Moderate 17610-17084 19670-17086 Moderate 17250-21692 Moderate 17651-17084 Moderate 17250-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19670-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-17086 CBL-Mariner Releases 17207-16823 19670-17086 17250-21692 17250-17086 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 19670-17086 17250-21692 17250-17086 CBL-Mariner Releases CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 1.0 2024-10-14T00:00:00 <p>Information published.</p> 1.1 2024-10-16T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> 2.0 2026-02-21T01:28:00 <p>Information published.</p> 3.0 2026-08-12T21:09:30 <p>Information published.</p> drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46811 Improper Validation of Array Index 17610-17084 17651-17084 17610-17084 17651-17084 Important 17610-17084 Important 17651-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17651-17084 CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 1.1 2026-02-21T01:53:49 <p>Information published.</p> 2.0 2026-08-12T21:28:18 <p>Information published.</p> 1.0 2024-10-16T00:00:00 <p>Information published.</p> drm/amd/display: Check link_index before accessing dc->links[] <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46813 Improper Validation of Array Index 19529-17084 19529-17084 Important 19529-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 19529-17084 CBL-Mariner Releases 19529-17084 No Security Update 6.6.90.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19529-17084 CBL-Mariner Releases 1.0 2025-09-03T20:05:36 <p>Information published.</p> 1.1 2026-02-21T01:32:04 <p>Information published.</p> 2.0 2026-08-12T21:12:22 <p>Information published.</p> drm/amd/display: Check msg_id before processing transcation <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46814 Improper Validation of Array Index 17207-16823 17610-17084 17651-17084 17250-17086 17250-21692 19670-17086 17207-16823 17610-17084 17651-17084 17250-17086 17250-21692 19670-17086 Important 17207-16823 Important 17610-17084 Important 17651-17084 Important 17250-17086 Important 17250-21692 19670-17086 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17651-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17250-17086 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17250-21692 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 19670-17086 CBL-Mariner Releases 17207-16823 17250-17086 17250-21692 19670-17086 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 17250-17086 17250-21692 19670-17086 CBL-Mariner Releases CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 2.0 2026-02-21T01:38:17 <p>Information published.</p> 1.0 2024-10-14T00:00:00 <p>Information published.</p> 1.1 2024-10-16T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> 3.0 2026-08-12T21:16:35 <p>Information published.</p> drm/amd/display: Check gpio_id before used as array index <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46818 Improper Validation of Array Index 17207-16823 17610-17084 17651-17084 19670-17086 17250-17086 17250-21692 17207-16823 17610-17084 17651-17084 19670-17086 17250-17086 17250-21692 Important 17207-16823 Important 17610-17084 Important 17651-17084 19670-17086 Important 17250-17086 Important 17250-21692 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17651-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 19670-17086 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17250-17086 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17250-21692 CBL-Mariner Releases 17207-16823 19670-17086 17250-17086 17250-21692 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 19670-17086 17250-17086 17250-21692 CBL-Mariner Releases CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 2.0 2026-02-21T01:48:13 <p>Information published.</p> 3.0 2026-08-12T21:23:16 <p>Information published.</p> 1.0 2024-10-14T00:00:00 <p>Information published.</p> 1.1 2024-10-16T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> drm/amdgpu: the warning dereferencing obj for nbio_v7_4 <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46819 NULL Pointer Dereference 17207-16823 17610-17084 17651-17084 17250-17086 17250-21692 19670-17086 17207-16823 17610-17084 17651-17084 17250-17086 17250-21692 19670-17086 Moderate 17207-16823 Moderate 17610-17084 Moderate 17651-17084 Moderate 17250-17086 Moderate 17250-21692 19670-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17207-16823 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17610-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19670-17086 CBL-Mariner Releases 17207-16823 17250-17086 17250-21692 19670-17086 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 17250-17086 17250-21692 19670-17086 CBL-Mariner Releases CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 2.0 2026-02-21T01:45:24 <p>Information published.</p> 3.0 2026-08-12T21:21:20 <p>Information published.</p> 1.0 2024-10-14T00:00:00 <p>Information published.</p> 1.1 2024-10-16T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> drm/amd/pm: Fix negative array index read <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46821 Improper Validation of Array Index 17610-17084 17651-17084 19673-17086 17095-17086 17095-21692 17610-17084 17651-17084 19673-17086 17095-17086 17095-21692 Important 17610-17084 Important 17651-17084 19673-17086 Important 17095-17086 Important 17095-21692 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17651-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 19673-17086 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17095-17086 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17095-21692 CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases CBL-Mariner Releases 19673-17086 No Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19673-17086 CBL-Mariner Releases CBL-Mariner Releases 17095-21692 No Security Update 5.15.180.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17095-21692 CBL-Mariner Releases 1.0 2024-10-16T00:00:00 <p>Information published.</p> 2.0 2026-02-21T01:26:19 <p>Information published.</p> 3.0 2026-08-12T21:08:23 <p>Information published.</p> arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46822 NULL Pointer Dereference 17207-16823 17610-17084 17651-17084 19670-17086 17250-17086 17250-21692 17207-16823 17610-17084 17651-17084 19670-17086 17250-17086 17250-21692 Moderate 17207-16823 Moderate 17610-17084 Moderate 17651-17084 19670-17086 Moderate 17250-17086 Moderate 17250-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19670-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-21692 CBL-Mariner Releases 17207-16823 19670-17086 17250-17086 17250-21692 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 19670-17086 17250-17086 17250-21692 CBL-Mariner Releases CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 1.0 2024-10-12T00:00:00 <p>Information published.</p> 1.1 2024-10-16T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> 2.0 2026-02-21T00:57:35 <p>Information published.</p> 3.0 2026-08-12T22:51:41 <p>Information published.</p> kunit/overflow: Fix UB in overflow_allocation_test <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46823 19529-17084 19529-17084 19529-17084 8.4 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 19529-17084 CBL-Mariner Releases 19529-17084 No Security Update 6.6.90.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19529-17084 CBL-Mariner Releases 1.0 2025-09-03T20:41:43 <p>Information published.</p> 2.0 2026-03-03T15:01:52 <p>Information published.</p> 3.0 2026-03-31T14:41:29 <p>Information published.</p> 5.0 2026-08-12T22:41:55 <p>Information published.</p> 4.0 2026-08-07T00:49:06 <p>Information published.</p> rtmutex: Drop rt_mutex::wait_lock before scheduling <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46829 Improper Locking 17207-16823 17610-17084 19670-17086 17651-17084 17250-17086 17250-21692 17207-16823 17610-17084 19670-17086 17651-17084 17250-17086 17250-21692 Moderate 17207-16823 Moderate 17610-17084 19670-17086 Moderate 17651-17084 Moderate 17250-17086 Moderate 17250-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19670-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-21692 CBL-Mariner Releases 17207-16823 19670-17086 17250-17086 17250-21692 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 19670-17086 17250-17086 17250-21692 CBL-Mariner Releases CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 2.0 2026-02-21T01:02:55 <p>Information published.</p> 1.0 2024-10-12T00:00:00 <p>Information published.</p> 1.1 2024-10-16T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> 3.0 2026-08-12T22:56:34 <p>Information published.</p> net: microchip: vcap: Fix use-after-free error in kunit test <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46831 Use After Free 17610-17084 17651-17084 17610-17084 17651-17084 Important 17610-17084 Important 17651-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17651-17084 CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 1.1 2026-02-21T01:09:11 <p>Information published.</p> 1.0 2024-10-16T00:00:00 <p>Information published.</p> MIPS: cevt-r4k: Don't call get_c0_compare_int if timer irq is installed <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46832 17207-16823 17610-17084 17651-17084 19670-17086 17250-17086 17250-21692 17207-16823 17610-17084 17651-17084 19670-17086 17250-17086 17250-21692 Moderate 17207-16823 Moderate 17610-17084 Moderate 17651-17084 19670-17086 Moderate 17250-17086 Moderate 17250-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19670-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-21692 CBL-Mariner Releases 17207-16823 19670-17086 17250-17086 17250-21692 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 19670-17086 17250-17086 17250-21692 CBL-Mariner Releases CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 2.0 2026-02-21T02:30:42 <p>Information published.</p> 3.0 2026-08-12T22:02:34 <p>Information published.</p> 1.0 2024-10-14T00:00:00 <p>Information published.</p> 1.1 2024-10-16T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> drm/amdgpu: Fix smatch static checker warning <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46835 NULL Pointer Dereference 17610-17084 17651-17084 17610-17084 17651-17084 Moderate 17610-17084 Moderate 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17610-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 1.1 2026-02-21T03:01:23 <p>Information published.</p> 2.0 2026-03-03T14:58:39 <p>Information published.</p> 3.0 2026-03-31T15:16:36 <p>Information published.</p> 4.0 2026-08-12T22:44:39 <p>Information published.</p> 1.0 2024-10-16T00:00:00 <p>Information published.</p> usb: gadget: aspeed_udc: validate endpoint index for ast udc <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46836 Improper Validation of Array Index 17610-17084 17651-17084 17610-17084 17651-17084 Important 17610-17084 Important 17651-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17651-17084 CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 1.1 2026-02-21T02:22:14 <p>Information published.</p> 2.0 2026-08-12T21:53:19 <p>Information published.</p> 1.0 2024-10-16T00:00:00 <p>Information published.</p> userfaultfd: don't BUG_ON() if khugepaged yanks our page table <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46838 17610-17084 17651-17084 17610-17084 17651-17084 Moderate 17610-17084 Moderate 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 1.1 2026-02-21T02:24:23 <p>Information published.</p> 1.0 2024-10-16T00:00:00 <p>Information published.</p> btrfs: clean up our handling of refs == 0 in snapshot delete <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46840 17207-16823 17610-17084 19670-17086 17651-17084 17250-17086 17250-21692 17207-16823 17610-17084 19670-17086 17651-17084 17250-17086 17250-21692 Moderate 17207-16823 Moderate 17610-17084 19670-17086 Moderate 17651-17084 Moderate 17250-17086 Moderate 17250-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19670-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17250-21692 CBL-Mariner Releases 17207-16823 19670-17086 17250-17086 17250-21692 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 19670-17086 17250-17086 17250-21692 CBL-Mariner Releases CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 2.0 2026-02-21T02:15:07 <p>Information published.</p> 3.0 2026-08-12T21:46:07 <p>Information published.</p> 1.0 2024-10-14T00:00:00 <p>Information published.</p> 1.1 2024-10-16T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc() <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46841 17110-16823 17501-17084 19673-17086 19529-17084 17095-17086 17095-21692 17110-16823 17501-17084 19673-17086 19529-17084 17095-17086 17095-21692 Moderate 17110-16823 Moderate 17501-17084 19673-17086 Moderate 19529-17084 Moderate 17095-17086 Moderate 17095-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17110-16823 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17501-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19673-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19529-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17095-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17095-21692 CBL-Mariner Releases 17110-16823 17095-21692 No Security Update 5.15.176.3-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17110-16823 17095-21692 CBL-Mariner Releases CBL-Mariner Releases 17501-17084 19529-17084 No Security Update 6.6.64.2-9 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17501-17084 19529-17084 CBL-Mariner Releases CBL-Mariner Releases 19673-17086 No Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19673-17086 CBL-Mariner Releases 2.0 2026-02-21T02:07:50 <p>Information published.</p> 1.0 2025-09-03T21:12:49 <p>Information published.</p> 3.0 2026-08-12T21:40:09 <p>Information published.</p> scsi: ufs: core: Remove SCSI host only if added <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46843 17610-17084 17651-17084 17610-17084 17651-17084 Moderate 17610-17084 Moderate 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 1.1 2026-02-21T02:10:07 <p>Information published.</p> 2.0 2026-03-03T15:02:28 <p>Information published.</p> 4.0 2026-08-12T21:42:03 <p>Information published.</p> 1.0 2024-10-16T00:00:00 <p>Information published.</p> 3.0 2026-03-31T14:39:40 <p>Information published.</p> um: line: always fill *error_out in setup_one_line() <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46844 Access of Uninitialized Pointer 17207-16823 17610-17084 19670-17086 17651-17084 17250-17086 17250-21692 17207-16823 17610-17084 19670-17086 17651-17084 17250-17086 17250-21692 Important 17207-16823 Important 17610-17084 19670-17086 Important 17651-17084 Important 17250-17086 Important 17250-21692 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 19670-17086 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17651-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17250-17086 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17250-21692 CBL-Mariner Releases 17207-16823 19670-17086 17250-17086 17250-21692 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 19670-17086 17250-17086 17250-21692 CBL-Mariner Releases CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 3.0 2026-08-12T22:48:09 <p>Information published.</p> 1.0 2024-10-12T00:00:00 <p>Information published.</p> 1.1 2024-10-16T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> 2.0 2026-02-21T00:53:36 <p>Information published.</p> tracing/timerlat: Only clear timer if a kthread exists <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46845 Use After Free 17610-17084 17651-17084 17610-17084 17651-17084 Important 17610-17084 Important 17651-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17651-17084 CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 1.0 2024-10-16T00:00:00 <p>Information published.</p> 1.1 2026-02-21T01:11:29 <p>Information published.</p> spi: rockchip: Resolve unbalanced runtime PM / system PM handling <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46846 17610-17084 17651-17084 17610-17084 17651-17084 Moderate 17610-17084 Moderate 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 1.0 2024-10-16T00:00:00 <p>Information published.</p> 1.1 2026-02-21T02:18:11 <p>Information published.</p> mm: vmalloc: ensure vmap_block is initialised before adding to queue <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46847 Improper Validation of Array Index 17610-17084 17651-17084 17610-17084 17651-17084 Moderate 17610-17084 Moderate 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 1.1 2026-02-21T01:10:18 <p>Information published.</p> 1.0 2024-10-16T00:00:00 <p>Information published.</p> perf/x86/intel: Limit the period on Haswell <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46848 17610-17084 17651-17084 17610-17084 17651-17084 Moderate 17610-17084 Moderate 17651-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17610-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17651-17084 CBL-Mariner Releases 17610-17084 17651-17084 No Security Update 6.6.51.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17610-17084 17651-17084 CBL-Mariner Releases 2.0 2026-03-03T15:01:33 <p>Information published.</p> 3.0 2026-03-31T14:38:16 <p>Information published.</p> 1.0 2024-10-16T00:00:00 <p>Information published.</p> 1.1 2026-02-21T01:29:22 <p>Information published.</p> 4.0 2026-08-12T21:10:25 <p>Information published.</p> ASoC: meson: axg-card: fix 'use-after-free' <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46849 Use After Free 17110-16823 17603-17084 19673-17086 17610-17084 17095-17086 17095-21692 17110-16823 17603-17084 19673-17086 17610-17084 17095-17086 17095-21692 Important 17110-16823 Important 17603-17084 19673-17086 Important 17610-17084 Important 17095-17086 Important 17095-21692 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17110-16823 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17603-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 19673-17086 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17610-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17095-17086 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17095-21692 CBL-Mariner Releases 17110-16823 17095-21692 No Security Update 5.15.176.3-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17110-16823 17095-21692 CBL-Mariner Releases CBL-Mariner Releases 17603-17084 17610-17084 No Security Update 6.6.56.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17603-17084 17610-17084 CBL-Mariner Releases CBL-Mariner Releases 19673-17086 No Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19673-17086 CBL-Mariner Releases 1.0 2024-11-09T00:00:00 <p>Information published.</p> 2.0 2026-02-21T03:02:27 <p>Information published.</p> 3.0 2026-08-12T22:46:24 <p>Information published.</p> dma-buf: heaps: Fix off-by-one in CMA heap fault handler <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46852 Off-by-one Error 17110-16823 17603-17084 18490-17086 18490-21692 19682-17086 17610-17084 17110-16823 17603-17084 18490-17086 18490-21692 19682-17086 17610-17084 Important 17110-16823 Important 17603-17084 Important 18490-17086 Important 18490-21692 19682-17086 Important 17610-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 18490-17086 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 18490-21692 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 19682-17086 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17610-17084 CBL-Mariner Releases 17110-16823 18490-21692 No Security Update 5.15.176.3-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17110-16823 18490-21692 CBL-Mariner Releases CBL-Mariner Releases 17603-17084 17610-17084 No Security Update 6.6.56.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17603-17084 17610-17084 CBL-Mariner Releases CBL-Mariner Releases 19682-17086 No Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19682-17086 CBL-Mariner Releases 1.0 2024-11-09T00:00:00 <p>Information published.</p> 2.0 2026-02-21T01:01:10 <p>Information published.</p> 3.0 2026-08-12T22:55:03 <p>Information published.</p> spi: nxp-fspi: fix the KASAN report out-of-bounds bug <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46853 Out-of-bounds Write 17110-16823 17603-17084 17610-17084 17095-17086 17095-21692 19673-17086 17110-16823 17603-17084 17610-17084 17095-17086 17095-21692 19673-17086 Important 17110-16823 Important 17603-17084 Important 17610-17084 Important 17095-17086 Important 17095-21692 19673-17086 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17610-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17095-17086 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17095-21692 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 19673-17086 CBL-Mariner Releases 17110-16823 17095-21692 No Security Update 5.15.176.3-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17110-16823 17095-21692 CBL-Mariner Releases CBL-Mariner Releases 17603-17084 17610-17084 No Security Update 6.6.56.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17603-17084 17610-17084 CBL-Mariner Releases CBL-Mariner Releases 19673-17086 No Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19673-17086 CBL-Mariner Releases 1.0 2024-11-09T00:00:00 <p>Information published.</p> 2.0 2026-02-21T01:46:44 <p>Information published.</p> 3.0 2026-08-12T21:22:18 <p>Information published.</p> net: dpaa: Pad packets to ETH_ZLEN <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46854 17110-16823 17603-17084 17610-17084 19673-17086 17095-17086 17095-21692 17110-16823 17603-17084 17610-17084 19673-17086 17095-17086 17095-21692 Important 17110-16823 Important 17603-17084 Important 17610-17084 19673-17086 Important 17095-17086 Important 17095-21692 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 17610-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 19673-17086 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 17095-17086 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 17095-21692 CBL-Mariner Releases 17110-16823 17095-21692 No Security Update 5.15.176.3-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17110-16823 17095-21692 CBL-Mariner Releases CBL-Mariner Releases 17603-17084 17610-17084 No Security Update 6.6.56.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17603-17084 17610-17084 CBL-Mariner Releases CBL-Mariner Releases 19673-17086 No Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19673-17086 CBL-Mariner Releases 1.0 2024-11-09T00:00:00 <p>Information published.</p> 2.0 2026-02-21T01:36:37 <p>Information published.</p> 3.0 2026-08-12T21:15:29 <p>Information published.</p> netfilter: nft_socket: fix sk refcount leaks <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46855 17110-16823 17603-17084 19673-17086 17610-17084 17095-17086 17095-21692 17110-16823 17603-17084 19673-17086 17610-17084 17095-17086 17095-21692 Moderate 17110-16823 Moderate 17603-17084 19673-17086 Moderate 17610-17084 Moderate 17095-17086 Moderate 17095-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19673-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17610-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17095-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17095-21692 CBL-Mariner Releases 17110-16823 17095-21692 No Security Update 5.15.176.3-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17110-16823 17095-21692 CBL-Mariner Releases CBL-Mariner Releases 17603-17084 17610-17084 No Security Update 6.6.56.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17603-17084 17610-17084 CBL-Mariner Releases CBL-Mariner Releases 19673-17086 No Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19673-17086 CBL-Mariner Releases 1.0 2024-11-09T00:00:00 <p>Information published.</p> 2.0 2026-02-21T00:55:24 <p>Information published.</p> 3.0 2026-08-12T22:49:55 <p>Information published.</p> net/mlx5: Fix bridge mode operations when there are no VFs <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46857 NULL Pointer Dereference 17603-17084 17610-17084 17603-17084 17610-17084 Moderate 17603-17084 Moderate 17610-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17610-17084 CBL-Mariner Releases 17603-17084 17610-17084 No Security Update 6.6.56.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17603-17084 17610-17084 CBL-Mariner Releases 1.0 2024-11-09T00:00:00 <p>Information published.</p> 2.0 2026-03-03T14:58:23 <p>Information published.</p> 3.0 2026-03-31T15:16:21 <p>Information published.</p> 1.1 2026-02-21T03:00:24 <p>Information published.</p> 4.0 2026-08-12T22:43:13 <p>Information published.</p> mptcp: pm: Fix uaf in __timer_delete_sync <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46858 Use After Free 17603-17084 17610-17084 17603-17084 17610-17084 Important 17603-17084 Important 17610-17084 7.0 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H 17610-17084 CBL-Mariner Releases 17603-17084 17610-17084 No Security Update 6.6.56.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17603-17084 17610-17084 CBL-Mariner Releases 1.0 2024-11-09T00:00:00 <p>Information published.</p> 2.0 2026-02-21T02:59:30 <p>Information published.</p> 3.0 2026-08-12T22:41:32 <p>Information published.</p> platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46859 Improper Validation of Array Index 17110-16823 17603-17084 17610-17084 19673-17086 17095-17086 17095-21692 17110-16823 17603-17084 17610-17084 19673-17086 17095-17086 17095-21692 Important 17110-16823 Important 17603-17084 Important 17610-17084 19673-17086 Important 17095-17086 Important 17095-21692 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17110-16823 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17603-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17610-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 19673-17086 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17095-17086 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17095-21692 CBL-Mariner Releases 17110-16823 17095-21692 No Security Update 5.15.176.3-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17110-16823 17095-21692 CBL-Mariner Releases CBL-Mariner Releases 17603-17084 17610-17084 No Security Update 6.6.56.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17603-17084 17610-17084 CBL-Mariner Releases CBL-Mariner Releases 19673-17086 No Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19673-17086 CBL-Mariner Releases 1.0 2024-11-09T00:00:00 <p>Information published.</p> 3.0 2026-08-12T23:11:34 <p>Information published.</p> 2.0 2026-02-21T01:20:26 <p>Information published.</p> wifi: mt76: mt7921: fix NULL pointer access in mt7921_ipv6_addr_change <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46860 NULL Pointer Dereference 17603-17084 17610-17084 17603-17084 17610-17084 Moderate 17603-17084 Moderate 17610-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17610-17084 CBL-Mariner Releases 17603-17084 17610-17084 No Security Update 6.6.56.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17603-17084 17610-17084 CBL-Mariner Releases 1.0 2024-11-09T00:00:00 <p>Information published.</p> 2.0 2026-03-03T14:59:32 <p>Information published.</p> 3.0 2026-03-31T15:17:26 <p>Information published.</p> 1.1 2026-02-21T01:07:59 <p>Information published.</p> 4.0 2026-08-12T23:01:03 <p>Information published.</p> usbnet: ipheth: do not stop RX on failing RX callback <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46861 17603-17084 17610-17084 17603-17084 17610-17084 Moderate 17603-17084 Moderate 17610-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17610-17084 CBL-Mariner Releases 17603-17084 17610-17084 No Security Update 6.6.56.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17603-17084 17610-17084 CBL-Mariner Releases 1.0 2024-11-09T00:00:00 <p>Information published.</p> 2.0 2026-03-03T15:00:07 <p>Information published.</p> 3.0 2026-03-31T14:36:20 <p>Information published.</p> 1.1 2026-02-21T01:17:32 <p>Information published.</p> 4.0 2026-08-12T23:09:23 <p>Information published.</p> ASoC: Intel: soc-acpi-intel-lnl-match: add missing empty item <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46863 17207-16823 17603-17084 19673-17086 17610-17084 17095-17086 17095-21692 17207-16823 17603-17084 19673-17086 17610-17084 17095-17086 17095-21692 Moderate 17207-16823 Moderate 17603-17084 19673-17086 Moderate 17610-17084 Moderate 17095-17086 Moderate 17095-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19673-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17610-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17095-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17095-21692 CBL-Mariner Releases 17207-16823 19673-17086 17095-17086 17095-21692 No Security Update 5.15.167.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17207-16823 19673-17086 17095-17086 17095-21692 CBL-Mariner Releases CBL-Mariner Releases 17603-17084 17610-17084 No Security Update 6.6.56.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17603-17084 17610-17084 CBL-Mariner Releases 1.2 2024-11-09T00:00:00 <p>Added kernel to Azure Linux 3.0 Added kernel to CBL-Mariner 2.0</p> 3.0 2026-08-12T23:12:57 <p>Information published.</p> 1.0 2024-10-12T00:00:00 <p>Information published.</p> 1.1 2024-11-01T00:00:00 <p>Added kernel to CBL-Mariner 2.0</p> 1.3 2024-12-03T00:00:00 <p>Added kernel to CBL-Mariner 2.0 Added kernel to Azure Linux 3.0</p> 2.0 2026-02-21T01:22:18 <p>Information published.</p> x86/hyperv: fix kexec crash due to VP assist page corruption <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46864 17603-17084 17610-17084 17603-17084 17610-17084 Moderate 17603-17084 Moderate 17610-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17603-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17610-17084 CBL-Mariner Releases 17603-17084 17610-17084 No Security Update 6.6.56.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17603-17084 17610-17084 CBL-Mariner Releases 1.0 2024-11-09T00:00:00 <p>Information published.</p> 1.1 2026-02-21T01:23:26 <p>Information published.</p> Possible denial of service in X.509 name checks <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner openssl Yes CVE-2024-6119 Access of Resource Using Incompatible Type ('Type Confusion') 17238-16823 17239-16823 17634-17084 17635-17084 17636-17084 19810-17084 17627-17084 16977-21692 19823-17086 16977-17086 17238-16823 17239-16823 17634-17084 17635-17084 17636-17084 19810-17084 17627-17084 16977-21692 19823-17086 16977-17086 Important 17238-16823 Important 17239-16823 Important 17634-17084 Important 17635-17084 Important 17636-17084 Important 19810-17084 Important 17627-17084 Important 16977-21692 19823-17086 Important 16977-17086 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 17238-16823 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 17239-16823 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 17634-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 17635-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 17636-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 19810-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 17627-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 16977-21692 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 19823-17086 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 16977-17086 CBL-Mariner Releases 17238-16823 No Security Update 1.0.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17238-16823 CBL-Mariner Releases CBL-Mariner Releases 17239-16823 17634-17084 16977-21692 19823-17086 16977-17086 No Security Update 38.0.72.2-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17239-16823 17634-17084 16977-21692 19823-17086 16977-17086 CBL-Mariner Releases CBL-Mariner Releases 17635-17084 17627-17084 No Security Update 20240524git3e722403cd16-3 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17635-17084 17627-17084 CBL-Mariner Releases CBL-Mariner Releases 17636-17084 19810-17084 No Security Update 3.3.2-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17636-17084 19810-17084 CBL-Mariner Releases 1.2 2024-10-15T00:00:00 <p>Added edk2 to Azure Linux 3.0 Added openssl to Azure Linux 3.0 Added cloud-hypervisor-cvm to Azure Linux 3.0 Added cloud-hypervisor-cvm to CBL-Mariner 2.0</p> 1.4 2024-12-03T00:00:00 <p>Added cloud-hypervisor-cvm to CBL-Mariner 2.0 Added hvloader to CBL-Mariner 2.0 Added edk2 to Azure Linux 3.0 Added openssl to Azure Linux 3.0 Added cloud-hypervisor-cvm to Azure Linux 3.0</p> 1.0 2024-09-25T00:00:00 <p>Information published.</p> 1.1 2024-10-12T00:00:00 <p>Information published.</p> 1.3 2024-11-28T00:00:00 <p>Added hvloader to CBL-Mariner 2.0 Added cloud-hypervisor-cvm to CBL-Mariner 2.0 Added edk2 to Azure Linux 3.0 Added openssl to Azure Linux 3.0 Added cloud-hypervisor-cvm to Azure Linux 3.0</p> 2.0 2025-06-03T00:00:00 <p>Added cloud-hypervisor-cvm to CBL-Mariner 2.0 Added hvloader to CBL-Mariner 2.0 Added edk2 to Azure Linux 3.0 Added openssl to Azure Linux 3.0</p> 3.0 2026-02-18T01:11:40 <p>Information published.</p> 4.0 2026-08-12T22:43:24 <p>Information published.</p> Regular-expression DoS when parsing TarFile headers <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner PSF Yes CVE-2024-6232 Inefficient Regular Expression Complexity 17242-16823 17541-17084 17637-17084 17545-17084 17667-17084 19681-17086 19681-21692 21639-17084 17242-16823 17541-17084 17637-17084 17545-17084 17667-17084 19681-17086 19681-21692 21639-17084 Important 17242-16823 Important 17541-17084 Important 17637-17084 Important 17545-17084 Important 17667-17084 Important 19681-17086 Important 19681-21692 Important 21639-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 17242-16823 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 17541-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 17637-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 17545-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 17667-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 19681-17086 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 19681-21692 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21639-17084 CBL-Mariner Releases 17242-16823 19681-17086 19681-21692 No Security Update 3.9.19-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17242-16823 19681-17086 19681-21692 CBL-Mariner Releases CBL-Mariner Releases 17541-17084 17667-17084 No Security Update 2.16.1-7 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17541-17084 17667-17084 CBL-Mariner Releases CBL-Mariner Releases 17637-17084 17545-17084 No Security Update 3.12.3-4 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17637-17084 17545-17084 CBL-Mariner Releases Release Notes 21639-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21639-17084 Release Notes 1.0 2024-09-26T00:00:00 <p>Information published.</p> 1.1 2024-10-15T00:00:00 <p>Added python3 to Azure Linux 3.0 Added tensorflow to Azure Linux 3.0 Added python3 to CBL-Mariner 2.0</p> 1.2 2026-02-18T01:12:56 <p>Information published.</p> 2.0 2026-08-12T22:47:01 <p>Information published.</p> 3.0 2026-10-21T01:08:48 <p>Information published.</p> OCSP stapling bypass with GnuTLS <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner curl Yes CVE-2024-8096 Improper Certificate Validation 17235-16823 17236-16823 17628-17084 17633-17084 17579-17084 19799-17086 17464-17084 19799-21692 20047-17086 20047-21692 17235-16823 17236-16823 17628-17084 17633-17084 17579-17084 19799-17086 17464-17084 19799-21692 20047-17086 20047-21692 Moderate 17235-16823 Moderate 17236-16823 Moderate 17628-17084 Moderate 17633-17084 Moderate 17579-17084 Moderate 19799-17086 Moderate 17464-17084 Moderate 19799-21692 Moderate 20047-17086 Moderate 20047-21692 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N 17235-16823 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N 17236-16823 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N 17628-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N 17633-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N 17579-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N 19799-17086 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N 17464-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N 19799-21692 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N 20047-17086 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N 20047-21692 CBL-Mariner Releases 17235-16823 No Security Update 8.0.36-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17235-16823 CBL-Mariner Releases CBL-Mariner Releases 17236-16823 17633-17084 17579-17084 19799-17086 19799-21692 No Security Update 8.8.0-3 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17236-16823 17633-17084 17579-17084 19799-17086 19799-21692 CBL-Mariner Releases CBL-Mariner Releases 17628-17084 17464-17084 No Security Update 3.30.3-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17628-17084 17464-17084 CBL-Mariner Releases CBL-Mariner Releases 20047-17086 20047-21692 No Security Update 3.21.4-18 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 20047-17086 20047-21692 CBL-Mariner Releases 1.3 2024-11-09T00:00:00 <p>Added curl to Azure Linux 3.0 Added cmake to Azure Linux 3.0 Added curl to CBL-Mariner 2.0 Added mysql to CBL-Mariner 2.0</p> 1.4 2025-03-27T00:00:00 <p>Added mysql to CBL-Mariner 2.0 Added curl to CBL-Mariner 2.0 Added curl to Azure Linux 3.0 Added cmake to Azure Linux 3.0</p> 1.5 2025-04-12T00:00:00 <p>Added mysql to Azure Linux 3.0 Added curl to Azure Linux 3.0 Added cmake to Azure Linux 3.0 Added mysql to CBL-Mariner 2.0 Added curl to CBL-Mariner 2.0</p> 1.0 2024-10-01T00:00:00 <p>Information published.</p> 1.1 2024-10-23T00:00:00 <p>Added mysql to CBL-Mariner 2.0 Added cmake to Azure Linux 3.0</p> 1.2 2024-11-01T00:00:00 <p>Added curl to CBL-Mariner 2.0 Added mysql to CBL-Mariner 2.0 Added cmake to Azure Linux 3.0</p> 2.0 2025-07-11T00:00:00 <p>Added cmake to CBL-Mariner 2.0 Added mysql to CBL-Mariner 2.0 Added curl to CBL-Mariner 2.0 Added mysql to Azure Linux 3.0 Added curl to Azure Linux 3.0 Added cmake to Azure Linux 3.0</p> 3.0 2026-02-18T02:22:58 <p>Information published.</p> 4.0 2026-08-12T22:07:00 <p>Information published.</p> Qemu-kvm: usb: assertion failure in usb_ep_get() <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner redhat Yes CVE-2024-8354 Reachable Assertion 19662-17086 20035-17084 20413-17084 20559-17084 20602-17086 20615-17084 20727-17084 21101-17084 21118-21692 17093-17086 20691-17086 20880-17084 20963-17084 21118-17086 19662-17086 20035-17084 20413-17084 20559-17084 20602-17086 20615-17084 20727-17084 21101-17084 21118-21692 17093-17086 20691-17086 20880-17084 20963-17084 21118-17086 19662-17086 20035-17084 Moderate 20413-17084 Moderate 20559-17084 Moderate 20602-17086 Moderate 20615-17084 Moderate 20727-17084 Moderate 21101-17084 Moderate 21118-21692 Moderate 17093-17086 Moderate 20691-17086 Moderate 20880-17084 Moderate 20963-17084 Moderate 21118-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19662-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20035-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20413-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20559-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20602-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20615-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20727-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21101-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21118-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17093-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20691-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20880-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20963-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21118-17086 CBL-Mariner Releases 21101-17084 20963-17084 No Security Update 9.1.0-3 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21101-17084 20963-17084 CBL-Mariner Releases CBL-Mariner Releases 21118-21692 20691-17086 21118-17086 No Security Update 6.2.0-27 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21118-21692 20691-17086 21118-17086 CBL-Mariner Releases 1.0 2025-09-04T03:32:24 <p>Information published.</p> 2.0 2025-12-06T14:36:08 <p>Information published.</p> 3.0 2025-12-07T01:43:45 <p>Information published.</p> 7.0 2026-03-20T01:36:25 <p>Information published.</p> 9.0 2026-04-01T14:36:00 <p>Information published.</p> 10.0 2026-08-12T23:27:59 <p>Information published.</p> 4.0 2026-02-18T02:46:40 <p>Information published.</p> 5.0 2026-03-04T14:39:01 <p>Information published.</p> 6.0 2026-03-16T14:35:42 <p>Information published.</p> 8.0 2026-03-31T14:45:12 <p>Information published.</p> Libopensc: heap buffer overflow in openpgp driver when generating key <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner redhat Yes CVE-2024-8443 Heap-based Buffer Overflow 19948-17084 19948-17084 Low 19948-17084 2.9 2.9 CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N 19948-17084 CBL-Mariner Releases 19948-17084 No Security Update 0.26.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19948-17084 CBL-Mariner Releases 1.0 2025-09-03T23:30:13 <p>Information published.</p> 2.0 2026-08-12T22:14:10 <p>Information published.</p> Qemu-kvm: information leak in virtio devices <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner redhat Yes CVE-2024-8612 Exposure of Sensitive Information to an Unauthorized Actor 19662-17086 17093-17086 20559-17084 20615-17084 20880-17084 21118-17086 21118-21692 20035-17084 20413-17084 20602-17086 20691-17086 20727-17084 19662-17086 17093-17086 20559-17084 20615-17084 20880-17084 21118-17086 21118-21692 20035-17084 20413-17084 20602-17086 20691-17086 20727-17084 19662-17086 Low 17093-17086 Low 20559-17084 Low 20615-17084 Low 20880-17084 Low 21118-17086 Low 21118-21692 20035-17084 Low 20413-17084 Low 20602-17086 Low 20691-17086 Low 20727-17084 3.8 3.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N 19662-17086 3.8 3.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N 17093-17086 3.8 3.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N 20559-17084 3.8 3.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N 20615-17084 3.8 3.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N 20880-17084 3.8 3.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N 21118-17086 3.8 3.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N 21118-21692 3.8 3.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N 20035-17084 3.8 3.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N 20413-17084 3.8 3.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N 20602-17086 3.8 3.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N 20691-17086 3.8 3.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N 20727-17084 CBL-Mariner Releases 20880-17084 No Security Update 9.1.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 20880-17084 CBL-Mariner Releases 3.0 2025-12-07T01:44:04 <p>Information published.</p> 4.0 2026-02-18T02:59:32 <p>Information published.</p> 5.0 2026-03-31T14:45:33 <p>Information published.</p> 6.0 2026-08-12T23:45:55 <p>Information published.</p> 1.0 2025-09-04T05:21:33 <p>Information published.</p> 2.0 2025-12-06T14:36:18 <p>Information published.</p> Access of Uninitialized Pointer in Wireshark <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner GitLab Yes CVE-2024-8645 Access of Uninitialized Pointer 19523-17084 19523-17084 Moderate 19523-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 19523-17084 CBL-Mariner Releases 19523-17084 No Security Update 4.4.7-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19523-17084 CBL-Mariner Releases 1.0 2025-07-11T00:00:00 <p>Information published.</p> Ansible-core: exposure of sensitive information in ansible vault files due to improper logging <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner redhat Yes CVE-2024-8775 Insertion of Sensitive Information into Log File 19586-17084 17822-17084 19543-21692 19780-17086 19543-17086 19586-17084 17822-17084 19543-21692 19780-17086 19543-17086 Moderate 19586-17084 Moderate 17822-17084 Moderate 19543-21692 19780-17086 Moderate 19543-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N 19586-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N 17822-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N 19543-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N 19780-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N 19543-17086 CBL-Mariner Releases 19586-17084 17822-17084 No Security Update 2.17.11-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19586-17084 17822-17084 CBL-Mariner Releases CBL-Mariner Releases 19543-21692 19780-17086 19543-17086 No Security Update 2.14.18-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19543-21692 19780-17086 19543-17086 CBL-Mariner Releases 1.0 2025-07-11T00:00:00 <p>Information published.</p> 2.0 2026-08-12T21:49:27 <p>Information published.</p> 1.1 2026-02-18T14:28:31 <p>Information published.</p> xen: privcmd: Switch from mutex to spinlock for irqfds <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-44957 Improper Locking 17087-17086 21093-17086 21093-21692 20925-17086 17087-17086 21093-17086 21093-21692 20925-17086 Moderate 17087-17086 Moderate 21093-17086 Moderate 21093-21692 Moderate 20925-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17087-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21093-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21093-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20925-17086 1.0 2025-09-03T21:13:59 <p>Information published.</p> 2.0 2026-03-03T14:49:05 <p>Information published.</p> 4.0 2026-08-12T21:25:29 <p>Information published.</p> 3.0 2026-03-31T15:03:44 <p>Information published.</p> driver: iio: add missing checks on iio_info's callback access <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46715 NULL Pointer Dereference 20925-17086 21093-17086 17087-17086 21093-21692 20925-17086 21093-17086 17087-17086 21093-21692 20925-17086 21093-17086 17087-17086 21093-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20925-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21093-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17087-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21093-21692 1.0 2025-09-03T21:23:15 <p>Information published.</p> 2.0 2026-03-03T14:50:08 <p>Information published.</p> 3.0 2026-03-31T15:08:46 <p>Information published.</p> 4.0 2026-08-12T23:04:23 <p>Information published.</p> ethtool: fail closed if we can't get max channel used in indirection tables <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46834 19683-17084 17087-17086 20412-17084 20613-17084 20725-17084 20788-17084 20823-17084 20860-17084 20925-17086 20956-17084 21094-17084 21093-17086 21248-17084 21474-17084 21626-17084 21093 21684-17084 21093-21692 20553-17084 21308-17084 21332-17084 21344-17084 21443-17084 21580-17084 19683-17084 17087-17086 20412-17084 20613-17084 20725-17084 20788-17084 20823-17084 20860-17084 20925-17086 20956-17084 21094-17084 21093-17086 21248-17084 21474-17084 21626-17084 21093 21684-17084 21093-21692 20553-17084 21308-17084 21332-17084 21344-17084 21443-17084 21580-17084 19683-17084 Moderate 17087-17086 Moderate 20412-17084 Moderate 20613-17084 Moderate 20725-17084 Moderate 20788-17084 Moderate 20823-17084 Moderate 20860-17084 Moderate 20925-17086 Moderate 20956-17084 Moderate 21094-17084 Moderate 21093-17086 Moderate 21248-17084 Moderate 21474-17084 Moderate 21626-17084 Moderate 21093 Moderate 21684-17084 Moderate 21093-21692 Moderate 20553-17084 Moderate 21308-17084 Moderate 21332-17084 Moderate 21344-17084 Moderate 21443-17084 Moderate 21580-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19683-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17087-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20412-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20613-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20725-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20788-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20823-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20860-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20925-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20956-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21094-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21093-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21248-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21474-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21626-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21093 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21093-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20553-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21308-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21332-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21344-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21443-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21580-17084 2.0 2025-12-07T01:41:48 <p>Information published.</p> 5.0 2026-02-21T02:21:06 <p>Information published.</p> 6.0 2026-03-03T15:03:05 <p>Information published.</p> 7.0 2026-03-04T14:39:52 <p>Information published.</p> 8.0 2026-03-31T14:40:17 <p>Information published.</p> 11.0 2026-05-11T01:42:21 <p>Information published.</p> 13.0 2026-06-17T14:45:08 <p>Information published.</p> 15.0 2026-07-12T14:50:14 <p>Information published.</p> 16.0 2026-08-07T00:58:57 <p>Information published.</p> 17.0 2026-08-10T14:45:08 <p>Information published.</p> 18.0 2026-08-12T21:51:31 <p>Information published.</p> 1.0 2025-09-03T21:40:43 <p>Information published.</p> 3.0 2026-01-08T14:40:52 <p>Information published.</p> 4.0 2026-01-20T14:40:32 <p>Information published.</p> 9.0 2026-04-29T14:45:16 <p>Information published.</p> 10.0 2026-05-06T14:43:12 <p>Information published.</p> 12.0 2026-05-17T14:43:21 <p>Information published.</p> 14.0 2026-06-28T01:48:06 <p>Information published.</p> drm/amd/display: Fix incorrect size calculation for loop <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46729 17087-17086 19529-17084 17087-17086 19529-17084 Important 17087-17086 Moderate 19529-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17087-17086 6.0 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H 19529-17084 1.0 2025-09-03T22:01:02 <p>Information published.</p> 1.1 2026-02-18T01:04:23 <p>Information published.</p> drm/amd/display: Ensure array index tg_inst won't be -1 <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46730 Integer Underflow (Wrap or Wraparound) 20412-17084 20613-17084 20725-17084 20788-17084 20823-17084 20860-17084 20925-17086 21094-17084 21093-17086 21474-17084 21093 19683-17084 17087-17086 20553-17084 20956-17084 21248-17084 21308-17084 21332-17084 21344-17084 21443-17084 21580-17084 21626-17084 21684-17084 21093-21692 20412-17084 20613-17084 20725-17084 20788-17084 20823-17084 20860-17084 20925-17086 21094-17084 21093-17086 21474-17084 21093 19683-17084 17087-17086 20553-17084 20956-17084 21248-17084 21308-17084 21332-17084 21344-17084 21443-17084 21580-17084 21626-17084 21684-17084 21093-21692 Moderate 20412-17084 Moderate 20613-17084 Moderate 20725-17084 Moderate 20788-17084 Moderate 20823-17084 Moderate 20860-17084 Moderate 20925-17086 Moderate 21094-17084 Moderate 21093-17086 Moderate 21474-17084 Moderate 21093 19683-17084 Moderate 17087-17086 Moderate 20553-17084 Moderate 20956-17084 Moderate 21248-17084 Moderate 21308-17084 Moderate 21332-17084 Moderate 21344-17084 Moderate 21443-17084 Moderate 21580-17084 Moderate 21626-17084 Moderate 21684-17084 Moderate 21093-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20412-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20613-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20725-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20788-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20823-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20860-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20925-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21094-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21093-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21474-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21093 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19683-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17087-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20553-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20956-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21248-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21308-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21332-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21344-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21443-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21580-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21626-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21093-21692 1.0 2025-09-03T22:33:35 <p>Information published.</p> 2.0 2025-12-07T01:41:08 <p>Information published.</p> 3.0 2026-01-08T14:40:10 <p>Information published.</p> 4.0 2026-01-20T14:39:50 <p>Information published.</p> 5.0 2026-02-21T02:50:57 <p>Information published.</p> 6.0 2026-03-03T14:58:07 <p>Information published.</p> 8.0 2026-03-31T15:15:42 <p>Information published.</p> 9.0 2026-04-29T14:44:25 <p>Information published.</p> 13.0 2026-06-17T14:44:26 <p>Information published.</p> 16.0 2026-08-07T00:52:12 <p>Information published.</p> 17.0 2026-08-10T14:44:30 <p>Information published.</p> 18.0 2026-08-12T22:24:01 <p>Information published.</p> 7.0 2026-03-04T14:39:25 <p>Information published.</p> 10.0 2026-05-06T14:42:33 <p>Information published.</p> 11.0 2026-05-11T01:41:44 <p>Information published.</p> 12.0 2026-05-17T14:42:44 <p>Information published.</p> 14.0 2026-06-28T01:47:03 <p>Information published.</p> 15.0 2026-07-12T14:49:08 <p>Information published.</p> drm/amd/display: Add otg_master NULL check within resource_log_pipe_topology_update <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46727 NULL Pointer Dereference 17087-17086 20553-17084 20613-17084 20725-17084 20823-17084 20925-17086 21094-17084 21093-17086 21248-17084 21332-17084 21443-17084 21580-17084 21626-17084 19683-17084 20412-17084 20788-17084 20860-17084 20956-17084 21308-17084 21344-17084 21474-17084 21684-17084 21093-21692 17087-17086 20553-17084 20613-17084 20725-17084 20823-17084 20925-17086 21094-17084 21093-17086 21248-17084 21332-17084 21443-17084 21580-17084 21626-17084 19683-17084 20412-17084 20788-17084 20860-17084 20956-17084 21308-17084 21344-17084 21474-17084 21684-17084 21093-21692 Moderate 17087-17086 Moderate 20553-17084 Moderate 20613-17084 Moderate 20725-17084 Moderate 20823-17084 Moderate 20925-17086 Moderate 21094-17084 Moderate 21093-17086 Moderate 21248-17084 Moderate 21332-17084 Moderate 21443-17084 Moderate 21580-17084 Moderate 21626-17084 19683-17084 Moderate 20412-17084 Moderate 20788-17084 Moderate 20860-17084 Moderate 20956-17084 Moderate 21308-17084 Moderate 21344-17084 Moderate 21474-17084 Moderate 21684-17084 Moderate 21093-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17087-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20553-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20613-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20725-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20823-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20925-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21094-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21093-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21248-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21332-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21443-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21580-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21626-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19683-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20412-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20788-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20860-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20956-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21308-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21344-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21474-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21093-21692 1.0 2025-09-03T22:41:56 <p>Information published.</p> 3.0 2026-01-08T14:40:21 <p>Information published.</p> 4.0 2026-01-20T14:40:00 <p>Information published.</p> 5.0 2026-02-21T02:52:50 <p>Information published.</p> 6.0 2026-03-03T14:57:49 <p>Information published.</p> 7.0 2026-03-04T14:39:32 <p>Information published.</p> 9.0 2026-04-29T14:44:38 <p>Information published.</p> 11.0 2026-05-11T01:41:53 <p>Information published.</p> 14.0 2026-06-28T01:47:19 <p>Information published.</p> 18.0 2026-08-12T22:29:59 <p>Information published.</p> 2.0 2025-12-07T01:41:18 <p>Information published.</p> 8.0 2026-03-31T15:16:05 <p>Information published.</p> 10.0 2026-05-06T14:42:43 <p>Information published.</p> 12.0 2026-05-17T14:42:53 <p>Information published.</p> 13.0 2026-06-17T14:44:37 <p>Information published.</p> 15.0 2026-07-12T14:49:25 <p>Information published.</p> 16.0 2026-08-07T00:54:44 <p>Information published.</p> 17.0 2026-08-10T14:44:40 <p>Information published.</p> cachefiles: Set the max subreq size for cache writes to MAX_RW_COUNT <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46748 19529-17084 19529-17084 Moderate 19529-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N 19529-17084 1.0 2025-09-04T02:30:35 <p>Information published.</p> 1.1 2026-02-18T01:49:08 <p>Information published.</p> media: aspeed: Fix memory overwrite if timing is 1600x900 <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2023-52916 Out-of-bounds Write 17087-17086 17087-17086 Important 17087-17086 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17087-17086 1.0 2025-09-28T01:01:17 <p>Information published.</p> Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-44972 17087-21692 17087-17086 17087-21692 17087-17086 Moderate 17087-21692 Moderate 17087-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17087-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17087-17086 1.0 2025-09-03T19:48:27 <p>Information published.</p> 2.0 2026-08-12T23:07:12 <p>Information published.</p> pktgen: use cpus_read_lock() in pg_net_init() <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46681 17087-17086 20412-17084 20613-17084 20725-17084 20860-17084 20925-17086 20956-17084 21094-17084 21093-17086 21248-17084 21474-17084 21684-17084 19683-17084 20553-17084 20788-17084 20823-17084 21308-17084 21332-17084 21344-17084 21443-17084 21580-17084 21626-17084 21093-21692 17087-17086 20412-17084 20613-17084 20725-17084 20860-17084 20925-17086 20956-17084 21094-17084 21093-17086 21248-17084 21474-17084 21684-17084 19683-17084 20553-17084 20788-17084 20823-17084 21308-17084 21332-17084 21344-17084 21443-17084 21580-17084 21626-17084 21093-21692 Moderate 17087-17086 Moderate 20412-17084 Moderate 20613-17084 Moderate 20725-17084 Moderate 20860-17084 Moderate 20925-17086 Moderate 20956-17084 Moderate 21094-17084 Moderate 21093-17086 Moderate 21248-17084 Moderate 21474-17084 Moderate 21684-17084 19683-17084 Moderate 20553-17084 Moderate 20788-17084 Moderate 20823-17084 Moderate 21308-17084 Moderate 21332-17084 Moderate 21344-17084 Moderate 21443-17084 Moderate 21580-17084 Moderate 21626-17084 Moderate 21093-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17087-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20412-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20613-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20725-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20860-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20925-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20956-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21094-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21093-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21248-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21474-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19683-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20553-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20788-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20823-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21308-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21332-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21344-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21443-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21580-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21626-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21093-21692 2.0 2025-12-07T01:40:57 <p>Information published.</p> 4.0 2026-01-20T14:39:39 <p>Information published.</p> 6.0 2026-03-03T14:54:06 <p>Information published.</p> 8.0 2026-03-31T15:11:10 <p>Information published.</p> 9.0 2026-04-29T14:44:12 <p>Information published.</p> 11.0 2026-05-11T01:41:34 <p>Information published.</p> 13.0 2026-06-17T14:44:15 <p>Information published.</p> 18.0 2026-08-12T21:08:57 <p>Information published.</p> 1.0 2025-09-03T19:55:46 <p>Information published.</p> 3.0 2026-01-08T14:40:00 <p>Information published.</p> 5.0 2026-02-21T01:26:37 <p>Information published.</p> 7.0 2026-03-04T14:39:18 <p>Information published.</p> 10.0 2026-05-06T14:42:24 <p>Information published.</p> 12.0 2026-05-17T14:42:36 <p>Information published.</p> 14.0 2026-06-28T01:46:48 <p>Information published.</p> 15.0 2026-07-12T14:48:52 <p>Information published.</p> 16.0 2026-08-07T00:49:03 <p>Information published.</p> 17.0 2026-08-10T14:44:19 <p>Information published.</p> libfs: fix infinite directory reads for offset dir <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46701 Loop with Unreachable Exit Condition ('Infinite Loop') 19683-17084 20613-17084 20725-17084 20823-17084 20956-17084 21094-17084 21580-17084 21626-17084 20412-17084 20553-17084 20788-17084 20860-17084 21248-17084 21308-17084 21332-17084 21344-17084 21443-17084 21474-17084 21684-17084 19683-17084 20613-17084 20725-17084 20823-17084 20956-17084 21094-17084 21580-17084 21626-17084 20412-17084 20553-17084 20788-17084 20860-17084 21248-17084 21308-17084 21332-17084 21344-17084 21443-17084 21474-17084 21684-17084 19683-17084 Moderate 20613-17084 Moderate 20725-17084 Moderate 20823-17084 Moderate 20956-17084 Moderate 21094-17084 Moderate 21580-17084 Moderate 21626-17084 20412-17084 Moderate 20553-17084 Moderate 20788-17084 Moderate 20860-17084 Moderate 21248-17084 Moderate 21308-17084 Moderate 21332-17084 Moderate 21344-17084 Moderate 21443-17084 Moderate 21474-17084 Moderate 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19683-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20613-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20725-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20823-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20956-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21094-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21580-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21626-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20412-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20553-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20788-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20860-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21248-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21308-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21332-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21344-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21443-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21474-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 2.0 2025-12-07T01:40:36 <p>Information published.</p> 3.0 2026-01-08T14:39:40 <p>Information published.</p> 4.0 2026-01-20T14:39:20 <p>Information published.</p> 5.0 2026-02-21T01:22:57 <p>Information published.</p> 7.0 2026-03-31T15:10:10 <p>Information published.</p> 10.0 2026-05-11T01:41:17 <p>Information published.</p> 13.0 2026-06-28T01:46:17 <p>Information published.</p> 1.0 2025-09-03T19:52:06 <p>Information published.</p> 6.0 2026-03-04T14:39:04 <p>Information published.</p> 8.0 2026-04-29T14:43:46 <p>Information published.</p> 9.0 2026-05-06T14:42:05 <p>Information published.</p> 11.0 2026-05-17T14:42:18 <p>Information published.</p> 12.0 2026-06-17T14:43:53 <p>Information published.</p> 14.0 2026-07-12T14:48:20 <p>Information published.</p> 15.0 2026-08-07T00:47:15 <p>Information published.</p> 16.0 2026-08-10T14:43:57 <p>Information published.</p> drm/amd/display: Validate function returns <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46775 17087-17086 20412-17084 20613-17084 20860-17084 20925-17086 20956-17084 21094-17084 21248-17084 21332-17084 21580-17084 21626-17084 21093-21692 19683-17084 20553-17084 20725-17084 20788-17084 20823-17084 21093-17086 21308-17084 21344-17084 21443-17084 21474-17084 21684-17084 17087-17086 20412-17084 20613-17084 20860-17084 20925-17086 20956-17084 21094-17084 21248-17084 21332-17084 21580-17084 21626-17084 21093-21692 19683-17084 20553-17084 20725-17084 20788-17084 20823-17084 21093-17086 21308-17084 21344-17084 21443-17084 21474-17084 21684-17084 17087-17086 20412-17084 20613-17084 20860-17084 20925-17086 20956-17084 21094-17084 21248-17084 21332-17084 21580-17084 21626-17084 21093-21692 19683-17084 20553-17084 20725-17084 20788-17084 20823-17084 21093-17086 21308-17084 21344-17084 21443-17084 21474-17084 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17087-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20412-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20613-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20860-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20925-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20956-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21094-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21248-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21332-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21580-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21626-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21093-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19683-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20553-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20725-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20788-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20823-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21093-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21308-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21344-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21443-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21474-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 2.0 2025-12-07T01:48:18 <p>Information published.</p> 3.0 2026-01-08T14:46:34 <p>Information published.</p> 4.0 2026-01-20T14:46:37 <p>Information published.</p> 7.0 2026-03-04T14:43:56 <p>Information published.</p> 8.0 2026-03-31T14:37:36 <p>Information published.</p> 9.0 2026-04-29T14:52:48 <p>Information published.</p> 11.0 2026-05-11T01:47:28 <p>Information published.</p> 13.0 2026-06-17T14:51:24 <p>Information published.</p> 14.0 2026-06-28T01:56:52 <p>Information published.</p> 15.0 2026-07-12T14:59:27 <p>Information published.</p> 17.0 2026-08-10T14:50:21 <p>Information published.</p> 18.0 2026-08-12T22:11:05 <p>Information published.</p> 1.0 2025-09-03T20:02:18 <p>Information published.</p> 5.0 2026-02-18T14:34:32 <p>Information published.</p> 6.0 2026-03-03T14:59:16 <p>Information published.</p> 10.0 2026-05-06T14:48:43 <p>Information published.</p> 12.0 2026-05-17T14:48:15 <p>Information published.</p> 16.0 2026-08-07T00:50:32 <p>Information published.</p> userfaultfd: fix checks for huge PMDs <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46787 17087-17086 20925-17086 21093-17086 21093 21093-21692 17087-17086 20925-17086 21093-17086 21093 21093-21692 17087-17086 20925-17086 21093-17086 21093 21093-21692 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17087-17086 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 20925-17086 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 21093-17086 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 21093 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 21093-21692 2.0 2026-03-03T15:00:38 <p>Information published.</p> 3.0 2026-03-31T14:39:53 <p>Information published.</p> 4.0 2026-08-07T00:47:47 <p>Information published.</p> 1.0 2025-09-03T20:20:18 <p>Information published.</p> 5.0 2026-08-12T22:25:38 <p>Information published.</p> x86/tdx: Fix data leak in mmio_read() <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46794 20925-17086 21093-17086 21093-21692 17087-17086 20925-17086 21093-17086 21093-21692 17087-17086 20925-17086 21093-17086 21093-21692 17087-17086 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N 20925-17086 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N 21093-17086 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N 21093-21692 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N 17087-17086 2.0 2026-03-03T15:01:35 <p>Information published.</p> 4.0 2026-08-12T22:38:31 <p>Information published.</p> 1.0 2025-09-03T20:36:33 <p>Information published.</p> 3.0 2026-03-31T14:41:03 <p>Information published.</p> ELF: fix kernel.randomize_va_space double read <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46826 21093-17086 21093-21692 17087-17086 20925-17086 21093-17086 21093-21692 17087-17086 20925-17086 21093-17086 21093-21692 17087-17086 20925-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21093-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21093-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17087-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20925-17086 1.0 2025-09-03T20:50:36 <p>Information published.</p> 2.0 2026-03-03T15:02:08 <p>Information published.</p> 3.0 2026-03-31T14:41:52 <p>Information published.</p> 4.0 2026-08-12T22:48:12 <p>Information published.</p> wifi: ath12k: fix firmware crash due to invalid peer nss <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46827 21093-17086 17087-17086 20925-17086 21093-21692 21093-17086 17087-17086 20925-17086 21093-21692 21093-17086 17087-17086 20925-17086 21093-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21093-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17087-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20925-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21093-21692 2.0 2026-03-03T15:00:55 <p>Information published.</p> 3.0 2026-03-31T14:40:17 <p>Information published.</p> 4.0 2026-08-12T22:30:25 <p>Information published.</p> 1.0 2025-09-03T20:26:11 <p>Information published.</p> drm/xe/preempt_fence: enlarge the fence critical section <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-44956 Improper Locking 19683-17084 20412-17084 20553-17084 20613-17084 20725-17084 20823-17084 20860-17084 20925-17086 21332-17084 21684-17084 21093-21692 17087-17086 20788-17084 20956-17084 21094-17084 21093-17086 21248-17084 21308-17084 21344-17084 21443-17084 21474-17084 21580-17084 21626-17084 19683-17084 20412-17084 20553-17084 20613-17084 20725-17084 20823-17084 20860-17084 20925-17086 21332-17084 21684-17084 21093-21692 17087-17086 20788-17084 20956-17084 21094-17084 21093-17086 21248-17084 21308-17084 21344-17084 21443-17084 21474-17084 21580-17084 21626-17084 19683-17084 Moderate 20412-17084 Moderate 20553-17084 Moderate 20613-17084 Moderate 20725-17084 Moderate 20823-17084 Moderate 20860-17084 Moderate 20925-17086 Moderate 21332-17084 Moderate 21684-17084 Moderate 21093-21692 Moderate 17087-17086 Moderate 20788-17084 Moderate 20956-17084 Moderate 21094-17084 Moderate 21093-17086 Moderate 21248-17084 Moderate 21308-17084 Moderate 21344-17084 Moderate 21443-17084 Moderate 21474-17084 Moderate 21580-17084 Moderate 21626-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19683-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20412-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20553-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20613-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20725-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20823-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20860-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20925-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21332-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21093-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17087-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20788-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20956-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21094-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21093-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21248-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21308-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21344-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21443-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21474-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21580-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21626-17084 2.0 2025-12-07T01:39:59 <p>Information published.</p> 4.0 2026-01-20T14:38:59 <p>Information published.</p> 6.0 2026-03-03T14:49:39 <p>Information published.</p> 7.0 2026-03-04T14:38:51 <p>Information published.</p> 9.0 2026-04-29T14:43:09 <p>Information published.</p> 11.0 2026-05-11T01:41:00 <p>Information published.</p> 13.0 2026-06-17T14:43:24 <p>Information published.</p> 15.0 2026-07-12T14:47:49 <p>Information published.</p> 18.0 2026-08-12T21:23:34 <p>Information published.</p> 1.0 2025-09-03T21:07:40 <p>Information published.</p> 3.0 2026-01-08T14:39:20 <p>Information published.</p> 5.0 2026-02-21T00:13:42 <p>Information published.</p> 8.0 2026-03-31T15:02:04 <p>Information published.</p> 10.0 2026-05-06T14:41:47 <p>Information published.</p> 12.0 2026-05-17T14:41:55 <p>Information published.</p> 14.0 2026-06-28T01:45:43 <p>Information published.</p> 16.0 2026-08-07T00:38:35 <p>Information published.</p> 17.0 2026-08-10T14:43:36 <p>Information published.</p> drm/amdgpu: Forward soft recovery errors to userspace <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-44961 17087-17086 20925-17086 21093-21692 21093-17086 17087-17086 20925-17086 21093-21692 21093-17086 Moderate 17087-17086 Moderate 20925-17086 Moderate 21093-21692 Moderate 21093-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17087-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20925-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21093-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21093-17086 1.0 2025-09-03T20:29:45 <p>Information published.</p> 2.0 2026-03-03T15:00:40 <p>Information published.</p> 4.0 2026-08-12T21:23:54 <p>Information published.</p> 3.0 2026-03-31T14:36:58 <p>Information published.</p> Bluetooth: btnxpuart: Shutdown timer and prevent rearming when driver unloading <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-44962 20925-17086 17087-17086 21093-17086 21093-21692 20925-17086 17087-17086 21093-17086 21093-21692 Moderate 20925-17086 Moderate 17087-17086 Moderate 21093-17086 Moderate 21093-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20925-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17087-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21093-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21093-21692 3.0 2026-03-31T14:37:51 <p>Information published.</p> 4.0 2026-08-12T21:24:26 <p>Information published.</p> 1.0 2025-09-03T20:31:11 <p>Information published.</p> 2.0 2026-03-03T15:01:13 <p>Information published.</p> net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-44970 21093-17086 17087-17086 20925-17086 21093 21093-21692 21093-17086 17087-17086 20925-17086 21093 21093-21692 Moderate 21093-17086 Moderate 17087-17086 Moderate 20925-17086 Moderate 21093 Moderate 21093-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21093-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17087-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20925-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21093 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21093-21692 2.0 2026-03-03T14:59:49 <p>Information published.</p> 3.0 2026-03-31T15:17:41 <p>Information published.</p> 1.0 2025-09-03T19:49:20 <p>Information published.</p> 4.0 2026-08-07T00:56:16 <p>Information published.</p> 5.0 2026-08-12T23:08:07 <p>Information published.</p> A vulnerability has been identified in Node.js version 20, affecting users of the experimental permission model when the --allow-fs-read flag is used with a non-* argument. This flaw arises from an inadequate permission model that fails to restrict file watching through the fs.watchFile API. As a result, malicious actors can monitor files that they do not have explicit read access to. Please note that at the time this CVE was issued, the permission model is an experimental feature of Node.js. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner hackerone Yes CVE-2023-30582 Improper Access Control 20056-17086 20894-17086 20894-21692 20367-17086 20686-17086 20056-17086 20894-17086 20894-21692 20367-17086 20686-17086 20056-17086 Moderate 20894-17086 Moderate 20894-21692 Moderate 20367-17086 Moderate 20686-17086 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N 20056-17086 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N 20894-17086 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N 20894-21692 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N 20367-17086 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N 20686-17086 2.0 2025-12-06T14:34:56 <p>Information published.</p> 3.0 2026-02-21T00:18:13 <p>Information published.</p> 4.0 2026-03-03T01:35:22 <p>Information published.</p> 5.0 2026-08-12T21:28:56 <p>Information published.</p> 1.0 2025-09-03T21:20:48 <p>Information published.</p> Rust OS Command Injection/Argument Injection vulnerability Mariner GitHub_M Yes CVE-2024-43402 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') 17183 17183-21692 19671-17084 17183 17183-21692 19671-17084 Important 17183 Important 17183-21692 Important 19671-17084 8.1 8.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H 17183 8.1 8.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H 17183-21692 8.1 8.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H 19671-17084 1.0 2026-08-07T00:36:32 <p>Information published.</p> 2.0 2026-08-12T22:44:51 <p>Information published.</p> Bypass incomplete fix of CVE-2024-27980, that arises from improper handling of batch files with all possible extensions on Windows via child_process.spawn / child_process.spawnSync. A malicious command line argument can inject arbitrary commands and achieve code execution even if the shell option is not enabled. Mariner hackerone Yes CVE-2024-36138 Improper Neutralization of Special Elements used in a Command ('Command Injection') 19873 19873-21692 19608-17084 19873 19873-21692 19608-17084 Critical 19873 Critical 19873-21692 Critical 19608-17084 8.1 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H 19873 8.1 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H 19873-21692 8.1 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H 19608-17084 1.0 2026-08-07T00:40:58 <p>Information published.</p> 2.0 2026-08-12T21:28:17 <p>Information published.</p> Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Mariner Linux Yes CVE-2024-46700 17095 17095-21692 19529-17084 17095 17095-21692 19529-17084 Important 17095 Important 17095-21692 Important 19529-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17095 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17095-21692 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 19529-17084 1.0 2026-08-07T00:45:54 <p>Information published.</p> 2.0 2026-08-12T22:37:03 <p>Information published.</p> Stack overflow in Protocol Buffers Java Lite <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Google Yes CVE-2024-7254 Uncontrolled Resource Consumption 19668-17086 19712-17086 19889-17086 20022-17086 20026-17086 17664-17084 19407-17084 20040-17084 19852-17086 17868-17086 19450-17086 17153-17086 19712-21692 20022-21692 20026-21692 19450-21692 17153-21692 19909-17086 19693-17084 17667-17084 17539-17084 19668-21692 17868-21692 19668-17086 19712-17086 19889-17086 20022-17086 20026-17086 17664-17084 19407-17084 20040-17084 19852-17086 17868-17086 19450-17086 17153-17086 19712-21692 20022-21692 20026-21692 19450-21692 17153-21692 19909-17086 19693-17084 17667-17084 17539-17084 19668-21692 17868-21692 19668-17086 19712-17086 19889-17086 20022-17086 20026-17086 17664-17084 19407-17084 20040-17084 19852-17086 17868-17086 19450-17086 Important 17153-17086 19712-21692 20022-21692 20026-21692 19450-21692 Important 17153-21692 19909-17086 19693-17084 17667-17084 Important 17539-17084 19668-21692 17868-21692 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 19668-17086 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 19712-17086 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 19889-17086 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 20022-17086 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 20026-17086 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 17664-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 19407-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 20040-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 19852-17086 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 17868-17086 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 19450-17086 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 17153-17086 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 19712-21692 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 20022-21692 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 20026-21692 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 19450-21692 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 17153-21692 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 19909-17086 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 19693-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 17667-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 17539-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 19668-21692 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 17868-21692 1.0 2025-09-03T21:12:43 <p>Information published.</p> 2.0 2026-02-21T02:13:39 <p>Information published.</p> 3.0 2026-08-12T21:41:38 <p>Information published.</p> video/aperture: optionally match the device in sysfb_disable() <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46698 NULL Pointer Dereference 19683-17084 20412-17084 20613-17084 20725-17084 20823-17084 20860-17084 20956-17084 21094-17084 21248-17084 21580-17084 21684-17084 20553-17084 20788-17084 21308-17084 21332-17084 21344-17084 21443-17084 21474-17084 21626-17084 19683-17084 20412-17084 20613-17084 20725-17084 20823-17084 20860-17084 20956-17084 21094-17084 21248-17084 21580-17084 21684-17084 20553-17084 20788-17084 21308-17084 21332-17084 21344-17084 21443-17084 21474-17084 21626-17084 19683-17084 20412-17084 Moderate 20613-17084 Moderate 20725-17084 Moderate 20823-17084 Moderate 20860-17084 Moderate 20956-17084 Moderate 21094-17084 Moderate 21248-17084 Moderate 21580-17084 Moderate 21684-17084 Moderate 20553-17084 Moderate 20788-17084 Moderate 21308-17084 Moderate 21332-17084 Moderate 21344-17084 Moderate 21443-17084 Moderate 21474-17084 Moderate 21626-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19683-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20412-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20613-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20725-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20823-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20860-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20956-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21094-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21248-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21580-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20553-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20788-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21308-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21332-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21344-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21443-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21474-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21626-17084 1.0 2025-09-03T19:40:41 <p>Information published.</p> 2.0 2025-12-07T01:40:26 <p>Information published.</p> 4.0 2026-01-20T14:39:09 <p>Information published.</p> 5.0 2026-02-21T01:12:02 <p>Information published.</p> 6.0 2026-03-04T14:38:58 <p>Information published.</p> 7.0 2026-03-31T15:09:08 <p>Information published.</p> 8.0 2026-04-29T14:43:35 <p>Information published.</p> 10.0 2026-05-11T01:41:08 <p>Information published.</p> 15.0 2026-08-07T00:46:30 <p>Information published.</p> 3.0 2026-01-08T14:39:30 <p>Information published.</p> 9.0 2026-05-06T14:41:56 <p>Information published.</p> 11.0 2026-05-17T14:42:07 <p>Information published.</p> 12.0 2026-06-17T14:43:42 <p>Information published.</p> 13.0 2026-06-28T01:46:03 <p>Information published.</p> 14.0 2026-07-12T14:48:04 <p>Information published.</p> 16.0 2026-08-10T14:43:46 <p>Information published.</p> drm/xe: reset mmio mappings with devm <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46705 NULL Pointer Dereference 19683-17084 20412-17084 20613-17084 20725-17084 20823-17084 20860-17084 20925-17086 20956-17084 21094-17084 21093-17086 21248-17084 21443-17084 21474-17084 21626-17084 21093 21684-17084 17087-17086 20553-17084 20788-17084 21308-17084 21332-17084 21344-17084 21580-17084 21093-21692 19683-17084 20412-17084 20613-17084 20725-17084 20823-17084 20860-17084 20925-17086 20956-17084 21094-17084 21093-17086 21248-17084 21443-17084 21474-17084 21626-17084 21093 21684-17084 17087-17086 20553-17084 20788-17084 21308-17084 21332-17084 21344-17084 21580-17084 21093-21692 19683-17084 Moderate 20412-17084 Moderate 20613-17084 Moderate 20725-17084 Moderate 20823-17084 Moderate 20860-17084 Moderate 20925-17086 Moderate 20956-17084 Moderate 21094-17084 Moderate 21093-17086 Moderate 21248-17084 Moderate 21443-17084 Moderate 21474-17084 Moderate 21626-17084 Moderate 21093 Moderate 21684-17084 Moderate 17087-17086 Moderate 20553-17084 Moderate 20788-17084 Moderate 21308-17084 Moderate 21332-17084 Moderate 21344-17084 Moderate 21580-17084 Moderate 21093-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19683-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20412-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20613-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20725-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20823-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20860-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20925-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20956-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21094-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21093-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21248-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21443-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21474-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21626-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21093 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17087-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20553-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20788-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21308-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21332-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21344-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21580-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21093-21692 2.0 2025-12-07T01:40:47 <p>Information published.</p> 4.0 2026-01-20T14:39:29 <p>Information published.</p> 6.0 2026-03-03T14:54:23 <p>Information published.</p> 8.0 2026-03-31T15:10:41 <p>Information published.</p> 9.0 2026-04-29T14:44:00 <p>Information published.</p> 11.0 2026-05-11T01:41:25 <p>Information published.</p> 15.0 2026-07-12T14:48:36 <p>Information published.</p> 17.0 2026-08-10T14:44:09 <p>Information published.</p> 1.0 2025-09-03T19:53:21 <p>Information published.</p> 3.0 2026-01-08T14:39:49 <p>Information published.</p> 5.0 2026-02-21T01:24:20 <p>Information published.</p> 7.0 2026-03-04T14:39:11 <p>Information published.</p> 10.0 2026-05-06T14:42:16 <p>Information published.</p> 12.0 2026-05-17T14:42:27 <p>Information published.</p> 13.0 2026-06-17T14:44:04 <p>Information published.</p> 14.0 2026-06-28T01:46:32 <p>Information published.</p> 16.0 2026-08-07T00:48:15 <p>Information published.</p> 18.0 2026-08-12T21:07:40 <p>Information published.</p> powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas() <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46774 Out-of-bounds Write 17095-17086 17095-21692 19673-17086 19529-17084 17095-17086 17095-21692 19673-17086 19529-17084 Important 17095-17086 Important 17095-21692 19673-17086 Important 19529-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H 17095-17086 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H 17095-21692 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H 19673-17086 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H 19529-17084 2.0 2026-02-18T14:36:45 <p>Information published.</p> 3.0 2026-08-12T22:19:36 <p>Information published.</p> 1.0 2025-09-03T20:13:03 <p>Information published.</p> drm/amd/display: Check UnboundedRequestEnabled's value <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46778 NULL Pointer Dereference 19683-17084 20613-17084 20725-17084 20788-17084 20823-17084 20860-17084 20925-17086 20956-17084 21094-17084 21248-17084 21626-17084 21684-17084 17087-17086 20412-17084 20553-17084 21093-17086 21308-17084 21332-17084 21344-17084 21443-17084 21474-17084 21580-17084 21093-21692 19683-17084 20613-17084 20725-17084 20788-17084 20823-17084 20860-17084 20925-17086 20956-17084 21094-17084 21248-17084 21626-17084 21684-17084 17087-17086 20412-17084 20553-17084 21093-17086 21308-17084 21332-17084 21344-17084 21443-17084 21474-17084 21580-17084 21093-21692 19683-17084 20613-17084 20725-17084 20788-17084 20823-17084 20860-17084 20925-17086 20956-17084 21094-17084 21248-17084 21626-17084 21684-17084 17087-17086 20412-17084 20553-17084 21093-17086 21308-17084 21332-17084 21344-17084 21443-17084 21474-17084 21580-17084 21093-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19683-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20613-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20725-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20788-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20823-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20860-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20925-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20956-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21094-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21248-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21626-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17087-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20412-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20553-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21093-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21308-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21332-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21344-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21443-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21474-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21580-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21093-21692 2.0 2025-12-07T01:48:10 <p>Information published.</p> 3.0 2026-01-08T14:46:26 <p>Information published.</p> 4.0 2026-01-20T14:46:27 <p>Information published.</p> 5.0 2026-02-18T14:36:04 <p>Information published.</p> 7.0 2026-03-04T14:43:49 <p>Information published.</p> 8.0 2026-03-31T14:38:15 <p>Information published.</p> 9.0 2026-04-29T14:52:35 <p>Information published.</p> 14.0 2026-06-28T01:56:37 <p>Information published.</p> 15.0 2026-07-12T14:59:10 <p>Information published.</p> 17.0 2026-08-10T14:50:11 <p>Information published.</p> 18.0 2026-08-12T22:16:23 <p>Information published.</p> 1.0 2025-09-03T20:08:47 <p>Information published.</p> 6.0 2026-03-03T14:59:31 <p>Information published.</p> 10.0 2026-05-06T14:48:34 <p>Information published.</p> 11.0 2026-05-11T01:47:19 <p>Information published.</p> 12.0 2026-05-17T14:48:07 <p>Information published.</p> 13.0 2026-06-17T14:51:13 <p>Information published.</p> 16.0 2026-08-07T00:49:48 <p>Information published.</p> drm/amd/display: Run DC_LOG_DC after checking link->link_enc <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46776 NULL Pointer Dereference 17087-17086 20925-17086 21093-17086 21093-21692 17087-17086 20925-17086 21093-17086 21093-21692 17087-17086 20925-17086 21093-17086 21093-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17087-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20925-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21093-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21093-21692 4.0 2026-08-12T22:24:24 <p>Information published.</p> 1.0 2025-09-03T20:18:42 <p>Information published.</p> 2.0 2026-03-03T15:00:21 <p>Information published.</p> 3.0 2026-03-31T14:39:28 <p>Information published.</p> drm/amd/display: Add missing NULL pointer check within dpcd_extend_address_range <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46808 NULL Pointer Dereference 19683-17084 20412-17084 20613-17084 20725-17084 20788-17084 20823-17084 20860-17084 20925-17086 21093-17086 21094-17084 21248-17084 21332-17084 21626-17084 17087-17086 20553-17084 20956-17084 21308-17084 21344-17084 21443-17084 21474-17084 21580-17084 21684-17084 21093-21692 19683-17084 20412-17084 20613-17084 20725-17084 20788-17084 20823-17084 20860-17084 20925-17086 21093-17086 21094-17084 21248-17084 21332-17084 21626-17084 17087-17086 20553-17084 20956-17084 21308-17084 21344-17084 21443-17084 21474-17084 21580-17084 21684-17084 21093-21692 19683-17084 Moderate 20412-17084 Moderate 20613-17084 Moderate 20725-17084 Moderate 20788-17084 Moderate 20823-17084 Moderate 20860-17084 Moderate 20925-17086 Moderate 21093-17086 Moderate 21094-17084 Moderate 21248-17084 Moderate 21332-17084 Moderate 21626-17084 Moderate 17087-17086 Moderate 20553-17084 Moderate 20956-17084 Moderate 21308-17084 Moderate 21344-17084 Moderate 21443-17084 Moderate 21474-17084 Moderate 21580-17084 Moderate 21684-17084 Moderate 21093-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19683-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20412-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20613-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20725-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20788-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20823-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20860-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20925-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21093-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21094-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21248-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21332-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21626-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17087-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20553-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20956-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21308-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21344-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21443-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21474-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21580-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21093-21692 1.0 2025-09-03T19:38:54 <p>Information published.</p> 2.0 2025-12-07T01:41:28 <p>Information published.</p> 4.0 2026-01-20T14:40:11 <p>Information published.</p> 6.0 2026-03-03T14:59:14 <p>Information published.</p> 7.0 2026-03-04T14:39:38 <p>Information published.</p> 9.0 2026-04-29T14:44:50 <p>Information published.</p> 11.0 2026-05-11T01:42:02 <p>Information published.</p> 13.0 2026-06-17T14:44:47 <p>Information published.</p> 14.0 2026-06-28T01:47:34 <p>Information published.</p> 16.0 2026-08-07T00:55:32 <p>Information published.</p> 17.0 2026-08-10T14:44:49 <p>Information published.</p> 3.0 2026-01-08T14:40:32 <p>Information published.</p> 5.0 2026-02-21T01:06:23 <p>Information published.</p> 8.0 2026-03-31T15:17:14 <p>Information published.</p> 10.0 2026-05-06T14:42:52 <p>Information published.</p> 12.0 2026-05-17T14:43:02 <p>Information published.</p> 15.0 2026-07-12T14:49:42 <p>Information published.</p> 18.0 2026-08-12T22:59:36 <p>Information published.</p> scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner Linux Yes CVE-2024-46842 Use After Free 17087-17086 20613-17084 20788-17084 20823-17084 20860-17084 20925-17086 21094-17084 21332-17084 21474-17084 21626-17084 21093-21692 19683-17084 20412-17084 20553-17084 20725-17084 20956-17084 21093-17086 21248-17084 21308-17084 21344-17084 21443-17084 21580-17084 21093 21684-17084 17087-17086 20613-17084 20788-17084 20823-17084 20860-17084 20925-17086 21094-17084 21332-17084 21474-17084 21626-17084 21093-21692 19683-17084 20412-17084 20553-17084 20725-17084 20956-17084 21093-17086 21248-17084 21308-17084 21344-17084 21443-17084 21580-17084 21093 21684-17084 Moderate 17087-17086 Moderate 20613-17084 Moderate 20788-17084 Moderate 20823-17084 Moderate 20860-17084 Moderate 20925-17086 Moderate 21094-17084 Moderate 21332-17084 Moderate 21474-17084 Moderate 21626-17084 Moderate 21093-21692 19683-17084 Moderate 20412-17084 Moderate 20553-17084 Moderate 20725-17084 Moderate 20956-17084 Moderate 21093-17086 Moderate 21248-17084 Moderate 21308-17084 Moderate 21344-17084 Moderate 21443-17084 Moderate 21580-17084 Moderate 21093 Moderate 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 17087-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20613-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20788-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20823-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20860-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20925-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21094-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21332-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21474-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21626-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21093-21692 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 19683-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20412-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20553-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20725-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20956-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21093-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21248-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21308-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21344-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21443-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21580-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21093 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 1.0 2025-09-03T21:07:42 <p>Information published.</p> 2.0 2025-12-07T01:41:39 <p>Information published.</p> 3.0 2026-01-08T14:40:42 <p>Information published.</p> 5.0 2026-02-21T02:05:24 <p>Information published.</p> 6.0 2026-03-03T15:02:07 <p>Information published.</p> 7.0 2026-03-04T14:39:45 <p>Information published.</p> 9.0 2026-04-29T14:45:04 <p>Information published.</p> 14.0 2026-06-28T01:47:50 <p>Information published.</p> 15.0 2026-07-12T14:49:57 <p>Information published.</p> 16.0 2026-08-07T00:57:57 <p>Information published.</p> 17.0 2026-08-10T14:44:58 <p>Information published.</p> 4.0 2026-01-20T14:40:22 <p>Information published.</p> 8.0 2026-03-31T14:39:15 <p>Information published.</p> 10.0 2026-05-06T14:43:01 <p>Information published.</p> 11.0 2026-05-11T01:42:11 <p>Information published.</p> 12.0 2026-05-17T14:43:13 <p>Information published.</p> 13.0 2026-06-17T14:44:58 <p>Information published.</p> 18.0 2026-08-12T21:38:07 <p>Information published.</p> net: hns3: void array out of bound when loop tnl_num Mariner Linux Yes CVE-2024-46833 Improper Validation of Array Index 19529-17084 17095 17095-21692 19529-17084 17095 17095-21692 Important 19529-17084 Important 17095 Important 17095-21692 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 19529-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17095 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17095-21692 1.0 2026-08-07T01:00:00 <p>Information published.</p> 2.0 2026-08-12T21:55:02 <p>Information published.</p> Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability <p><strong>According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an authenticated attacker to leverage SQL Server Native Scoring to apply pre-trained models to their data without moving it out of the database.</p> <p><strong>I am running SQL Server on my system. What action do I need to take?</strong></p> <p>Update your relevant version of SQL Server. Any applicable driver fixes are included in those updates.</p> <p><strong>I am running my own application on my system. What action do I need to take?</strong></p> <p>Update your application to use Microsoft OLE DB Driver 18 or 19. Update the drivers to the versions listed on this page, which provide protection against this vulnerability.</p> <p><strong>I am running an application from a software vendor on my system. What action do I need to take?</strong></p> <p>Consult with your application vendor if it is compatible with Microsoft OLE DB Driver 18 or 19. Update the drivers to the versions listed in this page, which provide protection against this vulnerability</p> <p><strong>There are GDR and/or CU (Cumulative Update) updates offered for my version of SQL Server. How do I know which update to use?</strong></p> <ul> <li>First, determine your SQL Server version number. For more information on determining your SQL Server version number, see <a href="https://learn.microsoft.com/en-us/troubleshoot/sql/releases/download-and-install-latest-updates">Microsoft Knowledge Base Article 321185</a> - How to determine the version, edition, and update level of SQL Server and its components.</li> <li>Second, in the table below, locate your version number or the version range that your version number falls within. The corresponding update is the one you need to install.</li> </ul> <p><strong>Note</strong> If your SQL Server version number is not represented in the table below, your SQL Server version is no longer supported. Please upgrade to the latest Service Pack or SQL Server product in order to apply this and future security updates.</p> <table> <thead> <tr> <th>Update Number</th> <th>Title</th> <th>Apply if current product version is…</th> <th>This security update also includes servicing releases up through…</th> </tr> </thead> <tbody> <tr> <td>5042578</td> <td>Security update for SQL Server 2022 CU14+GDR</td> <td>16.0.4003.1 - 16.0.4135.4</td> <td>KB 5038325 - SQL2022 RTM CU14</td> </tr> <tr> <td>5042211</td> <td>Security update for SQL Server 2022 RTM+GDR</td> <td>16.0.1000.6 - 16.0.1121.4</td> <td>KB 5040936 - Previous SQL2022 RTM GDR</td> </tr> <tr> <td>5042749</td> <td>Security update for SQL Server 2019 CU28+GDR</td> <td>15.0.4003.23 - 15.0.4385.2</td> <td>KB 5039747 - SQL2019 RTM CU28</td> </tr> <tr> <td>5042214</td> <td>Security update for SQL Server 2019 RTM+GDR</td> <td>15.0.2000.5 - 15.0.2116.2</td> <td>KB 5040986 - Previous SQL2019 RTM GDR</td> </tr> <tr> <td>5042215</td> <td>Security update for SQL Server 2017 CU31+GDR</td> <td>14.0.3006.16 - 14.0.3471.2</td> <td>KB 5040940 - SQL2017 RTM CU31</td> </tr> <tr> <td>5042217</td> <td>Security update for SQL Server 2017 RTM+GDR</td> <td>14.0.1000.169 - 14.0.2056.2</td> <td>KB 5040942 - Previous SQL2017 RTM GDR</td> </tr> <tr> <td>5042209</td> <td>Security update for SQL 2016 Azure Connect Feature Pack</td> <td>13.0.7000.253 - 13.0.7037.1</td> <td>KB 5040944 - SQL2016 Azure Connect Feature Pack</td> </tr> <tr> <td>5042207</td> <td>Security update for SQL Server 2016 SP3 RTM+GDR</td> <td>13.0.6300.2 - 13.0.6441.1</td> <td>KB 5040946 - Previous SQL2016 RTM GDR</td> </tr> </tbody> </table> <p><strong>What are the GDR and CU update designations and how do they differ?</strong></p> <p>The General Distribution Release (GDR) and Cumulative Update (CU) designations correspond to the two different servicing options in place for SQL Server baseline releases. A baseline can be either an RTM release or a Service Pack release.</p> <ul> <li>GDR updates – cumulatively only contain security updates for the given baseline.</li> <li>CU updates – cumulatively contain all functional fixes and security updates for the given baseline.</li> </ul> <p>For any given baseline, either the GDR or CU updates could be options (see below).</p> <ul> <li>If SQL Server installation is at a baseline version, you can choose either the GDR or CU update.</li> <li>If SQL Server installation has intentionally only installed past GDR updates, then choose to install the GDR update package.</li> <li>If SQL Server installation has intentionally installed previous CU updates, then chose to install the CU security update package.</li> </ul> <p><strong>Note:</strong> You are allowed to make a change from GDR updates to CU updates ONE TIME. Once a SQL Server CU update is applied to a SQL Server installation, there is NO way to go back to the GDR update path.</p> <p><strong>Can the security updates be applied to SQL Server instances on Windows Azure (IaaS)?</strong></p> <p>Yes. SQL Server instances on Windows Azure (IaaS) can be offered the security updates through Microsoft Update, or customers can download the security updates from Microsoft Download Center and apply them manually.</p> SQL Server Microsoft Yes CVE-2024-37338 Out-of-bounds Read 11478 11821 12145 12147 12408 12407 Remote Code Execution 11478 Remote Code Execution 11821 Remote Code Execution 12145 Remote Code Execution 12147 Remote Code Execution 12408 Remote Code Execution 12407 Important 11478 Important 11821 Important 12145 Important 12147 Important 12408 Important 12407 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11478 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11821 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12145 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12147 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12408 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12407 5042217 https://www.microsoft.com/download/details.aspx?familyid=6e5ca6fa-350d-4a60-b071-c0aa3503136e 11478 Maybe Security Update 14.0.2060.1 https://support.microsoft.com/help/5042217 11478 5042217 5042217 https://support.microsoft.com/help/5042217 11478 5042214 https://www.microsoft.com/download/details.aspx?familyid=684d2c34-425f-45b9-b685-c3ba4266a759 11821 Yes Security Update 15.0.2120.1 https://support.microsoft.com/help/5042214 11821 5042214 5042214 https://support.microsoft.com/help/5042214 11821 5042215 https://www.microsoft.com/download/details.aspx?familyid=5c1115eb-d55d-4a6d-9d44-070045a2675f 12145 Maybe Security Update 14.0.3475.1 https://support.microsoft.com/help/5042215 12145 5042215 5042215 https://support.microsoft.com/help/5042215 12145 5042211 https://www.microsoft.com/download/details.aspx?familyid=b6de42f6-dec1-4212-80fd-820f30b5b9ac 12147 Yes Security Update 16.0.1125.1 https://support.microsoft.com/help/5042211 12147 5042211 5042211 https://support.microsoft.com/help/5042211 12147 5042749 https://www.microsoft.com/download/details.aspx?familyid=971b1a77-4e8d-4dff-9b4f-3051fb41f8c6 12408 Yes Security Update 15.0.4390.2 https://support.microsoft.com/help/5042749 12408 5042749 5042749 https://support.microsoft.com/help/5042749 12408 5042578 https://www.microsoft.com/download/details.aspx?familyid=a2449ad4-3be2-407b-9e56-c109d321a5b9 12407 Yes Security Update 16.0.4140.3 https://support.microsoft.com/help/5042578 12407 5042578 5042578 https://support.microsoft.com/help/5042578 12407 <a href="https://twitter.com/arudd1ck">Andrew Ruddick</a> with Microsoft Security Response Center 1.0 2024-09-10T00:00:00 <p>Information published.</p> Microsoft SQL Server Native Scoring Information Disclosure Vulnerability <p><strong>According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an authenticated attacker to leverage SQL Server Native Scoring to apply pre-trained models to their data without moving it out of the database.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> <p><strong>I am running SQL Server on my system. What action do I need to take?</strong></p> <p>Update your relevant version of SQL Server. Any applicable driver fixes are included in those updates.</p> <p><strong>I am running my own application on my system. What action do I need to take?</strong></p> <p>Update your application to use Microsoft OLE DB Driver 18 or 19. Update the drivers to the versions listed on this page, which provide protection against this vulnerability.</p> <p><strong>I am running an application from a software vendor on my system. What action do I need to take?</strong></p> <p>Consult with your application vendor if it is compatible with Microsoft OLE DB Driver 18 or 19. Update the drivers to the versions listed in this page, which provide protection against this vulnerability</p> <p><strong>There are GDR and/or CU (Cumulative Update) updates offered for my version of SQL Server. How do I know which update to use?</strong></p> <ul> <li>First, determine your SQL Server version number. For more information on determining your SQL Server version number, see <a href="https://learn.microsoft.com/en-us/troubleshoot/sql/releases/download-and-install-latest-updates">Microsoft Knowledge Base Article 321185</a> - How to determine the version, edition, and update level of SQL Server and its components.</li> <li>Second, in the table below, locate your version number or the version range that your version number falls within. The corresponding update is the one you need to install.</li> </ul> <p><strong>Note</strong> If your SQL Server version number is not represented in the table below, your SQL Server version is no longer supported. Please upgrade to the latest Service Pack or SQL Server product in order to apply this and future security updates.</p> <table> <thead> <tr> <th>Update Number</th> <th>Title</th> <th>Apply if current product version is…</th> <th>This security update also includes servicing releases up through…</th> </tr> </thead> <tbody> <tr> <td>5042578</td> <td>Security update for SQL Server 2022 CU14+GDR</td> <td>16.0.4003.1 - 16.0.4135.4</td> <td>KB 5038325 - SQL2022 RTM CU14</td> </tr> <tr> <td>5042211</td> <td>Security update for SQL Server 2022 RTM+GDR</td> <td>16.0.1000.6 - 16.0.1121.4</td> <td>KB 5040936 - Previous SQL2022 RTM GDR</td> </tr> <tr> <td>5042749</td> <td>Security update for SQL Server 2019 CU28+GDR</td> <td>15.0.4003.23 - 15.0.4385.2</td> <td>KB 5039747 - SQL2019 RTM CU28</td> </tr> <tr> <td>5042214</td> <td>Security update for SQL Server 2019 RTM+GDR</td> <td>15.0.2000.5 - 15.0.2116.2</td> <td>KB 5040986 - Previous SQL2019 RTM GDR</td> </tr> <tr> <td>5042215</td> <td>Security update for SQL Server 2017 CU31+GDR</td> <td>14.0.3006.16 - 14.0.3471.2</td> <td>KB 5040940 - SQL2017 RTM CU31</td> </tr> <tr> <td>5042217</td> <td>Security update for SQL Server 2017 RTM+GDR</td> <td>14.0.1000.169 - 14.0.2056.2</td> <td>KB 5040942 - Previous SQL2017 RTM GDR</td> </tr> <tr> <td>5042209</td> <td>Security update for SQL 2016 Azure Connect Feature Pack</td> <td>13.0.7000.253 - 13.0.7037.1</td> <td>KB 5040944 - SQL2016 Azure Connect Feature Pack</td> </tr> <tr> <td>5042207</td> <td>Security update for SQL Server 2016 SP3 RTM+GDR</td> <td>13.0.6300.2 - 13.0.6441.1</td> <td>KB 5040946 - Previous SQL2016 RTM GDR</td> </tr> </tbody> </table> <p><strong>What are the GDR and CU update designations and how do they differ?</strong></p> <p>The General Distribution Release (GDR) and Cumulative Update (CU) designations correspond to the two different servicing options in place for SQL Server baseline releases. A baseline can be either an RTM release or a Service Pack release.</p> <ul> <li>GDR updates – cumulatively only contain security updates for the given baseline.</li> <li>CU updates – cumulatively contain all functional fixes and security updates for the given baseline.</li> </ul> <p>For any given baseline, either the GDR or CU updates could be options (see below).</p> <ul> <li>If SQL Server installation is at a baseline version, you can choose either the GDR or CU update.</li> <li>If SQL Server installation has intentionally only installed past GDR updates, then choose to install the GDR update package.</li> <li>If SQL Server installation has intentionally installed previous CU updates, then chose to install the CU security update package.</li> </ul> <p><strong>Note:</strong> You are allowed to make a change from GDR updates to CU updates ONE TIME. Once a SQL Server CU update is applied to a SQL Server installation, there is NO way to go back to the GDR update path.</p> <p><strong>Can the security updates be applied to SQL Server instances on Windows Azure (IaaS)?</strong></p> <p>Yes. SQL Server instances on Windows Azure (IaaS) can be offered the security updates through Microsoft Update, or customers can download the security updates from Microsoft Download Center and apply them manually.</p> SQL Server Microsoft Yes CVE-2024-37966 Out-of-bounds Read 11478 11821 12145 12147 12407 12408 Information Disclosure 11478 Information Disclosure 11821 Information Disclosure 12145 Information Disclosure 12147 Information Disclosure 12407 Information Disclosure 12408 Important 11478 Important 11821 Important 12145 Important 12147 Important 12407 Important 12408 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.1 6.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C 11478 7.1 6.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C 11821 7.1 6.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C 12145 7.1 6.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C 12147 7.1 6.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C 12407 7.1 6.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C 12408 5042217 https://www.microsoft.com/download/details.aspx?familyid=6e5ca6fa-350d-4a60-b071-c0aa3503136e 11478 Maybe Security Update 14.0.2060.1 https://support.microsoft.com/help/5042217 11478 5042217 5042217 https://support.microsoft.com/help/5042217 11478 5042214 https://www.microsoft.com/download/details.aspx?familyid=684d2c34-425f-45b9-b685-c3ba4266a759 11821 Yes Security Update 15.0.2120.1 https://support.microsoft.com/help/5042214 11821 5042214 5042214 https://support.microsoft.com/help/5042214 11821 5042215 https://www.microsoft.com/download/details.aspx?familyid=5c1115eb-d55d-4a6d-9d44-070045a2675f 12145 Maybe Security Update 14.0.3475.1 https://support.microsoft.com/help/5042215 12145 5042215 5042215 https://support.microsoft.com/help/5042215 12145 5042211 https://www.microsoft.com/download/details.aspx?familyid=b6de42f6-dec1-4212-80fd-820f30b5b9ac 12147 Yes Security Update 16.0.1125.1 https://support.microsoft.com/help/5042211 12147 5042211 5042211 https://support.microsoft.com/help/5042211 12147 5042578 https://www.microsoft.com/download/details.aspx?familyid=a2449ad4-3be2-407b-9e56-c109d321a5b9 12407 Yes Security Update 16.0.4140.3 https://support.microsoft.com/help/5042578 12407 5042578 5042578 https://support.microsoft.com/help/5042578 12407 5042749 https://www.microsoft.com/download/details.aspx?familyid=971b1a77-4e8d-4dff-9b4f-3051fb41f8c6 12408 Yes Security Update 15.0.4390.2 https://support.microsoft.com/help/5042749 12408 5042749 5042749 https://support.microsoft.com/help/5042749 12408 <a href="https://twitter.com/arudd1ck">Andrew Ruddick</a> with Microsoft Security Response Center 1.0 2024-09-10T00:00:00 <p>Information published.</p> Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability <p><strong>According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an authenticated attacker to leverage SQL Server Native Scoring to apply pre-trained models to their data without moving it out of the database.</p> <p><strong>I am running SQL Server on my system. What action do I need to take?</strong></p> <p>Update your relevant version of SQL Server. Any applicable driver fixes are included in those updates.</p> <p><strong>I am running my own application on my system. What action do I need to take?</strong></p> <p>Update your application to use Microsoft OLE DB Driver 18 or 19. Update the drivers to the versions listed on this page, which provide protection against this vulnerability.</p> <p><strong>I am running an application from a software vendor on my system. What action do I need to take?</strong></p> <p>Consult with your application vendor if it is compatible with Microsoft OLE DB Driver 18 or 19. Update the drivers to the versions listed in this page, which provide protection against this vulnerability</p> <p><strong>There are GDR and/or CU (Cumulative Update) updates offered for my version of SQL Server. How do I know which update to use?</strong></p> <ul> <li>First, determine your SQL Server version number. For more information on determining your SQL Server version number, see <a href="https://learn.microsoft.com/en-us/troubleshoot/sql/releases/download-and-install-latest-updates">Microsoft Knowledge Base Article 321185</a> - How to determine the version, edition, and update level of SQL Server and its components.</li> <li>Second, in the table below, locate your version number or the version range that your version number falls within. The corresponding update is the one you need to install.</li> </ul> <p><strong>Note</strong> If your SQL Server version number is not represented in the table below, your SQL Server version is no longer supported. Please upgrade to the latest Service Pack or SQL Server product in order to apply this and future security updates.</p> <table> <thead> <tr> <th>Update Number</th> <th>Title</th> <th>Apply if current product version is…</th> <th>This security update also includes servicing releases up through…</th> </tr> </thead> <tbody> <tr> <td>5042578</td> <td>Security update for SQL Server 2022 CU14+GDR</td> <td>16.0.4003.1 - 16.0.4135.4</td> <td>KB 5038325 - SQL2022 RTM CU14</td> </tr> <tr> <td>5042211</td> <td>Security update for SQL Server 2022 RTM+GDR</td> <td>16.0.1000.6 - 16.0.1121.4</td> <td>KB 5040936 - Previous SQL2022 RTM GDR</td> </tr> <tr> <td>5042749</td> <td>Security update for SQL Server 2019 CU28+GDR</td> <td>15.0.4003.23 - 15.0.4385.2</td> <td>KB 5039747 - SQL2019 RTM CU28</td> </tr> <tr> <td>5042214</td> <td>Security update for SQL Server 2019 RTM+GDR</td> <td>15.0.2000.5 - 15.0.2116.2</td> <td>KB 5040986 - Previous SQL2019 RTM GDR</td> </tr> <tr> <td>5042215</td> <td>Security update for SQL Server 2017 CU31+GDR</td> <td>14.0.3006.16 - 14.0.3471.2</td> <td>KB 5040940 - SQL2017 RTM CU31</td> </tr> <tr> <td>5042217</td> <td>Security update for SQL Server 2017 RTM+GDR</td> <td>14.0.1000.169 - 14.0.2056.2</td> <td>KB 5040942 - Previous SQL2017 RTM GDR</td> </tr> <tr> <td>5042209</td> <td>Security update for SQL 2016 Azure Connect Feature Pack</td> <td>13.0.7000.253 - 13.0.7037.1</td> <td>KB 5040944 - SQL2016 Azure Connect Feature Pack</td> </tr> <tr> <td>5042207</td> <td>Security update for SQL Server 2016 SP3 RTM+GDR</td> <td>13.0.6300.2 - 13.0.6441.1</td> <td>KB 5040946 - Previous SQL2016 RTM GDR</td> </tr> </tbody> </table> <p><strong>What are the GDR and CU update designations and how do they differ?</strong></p> <p>The General Distribution Release (GDR) and Cumulative Update (CU) designations correspond to the two different servicing options in place for SQL Server baseline releases. A baseline can be either an RTM release or a Service Pack release.</p> <ul> <li>GDR updates – cumulatively only contain security updates for the given baseline.</li> <li>CU updates – cumulatively contain all functional fixes and security updates for the given baseline.</li> </ul> <p>For any given baseline, either the GDR or CU updates could be options (see below).</p> <ul> <li>If SQL Server installation is at a baseline version, you can choose either the GDR or CU update.</li> <li>If SQL Server installation has intentionally only installed past GDR updates, then choose to install the GDR update package.</li> <li>If SQL Server installation has intentionally installed previous CU updates, then chose to install the CU security update package.</li> </ul> <p><strong>Note:</strong> You are allowed to make a change from GDR updates to CU updates ONE TIME. Once a SQL Server CU update is applied to a SQL Server installation, there is NO way to go back to the GDR update path.</p> <p><strong>Can the security updates be applied to SQL Server instances on Windows Azure (IaaS)?</strong></p> <p>Yes. SQL Server instances on Windows Azure (IaaS) can be offered the security updates through Microsoft Update, or customers can download the security updates from Microsoft Download Center and apply them manually.</p> SQL Server Microsoft Yes CVE-2024-37335 Heap-based Buffer Overflow 11478 11821 12145 12147 12408 12407 Remote Code Execution 11478 Remote Code Execution 11821 Remote Code Execution 12145 Remote Code Execution 12147 Remote Code Execution 12408 Remote Code Execution 12407 Important 11478 Important 11821 Important 12145 Important 12147 Important 12408 Important 12407 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11478 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11821 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12145 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12147 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12408 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12407 5042217 https://www.microsoft.com/download/details.aspx?familyid=6e5ca6fa-350d-4a60-b071-c0aa3503136e 11478 Maybe Security Update 14.0.2060.1 https://support.microsoft.com/help/5042217 11478 5042217 5042217 https://support.microsoft.com/help/5042217 11478 5042214 https://www.microsoft.com/download/details.aspx?familyid=684d2c34-425f-45b9-b685-c3ba4266a759 11821 Yes Security Update 15.0.2120.1 https://support.microsoft.com/help/5042214 11821 5042214 5042214 https://support.microsoft.com/help/5042214 11821 5042215 https://www.microsoft.com/download/details.aspx?familyid=5c1115eb-d55d-4a6d-9d44-070045a2675f 12145 Maybe Security Update 14.0.3475.1 https://support.microsoft.com/help/5042215 12145 5042215 5042215 https://support.microsoft.com/help/5042215 12145 5042211 https://www.microsoft.com/download/details.aspx?familyid=b6de42f6-dec1-4212-80fd-820f30b5b9ac 12147 Yes Security Update 16.0.1125.1 https://support.microsoft.com/help/5042211 12147 5042211 5042211 https://support.microsoft.com/help/5042211 12147 5042749 https://www.microsoft.com/download/details.aspx?familyid=971b1a77-4e8d-4dff-9b4f-3051fb41f8c6 12408 Yes Security Update 15.0.4390.2 https://support.microsoft.com/help/5042749 12408 5042749 5042749 https://support.microsoft.com/help/5042749 12408 5042578 https://www.microsoft.com/download/details.aspx?familyid=a2449ad4-3be2-407b-9e56-c109d321a5b9 12407 Yes Security Update 16.0.4140.3 https://support.microsoft.com/help/5042578 12407 5042578 5042578 https://support.microsoft.com/help/5042578 12407 <a href="https://twitter.com/arudd1ck">Andrew Ruddick</a> with Microsoft Security Response Center 1.0 2024-09-10T00:00:00 <p>Information published.</p> Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability <p><strong>According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an authenticated attacker to leverage SQL Server Native Scoring to apply pre-trained models to their data without moving it out of the database.</p> <p><strong>I am running SQL Server on my system. What action do I need to take?</strong></p> <p>Update your relevant version of SQL Server. Any applicable driver fixes are included in those updates.</p> <p><strong>I am running my own application on my system. What action do I need to take?</strong></p> <p>Update your application to use Microsoft OLE DB Driver 18 or 19. Update the drivers to the versions listed on this page, which provide protection against this vulnerability.</p> <p><strong>I am running an application from a software vendor on my system. What action do I need to take?</strong></p> <p>Consult with your application vendor if it is compatible with Microsoft OLE DB Driver 18 or 19. Update the drivers to the versions listed in this page, which provide protection against this vulnerability</p> <p><strong>There are GDR and/or CU (Cumulative Update) updates offered for my version of SQL Server. How do I know which update to use?</strong></p> <ul> <li>First, determine your SQL Server version number. For more information on determining your SQL Server version number, see <a href="https://learn.microsoft.com/en-us/troubleshoot/sql/releases/download-and-install-latest-updates">Microsoft Knowledge Base Article 321185</a> - How to determine the version, edition, and update level of SQL Server and its components.</li> <li>Second, in the table below, locate your version number or the version range that your version number falls within. The corresponding update is the one you need to install.</li> </ul> <p><strong>Note</strong> If your SQL Server version number is not represented in the table below, your SQL Server version is no longer supported. Please upgrade to the latest Service Pack or SQL Server product in order to apply this and future security updates.</p> <table> <thead> <tr> <th>Update Number</th> <th>Title</th> <th>Apply if current product version is…</th> <th>This security update also includes servicing releases up through…</th> </tr> </thead> <tbody> <tr> <td>5042578</td> <td>Security update for SQL Server 2022 CU14+GDR</td> <td>16.0.4003.1 - 16.0.4135.4</td> <td>KB 5038325 - SQL2022 RTM CU14</td> </tr> <tr> <td>5042211</td> <td>Security update for SQL Server 2022 RTM+GDR</td> <td>16.0.1000.6 - 16.0.1121.4</td> <td>KB 5040936 - Previous SQL2022 RTM GDR</td> </tr> <tr> <td>5042749</td> <td>Security update for SQL Server 2019 CU28+GDR</td> <td>15.0.4003.23 - 15.0.4385.2</td> <td>KB 5039747 - SQL2019 RTM CU28</td> </tr> <tr> <td>5042214</td> <td>Security update for SQL Server 2019 RTM+GDR</td> <td>15.0.2000.5 - 15.0.2116.2</td> <td>KB 5040986 - Previous SQL2019 RTM GDR</td> </tr> <tr> <td>5042215</td> <td>Security update for SQL Server 2017 CU31+GDR</td> <td>14.0.3006.16 - 14.0.3471.2</td> <td>KB 5040940 - SQL2017 RTM CU31</td> </tr> <tr> <td>5042217</td> <td>Security update for SQL Server 2017 RTM+GDR</td> <td>14.0.1000.169 - 14.0.2056.2</td> <td>KB 5040942 - Previous SQL2017 RTM GDR</td> </tr> <tr> <td>5042209</td> <td>Security update for SQL 2016 Azure Connect Feature Pack</td> <td>13.0.7000.253 - 13.0.7037.1</td> <td>KB 5040944 - SQL2016 Azure Connect Feature Pack</td> </tr> <tr> <td>5042207</td> <td>Security update for SQL Server 2016 SP3 RTM+GDR</td> <td>13.0.6300.2 - 13.0.6441.1</td> <td>KB 5040946 - Previous SQL2016 RTM GDR</td> </tr> </tbody> </table> <p><strong>What are the GDR and CU update designations and how do they differ?</strong></p> <p>The General Distribution Release (GDR) and Cumulative Update (CU) designations correspond to the two different servicing options in place for SQL Server baseline releases. A baseline can be either an RTM release or a Service Pack release.</p> <ul> <li>GDR updates – cumulatively only contain security updates for the given baseline.</li> <li>CU updates – cumulatively contain all functional fixes and security updates for the given baseline.</li> </ul> <p>For any given baseline, either the GDR or CU updates could be options (see below).</p> <ul> <li>If SQL Server installation is at a baseline version, you can choose either the GDR or CU update.</li> <li>If SQL Server installation has intentionally only installed past GDR updates, then choose to install the GDR update package.</li> <li>If SQL Server installation has intentionally installed previous CU updates, then chose to install the CU security update package.</li> </ul> <p><strong>Note:</strong> You are allowed to make a change from GDR updates to CU updates ONE TIME. Once a SQL Server CU update is applied to a SQL Server installation, there is NO way to go back to the GDR update path.</p> <p><strong>Can the security updates be applied to SQL Server instances on Windows Azure (IaaS)?</strong></p> <p>Yes. SQL Server instances on Windows Azure (IaaS) can be offered the security updates through Microsoft Update, or customers can download the security updates from Microsoft Download Center and apply them manually.</p> SQL Server Microsoft Yes CVE-2024-37340 Untrusted Pointer Dereference 11478 11821 12145 12147 12407 12408 Remote Code Execution 11478 Remote Code Execution 11821 Remote Code Execution 12145 Remote Code Execution 12147 Remote Code Execution 12407 Remote Code Execution 12408 Important 11478 Important 11821 Important 12145 Important 12147 Important 12407 Important 12408 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11478 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11821 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12145 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12147 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12407 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12408 5042217 https://www.microsoft.com/download/details.aspx?familyid=6e5ca6fa-350d-4a60-b071-c0aa3503136e 11478 Maybe Security Update 14.0.2060.1 https://support.microsoft.com/help/5042217 11478 5042217 5042217 https://support.microsoft.com/help/5042217 11478 5042214 https://www.microsoft.com/download/details.aspx?familyid=684d2c34-425f-45b9-b685-c3ba4266a759 11821 Yes Security Update 15.0.2120.1 https://support.microsoft.com/help/5042214 11821 5042214 5042214 https://support.microsoft.com/help/5042214 11821 5042215 https://www.microsoft.com/download/details.aspx?familyid=5c1115eb-d55d-4a6d-9d44-070045a2675f 12145 Maybe Security Update 14.0.3475.1 https://support.microsoft.com/help/5042215 12145 5042215 5042215 https://support.microsoft.com/help/5042215 12145 5042211 https://www.microsoft.com/download/details.aspx?familyid=b6de42f6-dec1-4212-80fd-820f30b5b9ac 12147 Yes Security Update 16.0.1125.1 https://support.microsoft.com/help/5042211 12147 5042211 5042211 https://support.microsoft.com/help/5042211 12147 5042578 https://www.microsoft.com/download/details.aspx?familyid=a2449ad4-3be2-407b-9e56-c109d321a5b9 12407 Yes Security Update 16.0.4140.3 https://support.microsoft.com/help/5042578 12407 5042578 5042578 https://support.microsoft.com/help/5042578 12407 5042749 https://www.microsoft.com/download/details.aspx?familyid=971b1a77-4e8d-4dff-9b4f-3051fb41f8c6 12408 Yes Security Update 15.0.4390.2 https://support.microsoft.com/help/5042749 12408 5042749 5042749 https://support.microsoft.com/help/5042749 12408 <a href="https://twitter.com/arudd1ck">Andrew Ruddick</a> with Microsoft Security Response Center 1.0 2024-09-10T00:00:00 <p>Information published.</p> Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability <p><strong>According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an authenticated attacker to leverage SQL Server Native Scoring to apply pre-trained models to their data without moving it out of the database.</p> <p><strong>I am running SQL Server on my system. What action do I need to take?</strong></p> <p>Update your relevant version of SQL Server. Any applicable driver fixes are included in those updates.</p> <p><strong>I am running my own application on my system. What action do I need to take?</strong></p> <p>Update your application to use Microsoft OLE DB Driver 18 or 19. Update the drivers to the versions listed on this page, which provide protection against this vulnerability.</p> <p><strong>I am running an application from a software vendor on my system. What action do I need to take?</strong></p> <p>Consult with your application vendor if it is compatible with Microsoft OLE DB Driver 18 or 19. Update the drivers to the versions listed in this page, which provide protection against this vulnerability</p> <p><strong>There are GDR and/or CU (Cumulative Update) updates offered for my version of SQL Server. How do I know which update to use?</strong></p> <ul> <li>First, determine your SQL Server version number. For more information on determining your SQL Server version number, see <a href="https://learn.microsoft.com/en-us/troubleshoot/sql/releases/download-and-install-latest-updates">Microsoft Knowledge Base Article 321185</a> - How to determine the version, edition, and update level of SQL Server and its components.</li> <li>Second, in the table below, locate your version number or the version range that your version number falls within. The corresponding update is the one you need to install.</li> </ul> <p><strong>Note</strong> If your SQL Server version number is not represented in the table below, your SQL Server version is no longer supported. Please upgrade to the latest Service Pack or SQL Server product in order to apply this and future security updates.</p> <table> <thead> <tr> <th>Update Number</th> <th>Title</th> <th>Apply if current product version is…</th> <th>This security update also includes servicing releases up through…</th> </tr> </thead> <tbody> <tr> <td>5042578</td> <td>Security update for SQL Server 2022 CU14+GDR</td> <td>16.0.4003.1 - 16.0.4135.4</td> <td>KB 5038325 - SQL2022 RTM CU14</td> </tr> <tr> <td>5042211</td> <td>Security update for SQL Server 2022 RTM+GDR</td> <td>16.0.1000.6 - 16.0.1121.4</td> <td>KB 5040936 - Previous SQL2022 RTM GDR</td> </tr> <tr> <td>5042749</td> <td>Security update for SQL Server 2019 CU28+GDR</td> <td>15.0.4003.23 - 15.0.4385.2</td> <td>KB 5039747 - SQL2019 RTM CU28</td> </tr> <tr> <td>5042214</td> <td>Security update for SQL Server 2019 RTM+GDR</td> <td>15.0.2000.5 - 15.0.2116.2</td> <td>KB 5040986 - Previous SQL2019 RTM GDR</td> </tr> <tr> <td>5042215</td> <td>Security update for SQL Server 2017 CU31+GDR</td> <td>14.0.3006.16 - 14.0.3471.2</td> <td>KB 5040940 - SQL2017 RTM CU31</td> </tr> <tr> <td>5042217</td> <td>Security update for SQL Server 2017 RTM+GDR</td> <td>14.0.1000.169 - 14.0.2056.2</td> <td>KB 5040942 - Previous SQL2017 RTM GDR</td> </tr> <tr> <td>5042209</td> <td>Security update for SQL 2016 Azure Connect Feature Pack</td> <td>13.0.7000.253 - 13.0.7037.1</td> <td>KB 5040944 - SQL2016 Azure Connect Feature Pack</td> </tr> <tr> <td>5042207</td> <td>Security update for SQL Server 2016 SP3 RTM+GDR</td> <td>13.0.6300.2 - 13.0.6441.1</td> <td>KB 5040946 - Previous SQL2016 RTM GDR</td> </tr> </tbody> </table> <p><strong>What are the GDR and CU update designations and how do they differ?</strong></p> <p>The General Distribution Release (GDR) and Cumulative Update (CU) designations correspond to the two different servicing options in place for SQL Server baseline releases. A baseline can be either an RTM release or a Service Pack release.</p> <ul> <li>GDR updates – cumulatively only contain security updates for the given baseline.</li> <li>CU updates – cumulatively contain all functional fixes and security updates for the given baseline.</li> </ul> <p>For any given baseline, either the GDR or CU updates could be options (see below).</p> <ul> <li>If SQL Server installation is at a baseline version, you can choose either the GDR or CU update.</li> <li>If SQL Server installation has intentionally only installed past GDR updates, then choose to install the GDR update package.</li> <li>If SQL Server installation has intentionally installed previous CU updates, then chose to install the CU security update package.</li> </ul> <p><strong>Note:</strong> You are allowed to make a change from GDR updates to CU updates ONE TIME. Once a SQL Server CU update is applied to a SQL Server installation, there is NO way to go back to the GDR update path.</p> <p><strong>Can the security updates be applied to SQL Server instances on Windows Azure (IaaS)?</strong></p> <p>Yes. SQL Server instances on Windows Azure (IaaS) can be offered the security updates through Microsoft Update, or customers can download the security updates from Microsoft Download Center and apply them manually.</p> SQL Server Microsoft Yes CVE-2024-37339 Untrusted Pointer Dereference 11478 11821 12145 12147 12407 12408 Remote Code Execution 11478 Remote Code Execution 11821 Remote Code Execution 12145 Remote Code Execution 12147 Remote Code Execution 12407 Remote Code Execution 12408 Important 11478 Important 11821 Important 12145 Important 12147 Important 12407 Important 12408 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11478 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11821 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12145 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12147 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12407 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12408 5042217 https://www.microsoft.com/download/details.aspx?familyid=6e5ca6fa-350d-4a60-b071-c0aa3503136e 11478 Maybe Security Update 14.0.2060.1 https://support.microsoft.com/help/5042217 11478 5042217 5042217 https://support.microsoft.com/help/5042217 11478 5042214 https://www.microsoft.com/download/details.aspx?familyid=684d2c34-425f-45b9-b685-c3ba4266a759 11821 Yes Security Update 15.0.2120.1 https://support.microsoft.com/help/5042214 11821 5042214 5042214 https://support.microsoft.com/help/5042214 11821 5042215 https://www.microsoft.com/download/details.aspx?familyid=5c1115eb-d55d-4a6d-9d44-070045a2675f 12145 Maybe Security Update 14.0.3475.1 https://support.microsoft.com/help/5042215 12145 5042215 5042215 https://support.microsoft.com/help/5042215 12145 5042211 https://www.microsoft.com/download/details.aspx?familyid=b6de42f6-dec1-4212-80fd-820f30b5b9ac 12147 Yes Security Update 16.0.1125.1 https://support.microsoft.com/help/5042211 12147 5042211 5042211 https://support.microsoft.com/help/5042211 12147 5042578 https://www.microsoft.com/download/details.aspx?familyid=a2449ad4-3be2-407b-9e56-c109d321a5b9 12407 Yes Security Update 16.0.4140.3 https://support.microsoft.com/help/5042578 12407 5042578 5042578 https://support.microsoft.com/help/5042578 12407 5042749 https://www.microsoft.com/download/details.aspx?familyid=971b1a77-4e8d-4dff-9b4f-3051fb41f8c6 12408 Yes Security Update 15.0.4390.2 https://support.microsoft.com/help/5042749 12408 5042749 5042749 https://support.microsoft.com/help/5042749 12408 <a href="https://twitter.com/arudd1ck">Andrew Ruddick</a> with Microsoft Security Response Center 1.0 2024-09-10T00:00:00 <p>Information published.</p> Microsoft SQL Server Native Scoring Information Disclosure Vulnerability <p><strong>According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an authenticated attacker to leverage SQL Server Native Scoring to apply pre-trained models to their data without moving it out of the database.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> <p><strong>I am running SQL Server on my system. What action do I need to take?</strong></p> <p>Update your relevant version of SQL Server. Any applicable driver fixes are included in those updates.</p> <p><strong>I am running my own application on my system. What action do I need to take?</strong></p> <p>Update your application to use Microsoft OLE DB Driver 18 or 19. Update the drivers to the versions listed on this page, which provide protection against this vulnerability.</p> <p><strong>I am running an application from a software vendor on my system. What action do I need to take?</strong></p> <p>Consult with your application vendor if it is compatible with Microsoft OLE DB Driver 18 or 19. Update the drivers to the versions listed in this page, which provide protection against this vulnerability</p> <p><strong>There are GDR and/or CU (Cumulative Update) updates offered for my version of SQL Server. How do I know which update to use?</strong></p> <ul> <li>First, determine your SQL Server version number. For more information on determining your SQL Server version number, see <a href="https://learn.microsoft.com/en-us/troubleshoot/sql/releases/download-and-install-latest-updates">Microsoft Knowledge Base Article 321185</a> - How to determine the version, edition, and update level of SQL Server and its components.</li> <li>Second, in the table below, locate your version number or the version range that your version number falls within. The corresponding update is the one you need to install.</li> </ul> <p><strong>Note</strong> If your SQL Server version number is not represented in the table below, your SQL Server version is no longer supported. Please upgrade to the latest Service Pack or SQL Server product in order to apply this and future security updates.</p> <table> <thead> <tr> <th>Update Number</th> <th>Title</th> <th>Apply if current product version is…</th> <th>This security update also includes servicing releases up through…</th> </tr> </thead> <tbody> <tr> <td>5042578</td> <td>Security update for SQL Server 2022 CU14+GDR</td> <td>16.0.4003.1 - 16.0.4135.4</td> <td>KB 5038325 - SQL2022 RTM CU14</td> </tr> <tr> <td>5042211</td> <td>Security update for SQL Server 2022 RTM+GDR</td> <td>16.0.1000.6 - 16.0.1121.4</td> <td>KB 5040936 - Previous SQL2022 RTM GDR</td> </tr> <tr> <td>5042749</td> <td>Security update for SQL Server 2019 CU28+GDR</td> <td>15.0.4003.23 - 15.0.4385.2</td> <td>KB 5039747 - SQL2019 RTM CU28</td> </tr> <tr> <td>5042214</td> <td>Security update for SQL Server 2019 RTM+GDR</td> <td>15.0.2000.5 - 15.0.2116.2</td> <td>KB 5040986 - Previous SQL2019 RTM GDR</td> </tr> <tr> <td>5042215</td> <td>Security update for SQL Server 2017 CU31+GDR</td> <td>14.0.3006.16 - 14.0.3471.2</td> <td>KB 5040940 - SQL2017 RTM CU31</td> </tr> <tr> <td>5042217</td> <td>Security update for SQL Server 2017 RTM+GDR</td> <td>14.0.1000.169 - 14.0.2056.2</td> <td>KB 5040942 - Previous SQL2017 RTM GDR</td> </tr> <tr> <td>5042209</td> <td>Security update for SQL 2016 Azure Connect Feature Pack</td> <td>13.0.7000.253 - 13.0.7037.1</td> <td>KB 5040944 - SQL2016 Azure Connect Feature Pack</td> </tr> <tr> <td>5042207</td> <td>Security update for SQL Server 2016 SP3 RTM+GDR</td> <td>13.0.6300.2 - 13.0.6441.1</td> <td>KB 5040946 - Previous SQL2016 RTM GDR</td> </tr> </tbody> </table> <p><strong>What are the GDR and CU update designations and how do they differ?</strong></p> <p>The General Distribution Release (GDR) and Cumulative Update (CU) designations correspond to the two different servicing options in place for SQL Server baseline releases. A baseline can be either an RTM release or a Service Pack release.</p> <ul> <li>GDR updates – cumulatively only contain security updates for the given baseline.</li> <li>CU updates – cumulatively contain all functional fixes and security updates for the given baseline.</li> </ul> <p>For any given baseline, either the GDR or CU updates could be options (see below).</p> <ul> <li>If SQL Server installation is at a baseline version, you can choose either the GDR or CU update.</li> <li>If SQL Server installation has intentionally only installed past GDR updates, then choose to install the GDR update package.</li> <li>If SQL Server installation has intentionally installed previous CU updates, then chose to install the CU security update package.</li> </ul> <p><strong>Note:</strong> You are allowed to make a change from GDR updates to CU updates ONE TIME. Once a SQL Server CU update is applied to a SQL Server installation, there is NO way to go back to the GDR update path.</p> <p><strong>Can the security updates be applied to SQL Server instances on Windows Azure (IaaS)?</strong></p> <p>Yes. SQL Server instances on Windows Azure (IaaS) can be offered the security updates through Microsoft Update, or customers can download the security updates from Microsoft Download Center and apply them manually.</p> SQL Server Microsoft Yes CVE-2024-37337 Numeric Truncation Error 11478 11821 12145 12147 12407 12408 Information Disclosure 11478 Information Disclosure 11821 Information Disclosure 12145 Information Disclosure 12147 Information Disclosure 12407 Information Disclosure 12408 Important 11478 Important 11821 Important 12145 Important 12147 Important 12407 Important 12408 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.1 6.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C 11478 7.1 6.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C 11821 7.1 6.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C 12145 7.1 6.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C 12147 7.1 6.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C 12407 7.1 6.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C 12408 5042217 https://www.microsoft.com/download/details.aspx?familyid=6e5ca6fa-350d-4a60-b071-c0aa3503136e 11478 Maybe Security Update 14.0.2060.1 https://support.microsoft.com/help/5042217 11478 5042217 5042217 https://support.microsoft.com/help/5042217 11478 5042214 https://www.microsoft.com/download/details.aspx?familyid=684d2c34-425f-45b9-b685-c3ba4266a759 11821 Yes Security Update 15.0.2120.1 https://support.microsoft.com/help/5042214 11821 5042214 5042214 https://support.microsoft.com/help/5042214 11821 5042215 https://www.microsoft.com/download/details.aspx?familyid=5c1115eb-d55d-4a6d-9d44-070045a2675f 12145 Maybe Security Update 14.0.3475.1 https://support.microsoft.com/help/5042215 12145 5042215 5042215 https://support.microsoft.com/help/5042215 12145 5042211 https://www.microsoft.com/download/details.aspx?familyid=b6de42f6-dec1-4212-80fd-820f30b5b9ac 12147 Yes Security Update 16.0.1125.1 https://support.microsoft.com/help/5042211 12147 5042211 5042211 https://support.microsoft.com/help/5042211 12147 5042578 https://www.microsoft.com/download/details.aspx?familyid=a2449ad4-3be2-407b-9e56-c109d321a5b9 12407 Yes Security Update 16.0.4140.3 https://support.microsoft.com/help/5042578 12407 5042578 5042578 https://support.microsoft.com/help/5042578 12407 5042749 https://www.microsoft.com/download/details.aspx?familyid=971b1a77-4e8d-4dff-9b4f-3051fb41f8c6 12408 Yes Security Update 15.0.4390.2 https://support.microsoft.com/help/5042749 12408 5042749 5042749 https://support.microsoft.com/help/5042749 12408 <a href="https://twitter.com/arudd1ck">Andrew Ruddick</a> with Microsoft Security Response Center 1.0 2024-09-10T00:00:00 <p>Information published.</p> Microsoft SQL Server Native Scoring Information Disclosure Vulnerability <p><strong>According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an authenticated attacker to leverage SQL Server Native Scoring to apply pre-trained models to their data without moving it out of the database.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> <p><strong>I am running SQL Server on my system. What action do I need to take?</strong></p> <p>Update your relevant version of SQL Server. Any applicable driver fixes are included in those updates.</p> <p><strong>I am running my own application on my system. What action do I need to take?</strong></p> <p>Update your application to use Microsoft OLE DB Driver 18 or 19. Update the drivers to the versions listed on this page, which provide protection against this vulnerability.</p> <p><strong>I am running an application from a software vendor on my system. What action do I need to take?</strong></p> <p>Consult with your application vendor if it is compatible with Microsoft OLE DB Driver 18 or 19. Update the drivers to the versions listed in this page, which provide protection against this vulnerability</p> <p><strong>There are GDR and/or CU (Cumulative Update) updates offered for my version of SQL Server. How do I know which update to use?</strong></p> <ul> <li>First, determine your SQL Server version number. For more information on determining your SQL Server version number, see <a href="https://learn.microsoft.com/en-us/troubleshoot/sql/releases/download-and-install-latest-updates">Microsoft Knowledge Base Article 321185</a> - How to determine the version, edition, and update level of SQL Server and its components.</li> <li>Second, in the table below, locate your version number or the version range that your version number falls within. The corresponding update is the one you need to install.</li> </ul> <p><strong>Note</strong> If your SQL Server version number is not represented in the table below, your SQL Server version is no longer supported. Please upgrade to the latest Service Pack or SQL Server product in order to apply this and future security updates.</p> <table> <thead> <tr> <th>Update Number</th> <th>Title</th> <th>Apply if current product version is…</th> <th>This security update also includes servicing releases up through…</th> </tr> </thead> <tbody> <tr> <td>5042578</td> <td>Security update for SQL Server 2022 CU14+GDR</td> <td>16.0.4003.1 - 16.0.4135.4</td> <td>KB 5038325 - SQL2022 RTM CU14</td> </tr> <tr> <td>5042211</td> <td>Security update for SQL Server 2022 RTM+GDR</td> <td>16.0.1000.6 - 16.0.1121.4</td> <td>KB 5040936 - Previous SQL2022 RTM GDR</td> </tr> <tr> <td>5042749</td> <td>Security update for SQL Server 2019 CU28+GDR</td> <td>15.0.4003.23 - 15.0.4385.2</td> <td>KB 5039747 - SQL2019 RTM CU28</td> </tr> <tr> <td>5042214</td> <td>Security update for SQL Server 2019 RTM+GDR</td> <td>15.0.2000.5 - 15.0.2116.2</td> <td>KB 5040986 - Previous SQL2019 RTM GDR</td> </tr> <tr> <td>5042215</td> <td>Security update for SQL Server 2017 CU31+GDR</td> <td>14.0.3006.16 - 14.0.3471.2</td> <td>KB 5040940 - SQL2017 RTM CU31</td> </tr> <tr> <td>5042217</td> <td>Security update for SQL Server 2017 RTM+GDR</td> <td>14.0.1000.169 - 14.0.2056.2</td> <td>KB 5040942 - Previous SQL2017 RTM GDR</td> </tr> <tr> <td>5042209</td> <td>Security update for SQL 2016 Azure Connect Feature Pack</td> <td>13.0.7000.253 - 13.0.7037.1</td> <td>KB 5040944 - SQL2016 Azure Connect Feature Pack</td> </tr> <tr> <td>5042207</td> <td>Security update for SQL Server 2016 SP3 RTM+GDR</td> <td>13.0.6300.2 - 13.0.6441.1</td> <td>KB 5040946 - Previous SQL2016 RTM GDR</td> </tr> </tbody> </table> <p><strong>What are the GDR and CU update designations and how do they differ?</strong></p> <p>The General Distribution Release (GDR) and Cumulative Update (CU) designations correspond to the two different servicing options in place for SQL Server baseline releases. A baseline can be either an RTM release or a Service Pack release.</p> <ul> <li>GDR updates – cumulatively only contain security updates for the given baseline.</li> <li>CU updates – cumulatively contain all functional fixes and security updates for the given baseline.</li> </ul> <p>For any given baseline, either the GDR or CU updates could be options (see below).</p> <ul> <li>If SQL Server installation is at a baseline version, you can choose either the GDR or CU update.</li> <li>If SQL Server installation has intentionally only installed past GDR updates, then choose to install the GDR update package.</li> <li>If SQL Server installation has intentionally installed previous CU updates, then chose to install the CU security update package.</li> </ul> <p><strong>Note:</strong> You are allowed to make a change from GDR updates to CU updates ONE TIME. Once a SQL Server CU update is applied to a SQL Server installation, there is NO way to go back to the GDR update path.</p> <p><strong>Can the security updates be applied to SQL Server instances on Windows Azure (IaaS)?</strong></p> <p>Yes. SQL Server instances on Windows Azure (IaaS) can be offered the security updates through Microsoft Update, or customers can download the security updates from Microsoft Download Center and apply them manually.</p> SQL Server Microsoft Yes CVE-2024-37342 Out-of-bounds Read 12408 12407 11478 11821 12145 12147 Information Disclosure 12408 Information Disclosure 12407 Information Disclosure 11478 Information Disclosure 11821 Information Disclosure 12145 Information Disclosure 12147 Important 12408 Important 12407 Important 11478 Important 11821 Important 12145 Important 12147 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.1 6.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C 12408 7.1 6.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C 12407 7.1 6.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C 11478 7.1 6.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C 11821 7.1 6.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C 12145 7.1 6.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C 12147 5042749 https://www.microsoft.com/download/details.aspx?familyid=971b1a77-4e8d-4dff-9b4f-3051fb41f8c6 12408 Yes Security Update 15.0.4390.2 https://support.microsoft.com/help/5042749 12408 5042749 5042749 https://support.microsoft.com/help/5042749 12408 5042578 https://www.microsoft.com/download/details.aspx?familyid=a2449ad4-3be2-407b-9e56-c109d321a5b9 12407 Yes Security Update 16.0.4140.3 https://support.microsoft.com/help/5042578 12407 5042578 5042578 https://support.microsoft.com/help/5042578 12407 5042217 https://www.microsoft.com/download/details.aspx?familyid=6e5ca6fa-350d-4a60-b071-c0aa3503136e 11478 Maybe Security Update 14.0.2060.1 https://support.microsoft.com/help/5042217 11478 5042217 5042217 https://support.microsoft.com/help/5042217 11478 5042214 https://www.microsoft.com/download/details.aspx?familyid=684d2c34-425f-45b9-b685-c3ba4266a759 11821 Yes Security Update 15.0.2120.1 https://support.microsoft.com/help/5042214 11821 5042214 5042214 https://support.microsoft.com/help/5042214 11821 5042215 https://www.microsoft.com/download/details.aspx?familyid=5c1115eb-d55d-4a6d-9d44-070045a2675f 12145 Maybe Security Update 14.0.3475.1 https://support.microsoft.com/help/5042215 12145 5042215 5042215 https://support.microsoft.com/help/5042215 12145 5042211 https://www.microsoft.com/download/details.aspx?familyid=b6de42f6-dec1-4212-80fd-820f30b5b9ac 12147 Yes Security Update 16.0.1125.1 https://support.microsoft.com/help/5042211 12147 5042211 5042211 https://support.microsoft.com/help/5042211 12147 <a href="https://twitter.com/arudd1ck">Andrew Ruddick</a> with Microsoft Security Response Center 1.0 2024-09-10T00:00:00 <p>Information published.</p> Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability <p><strong>According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an authenticated attacker to leverage SQL Server Native Scoring to apply pre-trained models to their data without moving it out of the database.</p> <p><strong>I am running SQL Server on my system. What action do I need to take?</strong></p> <p>Update your relevant version of SQL Server. Any applicable driver fixes are included in those updates.</p> <p><strong>I am running my own application on my system. What action do I need to take?</strong></p> <p>Update your application to use Microsoft OLE DB Driver 18 or 19. Update the drivers to the versions listed on this page, which provide protection against this vulnerability.</p> <p><strong>I am running an application from a software vendor on my system. What action do I need to take?</strong></p> <p>Consult with your application vendor if it is compatible with Microsoft OLE DB Driver 18 or 19. Update the drivers to the versions listed in this page, which provide protection against this vulnerability</p> <p><strong>There are GDR and/or CU (Cumulative Update) updates offered for my version of SQL Server. How do I know which update to use?</strong></p> <ul> <li>First, determine your SQL Server version number. For more information on determining your SQL Server version number, see <a href="https://learn.microsoft.com/en-us/troubleshoot/sql/releases/download-and-install-latest-updates">Microsoft Knowledge Base Article 321185</a> - How to determine the version, edition, and update level of SQL Server and its components.</li> <li>Second, in the table below, locate your version number or the version range that your version number falls within. The corresponding update is the one you need to install.</li> </ul> <p><strong>Note</strong> If your SQL Server version number is not represented in the table below, your SQL Server version is no longer supported. Please upgrade to the latest Service Pack or SQL Server product in order to apply this and future security updates.</p> <table> <thead> <tr> <th>Update Number</th> <th>Title</th> <th>Apply if current product version is…</th> <th>This security update also includes servicing releases up through…</th> </tr> </thead> <tbody> <tr> <td>5042578</td> <td>Security update for SQL Server 2022 CU14+GDR</td> <td>16.0.4003.1 - 16.0.4135.4</td> <td>KB 5038325 - SQL2022 RTM CU14</td> </tr> <tr> <td>5042211</td> <td>Security update for SQL Server 2022 RTM+GDR</td> <td>16.0.1000.6 - 16.0.1121.4</td> <td>KB 5040936 - Previous SQL2022 RTM GDR</td> </tr> <tr> <td>5042749</td> <td>Security update for SQL Server 2019 CU28+GDR</td> <td>15.0.4003.23 - 15.0.4385.2</td> <td>KB 5039747 - SQL2019 RTM CU28</td> </tr> <tr> <td>5042214</td> <td>Security update for SQL Server 2019 RTM+GDR</td> <td>15.0.2000.5 - 15.0.2116.2</td> <td>KB 5040986 - Previous SQL2019 RTM GDR</td> </tr> <tr> <td>5042215</td> <td>Security update for SQL Server 2017 CU31+GDR</td> <td>14.0.3006.16 - 14.0.3471.2</td> <td>KB 5040940 - SQL2017 RTM CU31</td> </tr> <tr> <td>5042217</td> <td>Security update for SQL Server 2017 RTM+GDR</td> <td>14.0.1000.169 - 14.0.2056.2</td> <td>KB 5040942 - Previous SQL2017 RTM GDR</td> </tr> <tr> <td>5042209</td> <td>Security update for SQL 2016 Azure Connect Feature Pack</td> <td>13.0.7000.253 - 13.0.7037.1</td> <td>KB 5040944 - SQL2016 Azure Connect Feature Pack</td> </tr> <tr> <td>5042207</td> <td>Security update for SQL Server 2016 SP3 RTM+GDR</td> <td>13.0.6300.2 - 13.0.6441.1</td> <td>KB 5040946 - Previous SQL2016 RTM GDR</td> </tr> </tbody> </table> <p><strong>What are the GDR and CU update designations and how do they differ?</strong></p> <p>The General Distribution Release (GDR) and Cumulative Update (CU) designations correspond to the two different servicing options in place for SQL Server baseline releases. A baseline can be either an RTM release or a Service Pack release.</p> <ul> <li>GDR updates – cumulatively only contain security updates for the given baseline.</li> <li>CU updates – cumulatively contain all functional fixes and security updates for the given baseline.</li> </ul> <p>For any given baseline, either the GDR or CU updates could be options (see below).</p> <ul> <li>If SQL Server installation is at a baseline version, you can choose either the GDR or CU update.</li> <li>If SQL Server installation has intentionally only installed past GDR updates, then choose to install the GDR update package.</li> <li>If SQL Server installation has intentionally installed previous CU updates, then chose to install the CU security update package.</li> </ul> <p><strong>Note:</strong> You are allowed to make a change from GDR updates to CU updates ONE TIME. Once a SQL Server CU update is applied to a SQL Server installation, there is NO way to go back to the GDR update path.</p> <p><strong>Can the security updates be applied to SQL Server instances on Windows Azure (IaaS)?</strong></p> <p>Yes. SQL Server instances on Windows Azure (IaaS) can be offered the security updates through Microsoft Update, or customers can download the security updates from Microsoft Download Center and apply them manually.</p> SQL Server Microsoft Yes CVE-2024-26186 Use After Free 11478 11821 12145 12147 12408 12407 Remote Code Execution 11478 Remote Code Execution 11821 Remote Code Execution 12145 Remote Code Execution 12147 Remote Code Execution 12408 Remote Code Execution 12407 Important 11478 Important 11821 Important 12145 Important 12147 Important 12408 Important 12407 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11478 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11821 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12145 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12147 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12408 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12407 5042217 https://www.microsoft.com/download/details.aspx?familyid=6e5ca6fa-350d-4a60-b071-c0aa3503136e 11478 Maybe Security Update 14.0.2060.1 https://support.microsoft.com/help/5042217 11478 5042217 5042217 https://support.microsoft.com/help/5042217 11478 5042214 https://www.microsoft.com/download/details.aspx?familyid=684d2c34-425f-45b9-b685-c3ba4266a759 11821 Yes Security Update 15.0.2120.1 https://support.microsoft.com/help/5042214 11821 5042214 5042214 https://support.microsoft.com/help/5042214 11821 5042215 https://www.microsoft.com/download/details.aspx?familyid=5c1115eb-d55d-4a6d-9d44-070045a2675f 12145 Maybe Security Update 14.0.3475.1 https://support.microsoft.com/help/5042215 12145 5042215 5042215 https://support.microsoft.com/help/5042215 12145 5042211 https://www.microsoft.com/download/details.aspx?familyid=b6de42f6-dec1-4212-80fd-820f30b5b9ac 12147 Yes Security Update 16.0.1125.1 https://support.microsoft.com/help/5042211 12147 5042211 5042211 https://support.microsoft.com/help/5042211 12147 5042749 https://www.microsoft.com/download/details.aspx?familyid=971b1a77-4e8d-4dff-9b4f-3051fb41f8c6 12408 Yes Security Update 15.0.4390.2 https://support.microsoft.com/help/5042749 12408 5042749 5042749 https://support.microsoft.com/help/5042749 12408 5042578 https://www.microsoft.com/download/details.aspx?familyid=a2449ad4-3be2-407b-9e56-c109d321a5b9 12407 Yes Security Update 16.0.4140.3 https://support.microsoft.com/help/5042578 12407 5042578 5042578 https://support.microsoft.com/help/5042578 12407 <a href="https://twitter.com/arudd1ck">Andrew Ruddick</a> with Microsoft Security Response Center 1.0 2024-09-10T00:00:00 <p>Information published.</p> Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability <p><strong>According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an authenticated attacker to leverage SQL Server Native Scoring to apply pre-trained models to their data without moving it out of the database.</p> <p><strong>I am running SQL Server on my system. What action do I need to take?</strong></p> <p>Update your relevant version of SQL Server. Any applicable driver fixes are included in those updates.</p> <p><strong>I am running my own application on my system. What action do I need to take?</strong></p> <p>Update your application to use Microsoft OLE DB Driver 18 or 19. Update the drivers to the versions listed on this page, which provide protection against this vulnerability.</p> <p><strong>I am running an application from a software vendor on my system. What action do I need to take?</strong></p> <p>Consult with your application vendor if it is compatible with Microsoft OLE DB Driver 18 or 19. Update the drivers to the versions listed in this page, which provide protection against this vulnerability</p> <p><strong>There are GDR and/or CU (Cumulative Update) updates offered for my version of SQL Server. How do I know which update to use?</strong></p> <ul> <li>First, determine your SQL Server version number. For more information on determining your SQL Server version number, see <a href="https://learn.microsoft.com/en-us/troubleshoot/sql/releases/download-and-install-latest-updates">Microsoft Knowledge Base Article 321185</a> - How to determine the version, edition, and update level of SQL Server and its components.</li> <li>Second, in the table below, locate your version number or the version range that your version number falls within. The corresponding update is the one you need to install.</li> </ul> <p><strong>Note</strong> If your SQL Server version number is not represented in the table below, your SQL Server version is no longer supported. Please upgrade to the latest Service Pack or SQL Server product in order to apply this and future security updates.</p> <table> <thead> <tr> <th>Update Number</th> <th>Title</th> <th>Apply if current product version is…</th> <th>This security update also includes servicing releases up through…</th> </tr> </thead> <tbody> <tr> <td>5042578</td> <td>Security update for SQL Server 2022 CU14+GDR</td> <td>16.0.4003.1 - 16.0.4135.4</td> <td>KB 5038325 - SQL2022 RTM CU14</td> </tr> <tr> <td>5042211</td> <td>Security update for SQL Server 2022 RTM+GDR</td> <td>16.0.1000.6 - 16.0.1121.4</td> <td>KB 5040936 - Previous SQL2022 RTM GDR</td> </tr> <tr> <td>5042749</td> <td>Security update for SQL Server 2019 CU28+GDR</td> <td>15.0.4003.23 - 15.0.4385.2</td> <td>KB 5039747 - SQL2019 RTM CU28</td> </tr> <tr> <td>5042214</td> <td>Security update for SQL Server 2019 RTM+GDR</td> <td>15.0.2000.5 - 15.0.2116.2</td> <td>KB 5040986 - Previous SQL2019 RTM GDR</td> </tr> <tr> <td>5042215</td> <td>Security update for SQL Server 2017 CU31+GDR</td> <td>14.0.3006.16 - 14.0.3471.2</td> <td>KB 5040940 - SQL2017 RTM CU31</td> </tr> <tr> <td>5042217</td> <td>Security update for SQL Server 2017 RTM+GDR</td> <td>14.0.1000.169 - 14.0.2056.2</td> <td>KB 5040942 - Previous SQL2017 RTM GDR</td> </tr> <tr> <td>5042209</td> <td>Security update for SQL 2016 Azure Connect Feature Pack</td> <td>13.0.7000.253 - 13.0.7037.1</td> <td>KB 5040944 - SQL2016 Azure Connect Feature Pack</td> </tr> <tr> <td>5042207</td> <td>Security update for SQL Server 2016 SP3 RTM+GDR</td> <td>13.0.6300.2 - 13.0.6441.1</td> <td>KB 5040946 - Previous SQL2016 RTM GDR</td> </tr> </tbody> </table> <p><strong>What are the GDR and CU update designations and how do they differ?</strong></p> <p>The General Distribution Release (GDR) and Cumulative Update (CU) designations correspond to the two different servicing options in place for SQL Server baseline releases. A baseline can be either an RTM release or a Service Pack release.</p> <ul> <li>GDR updates – cumulatively only contain security updates for the given baseline.</li> <li>CU updates – cumulatively contain all functional fixes and security updates for the given baseline.</li> </ul> <p>For any given baseline, either the GDR or CU updates could be options (see below).</p> <ul> <li>If SQL Server installation is at a baseline version, you can choose either the GDR or CU update.</li> <li>If SQL Server installation has intentionally only installed past GDR updates, then choose to install the GDR update package.</li> <li>If SQL Server installation has intentionally installed previous CU updates, then chose to install the CU security update package.</li> </ul> <p><strong>Note:</strong> You are allowed to make a change from GDR updates to CU updates ONE TIME. Once a SQL Server CU update is applied to a SQL Server installation, there is NO way to go back to the GDR update path.</p> <p><strong>Can the security updates be applied to SQL Server instances on Windows Azure (IaaS)?</strong></p> <p>Yes. SQL Server instances on Windows Azure (IaaS) can be offered the security updates through Microsoft Update, or customers can download the security updates from Microsoft Download Center and apply them manually.</p> SQL Server Microsoft Yes CVE-2024-26191 Heap-based Buffer Overflow 11478 11821 12145 12147 12407 12408 Remote Code Execution 11478 Remote Code Execution 11821 Remote Code Execution 12145 Remote Code Execution 12147 Remote Code Execution 12407 Remote Code Execution 12408 Important 11478 Important 11821 Important 12145 Important 12147 Important 12407 Important 12408 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11478 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11821 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12145 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12147 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12407 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12408 5042217 https://www.microsoft.com/download/details.aspx?familyid=6e5ca6fa-350d-4a60-b071-c0aa3503136e 11478 Maybe Security Update 14.0.2060.1 https://support.microsoft.com/help/5042217 11478 5042217 5042217 https://support.microsoft.com/help/5042217 11478 5042214 https://www.microsoft.com/download/details.aspx?familyid=684d2c34-425f-45b9-b685-c3ba4266a759 11821 Yes Security Update 15.0.2120.1 https://support.microsoft.com/help/5042214 11821 5042214 5042214 https://support.microsoft.com/help/5042214 11821 5042215 https://www.microsoft.com/download/details.aspx?familyid=5c1115eb-d55d-4a6d-9d44-070045a2675f 12145 Maybe Security Update 14.0.3475.1 https://support.microsoft.com/help/5042215 12145 5042215 5042215 https://support.microsoft.com/help/5042215 12145 5042211 https://www.microsoft.com/download/details.aspx?familyid=b6de42f6-dec1-4212-80fd-820f30b5b9ac 12147 Yes Security Update 16.0.1125.1 https://support.microsoft.com/help/5042211 12147 5042211 5042211 https://support.microsoft.com/help/5042211 12147 5042578 https://www.microsoft.com/download/details.aspx?familyid=a2449ad4-3be2-407b-9e56-c109d321a5b9 12407 Yes Security Update 16.0.4140.3 https://support.microsoft.com/help/5042578 12407 5042578 5042578 https://support.microsoft.com/help/5042578 12407 5042749 https://www.microsoft.com/download/details.aspx?familyid=971b1a77-4e8d-4dff-9b4f-3051fb41f8c6 12408 Yes Security Update 15.0.4390.2 https://support.microsoft.com/help/5042749 12408 5042749 5042749 https://support.microsoft.com/help/5042749 12408 <a href="https://twitter.com/arudd1ck">Andrew Ruddick</a> with Microsoft Security Response Center 1.0 2024-09-10T00:00:00 <p>Information published.</p> Microsoft SharePoint Server Remote Code Execution Vulnerability <p><strong>How could an attacker exploit the vulnerability?</strong></p> <p>In a network-based attack, an authenticated attacker, who has a minimum of Site Member permissions (PR:L), could execute code remotely on the SharePoint Server.</p> Microsoft Office SharePoint Microsoft Yes CVE-2024-38018 Deserialization of Untrusted Data 10950 11585 11961 Remote Code Execution 10950 Remote Code Execution 11585 Remote Code Execution 11961 Critical 10950 Critical 11585 Critical 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10950 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11585 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11961 5002624 https://www.microsoft.com/download/details.aspx?id=106231 5002618 10950 Maybe Security Update 16.0.5465.1001 https://support.microsoft.com/help/5002624 10950 5002624 5002624 https://support.microsoft.com/help/5002624 10950 5002639 https://www.microsoft.com/download/details.aspx?id=106232 5002615 11585 Maybe Security Update 16.0.10414.20002 https://support.microsoft.com/help/5002639 11585 5002639 5002639 https://support.microsoft.com/help/5002639 11585 5002640 https://www.microsoft.com/download/details.aspx?id=106233 5002606 11961 Maybe Security Update 16.0.17928.20086 https://support.microsoft.com/help/5002640 11961 5002640 5002640 https://support.microsoft.com/help/5002640 11961 Piotr Bazydlo (@chudypb) of Trend Micro Zero Day Initiative 1.0 2024-09-10T00:00:00 <p>Information published.</p> 1.1 2024-10-06T00:00:00 <p>Updated links to security updates. This is an informational change only.</p> Azure Stack Hub Elevation of Privilege Vulnerability <p><strong>According to the CVSS metric, user interaction is required (UI:R) and privileges required are low (PR:L). What does that mean for this vulnerability?</strong></p> <p>An authenticated attacker must wait for a victim user to initiate a connection.</p> <p><strong>What privileges could an attacker gain with a successful exploitation?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain unauthorized access to system resources, potentially allowing them to perform actions with the same privileges as the compromised process.</p> <p>This could lead to further system compromise and unauthorized actions within the network.</p> <p><strong>According to the CVSS metric, successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?</strong></p> <p>This vulnerability could lead to the attacker gaining the ability to interact with other tenant’s applications and content.</p> Azure Stack Microsoft Yes CVE-2024-38216 Improper Input Validation 11950 Elevation of Privilege 11950 Critical 11950 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.2 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:L/E:U/RL:O/RC:C 11950 Release Notes https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-apply-updates?view=azs-2311 11950 Maybe Security Update 1.2406.1.15 https://learn.microsoft.com/en-us/azure-stack/operator/release-notes?view=azs-2311 11950 Release Notes Felix Boulet with <a href="https://www.cyber.gouv.qc.ca/">Centre gouvernemental de cyberd&#233;fense (CGCD)</a> Mathieu Fiore Laroche with <a href="https://www.cyber.gouv.qc.ca/">Centre gouvernemental de cyberd&#233;fense (CGCD)</a> 1.0 2024-09-10T00:00:00 <p>Information published.</p> 1.1 2024-09-19T00:00:00 <p>Updated the build numbers. This is an informational update only.</p> Azure Stack Hub Elevation of Privilege Vulnerability <p><strong>According to the CVSS metric, successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?</strong></p> <p>This vulnerability could lead to the attacker gaining the ability to interact with other tenant’s applications and content.</p> <p><strong>What privileges could an attacker gain with a successful exploitation?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain unauthorized access to system resources, potentially allowing them to perform actions with the same privileges as the compromised process.</p> <p>This could lead to further system compromise and unauthorized actions within the network.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R) and privileges required are low (PR:L). What does that mean for this vulnerability?</strong></p> <p>An authenticated attacker must wait for a victim user to initiate a connection.</p> Azure Stack Microsoft Yes CVE-2024-38220 Improper Access Control 11950 Elevation of Privilege 11950 Critical 11950 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.0 7.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11950 Release Notes https://learn.microsoft.com/en-us/azure-stack/operator/azure-stack-apply-updates?view=azs-2311 11950 Maybe Security Update 1.2406.1.15 https://learn.microsoft.com/en-us/azure-stack/operator/release-notes?view=azs-2311 11950 Release Notes Mathieu Fiore Laroche with <a href="https://www.cyber.gouv.qc.ca/">Centre gouvernemental de cyberd&#233;fense (CGCD)</a> 1.0 2024-09-10T00:00:00 <p>Information published.</p> 1.1 2024-09-19T00:00:00 <p>Updated the build numbers. This is an informational update only.</p> Azure Network Watcher VM Agent Elevation of Privilege Vulnerability <p><strong>Is there any action I need to take to be protected from this vulnerability?</strong></p> <p>If you have enabled automatic updates, you will automatically receive the update as soon as it is available. If you have not enabled automatic updates, you will need to update the product manually.</p> <p>Please see <a href="https://learn.microsoft.com/en-us/azure/virtual-machines/extensions/network-watcher-update?tabs=windows">Update Network Watcher extension to the latest version - Azure Virtual Machines | Microsoft Learn</a> for more information.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could create, modify, or delete files in the security context of the NT AUTHORITY\SYSTEM account.</p> <p><strong>According to the CVSS metrics, successful exploitation of this vulnerability does not impact confidentiality (C:N), but has major impact on integrity (I:H) and availability (A:H). What does that mean for this vulnerability?</strong></p> <p>Exploitation of this vulnerability does not disclose any confidential information but allows an attacker to modify or delete files containing data which could cause the service to become unavailable.</p> Azure Network Watcher Microsoft Yes CVE-2024-38188 Improper Link Resolution Before File Access ('Link Following') 12359 Elevation of Privilege 12359 Important 12359 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 12359 Release Notes https://learn.microsoft.com/en-us/azure/virtual-machines/extensions/network-watcher-update?tabs=windows 12359 Maybe Security Update 1.4.3422.1 https://learn.microsoft.com/en-us/azure/virtual-machines/extensions/network-watcher-update?tabs=windows 12359 Release Notes <a href="https://twitter.com/filip_dragovic">Filip Dragović</a> 1.0 2024-09-10T00:00:00 <p>Information published.</p> Windows Standards-Based Storage Management Service Denial of Service Vulnerability Windows Standards-Based Storage Management Service Microsoft Yes CVE-2024-38230 Improper Input Validation 11571 11572 11923 11924 10816 10855 10483 10543 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11924 Denial of Service 10816 Denial of Service 10855 Denial of Service 10483 Denial of Service 10543 Important 11571 Important 11572 Important 11923 Important 11924 Important 10816 Important 10855 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 5043050 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043050 5041578 11571 11572 Yes Security Update 10.0.17763.6293 https://support.microsoft.com/help/5043050 11571 11572 5043050 5043050 https://support.microsoft.com/help/5043050 11571 11572 5042881 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042881 5041160 11923 11924 Yes Security Update 10.0.20348.2700 https://support.microsoft.com/help/5042881 11923 11924 5042881 5042881 https://support.microsoft.com/help/5042881 11923 11924 5042880 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042880 11923 11924 Yes SecurityHotpatchUpdate 10.0.20348.2695 https://support.microsoft.com/help/5042880 11923 11924 5042880 5043051 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043051 5041773 10816 10855 Yes Security Update 10.0.14393.7336 https://support.microsoft.com/help/5043051 10816 10855 5043051 5043051 https://support.microsoft.com/help/5043051 10816 10855 5043138 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043138 5041828 10483 10543 Yes Monthly Rollup 6.3.9600.22175 https://support.microsoft.com/help/5043138 10483 10543 5043138 5043138 https://support.microsoft.com/help/5043138 10483 10543 <a href="https://twitter.com/keyz3r0">k0shl</a> with <a href="https://www.cyberkl.com/">Kunlun Lab</a> 1.0 2024-09-10T00:00:00 <p>Information published.</p> DHCP Server Service Denial of Service Vulnerability Windows DHCP Server Microsoft Yes CVE-2024-38236 Uncontrolled Resource Consumption 11571 11572 11923 11924 12244 10816 10855 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11924 Denial of Service 12244 Denial of Service 10816 Denial of Service 10855 Denial of Service 9312 Denial of Service 10287 Denial of Service 9318 Denial of Service 9344 Denial of Service 10051 Denial of Service 10049 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Important 11571 Important 11572 Important 11923 Important 11924 Important 12244 Important 10816 Important 10855 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12244 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 9312 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10287 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 9318 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 9344 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10051 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10049 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 5043050 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043050 5041578 11571 11572 Yes Security Update 10.0.17763.6293 https://support.microsoft.com/help/5043050 11571 11572 5043050 5043050 https://support.microsoft.com/help/5043050 11571 11572 5042881 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042881 5041160 11923 11924 Yes Security Update 10.0.20348.2700 https://support.microsoft.com/help/5042881 11923 11924 5042881 5042881 https://support.microsoft.com/help/5042881 11923 11924 5042880 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042880 11923 11924 Yes SecurityHotpatchUpdate 10.0.20348.2695 https://support.microsoft.com/help/5042880 11923 11924 5042880 5043055 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043055 5041573 12244 Yes Security Update 10.0.25398.1128 https://support.microsoft.com/help/5043055 12244 5043055 5043051 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043051 5041773 10816 10855 Yes Security Update 10.0.14393.7336 https://support.microsoft.com/help/5043051 10816 10855 5043051 5043051 https://support.microsoft.com/help/5043051 10816 10855 5043135 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043135 5041850 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.22870 https://support.microsoft.com/help/5043135 9312 10287 9318 9344 5043135 5043135 https://support.microsoft.com/help/5043135 9312 10287 9318 9344 5043087 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043087 9312 10287 9318 9344 Yes Security Only 6.0.6003.22870 https://support.microsoft.com/help/5043087 9312 10287 9318 9344 5043087 5043087 https://support.microsoft.com/help/5043087 9312 10287 9318 9344 5043129 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043129 5041838 10051 10049 Yes Monthly Rollup 6.1.7601.27320 https://support.microsoft.com/help/5043129 10051 10049 5043129 5043092 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043092 10051 10049 Yes Security Only 6.1.7601.27320 https://support.microsoft.com/help/5043092 10051 10049 5043092 5043125 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043125 5041851 10378 10379 Yes Monthly Rollup 6.2.9200.25073 https://support.microsoft.com/help/5043125 10378 10379 5043125 5043125 https://support.microsoft.com/help/5043125 10378 10379 5043138 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043138 5041828 10483 10543 Yes Monthly Rollup 6.3.9600.22175 https://support.microsoft.com/help/5043138 10483 10543 5043138 5043138 https://support.microsoft.com/help/5043138 10483 10543 Anonymous 1.0 2024-09-10T00:00:00 <p>Information published.</p> Windows Remote Access Connection Manager Elevation of Privilege Vulnerability <p><strong>Windows 11, version 24H2 is not generally available yet. Why are there updates for this version of Windows listed in the Security Updates table?</strong></p> <p>The new Copilot+ devices that are now publicly available come with Windows 11, version 24H2 installed. Customers with these devices need to know about any vulnerabilities that affect their machine and to install the updates if they are not receiving automatic updates. Note that the general availability date for Windows 11, version 24H2 is scheduled for later this year.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Remote Access Connection Manager Microsoft Yes CVE-2024-38240 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11926 11927 11929 11930 11931 12085 12086 12097 12098 12099 12242 12243 12244 12389 12390 10729 10735 10852 10853 10816 10855 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11926 Elevation of Privilege 11927 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12085 Elevation of Privilege 12086 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12244 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 12085 Important 12086 Important 12097 Important 12098 Important 12099 Important 12242 Important 12243 Important 12244 Important 12389 Important 12390 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12085 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12086 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12244 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5043050 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043050 5041578 11568 11569 11571 11572 Yes Security Update 10.0.17763.6293 https://support.microsoft.com/help/5043050 11568 11569 11571 11572 5043050 5043050 https://support.microsoft.com/help/5043050 11568 11569 11571 11572 5042881 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042881 5041160 11923 11924 Yes Security Update 10.0.20348.2700 https://support.microsoft.com/help/5042881 11923 11924 5042881 5042881 https://support.microsoft.com/help/5042881 11923 11924 5042880 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042880 11923 11924 Yes SecurityHotpatchUpdate 10.0.20348.2695 https://support.microsoft.com/help/5042880 11923 11924 5042880 5043067 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043067 5041592 11926 11927 Yes Security Update 10.0.22000.3197 https://support.microsoft.com/help/5043067 11926 11927 5043067 5043067 https://support.microsoft.com/help/5043067 11926 11927 5043064 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043064 5041580 11929 11930 11931 Yes Security Update 10.0.19044.4894 https://support.microsoft.com/help/5043064 11929 11930 11931 5043064 5043064 https://support.microsoft.com/help/5043064 11929 11930 11931 12097 12098 12099 5043076 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043076 5041585 12085 12086 Yes Security Update 10.0.22621.4169 https://support.microsoft.com/help/5043076 12085 12086 5043076 5043076 https://support.microsoft.com/help/5043076 12085 12086 12242 12243 5043064 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043064 5041580 12097 12098 12099 Yes Security Update 10.0.19045.4894 https://support.microsoft.com/help/5043064 12097 12098 12099 5043064 5043076 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043076 5041585 12242 12243 Yes Security Update 10.0.22631.4169 https://support.microsoft.com/help/5043076 12242 12243 5043076 5043055 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043055 5041573 12244 Yes Security Update 10.0.25398.1128 https://support.microsoft.com/help/5043055 12244 5043055 5043080 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043080 12389 12390 Yes Security Update 10.0.26100.1742 https://support.microsoft.com/help/5043080 12389 12390 5043080 5043080 https://support.microsoft.com/help/5043080 12389 12390 5043083 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043083 5041782 10729 10735 Yes Security Update 10.0.10240.20766 https://support.microsoft.com/help/5043083 10729 10735 5043083 5043083 https://support.microsoft.com/help/5043083 10729 10735 5043051 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043051 5041773 10852 10853 10816 10855 Yes Security Update 10.0.14393.7336 https://support.microsoft.com/help/5043051 10852 10853 10816 10855 5043051 5043051 https://support.microsoft.com/help/5043051 10852 10853 10816 10855 5043138 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043138 5041828 10483 10543 Yes Monthly Rollup 6.3.9600.22175 https://support.microsoft.com/help/5043138 10483 10543 5043138 5043138 https://support.microsoft.com/help/5043138 10483 10543 <a href="https://twitter.com/ecthr0s">George Hughey</a> with MSRC Vulnerabilities &amp; Mitigations 1.0 2024-09-10T00:00:00 <p>Information published.</p> Kernel Streaming Service Driver Elevation of Privilege Vulnerability <p><strong>Windows 11, version 24H2 is not generally available yet. Why are there updates for this version of Windows listed in the Security Updates table?</strong></p> <p>The new Copilot+ devices that are now publicly available come with Windows 11, version 24H2 installed. Customers with these devices need to know about any vulnerabilities that affect their machine and to install the updates if they are not receiving automatic updates. Note that the general availability date for Windows 11, version 24H2 is scheduled for later this year.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Microsoft Streaming Service Microsoft Yes CVE-2024-38241 Improper Input Validation 11568 11569 11571 11572 11923 11924 11926 11927 11929 11930 11931 12085 12086 12097 12098 12099 12242 12243 12244 12389 12390 10729 10735 10852 10853 10816 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11926 Elevation of Privilege 11927 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12085 Elevation of Privilege 12086 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12244 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 12085 Important 12086 Important 12097 Important 12098 Important 12099 Important 12242 Important 12243 Important 12244 Important 12389 Important 12390 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12085 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12086 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12244 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5043050 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043050 5041578 11568 11569 11571 11572 Yes Security Update 10.0.17763.6293 https://support.microsoft.com/help/5043050 11568 11569 11571 11572 5043050 5043050 https://support.microsoft.com/help/5043050 11568 11569 11571 11572 5042881 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042881 5041160 11923 11924 Yes Security Update 10.0.20348.2700 https://support.microsoft.com/help/5042881 11923 11924 5042881 5042881 https://support.microsoft.com/help/5042881 11923 11924 5042880 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042880 11923 11924 Yes SecurityHotpatchUpdate 10.0.20348.2695 https://support.microsoft.com/help/5042880 11923 11924 5042880 5043067 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043067 5041592 11926 11927 Yes Security Update 10.0.22000.3197 https://support.microsoft.com/help/5043067 11926 11927 5043067 5043067 https://support.microsoft.com/help/5043067 11926 11927 5043064 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043064 5041580 11929 11930 11931 Yes Security Update 10.0.19044.4894 https://support.microsoft.com/help/5043064 11929 11930 11931 5043064 5043064 https://support.microsoft.com/help/5043064 11929 11930 11931 12097 12098 12099 5043076 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043076 5041585 12085 12086 Yes Security Update 10.0.22621.4169 https://support.microsoft.com/help/5043076 12085 12086 5043076 5043076 https://support.microsoft.com/help/5043076 12085 12086 12242 12243 5043064 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043064 5041580 12097 12098 12099 Yes Security Update 10.0.19045.4894 https://support.microsoft.com/help/5043064 12097 12098 12099 5043064 5043076 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043076 5041585 12242 12243 Yes Security Update 10.0.22631.4169 https://support.microsoft.com/help/5043076 12242 12243 5043076 5043055 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043055 5041573 12244 Yes Security Update 10.0.25398.1128 https://support.microsoft.com/help/5043055 12244 5043055 5043080 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043080 12389 12390 Yes Security Update 10.0.26100.1742 https://support.microsoft.com/help/5043080 12389 12390 5043080 5043080 https://support.microsoft.com/help/5043080 12389 12390 5043083 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043083 5041782 10729 10735 Yes Security Update 10.0.10240.20766 https://support.microsoft.com/help/5043083 10729 10735 5043083 5043083 https://support.microsoft.com/help/5043083 10729 10735 5043051 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043051 5041773 10852 10853 10816 10855 Yes Security Update 10.0.14393.7336 https://support.microsoft.com/help/5043051 10852 10853 10816 10855 5043051 5043051 https://support.microsoft.com/help/5043051 10852 10853 10816 10855 <a href="https://twitter.com/scwuaptx">Angelboy (@scwuaptx)</a> with <a href="https://devco.re/">DEVCORE</a> 1.0 2024-09-10T00:00:00 <p>Information published.</p> Kernel Streaming Service Driver Elevation of Privilege Vulnerability <p><strong>Windows 11, version 24H2 is not generally available yet. Why are there updates for this version of Windows listed in the Security Updates table?</strong></p> <p>The new Copilot+ devices that are now publicly available come with Windows 11, version 24H2 installed. Customers with these devices need to know about any vulnerabilities that affect their machine and to install the updates if they are not receiving automatic updates. Note that the general availability date for Windows 11, version 24H2 is scheduled for later this year.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Microsoft Streaming Service Microsoft Yes CVE-2024-38242 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11926 11927 11929 11930 11931 12085 12086 12097 12098 12099 12242 12243 12244 12389 12390 10729 10735 10852 10853 10816 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11926 Elevation of Privilege 11927 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12085 Elevation of Privilege 12086 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12244 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 12085 Important 12086 Important 12097 Important 12098 Important 12099 Important 12242 Important 12243 Important 12244 Important 12389 Important 12390 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12085 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12086 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12244 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5043050 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043050 5041578 11568 11569 11571 11572 Yes Security Update 10.0.17763.6293 https://support.microsoft.com/help/5043050 11568 11569 11571 11572 5043050 5043050 https://support.microsoft.com/help/5043050 11568 11569 11571 11572 5042881 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042881 5041160 11923 11924 Yes Security Update 10.0.20348.2700 https://support.microsoft.com/help/5042881 11923 11924 5042881 5042881 https://support.microsoft.com/help/5042881 11923 11924 5042880 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042880 11923 11924 Yes SecurityHotpatchUpdate 10.0.20348.2695 https://support.microsoft.com/help/5042880 11923 11924 5042880 5043067 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043067 5041592 11926 11927 Yes Security Update 10.0.22000.3197 https://support.microsoft.com/help/5043067 11926 11927 5043067 5043067 https://support.microsoft.com/help/5043067 11926 11927 5043064 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043064 5041580 11929 11930 11931 Yes Security Update 10.0.19044.4894 https://support.microsoft.com/help/5043064 11929 11930 11931 5043064 5043064 https://support.microsoft.com/help/5043064 11929 11930 11931 12097 12098 12099 5043076 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043076 5041585 12085 12086 Yes Security Update 10.0.22621.4169 https://support.microsoft.com/help/5043076 12085 12086 5043076 5043076 https://support.microsoft.com/help/5043076 12085 12086 12242 12243 5043064 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043064 5041580 12097 12098 12099 Yes Security Update 10.0.19045.4894 https://support.microsoft.com/help/5043064 12097 12098 12099 5043064 5043076 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043076 5041585 12242 12243 Yes Security Update 10.0.22631.4169 https://support.microsoft.com/help/5043076 12242 12243 5043076 5043055 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043055 5041573 12244 Yes Security Update 10.0.25398.1128 https://support.microsoft.com/help/5043055 12244 5043055 5043080 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043080 12389 12390 Yes Security Update 10.0.26100.1742 https://support.microsoft.com/help/5043080 12389 12390 5043080 5043080 https://support.microsoft.com/help/5043080 12389 12390 5043083 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043083 5041782 10729 10735 Yes Security Update 10.0.10240.20766 https://support.microsoft.com/help/5043083 10729 10735 5043083 5043083 https://support.microsoft.com/help/5043083 10729 10735 5043051 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043051 5041773 10852 10853 10816 10855 Yes Security Update 10.0.14393.7336 https://support.microsoft.com/help/5043051 10852 10853 10816 10855 5043051 5043051 https://support.microsoft.com/help/5043051 10852 10853 10816 10855 <a href="https://twitter.com/scwuaptx">Angelboy (@scwuaptx)</a> with <a href="https://devco.re/">DEVCORE</a> 1.0 2024-09-10T00:00:00 <p>Information published.</p> Windows Graphics Component Elevation of Privilege Vulnerability <p><strong>Windows 11, version 24H2 is not generally available yet. Why are there updates for this version of Windows listed in the Security Updates table?</strong></p> <p>The new Copilot+ devices that are now publicly available come with Windows 11, version 24H2 installed. Customers with these devices need to know about any vulnerabilities that affect their machine and to install the updates if they are not receiving automatic updates. Note that the general availability date for Windows 11, version 24H2 is scheduled for later this year.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Microsoft Graphics Component Microsoft Yes CVE-2024-38249 Use After Free 11568 11569 11571 11572 11923 11924 11926 11927 11929 11930 11931 12085 12086 12097 12098 12099 12242 12243 12244 12389 12390 10729 10735 10852 10853 10816 10855 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11926 Elevation of Privilege 11927 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12085 Elevation of Privilege 12086 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12244 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 9312 Elevation of Privilege 10287 Elevation of Privilege 9318 Elevation of Privilege 9344 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 12085 Important 12086 Important 12097 Important 12098 Important 12099 Important 12242 Important 12243 Important 12244 Important 12389 Important 12390 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12085 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12086 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12244 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5043050 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043050 5041578 11568 11569 11571 11572 Yes Security Update 10.0.17763.6293 https://support.microsoft.com/help/5043050 11568 11569 11571 11572 5043050 5043050 https://support.microsoft.com/help/5043050 11568 11569 11571 11572 5042881 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042881 5041160 11923 11924 Yes Security Update 10.0.20348.2700 https://support.microsoft.com/help/5042881 11923 11924 5042881 5042881 https://support.microsoft.com/help/5042881 11923 11924 5042880 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042880 11923 11924 Yes SecurityHotpatchUpdate 10.0.20348.2695 https://support.microsoft.com/help/5042880 11923 11924 5042880 5043067 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043067 5041592 11926 11927 Yes Security Update 10.0.22000.3197 https://support.microsoft.com/help/5043067 11926 11927 5043067 5043067 https://support.microsoft.com/help/5043067 11926 11927 5043064 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043064 5041580 11929 11930 11931 Yes Security Update 10.0.19044.4894 https://support.microsoft.com/help/5043064 11929 11930 11931 5043064 5043064 https://support.microsoft.com/help/5043064 11929 11930 11931 12097 12098 12099 5043076 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043076 5041585 12085 12086 Yes Security Update 10.0.22621.4169 https://support.microsoft.com/help/5043076 12085 12086 5043076 5043076 https://support.microsoft.com/help/5043076 12085 12086 12242 12243 5043064 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043064 5041580 12097 12098 12099 Yes Security Update 10.0.19045.4894 https://support.microsoft.com/help/5043064 12097 12098 12099 5043064 5043076 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043076 5041585 12242 12243 Yes Security Update 10.0.22631.4169 https://support.microsoft.com/help/5043076 12242 12243 5043076 5043055 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043055 5041573 12244 Yes Security Update 10.0.25398.1128 https://support.microsoft.com/help/5043055 12244 5043055 5043080 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043080 12389 12390 Yes Security Update 10.0.26100.1742 https://support.microsoft.com/help/5043080 12389 12390 5043080 5043080 https://support.microsoft.com/help/5043080 12389 12390 5043083 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043083 5041782 10729 10735 Yes Security Update 10.0.10240.20766 https://support.microsoft.com/help/5043083 10729 10735 5043083 5043083 https://support.microsoft.com/help/5043083 10729 10735 5043051 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043051 5041773 10852 10853 10816 10855 Yes Security Update 10.0.14393.7336 https://support.microsoft.com/help/5043051 10852 10853 10816 10855 5043051 5043051 https://support.microsoft.com/help/5043051 10852 10853 10816 10855 5043135 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043135 5041850 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.22870 https://support.microsoft.com/help/5043135 9312 10287 9318 9344 5043135 5043135 https://support.microsoft.com/help/5043135 9312 10287 9318 9344 5043087 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043087 9312 10287 9318 9344 Yes Security Only 6.0.6003.22870 https://support.microsoft.com/help/5043087 9312 10287 9318 9344 5043087 5043087 https://support.microsoft.com/help/5043087 9312 10287 9318 9344 5043129 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043129 5041838 10051 10049 Yes Monthly Rollup 6.1.7601.27320 https://support.microsoft.com/help/5043129 10051 10049 5043129 5043092 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043092 10051 10049 Yes Security Only 6.1.7601.27320 https://support.microsoft.com/help/5043092 10051 10049 5043092 5043125 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043125 5041851 10378 10379 Yes Monthly Rollup 6.2.9200.25073 https://support.microsoft.com/help/5043125 10378 10379 5043125 5043125 https://support.microsoft.com/help/5043125 10378 10379 5043138 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043138 5041828 10483 10543 Yes Monthly Rollup 6.3.9600.22175 https://support.microsoft.com/help/5043138 10483 10543 5043138 5043138 https://support.microsoft.com/help/5043138 10483 10543 Marcin Wiazowski working with Trend Micro Zero Day Initiative 1.0 2024-09-10T00:00:00 <p>Information published.</p> Windows Graphics Component Elevation of Privilege Vulnerability <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Microsoft Graphics Component Microsoft Yes CVE-2024-38250 Buffer Over-read 11568 11569 11571 11572 11923 11924 11926 11927 11929 11930 11931 12085 12086 12097 12098 12099 12242 12243 12244 10729 10735 10852 10853 10816 10855 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 11951 12155 12156 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11926 Elevation of Privilege 11927 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12085 Elevation of Privilege 12086 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12244 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 9312 Elevation of Privilege 10287 Elevation of Privilege 9318 Elevation of Privilege 9344 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 11951 Elevation of Privilege 12155 Elevation of Privilege 12156 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 12085 Important 12086 Important 12097 Important 12098 Important 12099 Important 12242 Important 12243 Important 12244 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Important 11951 Important 12155 Important 12156 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12085 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12086 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12244 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12155 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12156 5043050 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043050 5041578 11568 11569 11571 11572 Yes Security Update 10.0.17763.6293 https://support.microsoft.com/help/5043050 11568 11569 11571 11572 5043050 5043050 https://support.microsoft.com/help/5043050 11568 11569 11571 11572 5042881 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042881 5041160 11923 11924 Yes Security Update 10.0.20348.2700 https://support.microsoft.com/help/5042881 11923 11924 5042881 5042881 https://support.microsoft.com/help/5042881 11923 11924 5042880 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042880 11923 11924 Yes SecurityHotpatchUpdate 10.0.20348.2695 https://support.microsoft.com/help/5042880 11923 11924 5042880 5043067 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043067 5041592 11926 11927 Yes Security Update 10.0.22000.3197 https://support.microsoft.com/help/5043067 11926 11927 5043067 5043067 https://support.microsoft.com/help/5043067 11926 11927 5043064 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043064 5041580 11929 11930 11931 Yes Security Update 10.0.19044.4894 https://support.microsoft.com/help/5043064 11929 11930 11931 5043064 5043064 https://support.microsoft.com/help/5043064 11929 11930 11931 12097 12098 12099 5043076 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043076 5041585 12085 12086 Yes Security Update 10.0.22621.4169 https://support.microsoft.com/help/5043076 12085 12086 5043076 5043076 https://support.microsoft.com/help/5043076 12085 12086 12242 12243 5043064 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043064 5041580 12097 12098 12099 Yes Security Update 10.0.19045.4894 https://support.microsoft.com/help/5043064 12097 12098 12099 5043064 5043076 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043076 5041585 12242 12243 Yes Security Update 10.0.22631.4169 https://support.microsoft.com/help/5043076 12242 12243 5043076 5043055 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043055 5041573 12244 Yes Security Update 10.0.25398.1128 https://support.microsoft.com/help/5043055 12244 5043055 5043083 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043083 5041782 10729 10735 Yes Security Update 10.0.10240.20766 https://support.microsoft.com/help/5043083 10729 10735 5043083 5043083 https://support.microsoft.com/help/5043083 10729 10735 5043051 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043051 5041773 10852 10853 10816 10855 Yes Security Update 10.0.14393.7336 https://support.microsoft.com/help/5043051 10852 10853 10816 10855 5043051 5043051 https://support.microsoft.com/help/5043051 10852 10853 10816 10855 5043135 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043135 5041850 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.22870 https://support.microsoft.com/help/5043135 9312 10287 9318 9344 5043135 5043135 https://support.microsoft.com/help/5043135 9312 10287 9318 9344 5043087 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043087 9312 10287 9318 9344 Yes Security Only 6.0.6003.22870 https://support.microsoft.com/help/5043087 9312 10287 9318 9344 5043087 5043087 https://support.microsoft.com/help/5043087 9312 10287 9318 9344 5043129 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043129 5041838 10051 10049 Yes Monthly Rollup 6.1.7601.27320 https://support.microsoft.com/help/5043129 10051 10049 5043129 5043092 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043092 10051 10049 Yes Security Only 6.1.7601.27320 https://support.microsoft.com/help/5043092 10051 10049 5043092 5043125 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043125 5041851 10378 10379 Yes Monthly Rollup 6.2.9200.25073 https://support.microsoft.com/help/5043125 10378 10379 5043125 5043125 https://support.microsoft.com/help/5043125 10378 10379 5043138 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043138 5041828 10483 10543 Yes Monthly Rollup 6.3.9600.22175 https://support.microsoft.com/help/5043138 10483 10543 5043138 5043138 https://support.microsoft.com/help/5043138 10483 10543 Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 Maybe Security Update 16.89.24090815 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 Release Notes Release Notes https://play.google.com/store/apps/details?id=com.microsoft.office.officehubrow 12155 Maybe Security Update 16.0.16827.2xxxxx https://support.google.com/googleplay/answer/113412?hl=en 12155 Release Notes Release Notes https://support.microsoft.com/en-us/account-billing/get-updates-for-apps-and-games-in-microsoft-store-a1fe19c0-532d-ec47-7035-d1c5a1dd464f 12156 Maybe Security Update 16.0.14326.21xxxx https://support.microsoft.com/en-us/account-billing/get-updates-for-apps-and-games-in-microsoft-store-a1fe19c0-532d-ec47-7035-d1c5a1dd464f 12156 Release Notes Malu Harten Cristi Dudescu Cristi Dudescu Cristi Dudescu Cristi Dudescu 1.0 2024-09-10T00:00:00 <p>Information published.</p> 1.1 2024-09-19T00:00:00 <p>Added acknowledgements. This is an informational change only.</p> Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability <p><strong>Windows 11, version 24H2 is not generally available yet. Why are there updates for this version of Windows listed in the Security Updates table?</strong></p> <p>The new Copilot+ devices that are now publicly available come with Windows 11, version 24H2 installed. Customers with these devices need to know about any vulnerabilities that affect their machine and to install the updates if they are not receiving automatic updates. Note that the general availability date for Windows 11, version 24H2 is scheduled for later this year.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Win32K - ICOMP Microsoft Yes CVE-2024-38252 Use After Free 11568 11569 11571 11572 11923 11924 11926 11927 11929 11930 11931 12085 12086 12097 12098 12099 12242 12243 12244 12389 12390 10852 10853 10816 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11926 Elevation of Privilege 11927 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12085 Elevation of Privilege 12086 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12244 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 12085 Important 12086 Important 12097 Important 12098 Important 12099 Important 12242 Important 12243 Important 12244 Important 12389 Important 12390 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12085 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12086 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12244 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5043050 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043050 5041578 11568 11569 11571 11572 Yes Security Update 10.0.17763.6293 https://support.microsoft.com/help/5043050 11568 11569 11571 11572 5043050 5043050 https://support.microsoft.com/help/5043050 11568 11569 11571 11572 5042881 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042881 5041160 11923 11924 Yes Security Update 10.0.20348.2700 https://support.microsoft.com/help/5042881 11923 11924 5042881 5042881 https://support.microsoft.com/help/5042881 11923 11924 5042880 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042880 11923 11924 Yes SecurityHotpatchUpdate 10.0.20348.2695 https://support.microsoft.com/help/5042880 11923 11924 5042880 5043067 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043067 5041592 11926 11927 Yes Security Update 10.0.22000.3197 https://support.microsoft.com/help/5043067 11926 11927 5043067 5043067 https://support.microsoft.com/help/5043067 11926 11927 5043064 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043064 5041580 11929 11930 11931 Yes Security Update 10.0.19044.4894 https://support.microsoft.com/help/5043064 11929 11930 11931 5043064 5043064 https://support.microsoft.com/help/5043064 11929 11930 11931 12097 12098 12099 5043076 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043076 5041585 12085 12086 Yes Security Update 10.0.22621.4169 https://support.microsoft.com/help/5043076 12085 12086 5043076 5043076 https://support.microsoft.com/help/5043076 12085 12086 12242 12243 5043064 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043064 5041580 12097 12098 12099 Yes Security Update 10.0.19045.4894 https://support.microsoft.com/help/5043064 12097 12098 12099 5043064 5043076 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043076 5041585 12242 12243 Yes Security Update 10.0.22631.4169 https://support.microsoft.com/help/5043076 12242 12243 5043076 5043055 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043055 5041573 12244 Yes Security Update 10.0.25398.1128 https://support.microsoft.com/help/5043055 12244 5043055 5043080 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043080 12389 12390 Yes Security Update 10.0.26100.1742 https://support.microsoft.com/help/5043080 12389 12390 5043080 5043080 https://support.microsoft.com/help/5043080 12389 12390 5043051 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043051 5041773 10852 10853 10816 10855 Yes Security Update 10.0.14393.7336 https://support.microsoft.com/help/5043051 10852 10853 10816 10855 5043051 5043051 https://support.microsoft.com/help/5043051 10852 10853 10816 10855 <a href="https://www.linkedin.com/in/benjaminrodes">Benjamin Rodes</a> with Microsoft CodeQL <a href="https://twitter.com/ecthr0s">George Hughey</a> with MSRC Vulnerabilities &amp; Mitigations 1.0 2024-09-10T00:00:00 <p>Information published.</p> Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability <p><strong>Windows 11, version 24H2 is not generally available yet. Why are there updates for this version of Windows listed in the Security Updates table?</strong></p> <p>The new Copilot+ devices that are now publicly available come with Windows 11, version 24H2 installed. Customers with these devices need to know about any vulnerabilities that affect their machine and to install the updates if they are not receiving automatic updates. Note that the general availability date for Windows 11, version 24H2 is scheduled for later this year.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Win32K - ICOMP Microsoft Yes CVE-2024-38253 Use After Free 11926 11927 12085 12086 12242 12243 12244 12389 12390 Elevation of Privilege 11926 Elevation of Privilege 11927 Elevation of Privilege 12085 Elevation of Privilege 12086 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12244 Elevation of Privilege 12389 Elevation of Privilege 12390 Important 11926 Important 11927 Important 12085 Important 12086 Important 12242 Important 12243 Important 12244 Important 12389 Important 12390 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12085 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12086 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12244 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 5043067 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043067 5041592 11926 11927 Yes Security Update 10.0.22000.3197 https://support.microsoft.com/help/5043067 11926 11927 5043067 5043067 https://support.microsoft.com/help/5043067 11926 11927 5043076 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043076 5041585 12085 12086 Yes Security Update 10.0.22621.4169 https://support.microsoft.com/help/5043076 12085 12086 5043076 5043076 https://support.microsoft.com/help/5043076 12085 12086 12242 12243 5043076 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043076 5041585 12242 12243 Yes Security Update 10.0.22631.4169 https://support.microsoft.com/help/5043076 12242 12243 5043076 5043055 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043055 5041573 12244 Yes Security Update 10.0.25398.1128 https://support.microsoft.com/help/5043055 12244 5043055 5043080 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043080 12389 12390 Yes Security Update 10.0.26100.1742 https://support.microsoft.com/help/5043080 12389 12390 5043080 5043080 https://support.microsoft.com/help/5043080 12389 12390 <a href="https://twitter.com/ecthr0s">George Hughey</a> with MSRC Vulnerabilities & Mitigations <a href="https://twitter.com/rohitwas">Rohit Mothe</a> with MSRC Vulnerabilities &amp; Mitigations <a href="https://www.linkedin.com/in/benjaminrodes">Benjamin Rodes</a> with Microsoft CodeQL Devin Jensen 1.0 2024-09-10T00:00:00 <p>Information published.</p> Windows Authentication Information Disclosure Vulnerability <p><strong>Windows 11, version 24H2 is not generally available yet. Why are there updates for this version of Windows listed in the Security Updates table?</strong></p> <p>The new Copilot+ devices that are now publicly available come with Windows 11, version 24H2 installed. Customers with these devices need to know about any vulnerabilities that affect their machine and to install the updates if they are not receiving automatic updates. Note that the general availability date for Windows 11, version 24H2 is scheduled for later this year.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> Windows Authentication Methods Microsoft Yes CVE-2024-38254 Use of Uninitialized Resource 11568 11569 11571 11572 11923 11924 11926 11927 11929 11930 11931 12085 12086 12097 12098 12099 12242 12243 12244 12389 12390 10729 10735 10852 10853 10816 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11926 Information Disclosure 11927 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12085 Information Disclosure 12086 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12244 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 10729 Information Disclosure 10735 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 12085 Important 12086 Important 12097 Important 12098 Important 12099 Important 12242 Important 12243 Important 12244 Important 12389 Important 12390 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11926 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11927 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12085 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12086 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12244 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10729 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10735 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5043050 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043050 5041578 11568 11569 11571 11572 Yes Security Update 10.0.17763.6293 https://support.microsoft.com/help/5043050 11568 11569 11571 11572 5043050 5043050 https://support.microsoft.com/help/5043050 11568 11569 11571 11572 5042881 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042881 5041160 11923 11924 Yes Security Update 10.0.20348.2700 https://support.microsoft.com/help/5042881 11923 11924 5042881 5042881 https://support.microsoft.com/help/5042881 11923 11924 5042880 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042880 11923 11924 Yes SecurityHotpatchUpdate 10.0.20348.2695 https://support.microsoft.com/help/5042880 11923 11924 5042880 5043067 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043067 5041592 11926 11927 Yes Security Update 10.0.22000.3197 https://support.microsoft.com/help/5043067 11926 11927 5043067 5043067 https://support.microsoft.com/help/5043067 11926 11927 5043064 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043064 5041580 11929 11930 11931 Yes Security Update 10.0.19044.4894 https://support.microsoft.com/help/5043064 11929 11930 11931 5043064 5043064 https://support.microsoft.com/help/5043064 11929 11930 11931 12097 12098 12099 5043076 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043076 5041585 12085 12086 Yes Security Update 10.0.22621.4169 https://support.microsoft.com/help/5043076 12085 12086 5043076 5043076 https://support.microsoft.com/help/5043076 12085 12086 12242 12243 5043064 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043064 5041580 12097 12098 12099 Yes Security Update 10.0.19045.4894 https://support.microsoft.com/help/5043064 12097 12098 12099 5043064 5043076 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043076 5041585 12242 12243 Yes Security Update 10.0.22631.4169 https://support.microsoft.com/help/5043076 12242 12243 5043076 5043055 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043055 5041573 12244 Yes Security Update 10.0.25398.1128 https://support.microsoft.com/help/5043055 12244 5043055 5043080 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043080 12389 12390 Yes Security Update 10.0.26100.1742 https://support.microsoft.com/help/5043080 12389 12390 5043080 5043080 https://support.microsoft.com/help/5043080 12389 12390 5043083 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043083 5041782 10729 10735 Yes Security Update 10.0.10240.20766 https://support.microsoft.com/help/5043083 10729 10735 5043083 5043083 https://support.microsoft.com/help/5043083 10729 10735 5043051 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043051 5041773 10852 10853 10816 10855 Yes Security Update 10.0.14393.7336 https://support.microsoft.com/help/5043051 10852 10853 10816 10855 5043051 5043051 https://support.microsoft.com/help/5043051 10852 10853 10816 10855 <a href="https://twitter.com/netsecurity1">R&#233;mi Jullian</a> with <a href="https://www.synacktiv.com/">Synacktiv</a> 1.0 2024-09-10T00:00:00 <p>Information published.</p> Windows Kernel-Mode Driver Information Disclosure Vulnerability <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> Windows Kernel-Mode Drivers Microsoft Yes CVE-2024-38256 Use of Uninitialized Resource 11568 11569 11571 11572 11929 11930 11931 12097 12098 12099 10729 10735 10852 10853 10816 10855 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 10729 Information Disclosure 10735 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 9312 Information Disclosure 10287 Information Disclosure 9318 Information Disclosure 9344 Information Disclosure 10051 Information Disclosure 10049 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10729 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10735 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 9312 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10287 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 9318 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 9344 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10051 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10049 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5043050 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043050 5041578 11568 11569 11571 11572 Yes Security Update 10.0.17763.6293 https://support.microsoft.com/help/5043050 11568 11569 11571 11572 5043050 5043050 https://support.microsoft.com/help/5043050 11568 11569 11571 11572 5043064 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043064 5041580 11929 11930 11931 Yes Security Update 10.0.19044.4894 https://support.microsoft.com/help/5043064 11929 11930 11931 5043064 5043064 https://support.microsoft.com/help/5043064 11929 11930 11931 12097 12098 12099 5043064 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043064 5041580 12097 12098 12099 Yes Security Update 10.0.19045.4894 https://support.microsoft.com/help/5043064 12097 12098 12099 5043064 5043083 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043083 5041782 10729 10735 Yes Security Update 10.0.10240.20766 https://support.microsoft.com/help/5043083 10729 10735 5043083 5043083 https://support.microsoft.com/help/5043083 10729 10735 5043051 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043051 5041773 10852 10853 10816 10855 Yes Security Update 10.0.14393.7336 https://support.microsoft.com/help/5043051 10852 10853 10816 10855 5043051 5043051 https://support.microsoft.com/help/5043051 10852 10853 10816 10855 5043135 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043135 5041850 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.22870 https://support.microsoft.com/help/5043135 9312 10287 9318 9344 5043135 5043135 https://support.microsoft.com/help/5043135 9312 10287 9318 9344 5043087 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043087 9312 10287 9318 9344 Yes Security Only 6.0.6003.22870 https://support.microsoft.com/help/5043087 9312 10287 9318 9344 5043087 5043087 https://support.microsoft.com/help/5043087 9312 10287 9318 9344 5043129 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043129 5041838 10051 10049 Yes Monthly Rollup 6.1.7601.27320 https://support.microsoft.com/help/5043129 10051 10049 5043129 5043092 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043092 10051 10049 Yes Security Only 6.1.7601.27320 https://support.microsoft.com/help/5043092 10051 10049 5043092 5043125 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043125 5041851 10378 10379 Yes Monthly Rollup 6.2.9200.25073 https://support.microsoft.com/help/5043125 10378 10379 5043125 5043125 https://support.microsoft.com/help/5043125 10378 10379 5043138 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043138 5041828 10483 10543 Yes Monthly Rollup 6.3.9600.22175 https://support.microsoft.com/help/5043138 10483 10543 5043138 5043138 https://support.microsoft.com/help/5043138 10483 10543 <a href="https://twitter.com/tykawaii98">B&#249;i Quang Hiếu (@tykawaii98)</a> 1.0 2024-09-10T00:00:00 <p>Information published.</p> Microsoft Office Visio Remote Code Execution Vulnerability <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>Exploitation of the vulnerability requires that a user open a specially crafted file.</p> <ul> <li>In an email attack scenario, an attacker could exploit the vulnerability by sending the specially crafted file to the user and convincing the user to open the file.</li> <li>In a web-based attack scenario, an attacker could host a website (or leverage a compromised website that accepts or hosts user-provided content) containing a specially crafted file designed to exploit the vulnerability.</li> </ul> <p>An attacker would have no way to force users to visit the website. Instead, an attacker would have to convince users to click a link, typically by way of an enticement in an email or instant message, and then convince them to open the specially crafted file.</p> Microsoft Office Visio Microsoft Yes CVE-2024-43463 Use After Free 11573 11574 11762 11763 11952 11953 10743 10744 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 10743 Remote Code Execution 10744 Important 11573 Important 11574 Important 11762 Important 11763 Important 11952 Important 11953 Important 10743 Important 10744 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10743 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10744 Click to Run 11573 11574 11762 11763 11952 11953 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 Click to Run 5002634 https://www.microsoft.com/download/details.aspx?id=106234 5002565 10743 Maybe Security Update 16.0.5465.1001 https://support.microsoft.com/help/5002634 10743 5002634 5002634 https://www.microsoft.com/download/details.aspx?id=106235 5002565 10744 Maybe Security Update 16.0.5465.1001 https://support.microsoft.com/help/5002634 10744 5002634 <a href="https://x.com/c0d3nh4ck">c0d3nh4ck</a> with <a href="https://zscaler.com/">Zscaler&#39;s ThreatLabz</a> 1.0 2024-09-10T00:00:00 <p>Information published.</p> 1.1 2024-10-06T00:00:00 <p>Updated links to security updates. This is an informational change only.</p> Microsoft SharePoint Server Remote Code Execution Vulnerability <p><strong>According to the CVSS metric, privileges required is high (PR:H). What does that mean for this vulnerability?</strong></p> <p>An authenticated attacker with Site Owner permissions can use the vulnerability to inject arbitrary code and execute this code in the context of SharePoint Server.</p> <p><strong>How could an attacker exploit the vulnerability?</strong></p> <p>An authenticated attacker with Site Owner permissions or higher could upload a specially crafted file to the targeted SharePoint Server and craft specialized API requests to trigger deserialization of file's parameters. This would enable the attacker to perform remote code execution in the context of the SharePoint Server.</p> Microsoft Office SharePoint Microsoft Yes CVE-2024-43464 Deserialization of Untrusted Data 10950 11585 11961 Remote Code Execution 10950 Remote Code Execution 11585 Remote Code Execution 11961 Critical 10950 Critical 11585 Critical 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10950 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11585 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11961 5002624 https://www.microsoft.com/download/details.aspx?id=106231 5002618 10950 Maybe Security Update 16.0.5465.1001 https://support.microsoft.com/help/5002624 10950 5002624 5002624 https://support.microsoft.com/help/5002624 10950 5002639 https://www.microsoft.com/download/details.aspx?id=106232 5002615 11585 Maybe Security Update 16.0.10414.20002 https://support.microsoft.com/help/5002639 11585 5002639 5002639 https://support.microsoft.com/help/5002639 11585 5002640 https://www.microsoft.com/download/details.aspx?id=106233 5002606 11961 Maybe Security Update 16.0.17928.20086 https://support.microsoft.com/help/5002640 11961 5002640 5002640 https://support.microsoft.com/help/5002640 11961 <a href="https://github.com/zcgonvh">zcgonvh</a> 1.0 2024-09-10T00:00:00 <p>Information published.</p> 1.1 2024-10-06T00:00:00 <p>Updated links to security updates. This is an informational change only.</p> Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability?</strong></p> <p>Any authenticated attacker could trigger this vulnerability. It does not require admin or other elevated privileges.</p> Windows Remote Desktop Licensing Service Microsoft Yes CVE-2024-43467 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 11571 11572 11923 11924 12244 10816 10855 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12244 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 9312 Remote Code Execution 10287 Remote Code Execution 9318 Remote Code Execution 9344 Remote Code Execution 10051 Remote Code Execution 10049 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11571 Important 11572 Important 11923 Important 11924 Important 12244 Important 10816 Important 10855 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12244 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5043050 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043050 5041578 11571 11572 Yes Security Update 10.0.17763.6293 https://support.microsoft.com/help/5043050 11571 11572 5043050 5043050 https://support.microsoft.com/help/5043050 11571 11572 5042881 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042881 5041160 11923 11924 Yes Security Update 10.0.20348.2700 https://support.microsoft.com/help/5042881 11923 11924 5042881 5042881 https://support.microsoft.com/help/5042881 11923 11924 5042880 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042880 11923 11924 Yes SecurityHotpatchUpdate 10.0.20348.2695 https://support.microsoft.com/help/5042880 11923 11924 5042880 5043055 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043055 5041573 12244 Yes Security Update 10.0.25398.1128 https://support.microsoft.com/help/5043055 12244 5043055 5043051 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043051 5041773 10816 10855 Yes Security Update 10.0.14393.7336 https://support.microsoft.com/help/5043051 10816 10855 5043051 5043051 https://support.microsoft.com/help/5043051 10816 10855 5043135 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043135 5041850 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.22870 https://support.microsoft.com/help/5043135 9312 10287 9318 9344 5043135 5043135 https://support.microsoft.com/help/5043135 9312 10287 9318 9344 5043087 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043087 9312 10287 9318 9344 Yes Security Only 6.0.6003.22870 https://support.microsoft.com/help/5043087 9312 10287 9318 9344 5043087 5043087 https://support.microsoft.com/help/5043087 9312 10287 9318 9344 5043129 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043129 5041838 10051 10049 Yes Monthly Rollup 6.1.7601.27320 https://support.microsoft.com/help/5043129 10051 10049 5043129 5043092 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043092 10051 10049 Yes Security Only 6.1.7601.27320 https://support.microsoft.com/help/5043092 10051 10049 5043092 5043125 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043125 5041851 10378 10379 Yes Monthly Rollup 6.2.9200.25073 https://support.microsoft.com/help/5043125 10378 10379 5043125 5043125 https://support.microsoft.com/help/5043125 10378 10379 5043138 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043138 5041828 10483 10543 Yes Monthly Rollup 6.3.9600.22175 https://support.microsoft.com/help/5043138 10483 10543 5043138 5043138 https://support.microsoft.com/help/5043138 10483 10543 <a href="https://twitter.com/lewislee53">Lewis Lee</a> <a href="https://twitter.com/ver0759">Chunyang Han</a> <a href="https://twitter.com/edwardzpeng">Zhiniang Peng</a> 1.0 2024-09-10T00:00:00 <p>Information published.</p> Microsoft SQL Server Information Disclosure Vulnerability <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> <p><strong>I am running SQL Server on my system. What action do I need to take?</strong></p> <p>Update your relevant version of SQL Server. Any applicable driver fixes are included in those updates.</p> <p><strong>I am running my own application on my system. What action do I need to take?</strong></p> <p>Update your application to use Microsoft OLE DB Driver 18 or 19. Update the drivers to the versions listed on this page, which provide protection against this vulnerability.</p> <p><strong>I am running an application from a software vendor on my system. What action do I need to take?</strong></p> <p>Consult with your application vendor if it is compatible with Microsoft OLE DB Driver 18 or 19. Update the drivers to the versions listed in this page, which provide protection against this vulnerability</p> <p><strong>There are GDR and/or CU (Cumulative Update) updates offered for my version of SQL Server. How do I know which update to use?</strong></p> <ul> <li>First, determine your SQL Server version number. For more information on determining your SQL Server version number, see <a href="https://learn.microsoft.com/en-us/troubleshoot/sql/releases/download-and-install-latest-updates">Microsoft Knowledge Base Article 321185</a> - How to determine the version, edition, and update level of SQL Server and its components.</li> <li>Second, in the table below, locate your version number or the version range that your version number falls within. The corresponding update is the one you need to install.</li> </ul> <p><strong>Note</strong> If your SQL Server version number is not represented in the table below, your SQL Server version is no longer supported. Please upgrade to the latest Service Pack or SQL Server product in order to apply this and future security updates.</p> <table> <thead> <tr> <th>Update Number</th> <th>Title</th> <th>Apply if current product version is…</th> <th>This security update also includes servicing releases up through…</th> </tr> </thead> <tbody> <tr> <td>5042578</td> <td>Security update for SQL Server 2022 CU14+GDR</td> <td>16.0.4003.1 - 16.0.4135.4</td> <td>KB 5038325 - SQL2022 RTM CU14</td> </tr> <tr> <td>5042211</td> <td>Security update for SQL Server 2022 RTM+GDR</td> <td>16.0.1000.6 - 16.0.1121.4</td> <td>KB 5040936 - Previous SQL2022 RTM GDR</td> </tr> <tr> <td>5042749</td> <td>Security update for SQL Server 2019 CU28+GDR</td> <td>15.0.4003.23 - 15.0.4385.2</td> <td>KB 5039747 - SQL2019 RTM CU28</td> </tr> <tr> <td>5042214</td> <td>Security update for SQL Server 2019 RTM+GDR</td> <td>15.0.2000.5 - 15.0.2116.2</td> <td>KB 5040986 - Previous SQL2019 RTM GDR</td> </tr> <tr> <td>5042215</td> <td>Security update for SQL Server 2017 CU31+GDR</td> <td>14.0.3006.16 - 14.0.3471.2</td> <td>KB 5040940 - SQL2017 RTM CU31</td> </tr> <tr> <td>5042217</td> <td>Security update for SQL Server 2017 RTM+GDR</td> <td>14.0.1000.169 - 14.0.2056.2</td> <td>KB 5040942 - Previous SQL2017 RTM GDR</td> </tr> <tr> <td>5042209</td> <td>Security update for SQL 2016 Azure Connect Feature Pack</td> <td>13.0.7000.253 - 13.0.7037.1</td> <td>KB 5040944 - SQL2016 Azure Connect Feature Pack</td> </tr> <tr> <td>5042207</td> <td>Security update for SQL Server 2016 SP3 RTM+GDR</td> <td>13.0.6300.2 - 13.0.6441.1</td> <td>KB 5040946 - Previous SQL2016 RTM GDR</td> </tr> </tbody> </table> <p><strong>What are the GDR and CU update designations and how do they differ?</strong></p> <p>The General Distribution Release (GDR) and Cumulative Update (CU) designations correspond to the two different servicing options in place for SQL Server baseline releases. A baseline can be either an RTM release or a Service Pack release.</p> <ul> <li>GDR updates – cumulatively only contain security updates for the given baseline.</li> <li>CU updates – cumulatively contain all functional fixes and security updates for the given baseline.</li> </ul> <p>For any given baseline, either the GDR or CU updates could be options (see below).</p> <ul> <li>If SQL Server installation is at a baseline version, you can choose either the GDR or CU update.</li> <li>If SQL Server installation has intentionally only installed past GDR updates, then choose to install the GDR update package.</li> <li>If SQL Server installation has intentionally installed previous CU updates, then chose to install the CU security update package.</li> </ul> <p><strong>Note:</strong> You are allowed to make a change from GDR updates to CU updates ONE TIME. Once a SQL Server CU update is applied to a SQL Server installation, there is NO way to go back to the GDR update path.</p> <p><strong>Can the security updates be applied to SQL Server instances on Windows Azure (IaaS)?</strong></p> <p>Yes. SQL Server instances on Windows Azure (IaaS) can be offered the security updates through Microsoft Update, or customers can download the security updates from Microsoft Download Center and apply them manually.</p> SQL Server Microsoft Yes CVE-2024-43474 Improper Null Termination 11478 11821 12145 Information Disclosure 11478 Information Disclosure 11821 Information Disclosure 12145 Important 11478 Important 11821 Important 12145 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.6 6.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L/E:U/RL:O/RC:C 11478 7.6 6.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L/E:U/RL:O/RC:C 11821 7.6 6.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L/E:U/RL:O/RC:C 12145 5042217 https://www.microsoft.com/download/details.aspx?familyid=6e5ca6fa-350d-4a60-b071-c0aa3503136e 11478 Maybe Security Update 14.0.2060.1 https://support.microsoft.com/help/5042217 11478 5042217 5042217 https://support.microsoft.com/help/5042217 11478 5042214 https://www.microsoft.com/download/details.aspx?familyid=684d2c34-425f-45b9-b685-c3ba4266a759 11821 Yes Security Update 15.0.2120.1 https://support.microsoft.com/help/5042214 11821 5042214 5042214 https://support.microsoft.com/help/5042214 11821 5042215 https://www.microsoft.com/download/details.aspx?familyid=5c1115eb-d55d-4a6d-9d44-070045a2675f 12145 Maybe Security Update 14.0.3475.1 https://support.microsoft.com/help/5042215 12145 5042215 5042215 https://support.microsoft.com/help/5042215 12145 Anonymous 1.0 2024-09-10T00:00:00 <p>Information published.</p> Microsoft Outlook for iOS Information Disclosure Vulnerability <p><strong>How do I get the update for Outlook for IOS?</strong></p> <ol> <li>Tap the Settings Icon</li> <li>Tap the iTunes &amp; App Store</li> <li>Turn on AUTOMATIC DOWNLOADS for Apps</li> </ol> <p><strong>Alternatively</strong></p> <ol> <li>Tap the App Store Icon</li> <li>Scroll down to find Microsoft Outlook</li> <li>Tap the Update button</li> </ol> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is file content.</p> Microsoft Outlook for iOS Microsoft Yes CVE-2024-43482 Improper Authorization 11685 Information Disclosure 11685 Important 11685 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11685 Release Notes https://apps.apple.com/ca/app/microsoft-outlook/id951937596 11685 Maybe Security Update 4.2435.0 https://apps.apple.com/ca/app/microsoft-outlook/id951937596 11685 Release Notes Masahiro Iida with <a href="https://www.lac.co.jp/">LAC Co., Ltd.</a> 1.0 2024-09-10T00:00:00 <p>Information published.</p> Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability <p><strong>How can I find out what version of Teams I am running?</strong></p> <ol> <li>Select the three dots (...) at the top right of the Teams window.</li> <li>Select <strong>Settings</strong></li> <li>Select <strong>About</strong>, then <strong>Version</strong>.</li> <li>The version will be displayed in a ribbon at the top of the Teams application.</li> <li>You can get the latest version from the <strong>Settings</strong> menu by selecting <strong>Check for updates</strong>.</li> </ol> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker who successfully exploits this vulnerability could elevate their privileges to perform commands as Root in the target environment.</p> Microsoft AutoUpdate (MAU) Microsoft Yes CVE-2024-43492 Improper Access Control 10949 Elevation of Privilege 10949 Important 10949 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10949 MAU https://go.microsoft.com/fwlink/p/?linkid=830196 10949 Yes Security Update 4.72 https://support.office.com/en-us/article/Check-for-Office-for-Mac-updates-automatically-bfd1e497-c24d-4754-92ab-910a4074d7c1 10949 MAU Anonymous 1.0 2024-09-10T00:00:00 <p>Information published.</p> Microsoft Excel Elevation of Privilege Vulnerability <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>Exploitation of the vulnerability requires that a user open a specially crafted file.</p> <ul> <li>In an email attack scenario, an attacker could exploit the vulnerability by sending the specially crafted file to the user and convincing the user to open the file.</li> <li>In a web-based attack scenario, an attacker could host a website (or leverage a compromised website that accepts or hosts user-provided content) containing a specially crafted file designed to exploit the vulnerability.</li> </ul> <p>An attacker would have no way to force users to visit the website. Instead, an attacker would have to convince users to click a link, typically by way of an enticement in an email or instant message, and then convince them to open the specially crafted file.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Microsoft Office Excel Microsoft Yes CVE-2024-43465 Use After Free 11573 11574 11605 11762 11763 11951 11952 11953 10739 10740 Elevation of Privilege 11573 Elevation of Privilege 11574 Elevation of Privilege 11605 Elevation of Privilege 11762 Elevation of Privilege 11763 Elevation of Privilege 11951 Elevation of Privilege 11952 Elevation of Privilege 11953 Elevation of Privilege 10739 Elevation of Privilege 10740 Important 11573 Important 11574 Important 11605 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 10739 Important 10740 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11605 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10739 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10740 Click to Run 11573 11574 11762 11763 11952 11953 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 Click to Run 5002601 https://www.microsoft.com/download/details.aspx?id=106228 5002503 11605 Maybe Security Update 16.0.10414.20000 https://support.microsoft.com/help/5002601 11605 5002601 Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 Maybe Security Update 16.89.24090815 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 Release Notes 5002605 https://www.microsoft.com/download/details.aspx?id=106226 5002587 10739 Maybe Security Update 16.0.5465.1001 https://support.microsoft.com/help/5002605 10739 5002605 5002605 https://www.microsoft.com/download/details.aspx?id=106227 5002587 10740 Maybe Security Update 16.0.5465.1001 https://support.microsoft.com/help/5002605 10740 5002605 0x140ce 1.0 2024-09-10T00:00:00 <p>Information published.</p> 1.1 2024-10-06T00:00:00 <p>Updated links to security updates. This is an informational change only.</p> Chromium: CVE-2024-8194 Type Confusion in V8 <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2024">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Channel</th> <th>Microsoft Edge Version</th> <th>Based on Chromium Version</th> <th>Date Released</th> </tr> </thead> <tbody> <tr> <td>Stable</td> <td>128.0.2739.54</td> <td>128.0.6613.113/.114</td> <td>8/29/2024</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2024-8194 11655 11655 11655 Release Notes 11655 No Security Update 128.0.2739.54 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2024-09-11T15:37:47 <p>Information published.</p> Chromium: CVE-2024-8198 Heap buffer overflow in Skia <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2024">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Channel</th> <th>Microsoft Edge Version</th> <th>Based on Chromium Version</th> <th>Date Released</th> </tr> </thead> <tbody> <tr> <td>Stable</td> <td>128.0.2739.54</td> <td>128.0.6613.113/.114</td> <td>8/29/2024</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2024-8198 11655 11655 11655 Release Notes 11655 No Security Update 128.0.2739.54 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2024-09-11T15:37:49 <p>Information published.</p> Microsoft Edge (Chromium-based) Spoofing Vulnerability <p><strong>According to the CVSS metric, user interaction is required (UI:R). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation requires the victim to perform multiple steps to trigger the vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>The user would have to click on a specially crafted URL to be compromised by the attacker.</p> <p><strong>According to the CVSS metric, successful exploitation of this vulnerability could lead to some loss of integrity (I:L)? What does that mean for this vulnerability?</strong></p> <p>The attacker is only able to modify the content of the vulnerable link to redirect the victim to a malicious site.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Channel</th> <th>Microsoft Edge Version</th> <th>Based on Chromium Version</th> <th>Date Released</th> </tr> </thead> <tbody> <tr> <td>Stable</td> <td>CVE-2024-8904,</td> <td>129.0.6668.58/.59</td> <td>9/19/2024</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2024-38221 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 11655 Spoofing 11655 Moderate 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 4.3 3.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 129.0.2792.52 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes Anonymous 1.0 2024-09-19T00:00:00 <p>Information published.</p> Microsoft SQL Server Elevation of Privilege Vulnerability <p><strong>I am running SQL Server on my system. What action do I need to take?</strong></p> <p>Update your relevant version of SQL Server. Any applicable driver fixes are included in those updates.</p> <p><strong>I am running my own application on my system. What action do I need to take?</strong></p> <p>Update your application to use Microsoft OLE DB Driver 18 or 19. Update the drivers to the versions listed on this page, which provide protection against this vulnerability.</p> <p><strong>I am running an application from a software vendor on my system. What action do I need to take?</strong></p> <p>Consult with your application vendor if it is compatible with Microsoft OLE DB Driver 18 or 19. Update the drivers to the versions listed in this page, which provide protection against this vulnerability</p> <p><strong>There are GDR and/or CU (Cumulative Update) updates offered for my version of SQL Server. How do I know which update to use?</strong></p> <ul> <li>First, determine your SQL Server version number. For more information on determining your SQL Server version number, see <a href="https://learn.microsoft.com/en-us/troubleshoot/sql/releases/download-and-install-latest-updates">Microsoft Knowledge Base Article 321185</a> - How to determine the version, edition, and update level of SQL Server and its components.</li> <li>Second, in the table below, locate your version number or the version range that your version number falls within. The corresponding update is the one you need to install.</li> </ul> <p><strong>Note</strong> If your SQL Server version number is not represented in the table below, your SQL Server version is no longer supported. Please upgrade to the latest Service Pack or SQL Server product in order to apply this and future security updates.</p> <table> <thead> <tr> <th>Update Number</th> <th>Title</th> <th>Apply if current product version is…</th> <th>This security update also includes servicing releases up through…</th> </tr> </thead> <tbody> <tr> <td>5042578</td> <td>Security update for SQL Server 2022 CU14+GDR</td> <td>16.0.4003.1 - 16.0.4135.4</td> <td>KB 5038325 - SQL2022 RTM CU14</td> </tr> <tr> <td>5042211</td> <td>Security update for SQL Server 2022 RTM+GDR</td> <td>16.0.1000.6 - 16.0.1121.4</td> <td>KB 5040936 - Previous SQL2022 RTM GDR</td> </tr> <tr> <td>5042749</td> <td>Security update for SQL Server 2019 CU28+GDR</td> <td>15.0.4003.23 - 15.0.4385.2</td> <td>KB 5039747 - SQL2019 RTM CU28</td> </tr> <tr> <td>5042214</td> <td>Security update for SQL Server 2019 RTM+GDR</td> <td>15.0.2000.5 - 15.0.2116.2</td> <td>KB 5040986 - Previous SQL2019 RTM GDR</td> </tr> <tr> <td>5042215</td> <td>Security update for SQL Server 2017 CU31+GDR</td> <td>14.0.3006.16 - 14.0.3471.2</td> <td>KB 5040940 - SQL2017 RTM CU31</td> </tr> <tr> <td>5042217</td> <td>Security update for SQL Server 2017 RTM+GDR</td> <td>14.0.1000.169 - 14.0.2056.2</td> <td>KB 5040942 - Previous SQL2017 RTM GDR</td> </tr> <tr> <td>5042209</td> <td>Security update for SQL 2016 Azure Connect Feature Pack</td> <td>13.0.7000.253 - 13.0.7037.1</td> <td>KB 5040944 - SQL2016 Azure Connect Feature Pack</td> </tr> <tr> <td>5042207</td> <td>Security update for SQL Server 2016 SP3 RTM+GDR</td> <td>13.0.6300.2 - 13.0.6441.1</td> <td>KB 5040946 - Previous SQL2016 RTM GDR</td> </tr> </tbody> </table> <p><strong>What are the GDR and CU update designations and how do they differ?</strong></p> <p>The General Distribution Release (GDR) and Cumulative Update (CU) designations correspond to the two different servicing options in place for SQL Server baseline releases. A baseline can be either an RTM release or a Service Pack release.</p> <ul> <li>GDR updates – cumulatively only contain security updates for the given baseline.</li> <li>CU updates – cumulatively contain all functional fixes and security updates for the given baseline.</li> </ul> <p>For any given baseline, either the GDR or CU updates could be options (see below).</p> <ul> <li>If SQL Server installation is at a baseline version, you can choose either the GDR or CU update.</li> <li>If SQL Server installation has intentionally only installed past GDR updates, then choose to install the GDR update package.</li> <li>If SQL Server installation has intentionally installed previous CU updates, then chose to install the CU security update package.</li> </ul> <p><strong>Note:</strong> You are allowed to make a change from GDR updates to CU updates ONE TIME. Once a SQL Server CU update is applied to a SQL Server installation, there is NO way to go back to the GDR update path.</p> <p><strong>Can the security updates be applied to SQL Server instances on Windows Azure (IaaS)?</strong></p> <p>Yes. SQL Server instances on Windows Azure (IaaS) can be offered the security updates through Microsoft Update, or customers can download the security updates from Microsoft Download Center and apply them manually.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain administrator privileges.</p> SQL Server Microsoft Yes CVE-2024-37965 Improper Input Validation 11478 11821 12048 12053 12145 12147 12407 12408 Elevation of Privilege 11478 Elevation of Privilege 11821 Elevation of Privilege 12048 Elevation of Privilege 12053 Elevation of Privilege 12145 Elevation of Privilege 12147 Elevation of Privilege 12407 Elevation of Privilege 12408 Important 11478 Important 11821 Important 12048 Important 12053 Important 12145 Important 12147 Important 12407 Important 12408 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11478 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11821 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12048 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12053 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12145 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12147 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12407 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12408 5042217 https://www.microsoft.com/download/details.aspx?familyid=6e5ca6fa-350d-4a60-b071-c0aa3503136e 11478 Maybe Security Update 14.0.2060.1 https://support.microsoft.com/help/5042217 11478 5042217 5042217 https://support.microsoft.com/help/5042217 11478 5042214 https://www.microsoft.com/download/details.aspx?familyid=684d2c34-425f-45b9-b685-c3ba4266a759 11821 Yes Security Update 15.0.2120.1 https://support.microsoft.com/help/5042214 11821 5042214 5042214 https://support.microsoft.com/help/5042214 11821 5042207 https://www.microsoft.com/download/details.aspx?familyid=bcaa232a-0e0c-4ae9-b4d8-7a27d8453595 12048 Maybe Security Update 13.0.6445.1 https://support.microsoft.com/help/5042207 12048 5042207 5042207 https://support.microsoft.com/help/5042207 12048 5042209 https://www.microsoft.com/download/details.aspx?familyid=13dffaf9-0377-4a30-b9b8-9bf8f2629aa6 12053 Maybe Security Update 13.0.7040.1 https://support.microsoft.com/help/5042209 12053 5042209 5042209 https://support.microsoft.com/help/5042209 12053 5042215 https://www.microsoft.com/download/details.aspx?familyid=5c1115eb-d55d-4a6d-9d44-070045a2675f 12145 Maybe Security Update 14.0.3475.1 https://support.microsoft.com/help/5042215 12145 5042215 5042215 https://support.microsoft.com/help/5042215 12145 5042211 https://www.microsoft.com/download/details.aspx?familyid=b6de42f6-dec1-4212-80fd-820f30b5b9ac 12147 Yes Security Update 16.0.1125.1 https://support.microsoft.com/help/5042211 12147 5042211 5042211 https://support.microsoft.com/help/5042211 12147 5042578 https://www.microsoft.com/download/details.aspx?familyid=a2449ad4-3be2-407b-9e56-c109d321a5b9 12407 Yes Security Update 16.0.4140.3 https://support.microsoft.com/help/5042578 12407 5042578 5042578 https://support.microsoft.com/help/5042578 12407 5042749 https://www.microsoft.com/download/details.aspx?familyid=971b1a77-4e8d-4dff-9b4f-3051fb41f8c6 12408 Yes Security Update 15.0.4390.2 https://support.microsoft.com/help/5042749 12408 5042749 5042749 https://support.microsoft.com/help/5042749 12408 Anonymous 1.0 2024-09-10T00:00:00 <p>Information published.</p> Microsoft SQL Server Elevation of Privilege Vulnerability <p><strong>Where can I find more information about the known functional issues that occur in the Change Data Capture (CDC) feature and that were introduced in the September 2024 GDR?</strong></p> <p>The known functional issues are addressed by the October 2024 GDR updates listed in the Security Updates table. For more information about the known issue, including workarounds, refer to the following links for the September GDR Knowledge Base articles, based on the SQL Server version you have installed:</p> <ul> <li><a href="https://prod.support.services.microsoft.com/topic/560e6e4c-1f49-4c18-9eb7-054e9fdee3c7">KB5042578 - Description of the security update for SQL Server 2022 CU14: September 10, 2024</a></li> <li><a href="https://prod.support.services.microsoft.com/topic/d5bc8941-bdb3-4353-96a6-18d674788c60">KB5042211 - Description of the security update for SQL Server 2022 GDR: September 10, 2024</a></li> <li><a href="https://prod.support.services.microsoft.com/topic/17402ce5-07d3-4e30-9037-9ef997104f34">KB5042749 - Description of the security update for SQL Server 2019 CU28: September 10, 2024</a></li> <li><a href="https://prod.support.services.microsoft.com/topic/a178ef94-4df8-452f-a1b8-f70d7ab7745f">KB5042214 - Description of the security update for SQL Server 2019 GDR: September 10, 2024</a></li> <li><a href="https://prod.support.services.microsoft.com/topic/55bba26f-548d-466c-9c48-edfb51a53a8a">KB5042215 - Description of the security update for SQL Server 2017 CU31: September 10, 2024</a></li> <li><a href="https://prod.support.services.microsoft.com/topic/664b5d51-c175-4da1-8c65-e678797b34ba">KB5042217 - Description of the security update for SQL Server 2017 GDR: September 10, 2024</a></li> <li><a href="https://prod.support.services.microsoft.com/topic/1e26b7ce-79d3-4c73-be31-ad7969336d22">KB5042209 - Description of the security update for SQL Server 2016 SP3 Azure Connect Feature Pack: September 10, 2024</a></li> <li><a href="https://prod.support.services.microsoft.com/topic/e27a41df-009d-4a50-85e7-dc8f06b9a5a5">KB5042207 - Description of the security update for SQL Server 2016 SP3 GDR: September 10, 2024</a></li> </ul> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain administrator privileges.</p> <p><strong>I am running SQL Server on my system. What action do I need to take?</strong></p> <p>Update your relevant version of SQL Server. Any applicable driver fixes are included in those updates.</p> <p><strong>I am running my own application on my system. What action do I need to take?</strong></p> <p>Update your application to use Microsoft OLE DB Driver 18 or 19. Update the drivers to the versions listed on this page, which provide protection against this vulnerability.</p> <p><strong>I am running an application from a software vendor on my system. What action do I need to take?</strong></p> <p>Consult with your application vendor if it is compatible with Microsoft OLE DB Driver 18 or 19. Update the drivers to the versions listed in this page, which provide protection against this vulnerability</p> <p><strong>There are GDR and/or CU (Cumulative Update) updates offered for my version of SQL Server. How do I know which update to use?</strong></p> <ul> <li>First, determine your SQL Server version number. For more information on determining your SQL Server version number, see <a href="https://learn.microsoft.com/en-us/troubleshoot/sql/releases/download-and-install-latest-updates">Microsoft Knowledge Base Article 321185</a> - How to determine the version, edition, and update level of SQL Server and its components.</li> <li>Second, in the table below, locate your version number or the version range that your version number falls within. The corresponding update is the one you need to install.</li> </ul> <p><strong>Note</strong> If your SQL Server version number is not represented in the table below, your SQL Server version is no longer supported. Please upgrade to the latest Service Pack or SQL Server product in order to apply this and future security updates.</p> <table> <thead> <tr> <th>Update Number</th> <th>Title</th> <th>Apply if current product version is…</th> <th>This security update also includes servicing releases up through…</th> </tr> </thead> <tbody> <tr> <td>5046059</td> <td>Security update for SQL Server 2022 CU15+GDR</td> <td>16.0.4003.1 - 16.0.4145.4</td> <td>KB 5041321 - SQL2022 RTM CU15</td> </tr> <tr> <td>5046057</td> <td>Security update for SQL Server 2022 RTM+GDR</td> <td>16.0.1000.6 - 16.0.1125.1</td> <td>KB 5042211 - SQL2022 RTM GDR</td> </tr> <tr> <td>5046060</td> <td>Security update for SQL Server 2019 CU28+GDR</td> <td>15.0.4003.23 - 15.0.4390.2</td> <td>KB 5042749 - SQL2019 RTM CU28 GDR</td> </tr> <tr> <td>5046056</td> <td>Security update for SQL Server 2019 RTM+GDR</td> <td>15.0.2000.5 - 15.0.2120.1</td> <td>KB 5042214 - SQL2019 RTM GDR</td> </tr> <tr> <td>5046061</td> <td>Security update for SQL Server 2017 CU31+GDR</td> <td>14.0.3006.16 - 14.0.3475.1</td> <td>KB 5040940 - SQL2017 RTM CU31</td> </tr> <tr> <td>5046058</td> <td>Security update for SQL Server 2017 RTM+GDR</td> <td>14.0.1000.169 - 14.0.2060.1</td> <td>KB 5042217 - SQL2017 RTM GDR</td> </tr> <tr> <td>5046062</td> <td>Security update for SQL 2016 Azure Connect Feature Pack</td> <td>13.0.7000.253 - 13.0.7040.1</td> <td>KB 5042209 - SQL2016 Azure Connect Feature Pack GDR</td> </tr> <tr> <td>5046063</td> <td>Security update for SQL Server 2016 SP3 RTM+GDR</td> <td>13.0.6300.2 - 13.0.6445.1</td> <td>KB 5042207 - SQL2016 RTM GDR</td> </tr> </tbody> </table> <p><strong>What are the GDR and CU update designations and how do they differ?</strong></p> <p>The General Distribution Release (GDR) and Cumulative Update (CU) designations correspond to the two different servicing options in place for SQL Server baseline releases. A baseline can be either an RTM release or a Service Pack release.</p> <ul> <li>GDR updates – cumulatively only contain security updates for the given baseline.</li> <li>CU updates – cumulatively contain all functional fixes and security updates for the given baseline.</li> </ul> <p>For any given baseline, either the GDR or CU updates could be options (see below).</p> <ul> <li>If SQL Server installation is at a baseline version, you can choose either the GDR or CU update.</li> <li>If SQL Server installation has intentionally only installed past GDR updates, then choose to install the GDR update package.</li> <li>If SQL Server installation has intentionally installed previous CU updates, then chose to install the CU security update package.</li> </ul> <p><strong>Note:</strong> You are allowed to make a change from GDR updates to CU updates ONE TIME. Once a SQL Server CU update is applied to a SQL Server installation, there is NO way to go back to the GDR update path.</p> <p><strong>Can the security updates be applied to SQL Server instances on Windows Azure (IaaS)?</strong></p> <p>Yes. SQL Server instances on Windows Azure (IaaS) can be offered the security updates through Microsoft Update, or customers can download the security updates from Microsoft Download Center and apply them manually.</p> SQL Server Microsoft Yes CVE-2024-37341 Improper Access Control 11478 11821 12048 12053 12145 12147 12428 12408 Elevation of Privilege 11478 Elevation of Privilege 11821 Elevation of Privilege 12048 Elevation of Privilege 12053 Elevation of Privilege 12145 Elevation of Privilege 12147 Elevation of Privilege 12428 Elevation of Privilege 12408 Important 11478 Important 11821 Important 12048 Important 12053 Important 12145 Important 12147 Important 12428 Important 12408 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11478 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11821 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12048 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12053 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12145 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12147 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12428 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12408 5046058 https://www.microsoft.com/download/details.aspx?familyid=834df7fc-efea-4cc9-ad19-177e75abe11b 11478 Maybe Security Update 14.0.2065.1 https://support.microsoft.com/help/5046058 11478 5046058 5046056 https://www.microsoft.com/download/details.aspx?familyid=68a3ff54-9851-4035-8981-03ca6cfb2cdf 11821 Yes Security Update 15.0.2125.1 https://support.microsoft.com/help/5046056 11821 5046056 5046063 https://www.microsoft.com/download/details.aspx?familyid=5df9fdcd-6063-4709-8a46-d6e62ce83660 12048 Maybe Security Update 13.0.6450.1 https://support.microsoft.com/help/5046063 12048 5046063 5046062 https://www.microsoft.com/download/details.aspx?familyid=1529ce67-e6db-4079-97c5-bfbe9c0db2cf 12053 Maybe Security Update 13.0.7045.2 https://support.microsoft.com/help/5046062 12053 5046062 5046061 https://www.microsoft.com/download/details.aspx?familyid=3539dc62-ca90-4262-9359-83f847383684 12145 Maybe Security Update 14.0.3480.1 https://support.microsoft.com/help/5046061 12145 5046061 5046057 https://www.microsoft.com/download/details.aspx?familyid=e92ae40f-1f5f-4c92-992e-9f4268a50a30 12147 Yes Security Update 16.0.1130.5 https://support.microsoft.com/help/5046057 12147 5046057 5046059 https://www.microsoft.com/download/details.aspx?familyid=a86e15b4-deac-4108-be7f-d2f051f3a004 12428 Yes Security Update 16.0.4150.1 https://support.microsoft.com/help/5046059 12428 5046059 5046060 https://www.microsoft.com/download/details.aspx?familyid=98e74abe-76bb-4714-a7d0-16cb1237c19c 12408 Yes Security Update 15.0.4395.2 https://support.microsoft.com/help/5046060 12408 5046060 5046060 https://support.microsoft.com/help/5046060 12408 Anonymous 2.0 2024-10-08T00:00:00 <p>To address known functional issues that occur in the Change Data Capture (CDC) feature that were introduced in the September 2024 GDR, Microsoft has released updated GDR for the following versions of SQL Server: SQL Server 2016, SQL Server 2017, SQL Server 2019, and SQL Server 2022. For more information see the FAQ section of CVE-2024-37341.</p> 1.0 2024-09-10T00:00:00 <p>Information published.</p> Windows Installer Elevation of Privilege Vulnerability <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>Windows 11, version 24H2 is not generally available yet. Why are there updates for this version of Windows listed in the Security Updates table?</strong></p> <p>The new Copilot+ devices that are now publicly available come with Windows 11, version 24H2 installed. Customers with these devices need to know about any vulnerabilities that affect their machine and to install the updates if they are not receiving automatic updates. Note that the general availability date for Windows 11, version 24H2 is scheduled for later this year.</p> Windows Installer Microsoft Yes CVE-2024-38014 Improper Privilege Management 11568 11569 11571 11572 11923 11924 11926 11927 11929 11930 11931 12085 12086 12097 12098 12099 12242 12243 12244 12389 12390 10729 10735 10852 10853 10816 10855 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11926 Elevation of Privilege 11927 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12085 Elevation of Privilege 12086 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12244 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 9312 Elevation of Privilege 10287 Elevation of Privilege 9318 Elevation of Privilege 9344 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 12085 Important 12086 Important 12097 Important 12098 Important 12099 Important 12242 Important 12243 Important 12244 Important 12389 Important 12390 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:Yes;Latest Software Release:Exploitation Detected 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11568 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11569 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11571 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11572 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11923 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11924 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11926 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11927 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11929 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11930 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11931 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 12085 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 12086 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 12097 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 12098 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 12099 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 12242 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 12243 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 12244 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 12389 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 12390 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10729 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10735 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10852 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10853 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10816 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10855 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 9312 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10287 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 9318 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 9344 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10051 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10049 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10378 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10379 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10483 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10543 5043050 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043050 5041578 11568 11569 11571 11572 Yes Security Update 10.0.17763.6293 https://support.microsoft.com/help/5043050 11568 11569 11571 11572 5043050 5043050 https://support.microsoft.com/help/5043050 11568 11569 11571 11572 5042881 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042881 5041160 11923 11924 Yes Security Update 10.0.20348.2700 https://support.microsoft.com/help/5042881 11923 11924 5042881 5042881 https://support.microsoft.com/help/5042881 11923 11924 5042880 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042880 11923 11924 Yes SecurityHotpatchUpdate 10.0.20348.2695 https://support.microsoft.com/help/5042880 11923 11924 5042880 5043067 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043067 5041592 11926 11927 Yes Security Update 10.0.22000.3197 https://support.microsoft.com/help/5043067 11926 11927 5043067 5043067 https://support.microsoft.com/help/5043067 11926 11927 5043064 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043064 5041580 11929 11930 11931 Yes Security Update 10.0.19044.4894 https://support.microsoft.com/help/5043064 11929 11930 11931 5043064 5043064 https://support.microsoft.com/help/5043064 11929 11930 11931 12097 12098 12099 5043076 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043076 5041585 12085 12086 Yes Security Update 10.0.22621.4169 https://support.microsoft.com/help/5043076 12085 12086 5043076 5043076 https://support.microsoft.com/help/5043076 12085 12086 12242 12243 5043064 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043064 5041580 12097 12098 12099 Yes Security Update 10.0.19045.4894 https://support.microsoft.com/help/5043064 12097 12098 12099 5043064 5043076 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043076 5041585 12242 12243 Yes Security Update 10.0.22631.4169 https://support.microsoft.com/help/5043076 12242 12243 5043076 5043055 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043055 5041573 12244 Yes Security Update 10.0.25398.1128 https://support.microsoft.com/help/5043055 12244 5043055 5043080 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043080 12389 12390 Yes Security Update 10.0.26100.1742 https://support.microsoft.com/help/5043080 12389 12390 5043080 5043080 https://support.microsoft.com/help/5043080 12389 12390 5043083 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043083 5041782 10729 10735 Yes Security Update 10.0.10240.20766 https://support.microsoft.com/help/5043083 10729 10735 5043083 5043083 https://support.microsoft.com/help/5043083 10729 10735 5043051 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043051 5041773 10852 10853 10816 10855 Yes Security Update 10.0.14393.7336 https://support.microsoft.com/help/5043051 10852 10853 10816 10855 5043051 5043051 https://support.microsoft.com/help/5043051 10852 10853 10816 10855 5043135 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043135 5041850 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.22870 https://support.microsoft.com/help/5043135 9312 10287 9318 9344 5043135 5043135 https://support.microsoft.com/help/5043135 9312 10287 9318 9344 5043087 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043087 9312 10287 9318 9344 Yes Security Only 6.0.6003.22870 https://support.microsoft.com/help/5043087 9312 10287 9318 9344 5043087 5043087 https://support.microsoft.com/help/5043087 9312 10287 9318 9344 5043129 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043129 5041838 10051 10049 Yes Monthly Rollup 6.1.7601.27320 https://support.microsoft.com/help/5043129 10051 10049 5043129 5043092 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043092 10051 10049 Yes Security Only 6.1.7601.27320 https://support.microsoft.com/help/5043092 10051 10049 5043092 5043125 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043125 5041851 10378 10379 Yes Monthly Rollup 6.2.9200.25073 https://support.microsoft.com/help/5043125 10378 10379 5043125 5043125 https://support.microsoft.com/help/5043125 10378 10379 5043138 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043138 5041828 10483 10543 Yes Monthly Rollup 6.3.9600.22175 https://support.microsoft.com/help/5043138 10483 10543 5043138 5043138 https://support.microsoft.com/help/5043138 10483 10543 <a href="https://www.linkedin.com/in/michael-baer-a4a947105/">Michael Baer</a> with <a href="https://www.sec-consult.com/">SEC Consult Vulnerability Lab</a> 1.0 2024-09-10T00:00:00 <p>Information published.</p> PowerShell Elevation of Privilege Vulnerability <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could elevate their user privileges from those of a restrained user to an unrestrained WDAC user.</p> <p><strong>Windows 11, version 24H2 is not generally available yet. Why are there updates for this version of Windows listed in the Security Updates table?</strong></p> <p>The new Copilot+ devices that are now publicly available come with Windows 11, version 24H2 installed. Customers with these devices need to know about any vulnerabilities that affect their machine and to install the updates if they are not receiving automatic updates. Note that the general availability date for Windows 11, version 24H2 is scheduled for later this year.</p> Windows PowerShell Microsoft Yes CVE-2024-38046 Improper Input Validation 11568 11569 11571 11572 11923 11924 11926 11927 11929 11930 11931 12085 12086 12097 12098 12099 12242 12243 12244 12389 12390 10729 10735 10852 10853 10816 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11926 Elevation of Privilege 11927 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12085 Elevation of Privilege 12086 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12244 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 12085 Important 12086 Important 12097 Important 12098 Important 12099 Important 12242 Important 12243 Important 12244 Important 12389 Important 12390 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12085 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12086 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12244 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5043050 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043050 5041578 11568 11569 11571 11572 Yes Security Update 10.0.17763.6293 https://support.microsoft.com/help/5043050 11568 11569 11571 11572 5043050 5043050 https://support.microsoft.com/help/5043050 11568 11569 11571 11572 5042881 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042881 5041160 11923 11924 Yes Security Update 10.0.20348.2700 https://support.microsoft.com/help/5042881 11923 11924 5042881 5042881 https://support.microsoft.com/help/5042881 11923 11924 5042880 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042880 11923 11924 Yes SecurityHotpatchUpdate 10.0.20348.2695 https://support.microsoft.com/help/5042880 11923 11924 5042880 5043067 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043067 5041592 11926 11927 Yes Security Update 10.0.22000.3197 https://support.microsoft.com/help/5043067 11926 11927 5043067 5043067 https://support.microsoft.com/help/5043067 11926 11927 5043064 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043064 5041580 11929 11930 11931 Yes Security Update 10.0.19044.4894 https://support.microsoft.com/help/5043064 11929 11930 11931 5043064 5043064 https://support.microsoft.com/help/5043064 11929 11930 11931 12097 12098 12099 5043076 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043076 5041585 12085 12086 Yes Security Update 10.0.22621.4169 https://support.microsoft.com/help/5043076 12085 12086 5043076 5043076 https://support.microsoft.com/help/5043076 12085 12086 12242 12243 5043064 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043064 5041580 12097 12098 12099 Yes Security Update 10.0.19045.4894 https://support.microsoft.com/help/5043064 12097 12098 12099 5043064 5043076 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043076 5041585 12242 12243 Yes Security Update 10.0.22631.4169 https://support.microsoft.com/help/5043076 12242 12243 5043076 5043055 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043055 5041573 12244 Yes Security Update 10.0.25398.1128 https://support.microsoft.com/help/5043055 12244 5043055 5043080 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043080 12389 12390 Yes Security Update 10.0.26100.1742 https://support.microsoft.com/help/5043080 12389 12390 5043080 5043080 https://support.microsoft.com/help/5043080 12389 12390 5043083 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043083 5041782 10729 10735 Yes Security Update 10.0.10240.20766 https://support.microsoft.com/help/5043083 10729 10735 5043083 5043083 https://support.microsoft.com/help/5043083 10729 10735 5043051 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043051 5041773 10852 10853 10816 10855 Yes Security Update 10.0.14393.7336 https://support.microsoft.com/help/5043051 10852 10853 10816 10855 5043051 5043051 https://support.microsoft.com/help/5043051 10852 10853 10816 10855 <a href="https://twitter.com/bohops">Jimmy Bayne</a> 1.0 2024-09-10T00:00:00 <p>Information published.</p> Windows Mark of the Web Security Feature Bypass Vulnerability <p><strong>How could an attacker exploit the vulnerability?</strong></p> <p>To exploit this vulnerability, an attacker could host a file on an attacker-controlled server, then convince a targeted user to download and open the file. This could allow the attacker to interfere with the Mark of the Web functionality.</p> <p>Please see <a href="https://learn.microsoft.com/en-us/deployoffice/security/internet-macros-blocked#additional-information-about-mark-of-the-web">Additional information about Mark of the Web</a> for further clarification</p> <p><strong>Windows 11, version 24H2 is not generally available yet. Why are there updates for this version of Windows listed in the Security Updates table?</strong></p> <p>The new Copilot+ devices that are now publicly available come with Windows 11, version 24H2 installed. Customers with these devices need to know about any vulnerabilities that affect their machine and to install the updates if they are not receiving automatic updates. Note that the general availability date for Windows 11, version 24H2 is scheduled for later this year.</p> <p><strong>According to the CVSS metric, successful exploitation of this vulnerability could lead to some loss of integrity (I:L) and some loss of availability (A:L). What does that mean for this vulnerability?</strong></p> <p>An attacker can craft a malicious file that would evade Mark of the Web (MOTW) defenses, resulting in a limited loss of integrity and availability of security features such as SmartScreen Application Reputation security check and/or the legacy Windows Attachment Services security prompt.</p> Windows Mark of the Web (MOTW) Microsoft Yes CVE-2024-38217 Protection Mechanism Failure 11568 11569 11571 11572 11923 11924 11926 11927 11929 11930 11931 12085 12086 12097 12098 12099 12242 12243 12244 12389 12390 10729 10735 10852 10853 10816 10855 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Security Feature Bypass 11568 Security Feature Bypass 11569 Security Feature Bypass 11571 Security Feature Bypass 11572 Security Feature Bypass 11923 Security Feature Bypass 11924 Security Feature Bypass 11926 Security Feature Bypass 11927 Security Feature Bypass 11929 Security Feature Bypass 11930 Security Feature Bypass 11931 Security Feature Bypass 12085 Security Feature Bypass 12086 Security Feature Bypass 12097 Security Feature Bypass 12098 Security Feature Bypass 12099 Security Feature Bypass 12242 Security Feature Bypass 12243 Security Feature Bypass 12244 Security Feature Bypass 12389 Security Feature Bypass 12390 Security Feature Bypass 10729 Security Feature Bypass 10735 Security Feature Bypass 10852 Security Feature Bypass 10853 Security Feature Bypass 10816 Security Feature Bypass 10855 Security Feature Bypass 9312 Security Feature Bypass 10287 Security Feature Bypass 9318 Security Feature Bypass 9344 Security Feature Bypass 10051 Security Feature Bypass 10049 Security Feature Bypass 10378 Security Feature Bypass 10379 Security Feature Bypass 10483 Security Feature Bypass 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 12085 Important 12086 Important 12097 Important 12098 Important 12099 Important 12242 Important 12243 Important 12244 Important 12389 Important 12390 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:Yes;Exploited:Yes;Latest Software Release:Exploitation Detected 5.4 5.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:F/RL:O/RC:C 11568 5.4 5.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:F/RL:O/RC:C 11569 5.4 5.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:F/RL:O/RC:C 11571 5.4 5.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:F/RL:O/RC:C 11572 5.4 5.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:F/RL:O/RC:C 11923 5.4 5.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:F/RL:O/RC:C 11924 5.4 5.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:F/RL:O/RC:C 11926 5.4 5.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:F/RL:O/RC:C 11927 5.4 5.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:F/RL:O/RC:C 11929 5.4 5.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:F/RL:O/RC:C 11930 5.4 5.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:F/RL:O/RC:C 11931 5.4 5.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:F/RL:O/RC:C 12085 5.4 5.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:F/RL:O/RC:C 12086 5.4 5.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:F/RL:O/RC:C 12097 5.4 5.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:F/RL:O/RC:C 12098 5.4 5.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:F/RL:O/RC:C 12099 5.4 5.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:F/RL:O/RC:C 12242 5.4 5.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:F/RL:O/RC:C 12243 5.4 5.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:F/RL:O/RC:C 12244 5.4 5.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:F/RL:O/RC:C 12389 5.4 5.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:F/RL:O/RC:C 12390 5.4 5.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:F/RL:O/RC:C 10729 5.4 5.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:F/RL:O/RC:C 10735 5.4 5.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:F/RL:O/RC:C 10852 5.4 5.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:F/RL:O/RC:C 10853 5.4 5.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:F/RL:O/RC:C 10816 5.4 5.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:F/RL:O/RC:C 10855 5.4 5.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:F/RL:O/RC:C 9312 5.4 5.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:F/RL:O/RC:C 10287 5.4 5.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:F/RL:O/RC:C 9318 5.4 5.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:F/RL:O/RC:C 9344 5.4 5.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:F/RL:O/RC:C 10051 5.4 5.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:F/RL:O/RC:C 10049 5.4 5.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:F/RL:O/RC:C 10378 5.4 5.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:F/RL:O/RC:C 10379 5.4 5.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:F/RL:O/RC:C 10483 5.4 5.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:F/RL:O/RC:C 10543 5043050 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043050 5041578 11568 11569 11571 11572 Yes Security Update 10.0.17763.6293 https://support.microsoft.com/help/5043050 11568 11569 11571 11572 5043050 5043050 https://support.microsoft.com/help/5043050 11568 11569 11571 11572 5042881 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042881 5041160 11923 11924 Yes Security Update 10.0.20348.2700 https://support.microsoft.com/help/5042881 11923 11924 5042881 5042881 https://support.microsoft.com/help/5042881 11923 11924 5042880 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042880 11923 11924 Yes SecurityHotpatchUpdate 10.0.20348.2695 https://support.microsoft.com/help/5042880 11923 11924 5042880 5043067 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043067 5041592 11926 11927 Yes Security Update 10.0.22000.3197 https://support.microsoft.com/help/5043067 11926 11927 5043067 5043067 https://support.microsoft.com/help/5043067 11926 11927 5043064 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043064 5041580 11929 11930 11931 Yes Security Update 10.0.19044.4894 https://support.microsoft.com/help/5043064 11929 11930 11931 5043064 5043064 https://support.microsoft.com/help/5043064 11929 11930 11931 12097 12098 12099 5043076 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043076 5041585 12085 12086 Yes Security Update 10.0.22621.4169 https://support.microsoft.com/help/5043076 12085 12086 5043076 5043076 https://support.microsoft.com/help/5043076 12085 12086 12242 12243 5043064 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043064 5041580 12097 12098 12099 Yes Security Update 10.0.19045.4894 https://support.microsoft.com/help/5043064 12097 12098 12099 5043064 5043076 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043076 5041585 12242 12243 Yes Security Update 10.0.22631.4169 https://support.microsoft.com/help/5043076 12242 12243 5043076 5043055 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043055 5041573 12244 Yes Security Update 10.0.25398.1128 https://support.microsoft.com/help/5043055 12244 5043055 5043080 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043080 12389 12390 Yes Security Update 10.0.26100.1742 https://support.microsoft.com/help/5043080 12389 12390 5043080 5043080 https://support.microsoft.com/help/5043080 12389 12390 5043083 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043083 5041782 10729 10735 Yes Security Update 10.0.10240.20766 https://support.microsoft.com/help/5043083 10729 10735 5043083 5043083 https://support.microsoft.com/help/5043083 10729 10735 5043051 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043051 5041773 10852 10853 10816 10855 Yes Security Update 10.0.14393.7336 https://support.microsoft.com/help/5043051 10852 10853 10816 10855 5043051 5043051 https://support.microsoft.com/help/5043051 10852 10853 10816 10855 5043135 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043135 5041850 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.22870 https://support.microsoft.com/help/5043135 9312 10287 9318 9344 5043135 5043135 https://support.microsoft.com/help/5043135 9312 10287 9318 9344 5043087 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043087 9312 10287 9318 9344 Yes Security Only 6.0.6003.22870 https://support.microsoft.com/help/5043087 9312 10287 9318 9344 5043087 5043087 https://support.microsoft.com/help/5043087 9312 10287 9318 9344 5043129 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043129 5041838 10051 10049 Yes Monthly Rollup 6.1.7601.27320 https://support.microsoft.com/help/5043129 10051 10049 5043129 5043092 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043092 10051 10049 Yes Security Only 6.1.7601.27320 https://support.microsoft.com/help/5043092 10051 10049 5043092 5043125 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043125 5041851 10378 10379 Yes Monthly Rollup 6.2.9200.25073 https://support.microsoft.com/help/5043125 10378 10379 5043125 5043125 https://support.microsoft.com/help/5043125 10378 10379 5043138 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043138 5041828 10483 10543 Yes Monthly Rollup 6.3.9600.22175 https://support.microsoft.com/help/5043138 10483 10543 5043138 5043138 https://support.microsoft.com/help/5043138 10483 10543 <a href="https://twitter.com/dez_">Joe Desimone</a> with Elastic Security 1.0 2024-09-10T00:00:00 <p>Information published.</p> Microsoft Publisher Security Feature Bypass Vulnerability <p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could bypass Office macro policies used to block untrusted or malicious files.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L), privileges are required (PR:L) and user interaction is required (UI:R). How could an attacker exploit this security feature bypass vulnerability?</strong></p> <p>The attack itself is carried out locally by a user with authentication to the targeted system. An authenticated attacker could exploit the vulnerability by convincing a victim, through social engineering, to download and open a specially crafted file from a website which could lead to a local attack on the victim computer.</p> Microsoft Office Publisher Microsoft Yes CVE-2024-38226 Protection Mechanism Failure 11573 11574 11952 11953 10749 10750 Security Feature Bypass 11573 Security Feature Bypass 11574 Security Feature Bypass 11952 Security Feature Bypass 11953 Security Feature Bypass 10749 Security Feature Bypass 10750 Important 11573 Important 11574 Important 11952 Important 11953 Important 10749 Important 10750 Publicly Disclosed:No;Exploited:Yes;Latest Software Release:Exploitation Detected 7.3 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11573 7.3 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11574 7.3 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11952 7.3 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11953 7.3 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10749 7.3 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10750 Click to Run 11573 11574 11952 11953 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11952 11953 Click to Run 5002566 https://www.microsoft.com/download/details.aspx?id=106229 5002492 10749 Maybe Security Update 16.0.5465.1001 https://support.microsoft.com/help/5002566 10749 5002566 5002566 https://www.microsoft.com/download/details.aspx?id=106230 5002492 10750 Maybe Security Update 16.0.5465.1001 https://support.microsoft.com/help/5002566 10750 5002566 1.0 2024-09-10T00:00:00 <p>Information published.</p> 1.1 2024-10-06T00:00:00 <p>Updated links to security updates. This is an informational change only.</p> Microsoft SharePoint Server Remote Code Execution Vulnerability <p><strong>According to the CVSS metric, privileges required is high (PR:H). What does that mean for this vulnerability?</strong></p> <p>An authenticated attacker with Site Owner permissions can use the vulnerability to inject arbitrary code and execute this code in the context of SharePoint Server.</p> <p><strong>How could an attacker exploit the vulnerability?</strong></p> <p>An authenticated attacker with Site Owner permissions or higher could upload a specially crafted file to the targeted SharePoint Server and craft specialized API requests to trigger deserialization of file's parameters. This would enable the attacker to perform remote code execution in the context of the SharePoint Server.</p> Microsoft Office SharePoint Microsoft Yes CVE-2024-38227 Improper Neutralization of Special Elements used in a Command ('Command Injection') 10950 11585 11961 Remote Code Execution 10950 Remote Code Execution 11585 Remote Code Execution 11961 Important 10950 Important 11585 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10950 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11585 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11961 5002624 https://www.microsoft.com/download/details.aspx?id=106231 5002618 10950 Maybe Security Update 16.0.5465.1001 https://support.microsoft.com/help/5002624 10950 5002624 5002624 https://support.microsoft.com/help/5002624 10950 5002639 https://www.microsoft.com/download/details.aspx?id=106232 5002615 11585 Maybe Security Update 16.0.10414.20002 https://support.microsoft.com/help/5002639 11585 5002639 5002639 https://support.microsoft.com/help/5002639 11585 5002640 https://www.microsoft.com/download/details.aspx?id=106233 5002606 11961 Maybe Security Update 16.0.17928.20086 https://support.microsoft.com/help/5002640 11961 5002640 5002640 https://support.microsoft.com/help/5002640 11961 <a href="https://github.com/zcgonvh">zcgonvh</a> 1.0 2024-09-10T00:00:00 <p>Information published.</p> 1.1 2024-10-06T00:00:00 <p>Updated links to security updates. This is an informational change only.</p> Microsoft SharePoint Server Remote Code Execution Vulnerability <p><strong>How could an attacker exploit the vulnerability?</strong></p> <p>An authenticated attacker with Site Owner permissions or higher could upload a specially crafted file to the targeted SharePoint Server and craft specialized API requests to trigger deserialization of file's parameters. This would enable the attacker to perform remote code execution in the context of the SharePoint Server.</p> <p><strong>According to the CVSS metric, privileges required is high (PR:H). What does that mean for this vulnerability?</strong></p> <p>An authenticated attacker with Site Owner permissions can use the vulnerability to inject arbitrary code and execute this code in the context of SharePoint Server.</p> Microsoft Office SharePoint Microsoft Yes CVE-2024-38228 Improper Neutralization of Special Elements used in a Command ('Command Injection') 10950 11585 11961 Remote Code Execution 10950 Remote Code Execution 11585 Remote Code Execution 11961 Important 10950 Important 11585 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10950 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11585 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11961 5002624 https://www.microsoft.com/download/details.aspx?id=106231 5002618 10950 Maybe Security Update 16.0.5465.1001 https://support.microsoft.com/help/5002624 10950 5002624 5002624 https://support.microsoft.com/help/5002624 10950 5002639 https://www.microsoft.com/download/details.aspx?id=106232 5002615 11585 Maybe Security Update 16.0.10414.20002 https://support.microsoft.com/help/5002639 11585 5002639 5002639 https://support.microsoft.com/help/5002639 11585 5002640 https://www.microsoft.com/download/details.aspx?id=106233 5002606 11961 Maybe Security Update 16.0.17928.20086 https://support.microsoft.com/help/5002640 11961 5002640 5002640 https://support.microsoft.com/help/5002640 11961 cjM00n &amp; Edwardzpeng 1.0 2024-09-10T00:00:00 <p>Information published.</p> 1.1 2024-10-06T00:00:00 <p>Updated links to security updates. This is an informational change only.</p> Windows Remote Desktop Licensing Service Denial of Service Vulnerability <p><strong>Are there additional actions I need to take after I have installed the update?</strong></p> <p>No action is required from customers who are using a single license server and who are not using workgroup-joined Windows Server 2008 terminal servers.</p> <p>Customers using multiple license servers should refer to <a href="https://learn.microsoft.com/windows-server/remote/remote-desktop-services/use-multiple-remote-desktop-license-servers">Use multiple remote desktop license servers</a> for more information about the steps they need to take.</p> <p>Additionally, for proper license server discovery, customers using workgroup-joined Windows Server 2008 terminal servers will need to ensure that they list the RD license servers they want these terminal servers to use under <strong>Use the specified Remote Desktop license servers</strong> as detailed on <a href="https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/cc770585(v=ws.10)">this page</a>. The License server discovery mode called &quot;Automatically discover a license server&quot; will no longer be supported in workgroup-joined deployment.</p> Windows Remote Desktop Licensing Service Microsoft Yes CVE-2024-38231 Improper Authorization 11571 11572 11923 11924 12244 10816 10855 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11924 Denial of Service 12244 Denial of Service 10816 Denial of Service 10855 Denial of Service 9312 Denial of Service 10287 Denial of Service 9318 Denial of Service 9344 Denial of Service 10051 Denial of Service 10049 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Important 11571 Important 11572 Important 11923 Important 11924 Important 12244 Important 10816 Important 10855 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12244 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 9312 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10287 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 9318 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 9344 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10051 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10049 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 5043050 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043050 5041578 11571 11572 Yes Security Update 10.0.17763.6293 https://support.microsoft.com/help/5043050 11571 11572 5043050 5043050 https://support.microsoft.com/help/5043050 11571 11572 5042881 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042881 5041160 11923 11924 Yes Security Update 10.0.20348.2700 https://support.microsoft.com/help/5042881 11923 11924 5042881 5042881 https://support.microsoft.com/help/5042881 11923 11924 5042880 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042880 11923 11924 Yes SecurityHotpatchUpdate 10.0.20348.2695 https://support.microsoft.com/help/5042880 11923 11924 5042880 5043055 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043055 5041573 12244 Yes Security Update 10.0.25398.1128 https://support.microsoft.com/help/5043055 12244 5043055 5043051 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043051 5041773 10816 10855 Yes Security Update 10.0.14393.7336 https://support.microsoft.com/help/5043051 10816 10855 5043051 5043051 https://support.microsoft.com/help/5043051 10816 10855 5043135 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043135 5041850 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.22870 https://support.microsoft.com/help/5043135 9312 10287 9318 9344 5043135 5043135 https://support.microsoft.com/help/5043135 9312 10287 9318 9344 5043087 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043087 9312 10287 9318 9344 Yes Security Only 6.0.6003.22870 https://support.microsoft.com/help/5043087 9312 10287 9318 9344 5043087 5043087 https://support.microsoft.com/help/5043087 9312 10287 9318 9344 5043129 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043129 5041838 10051 10049 Yes Monthly Rollup 6.1.7601.27320 https://support.microsoft.com/help/5043129 10051 10049 5043129 5043092 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043092 10051 10049 Yes Security Only 6.1.7601.27320 https://support.microsoft.com/help/5043092 10051 10049 5043092 5043125 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043125 5041851 10378 10379 Yes Monthly Rollup 6.2.9200.25073 https://support.microsoft.com/help/5043125 10378 10379 5043125 5043125 https://support.microsoft.com/help/5043125 10378 10379 5043138 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043138 5041828 10483 10543 Yes Monthly Rollup 6.3.9600.22175 https://support.microsoft.com/help/5043138 10483 10543 5043138 5043138 https://support.microsoft.com/help/5043138 10483 10543 <a href="https://twitter.com/lewislee53">Lewis Lee</a> <a href="https://twitter.com/Ver0759">Chunyang Han</a> <a href="https://twitter.com/edwardzpeng">Zhiniang Peng</a> 1.0 2024-09-10T00:00:00 <p>Information published.</p> Windows Networking Denial of Service Vulnerability Windows Network Virtualization Microsoft Yes CVE-2024-38232 NULL Pointer Dereference 10853 10816 10855 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 5043051 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043051 5041773 10853 10816 10855 Yes Security Update 10.0.14393.7336 https://support.microsoft.com/help/5043051 10853 10816 10855 5043051 5043051 https://support.microsoft.com/help/5043051 10853 10816 10855 Anonymous 1.0 2024-09-10T00:00:00 <p>Information published.</p> Windows Networking Denial of Service Vulnerability Windows Network Virtualization Microsoft Yes CVE-2024-38233 NULL Pointer Dereference 10853 10816 10855 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 5043051 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043051 5041773 10853 10816 10855 Yes Security Update 10.0.14393.7336 https://support.microsoft.com/help/5043051 10853 10816 10855 5043051 5043051 https://support.microsoft.com/help/5043051 10853 10816 10855 Anonymous 1.0 2024-09-10T00:00:00 <p>Information published.</p> Windows Networking Denial of Service Vulnerability <p><strong>Windows 11, version 24H2 is not generally available yet. Why are there updates for this version of Windows listed in the Security Updates table?</strong></p> <p>The new Copilot+ devices that are now publicly available come with Windows 11, version 24H2 installed. Customers with these devices need to know about any vulnerabilities that affect their machine and to install the updates if they are not receiving automatic updates. Note that the general availability date for Windows 11, version 24H2 is scheduled for later this year.</p> <p><strong>According to the CVSS metric, the attack vector is adjacent (AV:A). What does that mean for this vulnerability?</strong></p> <p>An unauthenticated attacker with LAN access could exploit this vulnerability.</p> Windows Network Virtualization Microsoft Yes CVE-2024-38234 Improper Input Validation 11568 11569 11571 11572 11923 11924 11926 11927 11929 11930 11931 12085 12086 12097 12098 12099 12242 12243 12244 12389 12390 10729 10735 10852 10853 10816 10855 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Denial of Service 11568 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11924 Denial of Service 11926 Denial of Service 11927 Denial of Service 11929 Denial of Service 11930 Denial of Service 11931 Denial of Service 12085 Denial of Service 12086 Denial of Service 12097 Denial of Service 12098 Denial of Service 12099 Denial of Service 12242 Denial of Service 12243 Denial of Service 12244 Denial of Service 12389 Denial of Service 12390 Denial of Service 10729 Denial of Service 10735 Denial of Service 10852 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Denial of Service 9312 Denial of Service 10287 Denial of Service 9318 Denial of Service 9344 Denial of Service 10051 Denial of Service 10049 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 12085 Important 12086 Important 12097 Important 12098 Important 12099 Important 12242 Important 12243 Important 12244 Important 12389 Important 12390 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11926 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11927 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12085 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12086 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12244 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10729 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10735 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 9312 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10287 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 9318 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 9344 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10051 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10049 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 5043050 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043050 5041578 11568 11569 11571 11572 Yes Security Update 10.0.17763.6293 https://support.microsoft.com/help/5043050 11568 11569 11571 11572 5043050 5043050 https://support.microsoft.com/help/5043050 11568 11569 11571 11572 5042881 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042881 5041160 11923 11924 Yes Security Update 10.0.20348.2700 https://support.microsoft.com/help/5042881 11923 11924 5042881 5042881 https://support.microsoft.com/help/5042881 11923 11924 5042880 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042880 11923 11924 Yes SecurityHotpatchUpdate 10.0.20348.2695 https://support.microsoft.com/help/5042880 11923 11924 5042880 5043067 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043067 5041592 11926 11927 Yes Security Update 10.0.22000.3197 https://support.microsoft.com/help/5043067 11926 11927 5043067 5043067 https://support.microsoft.com/help/5043067 11926 11927 5043064 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043064 5041580 11929 11930 11931 Yes Security Update 10.0.19044.4894 https://support.microsoft.com/help/5043064 11929 11930 11931 5043064 5043064 https://support.microsoft.com/help/5043064 11929 11930 11931 12097 12098 12099 5043076 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043076 5041585 12085 12086 Yes Security Update 10.0.22621.4169 https://support.microsoft.com/help/5043076 12085 12086 5043076 5043076 https://support.microsoft.com/help/5043076 12085 12086 12242 12243 5043064 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043064 5041580 12097 12098 12099 Yes Security Update 10.0.19045.4894 https://support.microsoft.com/help/5043064 12097 12098 12099 5043064 5043076 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043076 5041585 12242 12243 Yes Security Update 10.0.22631.4169 https://support.microsoft.com/help/5043076 12242 12243 5043076 5043055 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043055 5041573 12244 Yes Security Update 10.0.25398.1128 https://support.microsoft.com/help/5043055 12244 5043055 5043080 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043080 12389 12390 Yes Security Update 10.0.26100.1742 https://support.microsoft.com/help/5043080 12389 12390 5043080 5043080 https://support.microsoft.com/help/5043080 12389 12390 5043083 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043083 5041782 10729 10735 Yes Security Update 10.0.10240.20766 https://support.microsoft.com/help/5043083 10729 10735 5043083 5043083 https://support.microsoft.com/help/5043083 10729 10735 5043051 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043051 5041773 10852 10853 10816 10855 Yes Security Update 10.0.14393.7336 https://support.microsoft.com/help/5043051 10852 10853 10816 10855 5043051 5043051 https://support.microsoft.com/help/5043051 10852 10853 10816 10855 5043135 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043135 5041850 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.22870 https://support.microsoft.com/help/5043135 9312 10287 9318 9344 5043135 5043135 https://support.microsoft.com/help/5043135 9312 10287 9318 9344 5043087 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043087 9312 10287 9318 9344 Yes Security Only 6.0.6003.22870 https://support.microsoft.com/help/5043087 9312 10287 9318 9344 5043087 5043087 https://support.microsoft.com/help/5043087 9312 10287 9318 9344 5043129 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043129 5041838 10051 10049 Yes Monthly Rollup 6.1.7601.27320 https://support.microsoft.com/help/5043129 10051 10049 5043129 5043092 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043092 10051 10049 Yes Security Only 6.1.7601.27320 https://support.microsoft.com/help/5043092 10051 10049 5043092 5043125 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043125 5041851 10378 10379 Yes Monthly Rollup 6.2.9200.25073 https://support.microsoft.com/help/5043125 10378 10379 5043125 5043125 https://support.microsoft.com/help/5043125 10378 10379 5043138 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043138 5041828 10483 10543 Yes Monthly Rollup 6.3.9600.22175 https://support.microsoft.com/help/5043138 10483 10543 5043138 5043138 https://support.microsoft.com/help/5043138 10483 10543 Wei in Kunlun Lab with <a href="https://www.cyberkl.com/">Cyber KunLun</a> 1.0 2024-09-10T00:00:00 <p>Information published.</p> Windows Hyper-V Denial of Service Vulnerability <p><strong>Windows 11, version 24H2 is not generally available yet. Why are there updates for this version of Windows listed in the Security Updates table?</strong></p> <p>The new Copilot+ devices that are now publicly available come with Windows 11, version 24H2 installed. Customers with these devices need to know about any vulnerabilities that affect their machine and to install the updates if they are not receiving automatic updates. Note that the general availability date for Windows 11, version 24H2 is scheduled for later this year.</p> <p><strong>According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability could allow a Hyper-V guest to affect the functionality of the Hyper-V host.</p> Role: Windows Hyper-V Microsoft Yes CVE-2024-38235 Use After Free 11569 11571 11572 11923 11924 11926 11927 11931 12085 12086 12097 12242 12243 12244 12389 12390 10735 10853 10816 10855 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11924 Denial of Service 11926 Denial of Service 11927 Denial of Service 11931 Denial of Service 12085 Denial of Service 12086 Denial of Service 12097 Denial of Service 12242 Denial of Service 12243 Denial of Service 12244 Denial of Service 12389 Denial of Service 12390 Denial of Service 10735 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11926 Important 11927 Important 11931 Important 12085 Important 12086 Important 12097 Important 12242 Important 12243 Important 12244 Important 12389 Important 12390 Important 10735 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 11926 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 11927 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 12085 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 12086 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 12244 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 10735 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 5043050 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043050 5041578 11569 11571 11572 Yes Security Update 10.0.17763.6293 https://support.microsoft.com/help/5043050 11569 11571 11572 5043050 5043050 https://support.microsoft.com/help/5043050 11569 11571 11572 5042881 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042881 5041160 11923 11924 Yes Security Update 10.0.20348.2700 https://support.microsoft.com/help/5042881 11923 11924 5042881 5042881 https://support.microsoft.com/help/5042881 11923 11924 5042880 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042880 11923 11924 Yes SecurityHotpatchUpdate 10.0.20348.2695 https://support.microsoft.com/help/5042880 11923 11924 5042880 5043067 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043067 5041592 11926 11927 Yes Security Update 10.0.22000.3197 https://support.microsoft.com/help/5043067 11926 11927 5043067 5043067 https://support.microsoft.com/help/5043067 11926 11927 5043064 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043064 5041580 11931 Yes Security Update 10.0.19044.4894 https://support.microsoft.com/help/5043064 11931 5043064 5043064 https://support.microsoft.com/help/5043064 11931 12097 5043076 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043076 5041585 12085 12086 Yes Security Update 10.0.22621.4169 https://support.microsoft.com/help/5043076 12085 12086 5043076 5043076 https://support.microsoft.com/help/5043076 12085 12086 12242 12243 5043064 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043064 5041580 12097 Yes Security Update 10.0.19045.4894 https://support.microsoft.com/help/5043064 12097 5043064 5043076 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043076 5041585 12242 12243 Yes Security Update 10.0.22631.4169 https://support.microsoft.com/help/5043076 12242 12243 5043076 5043055 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043055 5041573 12244 Yes Security Update 10.0.25398.1128 https://support.microsoft.com/help/5043055 12244 5043055 5043080 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043080 12389 12390 Yes Security Update 10.0.26100.1742 https://support.microsoft.com/help/5043080 12389 12390 5043080 5043080 https://support.microsoft.com/help/5043080 12389 12390 5043083 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043083 5041782 10735 Yes Security Update 10.0.10240.20766 https://support.microsoft.com/help/5043083 10735 5043083 5043083 https://support.microsoft.com/help/5043083 10735 5043051 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043051 5041773 10853 10816 10855 Yes Security Update 10.0.14393.7336 https://support.microsoft.com/help/5043051 10853 10816 10855 5043051 5043051 https://support.microsoft.com/help/5043051 10853 10816 10855 <a href="https://twitter.com/thunderj17">Thunder_J</a> with lichoin 1.0 2024-09-10T00:00:00 <p>Information published.</p> Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability <p><strong>Windows 11, version 24H2 is not generally available yet. Why are there updates for this version of Windows listed in the Security Updates table?</strong></p> <p>The new Copilot+ devices that are now publicly available come with Windows 11, version 24H2 installed. Customers with these devices need to know about any vulnerabilities that affect their machine and to install the updates if they are not receiving automatic updates. Note that the general availability date for Windows 11, version 24H2 is scheduled for later this year.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Microsoft Streaming Service Microsoft Yes CVE-2024-38237 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11926 11927 11929 11930 11931 12085 12086 12097 12098 12099 12242 12243 12244 12389 12390 10729 10735 10852 10853 10816 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11926 Elevation of Privilege 11927 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12085 Elevation of Privilege 12086 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12244 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 12085 Important 12086 Important 12097 Important 12098 Important 12099 Important 12242 Important 12243 Important 12244 Important 12389 Important 12390 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12085 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12086 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12244 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5043050 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043050 5041578 11568 11569 11571 11572 Yes Security Update 10.0.17763.6293 https://support.microsoft.com/help/5043050 11568 11569 11571 11572 5043050 5043050 https://support.microsoft.com/help/5043050 11568 11569 11571 11572 5042881 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042881 5041160 11923 11924 Yes Security Update 10.0.20348.2700 https://support.microsoft.com/help/5042881 11923 11924 5042881 5042881 https://support.microsoft.com/help/5042881 11923 11924 5042880 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042880 11923 11924 Yes SecurityHotpatchUpdate 10.0.20348.2695 https://support.microsoft.com/help/5042880 11923 11924 5042880 5043067 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043067 5041592 11926 11927 Yes Security Update 10.0.22000.3197 https://support.microsoft.com/help/5043067 11926 11927 5043067 5043067 https://support.microsoft.com/help/5043067 11926 11927 5043064 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043064 5041580 11929 11930 11931 Yes Security Update 10.0.19044.4894 https://support.microsoft.com/help/5043064 11929 11930 11931 5043064 5043064 https://support.microsoft.com/help/5043064 11929 11930 11931 12097 12098 12099 5043076 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043076 5041585 12085 12086 Yes Security Update 10.0.22621.4169 https://support.microsoft.com/help/5043076 12085 12086 5043076 5043076 https://support.microsoft.com/help/5043076 12085 12086 12242 12243 5043064 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043064 5041580 12097 12098 12099 Yes Security Update 10.0.19045.4894 https://support.microsoft.com/help/5043064 12097 12098 12099 5043064 5043076 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043076 5041585 12242 12243 Yes Security Update 10.0.22631.4169 https://support.microsoft.com/help/5043076 12242 12243 5043076 5043055 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043055 5041573 12244 Yes Security Update 10.0.25398.1128 https://support.microsoft.com/help/5043055 12244 5043055 5043080 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043080 12389 12390 Yes Security Update 10.0.26100.1742 https://support.microsoft.com/help/5043080 12389 12390 5043080 5043080 https://support.microsoft.com/help/5043080 12389 12390 5043083 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043083 5041782 10729 10735 Yes Security Update 10.0.10240.20766 https://support.microsoft.com/help/5043083 10729 10735 5043083 5043083 https://support.microsoft.com/help/5043083 10729 10735 5043051 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043051 5041773 10852 10853 10816 10855 Yes Security Update 10.0.14393.7336 https://support.microsoft.com/help/5043051 10852 10853 10816 10855 5043051 5043051 https://support.microsoft.com/help/5043051 10852 10853 10816 10855 <a href="https://twitter.com/scwuaptx">Angelboy (@scwuaptx)</a> with <a href="https://devco.re/">DEVCORE</a> 1.0 2024-09-10T00:00:00 <p>Information published.</p> Kernel Streaming Service Driver Elevation of Privilege Vulnerability <p><strong>Windows 11, version 24H2 is not generally available yet. Why are there updates for this version of Windows listed in the Security Updates table?</strong></p> <p>The new Copilot+ devices that are now publicly available come with Windows 11, version 24H2 installed. Customers with these devices need to know about any vulnerabilities that affect their machine and to install the updates if they are not receiving automatic updates. Note that the general availability date for Windows 11, version 24H2 is scheduled for later this year.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Microsoft Streaming Service Microsoft Yes CVE-2024-38238 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11926 11927 11929 11930 11931 12085 12086 12097 12098 12099 12242 12243 12244 12389 12390 10729 10735 10852 10853 10816 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11926 Elevation of Privilege 11927 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12085 Elevation of Privilege 12086 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12244 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 12085 Important 12086 Important 12097 Important 12098 Important 12099 Important 12242 Important 12243 Important 12244 Important 12389 Important 12390 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12085 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12086 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12244 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5043050 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043050 5041578 11568 11569 11571 11572 Yes Security Update 10.0.17763.6293 https://support.microsoft.com/help/5043050 11568 11569 11571 11572 5043050 5043050 https://support.microsoft.com/help/5043050 11568 11569 11571 11572 5042881 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042881 5041160 11923 11924 Yes Security Update 10.0.20348.2700 https://support.microsoft.com/help/5042881 11923 11924 5042881 5042881 https://support.microsoft.com/help/5042881 11923 11924 5042880 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042880 11923 11924 Yes SecurityHotpatchUpdate 10.0.20348.2695 https://support.microsoft.com/help/5042880 11923 11924 5042880 5043067 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043067 5041592 11926 11927 Yes Security Update 10.0.22000.3197 https://support.microsoft.com/help/5043067 11926 11927 5043067 5043067 https://support.microsoft.com/help/5043067 11926 11927 5043064 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043064 5041580 11929 11930 11931 Yes Security Update 10.0.19044.4894 https://support.microsoft.com/help/5043064 11929 11930 11931 5043064 5043064 https://support.microsoft.com/help/5043064 11929 11930 11931 12097 12098 12099 5043076 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043076 5041585 12085 12086 Yes Security Update 10.0.22621.4169 https://support.microsoft.com/help/5043076 12085 12086 5043076 5043076 https://support.microsoft.com/help/5043076 12085 12086 12242 12243 5043064 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043064 5041580 12097 12098 12099 Yes Security Update 10.0.19045.4894 https://support.microsoft.com/help/5043064 12097 12098 12099 5043064 5043076 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043076 5041585 12242 12243 Yes Security Update 10.0.22631.4169 https://support.microsoft.com/help/5043076 12242 12243 5043076 5043055 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043055 5041573 12244 Yes Security Update 10.0.25398.1128 https://support.microsoft.com/help/5043055 12244 5043055 5043080 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043080 12389 12390 Yes Security Update 10.0.26100.1742 https://support.microsoft.com/help/5043080 12389 12390 5043080 5043080 https://support.microsoft.com/help/5043080 12389 12390 5043083 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043083 5041782 10729 10735 Yes Security Update 10.0.10240.20766 https://support.microsoft.com/help/5043083 10729 10735 5043083 5043083 https://support.microsoft.com/help/5043083 10729 10735 5043051 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043051 5041773 10852 10853 10816 10855 Yes Security Update 10.0.14393.7336 https://support.microsoft.com/help/5043051 10852 10853 10816 10855 5043051 5043051 https://support.microsoft.com/help/5043051 10852 10853 10816 10855 <a href="https://twitter.com/scwuaptx">Angelboy (@scwuaptx)</a> with <a href="https://devco.re/">DEVCORE</a> 1.0 2024-09-10T00:00:00 <p>Information published.</p> Windows Kerberos Elevation of Privilege Vulnerability <p><strong>Windows 11, version 24H2 is not generally available yet. Why are there updates for this version of Windows listed in the Security Updates table?</strong></p> <p>The new Copilot+ devices that are now publicly available come with Windows 11, version 24H2 installed. Customers with these devices need to know about any vulnerabilities that affect their machine and to install the updates if they are not receiving automatic updates. Note that the general availability date for Windows 11, version 24H2 is scheduled for later this year.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does this mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires the attacker to have control over a domain controller and privileges to perform arbitrary code execution in a different trusted forest from the trusted forest containing the victim machine.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain domain administrator privileges.</p> <p><strong>According to the CVSS metric, privileges required is high (PR:H). What privileges are required to exploit this vulnerability?</strong></p> <p>The attacker needs to have privileges on the environment from where they are performing the attack and the environment they are targeting to be able to exploit this vulnerability.</p> Windows Kerberos Microsoft Yes CVE-2024-38239 Weak Authentication 11568 11569 11571 11572 11923 11924 11926 11927 11929 11930 11931 12085 12086 12097 12098 12099 12242 12243 12244 12389 12390 10729 10735 10852 10853 10816 10855 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11926 Elevation of Privilege 11927 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12085 Elevation of Privilege 12086 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12244 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 9312 Elevation of Privilege 10287 Elevation of Privilege 9318 Elevation of Privilege 9344 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 12085 Important 12086 Important 12097 Important 12098 Important 12099 Important 12242 Important 12243 Important 12244 Important 12389 Important 12390 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12085 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12086 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12244 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5043050 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043050 5041578 11568 11569 11571 11572 Yes Security Update 10.0.17763.6293 https://support.microsoft.com/help/5043050 11568 11569 11571 11572 5043050 5043050 https://support.microsoft.com/help/5043050 11568 11569 11571 11572 5042881 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042881 5041160 11923 11924 Yes Security Update 10.0.20348.2700 https://support.microsoft.com/help/5042881 11923 11924 5042881 5042881 https://support.microsoft.com/help/5042881 11923 11924 5042880 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042880 11923 11924 Yes SecurityHotpatchUpdate 10.0.20348.2695 https://support.microsoft.com/help/5042880 11923 11924 5042880 5043067 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043067 5041592 11926 11927 Yes Security Update 10.0.22000.3197 https://support.microsoft.com/help/5043067 11926 11927 5043067 5043067 https://support.microsoft.com/help/5043067 11926 11927 5043064 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043064 5041580 11929 11930 11931 Yes Security Update 10.0.19044.4894 https://support.microsoft.com/help/5043064 11929 11930 11931 5043064 5043064 https://support.microsoft.com/help/5043064 11929 11930 11931 12097 12098 12099 5043076 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043076 5041585 12085 12086 Yes Security Update 10.0.22621.4169 https://support.microsoft.com/help/5043076 12085 12086 5043076 5043076 https://support.microsoft.com/help/5043076 12085 12086 12242 12243 5043064 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043064 5041580 12097 12098 12099 Yes Security Update 10.0.19045.4894 https://support.microsoft.com/help/5043064 12097 12098 12099 5043064 5043076 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043076 5041585 12242 12243 Yes Security Update 10.0.22631.4169 https://support.microsoft.com/help/5043076 12242 12243 5043076 5043055 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043055 5041573 12244 Yes Security Update 10.0.25398.1128 https://support.microsoft.com/help/5043055 12244 5043055 5043080 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043080 12389 12390 Yes Security Update 10.0.26100.1742 https://support.microsoft.com/help/5043080 12389 12390 5043080 5043080 https://support.microsoft.com/help/5043080 12389 12390 5043083 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043083 5041782 10729 10735 Yes Security Update 10.0.10240.20766 https://support.microsoft.com/help/5043083 10729 10735 5043083 5043083 https://support.microsoft.com/help/5043083 10729 10735 5043051 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043051 5041773 10852 10853 10816 10855 Yes Security Update 10.0.14393.7336 https://support.microsoft.com/help/5043051 10852 10853 10816 10855 5043051 5043051 https://support.microsoft.com/help/5043051 10852 10853 10816 10855 5043135 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043135 5041850 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.22870 https://support.microsoft.com/help/5043135 9312 10287 9318 9344 5043135 5043135 https://support.microsoft.com/help/5043135 9312 10287 9318 9344 5043087 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043087 9312 10287 9318 9344 Yes Security Only 6.0.6003.22870 https://support.microsoft.com/help/5043087 9312 10287 9318 9344 5043087 5043087 https://support.microsoft.com/help/5043087 9312 10287 9318 9344 5043129 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043129 5041838 10051 10049 Yes Monthly Rollup 6.1.7601.27320 https://support.microsoft.com/help/5043129 10051 10049 5043129 5043092 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043092 10051 10049 Yes Security Only 6.1.7601.27320 https://support.microsoft.com/help/5043092 10051 10049 5043092 5043125 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043125 5041851 10378 10379 Yes Monthly Rollup 6.2.9200.25073 https://support.microsoft.com/help/5043125 10378 10379 5043125 5043125 https://support.microsoft.com/help/5043125 10378 10379 5043138 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043138 5041828 10483 10543 Yes Monthly Rollup 6.3.9600.22175 https://support.microsoft.com/help/5043138 10483 10543 5043138 5043138 https://support.microsoft.com/help/5043138 10483 10543 Microsoft Windows Authentication Team 1.0 2024-09-10T00:00:00 <p>Information published.</p> Kernel Streaming Service Driver Elevation of Privilege Vulnerability <p><strong>Windows 11, version 24H2 is not generally available yet. Why are there updates for this version of Windows listed in the Security Updates table?</strong></p> <p>The new Copilot+ devices that are now publicly available come with Windows 11, version 24H2 installed. Customers with these devices need to know about any vulnerabilities that affect their machine and to install the updates if they are not receiving automatic updates. Note that the general availability date for Windows 11, version 24H2 is scheduled for later this year.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Microsoft Streaming Service Microsoft Yes CVE-2024-38243 Improper Input Validation 11568 11569 11571 11572 11923 11924 11926 11927 11929 11930 11931 12085 12086 12097 12098 12099 12242 12243 12244 12389 12390 10729 10735 10852 10853 10816 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11926 Elevation of Privilege 11927 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12085 Elevation of Privilege 12086 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12244 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 12085 Important 12086 Important 12097 Important 12098 Important 12099 Important 12242 Important 12243 Important 12244 Important 12389 Important 12390 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12085 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12086 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12244 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5043050 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043050 5041578 11568 11569 11571 11572 Yes Security Update 10.0.17763.6293 https://support.microsoft.com/help/5043050 11568 11569 11571 11572 5043050 5043050 https://support.microsoft.com/help/5043050 11568 11569 11571 11572 5042881 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042881 5041160 11923 11924 Yes Security Update 10.0.20348.2700 https://support.microsoft.com/help/5042881 11923 11924 5042881 5042881 https://support.microsoft.com/help/5042881 11923 11924 5042880 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042880 11923 11924 Yes SecurityHotpatchUpdate 10.0.20348.2695 https://support.microsoft.com/help/5042880 11923 11924 5042880 5043067 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043067 5041592 11926 11927 Yes Security Update 10.0.22000.3197 https://support.microsoft.com/help/5043067 11926 11927 5043067 5043067 https://support.microsoft.com/help/5043067 11926 11927 5043064 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043064 5041580 11929 11930 11931 Yes Security Update 10.0.19044.4894 https://support.microsoft.com/help/5043064 11929 11930 11931 5043064 5043064 https://support.microsoft.com/help/5043064 11929 11930 11931 12097 12098 12099 5043076 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043076 5041585 12085 12086 Yes Security Update 10.0.22621.4169 https://support.microsoft.com/help/5043076 12085 12086 5043076 5043076 https://support.microsoft.com/help/5043076 12085 12086 12242 12243 5043064 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043064 5041580 12097 12098 12099 Yes Security Update 10.0.19045.4894 https://support.microsoft.com/help/5043064 12097 12098 12099 5043064 5043076 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043076 5041585 12242 12243 Yes Security Update 10.0.22631.4169 https://support.microsoft.com/help/5043076 12242 12243 5043076 5043055 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043055 5041573 12244 Yes Security Update 10.0.25398.1128 https://support.microsoft.com/help/5043055 12244 5043055 5043080 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043080 12389 12390 Yes Security Update 10.0.26100.1742 https://support.microsoft.com/help/5043080 12389 12390 5043080 5043080 https://support.microsoft.com/help/5043080 12389 12390 5043083 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043083 5041782 10729 10735 Yes Security Update 10.0.10240.20766 https://support.microsoft.com/help/5043083 10729 10735 5043083 5043083 https://support.microsoft.com/help/5043083 10729 10735 5043051 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043051 5041773 10852 10853 10816 10855 Yes Security Update 10.0.14393.7336 https://support.microsoft.com/help/5043051 10852 10853 10816 10855 5043051 5043051 https://support.microsoft.com/help/5043051 10852 10853 10816 10855 <a href="https://twitter.com/scwuaptx">Angelboy (@scwuaptx)</a> with <a href="https://devco.re/">DEVCORE</a> 1.0 2024-09-10T00:00:00 <p>Information published.</p> Kernel Streaming Service Driver Elevation of Privilege Vulnerability <p><strong>Windows 11, version 24H2 is not generally available yet. Why are there updates for this version of Windows listed in the Security Updates table?</strong></p> <p>The new Copilot+ devices that are now publicly available come with Windows 11, version 24H2 installed. Customers with these devices need to know about any vulnerabilities that affect their machine and to install the updates if they are not receiving automatic updates. Note that the general availability date for Windows 11, version 24H2 is scheduled for later this year.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Microsoft Streaming Service Microsoft Yes CVE-2024-38244 Improper Input Validation 11568 11569 11571 11572 11923 11924 11926 11927 11929 11930 11931 12085 12086 12097 12098 12099 12242 12243 12244 12389 12390 10729 10735 10852 10853 10816 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11926 Elevation of Privilege 11927 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12085 Elevation of Privilege 12086 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12244 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 12085 Important 12086 Important 12097 Important 12098 Important 12099 Important 12242 Important 12243 Important 12244 Important 12389 Important 12390 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12085 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12086 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12244 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5043050 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043050 5041578 11568 11569 11571 11572 Yes Security Update 10.0.17763.6293 https://support.microsoft.com/help/5043050 11568 11569 11571 11572 5043050 5043050 https://support.microsoft.com/help/5043050 11568 11569 11571 11572 5042881 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042881 5041160 11923 11924 Yes Security Update 10.0.20348.2700 https://support.microsoft.com/help/5042881 11923 11924 5042881 5042881 https://support.microsoft.com/help/5042881 11923 11924 5042880 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042880 11923 11924 Yes SecurityHotpatchUpdate 10.0.20348.2695 https://support.microsoft.com/help/5042880 11923 11924 5042880 5043067 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043067 5041592 11926 11927 Yes Security Update 10.0.22000.3197 https://support.microsoft.com/help/5043067 11926 11927 5043067 5043067 https://support.microsoft.com/help/5043067 11926 11927 5043064 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043064 5041580 11929 11930 11931 Yes Security Update 10.0.19044.4894 https://support.microsoft.com/help/5043064 11929 11930 11931 5043064 5043064 https://support.microsoft.com/help/5043064 11929 11930 11931 12097 12098 12099 5043076 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043076 5041585 12085 12086 Yes Security Update 10.0.22621.4169 https://support.microsoft.com/help/5043076 12085 12086 5043076 5043076 https://support.microsoft.com/help/5043076 12085 12086 12242 12243 5043064 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043064 5041580 12097 12098 12099 Yes Security Update 10.0.19045.4894 https://support.microsoft.com/help/5043064 12097 12098 12099 5043064 5043076 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043076 5041585 12242 12243 Yes Security Update 10.0.22631.4169 https://support.microsoft.com/help/5043076 12242 12243 5043076 5043055 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043055 5041573 12244 Yes Security Update 10.0.25398.1128 https://support.microsoft.com/help/5043055 12244 5043055 5043080 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043080 12389 12390 Yes Security Update 10.0.26100.1742 https://support.microsoft.com/help/5043080 12389 12390 5043080 5043080 https://support.microsoft.com/help/5043080 12389 12390 5043083 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043083 5041782 10729 10735 Yes Security Update 10.0.10240.20766 https://support.microsoft.com/help/5043083 10729 10735 5043083 5043083 https://support.microsoft.com/help/5043083 10729 10735 5043051 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043051 5041773 10852 10853 10816 10855 Yes Security Update 10.0.14393.7336 https://support.microsoft.com/help/5043051 10852 10853 10816 10855 5043051 5043051 https://support.microsoft.com/help/5043051 10852 10853 10816 10855 <a href="https://twitter.com/scwuaptx">Angelboy (@scwuaptx)</a> with <a href="https://devco.re/">DEVCORE</a> 1.0 2024-09-10T00:00:00 <p>Information published.</p> Kernel Streaming Service Driver Elevation of Privilege Vulnerability <p><strong>Windows 11, version 24H2 is not generally available yet. Why are there updates for this version of Windows listed in the Security Updates table?</strong></p> <p>The new Copilot+ devices that are now publicly available come with Windows 11, version 24H2 installed. Customers with these devices need to know about any vulnerabilities that affect their machine and to install the updates if they are not receiving automatic updates. Note that the general availability date for Windows 11, version 24H2 is scheduled for later this year.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Microsoft Streaming Service Microsoft Yes CVE-2024-38245 Improper Input Validation 11568 11569 11571 11572 11923 11924 11926 11927 11929 11930 11931 12085 12086 12097 12098 12099 12242 12243 12244 12389 12390 10729 10735 10852 10853 10816 10855 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11926 Elevation of Privilege 11927 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12085 Elevation of Privilege 12086 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12244 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 9312 Elevation of Privilege 10287 Elevation of Privilege 9318 Elevation of Privilege 9344 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 12085 Important 12086 Important 12097 Important 12098 Important 12099 Important 12242 Important 12243 Important 12244 Important 12389 Important 12390 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12085 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12086 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12244 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5043050 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043050 5041578 11568 11569 11571 11572 Yes Security Update 10.0.17763.6293 https://support.microsoft.com/help/5043050 11568 11569 11571 11572 5043050 5043050 https://support.microsoft.com/help/5043050 11568 11569 11571 11572 5042881 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042881 5041160 11923 11924 Yes Security Update 10.0.20348.2700 https://support.microsoft.com/help/5042881 11923 11924 5042881 5042881 https://support.microsoft.com/help/5042881 11923 11924 5042880 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042880 11923 11924 Yes SecurityHotpatchUpdate 10.0.20348.2695 https://support.microsoft.com/help/5042880 11923 11924 5042880 5043067 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043067 5041592 11926 11927 Yes Security Update 10.0.22000.3197 https://support.microsoft.com/help/5043067 11926 11927 5043067 5043067 https://support.microsoft.com/help/5043067 11926 11927 5043064 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043064 5041580 11929 11930 11931 Yes Security Update 10.0.19044.4894 https://support.microsoft.com/help/5043064 11929 11930 11931 5043064 5043064 https://support.microsoft.com/help/5043064 11929 11930 11931 12097 12098 12099 5043076 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043076 5041585 12085 12086 Yes Security Update 10.0.22621.4169 https://support.microsoft.com/help/5043076 12085 12086 5043076 5043076 https://support.microsoft.com/help/5043076 12085 12086 12242 12243 5043064 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043064 5041580 12097 12098 12099 Yes Security Update 10.0.19045.4894 https://support.microsoft.com/help/5043064 12097 12098 12099 5043064 5043076 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043076 5041585 12242 12243 Yes Security Update 10.0.22631.4169 https://support.microsoft.com/help/5043076 12242 12243 5043076 5043055 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043055 5041573 12244 Yes Security Update 10.0.25398.1128 https://support.microsoft.com/help/5043055 12244 5043055 5043080 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043080 12389 12390 Yes Security Update 10.0.26100.1742 https://support.microsoft.com/help/5043080 12389 12390 5043080 5043080 https://support.microsoft.com/help/5043080 12389 12390 5043083 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043083 5041782 10729 10735 Yes Security Update 10.0.10240.20766 https://support.microsoft.com/help/5043083 10729 10735 5043083 5043083 https://support.microsoft.com/help/5043083 10729 10735 5043051 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043051 5041773 10852 10853 10816 10855 Yes Security Update 10.0.14393.7336 https://support.microsoft.com/help/5043051 10852 10853 10816 10855 5043051 5043051 https://support.microsoft.com/help/5043051 10852 10853 10816 10855 5043135 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043135 5041850 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.22870 https://support.microsoft.com/help/5043135 9312 10287 9318 9344 5043135 5043135 https://support.microsoft.com/help/5043135 9312 10287 9318 9344 5043087 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043087 9312 10287 9318 9344 Yes Security Only 6.0.6003.22870 https://support.microsoft.com/help/5043087 9312 10287 9318 9344 5043087 5043087 https://support.microsoft.com/help/5043087 9312 10287 9318 9344 5043129 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043129 5041838 10051 10049 Yes Monthly Rollup 6.1.7601.27320 https://support.microsoft.com/help/5043129 10051 10049 5043129 5043092 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043092 10051 10049 Yes Security Only 6.1.7601.27320 https://support.microsoft.com/help/5043092 10051 10049 5043092 5043125 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043125 5041851 10378 10379 Yes Monthly Rollup 6.2.9200.25073 https://support.microsoft.com/help/5043125 10378 10379 5043125 5043125 https://support.microsoft.com/help/5043125 10378 10379 5043138 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043138 5041828 10483 10543 Yes Monthly Rollup 6.3.9600.22175 https://support.microsoft.com/help/5043138 10483 10543 5043138 5043138 https://support.microsoft.com/help/5043138 10483 10543 <a href="https://twitter.com/scwuaptx">Angelboy (@scwuaptx)</a> with <a href="https://devco.re/">DEVCORE</a> 1.0 2024-09-10T00:00:00 <p>Information published.</p> Win32k Elevation of Privilege Vulnerability <p><strong>Windows 11, version 24H2 is not generally available yet. Why are there updates for this version of Windows listed in the Security Updates table?</strong></p> <p>The new Copilot+ devices that are now publicly available come with Windows 11, version 24H2 installed. Customers with these devices need to know about any vulnerabilities that affect their machine and to install the updates if they are not receiving automatic updates. Note that the general availability date for Windows 11, version 24H2 is scheduled for later this year.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Win32K - GRFX Microsoft Yes CVE-2024-38246 Stack-based Buffer Overflow 11923 11924 11926 11927 11929 11930 11931 12085 12086 12097 12098 12099 12242 12243 12244 12389 12390 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11926 Elevation of Privilege 11927 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12085 Elevation of Privilege 12086 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12244 Elevation of Privilege 12389 Elevation of Privilege 12390 Important 11923 Important 11924 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 12085 Important 12086 Important 12097 Important 12098 Important 12099 Important 12242 Important 12243 Important 12244 Important 12389 Important 12390 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12085 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12086 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12244 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 5042881 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042881 5041160 11923 11924 Yes Security Update 10.0.20348.2700 https://support.microsoft.com/help/5042881 11923 11924 5042881 5042881 https://support.microsoft.com/help/5042881 11923 11924 5042880 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042880 11923 11924 Yes SecurityHotpatchUpdate 10.0.20348.2695 https://support.microsoft.com/help/5042880 11923 11924 5042880 5043067 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043067 5041592 11926 11927 Yes Security Update 10.0.22000.3197 https://support.microsoft.com/help/5043067 11926 11927 5043067 5043067 https://support.microsoft.com/help/5043067 11926 11927 5043064 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043064 5041580 11929 11930 11931 Yes Security Update 10.0.19044.4894 https://support.microsoft.com/help/5043064 11929 11930 11931 5043064 5043064 https://support.microsoft.com/help/5043064 11929 11930 11931 12097 12098 12099 5043076 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043076 5041585 12085 12086 Yes Security Update 10.0.22621.4169 https://support.microsoft.com/help/5043076 12085 12086 5043076 5043076 https://support.microsoft.com/help/5043076 12085 12086 12242 12243 5043064 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043064 5041580 12097 12098 12099 Yes Security Update 10.0.19045.4894 https://support.microsoft.com/help/5043064 12097 12098 12099 5043064 5043076 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043076 5041585 12242 12243 Yes Security Update 10.0.22631.4169 https://support.microsoft.com/help/5043076 12242 12243 5043076 5043055 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043055 5041573 12244 Yes Security Update 10.0.25398.1128 https://support.microsoft.com/help/5043055 12244 5043055 5043080 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043080 12389 12390 Yes Security Update 10.0.26100.1742 https://support.microsoft.com/help/5043080 12389 12390 5043080 5043080 https://support.microsoft.com/help/5043080 12389 12390 Cristi Dudescu Brent Mills 1.0 2024-09-10T00:00:00 <p>Information published.</p> Windows Graphics Component Elevation of Privilege Vulnerability <p><strong>Windows 11, version 24H2 is not generally available yet. Why are there updates for this version of Windows listed in the Security Updates table?</strong></p> <p>The new Copilot+ devices that are now publicly available come with Windows 11, version 24H2 installed. Customers with these devices need to know about any vulnerabilities that affect their machine and to install the updates if they are not receiving automatic updates. Note that the general availability date for Windows 11, version 24H2 is scheduled for later this year.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Microsoft Graphics Component Microsoft Yes CVE-2024-38247 Double Free 11568 11569 11571 11572 11923 11924 11926 11927 11929 11930 11931 12085 12086 12097 12098 12099 12242 12243 12244 12389 12390 10729 10735 10852 10853 10816 10855 10051 10049 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11926 Elevation of Privilege 11927 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12085 Elevation of Privilege 12086 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12244 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 12085 Important 12086 Important 12097 Important 12098 Important 12099 Important 12242 Important 12243 Important 12244 Important 12389 Important 12390 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12085 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12086 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12244 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5043050 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043050 5041578 11568 11569 11571 11572 Yes Security Update 10.0.17763.6293 https://support.microsoft.com/help/5043050 11568 11569 11571 11572 5043050 5043050 https://support.microsoft.com/help/5043050 11568 11569 11571 11572 5042881 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042881 5041160 11923 11924 Yes Security Update 10.0.20348.2700 https://support.microsoft.com/help/5042881 11923 11924 5042881 5042881 https://support.microsoft.com/help/5042881 11923 11924 5042880 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042880 11923 11924 Yes SecurityHotpatchUpdate 10.0.20348.2695 https://support.microsoft.com/help/5042880 11923 11924 5042880 5043067 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043067 5041592 11926 11927 Yes Security Update 10.0.22000.3197 https://support.microsoft.com/help/5043067 11926 11927 5043067 5043067 https://support.microsoft.com/help/5043067 11926 11927 5043064 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043064 5041580 11929 11930 11931 Yes Security Update 10.0.19044.4894 https://support.microsoft.com/help/5043064 11929 11930 11931 5043064 5043064 https://support.microsoft.com/help/5043064 11929 11930 11931 12097 12098 12099 5043076 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043076 5041585 12085 12086 Yes Security Update 10.0.22621.4169 https://support.microsoft.com/help/5043076 12085 12086 5043076 5043076 https://support.microsoft.com/help/5043076 12085 12086 12242 12243 5043064 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043064 5041580 12097 12098 12099 Yes Security Update 10.0.19045.4894 https://support.microsoft.com/help/5043064 12097 12098 12099 5043064 5043076 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043076 5041585 12242 12243 Yes Security Update 10.0.22631.4169 https://support.microsoft.com/help/5043076 12242 12243 5043076 5043055 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043055 5041573 12244 Yes Security Update 10.0.25398.1128 https://support.microsoft.com/help/5043055 12244 5043055 5043080 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043080 12389 12390 Yes Security Update 10.0.26100.1742 https://support.microsoft.com/help/5043080 12389 12390 5043080 5043080 https://support.microsoft.com/help/5043080 12389 12390 5043083 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043083 5041782 10729 10735 Yes Security Update 10.0.10240.20766 https://support.microsoft.com/help/5043083 10729 10735 5043083 5043083 https://support.microsoft.com/help/5043083 10729 10735 5043051 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043051 5041773 10852 10853 10816 10855 Yes Security Update 10.0.14393.7336 https://support.microsoft.com/help/5043051 10852 10853 10816 10855 5043051 5043051 https://support.microsoft.com/help/5043051 10852 10853 10816 10855 5043129 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043129 5041838 10051 10049 Yes Monthly Rollup 6.1.7601.27320 https://support.microsoft.com/help/5043129 10051 10049 5043129 5043092 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043092 10051 10049 Yes Security Only 6.1.7601.27320 https://support.microsoft.com/help/5043092 10051 10049 5043092 5043125 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043125 5041851 10378 10379 Yes Monthly Rollup 6.2.9200.25073 https://support.microsoft.com/help/5043125 10378 10379 5043125 5043125 https://support.microsoft.com/help/5043125 10378 10379 5043138 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043138 5041828 10483 10543 Yes Monthly Rollup 6.3.9600.22175 https://support.microsoft.com/help/5043138 10483 10543 5043138 5043138 https://support.microsoft.com/help/5043138 10483 10543 Christopher Leung Christopher Leung 1.0 2024-09-10T00:00:00 <p>Information published.</p> Windows Storage Elevation of Privilege Vulnerability <p><strong>Windows 11, version 24H2 is not generally available yet. Why are there updates for this version of Windows listed in the Security Updates table?</strong></p> <p>The new Copilot+ devices that are now publicly available come with Windows 11, version 24H2 installed. Customers with these devices need to know about any vulnerabilities that affect their machine and to install the updates if they are not receiving automatic updates. Note that the general availability date for Windows 11, version 24H2 is scheduled for later this year.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Storage Microsoft Yes CVE-2024-38248 Use After Free 11923 11924 11926 11927 11929 11930 11931 12085 12086 12097 12098 12099 12242 12243 12244 12389 12390 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11926 Elevation of Privilege 11927 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12085 Elevation of Privilege 12086 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12244 Elevation of Privilege 12389 Elevation of Privilege 12390 Important 11923 Important 11924 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 12085 Important 12086 Important 12097 Important 12098 Important 12099 Important 12242 Important 12243 Important 12244 Important 12389 Important 12390 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 11923 7.0 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 11924 7.0 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 11926 7.0 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 11927 7.0 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 11929 7.0 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 11930 7.0 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 11931 7.0 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 12085 7.0 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 12086 7.0 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 12097 7.0 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 12098 7.0 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 12099 7.0 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 12242 7.0 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 12243 7.0 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 12244 7.0 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 12389 7.0 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 12390 5042881 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042881 5041160 11923 11924 Yes Security Update 10.0.20348.2700 https://support.microsoft.com/help/5042881 11923 11924 5042881 5042881 https://support.microsoft.com/help/5042881 11923 11924 5042880 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042880 11923 11924 Yes SecurityHotpatchUpdate 10.0.20348.2695 https://support.microsoft.com/help/5042880 11923 11924 5042880 5043067 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043067 5041592 11926 11927 Yes Security Update 10.0.22000.3197 https://support.microsoft.com/help/5043067 11926 11927 5043067 5043067 https://support.microsoft.com/help/5043067 11926 11927 5043064 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043064 5041580 11929 11930 11931 Yes Security Update 10.0.19044.4894 https://support.microsoft.com/help/5043064 11929 11930 11931 5043064 5043064 https://support.microsoft.com/help/5043064 11929 11930 11931 12097 12098 12099 5043076 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043076 5041585 12085 12086 Yes Security Update 10.0.22621.4169 https://support.microsoft.com/help/5043076 12085 12086 5043076 5043076 https://support.microsoft.com/help/5043076 12085 12086 12242 12243 5043064 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043064 5041580 12097 12098 12099 Yes Security Update 10.0.19045.4894 https://support.microsoft.com/help/5043064 12097 12098 12099 5043064 5043076 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043076 5041585 12242 12243 Yes Security Update 10.0.22631.4169 https://support.microsoft.com/help/5043076 12242 12243 5043076 5043055 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043055 5041573 12244 Yes Security Update 10.0.25398.1128 https://support.microsoft.com/help/5043055 12244 5043055 5043080 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043080 12389 12390 Yes Security Update 10.0.26100.1742 https://support.microsoft.com/help/5043080 12389 12390 5043080 5043080 https://support.microsoft.com/help/5043080 12389 12390 <a href="https://twitter.com/lm0963">lm0963</a> with <a href="https://twitter.com/tiangonglab">TianGongLab of Legendsec at QI-ANXIN Group</a> 1.0 2024-09-10T00:00:00 <p>Information published.</p> Microsoft AllJoyn API Information Disclosure Vulnerability <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is uninitialized memory.</p> Windows AllJoyn API Microsoft Yes CVE-2024-38257 Use of Uninitialized Resource 11568 11569 11571 11572 11923 11924 11926 11927 11929 11930 11931 12085 12086 12097 12098 12099 12242 12243 12244 10852 10853 10816 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11926 Information Disclosure 11927 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12085 Information Disclosure 12086 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12244 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 12085 Important 12086 Important 12097 Important 12098 Important 12099 Important 12242 Important 12243 Important 12244 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11926 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11927 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12085 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12086 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12244 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5043050 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043050 5041578 11568 11569 11571 11572 Yes Security Update 10.0.17763.6293 https://support.microsoft.com/help/5043050 11568 11569 11571 11572 5043050 5043050 https://support.microsoft.com/help/5043050 11568 11569 11571 11572 5042881 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042881 5041160 11923 11924 Yes Security Update 10.0.20348.2700 https://support.microsoft.com/help/5042881 11923 11924 5042881 5042881 https://support.microsoft.com/help/5042881 11923 11924 5042880 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042880 11923 11924 Yes SecurityHotpatchUpdate 10.0.20348.2695 https://support.microsoft.com/help/5042880 11923 11924 5042880 5043067 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043067 5041592 11926 11927 Yes Security Update 10.0.22000.3197 https://support.microsoft.com/help/5043067 11926 11927 5043067 5043067 https://support.microsoft.com/help/5043067 11926 11927 5043064 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043064 5041580 11929 11930 11931 Yes Security Update 10.0.19044.4894 https://support.microsoft.com/help/5043064 11929 11930 11931 5043064 5043064 https://support.microsoft.com/help/5043064 11929 11930 11931 12097 12098 12099 5043076 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043076 5041585 12085 12086 Yes Security Update 10.0.22621.4169 https://support.microsoft.com/help/5043076 12085 12086 5043076 5043076 https://support.microsoft.com/help/5043076 12085 12086 12242 12243 5043064 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043064 5041580 12097 12098 12099 Yes Security Update 10.0.19045.4894 https://support.microsoft.com/help/5043064 12097 12098 12099 5043064 5043076 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043076 5041585 12242 12243 Yes Security Update 10.0.22631.4169 https://support.microsoft.com/help/5043076 12242 12243 5043076 5043055 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043055 5041573 12244 Yes Security Update 10.0.25398.1128 https://support.microsoft.com/help/5043055 12244 5043055 5043051 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043051 5041773 10852 10853 10816 10855 Yes Security Update 10.0.14393.7336 https://support.microsoft.com/help/5043051 10852 10853 10816 10855 5043051 5043051 https://support.microsoft.com/help/5043051 10852 10853 10816 10855 <a href="https://www.talosintelligence.com/vulnerability_reports">Cisco Talos</a> 1.0 2024-09-10T00:00:00 <p>Information published.</p> Windows Remote Desktop Licensing Service Information Disclosure Vulnerability <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is sensitive information.</p> Windows Remote Desktop Licensing Service Microsoft Yes CVE-2024-38258 Relative Path Traversal 11571 11572 11923 11924 12244 10816 10855 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12244 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 9312 Information Disclosure 10287 Information Disclosure 9318 Information Disclosure 9344 Information Disclosure 10051 Information Disclosure 10049 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11571 Important 11572 Important 11923 Important 11924 Important 12244 Important 10816 Important 10855 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12244 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 9312 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10287 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 9318 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 9344 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10051 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10049 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5043050 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043050 5041578 11571 11572 Yes Security Update 10.0.17763.6293 https://support.microsoft.com/help/5043050 11571 11572 5043050 5043050 https://support.microsoft.com/help/5043050 11571 11572 5042881 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042881 5041160 11923 11924 Yes Security Update 10.0.20348.2700 https://support.microsoft.com/help/5042881 11923 11924 5042881 5042881 https://support.microsoft.com/help/5042881 11923 11924 5042880 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042880 11923 11924 Yes SecurityHotpatchUpdate 10.0.20348.2695 https://support.microsoft.com/help/5042880 11923 11924 5042880 5043055 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043055 5041573 12244 Yes Security Update 10.0.25398.1128 https://support.microsoft.com/help/5043055 12244 5043055 5043051 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043051 5041773 10816 10855 Yes Security Update 10.0.14393.7336 https://support.microsoft.com/help/5043051 10816 10855 5043051 5043051 https://support.microsoft.com/help/5043051 10816 10855 5043135 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043135 5041850 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.22870 https://support.microsoft.com/help/5043135 9312 10287 9318 9344 5043135 5043135 https://support.microsoft.com/help/5043135 9312 10287 9318 9344 5043087 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043087 9312 10287 9318 9344 Yes Security Only 6.0.6003.22870 https://support.microsoft.com/help/5043087 9312 10287 9318 9344 5043087 5043087 https://support.microsoft.com/help/5043087 9312 10287 9318 9344 5043129 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043129 5041838 10051 10049 Yes Monthly Rollup 6.1.7601.27320 https://support.microsoft.com/help/5043129 10051 10049 5043129 5043092 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043092 10051 10049 Yes Security Only 6.1.7601.27320 https://support.microsoft.com/help/5043092 10051 10049 5043092 5043125 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043125 5041851 10378 10379 Yes Monthly Rollup 6.2.9200.25073 https://support.microsoft.com/help/5043125 10378 10379 5043125 5043125 https://support.microsoft.com/help/5043125 10378 10379 5043138 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043138 5041828 10483 10543 Yes Monthly Rollup 6.3.9600.22175 https://support.microsoft.com/help/5043138 10483 10543 5043138 5043138 https://support.microsoft.com/help/5043138 10483 10543 <a href="https://twitter.com/edwardzpeng">Zhiniang Peng</a> <a href="https://twitter.com/Ver0759">Chunyang Han</a> <a href="https://twitter.com/lewislee53">Lewis Lee</a> 1.0 2024-09-10T00:00:00 <p>Information published.</p> Microsoft Management Console Remote Code Execution Vulnerability <p><strong>Windows 11, version 24H2 is not generally available yet. Why are there updates for this version of Windows listed in the Security Updates table?</strong></p> <p>The new Copilot+ devices that are now publicly available come with Windows 11, version 24H2 installed. Customers with these devices need to know about any vulnerabilities that affect their machine and to install the updates if they are not receiving automatic updates. Note that the general availability date for Windows 11, version 24H2 is scheduled for later this year.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>Exploitation of the vulnerability requires that a user open a specially crafted file.</p> <ul> <li>In an email attack scenario, an attacker could exploit the vulnerability by sending the specially crafted file to the user and convincing the user to open the file.</li> <li>In a web-based attack scenario, an attacker could host a website (or leverage a compromised website that accepts or hosts user-provided content) containing a specially crafted file designed to exploit the vulnerability.</li> </ul> <p>An attacker would have no way to force users to visit the website. Instead, an attacker would have to convince users to click a link, typically by way of an enticement in an email or instant message, and then convince them to open the specially crafted file.</p> Microsoft Management Console Microsoft Yes CVE-2024-38259 Use After Free 11923 11924 11926 11927 12085 12086 12242 12243 12244 12389 12390 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11926 Remote Code Execution 11927 Remote Code Execution 12085 Remote Code Execution 12086 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12244 Remote Code Execution 12389 Remote Code Execution 12390 Important 11923 Important 11924 Important 11926 Important 11927 Important 12085 Important 12086 Important 12242 Important 12243 Important 12244 Important 12389 Important 12390 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12085 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12086 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12244 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 5042881 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042881 5041160 11923 11924 Yes Security Update 10.0.20348.2700 https://support.microsoft.com/help/5042881 11923 11924 5042881 5042881 https://support.microsoft.com/help/5042881 11923 11924 5042880 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042880 11923 11924 Yes SecurityHotpatchUpdate 10.0.20348.2695 https://support.microsoft.com/help/5042880 11923 11924 5042880 5043067 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043067 5041592 11926 11927 Yes Security Update 10.0.22000.3197 https://support.microsoft.com/help/5043067 11926 11927 5043067 5043067 https://support.microsoft.com/help/5043067 11926 11927 5043076 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043076 5041585 12085 12086 Yes Security Update 10.0.22621.4169 https://support.microsoft.com/help/5043076 12085 12086 5043076 5043076 https://support.microsoft.com/help/5043076 12085 12086 12242 12243 5043076 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043076 5041585 12242 12243 Yes Security Update 10.0.22631.4169 https://support.microsoft.com/help/5043076 12242 12243 5043076 5043055 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043055 5041573 12244 Yes Security Update 10.0.25398.1128 https://support.microsoft.com/help/5043055 12244 5043055 5043080 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043080 12389 12390 Yes Security Update 10.0.26100.1742 https://support.microsoft.com/help/5043080 12389 12390 5043080 5043080 https://support.microsoft.com/help/5043080 12389 12390 Anonymous 1.0 2024-09-10T00:00:00 <p>Information published.</p> Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability <p><strong>According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability?</strong></p> <p>Any authenticated attacker could trigger this vulnerability. It does not require admin or other elevated privileges.</p> Windows Remote Desktop Licensing Service Microsoft Yes CVE-2024-38260 Use of Uninitialized Resource 11571 11572 11923 11924 12244 10816 10855 10051 10049 10378 10379 10483 10543 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12244 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10051 Remote Code Execution 10049 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11571 Important 11572 Important 11923 Important 11924 Important 12244 Important 10816 Important 10855 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12244 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5043050 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043050 5041578 11571 11572 Yes Security Update 10.0.17763.6293 https://support.microsoft.com/help/5043050 11571 11572 5043050 5043050 https://support.microsoft.com/help/5043050 11571 11572 5042881 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042881 5041160 11923 11924 Yes Security Update 10.0.20348.2700 https://support.microsoft.com/help/5042881 11923 11924 5042881 5042881 https://support.microsoft.com/help/5042881 11923 11924 5042880 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042880 11923 11924 Yes SecurityHotpatchUpdate 10.0.20348.2695 https://support.microsoft.com/help/5042880 11923 11924 5042880 5043055 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043055 5041573 12244 Yes Security Update 10.0.25398.1128 https://support.microsoft.com/help/5043055 12244 5043055 5043051 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043051 5041773 10816 10855 Yes Security Update 10.0.14393.7336 https://support.microsoft.com/help/5043051 10816 10855 5043051 5043051 https://support.microsoft.com/help/5043051 10816 10855 5043129 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043129 5041838 10051 10049 Yes Monthly Rollup 6.1.7601.27320 https://support.microsoft.com/help/5043129 10051 10049 5043129 5043092 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043092 10051 10049 Yes Security Only 6.1.7601.27320 https://support.microsoft.com/help/5043092 10051 10049 5043092 5043125 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043125 5041851 10378 10379 Yes Monthly Rollup 6.2.9200.25073 https://support.microsoft.com/help/5043125 10378 10379 5043125 5043125 https://support.microsoft.com/help/5043125 10378 10379 5043138 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043138 5041828 10483 10543 Yes Monthly Rollup 6.3.9600.22175 https://support.microsoft.com/help/5043138 10483 10543 5043138 5043138 https://support.microsoft.com/help/5043138 10483 10543 <a href="https://twitter.com/ver0759">Chunyang Han</a> <a href="https://twitter.com/edwardzpeng">Zhiniang Peng</a> <a href="https://twitter.com/lewislee53">Lewis Lee</a> 1.0 2024-09-10T00:00:00 <p>Information published.</p> Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability <p><strong>According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability?</strong></p> <p>Any authenticated attacker could trigger this vulnerability. It does not require admin or other elevated privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Remote Desktop Licensing Service Microsoft Yes CVE-2024-38263 Sensitive Data Storage in Improperly Locked Memory 11571 11572 11923 11924 12244 10816 10855 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12244 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 9312 Remote Code Execution 10287 Remote Code Execution 9318 Remote Code Execution 9344 Remote Code Execution 10051 Remote Code Execution 10049 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11571 Important 11572 Important 11923 Important 11924 Important 12244 Important 10816 Important 10855 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12244 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5043050 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043050 5041578 11571 11572 Yes Security Update 10.0.17763.6293 https://support.microsoft.com/help/5043050 11571 11572 5043050 5043050 https://support.microsoft.com/help/5043050 11571 11572 5042881 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042881 5041160 11923 11924 Yes Security Update 10.0.20348.2700 https://support.microsoft.com/help/5042881 11923 11924 5042881 5042881 https://support.microsoft.com/help/5042881 11923 11924 5042880 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042880 11923 11924 Yes SecurityHotpatchUpdate 10.0.20348.2695 https://support.microsoft.com/help/5042880 11923 11924 5042880 5043055 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043055 5041573 12244 Yes Security Update 10.0.25398.1128 https://support.microsoft.com/help/5043055 12244 5043055 5043051 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043051 5041773 10816 10855 Yes Security Update 10.0.14393.7336 https://support.microsoft.com/help/5043051 10816 10855 5043051 5043051 https://support.microsoft.com/help/5043051 10816 10855 5043135 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043135 5041850 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.22870 https://support.microsoft.com/help/5043135 9312 10287 9318 9344 5043135 5043135 https://support.microsoft.com/help/5043135 9312 10287 9318 9344 5043087 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043087 9312 10287 9318 9344 Yes Security Only 6.0.6003.22870 https://support.microsoft.com/help/5043087 9312 10287 9318 9344 5043087 5043087 https://support.microsoft.com/help/5043087 9312 10287 9318 9344 5043129 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043129 5041838 10051 10049 Yes Monthly Rollup 6.1.7601.27320 https://support.microsoft.com/help/5043129 10051 10049 5043129 5043092 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043092 10051 10049 Yes Security Only 6.1.7601.27320 https://support.microsoft.com/help/5043092 10051 10049 5043092 5043125 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043125 5041851 10378 10379 Yes Monthly Rollup 6.2.9200.25073 https://support.microsoft.com/help/5043125 10378 10379 5043125 5043125 https://support.microsoft.com/help/5043125 10378 10379 5043138 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043138 5041828 10483 10543 Yes Monthly Rollup 6.3.9600.22175 https://support.microsoft.com/help/5043138 10483 10543 5043138 5043138 https://support.microsoft.com/help/5043138 10483 10543 <a href="https://twitter.com/lewislee53">Lewis Lee</a> <a href="https://twitter.com/ver0759">Chunyang Han</a> <a href="https://twitter.com/edwardzpeng">Zhiniang Peng</a> 1.0 2024-09-10T00:00:00 <p>Information published.</p> Windows TCP/IP Remote Code Execution Vulnerability <p><strong>Windows 11, version 24H2 is not generally available yet. Why are there updates for this version of Windows listed in the Security Updates table?</strong></p> <p>The new Copilot+ devices that are now publicly available come with Windows 11, version 24H2 installed. Customers with these devices need to know about any vulnerabilities that affect their machine and to install the updates if they are not receiving automatic updates. Note that the general availability date for Windows 11, version 24H2 is scheduled for later this year.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system and the ability to manipulate its components to trigger a specific condition. Successful exploitation is not guaranteed and depends on a combination of factors that may include the environment, system configuration, and the presence of additional security measures.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker must send a specially crafted request to a Windows machine that has NetNAT service configured, which is a non-default configuration. In addition, specific network conditions must exist for exploitation to succeed.</p> Windows TCP/IP Microsoft Yes CVE-2024-21416 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11926 11927 11929 11930 11931 12085 12086 12097 12098 12099 12242 12243 12244 12389 12390 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11926 Remote Code Execution 11927 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12085 Remote Code Execution 12086 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12244 Remote Code Execution 12389 Remote Code Execution 12390 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 12085 Important 12086 Important 12097 Important 12098 Important 12099 Important 12242 Important 12243 Important 12244 Important 12389 Important 12390 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12085 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12086 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12244 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 5043050 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043050 5041578 11568 11569 11571 11572 Yes Security Update 10.0.17763.6293 https://support.microsoft.com/help/5043050 11568 11569 11571 11572 5043050 5043050 https://support.microsoft.com/help/5043050 11568 11569 11571 11572 5042881 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042881 5041160 11923 11924 Yes Security Update 10.0.20348.2700 https://support.microsoft.com/help/5042881 11923 11924 5042881 5042881 https://support.microsoft.com/help/5042881 11923 11924 5042880 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042880 11923 11924 Yes SecurityHotpatchUpdate 10.0.20348.2695 https://support.microsoft.com/help/5042880 11923 11924 5042880 5043067 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043067 5041592 11926 11927 Yes Security Update 10.0.22000.3197 https://support.microsoft.com/help/5043067 11926 11927 5043067 5043067 https://support.microsoft.com/help/5043067 11926 11927 5043064 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043064 5041580 11929 11930 11931 Yes Security Update 10.0.19044.4894 https://support.microsoft.com/help/5043064 11929 11930 11931 5043064 5043064 https://support.microsoft.com/help/5043064 11929 11930 11931 12097 12098 12099 5043076 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043076 5041585 12085 12086 Yes Security Update 10.0.22621.4169 https://support.microsoft.com/help/5043076 12085 12086 5043076 5043076 https://support.microsoft.com/help/5043076 12085 12086 12242 12243 5043064 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043064 5041580 12097 12098 12099 Yes Security Update 10.0.19045.4894 https://support.microsoft.com/help/5043064 12097 12098 12099 5043064 5043076 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043076 5041585 12242 12243 Yes Security Update 10.0.22631.4169 https://support.microsoft.com/help/5043076 12242 12243 5043076 5043055 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043055 5041573 12244 Yes Security Update 10.0.25398.1128 https://support.microsoft.com/help/5043055 12244 5043055 5043080 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043080 12389 12390 Yes Security Update 10.0.26100.1742 https://support.microsoft.com/help/5043080 12389 12390 5043080 5043080 https://support.microsoft.com/help/5043080 12389 12390 Wei in Kunlun Lab with <a href="https://www.cyberkl.com/">Cyber KunLun</a> 1.0 2024-09-10T00:00:00 <p>Information published.</p> Windows TCP/IP Remote Code Execution Vulnerability <p><strong>Windows 11, version 24H2 is not generally available yet. Why are there updates for this version of Windows listed in the Security Updates table?</strong></p> <p>The new Copilot+ devices that are now publicly available come with Windows 11, version 24H2 installed. Customers with these devices need to know about any vulnerabilities that affect their machine and to install the updates if they are not receiving automatic updates. Note that the general availability date for Windows 11, version 24H2 is scheduled for later this year.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system and the ability to manipulate its components to trigger a specific condition. Successful exploitation is not guaranteed and depends on a combination of factors that may include the environment, system configuration, and the presence of additional security measures.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker must send a specially crafted request to a Windows machine that has NetNAT service configured, which is a non-default configuration. In addition, specific network conditions must exist for exploitation to succeed.</p> Windows TCP/IP Microsoft Yes CVE-2024-38045 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11926 11927 11929 11930 11931 12085 12086 12097 12098 12099 12242 12243 12244 12389 12390 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11926 Remote Code Execution 11927 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12085 Remote Code Execution 12086 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12244 Remote Code Execution 12389 Remote Code Execution 12390 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 12085 Important 12086 Important 12097 Important 12098 Important 12099 Important 12242 Important 12243 Important 12244 Important 12389 Important 12390 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12085 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12086 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12244 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 5043050 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043050 5041578 11568 11569 11571 11572 Yes Security Update 10.0.17763.6293 https://support.microsoft.com/help/5043050 11568 11569 11571 11572 5043050 5043050 https://support.microsoft.com/help/5043050 11568 11569 11571 11572 5042881 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042881 5041160 11923 11924 Yes Security Update 10.0.20348.2700 https://support.microsoft.com/help/5042881 11923 11924 5042881 5042881 https://support.microsoft.com/help/5042881 11923 11924 5042880 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042880 11923 11924 Yes SecurityHotpatchUpdate 10.0.20348.2695 https://support.microsoft.com/help/5042880 11923 11924 5042880 5043067 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043067 5041592 11926 11927 Yes Security Update 10.0.22000.3197 https://support.microsoft.com/help/5043067 11926 11927 5043067 5043067 https://support.microsoft.com/help/5043067 11926 11927 5043064 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043064 5041580 11929 11930 11931 Yes Security Update 10.0.19044.4894 https://support.microsoft.com/help/5043064 11929 11930 11931 5043064 5043064 https://support.microsoft.com/help/5043064 11929 11930 11931 12097 12098 12099 5043076 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043076 5041585 12085 12086 Yes Security Update 10.0.22621.4169 https://support.microsoft.com/help/5043076 12085 12086 5043076 5043076 https://support.microsoft.com/help/5043076 12085 12086 12242 12243 5043064 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043064 5041580 12097 12098 12099 Yes Security Update 10.0.19045.4894 https://support.microsoft.com/help/5043064 12097 12098 12099 5043064 5043076 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043076 5041585 12242 12243 Yes Security Update 10.0.22631.4169 https://support.microsoft.com/help/5043076 12242 12243 5043076 5043055 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043055 5041573 12244 Yes Security Update 10.0.25398.1128 https://support.microsoft.com/help/5043055 12244 5043055 5043080 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043080 12389 12390 Yes Security Update 10.0.26100.1742 https://support.microsoft.com/help/5043080 12389 12390 5043080 5043080 https://support.microsoft.com/help/5043080 12389 12390 Wei in Kunlun Lab with <a href="https://www.cyberkl.com/">Cyber KunLun</a> 1.0 2024-09-10T00:00:00 <p>Information published.</p> Windows Network Address Translation (NAT) Remote Code Execution Vulnerability <p><strong>Windows 11, version 24H2 is not generally available yet. Why are there updates for this version of Windows listed in the Security Updates table?</strong></p> <p>The new Copilot+ devices that are now publicly available come with Windows 11, version 24H2 installed. Customers with these devices need to know about any vulnerabilities that affect their machine and to install the updates if they are not receiving automatic updates. Note that the general availability date for Windows 11, version 24H2 is scheduled for later this year.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>According to the CVSS metric, the attack vector is adjacent (AV:A). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires that an attacker will need to first gain access to the restricted network before running an attack.</p> Windows Network Address Translation (NAT) Microsoft Yes CVE-2024-38119 Use After Free 11568 11569 11571 11572 11923 11924 11926 11927 11929 11930 11931 12085 12086 12097 12098 12099 12242 12243 12244 12389 12390 10729 10735 10852 10853 10816 10855 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11926 Remote Code Execution 11927 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12085 Remote Code Execution 12086 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12244 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 10729 Remote Code Execution 10735 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Critical 11568 Critical 11569 Critical 11571 Critical 11572 Critical 11923 Critical 11924 Critical 11926 Critical 11927 Critical 11929 Critical 11930 Critical 11931 Critical 12085 Critical 12086 Critical 12097 Critical 12098 Critical 12099 Critical 12242 Critical 12243 Critical 12244 Critical 12389 Critical 12390 Critical 10729 Critical 10735 Critical 10852 Critical 10853 Critical 10816 Critical 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12085 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12086 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12244 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5043050 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043050 5041578 11568 11569 11571 11572 Yes Security Update 10.0.17763.6293 https://support.microsoft.com/help/5043050 11568 11569 11571 11572 5043050 5043050 https://support.microsoft.com/help/5043050 11568 11569 11571 11572 5042881 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042881 5041160 11923 11924 Yes Security Update 10.0.20348.2700 https://support.microsoft.com/help/5042881 11923 11924 5042881 5042881 https://support.microsoft.com/help/5042881 11923 11924 5042880 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042880 11923 11924 Yes SecurityHotpatchUpdate 10.0.20348.2695 https://support.microsoft.com/help/5042880 11923 11924 5042880 5043067 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043067 5041592 11926 11927 Yes Security Update 10.0.22000.3197 https://support.microsoft.com/help/5043067 11926 11927 5043067 5043067 https://support.microsoft.com/help/5043067 11926 11927 5043064 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043064 5041580 11929 11930 11931 Yes Security Update 10.0.19044.4894 https://support.microsoft.com/help/5043064 11929 11930 11931 5043064 5043064 https://support.microsoft.com/help/5043064 11929 11930 11931 12097 12098 12099 5043076 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043076 5041585 12085 12086 Yes Security Update 10.0.22621.4169 https://support.microsoft.com/help/5043076 12085 12086 5043076 5043076 https://support.microsoft.com/help/5043076 12085 12086 12242 12243 5043064 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043064 5041580 12097 12098 12099 Yes Security Update 10.0.19045.4894 https://support.microsoft.com/help/5043064 12097 12098 12099 5043064 5043076 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043076 5041585 12242 12243 Yes Security Update 10.0.22631.4169 https://support.microsoft.com/help/5043076 12242 12243 5043076 5043055 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043055 5041573 12244 Yes Security Update 10.0.25398.1128 https://support.microsoft.com/help/5043055 12244 5043055 5043080 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043080 12389 12390 Yes Security Update 10.0.26100.1742 https://support.microsoft.com/help/5043080 12389 12390 5043080 5043080 https://support.microsoft.com/help/5043080 12389 12390 5043083 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043083 5041782 10729 10735 Yes Security Update 10.0.10240.20766 https://support.microsoft.com/help/5043083 10729 10735 5043083 5043083 https://support.microsoft.com/help/5043083 10729 10735 5043051 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043051 5041773 10852 10853 10816 10855 Yes Security Update 10.0.14393.7336 https://support.microsoft.com/help/5043051 10852 10853 10816 10855 5043051 5043051 https://support.microsoft.com/help/5043051 10852 10853 10816 10855 Wei in Kunlun Lab with <a href="https://www.cyberkl.com/">Cyber KunLun</a> 1.0 2024-09-10T00:00:00 <p>Information published.</p> Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability <p><strong>According to the CVSS metric, successful exploitation of this vulnerability could lead to some loss of availability (A:L) and a total loss of Integrity (I:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability enables an attacker to perform arbitrary file deletion (I:H). That file deletion might result in partial loss of component availability. (A:L).</p> <p><strong>According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability?</strong></p> <p>Any authenticated attacker could trigger this vulnerability. It does not require admin or other elevated privileges.</p> Windows Remote Desktop Licensing Service Microsoft Yes CVE-2024-43454 Relative Path Traversal 11571 11572 11923 11924 12244 10816 10855 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12244 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 9312 Remote Code Execution 10287 Remote Code Execution 9318 Remote Code Execution 9344 Remote Code Execution 10051 Remote Code Execution 10049 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11571 Important 11572 Important 11923 Important 11924 Important 12244 Important 10816 Important 10855 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.1 6.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L/E:U/RL:O/RC:C 11571 7.1 6.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L/E:U/RL:O/RC:C 11572 7.1 6.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L/E:U/RL:O/RC:C 11923 7.1 6.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L/E:U/RL:O/RC:C 11924 7.1 6.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L/E:U/RL:O/RC:C 12244 7.1 6.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L/E:U/RL:O/RC:C 10816 7.1 6.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L/E:U/RL:O/RC:C 10855 7.1 6.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L/E:U/RL:O/RC:C 9312 7.1 6.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L/E:U/RL:O/RC:C 10287 7.1 6.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L/E:U/RL:O/RC:C 9318 7.1 6.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L/E:U/RL:O/RC:C 9344 7.1 6.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L/E:U/RL:O/RC:C 10051 7.1 6.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L/E:U/RL:O/RC:C 10049 7.1 6.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L/E:U/RL:O/RC:C 10378 7.1 6.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L/E:U/RL:O/RC:C 10379 7.1 6.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L/E:U/RL:O/RC:C 10483 7.1 6.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L/E:U/RL:O/RC:C 10543 5043050 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043050 5041578 11571 11572 Yes Security Update 10.0.17763.6293 https://support.microsoft.com/help/5043050 11571 11572 5043050 5043050 https://support.microsoft.com/help/5043050 11571 11572 5042881 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042881 5041160 11923 11924 Yes Security Update 10.0.20348.2700 https://support.microsoft.com/help/5042881 11923 11924 5042881 5042881 https://support.microsoft.com/help/5042881 11923 11924 5042880 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042880 11923 11924 Yes SecurityHotpatchUpdate 10.0.20348.2695 https://support.microsoft.com/help/5042880 11923 11924 5042880 5043055 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043055 5041573 12244 Yes Security Update 10.0.25398.1128 https://support.microsoft.com/help/5043055 12244 5043055 5043051 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043051 5041773 10816 10855 Yes Security Update 10.0.14393.7336 https://support.microsoft.com/help/5043051 10816 10855 5043051 5043051 https://support.microsoft.com/help/5043051 10816 10855 5043135 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043135 5041850 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.22870 https://support.microsoft.com/help/5043135 9312 10287 9318 9344 5043135 5043135 https://support.microsoft.com/help/5043135 9312 10287 9318 9344 5043087 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043087 9312 10287 9318 9344 Yes Security Only 6.0.6003.22870 https://support.microsoft.com/help/5043087 9312 10287 9318 9344 5043087 5043087 https://support.microsoft.com/help/5043087 9312 10287 9318 9344 5043129 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043129 5041838 10051 10049 Yes Monthly Rollup 6.1.7601.27320 https://support.microsoft.com/help/5043129 10051 10049 5043129 5043092 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043092 10051 10049 Yes Security Only 6.1.7601.27320 https://support.microsoft.com/help/5043092 10051 10049 5043092 5043125 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043125 5041851 10378 10379 Yes Monthly Rollup 6.2.9200.25073 https://support.microsoft.com/help/5043125 10378 10379 5043125 5043125 https://support.microsoft.com/help/5043125 10378 10379 5043138 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043138 5041828 10483 10543 Yes Monthly Rollup 6.3.9600.22175 https://support.microsoft.com/help/5043138 10483 10543 5043138 5043138 https://support.microsoft.com/help/5043138 10483 10543 <a href="https://twitter.com/ver0759">Chunyang Han</a> <a href="https://twitter.com/edwardzpeng">Zhiniang Peng</a> <a href="https://twitter.com/lewislee53">Lewis Lee</a> 1.0 2024-09-10T00:00:00 <p>Information published.</p> Windows Remote Desktop Licensing Service Spoofing Vulnerability <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>To successfully exploit this vulnerability an attacker must send specially crafted requests to the Terminal Server Licensing Service, which must be running and accessible over the network.</p> Windows Remote Desktop Licensing Service Microsoft Yes CVE-2024-43455 Improper Input Validation 11571 11572 11923 11924 12244 10816 10855 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Spoofing 11571 Spoofing 11572 Spoofing 11923 Spoofing 11924 Spoofing 12244 Spoofing 10816 Spoofing 10855 Spoofing 9312 Spoofing 10287 Spoofing 9318 Spoofing 9344 Spoofing 10051 Spoofing 10049 Spoofing 10378 Spoofing 10379 Spoofing 10483 Spoofing 10543 Important 11571 Important 11572 Important 11923 Important 11924 Important 12244 Important 10816 Important 10855 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12244 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5043050 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043050 5041578 11571 11572 Yes Security Update 10.0.17763.6293 https://support.microsoft.com/help/5043050 11571 11572 5043050 5043050 https://support.microsoft.com/help/5043050 11571 11572 5042881 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042881 5041160 11923 11924 Yes Security Update 10.0.20348.2700 https://support.microsoft.com/help/5042881 11923 11924 5042881 5042881 https://support.microsoft.com/help/5042881 11923 11924 5042880 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042880 11923 11924 Yes SecurityHotpatchUpdate 10.0.20348.2695 https://support.microsoft.com/help/5042880 11923 11924 5042880 5043055 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043055 5041573 12244 Yes Security Update 10.0.25398.1128 https://support.microsoft.com/help/5043055 12244 5043055 5043051 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043051 5041773 10816 10855 Yes Security Update 10.0.14393.7336 https://support.microsoft.com/help/5043051 10816 10855 5043051 5043051 https://support.microsoft.com/help/5043051 10816 10855 5043135 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043135 5041850 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.22870 https://support.microsoft.com/help/5043135 9312 10287 9318 9344 5043135 5043135 https://support.microsoft.com/help/5043135 9312 10287 9318 9344 5043087 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043087 9312 10287 9318 9344 Yes Security Only 6.0.6003.22870 https://support.microsoft.com/help/5043087 9312 10287 9318 9344 5043087 5043087 https://support.microsoft.com/help/5043087 9312 10287 9318 9344 5043129 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043129 5041838 10051 10049 Yes Monthly Rollup 6.1.7601.27320 https://support.microsoft.com/help/5043129 10051 10049 5043129 5043092 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043092 10051 10049 Yes Security Only 6.1.7601.27320 https://support.microsoft.com/help/5043092 10051 10049 5043092 5043125 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043125 5041851 10378 10379 Yes Monthly Rollup 6.2.9200.25073 https://support.microsoft.com/help/5043125 10378 10379 5043125 5043125 https://support.microsoft.com/help/5043125 10378 10379 5043138 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043138 5041828 10483 10543 Yes Monthly Rollup 6.3.9600.22175 https://support.microsoft.com/help/5043138 10483 10543 5043138 5043138 https://support.microsoft.com/help/5043138 10483 10543 <a href="https://twitter.com/ver0759">Chunyang Han</a> <a href="https://twitter.com/edwardzpeng">Zhiniang Peng</a> <a href="https://twitter.com/lewislee53">Lewis Lee</a> 1.0 2024-09-10T00:00:00 <p>Information published.</p> Windows Setup and Deployment Elevation of Privilege Vulnerability <p><strong>Windows 11, version 24H2 is not generally available yet. Why are there updates for this version of Windows listed in the Security Updates table?</strong></p> <p>The new Copilot+ devices that are now publicly available come with Windows 11, version 24H2 installed. Customers with these devices need to know about any vulnerabilities that affect their machine and to install the updates if they are not receiving automatic updates. Note that the general availability date for Windows 11, version 24H2 is scheduled for later this year.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Setup and Deployment Microsoft Yes CVE-2024-43457 Unquoted Search Path or Element 12389 12390 Elevation of Privilege 12389 Elevation of Privilege 12390 Important 12389 Important 12390 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 5043080 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043080 12389 12390 Yes Security Update 10.0.26100.1742 https://support.microsoft.com/help/5043080 12389 12390 5043080 5043080 https://support.microsoft.com/help/5043080 12389 12390 <a href="https://infosec.exchange/@wdormann">Will Dormann</a> with <a href="https://vu.ls/">Vul Labs</a> 1.0 2024-09-10T00:00:00 <p>Information published.</p> Windows Networking Information Disclosure Vulnerability <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is uninitialized memory.</p> <p><strong>According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability could allow a Hyper-V guest to affect the functionality of the Hyper-V host.</p> Windows Network Virtualization Microsoft Yes CVE-2024-43458 Use of Uninitialized Resource 10853 10816 10855 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.7 6.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 7.7 6.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 7.7 6.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5043051 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043051 5041773 10853 10816 10855 Yes Security Update 10.0.14393.7336 https://support.microsoft.com/help/5043051 10853 10816 10855 5043051 5043051 https://support.microsoft.com/help/5043051 10853 10816 10855 Anonymous 1.0 2024-09-10T00:00:00 <p>Information published.</p> Windows MSHTML Platform Spoofing Vulnerability <p><strong>The Security Updates table indicates that this vulnerability affects all supported versions of Microsoft Windows. Why are IE Cumulative updates listed for Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, and Windows Server 2012 R2?</strong></p> <p>While Microsoft has announced retirement of the Internet Explorer 11 application on certain platforms and the Microsoft Edge Legacy application is deprecated, the underlying MSHTML, EdgeHTML, and scripting platforms are still supported. The MSHTML platform is used by Internet Explorer mode in Microsoft Edge as well as other applications through WebBrowser control. The EdgeHTML platform is used by WebView and some UWP applications. The scripting platforms are used by MSHTML and EdgeHTML but can also be used by other legacy applications. Updates to address vulnerabilities in the MSHTML platform and scripting engine are included in the IE Cumulative Updates; EdgeHTML and Chakra changes are not applicable to those platforms.</p> <p>To stay fully protected, we recommend that customers who install Security Only updates install the IE Cumulative updates for this vulnerability.</p> <p><strong>Was this vulnerability exploited?</strong></p> <p>Yes. CVE-2024-43461 was exploited as a part of an attack chain relating to CVE-2024-38112, prior to July 2024. We released a fix for CVE-2024-38112 in our July 2024 security updates which broke this attack chain. See <a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38112">CVE-2024-38112 - Security Update Guide - Microsoft - Windows MSHTML Platform Spoofing Vulnerability</a>. Customers should install both the July 2024 and the September 2024 security updates to fully protect themselves.</p> <p><strong>Windows 11, version 24H2 is not generally available yet. Why are there updates for this version of Windows listed in the Security Updates table?</strong></p> <p>The new Copilot+ devices that are now publicly available come with Windows 11, version 24H2 installed. Customers with these devices need to know about any vulnerabilities that affect their machine and to install the updates if they are not receiving automatic updates. Note that the general availability date for Windows 11, version 24H2 is scheduled for later this year.</p> Windows MSHTML Platform Microsoft Yes CVE-2024-43461 User Interface (UI) Misrepresentation of Critical Information 12389 12390 11568 11569 11571 11572 11923 11924 11926 11927 11929 11930 11931 12085 12086 12097 12098 12099 12242 12243 12244 10729 10735 10852 10853 10816 10855 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Spoofing 12389 Spoofing 12390 Spoofing 11568 Spoofing 11569 Spoofing 11571 Spoofing 11572 Spoofing 11923 Spoofing 11924 Spoofing 11926 Spoofing 11927 Spoofing 11929 Spoofing 11930 Spoofing 11931 Spoofing 12085 Spoofing 12086 Spoofing 12097 Spoofing 12098 Spoofing 12099 Spoofing 12242 Spoofing 12243 Spoofing 12244 Spoofing 10729 Spoofing 10735 Spoofing 10852 Spoofing 10853 Spoofing 10816 Spoofing 10855 Spoofing 9312 Spoofing 10287 Spoofing 9318 Spoofing 9344 Spoofing 10051 Spoofing 10049 Spoofing 10378 Spoofing 10379 Spoofing 10483 Spoofing 10543 Important 12389 Important 12390 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 12085 Important 12086 Important 12097 Important 12098 Important 12099 Important 12242 Important 12243 Important 12244 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:Yes;Exploited:Yes;Latest Software Release:Exploitation Detected 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 12389 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 12390 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11568 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11569 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11571 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11572 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11923 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11924 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11926 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11927 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11929 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11930 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11931 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 12085 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 12086 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 12097 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 12098 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 12099 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 12242 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 12243 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 12244 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10729 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10735 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10852 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10853 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10816 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10855 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 9312 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10287 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 9318 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 9344 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10051 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10049 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10378 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10379 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10483 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10543 5043080 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043080 12389 12390 Yes Security Update 10.0.26100.1742 https://support.microsoft.com/help/5043080 12389 12390 5043080 5043080 https://support.microsoft.com/help/5043080 12389 12390 5043050 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043050 5041578 11568 11569 11571 11572 Yes Security Update 10.0.17763.6293 https://support.microsoft.com/help/5043050 11568 11569 11571 11572 5043050 5043050 https://support.microsoft.com/help/5043050 11568 11569 11571 11572 5042881 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042881 5041160 11923 11924 Yes Security Update 10.0.20348.2700 https://support.microsoft.com/help/5042881 11923 11924 5042881 5042881 https://support.microsoft.com/help/5042881 11923 11924 5042880 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042880 11923 11924 Yes SecurityHotpatchUpdate 10.0.20348.2695 https://support.microsoft.com/help/5042880 11923 11924 5042880 5043067 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043067 5041592 11926 11927 Yes Security Update 10.0.22000.3197 https://support.microsoft.com/help/5043067 11926 11927 5043067 5043067 https://support.microsoft.com/help/5043067 11926 11927 5043064 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043064 5041580 11929 11930 11931 Yes Security Update 10.0.19044.4894 https://support.microsoft.com/help/5043064 11929 11930 11931 5043064 5043064 https://support.microsoft.com/help/5043064 11929 11930 11931 12097 12098 12099 5043076 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043076 5041585 12085 12086 Yes Security Update 10.0.22621.4169 https://support.microsoft.com/help/5043076 12085 12086 5043076 5043076 https://support.microsoft.com/help/5043076 12085 12086 12242 12243 5043064 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043064 5041580 12097 12098 12099 Yes Security Update 10.0.19045.4894 https://support.microsoft.com/help/5043064 12097 12098 12099 5043064 5043076 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043076 5041585 12242 12243 Yes Security Update 10.0.22631.4169 https://support.microsoft.com/help/5043076 12242 12243 5043076 5043055 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043055 5041573 12244 Yes Security Update 10.0.25398.1128 https://support.microsoft.com/help/5043055 12244 5043055 5043083 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043083 5041782 10729 10735 Yes Security Update 10.0.10240.20766 https://support.microsoft.com/help/5043083 10729 10735 5043083 5043083 https://support.microsoft.com/help/5043083 10729 10735 5043051 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043051 5041773 10852 10853 10816 10855 Yes Security Update 10.0.14393.7336 https://support.microsoft.com/help/5043051 10852 10853 10816 10855 5043051 5043051 https://support.microsoft.com/help/5043051 10852 10853 10816 10855 5043135 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043135 5041850 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.22870 https://support.microsoft.com/help/5043135 9312 10287 9318 9344 5043135 5043135 https://support.microsoft.com/help/5043135 9312 10287 9318 9344 5043087 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043087 9312 10287 9318 9344 Yes Security Only 6.0.6003.22870 https://support.microsoft.com/help/5043087 9312 10287 9318 9344 5043087 5043087 https://support.microsoft.com/help/5043087 9312 10287 9318 9344 5043092 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043092 10051 10049 Yes Security Only 6.1.7601.27320 https://support.microsoft.com/help/5043092 10051 10049 5043092 5043049 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043049 5041770 10051 10049 Maybe IE Cumulative 1.001 https://support.microsoft.com/help/5043049 10051 10049 5043049 5043125 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043125 5041851 10378 10379 Yes Monthly Rollup 6.2.9200.25073 https://support.microsoft.com/help/5043125 10378 10379 5043125 5043125 https://support.microsoft.com/help/5043125 10378 10379 5043049 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043049 5041770 10378 Yes IE Cumulative 1.001 https://support.microsoft.com/help/5043049 10378 5043049 5043138 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043138 5041828 10483 10543 Yes Monthly Rollup 6.3.9600.22175 https://support.microsoft.com/help/5043138 10483 10543 5043138 5043138 https://support.microsoft.com/help/5043138 10483 10543 5043049 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043049 10483 Yes IE Cumulative 1.001 https://support.microsoft.com/help/5043049 10483 5043049 Michael Macelletti, Naiyi Jiang and Adel with Microsoft <a href="https://twitter.com/thezdi">Peter Girnus (@gothburz)</a> of <a href="https://www.zerodayinitiative.com/">Trend Micro Zero Day Initiative</a> 1.0 2024-09-10T00:00:00 <p>Information published.</p> 1.1 2024-09-13T00:00:00 <p>Corrected the Exploited, Publicly disclosed, and Exploitability assessment data and updated the CVSS Exploit Maturity metric. These are informational changes only.</p> Microsoft SharePoint Server Denial of Service Vulnerability Microsoft Office SharePoint Microsoft Yes CVE-2024-43466 Deserialization of Untrusted Data 10950 11585 11961 Denial of Service 10950 Denial of Service 11585 Denial of Service 11961 Important 10950 Important 11585 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10950 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11585 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11961 5002624 https://www.microsoft.com/download/details.aspx?id=106231 5002618 10950 Maybe Security Update 16.0.5465.1001 https://support.microsoft.com/help/5002624 10950 5002624 5002624 https://support.microsoft.com/help/5002624 10950 5002639 https://www.microsoft.com/download/details.aspx?id=106232 5002615 11585 Maybe Security Update 16.0.10414.20002 https://support.microsoft.com/help/5002639 11585 5002639 5002639 https://support.microsoft.com/help/5002639 11585 5002640 https://www.microsoft.com/download/details.aspx?id=106233 5002606 11961 Maybe Security Update 16.0.17928.20086 https://support.microsoft.com/help/5002640 11961 5002640 5002640 https://support.microsoft.com/help/5002640 11961 Piotr Bazydlo (@chudypb) of Trend Micro Zero Day Initiative 1.0 2024-09-10T00:00:00 <p>Information published.</p> 1.1 2024-10-06T00:00:00 <p>Updated links to security updates. This is an informational change only.</p> Azure CycleCloud Remote Code Execution Vulnerability <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker with basic user permissions can send specially crafted requests to modify the configuration of an Azure CycleCloud cluster to gain Root level permissions enabling them to execute commands on any Azure CycleCloud cluster in the current instance and in some scenarios, compromise administrator credentials.</p> Azure CycleCloud Microsoft Yes CVE-2024-43469 Improper Control of Generation of Code ('Code Injection') 11905 12102 12333 12371 12372 12373 12374 12375 12376 12377 12378 12379 12380 12381 12399 12398 12409 Remote Code Execution 11905 Remote Code Execution 12102 Remote Code Execution 12333 Remote Code Execution 12371 Remote Code Execution 12372 Remote Code Execution 12373 Remote Code Execution 12374 Remote Code Execution 12375 Remote Code Execution 12376 Remote Code Execution 12377 Remote Code Execution 12378 Remote Code Execution 12379 Remote Code Execution 12380 Remote Code Execution 12381 Remote Code Execution 12399 Remote Code Execution 12398 Remote Code Execution 12409 Important 11905 Important 12102 Important 12333 Important 12371 Important 12372 Important 12373 Important 12374 Important 12375 Important 12376 Important 12377 Important 12378 Important 12379 Important 12380 Important 12381 Important 12399 Important 12398 Important 12409 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11905 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12102 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12333 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12371 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12372 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12373 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12374 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12375 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12376 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12377 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12380 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12381 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12399 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12398 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12409 Release Notes https://learn.microsoft.com/en-us/azure/cyclecloud/how-to/upgrade-and-migrate?view=cyclecloud-8 11905 12102 12333 12371 12372 12373 12374 12375 12376 12377 12378 12379 12380 12381 12399 12398 12409 Maybe Security Update 8.6.4 https://learn.microsoft.com/en-us/azure/cyclecloud/release-notes?view=cyclecloud-8 11905 12102 12333 12371 12372 12373 12374 12375 12376 12377 12378 12379 12380 12381 12399 12398 12409 Release Notes Anonymous 1.0 2024-09-10T00:00:00 <p>Information published.</p> Azure Network Watcher VM Agent Elevation of Privilege Vulnerability <p><strong>Is there any action I need to take to be protected from this vulnerability?</strong></p> <p>If you have enabled automatic updates, you will automatically receive the update as soon as it is available. If you have not enabled automatic updates, you will need to update the product manually.</p> <p>Please see <a href="https://learn.microsoft.com/en-us/azure/virtual-machines/extensions/network-watcher-update?tabs=windows">Update Network Watcher extension to the latest version - Azure Virtual Machines | Microsoft Learn</a> for more information.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain administrator privileges.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>Exploitation of the vulnerability requires an admin user to stop or restart the service.</p> <p><strong>According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability?</strong></p> <p>Any authenticated attacker could trigger this vulnerability. It does not require admin or other elevated privileges.</p> Azure Network Watcher Microsoft Yes CVE-2024-43470 Improper Link Resolution Before File Access ('Link Following') 12359 Elevation of Privilege 12359 Important 12359 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12359 Release Notes https://learn.microsoft.com/en-us/azure/virtual-machines/extensions/network-watcher-update?tabs=windows 12359 Maybe Security Update 1.4.3422.1 https://learn.microsoft.com/en-us/azure/virtual-machines/extensions/network-watcher-update?tabs=windows 12359 Release Notes R4nger &amp; Zhiniang Peng 1.0 2024-09-10T00:00:00 <p>Information published.</p> Microsoft Windows Admin Center Information Disclosure Vulnerability <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>This attack requires a admin user on the client to connect to a malicious server and then take specific actions which could result in information disclosure.</p> <p><strong>According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability?</strong></p> <p>The attacker must have permissions to access the target domain environment to be able to exploit this vulnerability.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Windows Admin Center Microsoft Yes CVE-2024-43475 Buffer Over-read 9312 10287 9318 9344 Information Disclosure 9312 Information Disclosure 10287 Information Disclosure 9318 Information Disclosure 9344 Important 9312 Important 10287 Important 9318 Important 9344 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.3 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 9312 7.3 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 10287 7.3 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 9318 7.3 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 9344 5043135 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043135 5041850 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.22870 https://support.microsoft.com/help/5043135 9312 10287 9318 9344 5043135 5043135 https://support.microsoft.com/help/5043135 9312 10287 9318 9344 5043087 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043087 9312 10287 9318 9344 Yes Security Only 6.0.6003.22870 https://support.microsoft.com/help/5043087 9312 10287 9318 9344 5043087 5043087 https://support.microsoft.com/help/5043087 9312 10287 9318 9344 <a href="https://twitter.com/afang5472">Fangming Gu</a> <a href="https://twitter.com/afang5472">Qinghe Xie</a> 1.0 2024-09-10T00:00:00 <p>Information published.</p> Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>The user would have to navigate to a page with malicious content to be compromised by the attacker.</p> <p><strong>According to the CVSS metric, successful exploitation of this vulnerability could lead to some loss of integrity (I:L)? What does that mean for this vulnerability?</strong></p> <p>The attacker is only able to modify the content of the vulnerable link to redirect the victim to a malicious site.</p> <p><strong>According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?</strong></p> <p>The vulnerability is in the web server, but the malicious scripts execute in the victim’s browser on their machine.</p> <p><strong>According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability?</strong></p> <p>Any authenticated attacker could trigger this vulnerability. It does not require admin or other elevated privileges.</p> Microsoft Dynamics 365 (on-premises) Microsoft Yes CVE-2024-43476 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 11921 Spoofing 11921 Important 11921 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.6 6.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C 11921 5043254 https://www.microsoft.com/download/details.aspx?familyid=e9fe97c9-2507-48b6-be44-6fa6c02b6d28 11921 Maybe Security Update 9.1.32 https://support.microsoft.com/help/5043254 11921 5043254 <a href="https://batr.am/">batram</a> 1.0 2024-09-10T00:00:00 <p>Information published.</p> Microsoft Power Automate Desktop Remote Code Execution Vulnerability <p><strong>According to the CVSS metrics, successful exploitation of this vulnerability could lead to major loss of confidentiality (C:H), integrity (I:H) and availability (A:H). What does that mean for this vulnerability?</strong></p> <p>The attacker can execute arbitrary Desktop Flows scripts in the target user session by registering the machine to their own malicious Entra tenant, extracting the user's Sid, and creating a malicious AD domain with the same Sid. This allows them to mint valid Entra ID tokens that the attacked machine will trust to run desktop automation in the session of the user with the matching Sid.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to take additional actions prior to exploitation to prepare the target environment.</p> <p><strong>According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could remotely execute arbitrary Desktop Flows script in an active open Windows session of the target user.</p> <p><strong>How do I get the updated app?</strong></p> <p>See <a href="https://go.microsoft.com/fwlink/?linkid=2283248">Troubleshoot desktop flow action failures</a> for update information.</p> <p><strong>How can I check if the update is installed?</strong></p> <p>Refer to the following table for the fixed build version that addresses this vulnerability.</p> <table> <thead> <tr> <th>If your current version is</th> <th>Fixed build version</th> </tr> </thead> <tbody> <tr> <td>2.41</td> <td>2.41.178.24249</td> </tr> <tr> <td>2.42</td> <td>2.42.331.24249</td> </tr> <tr> <td>2.43</td> <td>2.43.249.24249</td> </tr> <tr> <td>2.44</td> <td>2.44.55.24249</td> </tr> <tr> <td>2.45</td> <td>2.45.404.24249</td> </tr> <tr> <td>2.46</td> <td>2.46.181.24249</td> </tr> <tr> <td>2.47</td> <td>2.47.119.24249</td> </tr> </tbody> </table> Power Automate Microsoft Yes CVE-2024-43479 Improper Access Control 12410 Remote Code Execution 12410 Important 12410 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.5 7.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12410 Release Notes https://apps.microsoft.com/detail/9nftch6j7fhv?launch=true&mode=full&hl=en-us&gl=us&ocid=bingwebsearch 12410 Maybe Security Update 2.47.119.24249 https://apps.microsoft.com/detail/9nftch6j7fhv?launch=true&mode=full&hl=en-us&gl=us&ocid=bingwebsearch 12410 Release Notes Anonymous 1.0 2024-09-10T00:00:00 <p>Information published.</p> Windows Security Zone Mapping Security Feature Bypass Vulnerability <p><strong>Windows 11, version 24H2 is not generally available yet. Why are there updates for this version of Windows listed in the Security Updates table?</strong></p> <p>The new Copilot+ devices that are now publicly available come with Windows 11, version 24H2 installed. Customers with these devices need to know about any vulnerabilities that affect their machine and to install the updates if they are not receiving automatic updates. Note that the general availability date for Windows 11, version 24H2 is scheduled for later this year.</p> <p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong></p> <p>An URL path could be constructed by an attacker in such a way that the URL’s Zone is interpreted as belonging to a more privileged zone</p> <p><strong>The Security Updates table indicates that this vulnerability affects all supported versions of Microsoft Windows. Why are IE Cumulative updates listed for Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, and Windows Server 2012 R2?</strong></p> <p>While Microsoft has announced retirement of the Internet Explorer 11 application on certain platforms and the Microsoft Edge Legacy application is deprecated, the underlying MSHTML, EdgeHTML, and scripting platforms are still supported. The MSHTML platform is used by Internet Explorer mode in Microsoft Edge as well as other applications through WebBrowser control. The EdgeHTML platform is used by WebView and some UWP applications. The scripting platforms are used by MSHTML and EdgeHTML but can also be used by other legacy applications. Updates to address vulnerabilities in the MSHTML platform and scripting engine are included in the IE Cumulative Updates; EdgeHTML and Chakra changes are not applicable to those platforms.</p> <p>To stay fully protected, we recommend that customers who install Security Only updates install the IE Cumulative updates for this vulnerability.</p> Windows Security Zone Mapping Microsoft Yes CVE-2024-30073 Improper Resolution of Path Equivalence 12389 12390 11568 11569 11571 11572 11923 11924 11926 11927 11929 11930 11931 12085 12086 12097 12098 12099 12242 12243 12244 10729 10735 10852 10853 10816 10855 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Security Feature Bypass 12389 Security Feature Bypass 12390 Security Feature Bypass 11568 Security Feature Bypass 11569 Security Feature Bypass 11571 Security Feature Bypass 11572 Security Feature Bypass 11923 Security Feature Bypass 11924 Security Feature Bypass 11926 Security Feature Bypass 11927 Security Feature Bypass 11929 Security Feature Bypass 11930 Security Feature Bypass 11931 Security Feature Bypass 12085 Security Feature Bypass 12086 Security Feature Bypass 12097 Security Feature Bypass 12098 Security Feature Bypass 12099 Security Feature Bypass 12242 Security Feature Bypass 12243 Security Feature Bypass 12244 Security Feature Bypass 10729 Security Feature Bypass 10735 Security Feature Bypass 10852 Security Feature Bypass 10853 Security Feature Bypass 10816 Security Feature Bypass 10855 Security Feature Bypass 9312 Security Feature Bypass 10287 Security Feature Bypass 9318 Security Feature Bypass 9344 Security Feature Bypass 10051 Security Feature Bypass 10049 Security Feature Bypass 10378 Security Feature Bypass 10379 Security Feature Bypass 10483 Security Feature Bypass 10543 Important 12389 Important 12390 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 12085 Important 12086 Important 12097 Important 12098 Important 12099 Important 12242 Important 12243 Important 12244 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12085 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12086 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12244 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5043080 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043080 12389 12390 Yes Security Update 10.0.26100.1742 https://support.microsoft.com/help/5043080 12389 12390 5043080 5043080 https://support.microsoft.com/help/5043080 12389 12390 5043050 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043050 5041578 11568 11569 11571 11572 Yes Security Update 10.0.17763.6293 https://support.microsoft.com/help/5043050 11568 11569 11571 11572 5043050 5043050 https://support.microsoft.com/help/5043050 11568 11569 11571 11572 5042881 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042881 5041160 11923 11924 Yes Security Update 10.0.20348.2700 https://support.microsoft.com/help/5042881 11923 11924 5042881 5042881 https://support.microsoft.com/help/5042881 11923 11924 5042880 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5042880 11923 11924 Yes SecurityHotpatchUpdate 10.0.20348.2695 https://support.microsoft.com/help/5042880 11923 11924 5042880 5043067 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043067 5041592 11926 11927 Yes Security Update 10.0.22000.3197 https://support.microsoft.com/help/5043067 11926 11927 5043067 5043067 https://support.microsoft.com/help/5043067 11926 11927 5043064 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043064 5041580 11929 11930 11931 Yes Security Update 10.0.19044.4894 https://support.microsoft.com/help/5043064 11929 11930 11931 5043064 5043064 https://support.microsoft.com/help/5043064 11929 11930 11931 12097 12098 12099 5043076 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043076 5041585 12085 12086 Yes Security Update 10.0.22621.4169 https://support.microsoft.com/help/5043076 12085 12086 5043076 5043076 https://support.microsoft.com/help/5043076 12085 12086 12242 12243 5043064 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043064 5041580 12097 12098 12099 Yes Security Update 10.0.19045.4894 https://support.microsoft.com/help/5043064 12097 12098 12099 5043064 5043076 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043076 5041585 12242 12243 Yes Security Update 10.0.22631.4169 https://support.microsoft.com/help/5043076 12242 12243 5043076 5043055 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043055 5041573 12244 Yes Security Update 10.0.25398.1128 https://support.microsoft.com/help/5043055 12244 5043055 5043083 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043083 5041782 10729 10735 Yes Security Update 10.0.10240.20766 https://support.microsoft.com/help/5043083 10729 10735 5043083 5043083 https://support.microsoft.com/help/5043083 10729 10735 5043051 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043051 5041773 10852 10853 10816 10855 Yes Security Update 10.0.14393.7336 https://support.microsoft.com/help/5043051 10852 10853 10816 10855 5043051 5043051 https://support.microsoft.com/help/5043051 10852 10853 10816 10855 5043135 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043135 5041850 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.22870 https://support.microsoft.com/help/5043135 9312 10287 9318 9344 5043135 5043135 https://support.microsoft.com/help/5043135 9312 10287 9318 9344 5043087 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043087 9312 10287 9318 9344 Yes Security Only 6.0.6003.22870 https://support.microsoft.com/help/5043087 9312 10287 9318 9344 5043087 5043087 https://support.microsoft.com/help/5043087 9312 10287 9318 9344 5043049 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043049 9312 Maybe IE Cumulative 1.001 https://support.microsoft.com/help/5043049 9312 5043049 5043049 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043049 5041770 9318 10378 Yes IE Cumulative 1.001 https://support.microsoft.com/help/5043049 9318 10378 5043049 5043129 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043129 5041838 10051 10049 Yes Monthly Rollup 6.1.7601.27320 https://support.microsoft.com/help/5043129 10051 10049 5043129 5043092 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043092 10051 10049 Yes Security Only 6.1.7601.27320 https://support.microsoft.com/help/5043092 10051 10049 5043092 5043049 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043049 5041770 10051 10049 Maybe IE Cumulative 1.001 https://support.microsoft.com/help/5043049 10051 10049 5043049 5043125 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043125 5041851 10378 10379 Yes Monthly Rollup 6.2.9200.25073 https://support.microsoft.com/help/5043125 10378 10379 5043125 5043125 https://support.microsoft.com/help/5043125 10378 10379 5043138 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043138 5041828 10483 10543 Yes Monthly Rollup 6.3.9600.22175 https://support.microsoft.com/help/5043138 10483 10543 5043138 5043138 https://support.microsoft.com/help/5043138 10483 10543 5043049 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043049 10483 Yes IE Cumulative 1.001 https://support.microsoft.com/help/5043049 10483 5043049 Ben Faull with Microsoft 1.0 2024-09-10T00:00:00 <p>Information published.</p> Windows Mark of the Web Security Feature Bypass Vulnerability <p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could bypass the SmartScreen user experience.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send the user a malicious file and convince them to open it.</p> Windows Mark of the Web (MOTW) Microsoft Yes CVE-2024-43487 Protection Mechanism Failure 11568 11569 11571 11572 11929 11930 11931 12097 12098 12099 10729 10735 10852 10853 10816 10855 10378 10379 10483 10543 Security Feature Bypass 11568 Security Feature Bypass 11569 Security Feature Bypass 11571 Security Feature Bypass 11572 Security Feature Bypass 11929 Security Feature Bypass 11930 Security Feature Bypass 11931 Security Feature Bypass 12097 Security Feature Bypass 12098 Security Feature Bypass 12099 Security Feature Bypass 10729 Security Feature Bypass 10735 Security Feature Bypass 10852 Security Feature Bypass 10853 Security Feature Bypass 10816 Security Feature Bypass 10855 Security Feature Bypass 10378 Security Feature Bypass 10379 Security Feature Bypass 10483 Security Feature Bypass 10543 Moderate 11568 Moderate 11569 Moderate 11571 Moderate 11572 Moderate 11929 Moderate 11930 Moderate 11931 Moderate 12097 Moderate 12098 Moderate 12099 Moderate 10729 Moderate 10735 Moderate 10852 Moderate 10853 Moderate 10816 Moderate 10855 Moderate 10378 Moderate 10379 Moderate 10483 Moderate 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 6.5 6.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:F/RL:O/RC:C 11568 6.5 6.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:F/RL:O/RC:C 11569 6.5 6.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:F/RL:O/RC:C 11571 6.5 6.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:F/RL:O/RC:C 11572 6.5 6.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:F/RL:O/RC:C 11929 6.5 6.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:F/RL:O/RC:C 11930 6.5 6.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:F/RL:O/RC:C 11931 6.5 6.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:F/RL:O/RC:C 12097 6.5 6.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:F/RL:O/RC:C 12098 6.5 6.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:F/RL:O/RC:C 12099 6.5 6.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:F/RL:O/RC:C 10729 6.5 6.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:F/RL:O/RC:C 10735 6.5 6.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:F/RL:O/RC:C 10852 6.5 6.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:F/RL:O/RC:C 10853 6.5 6.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:F/RL:O/RC:C 10816 6.5 6.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:F/RL:O/RC:C 10855 6.5 6.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:F/RL:O/RC:C 10378 6.5 6.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:F/RL:O/RC:C 10379 6.5 6.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:F/RL:O/RC:C 10483 6.5 6.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:F/RL:O/RC:C 10543 5043050 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043050 5041578 11568 11569 11571 11572 Yes Security Update 10.0.17763.6293 https://support.microsoft.com/help/5043050 11568 11569 11571 11572 5043050 5043050 https://support.microsoft.com/help/5043050 11568 11569 11571 11572 5043064 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043064 5041580 11929 11930 11931 Yes Security Update 10.0.19044.4894 https://support.microsoft.com/help/5043064 11929 11930 11931 5043064 5043064 https://support.microsoft.com/help/5043064 11929 11930 11931 12097 12098 12099 5043064 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043064 5041580 12097 12098 12099 Yes Security Update 10.0.19045.4894 https://support.microsoft.com/help/5043064 12097 12098 12099 5043064 5043083 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043083 5041782 10729 10735 Yes Security Update 10.0.10240.20766 https://support.microsoft.com/help/5043083 10729 10735 5043083 5043083 https://support.microsoft.com/help/5043083 10729 10735 5043051 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043051 5041773 10852 10853 10816 10855 Yes Security Update 10.0.14393.7336 https://support.microsoft.com/help/5043051 10852 10853 10816 10855 5043051 5043051 https://support.microsoft.com/help/5043051 10852 10853 10816 10855 5043125 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043125 5041851 10378 10379 Yes Monthly Rollup 6.2.9200.25073 https://support.microsoft.com/help/5043125 10378 10379 5043125 5043125 https://support.microsoft.com/help/5043125 10378 10379 5043138 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043138 5041828 10483 10543 Yes Monthly Rollup 6.3.9600.22175 https://support.microsoft.com/help/5043138 10483 10543 5043138 5043138 https://support.microsoft.com/help/5043138 10483 10543 Mandar Sadye with Microsoft 1.0 2024-09-10T00:00:00 <p>Information published.</p> Microsoft Windows Update Remote Code Execution Vulnerability <p>Microsoft is aware of a vulnerability in Servicing Stack that has rolled back the fixes for some vulnerabilities affecting Optional Components on Windows 10, version 1507 (initial version released July 2015). This means that an attacker could exploit these previously mitigated vulnerabilities on Windows 10, version 1507 (Windows 10 Enterprise 2015 LTSB and Windows 10 IoT Enterprise 2015 LTSB) systems that have installed the Windows security update released on March 12, 2024—KB5035858 (OS Build 10240.20526) or other updates released until August 2024. All later versions of Windows 10 are not impacted by this vulnerability.</p> <p>This servicing stack vulnerability is addressed by installing the September 2024 Servicing stack update (SSU KB5043936) AND the September 2024 Windows security update (KB5043083), in that order.</p> <p>Note: Windows 10, version 1507 reached the end of support (EOS) on May 9, 2017 for devices running the Pro, Home, Enterprise, Education, and Enterprise IoT editions. Only <a href="https://learn.microsoft.com/en-us/lifecycle/products/windows-10-2015-ltsb">Windows 10 Enterprise 2015 LTSB</a> and <a href="https://learn.microsoft.com/en-us/lifecycle/products/windows-10-iot-enterprise-ltsb-2015">Windows 10 IoT Enterprise 2015 LTSB</a> editions are still under support.</p> <p><strong>How do I restore the fixes that this Windows Servicing Stack vulnerability rolled back?</strong></p> <p>Customers need to install both the servicing stack update (KB5043936) AND security update (KB5043083), released on September 10, 2024, to be fully protected from the vulnerabilities that this CVE rolled back. For more information see <a href="https://support.microsoft.com/help/5043083">KB5043083</a>.</p> <p>Customers whose systems are configured to receive automatic updates do not need to take any further action.</p> <p><strong>This CVE is marked as Exploitation Detected. Has Microsoft seen this vulnerability exploited in the wild?</strong></p> <p>This CVE documents the rollback of fixes that addressed vulnerabilities which affected some Optional Components for Windows 10 (version 1507). Some of these CVEs were known to be exploited, but no exploitation of CVE-2024-43491 itself has been detected.</p> <p>In addition, the Windows product team at Microsoft discovered this issue, and we have seen no evidence that it is publicly known.</p> <p><strong>Are there any actions I can take to prevent the rollback of previously fixed CVEs that this vulnerability caused?</strong></p> <p>No. If you have installed any of the previous security updates released between March and August 2024, the rollbacks of the fixes for CVEs affecting Optional Components have already occurred. To restore these fixes customers need to install the September 2024 Servicing Stack Update and Security Update for Windows 10.</p> <p>For more information see <a href="https://support.microsoft.com/help/5043083">KB5043083</a>.</p> <p><strong>Why were previously fixed CVEs rolled back?</strong></p> <p>Starting with the Windows security update released March 12, 2024 - KB5035858 (OS Build 10240.20526), the build version numbers crossed into a range that triggered a code defect in the Windows 10 (version 1507) servicing stack that handles the applicability of Optional Components. As a result, any Optional Component that was serviced with updates released since March 12, 2024 (KB5035858) was detected as &quot;not applicable&quot; by the servicing stack and was reverted to its RTM version.</p> <p><strong>Are all installations of Windows vulnerable?</strong></p> <p>No. Only Windows 10 (version 1507) (Windows 10 Enterprise 2015 LTSB and Windows 10 IoT Enterprise 2015 LTSB) with Optional Components enabled from the following list are vulnerable. All other versions of Windows 10 released since November 2015 are not affected.</p> <ul> <li>.NET Framework 4.6 Advanced Services \ ASP.NET 4.6</li> <li>Active Directory Lightweight Directory Services</li> <li>Administrative Tools</li> <li>Internet Explorer 11</li> <li>Internet Information Services\World Wide Web Services</li> <li>LPD Print Service</li> <li>Microsoft Message Queue (MSMQ) Server Core</li> <li>MSMQ HTTP Support</li> <li>MultiPoint Connector</li> <li>SMB 1.0/CIFS File Sharing Support</li> <li>Windows Fax and Scan</li> <li>Windows Media Player</li> <li>Work Folders Client</li> <li>XPS Viewer</li> </ul> Windows Update Microsoft Yes CVE-2024-43491 Use After Free 10729 10735 Remote Code Execution 10729 Remote Code Execution 10735 Critical 10729 Critical 10735 Publicly Disclosed:No;Exploited:Yes;Latest Software Release:Exploitation Detected 9.8 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10729 9.8 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10735 5043083 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5043083 5041782 10729 10735 Yes Security Update 10.0.10240.20766 https://support.microsoft.com/help/5043083 10729 10735 5043083 5043083 https://support.microsoft.com/help/5043083 10729 10735 Anonymous 1.0 2024-09-10T00:00:00 <p>Information published.</p> Windows libarchive Remote Code Execution Vulnerability <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R) and privileges required is low (PR:L). What does that mean for this vulnerability?</strong></p> <p>An authenticated attacker with guest privileges must send the victim a malicious RAR file and convince them to open it.</p> Windows Libarchive Microsoft Yes CVE-2024-43495 Integer Overflow or Wraparound 12085 12086 12242 12243 12244 Remote Code Execution 12085 Remote Code Execution 12086 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12244 Important 12085 Important 12086 Important 12242 Important 12243 Important 12244 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12085 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12086 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12244 5040442 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5040442 5039212 12085 12086 12243 Yes Security Update 10.0.22621.3880 https://support.microsoft.com/help/5040442 12085 12086 12243 5040442 5040442 https://support.microsoft.com/help/5040442 12085 12086 12242 12243 5040442 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5040442 5039212 12242 Yes Security Update 10.0.22631.3880 https://support.microsoft.com/help/5040442 12242 5040442 5040438 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5040438 5039236 12244 Yes Security Update 10.0.25398.1009 https://support.microsoft.com/help/5040438 12244 5040438 5040438 https://support.microsoft.com/help/5040438 12244 <a href="https://twitter.com/edwardzpeng">wh1tc &amp; Zhiniang Peng</a> HAO LI with Venustech ADLab 1.0 2024-09-10T00:00:00 <p>Information published. This CVE was addressed by updates that were released in July 2024, but the CVE was inadvertently omitted from the July 2024 Security Updates. This is an informational change only. Customers who have already installed the July 2024 updates do not need to take any further action.</p> Azure Web Apps Elevation of Privilege Vulnerability <p>An authenticated attacker can exploit an improper authorization vulnerability in Azure Web Apps to elevate privileges over a network.</p> <p><strong>Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?</strong></p> <p>This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.</p> <p>Please see <a href="https://aka.ms/MSRC-Cloud-CVEs">Toward greater transparency: Unveiling Cloud Service CVEs</a> for more information.</p> Azure Web Apps Microsoft No CVE-2024-38194 Improper Input Validation 12385 Elevation of Privilege 12385 Critical 12385 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.4 7.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L/E:U/RL:O/RC:C 12385 Shimi Gersner with Azure Networking Security Research (ANSR), Microsoft 1.0 2024-09-10T00:00:00 <p>Information published.</p> Chromium: CVE-2024-7970 Out of bounds write in V8 <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2024">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Channel</th> <th>Microsoft Edge Version</th> <th>Based on Chromium Version</th> <th>Date Released</th> </tr> </thead> <tbody> <tr> <td>Stable</td> <td>128.0.2739.63</td> <td>128.0.6613.119/.120</td> <td>9/03/2024</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2024-7970 11655 11655 11655 Release Notes 11655 No Security Update 128.0.2739.63 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2024-09-11T15:37:41 <p>Information published.</p> Chromium: CVE-2024-8362 Use after free in WebAudio <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2024">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Channel</th> <th>Microsoft Edge Version</th> <th>Based on Chromium Version</th> <th>Date Released</th> </tr> </thead> <tbody> <tr> <td>Stable</td> <td>128.0.2739.63</td> <td>128.0.6613.119/.120</td> <td>9/03/2024</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2024-8362 11655 11655 11655 Release Notes 11655 No Security Update 128.0.2739.63 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2024-09-11T15:37:35 <p>Information published.</p> Microsoft Edge (Chromium-based) Information Disclosure Vulnerability <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Channel</th> <th>Microsoft Edge Version</th> <th>Based on Chromium Version</th> <th>Date Released</th> </tr> </thead> <tbody> <tr> <td>Stable</td> <td>128.0.2739.42</td> <td>128.0.6613.84/.85</td> <td>8/22/2024</td> </tr> </tbody> </table> <p><strong>Why is the severity for this CVE rated as Moderate, but the CVSS score is higher than normal?</strong></p> <p><a href="https://www.microsoft.com/en-us/msrc/bounty-new-edge">Per our severity guidelines</a>, the amount of user interaction or preconditions required to allow this sort of exploitation downgraded the severity, specifically it says, &quot;If a bug requires more than a click, a key press, or several preconditions, the severity will be downgraded&quot;. The CVSS scoring system doesn't allow for this type of nuance.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is Edge WebUI permission. The vulnerability allows an attacker to access a victim's data (for example, microphone and camera) through the victim's Edge WebUI default permission.</p> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2024-38222 Incorrect Default Permissions 11655 Information Disclosure 11655 Moderate 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 6.5 5.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 11655 Release Notes 11655 No Security Update 128.0.2739.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes <a href="https://twitter.com/shhnjk">Jun Kokatsu</a> 1.0 2024-09-11T00:00:00 <p>Information published.</p> Chromium: CVE-2024-8636 Heap buffer overflow in Skia <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Channel</th> <th>Microsoft Edge Version</th> <th>Based on Chromium Version</th> <th>Date Released</th> </tr> </thead> <tbody> <tr> <td>Stable</td> <td>128.0.2739.79</td> <td>128.0.6613.137/.138</td> <td>9/12/2024</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2024-8636 11655 11655 11655 Release Notes 11655 No Security Update 128.0.2739.79 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2024-09-12T17:05:32 <p>Information published.</p> Chromium: CVE-2024-8639 Use after free in Autofill <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Channel</th> <th>Microsoft Edge Version</th> <th>Based on Chromium Version</th> <th>Date Released</th> </tr> </thead> <tbody> <tr> <td>Stable</td> <td>128.0.2739.79</td> <td>128.0.6613.137/.138</td> <td>9/12/2024</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2024-8639 11655 11655 11655 Release Notes 11655 No Security Update 128.0.2739.79 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2024-09-12T17:05:42 <p>Information published.</p> Chromium: CVE-2024-8638 Type Confusion in V8 <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Channel</th> <th>Microsoft Edge Version</th> <th>Based on Chromium Version</th> <th>Date Released</th> </tr> </thead> <tbody> <tr> <td>Stable</td> <td>128.0.2739.79</td> <td>128.0.6613.137/.138</td> <td>9/12/2024</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2024-8638 11655 11655 11655 Release Notes 11655 No Security Update 128.0.2739.79 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2024-09-12T17:05:40 <p>Information published.</p> Chromium: CVE-2024-8637 Use after free in Media Router <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2021">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Channel</th> <th>Microsoft Edge Version</th> <th>Based on Chromium Version</th> <th>Date Released</th> </tr> </thead> <tbody> <tr> <td>Stable</td> <td>128.0.2739.79</td> <td>128.0.6613.137/.138</td> <td>9/12/2024</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2024-8637 11655 11655 11655 Release Notes 11655 No Security Update 128.0.2739.79 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2024-09-12T17:05:38 <p>Information published.</p> GroupMe Elevation of Privilege Vulnerability <p>An improper access control vulnerability in <a href="https://groupme.com/">GroupMe</a> allows an a unauthenticated attacker to elevate privileges over a network.</p> <p><strong>Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?</strong></p> <p>This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.</p> <p>Please see <a href="https://aka.ms/MSRC-Cloud-CVEs">Toward greater transparency: Unveiling Cloud Service CVEs</a> for more information.</p> GroupMe Microsoft No CVE-2024-38183 Server-Side Request Forgery (SSRF) 12384 Elevation of Privilege 12384 Critical 12384 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12384 Guy Arazi with Microsoft 1.0 2024-09-17T00:00:00 <p>Information published.</p> 1.1 2024-12-12T00:00:00 <p>Corrected vulnerability description in the Executive Summary and updated one or more CVSS scores for the affected products. These are informational changes only.</p> Dynamics 365 Business Central Elevation of Privilege Vulnerability <p>Improper authorization in Dynamics 365 Business Central resulted in a vulnerability that allows an authenticated attacker to elevate privileges over a network.</p> <p><strong>Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?</strong></p> <p>This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.</p> <p>Please see <a href="https://aka.ms/MSRC-Cloud-CVEs">Toward greater transparency: Unveiling Cloud Service CVEs</a> for more information.</p> Dynamics Business Central Microsoft No CVE-2024-43460 Improper Authorization 12412 Elevation of Privilege 12412 Critical 12412 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 12412 cjm00n with Cyber Kunlun 1.0 2024-09-17T00:00:00 <p>Information published.</p> Microsoft Office Visio Remote Code Execution Vulnerability <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally.</p> <p>For example, when the score indicates that the <strong>Attack Vector</strong> is <strong>Local</strong> and <strong>User Interaction</strong> is <strong>Required</strong>, this could describe an exploit in which an attacker, through social engineering, convinces a victim to download and open a specially crafted file from a website which leads to a local attack on their computer.</p> Microsoft Office Visio Microsoft Yes CVE-2024-38016 Improper Access Control 11953 11762 11574 11763 10744 11952 10743 11573 Remote Code Execution 11953 Remote Code Execution 11762 Remote Code Execution 11574 Remote Code Execution 11763 Remote Code Execution 10744 Remote Code Execution 11952 Remote Code Execution 10743 Remote Code Execution 11573 Important 11953 Important 11762 Important 11574 Important 11763 Important 10744 Important 11952 Important 10743 Important 11573 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10744 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10743 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 Click to Run 11953 11762 11574 11763 11952 11573 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11953 11762 11574 11763 11952 11573 Click to Run 5002634 https://www.microsoft.com/download/details.aspx?id=106235 5002565 10744 Maybe Security Update 16.0.5465.1001 https://support.microsoft.com/help/5002634 10744 5002634 5002634 https://www.microsoft.com/download/details.aspx?id=106234 5002565 10743 Maybe Security Update 16.0.5465.1001 https://support.microsoft.com/help/5002634 10743 5002634 Luke Papandrea, Microsoft Corporation 1.0 2024-09-19T00:00:00 <p>Information published.</p> 1.1 2024-10-06T00:00:00 <p>Updated links to security updates. This is an informational change only.</p> Chromium: CVE-2024-8904 Type Confusion in V8 <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2024">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Channel</th> <th>Microsoft Edge Version</th> <th>Based on Chromium Version</th> <th>Date Released</th> </tr> </thead> <tbody> <tr> <td>Stable</td> <td>CVE-2024-8904,</td> <td>129.0.6668.58/.59</td> <td>9/19/2024</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2024-8904 11655 11655 11655 Release Notes 11655 No Security Update 129.0.2792.52 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2024-09-19T07:11:36 <p>Information published.</p> Chromium: CVE-2024-8908 Inappropriate implementation in Autofill <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2024">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Channel</th> <th>Microsoft Edge Version</th> <th>Based on Chromium Version</th> <th>Date Released</th> </tr> </thead> <tbody> <tr> <td>Stable</td> <td>CVE-2024-8904,</td> <td>129.0.6668.58/.59</td> <td>9/19/2024</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2024-8908 11655 11655 11655 Release Notes 11655 No Security Update 129.0.2792.52 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2024-09-19T07:12:27 <p>Information published.</p> Chromium: CVE-2024-8909 Inappropriate implementation in UI <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2024">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Channel</th> <th>Microsoft Edge Version</th> <th>Based on Chromium Version</th> <th>Date Released</th> </tr> </thead> <tbody> <tr> <td>Stable</td> <td>CVE-2024-8904,</td> <td>129.0.6668.58/.59</td> <td>9/19/2024</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2024-8909 11655 11655 11655 Release Notes 11655 No Security Update 129.0.2792.52 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2024-09-19T07:12:40 <p>Information published.</p> Chromium: CVE-2024-8905 Inappropriate implementation in V8 <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2024">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Channel</th> <th>Microsoft Edge Version</th> <th>Based on Chromium Version</th> <th>Date Released</th> </tr> </thead> <tbody> <tr> <td>Stable</td> <td>CVE-2024-8904,</td> <td>129.0.6668.58/.59</td> <td>9/19/2024</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2024-8905 11655 11655 11655 Release Notes 11655 No Security Update 129.0.2792.52 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2024-09-19T07:11:53 <p>Information published.</p> Chromium: CVE-2024-8907 Insufficient data validation in Omnibox <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2024">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Channel</th> <th>Microsoft Edge Version</th> <th>Based on Chromium Version</th> <th>Date Released</th> </tr> </thead> <tbody> <tr> <td>Stable</td> <td>CVE-2024-8904,</td> <td>129.0.6668.58/.59</td> <td>9/19/2024</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2024-8907 11655 11655 11655 Release Notes 11655 No Security Update 129.0.2792.52 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2024-09-19T07:12:14 <p>Information published.</p> Chromium: CVE-2024-8906 Incorrect security UI in Downloads <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2024">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Channel</th> <th>Microsoft Edge Version</th> <th>Based on Chromium Version</th> <th>Date Released</th> </tr> </thead> <tbody> <tr> <td>Stable</td> <td>CVE-2024-8904,</td> <td>129.0.6668.58/.59</td> <td>9/19/2024</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2024-8906 11655 11655 11655 Release Notes 11655 No Security Update 129.0.2792.52 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2024-09-19T07:12:03 <p>Information published.</p> Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>The user would have to click on a specially crafted URL to be compromised by the attacker.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>Successful exploitation of this vulnerability requires the victim user to click a malicious link in order for the attacker to initiate remote code execution on the renderer process.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Channel</th> <th>Microsoft Edge Version</th> <th>Based on Chromium Version</th> <th>Date Released</th> </tr> </thead> <tbody> <tr> <td>Stable</td> <td>CVE-2024-8904,</td> <td>129.0.6668.58/.59</td> <td>9/19/2024</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2024-43496 Out-of-bounds Write 11655 Remote Code Execution 11655 Important 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 129.0.2792.52 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes <a href="https://x.com/eternalsakura13">Nan Wang(@eternalsakura13)</a> 1.0 2024-09-19T00:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>The user would have to click on a specially crafted URL to be compromised by the attacker.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>Successful exploitation of this vulnerability requires the victim user to click a malicious link in order for the attacker to initiate remote code execution on the renderer process.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Channel</th> <th>Microsoft Edge Version</th> <th>Based on Chromium Version</th> <th>Date Released</th> </tr> </thead> <tbody> <tr> <td>Stable</td> <td>CVE-2024-8904,</td> <td>129.0.6668.58/.59</td> <td>9/19/2024</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2024-43489 Access of Resource Using Incompatible Type ('Type Confusion') 11655 Remote Code Execution 11655 Important 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 129.0.2792.52 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes <a href="https://x.com/eternalsakura13">Nan Wang(@eternalsakura13)</a> 1.0 2024-09-19T00:00:00 <p>Information published.</p> Chromium: CVE-2024-9123 Integer overflow in Skia <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2024">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Channel</th> <th>Microsoft Edge Version</th> <th>Based on Chromium Version</th> <th>Date Released</th> </tr> </thead> <tbody> <tr> <td>Stable</td> <td>129.0.2792.65</td> <td>129.0.6668.70/.71</td> <td>9/26/2024</td> </tr> <tr> <td>Extended Stable</td> <td>128.0.2739.97</td> <td>128.0.6613.170</td> <td>9/27/2024</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2024-9123 12142 11655 12142 11655 12142 11655 Release Notes 12142 No Security Update 128.0.2739.97 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 12142 Release Notes Release Notes 11655 No Security Update 129.0.2792.65 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 2.0 2024-09-30T00:00:00 <p>In the security updates table added: Microsoft Edge (Chromium-based) Extended Stable. The Microsoft Edge extended stable build was released on September 29th, 2024.</p> 1.0 2024-09-26T00:00:59 <p>Information published.</p> Chromium: CVE-2024-9122 Type Confusion in V8 <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2024">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Channel</th> <th>Microsoft Edge Version</th> <th>Based on Chromium Version</th> <th>Date Released</th> </tr> </thead> <tbody> <tr> <td>Stable</td> <td>129.0.2792.65</td> <td>129.0.6668.70/.71</td> <td>9/26/2024</td> </tr> <tr> <td>Extended Stable</td> <td>128.0.2739.97</td> <td>128.0.6613.170</td> <td>9/27/2024</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2024-9122 12142 11655 12142 11655 12142 11655 Release Notes 12142 No Security Update 128.0.2739.97 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 12142 Release Notes Release Notes 11655 No Security Update 129.0.2792.65 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 2.0 2024-09-30T00:00:00 <p>In the security updates table added: Microsoft Edge (Chromium-based) Extended Stable. The Microsoft Edge extended stable build was released on September 29th, 2024.</p> 1.0 2024-09-26T00:00:57 <p>Information published.</p> Chromium: CVE-2024-9121 Inappropriate implementation in V8 <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2024">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Channel</th> <th>Microsoft Edge Version</th> <th>Based on Chromium Version</th> <th>Date Released</th> </tr> </thead> <tbody> <tr> <td>Stable</td> <td>129.0.2792.65</td> <td>129.0.6668.70/.71</td> <td>9/26/2024</td> </tr> <tr> <td>Extended Stable</td> <td>128.0.2739.97</td> <td>128.0.6613.170</td> <td>9/27/2024</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2024-9121 12142 11655 12142 11655 12142 11655 Release Notes 12142 No Security Update 128.0.2739.97 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 12142 Release Notes Release Notes 11655 No Security Update 129.0.2792.65 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 2.0 2024-09-30T00:00:00 <p>In the security updates table added: Microsoft Edge (Chromium-based) Extended Stable. The Microsoft Edge extended stable build was released on September 29th, 2024.</p> 1.0 2024-09-26T00:00:55 <p>Information published.</p> Chromium: CVE-2024-9120 Use after free in Dawn <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2024">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Channel</th> <th>Microsoft Edge Version</th> <th>Based on Chromium Version</th> <th>Date Released</th> </tr> </thead> <tbody> <tr> <td>Stable</td> <td>129.0.2792.65</td> <td>129.0.6668.70/.71</td> <td>9/26/2024</td> </tr> <tr> <td>Extended Stable</td> <td>128.0.2739.97</td> <td>128.0.6613.170</td> <td>9/27/2024</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2024-9120 11655 11655 11655 Release Notes 11655 No Security Update 129.0.2792.65 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 2.0 2024-09-30T00:00:00 <p>In the security updates table added: Microsoft Edge (Chromium-based) Extended Stable. The Microsoft Edge extended stable build was released on September 29th, 2024.</p> 1.0 2024-09-26T00:00:51 <p>Information published.</p> Microsoft SQL Server Elevation of Privilege Vulnerability <p><strong>I am running SQL Server on my system. What action do I need to take?</strong></p> <p>Update your relevant version of SQL Server. Any applicable driver fixes are included in those updates.</p> <p><strong>I am running my own application on my system. What action do I need to take?</strong></p> <p>Update your application to use Microsoft OLE DB Driver 18 or 19. Update the drivers to the versions listed on this page, which provide protection against this vulnerability.</p> <p><strong>I am running an application from a software vendor on my system. What action do I need to take?</strong></p> <p>Consult with your application vendor if it is compatible with Microsoft OLE DB Driver 18 or 19. Update the drivers to the versions listed in this page, which provide protection against this vulnerability</p> <p><strong>There are GDR and/or CU (Cumulative Update) updates offered for my version of SQL Server. How do I know which update to use?</strong></p> <ul> <li>First, determine your SQL Server version number. For more information on determining your SQL Server version number, see <a href="https://learn.microsoft.com/en-us/troubleshoot/sql/releases/download-and-install-latest-updates">Microsoft Knowledge Base Article 321185</a> - How to determine the version, edition, and update level of SQL Server and its components.</li> <li>Second, in the table below, locate your version number or the version range that your version number falls within. The corresponding update is the one you need to install.</li> </ul> <p><strong>Note</strong> If your SQL Server version number is not represented in the table below, your SQL Server version is no longer supported. Please upgrade to the latest Service Pack or SQL Server product in order to apply this and future security updates.</p> <table> <thead> <tr> <th>Update Number</th> <th>Title</th> <th>Apply if current product version is…</th> <th>This security update also includes servicing releases up through…</th> </tr> </thead> <tbody> <tr> <td>5042578</td> <td>Security update for SQL Server 2022 CU14+GDR</td> <td>16.0.4003.1 - 16.0.4135.4</td> <td>KB 5038325 - SQL2022 RTM CU14</td> </tr> <tr> <td>5042211</td> <td>Security update for SQL Server 2022 RTM+GDR</td> <td>16.0.1000.6 - 16.0.1121.4</td> <td>KB 5040936 - Previous SQL2022 RTM GDR</td> </tr> <tr> <td>5042749</td> <td>Security update for SQL Server 2019 CU28+GDR</td> <td>15.0.4003.23 - 15.0.4385.2</td> <td>KB 5039747 - SQL2019 RTM CU28</td> </tr> <tr> <td>5042214</td> <td>Security update for SQL Server 2019 RTM+GDR</td> <td>15.0.2000.5 - 15.0.2116.2</td> <td>KB 5040986 - Previous SQL2019 RTM GDR</td> </tr> <tr> <td>5042215</td> <td>Security update for SQL Server 2017 CU31+GDR</td> <td>14.0.3006.16 - 14.0.3471.2</td> <td>KB 5040940 - SQL2017 RTM CU31</td> </tr> <tr> <td>5042217</td> <td>Security update for SQL Server 2017 RTM+GDR</td> <td>14.0.1000.169 - 14.0.2056.2</td> <td>KB 5040942 - Previous SQL2017 RTM GDR</td> </tr> <tr> <td>5042209</td> <td>Security update for SQL 2016 Azure Connect Feature Pack</td> <td>13.0.7000.253 - 13.0.7037.1</td> <td>KB 5040944 - SQL2016 Azure Connect Feature Pack</td> </tr> <tr> <td>5042207</td> <td>Security update for SQL Server 2016 SP3 RTM+GDR</td> <td>13.0.6300.2 - 13.0.6441.1</td> <td>KB 5040946 - Previous SQL2016 RTM GDR</td> </tr> </tbody> </table> <p><strong>What are the GDR and CU update designations and how do they differ?</strong></p> <p>The General Distribution Release (GDR) and Cumulative Update (CU) designations correspond to the two different servicing options in place for SQL Server baseline releases. A baseline can be either an RTM release or a Service Pack release.</p> <ul> <li>GDR updates – cumulatively only contain security updates for the given baseline.</li> <li>CU updates – cumulatively contain all functional fixes and security updates for the given baseline.</li> </ul> <p>For any given baseline, either the GDR or CU updates could be options (see below).</p> <ul> <li>If SQL Server installation is at a baseline version, you can choose either the GDR or CU update.</li> <li>If SQL Server installation has intentionally only installed past GDR updates, then choose to install the GDR update package.</li> <li>If SQL Server installation has intentionally installed previous CU updates, then chose to install the CU security update package.</li> </ul> <p><strong>Note:</strong> You are allowed to make a change from GDR updates to CU updates ONE TIME. Once a SQL Server CU update is applied to a SQL Server installation, there is NO way to go back to the GDR update path.</p> <p><strong>Can the security updates be applied to SQL Server instances on Windows Azure (IaaS)?</strong></p> <p>Yes. SQL Server instances on Windows Azure (IaaS) can be offered the security updates through Microsoft Update, or customers can download the security updates from Microsoft Download Center and apply them manually.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain administrator privileges.</p> SQL Server Microsoft Yes CVE-2024-37980 Improper Privilege Management 11478 11821 12048 12053 12145 12147 12408 12407 Elevation of Privilege 11478 Elevation of Privilege 11821 Elevation of Privilege 12048 Elevation of Privilege 12053 Elevation of Privilege 12145 Elevation of Privilege 12147 Elevation of Privilege 12408 Elevation of Privilege 12407 Important 11478 Important 11821 Important 12048 Important 12053 Important 12145 Important 12147 Important 12408 Important 12407 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11478 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11821 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12048 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12053 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12145 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12147 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12408 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12407 5042217 https://www.microsoft.com/download/details.aspx?familyid=6e5ca6fa-350d-4a60-b071-c0aa3503136e 11478 Maybe Security Update 14.0.2060.1 https://support.microsoft.com/help/5042217 11478 5042217 5042217 https://support.microsoft.com/help/5042217 11478 5042214 https://www.microsoft.com/download/details.aspx?familyid=684d2c34-425f-45b9-b685-c3ba4266a759 11821 Yes Security Update 15.0.2120.1 https://support.microsoft.com/help/5042214 11821 5042214 5042214 https://support.microsoft.com/help/5042214 11821 5042207 https://www.microsoft.com/download/details.aspx?familyid=bcaa232a-0e0c-4ae9-b4d8-7a27d8453595 12048 Maybe Security Update 13.0.6445.1 https://support.microsoft.com/help/5042207 12048 5042207 5042207 https://support.microsoft.com/help/5042207 12048 5042209 https://www.microsoft.com/download/details.aspx?familyid=13dffaf9-0377-4a30-b9b8-9bf8f2629aa6 12053 Maybe Security Update 13.0.7040.1 https://support.microsoft.com/help/5042209 12053 5042209 5042209 https://support.microsoft.com/help/5042209 12053 5042215 https://www.microsoft.com/download/details.aspx?familyid=5c1115eb-d55d-4a6d-9d44-070045a2675f 12145 Maybe Security Update 14.0.3475.1 https://support.microsoft.com/help/5042215 12145 5042215 5042215 https://support.microsoft.com/help/5042215 12145 5042211 https://www.microsoft.com/download/details.aspx?familyid=b6de42f6-dec1-4212-80fd-820f30b5b9ac 12147 Yes Security Update 16.0.1125.1 https://support.microsoft.com/help/5042211 12147 5042211 5042211 https://support.microsoft.com/help/5042211 12147 5042749 https://www.microsoft.com/download/details.aspx?familyid=971b1a77-4e8d-4dff-9b4f-3051fb41f8c6 12408 Yes Security Update 15.0.4390.2 https://support.microsoft.com/help/5042749 12408 5042749 5042749 https://support.microsoft.com/help/5042749 12408 5042578 https://www.microsoft.com/download/details.aspx?familyid=a2449ad4-3be2-407b-9e56-c109d321a5b9 12407 Yes Security Update 16.0.4140.3 https://support.microsoft.com/help/5042578 12407 5042578 5042578 https://support.microsoft.com/help/5042578 12407 Anonymous 1.0 2024-09-10T00:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2022-21698 https://nvd.nist.gov/vuln/detail/CVE-2022-21698 https://nvd.nist.gov/vuln/detail/CVE-2022-21698 https://nvd.nist.gov/vuln/detail/CVE-2022-21698 https://nvd.nist.gov/vuln/detail/CVE-2022-21698 https://nvd.nist.gov/vuln/detail/CVE-2022-21698 https://nvd.nist.gov/vuln/detail/CVE-2022-21698 https://nvd.nist.gov/vuln/detail/CVE-2022-21698 https://nvd.nist.gov/vuln/detail/CVE-2022-21698 https://nvd.nist.gov/vuln/detail/CVE-2022-21698 https://nvd.nist.gov/vuln/detail/CVE-2022-21698 https://nvd.nist.gov/vuln/detail/CVE-2022-21698 https://nvd.nist.gov/vuln/detail/CVE-2022-21698 https://nvd.nist.gov/vuln/detail/CVE-2022-21698 https://nvd.nist.gov/vuln/detail/CVE-2022-21698 https://nvd.nist.gov/vuln/detail/CVE-2022-21698 Mariner security-advisories@github.com Yes CVE-2022-21698 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12139 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12140 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12356 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12357 application-gateway-kubernetes-ingress 12139 application-gateway-kubernetes-ingress-1.4.0-17.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.4.0-17 https://nvd.nist.gov/vuln/detail/CVE-2022-21698 12139 application-gateway-kubernetes-ingress cri-o 12139 cri-o-1.21.7-2.cm2.x86_64.rpm 0001-01-01T00:00:00 cri-o-kubeadm-criconfig-1.21.7-2.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.21.7-2 https://nvd.nist.gov/vuln/detail/CVE-2022-21698 12139 cri-o kube-vip-cloud-provider 12139 kube-vip-cloud-provider-0.0.2-14.cm2.x86_64.rpm 0001-01-01T00:00:00 kube-vip-cloud-provider-debuginfo-0.0.2-14.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 0.0.2-14 https://nvd.nist.gov/vuln/detail/CVE-2022-21698 12139 kube-vip-cloud-provider kured 12139 kured-1.13.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kured-k8s-yaml-1.13.2-1.cm2.noarch.rpm 0001-01-01T00:00:00 CBL-Mariner 1.13.2-1 https://nvd.nist.gov/vuln/detail/CVE-2022-21698 12139 kured application-gateway-kubernetes-ingress 12140 application-gateway-kubernetes-ingress-1.4.0-17.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.4.0-17 https://nvd.nist.gov/vuln/detail/CVE-2022-21698 12140 application-gateway-kubernetes-ingress cri-o 12140 cri-o-1.21.7-2.cm2.aarch64.rpm 0001-01-01T00:00:00 cri-o-kubeadm-criconfig-1.21.7-2.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.21.7-2 https://nvd.nist.gov/vuln/detail/CVE-2022-21698 12140 cri-o kube-vip-cloud-provider 12140 kube-vip-cloud-provider-0.0.2-14.cm2.aarch64.rpm 0001-01-01T00:00:00 kube-vip-cloud-provider-debuginfo-0.0.2-14.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 0.0.2-14 https://nvd.nist.gov/vuln/detail/CVE-2022-21698 12140 kube-vip-cloud-provider kured 12140 kured-1.13.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kured-k8s-yaml-1.13.2-1.cm2.noarch.rpm 0001-01-01T00:00:00 CBL-Mariner 1.13.2-1 https://nvd.nist.gov/vuln/detail/CVE-2022-21698 12140 kured application-gateway-kubernetes-ingress 12356 application-gateway-kubernetes-ingress-1.7.2-2.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.7.2-2 https://nvd.nist.gov/vuln/detail/CVE-2022-21698 12356 application-gateway-kubernetes-ingress keda 12356 keda-2.14.0-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.14.0-1 https://nvd.nist.gov/vuln/detail/CVE-2022-21698 12356 keda moby-engine 12356 moby-engine-25.0.3-2.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 25.0.3-1 https://nvd.nist.gov/vuln/detail/CVE-2022-21698 12356 moby-engine multus 12356 multus-4.0.2-1.azl3.x86_64.rpm 0001-01-01T00:00:00 multus-k8s-yaml-4.0.2-1.azl3.x86_64.rpm 0001-01-01T00:00:00 multus-debuginfo-4.0.2-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 4.0.2-1 https://nvd.nist.gov/vuln/detail/CVE-2022-21698 12356 multus application-gateway-kubernetes-ingress 12357 application-gateway-kubernetes-ingress-1.7.2-2.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.7.2-2 https://nvd.nist.gov/vuln/detail/CVE-2022-21698 12357 application-gateway-kubernetes-ingress keda 12357 keda-2.14.0-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.14.0-1 https://nvd.nist.gov/vuln/detail/CVE-2022-21698 12357 keda moby-engine 12357 moby-engine-25.0.3-2.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 25.0.3-1 https://nvd.nist.gov/vuln/detail/CVE-2022-21698 12357 moby-engine multus 12357 multus-4.0.2-1.azl3.aarch64.rpm 0001-01-01T00:00:00 multus-k8s-yaml-4.0.2-1.azl3.aarch64.rpm 0001-01-01T00:00:00 multus-debuginfo-4.0.2-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 4.0.2-1 https://nvd.nist.gov/vuln/detail/CVE-2022-21698 12357 multus 1.0 2023-11-07T16:00:00 <p>Information published.</p> 1.1 2024-01-23T16:00:00 <p>Added application-gateway-kubernetes-ingress to CBL-Mariner 2.0 Added kube-vip-cloud-provider to CBL-Mariner 2.0 Added local-path-provisioner to CBL-Mariner 2.0 Added moby-buildx to CBL-Mariner 2.0</p> 1.2 2024-04-10T17:00:00 <p>Added cri-o to CBL-Mariner 2.0</p> 1.3 2024-06-30T00:00:00 <p>Information published.</p> 1.4 2024-08-28T17:00:00 <p>Information published.</p> 1.5 2024-08-29T17:00:00 <p>Information published.</p> 1.6 2024-08-30T17:00:00 <p>Information published.</p> 1.7 2024-08-31T17:00:00 <p>Information published.</p> 1.8 2024-09-01T17:00:00 <p>Information published.</p> 1.9 2024-09-02T17:00:00 <p>Information published.</p> 2.0 2024-09-04T17:00:00 <p>Information published.</p> 2.1 2024-09-05T17:00:00 <p>Information published.</p> 2.2 2024-09-06T17:00:00 <p>Information published.</p> 2.3 2024-09-07T17:00:00 <p>Information published.</p> 2.4 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2023-26964 https://nvd.nist.gov/vuln/detail/CVE-2023-26964 https://nvd.nist.gov/vuln/detail/CVE-2023-26964 https://nvd.nist.gov/vuln/detail/CVE-2023-26964 https://nvd.nist.gov/vuln/detail/CVE-2023-26964 https://nvd.nist.gov/vuln/detail/CVE-2023-26964 https://nvd.nist.gov/vuln/detail/CVE-2023-26964 https://nvd.nist.gov/vuln/detail/CVE-2023-26964 Mariner cve@mitre.org Yes CVE-2023-26964 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12139 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12140 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12356 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12357 kata-containers 12139 kata-containers-3.2.0.azl0-2.cm2.x86_64.rpm 0001-01-01T00:00:00 kata-containers-tools-3.2.0.azl0-2.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.2.0.azl0-1 https://nvd.nist.gov/vuln/detail/CVE-2023-26964 12139 kata-containers rpm-ostree 12139 rpm-ostree-2022.1-7.cm2.x86_64.rpm 0001-01-01T00:00:00 rpm-ostree-devel-2022.1-7.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 2022.1-7 https://nvd.nist.gov/vuln/detail/CVE-2023-26964 12139 rpm-ostree kata-containers 12140 kata-containers-3.2.0.azl0-2.cm2.aarch64.rpm 0001-01-01T00:00:00 kata-containers-tools-3.2.0.azl0-2.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.2.0.azl0-1 https://nvd.nist.gov/vuln/detail/CVE-2023-26964 12140 kata-containers rpm-ostree 12140 CBL-Mariner 2022.1-7 https://nvd.nist.gov/vuln/detail/CVE-2023-26964 12140 rpm-ostree kata-containers 12356 kata-containers-3.2.0.azl2-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kata-containers-tools-3.2.0.azl2-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.2.0.azl0-2 https://nvd.nist.gov/vuln/detail/CVE-2023-26964 12356 kata-containers rpm-ostree 12356 rpm-ostree-2024.4-1.azl3.x86_64.rpm 0001-01-01T00:00:00 rpm-ostree-devel-2024.4-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 2024.4-1 https://nvd.nist.gov/vuln/detail/CVE-2023-26964 12356 rpm-ostree kata-containers 12357 kata-containers-3.2.0.azl2-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kata-containers-tools-3.2.0.azl2-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.2.0.azl0-2 https://nvd.nist.gov/vuln/detail/CVE-2023-26964 12357 kata-containers rpm-ostree 12357 CBL-Mariner 2024.4-1 https://nvd.nist.gov/vuln/detail/CVE-2023-26964 12357 rpm-ostree 1.0 2023-05-16T17:00:00 <p>Information published.</p> 1.1 2024-06-30T00:00:00 <p>Information published.</p> 1.2 2024-08-25T17:00:00 <p>Information published.</p> 1.3 2024-08-26T17:00:00 <p>Information published.</p> 1.4 2024-08-27T17:00:00 <p>Information published.</p> 1.5 2024-08-28T17:00:00 <p>Information published.</p> 1.6 2024-08-29T17:00:00 <p>Information published.</p> 1.7 2024-08-30T17:00:00 <p>Information published.</p> 1.8 2024-08-31T17:00:00 <p>Information published.</p> 1.9 2024-09-01T17:00:00 <p>Information published.</p> 2.0 2024-09-02T17:00:00 <p>Information published.</p> 2.1 2024-09-04T17:00:00 <p>Information published.</p> 2.2 2024-09-05T17:00:00 <p>Information published.</p> 2.3 2024-09-06T17:00:00 <p>Information published.</p> 2.4 2024-09-07T17:00:00 <p>Information published.</p> 2.5 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2023-42363 https://nvd.nist.gov/vuln/detail/CVE-2023-42363 https://nvd.nist.gov/vuln/detail/CVE-2023-42363 https://nvd.nist.gov/vuln/detail/CVE-2023-42363 Mariner cve@mitre.org Yes CVE-2023-42363 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 12139 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 12140 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 12356 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 12357 busybox 12139 busybox-1.35.0-11.cm2.x86_64.rpm 0001-01-01T00:00:00 busybox-petitboot-1.35.0-11.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.35.0-11 https://nvd.nist.gov/vuln/detail/CVE-2023-42363 12139 busybox busybox 12140 busybox-1.35.0-11.cm2.aarch64.rpm 0001-01-01T00:00:00 busybox-petitboot-1.35.0-11.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.35.0-11 https://nvd.nist.gov/vuln/detail/CVE-2023-42363 12140 busybox busybox 12356 busybox-1.36.1-7.azl3.x86_64.rpm 0001-01-01T00:00:00 busybox-petitboot-1.36.1-7.azl3.x86_64.rpm 0001-01-01T00:00:00 busybox-debuginfo-1.36.1-7.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.36.1-7 https://nvd.nist.gov/vuln/detail/CVE-2023-42363 12356 busybox busybox 12357 busybox-1.36.1-7.azl3.aarch64.rpm 0001-01-01T00:00:00 busybox-petitboot-1.36.1-7.azl3.aarch64.rpm 0001-01-01T00:00:00 busybox-debuginfo-1.36.1-7.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.36.1-7 https://nvd.nist.gov/vuln/detail/CVE-2023-42363 12357 busybox 1.0 2024-08-17T17:00:00 <p>Information published.</p> 1.1 2024-08-24T17:00:00 <p>Information published.</p> 1.2 2024-08-25T17:00:00 <p>Information published.</p> 1.3 2024-08-26T17:00:00 <p>Information published.</p> 1.4 2024-08-27T17:00:00 <p>Information published.</p> 1.5 2024-08-28T17:00:00 <p>Information published.</p> 1.6 2024-08-29T17:00:00 <p>Information published.</p> 1.7 2024-08-30T17:00:00 <p>Information published.</p> 1.8 2024-08-31T17:00:00 <p>Information published.</p> 1.9 2024-09-01T17:00:00 <p>Information published.</p> 2.0 2024-09-02T17:00:00 <p>Information published.</p> 2.1 2024-09-04T17:00:00 <p>Information published.</p> 2.2 2024-09-05T17:00:00 <p>Information published.</p> 2.3 2024-09-06T17:00:00 <p>Information published.</p> 2.4 2024-09-07T17:00:00 <p>Information published.</p> 2.5 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2023-42365 https://nvd.nist.gov/vuln/detail/CVE-2023-42365 https://nvd.nist.gov/vuln/detail/CVE-2023-42365 https://nvd.nist.gov/vuln/detail/CVE-2023-42365 Mariner cve@mitre.org Yes CVE-2023-42365 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 12139 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 12140 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 12356 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 12357 busybox 12139 busybox-1.35.0-11.cm2.x86_64.rpm 0001-01-01T00:00:00 busybox-petitboot-1.35.0-11.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.35.0-11 https://nvd.nist.gov/vuln/detail/CVE-2023-42365 12139 busybox busybox 12140 busybox-1.35.0-11.cm2.aarch64.rpm 0001-01-01T00:00:00 busybox-petitboot-1.35.0-11.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.35.0-11 https://nvd.nist.gov/vuln/detail/CVE-2023-42365 12140 busybox busybox 12356 busybox-1.36.1-7.azl3.x86_64.rpm 0001-01-01T00:00:00 busybox-petitboot-1.36.1-7.azl3.x86_64.rpm 0001-01-01T00:00:00 busybox-debuginfo-1.36.1-7.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.36.1-7 https://nvd.nist.gov/vuln/detail/CVE-2023-42365 12356 busybox busybox 12357 busybox-1.36.1-7.azl3.aarch64.rpm 0001-01-01T00:00:00 busybox-petitboot-1.36.1-7.azl3.aarch64.rpm 0001-01-01T00:00:00 busybox-debuginfo-1.36.1-7.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.36.1-7 https://nvd.nist.gov/vuln/detail/CVE-2023-42365 12357 busybox 1.0 2024-08-17T17:00:00 <p>Information published.</p> 1.1 2024-08-24T17:00:00 <p>Information published.</p> 1.2 2024-08-25T17:00:00 <p>Information published.</p> 1.3 2024-08-26T17:00:00 <p>Information published.</p> 1.4 2024-08-27T17:00:00 <p>Information published.</p> 1.5 2024-08-28T17:00:00 <p>Information published.</p> 1.6 2024-08-29T17:00:00 <p>Information published.</p> 1.7 2024-08-30T17:00:00 <p>Information published.</p> 1.8 2024-08-31T17:00:00 <p>Information published.</p> 1.9 2024-09-01T17:00:00 <p>Information published.</p> 2.0 2024-09-02T17:00:00 <p>Information published.</p> 2.1 2024-09-04T17:00:00 <p>Information published.</p> 2.2 2024-09-05T17:00:00 <p>Information published.</p> 2.3 2024-09-06T17:00:00 <p>Information published.</p> 2.4 2024-09-07T17:00:00 <p>Information published.</p> 2.5 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2023-45142 https://nvd.nist.gov/vuln/detail/CVE-2023-45142 https://nvd.nist.gov/vuln/detail/CVE-2023-45142 https://nvd.nist.gov/vuln/detail/CVE-2023-45142 https://nvd.nist.gov/vuln/detail/CVE-2023-45142 https://nvd.nist.gov/vuln/detail/CVE-2023-45142 https://nvd.nist.gov/vuln/detail/CVE-2023-45142 https://nvd.nist.gov/vuln/detail/CVE-2023-45142 https://nvd.nist.gov/vuln/detail/CVE-2023-45142 https://nvd.nist.gov/vuln/detail/CVE-2023-45142 https://nvd.nist.gov/vuln/detail/CVE-2023-45142 https://nvd.nist.gov/vuln/detail/CVE-2023-45142 Mariner security-advisories@github.com Yes CVE-2023-45142 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12139 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12140 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12356 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12357 cri-tools 12139 cri-tools-1.29.0-2.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.29.0-2 https://nvd.nist.gov/vuln/detail/CVE-2023-45142 12139 cri-tools opa 12139 opa-0.63.0-1.cm2.x86_64.rpm 0001-01-01T00:00:00 opa-debuginfo-0.63.0-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 0.63.0-1 https://nvd.nist.gov/vuln/detail/CVE-2023-45142 12139 opa cri-tools 12140 cri-tools-1.29.0-2.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.29.0-2 https://nvd.nist.gov/vuln/detail/CVE-2023-45142 12140 cri-tools opa 12140 opa-0.63.0-1.cm2.aarch64.rpm 0001-01-01T00:00:00 opa-debuginfo-0.63.0-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 0.63.0-1 https://nvd.nist.gov/vuln/detail/CVE-2023-45142 12140 opa cert-manager 12356 cert-manager-1.12.12-1.azl3.x86_64.rpm 0001-01-01T00:00:00 cert-manager-acmesolver-1.12.12-1.azl3.x86_64.rpm 0001-01-01T00:00:00 cert-manager-cainjector-1.12.12-1.azl3.x86_64.rpm 0001-01-01T00:00:00 cert-manager-controller-1.12.12-1.azl3.x86_64.rpm 0001-01-01T00:00:00 cert-manager-cmctl-1.12.12-1.azl3.x86_64.rpm 0001-01-01T00:00:00 cert-manager-webhook-1.12.12-1.azl3.x86_64.rpm 0001-01-01T00:00:00 cert-manager-debuginfo-1.12.12-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.12.12-1 https://nvd.nist.gov/vuln/detail/CVE-2023-45142 12356 cert-manager docker-buildx 12356 docker-buildx-0.14.0-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 0.14.0-1 https://nvd.nist.gov/vuln/detail/CVE-2023-45142 12356 docker-buildx kube-vip-cloud-provider 12356 kube-vip-cloud-provider-0.0.10-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kube-vip-cloud-provider-debuginfo-0.0.10-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 0.0.10-1 https://nvd.nist.gov/vuln/detail/CVE-2023-45142 12356 kube-vip-cloud-provider kubernetes 12356 kubernetes-1.30.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kubernetes-client-1.30.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kubernetes-kubeadm-1.30.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kubernetes-kube-proxy-1.30.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kubernetes-kube-apiserver-1.30.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kubernetes-kube-controller-manager-1.30.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kubernetes-kube-scheduler-1.30.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kubernetes-pause-1.30.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.29.1-2 https://nvd.nist.gov/vuln/detail/CVE-2023-45142 12356 kubernetes cert-manager 12357 cert-manager-1.12.12-1.azl3.aarch64.rpm 0001-01-01T00:00:00 cert-manager-acmesolver-1.12.12-1.azl3.aarch64.rpm 0001-01-01T00:00:00 cert-manager-cainjector-1.12.12-1.azl3.aarch64.rpm 0001-01-01T00:00:00 cert-manager-controller-1.12.12-1.azl3.aarch64.rpm 0001-01-01T00:00:00 cert-manager-cmctl-1.12.12-1.azl3.aarch64.rpm 0001-01-01T00:00:00 cert-manager-webhook-1.12.12-1.azl3.aarch64.rpm 0001-01-01T00:00:00 cert-manager-debuginfo-1.12.12-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.12.12-1 https://nvd.nist.gov/vuln/detail/CVE-2023-45142 12357 cert-manager docker-buildx 12357 docker-buildx-0.14.0-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 0.14.0-1 https://nvd.nist.gov/vuln/detail/CVE-2023-45142 12357 docker-buildx kube-vip-cloud-provider 12357 kube-vip-cloud-provider-0.0.10-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kube-vip-cloud-provider-debuginfo-0.0.10-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 0.0.10-1 https://nvd.nist.gov/vuln/detail/CVE-2023-45142 12357 kube-vip-cloud-provider kubernetes 12357 kubernetes-1.30.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kubernetes-client-1.30.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kubernetes-kubeadm-1.30.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kubernetes-kube-proxy-1.30.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kubernetes-kube-apiserver-1.30.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kubernetes-kube-controller-manager-1.30.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kubernetes-kube-scheduler-1.30.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kubernetes-pause-1.30.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.29.1-2 https://nvd.nist.gov/vuln/detail/CVE-2023-45142 12357 kubernetes 1.0 2024-01-20T16:00:00 <p>Information published.</p> 1.1 2023-10-15T17:00:00 <p>Information published.</p> 1.2 2024-06-30T00:00:00 <p>Information published.</p> 1.3 2024-08-24T17:00:00 <p>Information published.</p> 1.4 2024-08-25T17:00:00 <p>Information published.</p> 1.5 2024-08-26T17:00:00 <p>Information published.</p> 1.6 2024-08-27T17:00:00 <p>Information published.</p> 1.7 2024-08-28T17:00:00 <p>Information published.</p> 1.8 2024-08-29T17:00:00 <p>Information published.</p> 1.9 2024-08-30T17:00:00 <p>Information published.</p> 2.0 2024-08-31T17:00:00 <p>Information published.</p> 2.1 2024-09-01T17:00:00 <p>Information published.</p> 2.2 2024-09-02T17:00:00 <p>Information published.</p> 2.3 2024-09-04T17:00:00 <p>Information published.</p> 2.4 2024-09-05T17:00:00 <p>Information published.</p> 2.5 2024-09-06T17:00:00 <p>Information published.</p> 2.6 2024-09-07T17:00:00 <p>Information published.</p> 2.7 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2022-37434 https://nvd.nist.gov/vuln/detail/CVE-2022-37434 https://nvd.nist.gov/vuln/detail/CVE-2022-37434 https://nvd.nist.gov/vuln/detail/CVE-2022-37434 https://nvd.nist.gov/vuln/detail/CVE-2022-37434 https://nvd.nist.gov/vuln/detail/CVE-2022-37434 https://nvd.nist.gov/vuln/detail/CVE-2022-37434 https://nvd.nist.gov/vuln/detail/CVE-2022-37434 Mariner cve@mitre.org Yes CVE-2022-37434 12137 12138 12139 12140 12356 12357 12137 12138 12139 12140 12356 12357 12137 12138 12139 12140 12356 12357 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 12137 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 12138 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 12139 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 12140 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 12356 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 12357 zlib 12137 zlib-1.2.12-2.cm1.x86_64.rpm 0001-01-01T00:00:00 zlib-devel-1.2.12-2.cm1.x86_64.rpm 0001-01-01T00:00:00 zlib-debuginfo-1.2.12-2.cm1.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.2.12-2 https://nvd.nist.gov/vuln/detail/CVE-2022-37434 12137 zlib zlib 12138 zlib-1.2.12-2.cm1.aarch64.rpm 0001-01-01T00:00:00 zlib-devel-1.2.12-2.cm1.aarch64.rpm 0001-01-01T00:00:00 zlib-debuginfo-1.2.12-2.cm1.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.2.12-2 https://nvd.nist.gov/vuln/detail/CVE-2022-37434 12138 zlib zlib 12139 zlib-1.2.12-2.cm2.x86_64.rpm 0001-01-01T00:00:00 zlib-devel-1.2.12-2.cm2.x86_64.rpm 0001-01-01T00:00:00 zlib-debuginfo-1.2.12-2.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.2.12-2 https://nvd.nist.gov/vuln/detail/CVE-2022-37434 12139 zlib zlib 12140 zlib-1.2.12-2.cm2.aarch64.rpm 0001-01-01T00:00:00 zlib-devel-1.2.12-2.cm2.aarch64.rpm 0001-01-01T00:00:00 zlib-debuginfo-1.2.12-2.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.2.12-2 https://nvd.nist.gov/vuln/detail/CVE-2022-37434 12140 zlib cloud-hypervisor-cvm 12356 cloud-hypervisor-cvm-38.0.72.2-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 38.0.72.2-1 https://nvd.nist.gov/vuln/detail/CVE-2022-37434 12356 cloud-hypervisor-cvm crash 12356 crash-8.0.4-2.azl3.x86_64.rpm 0001-01-01T00:00:00 crash-devel-8.0.4-2.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 8.0.4-2 https://nvd.nist.gov/vuln/detail/CVE-2022-37434 12356 crash cloud-hypervisor-cvm 12357 CBL-Mariner 38.0.72.2-1 https://nvd.nist.gov/vuln/detail/CVE-2022-37434 12357 cloud-hypervisor-cvm crash 12357 crash-8.0.4-2.azl3.aarch64.rpm 0001-01-01T00:00:00 crash-devel-8.0.4-2.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 8.0.4-2 https://nvd.nist.gov/vuln/detail/CVE-2022-37434 12357 crash 1.0 2022-08-11T17:00:00 <p>Information published.</p> 1.1 2024-06-30T00:00:00 <p>Information published.</p> 1.2 2024-08-28T17:00:00 <p>Information published.</p> 1.3 2024-08-29T17:00:00 <p>Information published.</p> 1.4 2024-08-30T17:00:00 <p>Information published.</p> 1.5 2024-08-31T17:00:00 <p>Information published.</p> 1.6 2024-09-01T17:00:00 <p>Information published.</p> 1.7 2024-09-02T17:00:00 <p>Information published.</p> 1.8 2024-09-04T17:00:00 <p>Information published.</p> 1.9 2024-09-05T17:00:00 <p>Information published.</p> 2.0 2024-09-06T17:00:00 <p>Information published.</p> 2.1 2024-09-07T17:00:00 <p>Information published.</p> 2.2 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2023-45853 https://nvd.nist.gov/vuln/detail/CVE-2023-45853 https://nvd.nist.gov/vuln/detail/CVE-2023-45853 https://nvd.nist.gov/vuln/detail/CVE-2023-45853 https://nvd.nist.gov/vuln/detail/CVE-2023-45853 https://nvd.nist.gov/vuln/detail/CVE-2023-45853 https://nvd.nist.gov/vuln/detail/CVE-2023-45853 https://nvd.nist.gov/vuln/detail/CVE-2023-45853 https://nvd.nist.gov/vuln/detail/CVE-2023-45853 https://nvd.nist.gov/vuln/detail/CVE-2023-45853 https://nvd.nist.gov/vuln/detail/CVE-2023-45853 https://nvd.nist.gov/vuln/detail/CVE-2023-45853 https://nvd.nist.gov/vuln/detail/CVE-2023-45853 https://nvd.nist.gov/vuln/detail/CVE-2023-45853 https://nvd.nist.gov/vuln/detail/CVE-2023-45853 Mariner cve@mitre.org Yes CVE-2023-45853 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 12139 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 12140 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 12356 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 12357 boost 12139 boost-1.76.0-4.cm2.x86_64.rpm 0001-01-01T00:00:00 boost-devel-1.76.0-4.cm2.x86_64.rpm 0001-01-01T00:00:00 boost-static-1.76.0-4.cm2.x86_64.rpm 0001-01-01T00:00:00 boost-debuginfo-1.76.0-4.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.76.0-4 https://nvd.nist.gov/vuln/detail/CVE-2023-45853 12139 boost cloud-hypervisor 12139 cloud-hypervisor-32.0-2.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 32.0-2 https://nvd.nist.gov/vuln/detail/CVE-2023-45853 12139 cloud-hypervisor cloud-hypervisor-cvm 12139 cloud-hypervisor-cvm-38.0.72.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 38.0.72.2-1 https://nvd.nist.gov/vuln/detail/CVE-2023-45853 12139 cloud-hypervisor-cvm rust 12139 rust-1.72.0-5.cm2.x86_64.rpm 0001-01-01T00:00:00 rust-doc-1.72.0-5.cm2.noarch.rpm 0001-01-01T00:00:00 rust-debuginfo-1.72.0-5.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.72.0-5 https://nvd.nist.gov/vuln/detail/CVE-2023-45853 12139 rust boost 12140 boost-1.76.0-4.cm2.aarch64.rpm 0001-01-01T00:00:00 boost-devel-1.76.0-4.cm2.aarch64.rpm 0001-01-01T00:00:00 boost-static-1.76.0-4.cm2.aarch64.rpm 0001-01-01T00:00:00 boost-debuginfo-1.76.0-4.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.76.0-4 https://nvd.nist.gov/vuln/detail/CVE-2023-45853 12140 boost cloud-hypervisor 12140 CBL-Mariner 32.0-2 https://nvd.nist.gov/vuln/detail/CVE-2023-45853 12140 cloud-hypervisor cloud-hypervisor-cvm 12140 12357 CBL-Mariner 38.0.72.2-1 https://nvd.nist.gov/vuln/detail/CVE-2023-45853 12140 12357 cloud-hypervisor-cvm rust 12140 rust-1.72.0-5.cm2.aarch64.rpm 0001-01-01T00:00:00 rust-doc-1.72.0-5.cm2.noarch.rpm 0001-01-01T00:00:00 rust-debuginfo-1.72.0-5.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.72.0-5 https://nvd.nist.gov/vuln/detail/CVE-2023-45853 12140 rust cloud-hypervisor-cvm 12356 cloud-hypervisor-cvm-38.0.72.2-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 38.0.72.2-1 https://nvd.nist.gov/vuln/detail/CVE-2023-45853 12356 cloud-hypervisor-cvm keras 12356 python3-keras-3.1.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.1.1-1 https://nvd.nist.gov/vuln/detail/CVE-2023-45853 12356 keras nmap 12356 nmap-7.95-1.azl3.x86_64.rpm 0001-01-01T00:00:00 nmap-ncat-7.95-1.azl3.x86_64.rpm 0001-01-01T00:00:00 nmap-debuginfo-7.95-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 7.95-1 https://nvd.nist.gov/vuln/detail/CVE-2023-45853 12356 nmap rust 12356 rust-1.75.0-8.azl3.x86_64.rpm 0001-01-01T00:00:00 rust-doc-1.75.0-8.azl3.noarch.rpm 0001-01-01T00:00:00 CBL-Mariner 1.75.0-1 https://nvd.nist.gov/vuln/detail/CVE-2023-45853 12356 rust keras 12357 CBL-Mariner 3.1.1-1 https://nvd.nist.gov/vuln/detail/CVE-2023-45853 12357 keras nmap 12357 nmap-7.95-1.azl3.aarch64.rpm 0001-01-01T00:00:00 nmap-ncat-7.95-1.azl3.aarch64.rpm 0001-01-01T00:00:00 nmap-debuginfo-7.95-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 7.95-1 https://nvd.nist.gov/vuln/detail/CVE-2023-45853 12357 nmap rust 12357 rust-1.75.0-8.azl3.aarch64.rpm 0001-01-01T00:00:00 rust-doc-1.75.0-8.azl3.noarch.rpm 0001-01-01T00:00:00 CBL-Mariner 1.75.0-1 https://nvd.nist.gov/vuln/detail/CVE-2023-45853 12357 rust 1.0 2023-10-15T17:00:00 <p>Information published.</p> 1.1 2023-10-16T17:00:00 <p>Added tcl to CBL-Mariner 2.0</p> 1.2 2024-06-30T00:00:00 <p>Information published.</p> 1.3 2024-07-12T17:00:00 <p>Information published.</p> 1.4 2024-08-28T17:00:00 <p>Information published.</p> 1.5 2024-08-29T17:00:00 <p>Information published.</p> 1.6 2024-08-30T17:00:00 <p>Information published.</p> 1.7 2024-08-31T17:00:00 <p>Information published.</p> 1.8 2024-09-01T17:00:00 <p>Information published.</p> 1.9 2024-09-02T17:00:00 <p>Information published.</p> 2.0 2024-09-04T17:00:00 <p>Information published.</p> 2.1 2024-09-05T17:00:00 <p>Information published.</p> 2.2 2024-09-06T17:00:00 <p>Information published.</p> 2.3 2024-09-07T17:00:00 <p>Information published.</p> 2.4 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2023-5678 https://nvd.nist.gov/vuln/detail/CVE-2023-5678 https://nvd.nist.gov/vuln/detail/CVE-2023-5678 https://nvd.nist.gov/vuln/detail/CVE-2023-5678 https://nvd.nist.gov/vuln/detail/CVE-2023-5678 https://nvd.nist.gov/vuln/detail/CVE-2023-5678 https://nvd.nist.gov/vuln/detail/CVE-2023-5678 https://nvd.nist.gov/vuln/detail/CVE-2023-5678 https://nvd.nist.gov/vuln/detail/CVE-2023-5678 https://nvd.nist.gov/vuln/detail/CVE-2023-5678 https://nvd.nist.gov/vuln/detail/CVE-2023-5678 https://nvd.nist.gov/vuln/detail/CVE-2023-5678 https://nvd.nist.gov/vuln/detail/CVE-2023-5678 https://nvd.nist.gov/vuln/detail/CVE-2023-5678 Mariner openssl-security@openssl.org Yes CVE-2023-5678 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 12139 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 12140 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 12356 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 12357 cloud-hypervisor-cvm 12139 cloud-hypervisor-cvm-38.0.72.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 38.0.72.2-1 https://nvd.nist.gov/vuln/detail/CVE-2023-5678 12139 cloud-hypervisor-cvm hvloader 12139 hvloader-1.0.1-3.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.0.1-3 https://nvd.nist.gov/vuln/detail/CVE-2023-5678 12139 hvloader kata-containers 12139 kata-containers-3.2.0.azl2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kata-containers-tools-3.2.0.azl2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.2.0.azl1-1 https://nvd.nist.gov/vuln/detail/CVE-2023-5678 12139 kata-containers kata-containers-cc 12139 kata-containers-cc-3.2.0.azl2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kata-containers-cc-tools-3.2.0.azl2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.2.0.azl1-1 https://nvd.nist.gov/vuln/detail/CVE-2023-5678 12139 kata-containers-cc cloud-hypervisor-cvm 12140 12357 CBL-Mariner 38.0.72.2-1 https://nvd.nist.gov/vuln/detail/CVE-2023-5678 12140 12357 cloud-hypervisor-cvm hvloader 12140 CBL-Mariner 1.0.1-3 https://nvd.nist.gov/vuln/detail/CVE-2023-5678 12140 hvloader kata-containers 12140 kata-containers-3.2.0.azl2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kata-containers-tools-3.2.0.azl2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.2.0.azl1-1 https://nvd.nist.gov/vuln/detail/CVE-2023-5678 12140 kata-containers kata-containers-cc 12140 12357 CBL-Mariner 3.2.0.azl1-1 https://nvd.nist.gov/vuln/detail/CVE-2023-5678 12140 12357 kata-containers-cc cloud-hypervisor-cvm 12356 cloud-hypervisor-cvm-38.0.72.2-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 38.0.72.2-1 https://nvd.nist.gov/vuln/detail/CVE-2023-5678 12356 cloud-hypervisor-cvm edk2 12356 edk2-ovmf-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-tools-20240223gitedc6681206c1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 edk2-tools-doc-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-ovmf-ia32-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-ovmf-xen-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-experimental-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-ext4-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-tools-python-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 CBL-Mariner 20240223gitedc6681206c1-1 https://nvd.nist.gov/vuln/detail/CVE-2023-5678 12356 edk2 kata-containers 12356 kata-containers-3.2.0.azl2-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kata-containers-tools-3.2.0.azl2-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.2.0.azl1-1 https://nvd.nist.gov/vuln/detail/CVE-2023-5678 12356 kata-containers kata-containers-cc 12356 kata-containers-cc-3.2.0.azl2-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kata-containers-cc-tools-3.2.0.azl2-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.2.0.azl1-1 https://nvd.nist.gov/vuln/detail/CVE-2023-5678 12356 kata-containers-cc edk2 12357 CBL-Mariner 20240223gitedc6681206c1-1 https://nvd.nist.gov/vuln/detail/CVE-2023-5678 12357 edk2 kata-containers 12357 kata-containers-3.2.0.azl2-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kata-containers-tools-3.2.0.azl2-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.2.0.azl1-1 https://nvd.nist.gov/vuln/detail/CVE-2023-5678 12357 kata-containers 1.0 2023-11-12T16:00:00 <p>Information published.</p> 1.1 2024-03-06T16:00:00 <p>Added kata-containers to CBL-Mariner 2.0</p> 1.2 2024-04-05T17:00:00 <p>Added hvloader to CBL-Mariner 2.0</p> 1.3 2024-06-30T00:00:00 <p>Information published.</p> 1.4 2024-07-12T17:00:00 <p>Information published.</p> 1.5 2024-08-28T17:00:00 <p>Information published.</p> 1.6 2024-08-29T17:00:00 <p>Information published.</p> 1.7 2024-08-30T17:00:00 <p>Information published.</p> 1.8 2024-08-31T17:00:00 <p>Information published.</p> 1.9 2024-09-01T17:00:00 <p>Information published.</p> 2.0 2024-09-02T17:00:00 <p>Information published.</p> 2.1 2024-09-04T17:00:00 <p>Information published.</p> 2.2 2024-09-05T17:00:00 <p>Information published.</p> 2.3 2024-09-06T17:00:00 <p>Information published.</p> 2.4 2024-09-07T17:00:00 <p>Information published.</p> 2.5 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-0727 https://nvd.nist.gov/vuln/detail/CVE-2024-0727 https://nvd.nist.gov/vuln/detail/CVE-2024-0727 https://nvd.nist.gov/vuln/detail/CVE-2024-0727 https://nvd.nist.gov/vuln/detail/CVE-2024-0727 https://nvd.nist.gov/vuln/detail/CVE-2024-0727 https://nvd.nist.gov/vuln/detail/CVE-2024-0727 https://nvd.nist.gov/vuln/detail/CVE-2024-0727 https://nvd.nist.gov/vuln/detail/CVE-2024-0727 https://nvd.nist.gov/vuln/detail/CVE-2024-0727 https://nvd.nist.gov/vuln/detail/CVE-2024-0727 https://nvd.nist.gov/vuln/detail/CVE-2024-0727 https://nvd.nist.gov/vuln/detail/CVE-2024-0727 https://nvd.nist.gov/vuln/detail/CVE-2024-0727 Mariner openssl-security@openssl.org Yes CVE-2024-0727 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 12139 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 12140 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 12356 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 12357 cloud-hypervisor-cvm 12139 cloud-hypervisor-cvm-38.0.72.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 38.0.72.2-1 https://nvd.nist.gov/vuln/detail/CVE-2024-0727 12139 cloud-hypervisor-cvm hvloader 12139 hvloader-1.0.1-3.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.0.1-3 https://nvd.nist.gov/vuln/detail/CVE-2024-0727 12139 hvloader kata-containers 12139 kata-containers-3.2.0.azl2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kata-containers-tools-3.2.0.azl2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.2.0.azl1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-0727 12139 kata-containers kata-containers-cc 12139 kata-containers-cc-3.2.0.azl2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kata-containers-cc-tools-3.2.0.azl2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.2.0.azl1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-0727 12139 kata-containers-cc cloud-hypervisor-cvm 12140 12357 CBL-Mariner 38.0.72.2-1 https://nvd.nist.gov/vuln/detail/CVE-2024-0727 12140 12357 cloud-hypervisor-cvm hvloader 12140 CBL-Mariner 1.0.1-3 https://nvd.nist.gov/vuln/detail/CVE-2024-0727 12140 hvloader kata-containers 12140 kata-containers-3.2.0.azl2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kata-containers-tools-3.2.0.azl2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.2.0.azl1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-0727 12140 kata-containers kata-containers-cc 12140 12357 CBL-Mariner 3.2.0.azl1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-0727 12140 12357 kata-containers-cc cloud-hypervisor-cvm 12356 cloud-hypervisor-cvm-38.0.72.2-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 38.0.72.2-1 https://nvd.nist.gov/vuln/detail/CVE-2024-0727 12356 cloud-hypervisor-cvm kata-containers 12356 kata-containers-3.2.0.azl2-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kata-containers-tools-3.2.0.azl2-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.2.0.azl1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-0727 12356 kata-containers kata-containers-cc 12356 kata-containers-cc-3.2.0.azl2-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kata-containers-cc-tools-3.2.0.azl2-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.2.0.azl1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-0727 12356 kata-containers-cc nodejs 12356 nodejs-20.14.0-1.azl3.x86_64.rpm 0001-01-01T00:00:00 nodejs-devel-20.14.0-1.azl3.x86_64.rpm 0001-01-01T00:00:00 nodejs-npm-20.14.0-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 20.14.0-1 https://nvd.nist.gov/vuln/detail/CVE-2024-0727 12356 nodejs kata-containers 12357 kata-containers-3.2.0.azl2-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kata-containers-tools-3.2.0.azl2-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.2.0.azl1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-0727 12357 kata-containers nodejs 12357 nodejs-20.14.0-1.azl3.aarch64.rpm 0001-01-01T00:00:00 nodejs-devel-20.14.0-1.azl3.aarch64.rpm 0001-01-01T00:00:00 nodejs-npm-20.14.0-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 20.14.0-1 https://nvd.nist.gov/vuln/detail/CVE-2024-0727 12357 nodejs 1.0 2024-01-28T16:00:00 <p>Information published.</p> 1.1 2024-03-06T16:00:00 <p>Added kata-containers to CBL-Mariner 2.0</p> 1.2 2024-04-05T17:00:00 <p>Added hvloader to CBL-Mariner 2.0</p> 1.3 2024-06-30T00:00:00 <p>Information published.</p> 1.4 2024-07-12T17:00:00 <p>Information published.</p> 1.5 2024-08-28T17:00:00 <p>Information published.</p> 1.6 2024-08-29T17:00:00 <p>Information published.</p> 1.7 2024-08-30T17:00:00 <p>Information published.</p> 1.8 2024-08-31T17:00:00 <p>Information published.</p> 1.9 2024-09-01T17:00:00 <p>Information published.</p> 2.0 2024-09-02T17:00:00 <p>Information published.</p> 2.1 2024-09-04T17:00:00 <p>Information published.</p> 2.2 2024-09-05T17:00:00 <p>Information published.</p> 2.3 2024-09-06T17:00:00 <p>Information published.</p> 2.4 2024-09-07T17:00:00 <p>Information published.</p> 2.5 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2022-2879 https://nvd.nist.gov/vuln/detail/CVE-2022-2879 https://nvd.nist.gov/vuln/detail/CVE-2022-2879 https://nvd.nist.gov/vuln/detail/CVE-2022-2879 https://nvd.nist.gov/vuln/detail/CVE-2022-2879 https://nvd.nist.gov/vuln/detail/CVE-2022-2879 https://nvd.nist.gov/vuln/detail/CVE-2022-2879 https://nvd.nist.gov/vuln/detail/CVE-2022-2879 https://nvd.nist.gov/vuln/detail/CVE-2022-2879 Mariner security@golang.org Yes CVE-2022-2879 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12139 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12140 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12356 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12357 golang 12139 golang-1.21.6-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.21.6-1 https://nvd.nist.gov/vuln/detail/CVE-2022-2879 12139 golang golang 12140 golang-1.21.6-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.21.6-1 https://nvd.nist.gov/vuln/detail/CVE-2022-2879 12140 golang containerized-data-importer 12356 containerized-data-importer-api-1.57.0-4.azl3.x86_64.rpm 0001-01-01T00:00:00 containerized-data-importer-cloner-1.57.0-4.azl3.x86_64.rpm 0001-01-01T00:00:00 containerized-data-importer-controller-1.57.0-4.azl3.x86_64.rpm 0001-01-01T00:00:00 containerized-data-importer-importer-1.57.0-4.azl3.x86_64.rpm 0001-01-01T00:00:00 containerized-data-importer-operator-1.57.0-4.azl3.x86_64.rpm 0001-01-01T00:00:00 containerized-data-importer-uploadproxy-1.57.0-4.azl3.x86_64.rpm 0001-01-01T00:00:00 containerized-data-importer-uploadserver-1.57.0-4.azl3.x86_64.rpm 0001-01-01T00:00:00 containerized-data-importer-manifests-1.57.0-4.azl3.x86_64.rpm 0001-01-01T00:00:00 containerized-data-importer-debuginfo-1.57.0-4.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.57.0-3 https://nvd.nist.gov/vuln/detail/CVE-2022-2879 12356 containerized-data-importer ig 12356 ig-0.29.0-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 0.29.0-1 https://nvd.nist.gov/vuln/detail/CVE-2022-2879 12356 ig libcontainers-common 12356 12357 libcontainers-common-20240213-2.azl3.noarch.rpm 0001-01-01T00:00:00 CBL-Mariner 20240213-2 https://nvd.nist.gov/vuln/detail/CVE-2022-2879 12356 12357 libcontainers-common moby-engine 12356 moby-engine-25.0.3-3.azl3.x86_64.rpm 0001-01-01T00:00:00 moby-engine-debuginfo-25.0.3-3.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 25.0.3-3 https://nvd.nist.gov/vuln/detail/CVE-2022-2879 12356 moby-engine containerized-data-importer 12357 containerized-data-importer-api-1.57.0-4.azl3.aarch64.rpm 0001-01-01T00:00:00 containerized-data-importer-cloner-1.57.0-4.azl3.aarch64.rpm 0001-01-01T00:00:00 containerized-data-importer-controller-1.57.0-4.azl3.aarch64.rpm 0001-01-01T00:00:00 containerized-data-importer-importer-1.57.0-4.azl3.aarch64.rpm 0001-01-01T00:00:00 containerized-data-importer-operator-1.57.0-4.azl3.aarch64.rpm 0001-01-01T00:00:00 containerized-data-importer-uploadproxy-1.57.0-4.azl3.aarch64.rpm 0001-01-01T00:00:00 containerized-data-importer-uploadserver-1.57.0-4.azl3.aarch64.rpm 0001-01-01T00:00:00 containerized-data-importer-manifests-1.57.0-4.azl3.aarch64.rpm 0001-01-01T00:00:00 containerized-data-importer-debuginfo-1.57.0-4.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.57.0-3 https://nvd.nist.gov/vuln/detail/CVE-2022-2879 12357 containerized-data-importer ig 12357 ig-0.29.0-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 0.29.0-1 https://nvd.nist.gov/vuln/detail/CVE-2022-2879 12357 ig moby-engine 12357 moby-engine-25.0.3-3.azl3.aarch64.rpm 0001-01-01T00:00:00 moby-engine-debuginfo-25.0.3-3.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 25.0.3-3 https://nvd.nist.gov/vuln/detail/CVE-2022-2879 12357 moby-engine 1.2 2024-08-15T17:00:00 <p>Information published.</p> 1.0 2022-10-18T17:00:00 <p>Information published.</p> 1.1 2024-06-30T00:00:00 <p>Information published.</p> 1.3 2024-08-28T17:00:00 <p>Information published.</p> 1.4 2024-08-29T17:00:00 <p>Information published.</p> 1.5 2024-08-30T17:00:00 <p>Information published.</p> 1.6 2024-08-31T17:00:00 <p>Information published.</p> 1.7 2024-09-01T17:00:00 <p>Information published.</p> 1.8 2024-09-02T17:00:00 <p>Information published.</p> 1.9 2024-09-04T17:00:00 <p>Information published.</p> 2.0 2024-09-05T17:00:00 <p>Information published.</p> 2.1 2024-09-06T17:00:00 <p>Information published.</p> 2.2 2024-09-07T17:00:00 <p>Information published.</p> 2.3 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2023-47108 https://nvd.nist.gov/vuln/detail/CVE-2023-47108 https://nvd.nist.gov/vuln/detail/CVE-2023-47108 https://nvd.nist.gov/vuln/detail/CVE-2023-47108 https://nvd.nist.gov/vuln/detail/CVE-2023-47108 https://nvd.nist.gov/vuln/detail/CVE-2023-47108 https://nvd.nist.gov/vuln/detail/CVE-2023-47108 https://nvd.nist.gov/vuln/detail/CVE-2023-47108 https://nvd.nist.gov/vuln/detail/CVE-2023-47108 https://nvd.nist.gov/vuln/detail/CVE-2023-47108 Mariner security-advisories@github.com Yes CVE-2023-47108 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12139 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12140 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12356 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12357 moby-containerd-cc 12139 moby-containerd-cc-1.7.2-3.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.7.2-3 https://nvd.nist.gov/vuln/detail/CVE-2023-47108 12139 moby-containerd-cc moby-containerd-cc 12140 moby-containerd-cc-1.7.2-3.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.7.2-3 https://nvd.nist.gov/vuln/detail/CVE-2023-47108 12140 moby-containerd-cc containerd 12356 containerd-1.7.13-3.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.7.13-3 https://nvd.nist.gov/vuln/detail/CVE-2023-47108 12356 containerd docker-buildx 12356 docker-buildx-0.14.0-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 0.14.0-1 https://nvd.nist.gov/vuln/detail/CVE-2023-47108 12356 docker-buildx docker-compose 12356 docker-compose-2.27.0-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.27.0-1 https://nvd.nist.gov/vuln/detail/CVE-2023-47108 12356 docker-compose ig 12356 ig-0.30.0-1.azl3.x86_64.rpm 0001-01-01T00:00:00 ig-debuginfo-0.30.0-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 0.30.0-1 https://nvd.nist.gov/vuln/detail/CVE-2023-47108 12356 ig containerd 12357 containerd-1.7.13-3.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.7.13-3 https://nvd.nist.gov/vuln/detail/CVE-2023-47108 12357 containerd docker-buildx 12357 docker-buildx-0.14.0-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 0.14.0-1 https://nvd.nist.gov/vuln/detail/CVE-2023-47108 12357 docker-buildx docker-compose 12357 docker-compose-2.27.0-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.27.0-1 https://nvd.nist.gov/vuln/detail/CVE-2023-47108 12357 docker-compose ig 12357 ig-0.30.0-1.azl3.aarch64.rpm 0001-01-01T00:00:00 ig-debuginfo-0.30.0-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 0.30.0-1 https://nvd.nist.gov/vuln/detail/CVE-2023-47108 12357 ig 1.0 2023-11-13T16:00:00 <p>Information published.</p> 1.1 2024-06-30T00:00:00 <p>Information published.</p> 1.2 2024-08-28T17:00:00 <p>Information published.</p> 1.3 2024-08-29T17:00:00 <p>Information published.</p> 1.4 2024-08-30T17:00:00 <p>Information published.</p> 1.5 2024-08-31T17:00:00 <p>Information published.</p> 1.6 2024-09-01T17:00:00 <p>Information published.</p> 1.7 2024-09-02T17:00:00 <p>Information published.</p> 1.8 2024-09-04T17:00:00 <p>Information published.</p> 1.9 2024-09-05T17:00:00 <p>Information published.</p> 2.0 2024-09-06T17:00:00 <p>Information published.</p> 2.1 2024-09-07T17:00:00 <p>Information published.</p> 2.2 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2023-32324 https://nvd.nist.gov/vuln/detail/CVE-2023-32324 https://nvd.nist.gov/vuln/detail/CVE-2023-32324 https://nvd.nist.gov/vuln/detail/CVE-2023-32324 Mariner security-advisories@github.com Yes CVE-2023-32324 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 12139 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 12140 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 12356 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 12357 cups 12139 cups-2.3.3op2-7.cm2.x86_64.rpm 0001-01-01T00:00:00 cups-client-2.3.3op2-7.cm2.x86_64.rpm 0001-01-01T00:00:00 cups-devel-2.3.3op2-7.cm2.x86_64.rpm 0001-01-01T00:00:00 cups-libs-2.3.3op2-7.cm2.x86_64.rpm 0001-01-01T00:00:00 cups-filesystem-2.3.3op2-7.cm2.noarch.rpm 0001-01-01T00:00:00 cups-lpd-2.3.3op2-7.cm2.x86_64.rpm 0001-01-01T00:00:00 cups-ipptool-2.3.3op2-7.cm2.x86_64.rpm 0001-01-01T00:00:00 cups-printerapp-2.3.3op2-7.cm2.x86_64.rpm 0001-01-01T00:00:00 cups-debuginfo-2.3.3op2-7.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.3.3op2-7 https://nvd.nist.gov/vuln/detail/CVE-2023-32324 12139 cups cups 12140 cups-2.3.3op2-7.cm2.aarch64.rpm 0001-01-01T00:00:00 cups-client-2.3.3op2-7.cm2.aarch64.rpm 0001-01-01T00:00:00 cups-devel-2.3.3op2-7.cm2.aarch64.rpm 0001-01-01T00:00:00 cups-libs-2.3.3op2-7.cm2.aarch64.rpm 0001-01-01T00:00:00 cups-filesystem-2.3.3op2-7.cm2.noarch.rpm 0001-01-01T00:00:00 cups-lpd-2.3.3op2-7.cm2.aarch64.rpm 0001-01-01T00:00:00 cups-ipptool-2.3.3op2-7.cm2.aarch64.rpm 0001-01-01T00:00:00 cups-printerapp-2.3.3op2-7.cm2.aarch64.rpm 0001-01-01T00:00:00 cups-debuginfo-2.3.3op2-7.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.3.3op2-7 https://nvd.nist.gov/vuln/detail/CVE-2023-32324 12140 cups cups 12356 cups-2.4.10-1.azl3.x86_64.rpm 0001-01-01T00:00:00 cups-client-2.4.10-1.azl3.x86_64.rpm 0001-01-01T00:00:00 cups-devel-2.4.10-1.azl3.x86_64.rpm 0001-01-01T00:00:00 cups-libs-2.4.10-1.azl3.x86_64.rpm 0001-01-01T00:00:00 cups-filesystem-2.4.10-1.azl3.noarch.rpm 0001-01-01T00:00:00 cups-lpd-2.4.10-1.azl3.x86_64.rpm 0001-01-01T00:00:00 cups-ipptool-2.4.10-1.azl3.x86_64.rpm 0001-01-01T00:00:00 cups-printerapp-2.4.10-1.azl3.x86_64.rpm 0001-01-01T00:00:00 cups-debuginfo-2.4.10-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.4.10-1 https://nvd.nist.gov/vuln/detail/CVE-2023-32324 12356 cups cups 12357 cups-2.4.10-1.azl3.aarch64.rpm 0001-01-01T00:00:00 cups-client-2.4.10-1.azl3.aarch64.rpm 0001-01-01T00:00:00 cups-devel-2.4.10-1.azl3.aarch64.rpm 0001-01-01T00:00:00 cups-libs-2.4.10-1.azl3.aarch64.rpm 0001-01-01T00:00:00 cups-filesystem-2.4.10-1.azl3.noarch.rpm 0001-01-01T00:00:00 cups-lpd-2.4.10-1.azl3.aarch64.rpm 0001-01-01T00:00:00 cups-ipptool-2.4.10-1.azl3.aarch64.rpm 0001-01-01T00:00:00 cups-printerapp-2.4.10-1.azl3.aarch64.rpm 0001-01-01T00:00:00 cups-debuginfo-2.4.10-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.4.10-1 https://nvd.nist.gov/vuln/detail/CVE-2023-32324 12357 cups 1.0 2024-03-31T17:00:00 <p>Information published.</p> 1.1 2024-08-28T17:00:00 <p>Information published.</p> 1.2 2024-08-29T17:00:00 <p>Information published.</p> 1.3 2024-08-30T17:00:00 <p>Information published.</p> 1.4 2024-08-31T17:00:00 <p>Information published.</p> 1.5 2024-09-01T17:00:00 <p>Information published.</p> 1.6 2024-09-02T17:00:00 <p>Information published.</p> 1.7 2024-09-04T17:00:00 <p>Information published.</p> 1.8 2024-09-05T17:00:00 <p>Information published.</p> 1.9 2024-09-06T17:00:00 <p>Information published.</p> 2.0 2024-09-07T17:00:00 <p>Information published.</p> 2.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-0874 https://nvd.nist.gov/vuln/detail/CVE-2024-0874 https://nvd.nist.gov/vuln/detail/CVE-2024-0874 https://nvd.nist.gov/vuln/detail/CVE-2024-0874 Mariner secalert@redhat.com Yes CVE-2024-0874 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N 12139 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N 12140 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N 12356 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N 12357 coredns 12139 coredns-1.11.1-8.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.11.1-8 https://nvd.nist.gov/vuln/detail/CVE-2024-0874 12139 coredns coredns 12140 coredns-1.11.1-8.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.11.1-8 https://nvd.nist.gov/vuln/detail/CVE-2024-0874 12140 coredns coredns 12356 coredns-1.11.1-2.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.11.1-2 https://nvd.nist.gov/vuln/detail/CVE-2024-0874 12356 coredns coredns 12357 coredns-1.11.1-2.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.11.1-2 https://nvd.nist.gov/vuln/detail/CVE-2024-0874 12357 coredns 1.0 2024-05-02T17:00:00 <p>Information published.</p> 1.1 2024-06-30T00:00:00 <p>Information published.</p> 1.2 2024-08-28T17:00:00 <p>Information published.</p> 1.3 2024-08-29T17:00:00 <p>Information published.</p> 1.4 2024-08-30T17:00:00 <p>Information published.</p> 1.5 2024-08-31T17:00:00 <p>Information published.</p> 1.6 2024-09-01T17:00:00 <p>Information published.</p> 1.7 2024-09-02T17:00:00 <p>Information published.</p> 1.8 2024-09-04T17:00:00 <p>Information published.</p> 1.9 2024-09-05T17:00:00 <p>Information published.</p> 2.0 2024-09-06T17:00:00 <p>Information published.</p> 2.1 2024-09-07T17:00:00 <p>Information published.</p> 2.2 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-22189 https://nvd.nist.gov/vuln/detail/CVE-2024-22189 https://nvd.nist.gov/vuln/detail/CVE-2024-22189 https://nvd.nist.gov/vuln/detail/CVE-2024-22189 Mariner security-advisories@github.com Yes CVE-2024-22189 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12139 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12140 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12356 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12357 coredns 12139 coredns-1.11.1-6.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.11.1-6 https://nvd.nist.gov/vuln/detail/CVE-2024-22189 12139 coredns coredns 12140 coredns-1.11.1-6.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.11.1-6 https://nvd.nist.gov/vuln/detail/CVE-2024-22189 12140 coredns coredns 12356 coredns-1.11.1-2.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.11.1-2 https://nvd.nist.gov/vuln/detail/CVE-2024-22189 12356 coredns coredns 12357 coredns-1.11.1-2.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.11.1-2 https://nvd.nist.gov/vuln/detail/CVE-2024-22189 12357 coredns 1.0 2024-04-14T17:00:00 <p>Information published.</p> 1.1 2024-06-30T00:00:00 <p>Information published.</p> 1.2 2024-08-28T17:00:00 <p>Information published.</p> 1.3 2024-08-29T17:00:00 <p>Information published.</p> 1.4 2024-08-30T17:00:00 <p>Information published.</p> 1.5 2024-08-31T17:00:00 <p>Information published.</p> 1.6 2024-09-01T17:00:00 <p>Information published.</p> 1.7 2024-09-02T17:00:00 <p>Information published.</p> 1.8 2024-09-04T17:00:00 <p>Information published.</p> 1.9 2024-09-05T17:00:00 <p>Information published.</p> 2.0 2024-09-06T17:00:00 <p>Information published.</p> 2.1 2024-09-07T17:00:00 <p>Information published.</p> 2.2 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-0853 https://nvd.nist.gov/vuln/detail/CVE-2024-0853 https://nvd.nist.gov/vuln/detail/CVE-2024-0853 https://nvd.nist.gov/vuln/detail/CVE-2024-0853 Mariner 2499f714-1537-4658-8207-48ae4bb9eae9 Yes CVE-2024-0853 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N 12139 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N 12140 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N 12356 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N 12357 curl 12139 curl-8.8.0-1.cm2.x86_64.rpm 0001-01-01T00:00:00 curl-devel-8.8.0-1.cm2.x86_64.rpm 0001-01-01T00:00:00 curl-libs-8.8.0-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 8.8.0-1 https://nvd.nist.gov/vuln/detail/CVE-2024-0853 12139 curl curl 12140 curl-8.8.0-1.cm2.aarch64.rpm 0001-01-01T00:00:00 curl-devel-8.8.0-1.cm2.aarch64.rpm 0001-01-01T00:00:00 curl-libs-8.8.0-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 8.8.0-1 https://nvd.nist.gov/vuln/detail/CVE-2024-0853 12140 curl curl 12356 curl-8.8.0-1.azl3.x86_64.rpm 0001-01-01T00:00:00 curl-devel-8.8.0-1.azl3.x86_64.rpm 0001-01-01T00:00:00 curl-libs-8.8.0-1.azl3.x86_64.rpm 0001-01-01T00:00:00 curl-debuginfo-8.8.0-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 8.8.0-1 https://nvd.nist.gov/vuln/detail/CVE-2024-0853 12356 curl curl 12357 curl-8.8.0-1.azl3.aarch64.rpm 0001-01-01T00:00:00 curl-devel-8.8.0-1.azl3.aarch64.rpm 0001-01-01T00:00:00 curl-libs-8.8.0-1.azl3.aarch64.rpm 0001-01-01T00:00:00 curl-debuginfo-8.8.0-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 8.8.0-1 https://nvd.nist.gov/vuln/detail/CVE-2024-0853 12357 curl 1.0 2024-08-04T17:00:00 <p>Information published.</p> 1.1 2024-08-28T17:00:00 <p>Information published.</p> 1.2 2024-08-29T17:00:00 <p>Information published.</p> 1.3 2024-08-30T17:00:00 <p>Information published.</p> 1.4 2024-08-31T17:00:00 <p>Information published.</p> 1.5 2024-09-01T17:00:00 <p>Information published.</p> 1.6 2024-09-02T17:00:00 <p>Information published.</p> 1.7 2024-09-04T17:00:00 <p>Information published.</p> 1.8 2024-09-05T17:00:00 <p>Information published.</p> 1.9 2024-09-06T17:00:00 <p>Information published.</p> 2.0 2024-09-07T17:00:00 <p>Information published.</p> 2.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2023-4504 https://nvd.nist.gov/vuln/detail/CVE-2023-4504 https://nvd.nist.gov/vuln/detail/CVE-2023-4504 https://nvd.nist.gov/vuln/detail/CVE-2023-4504 Mariner cve@takeonme.org Yes CVE-2023-4504 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 7.0 7.0 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H 12139 7.0 7.0 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H 12140 7.0 7.0 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H 12356 7.0 7.0 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H 12357 cups 12139 cups-2.3.3op2-7.cm2.x86_64.rpm 0001-01-01T00:00:00 cups-client-2.3.3op2-7.cm2.x86_64.rpm 0001-01-01T00:00:00 cups-devel-2.3.3op2-7.cm2.x86_64.rpm 0001-01-01T00:00:00 cups-libs-2.3.3op2-7.cm2.x86_64.rpm 0001-01-01T00:00:00 cups-filesystem-2.3.3op2-7.cm2.noarch.rpm 0001-01-01T00:00:00 cups-lpd-2.3.3op2-7.cm2.x86_64.rpm 0001-01-01T00:00:00 cups-ipptool-2.3.3op2-7.cm2.x86_64.rpm 0001-01-01T00:00:00 cups-printerapp-2.3.3op2-7.cm2.x86_64.rpm 0001-01-01T00:00:00 cups-debuginfo-2.3.3op2-7.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.3.3op2-7 https://nvd.nist.gov/vuln/detail/CVE-2023-4504 12139 cups cups 12140 cups-2.3.3op2-7.cm2.aarch64.rpm 0001-01-01T00:00:00 cups-client-2.3.3op2-7.cm2.aarch64.rpm 0001-01-01T00:00:00 cups-devel-2.3.3op2-7.cm2.aarch64.rpm 0001-01-01T00:00:00 cups-libs-2.3.3op2-7.cm2.aarch64.rpm 0001-01-01T00:00:00 cups-filesystem-2.3.3op2-7.cm2.noarch.rpm 0001-01-01T00:00:00 cups-lpd-2.3.3op2-7.cm2.aarch64.rpm 0001-01-01T00:00:00 cups-ipptool-2.3.3op2-7.cm2.aarch64.rpm 0001-01-01T00:00:00 cups-printerapp-2.3.3op2-7.cm2.aarch64.rpm 0001-01-01T00:00:00 cups-debuginfo-2.3.3op2-7.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.3.3op2-7 https://nvd.nist.gov/vuln/detail/CVE-2023-4504 12140 cups cups 12356 cups-2.4.10-1.azl3.x86_64.rpm 0001-01-01T00:00:00 cups-client-2.4.10-1.azl3.x86_64.rpm 0001-01-01T00:00:00 cups-devel-2.4.10-1.azl3.x86_64.rpm 0001-01-01T00:00:00 cups-libs-2.4.10-1.azl3.x86_64.rpm 0001-01-01T00:00:00 cups-filesystem-2.4.10-1.azl3.noarch.rpm 0001-01-01T00:00:00 cups-lpd-2.4.10-1.azl3.x86_64.rpm 0001-01-01T00:00:00 cups-ipptool-2.4.10-1.azl3.x86_64.rpm 0001-01-01T00:00:00 cups-printerapp-2.4.10-1.azl3.x86_64.rpm 0001-01-01T00:00:00 cups-debuginfo-2.4.10-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.4.10-1 https://nvd.nist.gov/vuln/detail/CVE-2023-4504 12356 cups cups 12357 cups-2.4.10-1.azl3.aarch64.rpm 0001-01-01T00:00:00 cups-client-2.4.10-1.azl3.aarch64.rpm 0001-01-01T00:00:00 cups-devel-2.4.10-1.azl3.aarch64.rpm 0001-01-01T00:00:00 cups-libs-2.4.10-1.azl3.aarch64.rpm 0001-01-01T00:00:00 cups-filesystem-2.4.10-1.azl3.noarch.rpm 0001-01-01T00:00:00 cups-lpd-2.4.10-1.azl3.aarch64.rpm 0001-01-01T00:00:00 cups-ipptool-2.4.10-1.azl3.aarch64.rpm 0001-01-01T00:00:00 cups-printerapp-2.4.10-1.azl3.aarch64.rpm 0001-01-01T00:00:00 cups-debuginfo-2.4.10-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.4.10-1 https://nvd.nist.gov/vuln/detail/CVE-2023-4504 12357 cups 1.0 2024-03-31T17:00:00 <p>Information published.</p> 1.1 2024-08-28T17:00:00 <p>Information published.</p> 1.2 2024-08-29T17:00:00 <p>Information published.</p> 1.3 2024-08-30T17:00:00 <p>Information published.</p> 1.4 2024-08-31T17:00:00 <p>Information published.</p> 1.5 2024-09-01T17:00:00 <p>Information published.</p> 1.6 2024-09-02T17:00:00 <p>Information published.</p> 1.7 2024-09-04T17:00:00 <p>Information published.</p> 1.8 2024-09-05T17:00:00 <p>Information published.</p> 1.9 2024-09-06T17:00:00 <p>Information published.</p> 2.0 2024-09-07T17:00:00 <p>Information published.</p> 2.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2021-4160 https://nvd.nist.gov/vuln/detail/CVE-2021-4160 https://nvd.nist.gov/vuln/detail/CVE-2021-4160 https://nvd.nist.gov/vuln/detail/CVE-2021-4160 https://nvd.nist.gov/vuln/detail/CVE-2021-4160 https://nvd.nist.gov/vuln/detail/CVE-2021-4160 Mariner openssl-security@openssl.org Yes CVE-2021-4160 12137 12138 12139 12140 12356 12357 12137 12138 12139 12140 12356 12357 12137 12138 12139 12140 12356 12357 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N 12137 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N 12138 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N 12139 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N 12140 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N 12356 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N 12357 openssl 12137 openssl-1.1.1k-8.cm1.x86_64.rpm 0001-01-01T00:00:00 openssl-libs-1.1.1k-8.cm1.x86_64.rpm 0001-01-01T00:00:00 openssl-devel-1.1.1k-8.cm1.x86_64.rpm 0001-01-01T00:00:00 openssl-static-1.1.1k-8.cm1.x86_64.rpm 0001-01-01T00:00:00 openssl-perl-1.1.1k-8.cm1.x86_64.rpm 0001-01-01T00:00:00 openssl-debuginfo-1.1.1k-8.cm1.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.1.1k-8 https://nvd.nist.gov/vuln/detail/CVE-2021-4160 12137 openssl openssl 12138 openssl-1.1.1k-8.cm1.aarch64.rpm 0001-01-01T00:00:00 openssl-libs-1.1.1k-8.cm1.aarch64.rpm 0001-01-01T00:00:00 openssl-devel-1.1.1k-8.cm1.aarch64.rpm 0001-01-01T00:00:00 openssl-static-1.1.1k-8.cm1.aarch64.rpm 0001-01-01T00:00:00 openssl-perl-1.1.1k-8.cm1.aarch64.rpm 0001-01-01T00:00:00 openssl-debuginfo-1.1.1k-8.cm1.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.1.1k-8 https://nvd.nist.gov/vuln/detail/CVE-2021-4160 12138 openssl openssl 12139 openssl-1.1.1k-13.cm2.x86_64.rpm 0001-01-01T00:00:00 openssl-libs-1.1.1k-13.cm2.x86_64.rpm 0001-01-01T00:00:00 openssl-devel-1.1.1k-13.cm2.x86_64.rpm 0001-01-01T00:00:00 openssl-static-1.1.1k-13.cm2.x86_64.rpm 0001-01-01T00:00:00 openssl-perl-1.1.1k-13.cm2.x86_64.rpm 0001-01-01T00:00:00 openssl-debuginfo-1.1.1k-13.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.1.1k-13 https://nvd.nist.gov/vuln/detail/CVE-2021-4160 12139 openssl openssl 12140 openssl-1.1.1k-13.cm2.aarch64.rpm 0001-01-01T00:00:00 openssl-libs-1.1.1k-13.cm2.aarch64.rpm 0001-01-01T00:00:00 openssl-devel-1.1.1k-13.cm2.aarch64.rpm 0001-01-01T00:00:00 openssl-static-1.1.1k-13.cm2.aarch64.rpm 0001-01-01T00:00:00 openssl-perl-1.1.1k-13.cm2.aarch64.rpm 0001-01-01T00:00:00 openssl-debuginfo-1.1.1k-13.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.1.1k-13 https://nvd.nist.gov/vuln/detail/CVE-2021-4160 12140 openssl edk2 12356 edk2-ovmf-20240223gitedc6681206c1-2.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-tools-20240223gitedc6681206c1-2.azl3.x86_64.rpm 0001-01-01T00:00:00 edk2-tools-doc-20240223gitedc6681206c1-2.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-ovmf-ia32-20240223gitedc6681206c1-2.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-ovmf-xen-20240223gitedc6681206c1-2.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-experimental-20240223gitedc6681206c1-2.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-ext4-20240223gitedc6681206c1-2.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-tools-python-20240223gitedc6681206c1-2.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-debuginfo-20240223gitedc6681206c1-2.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 20240223gitedc6681206c1-2 https://nvd.nist.gov/vuln/detail/CVE-2021-4160 12356 edk2 edk2 12357 CBL-Mariner 20240223gitedc6681206c1-2 https://nvd.nist.gov/vuln/detail/CVE-2021-4160 12357 edk2 1.0 2022-02-07T16:00:00 <p>Information published.</p> 1.1 2024-08-28T17:00:00 <p>Information published.</p> 1.2 2024-08-29T17:00:00 <p>Information published.</p> 1.3 2024-08-30T17:00:00 <p>Information published.</p> 1.4 2024-08-31T17:00:00 <p>Information published.</p> 1.5 2024-09-01T17:00:00 <p>Information published.</p> 1.6 2024-09-02T17:00:00 <p>Information published.</p> 1.7 2024-09-04T17:00:00 <p>Information published.</p> 1.8 2024-09-05T17:00:00 <p>Information published.</p> 1.9 2024-09-06T17:00:00 <p>Information published.</p> 2.0 2024-09-07T17:00:00 <p>Information published.</p> 2.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2021-3712 https://nvd.nist.gov/vuln/detail/CVE-2021-3712 https://nvd.nist.gov/vuln/detail/CVE-2021-3712 https://nvd.nist.gov/vuln/detail/CVE-2021-3712 https://nvd.nist.gov/vuln/detail/CVE-2021-3712 https://nvd.nist.gov/vuln/detail/CVE-2021-3712 Mariner openssl-security@openssl.org Yes CVE-2021-3712 12137 12138 12139 12140 12356 12357 12137 12138 12139 12140 12356 12357 12137 12138 12139 12140 12356 12357 7.4 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H 12137 7.4 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H 12138 7.4 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H 12139 7.4 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H 12140 7.4 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H 12356 7.4 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H 12357 openssl 12137 openssl-1.1.1k-8.cm1.x86_64.rpm 0001-01-01T00:00:00 openssl-libs-1.1.1k-8.cm1.x86_64.rpm 0001-01-01T00:00:00 openssl-devel-1.1.1k-8.cm1.x86_64.rpm 0001-01-01T00:00:00 openssl-static-1.1.1k-8.cm1.x86_64.rpm 0001-01-01T00:00:00 openssl-perl-1.1.1k-8.cm1.x86_64.rpm 0001-01-01T00:00:00 openssl-debuginfo-1.1.1k-8.cm1.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.1.1k-8 https://nvd.nist.gov/vuln/detail/CVE-2021-3712 12137 openssl openssl 12138 openssl-1.1.1k-8.cm1.aarch64.rpm 0001-01-01T00:00:00 openssl-libs-1.1.1k-8.cm1.aarch64.rpm 0001-01-01T00:00:00 openssl-devel-1.1.1k-8.cm1.aarch64.rpm 0001-01-01T00:00:00 openssl-static-1.1.1k-8.cm1.aarch64.rpm 0001-01-01T00:00:00 openssl-perl-1.1.1k-8.cm1.aarch64.rpm 0001-01-01T00:00:00 openssl-debuginfo-1.1.1k-8.cm1.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.1.1k-8 https://nvd.nist.gov/vuln/detail/CVE-2021-3712 12138 openssl openssl 12139 openssl-1.1.1k-13.cm2.x86_64.rpm 0001-01-01T00:00:00 openssl-libs-1.1.1k-13.cm2.x86_64.rpm 0001-01-01T00:00:00 openssl-devel-1.1.1k-13.cm2.x86_64.rpm 0001-01-01T00:00:00 openssl-static-1.1.1k-13.cm2.x86_64.rpm 0001-01-01T00:00:00 openssl-perl-1.1.1k-13.cm2.x86_64.rpm 0001-01-01T00:00:00 openssl-debuginfo-1.1.1k-13.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.1.1k-11 https://nvd.nist.gov/vuln/detail/CVE-2021-3712 12139 openssl openssl 12140 openssl-1.1.1k-13.cm2.aarch64.rpm 0001-01-01T00:00:00 openssl-libs-1.1.1k-13.cm2.aarch64.rpm 0001-01-01T00:00:00 openssl-devel-1.1.1k-13.cm2.aarch64.rpm 0001-01-01T00:00:00 openssl-static-1.1.1k-13.cm2.aarch64.rpm 0001-01-01T00:00:00 openssl-perl-1.1.1k-13.cm2.aarch64.rpm 0001-01-01T00:00:00 openssl-debuginfo-1.1.1k-13.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.1.1k-11 https://nvd.nist.gov/vuln/detail/CVE-2021-3712 12140 openssl edk2 12356 edk2-ovmf-20240223gitedc6681206c1-2.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-tools-20240223gitedc6681206c1-2.azl3.x86_64.rpm 0001-01-01T00:00:00 edk2-tools-doc-20240223gitedc6681206c1-2.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-ovmf-ia32-20240223gitedc6681206c1-2.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-ovmf-xen-20240223gitedc6681206c1-2.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-experimental-20240223gitedc6681206c1-2.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-ext4-20240223gitedc6681206c1-2.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-tools-python-20240223gitedc6681206c1-2.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-debuginfo-20240223gitedc6681206c1-2.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 20240223gitedc6681206c1-2 https://nvd.nist.gov/vuln/detail/CVE-2021-3712 12356 edk2 edk2 12357 CBL-Mariner 20240223gitedc6681206c1-2 https://nvd.nist.gov/vuln/detail/CVE-2021-3712 12357 edk2 1.0 2021-10-15T17:00:00 <p>Information published.</p> 1.1 2021-12-15T16:00:00 <p>Added openssl to CBL-Mariner 2.0</p> 1.2 2024-08-28T17:00:00 <p>Information published.</p> 1.3 2024-08-29T17:00:00 <p>Information published.</p> 1.4 2024-08-30T17:00:00 <p>Information published.</p> 1.5 2024-08-31T17:00:00 <p>Information published.</p> 1.6 2024-09-01T17:00:00 <p>Information published.</p> 1.7 2024-09-02T17:00:00 <p>Information published.</p> 1.8 2024-09-04T17:00:00 <p>Information published.</p> 1.9 2024-09-05T17:00:00 <p>Information published.</p> 2.0 2024-09-06T17:00:00 <p>Information published.</p> 2.1 2024-09-07T17:00:00 <p>Information published.</p> 2.2 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-1298 https://nvd.nist.gov/vuln/detail/CVE-2024-1298 https://nvd.nist.gov/vuln/detail/CVE-2024-1298 https://nvd.nist.gov/vuln/detail/CVE-2024-1298 https://nvd.nist.gov/vuln/detail/CVE-2024-1298 https://nvd.nist.gov/vuln/detail/CVE-2024-1298 Mariner infosec@edk2.groups.io Yes CVE-2024-1298 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 6.0 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H 12139 6.0 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H 12140 6.0 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H 12356 6.0 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H 12357 edk2 12139 edk2-ovmf-20230301gitf80f052277c8-39.cm2.noarch.rpm 0001-01-01T00:00:00 edk2-tools-20230301gitf80f052277c8-39.cm2.x86_64.rpm 0001-01-01T00:00:00 edk2-tools-doc-20230301gitf80f052277c8-39.cm2.noarch.rpm 0001-01-01T00:00:00 edk2-ovmf-ia32-20230301gitf80f052277c8-39.cm2.noarch.rpm 0001-01-01T00:00:00 edk2-ovmf-xen-20230301gitf80f052277c8-39.cm2.noarch.rpm 0001-01-01T00:00:00 edk2-ext4-20230301gitf80f052277c8-39.cm2.noarch.rpm 0001-01-01T00:00:00 edk2-tools-python-20230301gitf80f052277c8-39.cm2.noarch.rpm 0001-01-01T00:00:00 edk2-debuginfo-20230301gitf80f052277c8-39.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 20230301gitf80f052277c8-39 https://nvd.nist.gov/vuln/detail/CVE-2024-1298 12139 edk2 hvloader 12139 hvloader-1.0.1-3.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.0.1-3 https://nvd.nist.gov/vuln/detail/CVE-2024-1298 12139 hvloader edk2 12140 CBL-Mariner 20230301gitf80f052277c8-39 https://nvd.nist.gov/vuln/detail/CVE-2024-1298 12140 edk2 hvloader 12140 CBL-Mariner 1.0.1-3 https://nvd.nist.gov/vuln/detail/CVE-2024-1298 12140 hvloader edk2 12356 edk2-ovmf-20240524git3e722403cd16-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-tools-20240524git3e722403cd16-1.azl3.x86_64.rpm 0001-01-01T00:00:00 edk2-tools-doc-20240524git3e722403cd16-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-ovmf-ia32-20240524git3e722403cd16-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-ovmf-xen-20240524git3e722403cd16-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-experimental-20240524git3e722403cd16-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-ext4-20240524git3e722403cd16-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-tools-python-20240524git3e722403cd16-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-debuginfo-20240524git3e722403cd16-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 20240524git3e722403cd16-1 https://nvd.nist.gov/vuln/detail/CVE-2024-1298 12356 edk2 edk2 12357 CBL-Mariner 20240524git3e722403cd16-1 https://nvd.nist.gov/vuln/detail/CVE-2024-1298 12357 edk2 1.0 2024-06-04T17:00:00 <p>Information published.</p> 1.1 2024-06-30T00:00:00 <p>Information published.</p> 1.2 2024-07-09T17:00:00 <p>Information published.</p> 1.3 2024-08-14T17:00:00 <p>Information published.</p> 1.4 2024-08-15T17:00:00 <p>Information published.</p> 1.5 2024-08-16T17:00:00 <p>Information published.</p> 1.6 2024-08-17T17:00:00 <p>Information published.</p> 1.7 2024-08-18T17:00:00 <p>Information published.</p> 1.8 2024-08-19T17:00:00 <p>Information published.</p> 1.9 2024-08-20T17:00:00 <p>Information published.</p> 2.0 2024-08-21T17:00:00 <p>Information published.</p> 2.1 2024-08-22T17:00:00 <p>Information published.</p> 2.2 2024-08-23T17:00:00 <p>Information published.</p> 2.3 2024-08-24T17:00:00 <p>Information published.</p> 2.4 2024-08-25T17:00:00 <p>Information published.</p> 2.5 2024-08-26T17:00:00 <p>Information published.</p> 2.6 2024-08-27T17:00:00 <p>Information published.</p> 2.7 2024-08-28T17:00:00 <p>Information published.</p> 2.8 2024-08-29T17:00:00 <p>Information published.</p> 2.9 2024-08-30T17:00:00 <p>Information published.</p> 3.0 2024-08-31T17:00:00 <p>Information published.</p> 3.1 2024-09-01T17:00:00 <p>Information published.</p> 3.2 2024-09-02T17:00:00 <p>Information published.</p> 3.3 2024-09-04T17:00:00 <p>Information published.</p> 3.4 2024-09-05T17:00:00 <p>Information published.</p> 3.5 2024-09-06T17:00:00 <p>Information published.</p> 3.6 2024-09-07T17:00:00 <p>Information published.</p> 3.7 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2022-2097 https://nvd.nist.gov/vuln/detail/CVE-2022-2097 https://nvd.nist.gov/vuln/detail/CVE-2022-2097 https://nvd.nist.gov/vuln/detail/CVE-2022-2097 https://nvd.nist.gov/vuln/detail/CVE-2022-2097 https://nvd.nist.gov/vuln/detail/CVE-2022-2097 https://nvd.nist.gov/vuln/detail/CVE-2022-2097 https://nvd.nist.gov/vuln/detail/CVE-2022-2097 Mariner openssl-security@openssl.org Yes CVE-2022-2097 12137 12138 12139 12140 12356 12357 12137 12138 12139 12140 12356 12357 12137 12138 12139 12140 12356 12357 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N 12137 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N 12138 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N 12139 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N 12140 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N 12356 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N 12357 openssl 12137 openssl-1.1.1k-12.cm1.x86_64.rpm 0001-01-01T00:00:00 openssl-libs-1.1.1k-12.cm1.x86_64.rpm 0001-01-01T00:00:00 openssl-devel-1.1.1k-12.cm1.x86_64.rpm 0001-01-01T00:00:00 openssl-static-1.1.1k-12.cm1.x86_64.rpm 0001-01-01T00:00:00 openssl-perl-1.1.1k-12.cm1.x86_64.rpm 0001-01-01T00:00:00 openssl-debuginfo-1.1.1k-12.cm1.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.1.1k-12 https://nvd.nist.gov/vuln/detail/CVE-2022-2097 12137 openssl openssl 12138 openssl-1.1.1k-12.cm1.aarch64.rpm 0001-01-01T00:00:00 openssl-libs-1.1.1k-12.cm1.aarch64.rpm 0001-01-01T00:00:00 openssl-devel-1.1.1k-12.cm1.aarch64.rpm 0001-01-01T00:00:00 openssl-static-1.1.1k-12.cm1.aarch64.rpm 0001-01-01T00:00:00 openssl-perl-1.1.1k-12.cm1.aarch64.rpm 0001-01-01T00:00:00 openssl-debuginfo-1.1.1k-12.cm1.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.1.1k-12 https://nvd.nist.gov/vuln/detail/CVE-2022-2097 12138 openssl openssl 12139 openssl-1.1.1k-20.cm2.x86_64.rpm 0001-01-01T00:00:00 openssl-libs-1.1.1k-20.cm2.x86_64.rpm 0001-01-01T00:00:00 openssl-devel-1.1.1k-20.cm2.x86_64.rpm 0001-01-01T00:00:00 openssl-static-1.1.1k-20.cm2.x86_64.rpm 0001-01-01T00:00:00 openssl-perl-1.1.1k-20.cm2.x86_64.rpm 0001-01-01T00:00:00 openssl-debuginfo-1.1.1k-20.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.1.1k-20 https://nvd.nist.gov/vuln/detail/CVE-2022-2097 12139 openssl openssl 12140 openssl-1.1.1k-20.cm2.aarch64.rpm 0001-01-01T00:00:00 openssl-libs-1.1.1k-20.cm2.aarch64.rpm 0001-01-01T00:00:00 openssl-devel-1.1.1k-20.cm2.aarch64.rpm 0001-01-01T00:00:00 openssl-static-1.1.1k-20.cm2.aarch64.rpm 0001-01-01T00:00:00 openssl-perl-1.1.1k-20.cm2.aarch64.rpm 0001-01-01T00:00:00 openssl-debuginfo-1.1.1k-20.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.1.1k-20 https://nvd.nist.gov/vuln/detail/CVE-2022-2097 12140 openssl edk2 12356 edk2-ovmf-20240223gitedc6681206c1-2.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-tools-20240223gitedc6681206c1-2.azl3.x86_64.rpm 0001-01-01T00:00:00 edk2-tools-doc-20240223gitedc6681206c1-2.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-ovmf-ia32-20240223gitedc6681206c1-2.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-ovmf-xen-20240223gitedc6681206c1-2.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-experimental-20240223gitedc6681206c1-2.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-ext4-20240223gitedc6681206c1-2.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-tools-python-20240223gitedc6681206c1-2.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-debuginfo-20240223gitedc6681206c1-2.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 20240223gitedc6681206c1-2 https://nvd.nist.gov/vuln/detail/CVE-2022-2097 12356 edk2 hvloader 12356 hvloader-1.0.1-2.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.0.1-2 https://nvd.nist.gov/vuln/detail/CVE-2022-2097 12356 hvloader edk2 12357 CBL-Mariner 20240223gitedc6681206c1-2 https://nvd.nist.gov/vuln/detail/CVE-2022-2097 12357 edk2 hvloader 12357 CBL-Mariner 1.0.1-2 https://nvd.nist.gov/vuln/detail/CVE-2022-2097 12357 hvloader 1.0 2022-07-18T17:00:00 <p>Information published.</p> 1.1 2024-06-30T00:00:00 <p>Information published.</p> 1.2 2024-08-28T17:00:00 <p>Information published.</p> 1.3 2024-08-29T17:00:00 <p>Information published.</p> 1.4 2024-08-30T17:00:00 <p>Information published.</p> 1.5 2024-08-31T17:00:00 <p>Information published.</p> 1.6 2024-09-01T17:00:00 <p>Information published.</p> 1.7 2024-09-02T17:00:00 <p>Information published.</p> 1.8 2024-09-04T17:00:00 <p>Information published.</p> 1.9 2024-09-05T17:00:00 <p>Information published.</p> 2.0 2024-09-06T17:00:00 <p>Information published.</p> 2.1 2024-09-07T17:00:00 <p>Information published.</p> 2.2 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2022-1292 https://nvd.nist.gov/vuln/detail/CVE-2022-1292 https://nvd.nist.gov/vuln/detail/CVE-2022-1292 https://nvd.nist.gov/vuln/detail/CVE-2022-1292 https://nvd.nist.gov/vuln/detail/CVE-2022-1292 https://nvd.nist.gov/vuln/detail/CVE-2022-1292 https://nvd.nist.gov/vuln/detail/CVE-2022-1292 https://nvd.nist.gov/vuln/detail/CVE-2022-1292 Mariner openssl-security@openssl.org Yes CVE-2022-1292 12137 12138 12139 12140 12356 12357 12137 12138 12139 12140 12356 12357 12137 12138 12139 12140 12356 12357 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 12137 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 12138 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 12139 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 12140 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 12356 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 12357 openssl 12137 openssl-1.1.1k-10.cm1.x86_64.rpm 0001-01-01T00:00:00 openssl-libs-1.1.1k-10.cm1.x86_64.rpm 0001-01-01T00:00:00 openssl-devel-1.1.1k-10.cm1.x86_64.rpm 0001-01-01T00:00:00 openssl-static-1.1.1k-10.cm1.x86_64.rpm 0001-01-01T00:00:00 openssl-perl-1.1.1k-10.cm1.x86_64.rpm 0001-01-01T00:00:00 openssl-debuginfo-1.1.1k-10.cm1.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.1.1k-10 https://nvd.nist.gov/vuln/detail/CVE-2022-1292 12137 openssl openssl 12138 openssl-1.1.1k-10.cm1.aarch64.rpm 0001-01-01T00:00:00 openssl-libs-1.1.1k-10.cm1.aarch64.rpm 0001-01-01T00:00:00 openssl-devel-1.1.1k-10.cm1.aarch64.rpm 0001-01-01T00:00:00 openssl-static-1.1.1k-10.cm1.aarch64.rpm 0001-01-01T00:00:00 openssl-perl-1.1.1k-10.cm1.aarch64.rpm 0001-01-01T00:00:00 openssl-debuginfo-1.1.1k-10.cm1.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.1.1k-10 https://nvd.nist.gov/vuln/detail/CVE-2022-1292 12138 openssl openssl 12139 openssl-1.1.1k-15.cm2.x86_64.rpm 0001-01-01T00:00:00 openssl-libs-1.1.1k-15.cm2.x86_64.rpm 0001-01-01T00:00:00 openssl-devel-1.1.1k-15.cm2.x86_64.rpm 0001-01-01T00:00:00 openssl-static-1.1.1k-15.cm2.x86_64.rpm 0001-01-01T00:00:00 openssl-perl-1.1.1k-15.cm2.x86_64.rpm 0001-01-01T00:00:00 openssl-debuginfo-1.1.1k-15.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.1.1k-15 https://nvd.nist.gov/vuln/detail/CVE-2022-1292 12139 openssl openssl 12140 openssl-1.1.1k-15.cm2.aarch64.rpm 0001-01-01T00:00:00 openssl-libs-1.1.1k-15.cm2.aarch64.rpm 0001-01-01T00:00:00 openssl-devel-1.1.1k-15.cm2.aarch64.rpm 0001-01-01T00:00:00 openssl-static-1.1.1k-15.cm2.aarch64.rpm 0001-01-01T00:00:00 openssl-perl-1.1.1k-15.cm2.aarch64.rpm 0001-01-01T00:00:00 openssl-debuginfo-1.1.1k-15.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.1.1k-15 https://nvd.nist.gov/vuln/detail/CVE-2022-1292 12140 openssl edk2 12356 edk2-ovmf-20240223gitedc6681206c1-2.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-tools-20240223gitedc6681206c1-2.azl3.x86_64.rpm 0001-01-01T00:00:00 edk2-tools-doc-20240223gitedc6681206c1-2.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-ovmf-ia32-20240223gitedc6681206c1-2.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-ovmf-xen-20240223gitedc6681206c1-2.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-experimental-20240223gitedc6681206c1-2.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-ext4-20240223gitedc6681206c1-2.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-tools-python-20240223gitedc6681206c1-2.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-debuginfo-20240223gitedc6681206c1-2.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 20240223gitedc6681206c1-2 https://nvd.nist.gov/vuln/detail/CVE-2022-1292 12356 edk2 hvloader 12356 hvloader-1.0.1-2.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.0.1-2 https://nvd.nist.gov/vuln/detail/CVE-2022-1292 12356 hvloader edk2 12357 CBL-Mariner 20240223gitedc6681206c1-2 https://nvd.nist.gov/vuln/detail/CVE-2022-1292 12357 edk2 hvloader 12357 CBL-Mariner 1.0.1-2 https://nvd.nist.gov/vuln/detail/CVE-2022-1292 12357 hvloader 1.0 2022-05-11T17:00:00 <p>Information published.</p> 1.1 2024-06-30T00:00:00 <p>Information published.</p> 1.2 2024-08-28T17:00:00 <p>Information published.</p> 1.3 2024-08-29T17:00:00 <p>Information published.</p> 1.4 2024-08-30T17:00:00 <p>Information published.</p> 1.5 2024-08-31T17:00:00 <p>Information published.</p> 1.6 2024-09-01T17:00:00 <p>Information published.</p> 1.7 2024-09-02T17:00:00 <p>Information published.</p> 1.8 2024-09-04T17:00:00 <p>Information published.</p> 1.9 2024-09-05T17:00:00 <p>Information published.</p> 2.0 2024-09-06T17:00:00 <p>Information published.</p> 2.1 2024-09-07T17:00:00 <p>Information published.</p> 2.2 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-40898 https://nvd.nist.gov/vuln/detail/CVE-2024-40898 https://nvd.nist.gov/vuln/detail/CVE-2024-40898 https://nvd.nist.gov/vuln/detail/CVE-2024-40898 Mariner security@apache.org Yes CVE-2024-40898 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 12139 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 12140 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 12356 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 12357 httpd 12139 httpd-2.4.62-1.cm2.x86_64.rpm 0001-01-01T00:00:00 httpd-devel-2.4.62-1.cm2.x86_64.rpm 0001-01-01T00:00:00 httpd-docs-2.4.62-1.cm2.x86_64.rpm 0001-01-01T00:00:00 httpd-tools-2.4.62-1.cm2.x86_64.rpm 0001-01-01T00:00:00 mod_ldap-2.4.62-1.cm2.x86_64.rpm 0001-01-01T00:00:00 mod_proxy_html-2.4.62-1.cm2.x86_64.rpm 0001-01-01T00:00:00 mod_session-2.4.62-1.cm2.x86_64.rpm 0001-01-01T00:00:00 mod_ssl-2.4.62-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.4.62-1 https://nvd.nist.gov/vuln/detail/CVE-2024-40898 12139 httpd httpd 12140 httpd-2.4.62-1.cm2.aarch64.rpm 0001-01-01T00:00:00 httpd-devel-2.4.62-1.cm2.aarch64.rpm 0001-01-01T00:00:00 httpd-docs-2.4.62-1.cm2.aarch64.rpm 0001-01-01T00:00:00 httpd-tools-2.4.62-1.cm2.aarch64.rpm 0001-01-01T00:00:00 mod_ldap-2.4.62-1.cm2.aarch64.rpm 0001-01-01T00:00:00 mod_proxy_html-2.4.62-1.cm2.aarch64.rpm 0001-01-01T00:00:00 mod_session-2.4.62-1.cm2.aarch64.rpm 0001-01-01T00:00:00 mod_ssl-2.4.62-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.4.62-1 https://nvd.nist.gov/vuln/detail/CVE-2024-40898 12140 httpd httpd 12356 httpd-2.4.62-1.azl3.x86_64.rpm 0001-01-01T00:00:00 httpd-devel-2.4.62-1.azl3.x86_64.rpm 0001-01-01T00:00:00 httpd-docs-2.4.62-1.azl3.x86_64.rpm 0001-01-01T00:00:00 httpd-tools-2.4.62-1.azl3.x86_64.rpm 0001-01-01T00:00:00 mod_ldap-2.4.62-1.azl3.x86_64.rpm 0001-01-01T00:00:00 mod_proxy_html-2.4.62-1.azl3.x86_64.rpm 0001-01-01T00:00:00 mod_session-2.4.62-1.azl3.x86_64.rpm 0001-01-01T00:00:00 mod_ssl-2.4.62-1.azl3.x86_64.rpm 0001-01-01T00:00:00 httpd-debuginfo-2.4.62-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.4.62-1 https://nvd.nist.gov/vuln/detail/CVE-2024-40898 12356 httpd httpd 12357 httpd-2.4.62-1.azl3.aarch64.rpm 0001-01-01T00:00:00 httpd-devel-2.4.62-1.azl3.aarch64.rpm 0001-01-01T00:00:00 httpd-docs-2.4.62-1.azl3.aarch64.rpm 0001-01-01T00:00:00 httpd-tools-2.4.62-1.azl3.aarch64.rpm 0001-01-01T00:00:00 mod_ldap-2.4.62-1.azl3.aarch64.rpm 0001-01-01T00:00:00 mod_proxy_html-2.4.62-1.azl3.aarch64.rpm 0001-01-01T00:00:00 mod_session-2.4.62-1.azl3.aarch64.rpm 0001-01-01T00:00:00 mod_ssl-2.4.62-1.azl3.aarch64.rpm 0001-01-01T00:00:00 httpd-debuginfo-2.4.62-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.4.62-1 https://nvd.nist.gov/vuln/detail/CVE-2024-40898 12357 httpd 1.0 2024-07-25T17:00:00 <p>Information published.</p> 1.1 2024-08-07T17:00:00 <p>Information published.</p> 1.2 2024-08-14T17:00:00 <p>Information published.</p> 1.3 2024-08-15T17:00:00 <p>Information published.</p> 1.4 2024-08-16T17:00:00 <p>Information published.</p> 1.5 2024-08-17T17:00:00 <p>Information published.</p> 1.6 2024-08-18T17:00:00 <p>Information published.</p> 1.7 2024-08-19T17:00:00 <p>Information published.</p> 1.8 2024-08-20T17:00:00 <p>Information published.</p> 1.9 2024-08-21T17:00:00 <p>Information published.</p> 2.0 2024-08-22T17:00:00 <p>Information published.</p> 2.1 2024-08-23T17:00:00 <p>Information published.</p> 2.2 2024-08-24T17:00:00 <p>Information published.</p> 2.3 2024-08-25T17:00:00 <p>Information published.</p> 2.4 2024-08-26T17:00:00 <p>Information published.</p> 2.5 2024-08-27T17:00:00 <p>Information published.</p> 2.6 2024-08-28T17:00:00 <p>Information published.</p> 2.7 2024-08-29T17:00:00 <p>Information published.</p> 2.8 2024-08-30T17:00:00 <p>Information published.</p> 2.9 2024-08-31T17:00:00 <p>Information published.</p> 3.0 2024-09-01T17:00:00 <p>Information published.</p> 3.1 2024-09-02T17:00:00 <p>Information published.</p> 3.2 2024-09-04T17:00:00 <p>Information published.</p> 3.3 2024-09-05T17:00:00 <p>Information published.</p> 3.4 2024-09-06T17:00:00 <p>Information published.</p> 3.5 2024-09-07T17:00:00 <p>Information published.</p> 3.6 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-6655 https://nvd.nist.gov/vuln/detail/CVE-2024-6655 https://nvd.nist.gov/vuln/detail/CVE-2024-6655 https://nvd.nist.gov/vuln/detail/CVE-2024-6655 https://nvd.nist.gov/vuln/detail/CVE-2024-6655 https://nvd.nist.gov/vuln/detail/CVE-2024-6655 https://nvd.nist.gov/vuln/detail/CVE-2024-6655 https://nvd.nist.gov/vuln/detail/CVE-2024-6655 Mariner secalert@redhat.com Yes CVE-2024-6655 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 7.0 7.0 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H 12139 7.0 7.0 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H 12140 7.0 7.0 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H 12356 7.0 7.0 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H 12357 gtk2 12139 gtk2-2.24.32-12.cm2.x86_64.rpm 0001-01-01T00:00:00 gtk2-immodules-2.24.32-12.cm2.x86_64.rpm 0001-01-01T00:00:00 gtk2-immodule-xim-2.24.32-12.cm2.x86_64.rpm 0001-01-01T00:00:00 gtk2-devel-2.24.32-12.cm2.x86_64.rpm 0001-01-01T00:00:00 gtk2-devel-docs-2.24.32-12.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.24.32-12 https://nvd.nist.gov/vuln/detail/CVE-2024-6655 12139 gtk2 gtk3 12139 gtk3-3.24.28-10.cm2.x86_64.rpm 0001-01-01T00:00:00 gtk3-immodules-3.24.28-10.cm2.x86_64.rpm 0001-01-01T00:00:00 gtk3-immodule-xim-3.24.28-10.cm2.x86_64.rpm 0001-01-01T00:00:00 gtk3-devel-3.24.28-10.cm2.x86_64.rpm 0001-01-01T00:00:00 gtk3-devel-docs-3.24.28-10.cm2.x86_64.rpm 0001-01-01T00:00:00 gtk3-tests-3.24.28-10.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.24.28-10 https://nvd.nist.gov/vuln/detail/CVE-2024-6655 12139 gtk3 gtk2 12140 gtk2-2.24.32-12.cm2.aarch64.rpm 0001-01-01T00:00:00 gtk2-immodules-2.24.32-12.cm2.aarch64.rpm 0001-01-01T00:00:00 gtk2-immodule-xim-2.24.32-12.cm2.aarch64.rpm 0001-01-01T00:00:00 gtk2-devel-2.24.32-12.cm2.aarch64.rpm 0001-01-01T00:00:00 gtk2-devel-docs-2.24.32-12.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.24.32-12 https://nvd.nist.gov/vuln/detail/CVE-2024-6655 12140 gtk2 gtk3 12140 gtk3-3.24.28-10.cm2.aarch64.rpm 0001-01-01T00:00:00 gtk3-immodules-3.24.28-10.cm2.aarch64.rpm 0001-01-01T00:00:00 gtk3-immodule-xim-3.24.28-10.cm2.aarch64.rpm 0001-01-01T00:00:00 gtk3-devel-3.24.28-10.cm2.aarch64.rpm 0001-01-01T00:00:00 gtk3-devel-docs-3.24.28-10.cm2.aarch64.rpm 0001-01-01T00:00:00 gtk3-tests-3.24.28-10.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.24.28-10 https://nvd.nist.gov/vuln/detail/CVE-2024-6655 12140 gtk3 gtk2 12356 gtk2-2.24.32-12.azl3.x86_64.rpm 0001-01-01T00:00:00 gtk2-immodules-2.24.32-12.azl3.x86_64.rpm 0001-01-01T00:00:00 gtk2-immodule-xim-2.24.32-12.azl3.x86_64.rpm 0001-01-01T00:00:00 gtk2-devel-2.24.32-12.azl3.x86_64.rpm 0001-01-01T00:00:00 gtk2-devel-docs-2.24.32-12.azl3.x86_64.rpm 0001-01-01T00:00:00 gtk2-debuginfo-2.24.32-12.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.24.32-12 https://nvd.nist.gov/vuln/detail/CVE-2024-6655 12356 gtk2 gtk3 12356 gtk3-3.24.28-10.azl3.x86_64.rpm 0001-01-01T00:00:00 gtk3-immodules-3.24.28-10.azl3.x86_64.rpm 0001-01-01T00:00:00 gtk3-immodule-xim-3.24.28-10.azl3.x86_64.rpm 0001-01-01T00:00:00 gtk3-devel-3.24.28-10.azl3.x86_64.rpm 0001-01-01T00:00:00 gtk3-devel-docs-3.24.28-10.azl3.x86_64.rpm 0001-01-01T00:00:00 gtk3-tests-3.24.28-10.azl3.x86_64.rpm 0001-01-01T00:00:00 gtk3-debuginfo-3.24.28-10.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.24.28-10 https://nvd.nist.gov/vuln/detail/CVE-2024-6655 12356 gtk3 gtk2 12357 gtk2-2.24.32-12.azl3.aarch64.rpm 0001-01-01T00:00:00 gtk2-immodules-2.24.32-12.azl3.aarch64.rpm 0001-01-01T00:00:00 gtk2-immodule-xim-2.24.32-12.azl3.aarch64.rpm 0001-01-01T00:00:00 gtk2-devel-2.24.32-12.azl3.aarch64.rpm 0001-01-01T00:00:00 gtk2-devel-docs-2.24.32-12.azl3.aarch64.rpm 0001-01-01T00:00:00 gtk2-debuginfo-2.24.32-12.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.24.32-12 https://nvd.nist.gov/vuln/detail/CVE-2024-6655 12357 gtk2 gtk3 12357 gtk3-3.24.28-10.azl3.aarch64.rpm 0001-01-01T00:00:00 gtk3-immodules-3.24.28-10.azl3.aarch64.rpm 0001-01-01T00:00:00 gtk3-immodule-xim-3.24.28-10.azl3.aarch64.rpm 0001-01-01T00:00:00 gtk3-devel-3.24.28-10.azl3.aarch64.rpm 0001-01-01T00:00:00 gtk3-devel-docs-3.24.28-10.azl3.aarch64.rpm 0001-01-01T00:00:00 gtk3-tests-3.24.28-10.azl3.aarch64.rpm 0001-01-01T00:00:00 gtk3-debuginfo-3.24.28-10.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.24.28-10 https://nvd.nist.gov/vuln/detail/CVE-2024-6655 12357 gtk3 1.0 2024-08-04T17:00:00 <p>Information published.</p> 1.1 2024-08-14T17:00:00 <p>Information published.</p> 1.2 2024-08-15T17:00:00 <p>Information published.</p> 1.3 2024-08-16T17:00:00 <p>Information published.</p> 1.4 2024-08-17T17:00:00 <p>Information published.</p> 1.5 2024-08-18T17:00:00 <p>Information published.</p> 1.6 2024-08-19T17:00:00 <p>Information published.</p> 1.7 2024-08-20T17:00:00 <p>Information published.</p> 1.8 2024-08-21T17:00:00 <p>Information published.</p> 1.9 2024-08-22T17:00:00 <p>Information published.</p> 2.0 2024-08-23T17:00:00 <p>Information published.</p> 2.1 2024-08-24T17:00:00 <p>Information published.</p> 2.2 2024-08-25T17:00:00 <p>Information published.</p> 2.3 2024-08-26T17:00:00 <p>Information published.</p> 2.4 2024-08-27T17:00:00 <p>Information published.</p> 2.5 2024-08-28T17:00:00 <p>Information published.</p> 2.6 2024-08-29T17:00:00 <p>Information published.</p> 2.7 2024-08-30T17:00:00 <p>Information published.</p> 2.8 2024-08-31T17:00:00 <p>Information published.</p> 2.9 2024-09-01T17:00:00 <p>Information published.</p> 3.0 2024-09-02T17:00:00 <p>Information published.</p> 3.1 2024-09-04T17:00:00 <p>Information published.</p> 3.2 2024-09-05T17:00:00 <p>Information published.</p> 3.3 2024-09-06T17:00:00 <p>Information published.</p> 3.4 2024-09-07T17:00:00 <p>Information published.</p> 3.5 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-26947 https://nvd.nist.gov/vuln/detail/CVE-2024-26947 https://nvd.nist.gov/vuln/detail/CVE-2024-26947 https://nvd.nist.gov/vuln/detail/CVE-2024-26947 Mariner cve@kernel.org Yes CVE-2024-26947 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 hyperv-daemons 12139 hyperv-daemons-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-5.15.158.2-1.cm2.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-5.15.158.2-1.cm2.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.158.2-1 https://nvd.nist.gov/vuln/detail/CVE-2024-26947 12139 hyperv-daemons hyperv-daemons 12140 hyperv-daemons-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-5.15.158.2-1.cm2.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-5.15.158.2-1.cm2.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.158.2-1 https://nvd.nist.gov/vuln/detail/CVE-2024-26947 12140 hyperv-daemons hyperv-daemons 12356 hyperv-daemons-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-26947 12356 hyperv-daemons hyperv-daemons 12357 hyperv-daemons-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-26947 12357 hyperv-daemons 1.0 2024-05-12T17:00:00 <p>Information published.</p> 1.1 2024-08-28T17:00:00 <p>Information published.</p> 1.2 2024-08-29T17:00:00 <p>Information published.</p> 1.3 2024-08-30T17:00:00 <p>Information published.</p> 1.4 2024-08-31T17:00:00 <p>Information published.</p> 1.5 2024-09-01T17:00:00 <p>Information published.</p> 1.6 2024-09-02T17:00:00 <p>Information published.</p> 1.7 2024-09-04T17:00:00 <p>Information published.</p> 1.8 2024-09-05T17:00:00 <p>Information published.</p> 1.9 2024-09-06T17:00:00 <p>Information published.</p> 2.0 2024-09-07T17:00:00 <p>Information published.</p> 2.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-26951 https://nvd.nist.gov/vuln/detail/CVE-2024-26951 https://nvd.nist.gov/vuln/detail/CVE-2024-26951 https://nvd.nist.gov/vuln/detail/CVE-2024-26951 Mariner cve@kernel.org Yes CVE-2024-26951 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 hyperv-daemons 12139 hyperv-daemons-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-5.15.158.2-1.cm2.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-5.15.158.2-1.cm2.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.158.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-26951 12139 hyperv-daemons hyperv-daemons 12140 hyperv-daemons-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-5.15.158.2-1.cm2.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-5.15.158.2-1.cm2.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.158.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-26951 12140 hyperv-daemons hyperv-daemons 12356 hyperv-daemons-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-26951 12356 hyperv-daemons hyperv-daemons 12357 hyperv-daemons-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-26951 12357 hyperv-daemons 1.0 2024-05-12T17:00:00 <p>Information published.</p> 1.1 2024-08-28T17:00:00 <p>Information published.</p> 1.2 2024-08-29T17:00:00 <p>Information published.</p> 1.3 2024-08-30T17:00:00 <p>Information published.</p> 1.4 2024-08-31T17:00:00 <p>Information published.</p> 1.5 2024-09-01T17:00:00 <p>Information published.</p> 1.6 2024-09-02T17:00:00 <p>Information published.</p> 1.7 2024-09-04T17:00:00 <p>Information published.</p> 1.8 2024-09-05T17:00:00 <p>Information published.</p> 1.9 2024-09-06T17:00:00 <p>Information published.</p> 2.0 2024-09-07T17:00:00 <p>Information published.</p> 2.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-26965 https://nvd.nist.gov/vuln/detail/CVE-2024-26965 https://nvd.nist.gov/vuln/detail/CVE-2024-26965 https://nvd.nist.gov/vuln/detail/CVE-2024-26965 Mariner cve@kernel.org Yes CVE-2024-26965 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 hyperv-daemons 12139 hyperv-daemons-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-5.15.158.2-1.cm2.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-5.15.158.2-1.cm2.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.158.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-26965 12139 hyperv-daemons hyperv-daemons 12140 hyperv-daemons-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-5.15.158.2-1.cm2.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-5.15.158.2-1.cm2.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.158.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-26965 12140 hyperv-daemons hyperv-daemons 12356 hyperv-daemons-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-26965 12356 hyperv-daemons hyperv-daemons 12357 hyperv-daemons-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-26965 12357 hyperv-daemons 1.0 2024-05-12T17:00:00 <p>Information published.</p> 1.1 2024-08-28T17:00:00 <p>Information published.</p> 1.2 2024-08-29T17:00:00 <p>Information published.</p> 1.3 2024-08-30T17:00:00 <p>Information published.</p> 1.4 2024-08-31T17:00:00 <p>Information published.</p> 1.5 2024-09-01T17:00:00 <p>Information published.</p> 1.6 2024-09-02T17:00:00 <p>Information published.</p> 1.7 2024-09-04T17:00:00 <p>Information published.</p> 1.8 2024-09-05T17:00:00 <p>Information published.</p> 1.9 2024-09-06T17:00:00 <p>Information published.</p> 2.0 2024-09-07T17:00:00 <p>Information published.</p> 2.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-26979 https://nvd.nist.gov/vuln/detail/CVE-2024-26979 https://nvd.nist.gov/vuln/detail/CVE-2024-26979 https://nvd.nist.gov/vuln/detail/CVE-2024-26979 Mariner cve@kernel.org Yes CVE-2024-26979 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 kernel 12139 kernel-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 python3-perf-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 bpftool-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.158.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-26979 12139 kernel kernel 12140 kernel-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 python3-perf-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-dtb-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 bpftool-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.158.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-26979 12140 kernel hyperv-daemons 12356 hyperv-daemons-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-26979 12356 hyperv-daemons hyperv-daemons 12357 hyperv-daemons-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-26979 12357 hyperv-daemons 1.0 2024-05-23T17:00:00 <p>Information published.</p> 1.1 2024-08-28T17:00:00 <p>Information published.</p> 1.2 2024-08-29T17:00:00 <p>Information published.</p> 1.3 2024-08-30T17:00:00 <p>Information published.</p> 1.4 2024-08-31T17:00:00 <p>Information published.</p> 1.5 2024-09-01T17:00:00 <p>Information published.</p> 1.6 2024-09-02T17:00:00 <p>Information published.</p> 1.7 2024-09-04T17:00:00 <p>Information published.</p> 1.8 2024-09-05T17:00:00 <p>Information published.</p> 1.9 2024-09-06T17:00:00 <p>Information published.</p> 2.0 2024-09-07T17:00:00 <p>Information published.</p> 2.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-26973 https://nvd.nist.gov/vuln/detail/CVE-2024-26973 https://nvd.nist.gov/vuln/detail/CVE-2024-26973 https://nvd.nist.gov/vuln/detail/CVE-2024-26973 Mariner cve@kernel.org Yes CVE-2024-26973 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 hyperv-daemons 12139 hyperv-daemons-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-5.15.158.2-1.cm2.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-5.15.158.2-1.cm2.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.158.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-26973 12139 hyperv-daemons hyperv-daemons 12140 hyperv-daemons-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-5.15.158.2-1.cm2.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-5.15.158.2-1.cm2.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.158.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-26973 12140 hyperv-daemons hyperv-daemons 12356 hyperv-daemons-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-26973 12356 hyperv-daemons hyperv-daemons 12357 hyperv-daemons-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-26973 12357 hyperv-daemons 1.0 2024-05-12T17:00:00 <p>Information published.</p> 1.1 2024-08-28T17:00:00 <p>Information published.</p> 1.2 2024-08-29T17:00:00 <p>Information published.</p> 1.3 2024-08-30T17:00:00 <p>Information published.</p> 1.4 2024-08-31T17:00:00 <p>Information published.</p> 1.5 2024-09-01T17:00:00 <p>Information published.</p> 1.6 2024-09-02T17:00:00 <p>Information published.</p> 1.7 2024-09-04T17:00:00 <p>Information published.</p> 1.8 2024-09-05T17:00:00 <p>Information published.</p> 1.9 2024-09-06T17:00:00 <p>Information published.</p> 2.0 2024-09-07T17:00:00 <p>Information published.</p> 2.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-26984 https://nvd.nist.gov/vuln/detail/CVE-2024-26984 https://nvd.nist.gov/vuln/detail/CVE-2024-26984 https://nvd.nist.gov/vuln/detail/CVE-2024-26984 Mariner cve@kernel.org Yes CVE-2024-26984 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12139 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12140 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12356 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12357 hyperv-daemons 12139 hyperv-daemons-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-5.15.158.2-1.cm2.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-5.15.158.2-1.cm2.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.158.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-26984 12139 hyperv-daemons hyperv-daemons 12140 hyperv-daemons-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-5.15.158.2-1.cm2.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-5.15.158.2-1.cm2.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.158.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-26984 12140 hyperv-daemons hyperv-daemons 12356 hyperv-daemons-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-26984 12356 hyperv-daemons hyperv-daemons 12357 hyperv-daemons-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-26984 12357 hyperv-daemons 1.0 2024-05-12T17:00:00 <p>Information published.</p> 1.1 2024-07-11T17:00:00 <p>Information published.</p> 1.2 2024-08-28T17:00:00 <p>Information published.</p> 1.3 2024-08-29T17:00:00 <p>Information published.</p> 1.4 2024-08-30T17:00:00 <p>Information published.</p> 1.5 2024-08-31T17:00:00 <p>Information published.</p> 1.6 2024-09-01T17:00:00 <p>Information published.</p> 1.7 2024-09-02T17:00:00 <p>Information published.</p> 1.8 2024-09-04T17:00:00 <p>Information published.</p> 1.9 2024-09-05T17:00:00 <p>Information published.</p> 2.0 2024-09-06T17:00:00 <p>Information published.</p> 2.1 2024-09-07T17:00:00 <p>Information published.</p> 2.2 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-27018 https://nvd.nist.gov/vuln/detail/CVE-2024-27018 https://nvd.nist.gov/vuln/detail/CVE-2024-27018 https://nvd.nist.gov/vuln/detail/CVE-2024-27018 https://nvd.nist.gov/vuln/detail/CVE-2024-27018 https://nvd.nist.gov/vuln/detail/CVE-2024-27018 https://nvd.nist.gov/vuln/detail/CVE-2024-27018 https://nvd.nist.gov/vuln/detail/CVE-2024-27018 Mariner cve@kernel.org Yes CVE-2024-27018 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12139 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12140 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12356 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12357 hyperv-daemons 12139 hyperv-daemons-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-5.15.158.2-1.cm2.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-5.15.158.2-1.cm2.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.158.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-27018 12139 hyperv-daemons kernel 12139 kernel-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 python3-perf-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 bpftool-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.158.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-27018 12139 kernel hyperv-daemons 12140 hyperv-daemons-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-5.15.158.2-1.cm2.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-5.15.158.2-1.cm2.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.158.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-27018 12140 hyperv-daemons kernel 12140 kernel-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 python3-perf-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-dtb-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 bpftool-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.158.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-27018 12140 kernel hyperv-daemons 12356 hyperv-daemons-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-27018 12356 hyperv-daemons kernel 12356 kernel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-27018 12356 kernel hyperv-daemons 12357 hyperv-daemons-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-27018 12357 hyperv-daemons kernel 12357 kernel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-27018 12357 kernel 1.0 2024-05-16T17:00:00 <p>Information published.</p> 1.1 2024-05-23T17:00:00 <p>Added kernel to CBL-Mariner 2.0</p> 1.2 2024-08-28T17:00:00 <p>Information published.</p> 1.3 2024-08-29T17:00:00 <p>Information published.</p> 1.4 2024-08-30T17:00:00 <p>Information published.</p> 1.5 2024-08-31T17:00:00 <p>Information published.</p> 1.6 2024-09-01T17:00:00 <p>Information published.</p> 1.7 2024-09-02T17:00:00 <p>Information published.</p> 1.8 2024-09-04T17:00:00 <p>Information published.</p> 1.9 2024-09-05T17:00:00 <p>Information published.</p> 2.0 2024-09-06T17:00:00 <p>Information published.</p> 2.1 2024-09-07T17:00:00 <p>Information published.</p> 2.2 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-35912 https://nvd.nist.gov/vuln/detail/CVE-2024-35912 https://nvd.nist.gov/vuln/detail/CVE-2024-35912 https://nvd.nist.gov/vuln/detail/CVE-2024-35912 Mariner cve@kernel.org Yes CVE-2024-35912 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 hyperv-daemons 12139 hyperv-daemons-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-5.15.158.2-1.cm2.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-5.15.158.2-1.cm2.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.158.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-35912 12139 hyperv-daemons hyperv-daemons 12140 hyperv-daemons-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-5.15.158.2-1.cm2.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-5.15.158.2-1.cm2.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.158.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-35912 12140 hyperv-daemons hyperv-daemons 12356 hyperv-daemons-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-35912 12356 hyperv-daemons hyperv-daemons 12357 hyperv-daemons-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-35912 12357 hyperv-daemons 1.0 2024-05-22T17:00:00 <p>Information published.</p> 1.1 2024-08-28T17:00:00 <p>Information published.</p> 1.2 2024-08-29T17:00:00 <p>Information published.</p> 1.3 2024-08-30T17:00:00 <p>Information published.</p> 1.4 2024-08-31T17:00:00 <p>Information published.</p> 1.5 2024-09-01T17:00:00 <p>Information published.</p> 1.6 2024-09-02T17:00:00 <p>Information published.</p> 1.7 2024-09-04T17:00:00 <p>Information published.</p> 1.8 2024-09-05T17:00:00 <p>Information published.</p> 1.9 2024-09-06T17:00:00 <p>Information published.</p> 2.0 2024-09-07T17:00:00 <p>Information published.</p> 2.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-27016 https://nvd.nist.gov/vuln/detail/CVE-2024-27016 https://nvd.nist.gov/vuln/detail/CVE-2024-27016 https://nvd.nist.gov/vuln/detail/CVE-2024-27016 https://nvd.nist.gov/vuln/detail/CVE-2024-27016 https://nvd.nist.gov/vuln/detail/CVE-2024-27016 Mariner cve@kernel.org Yes CVE-2024-27016 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12139 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12140 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12356 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12357 kernel 12139 kernel-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 python3-perf-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 bpftool-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.158.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-27016 12139 kernel kernel 12140 kernel-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 python3-perf-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-dtb-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 bpftool-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.158.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-27016 12140 kernel hyperv-daemons 12356 hyperv-daemons-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-27016 12356 hyperv-daemons kernel 12356 kernel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-27016 12356 kernel hyperv-daemons 12357 hyperv-daemons-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-27016 12357 hyperv-daemons kernel 12357 kernel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-27016 12357 kernel 1.0 2024-05-23T17:00:00 <p>Information published.</p> 1.1 2024-08-28T17:00:00 <p>Information published.</p> 1.2 2024-08-29T17:00:00 <p>Information published.</p> 1.3 2024-08-30T17:00:00 <p>Information published.</p> 1.4 2024-08-31T17:00:00 <p>Information published.</p> 1.5 2024-09-01T17:00:00 <p>Information published.</p> 1.6 2024-09-02T17:00:00 <p>Information published.</p> 1.7 2024-09-04T17:00:00 <p>Information published.</p> 1.8 2024-09-05T17:00:00 <p>Information published.</p> 1.9 2024-09-06T17:00:00 <p>Information published.</p> 2.0 2024-09-07T17:00:00 <p>Information published.</p> 2.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-26929 https://nvd.nist.gov/vuln/detail/CVE-2024-26929 https://nvd.nist.gov/vuln/detail/CVE-2024-26929 https://nvd.nist.gov/vuln/detail/CVE-2024-26929 Mariner cve@kernel.org Yes CVE-2024-26929 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12139 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12140 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12356 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12357 kernel 12139 kernel-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 python3-perf-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 bpftool-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.158.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-26929 12139 kernel kernel 12140 kernel-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 python3-perf-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-dtb-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 bpftool-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.158.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-26929 12140 kernel kernel 12356 kernel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-26929 12356 kernel kernel 12357 kernel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-26929 12357 kernel 1.0 2024-05-23T17:00:00 <p>Information published.</p> 1.1 2024-08-28T17:00:00 <p>Information published.</p> 1.2 2024-08-29T17:00:00 <p>Information published.</p> 1.3 2024-08-30T17:00:00 <p>Information published.</p> 1.4 2024-08-31T17:00:00 <p>Information published.</p> 1.5 2024-09-01T17:00:00 <p>Information published.</p> 1.6 2024-09-02T17:00:00 <p>Information published.</p> 1.7 2024-09-04T17:00:00 <p>Information published.</p> 1.8 2024-09-05T17:00:00 <p>Information published.</p> 1.9 2024-09-06T17:00:00 <p>Information published.</p> 2.0 2024-09-07T17:00:00 <p>Information published.</p> 2.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2022-1996 https://nvd.nist.gov/vuln/detail/CVE-2022-1996 https://nvd.nist.gov/vuln/detail/CVE-2022-1996 https://nvd.nist.gov/vuln/detail/CVE-2022-1996 Mariner security@huntr.dev Yes CVE-2022-1996 12356 12357 12356 12357 12356 12357 9.1 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N 12356 9.1 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N 12357 keda 12356 keda-2.14.0-1.azl3.x86_64.rpm 0001-01-01T00:00:00 keda-debuginfo-2.14.0-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.14.0-1 https://nvd.nist.gov/vuln/detail/CVE-2022-1996 12356 keda sriov-network-device-plugin 12356 sriov-network-device-plugin-3.7.0-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.7.0-1 https://nvd.nist.gov/vuln/detail/CVE-2022-1996 12356 sriov-network-device-plugin keda 12357 keda-2.14.0-1.azl3.aarch64.rpm 0001-01-01T00:00:00 keda-debuginfo-2.14.0-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.14.0-1 https://nvd.nist.gov/vuln/detail/CVE-2022-1996 12357 keda sriov-network-device-plugin 12357 sriov-network-device-plugin-3.7.0-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.7.0-1 https://nvd.nist.gov/vuln/detail/CVE-2022-1996 12357 sriov-network-device-plugin 1.0 2024-06-30T00:00:00 <p>Information published.</p> 1.1 2024-08-28T17:00:00 <p>Information published.</p> 1.2 2024-08-29T17:00:00 <p>Information published.</p> 1.3 2024-08-30T17:00:00 <p>Information published.</p> 1.4 2024-08-31T17:00:00 <p>Information published.</p> 1.5 2024-09-01T17:00:00 <p>Information published.</p> 1.6 2024-09-02T17:00:00 <p>Information published.</p> 1.7 2024-09-04T17:00:00 <p>Information published.</p> 1.8 2024-09-05T17:00:00 <p>Information published.</p> 1.9 2024-09-06T17:00:00 <p>Information published.</p> 2.0 2024-09-07T17:00:00 <p>Information published.</p> 2.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-26934 https://nvd.nist.gov/vuln/detail/CVE-2024-26934 https://nvd.nist.gov/vuln/detail/CVE-2024-26934 https://nvd.nist.gov/vuln/detail/CVE-2024-26934 Mariner cve@kernel.org Yes CVE-2024-26934 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12139 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12140 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12356 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12357 kernel 12139 kernel-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 python3-perf-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 bpftool-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.158.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-26934 12139 kernel kernel 12140 kernel-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 python3-perf-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-dtb-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 bpftool-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.158.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-26934 12140 kernel kernel 12356 kernel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-26934 12356 kernel kernel 12357 kernel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-26934 12357 kernel 1.0 2024-05-23T17:00:00 <p>Information published.</p> 1.1 2024-08-28T17:00:00 <p>Information published.</p> 1.2 2024-08-29T17:00:00 <p>Information published.</p> 1.3 2024-08-30T17:00:00 <p>Information published.</p> 1.4 2024-08-31T17:00:00 <p>Information published.</p> 1.5 2024-09-01T17:00:00 <p>Information published.</p> 1.6 2024-09-02T17:00:00 <p>Information published.</p> 1.7 2024-09-04T17:00:00 <p>Information published.</p> 1.8 2024-09-05T17:00:00 <p>Information published.</p> 1.9 2024-09-06T17:00:00 <p>Information published.</p> 2.0 2024-09-07T17:00:00 <p>Information published.</p> 2.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-27013 https://nvd.nist.gov/vuln/detail/CVE-2024-27013 https://nvd.nist.gov/vuln/detail/CVE-2024-27013 https://nvd.nist.gov/vuln/detail/CVE-2024-27013 Mariner cve@kernel.org Yes CVE-2024-27013 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12139 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12140 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12356 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12357 kernel 12139 kernel-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 python3-perf-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 bpftool-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.158.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-27013 12139 kernel kernel 12140 kernel-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 python3-perf-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-dtb-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 bpftool-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.158.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-27013 12140 kernel kernel 12356 kernel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-27013 12356 kernel kernel 12357 kernel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-27013 12357 kernel 1.0 2024-05-23T17:00:00 <p>Information published.</p> 1.1 2024-08-28T17:00:00 <p>Information published.</p> 1.2 2024-08-29T17:00:00 <p>Information published.</p> 1.3 2024-08-30T17:00:00 <p>Information published.</p> 1.4 2024-08-31T17:00:00 <p>Information published.</p> 1.5 2024-09-01T17:00:00 <p>Information published.</p> 1.6 2024-09-02T17:00:00 <p>Information published.</p> 1.7 2024-09-04T17:00:00 <p>Information published.</p> 1.8 2024-09-05T17:00:00 <p>Information published.</p> 1.9 2024-09-06T17:00:00 <p>Information published.</p> 2.0 2024-09-07T17:00:00 <p>Information published.</p> 2.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-35972 https://nvd.nist.gov/vuln/detail/CVE-2024-35972 https://nvd.nist.gov/vuln/detail/CVE-2024-35972 https://nvd.nist.gov/vuln/detail/CVE-2024-35972 Mariner cve@kernel.org Yes CVE-2024-35972 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12139 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12140 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12356 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12357 kernel 12139 kernel-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 python3-perf-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 bpftool-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.158.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-35972 12139 kernel kernel 12140 kernel-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 python3-perf-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-dtb-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 bpftool-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.158.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-35972 12140 kernel kernel 12356 kernel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-35972 12356 kernel kernel 12357 kernel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-35972 12357 kernel 1.0 2024-05-23T17:00:00 <p>Information published.</p> 1.1 2024-08-28T17:00:00 <p>Information published.</p> 1.2 2024-08-29T17:00:00 <p>Information published.</p> 1.3 2024-08-30T17:00:00 <p>Information published.</p> 1.4 2024-08-31T17:00:00 <p>Information published.</p> 1.5 2024-09-01T17:00:00 <p>Information published.</p> 1.6 2024-09-02T17:00:00 <p>Information published.</p> 1.7 2024-09-04T17:00:00 <p>Information published.</p> 1.8 2024-09-05T17:00:00 <p>Information published.</p> 1.9 2024-09-06T17:00:00 <p>Information published.</p> 2.0 2024-09-07T17:00:00 <p>Information published.</p> 2.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-27019 https://nvd.nist.gov/vuln/detail/CVE-2024-27019 https://nvd.nist.gov/vuln/detail/CVE-2024-27019 https://nvd.nist.gov/vuln/detail/CVE-2024-27019 Mariner cve@kernel.org Yes CVE-2024-27019 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N 12139 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N 12140 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N 12356 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N 12357 kernel 12139 kernel-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 python3-perf-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 bpftool-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.158.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-27019 12139 kernel kernel 12140 kernel-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 python3-perf-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-dtb-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 bpftool-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.158.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-27019 12140 kernel kernel 12356 kernel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-27019 12356 kernel kernel 12357 kernel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-27019 12357 kernel 1.0 2024-05-23T17:00:00 <p>Information published.</p> 1.1 2024-08-28T17:00:00 <p>Information published.</p> 1.2 2024-08-29T17:00:00 <p>Information published.</p> 1.3 2024-08-30T17:00:00 <p>Information published.</p> 1.4 2024-08-31T17:00:00 <p>Information published.</p> 1.5 2024-09-01T17:00:00 <p>Information published.</p> 1.6 2024-09-02T17:00:00 <p>Information published.</p> 1.7 2024-09-04T17:00:00 <p>Information published.</p> 1.8 2024-09-05T17:00:00 <p>Information published.</p> 1.9 2024-09-06T17:00:00 <p>Information published.</p> 2.0 2024-09-07T17:00:00 <p>Information published.</p> 2.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-27020 https://nvd.nist.gov/vuln/detail/CVE-2024-27020 https://nvd.nist.gov/vuln/detail/CVE-2024-27020 https://nvd.nist.gov/vuln/detail/CVE-2024-27020 Mariner cve@kernel.org Yes CVE-2024-27020 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 7.0 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H 12139 7.0 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H 12140 7.0 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H 12356 7.0 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H 12357 kernel 12139 kernel-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 python3-perf-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 bpftool-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.158.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-27020 12139 kernel kernel 12140 kernel-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 python3-perf-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-dtb-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 bpftool-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.158.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-27020 12140 kernel kernel 12356 kernel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-27020 12356 kernel kernel 12357 kernel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-27020 12357 kernel 1.0 2024-05-23T17:00:00 <p>Information published.</p> 1.1 2024-08-28T17:00:00 <p>Information published.</p> 1.2 2024-08-29T17:00:00 <p>Information published.</p> 1.3 2024-08-30T17:00:00 <p>Information published.</p> 1.4 2024-08-31T17:00:00 <p>Information published.</p> 1.5 2024-09-01T17:00:00 <p>Information published.</p> 1.6 2024-09-02T17:00:00 <p>Information published.</p> 1.7 2024-09-04T17:00:00 <p>Information published.</p> 1.8 2024-09-05T17:00:00 <p>Information published.</p> 1.9 2024-09-06T17:00:00 <p>Information published.</p> 2.0 2024-09-07T17:00:00 <p>Information published.</p> 2.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-35978 https://nvd.nist.gov/vuln/detail/CVE-2024-35978 https://nvd.nist.gov/vuln/detail/CVE-2024-35978 https://nvd.nist.gov/vuln/detail/CVE-2024-35978 Mariner cve@kernel.org Yes CVE-2024-35978 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12139 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12140 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12356 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12357 kernel 12139 kernel-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 python3-perf-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 bpftool-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.158.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-35978 12139 kernel kernel 12140 kernel-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 python3-perf-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-dtb-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 bpftool-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.158.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-35978 12140 kernel kernel 12356 kernel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-35978 12356 kernel kernel 12357 kernel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-35978 12357 kernel 1.0 2024-05-23T17:00:00 <p>Information published.</p> 1.1 2024-08-28T17:00:00 <p>Information published.</p> 1.2 2024-08-29T17:00:00 <p>Information published.</p> 1.3 2024-08-30T17:00:00 <p>Information published.</p> 1.4 2024-08-31T17:00:00 <p>Information published.</p> 1.5 2024-09-01T17:00:00 <p>Information published.</p> 1.6 2024-09-02T17:00:00 <p>Information published.</p> 1.7 2024-09-04T17:00:00 <p>Information published.</p> 1.8 2024-09-05T17:00:00 <p>Information published.</p> 1.9 2024-09-06T17:00:00 <p>Information published.</p> 2.0 2024-09-07T17:00:00 <p>Information published.</p> 2.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-35982 https://nvd.nist.gov/vuln/detail/CVE-2024-35982 https://nvd.nist.gov/vuln/detail/CVE-2024-35982 https://nvd.nist.gov/vuln/detail/CVE-2024-35982 Mariner cve@kernel.org Yes CVE-2024-35982 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12139 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12140 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12356 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12357 kernel 12139 kernel-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 python3-perf-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 bpftool-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.158.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-35982 12139 kernel kernel 12140 kernel-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 python3-perf-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-dtb-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 bpftool-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.158.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-35982 12140 kernel kernel 12356 kernel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-35982 12356 kernel kernel 12357 kernel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-35982 12357 kernel 1.0 2024-05-23T17:00:00 <p>Information published.</p> 1.1 2024-08-28T17:00:00 <p>Information published.</p> 1.2 2024-08-29T17:00:00 <p>Information published.</p> 1.3 2024-08-30T17:00:00 <p>Information published.</p> 1.4 2024-08-31T17:00:00 <p>Information published.</p> 1.5 2024-09-01T17:00:00 <p>Information published.</p> 1.6 2024-09-02T17:00:00 <p>Information published.</p> 1.7 2024-09-04T17:00:00 <p>Information published.</p> 1.8 2024-09-05T17:00:00 <p>Information published.</p> 1.9 2024-09-06T17:00:00 <p>Information published.</p> 2.0 2024-09-07T17:00:00 <p>Information published.</p> 2.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-36023 https://nvd.nist.gov/vuln/detail/CVE-2024-36023 https://nvd.nist.gov/vuln/detail/CVE-2024-36023 https://nvd.nist.gov/vuln/detail/CVE-2024-36023 Mariner cve@kernel.org Yes CVE-2024-36023 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12139 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12140 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12356 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12357 kernel 12139 kernel-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 python3-perf-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 bpftool-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.158.2-1 https://nvd.nist.gov/vuln/detail/CVE-2024-36023 12139 kernel kernel 12140 kernel-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 python3-perf-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-dtb-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 bpftool-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.158.2-1 https://nvd.nist.gov/vuln/detail/CVE-2024-36023 12140 kernel kernel 12356 kernel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-36023 12356 kernel kernel 12357 kernel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-36023 12357 kernel 1.0 2024-06-10T17:00:00 <p>Information published.</p> 1.1 2024-08-28T17:00:00 <p>Information published.</p> 1.2 2024-08-29T17:00:00 <p>Information published.</p> 1.3 2024-08-30T17:00:00 <p>Information published.</p> 1.4 2024-08-31T17:00:00 <p>Information published.</p> 1.5 2024-09-01T17:00:00 <p>Information published.</p> 1.6 2024-09-02T17:00:00 <p>Information published.</p> 1.7 2024-09-04T17:00:00 <p>Information published.</p> 1.8 2024-09-05T17:00:00 <p>Information published.</p> 1.9 2024-09-06T17:00:00 <p>Information published.</p> 2.0 2024-09-07T17:00:00 <p>Information published.</p> 2.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-38583 https://nvd.nist.gov/vuln/detail/CVE-2024-38583 https://nvd.nist.gov/vuln/detail/CVE-2024-38583 https://nvd.nist.gov/vuln/detail/CVE-2024-38583 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-38583 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12139 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12140 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12356 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12357 kernel 12139 kernel-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 python3-perf-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 bpftool-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.162.2-1 https://nvd.nist.gov/vuln/detail/CVE-2024-38583 12139 kernel kernel 12140 kernel-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 python3-perf-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-dtb-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 bpftool-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.162.2-1 https://nvd.nist.gov/vuln/detail/CVE-2024-38583 12140 kernel kernel 12356 kernel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-38583 12356 kernel kernel 12357 kernel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-38583 12357 kernel 1.0 2024-08-07T17:00:00 <p>Information published.</p> 1.1 2024-08-28T17:00:00 <p>Information published.</p> 1.2 2024-08-29T17:00:00 <p>Information published.</p> 1.3 2024-08-30T17:00:00 <p>Information published.</p> 1.4 2024-08-31T17:00:00 <p>Information published.</p> 1.5 2024-09-01T17:00:00 <p>Information published.</p> 1.6 2024-09-02T17:00:00 <p>Information published.</p> 1.7 2024-09-04T17:00:00 <p>Information published.</p> 1.8 2024-09-05T17:00:00 <p>Information published.</p> 1.9 2024-09-06T17:00:00 <p>Information published.</p> 2.0 2024-09-07T17:00:00 <p>Information published.</p> 2.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-39476 https://nvd.nist.gov/vuln/detail/CVE-2024-39476 https://nvd.nist.gov/vuln/detail/CVE-2024-39476 https://nvd.nist.gov/vuln/detail/CVE-2024-39476 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-39476 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12139 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12140 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12356 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12357 kernel 12139 kernel-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 python3-perf-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 bpftool-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.162.2-1 https://nvd.nist.gov/vuln/detail/CVE-2024-39476 12139 kernel kernel 12140 kernel-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 python3-perf-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-dtb-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 bpftool-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.162.2-1 https://nvd.nist.gov/vuln/detail/CVE-2024-39476 12140 kernel kernel 12356 kernel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-39476 12356 kernel kernel 12357 kernel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-39476 12357 kernel 1.0 2024-08-04T17:00:00 <p>Information published.</p> 1.1 2024-08-28T17:00:00 <p>Information published.</p> 1.2 2024-08-29T17:00:00 <p>Information published.</p> 1.3 2024-08-30T17:00:00 <p>Information published.</p> 1.4 2024-08-31T17:00:00 <p>Information published.</p> 1.5 2024-09-01T17:00:00 <p>Information published.</p> 1.6 2024-09-02T17:00:00 <p>Information published.</p> 1.7 2024-09-04T17:00:00 <p>Information published.</p> 1.8 2024-09-05T17:00:00 <p>Information published.</p> 1.9 2024-09-06T17:00:00 <p>Information published.</p> 2.0 2024-09-07T17:00:00 <p>Information published.</p> 2.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-39482 https://nvd.nist.gov/vuln/detail/CVE-2024-39482 https://nvd.nist.gov/vuln/detail/CVE-2024-39482 https://nvd.nist.gov/vuln/detail/CVE-2024-39482 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-39482 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12139 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12140 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12356 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12357 kernel 12139 kernel-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 python3-perf-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 bpftool-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.162.2-1 https://nvd.nist.gov/vuln/detail/CVE-2024-39482 12139 kernel kernel 12140 kernel-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 python3-perf-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-dtb-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 bpftool-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.162.2-1 https://nvd.nist.gov/vuln/detail/CVE-2024-39482 12140 kernel kernel 12356 kernel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-39482 12356 kernel kernel 12357 kernel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-39482 12357 kernel 1.0 2024-08-04T17:00:00 <p>Information published.</p> 1.1 2024-08-28T17:00:00 <p>Information published.</p> 1.2 2024-08-29T17:00:00 <p>Information published.</p> 1.3 2024-08-30T17:00:00 <p>Information published.</p> 1.4 2024-08-31T17:00:00 <p>Information published.</p> 1.5 2024-09-01T17:00:00 <p>Information published.</p> 1.6 2024-09-02T17:00:00 <p>Information published.</p> 1.7 2024-09-04T17:00:00 <p>Information published.</p> 1.8 2024-09-05T17:00:00 <p>Information published.</p> 1.9 2024-09-06T17:00:00 <p>Information published.</p> 2.0 2024-09-07T17:00:00 <p>Information published.</p> 2.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-39480 https://nvd.nist.gov/vuln/detail/CVE-2024-39480 https://nvd.nist.gov/vuln/detail/CVE-2024-39480 https://nvd.nist.gov/vuln/detail/CVE-2024-39480 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-39480 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12139 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12140 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12356 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12357 kernel 12139 kernel-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 python3-perf-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 bpftool-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.162.2-1 https://nvd.nist.gov/vuln/detail/CVE-2024-39480 12139 kernel kernel 12140 kernel-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 python3-perf-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-dtb-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 bpftool-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.162.2-1 https://nvd.nist.gov/vuln/detail/CVE-2024-39480 12140 kernel kernel 12356 kernel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-39480 12356 kernel kernel 12357 kernel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-39480 12357 kernel 1.0 2024-08-04T17:00:00 <p>Information published.</p> 1.1 2024-08-28T17:00:00 <p>Information published.</p> 1.2 2024-08-29T17:00:00 <p>Information published.</p> 1.3 2024-08-30T17:00:00 <p>Information published.</p> 1.4 2024-08-31T17:00:00 <p>Information published.</p> 1.5 2024-09-01T17:00:00 <p>Information published.</p> 1.6 2024-09-02T17:00:00 <p>Information published.</p> 1.7 2024-09-04T17:00:00 <p>Information published.</p> 1.8 2024-09-05T17:00:00 <p>Information published.</p> 1.9 2024-09-06T17:00:00 <p>Information published.</p> 2.0 2024-09-07T17:00:00 <p>Information published.</p> 2.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-39484 https://nvd.nist.gov/vuln/detail/CVE-2024-39484 https://nvd.nist.gov/vuln/detail/CVE-2024-39484 https://nvd.nist.gov/vuln/detail/CVE-2024-39484 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-39484 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12139 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12140 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12356 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12357 kernel 12139 kernel-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 python3-perf-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 bpftool-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.162.2-1 https://nvd.nist.gov/vuln/detail/CVE-2024-39484 12139 kernel kernel 12140 kernel-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 python3-perf-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-dtb-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 bpftool-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.162.2-1 https://nvd.nist.gov/vuln/detail/CVE-2024-39484 12140 kernel kernel 12356 kernel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-39484 12356 kernel kernel 12357 kernel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-39484 12357 kernel 1.0 2024-08-04T17:00:00 <p>Information published.</p> 1.1 2024-08-28T17:00:00 <p>Information published.</p> 1.2 2024-08-29T17:00:00 <p>Information published.</p> 1.3 2024-08-30T17:00:00 <p>Information published.</p> 1.4 2024-08-31T17:00:00 <p>Information published.</p> 1.5 2024-09-01T17:00:00 <p>Information published.</p> 1.6 2024-09-02T17:00:00 <p>Information published.</p> 1.7 2024-09-04T17:00:00 <p>Information published.</p> 1.8 2024-09-05T17:00:00 <p>Information published.</p> 1.9 2024-09-06T17:00:00 <p>Information published.</p> 2.0 2024-09-07T17:00:00 <p>Information published.</p> 2.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-39489 https://nvd.nist.gov/vuln/detail/CVE-2024-39489 https://nvd.nist.gov/vuln/detail/CVE-2024-39489 https://nvd.nist.gov/vuln/detail/CVE-2024-39489 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-39489 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12139 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12140 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12356 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12357 kernel 12139 kernel-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 python3-perf-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 bpftool-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.162.2-1 https://nvd.nist.gov/vuln/detail/CVE-2024-39489 12139 kernel kernel 12140 kernel-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 python3-perf-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-dtb-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 bpftool-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.162.2-1 https://nvd.nist.gov/vuln/detail/CVE-2024-39489 12140 kernel kernel 12356 kernel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-39489 12356 kernel kernel 12357 kernel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-39489 12357 kernel 1.0 2024-08-07T17:00:00 <p>Information published.</p> 1.1 2024-08-28T17:00:00 <p>Information published.</p> 1.2 2024-08-29T17:00:00 <p>Information published.</p> 1.3 2024-08-30T17:00:00 <p>Information published.</p> 1.4 2024-08-31T17:00:00 <p>Information published.</p> 1.5 2024-09-01T17:00:00 <p>Information published.</p> 1.6 2024-09-02T17:00:00 <p>Information published.</p> 1.7 2024-09-04T17:00:00 <p>Information published.</p> 1.8 2024-09-05T17:00:00 <p>Information published.</p> 1.9 2024-09-06T17:00:00 <p>Information published.</p> 2.0 2024-09-07T17:00:00 <p>Information published.</p> 2.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-40902 https://nvd.nist.gov/vuln/detail/CVE-2024-40902 https://nvd.nist.gov/vuln/detail/CVE-2024-40902 https://nvd.nist.gov/vuln/detail/CVE-2024-40902 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-40902 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12139 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12140 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12356 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12357 kernel 12139 kernel-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 python3-perf-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 bpftool-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.162.2-1 https://nvd.nist.gov/vuln/detail/CVE-2024-40902 12139 kernel kernel 12140 kernel-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 python3-perf-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-dtb-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 bpftool-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.162.2-1 https://nvd.nist.gov/vuln/detail/CVE-2024-40902 12140 kernel kernel 12356 kernel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-40902 12356 kernel kernel 12357 kernel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-40902 12357 kernel 1.0 2024-08-04T17:00:00 <p>Information published.</p> 1.1 2024-08-28T17:00:00 <p>Information published.</p> 1.2 2024-08-29T17:00:00 <p>Information published.</p> 1.3 2024-08-30T17:00:00 <p>Information published.</p> 1.4 2024-08-31T17:00:00 <p>Information published.</p> 1.5 2024-09-01T17:00:00 <p>Information published.</p> 1.6 2024-09-02T17:00:00 <p>Information published.</p> 1.7 2024-09-04T17:00:00 <p>Information published.</p> 1.8 2024-09-05T17:00:00 <p>Information published.</p> 1.9 2024-09-06T17:00:00 <p>Information published.</p> 2.0 2024-09-07T17:00:00 <p>Information published.</p> 2.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-39495 https://nvd.nist.gov/vuln/detail/CVE-2024-39495 https://nvd.nist.gov/vuln/detail/CVE-2024-39495 https://nvd.nist.gov/vuln/detail/CVE-2024-39495 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-39495 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12139 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12140 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12356 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12357 kernel 12139 kernel-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 python3-perf-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 bpftool-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.162.2-1 https://nvd.nist.gov/vuln/detail/CVE-2024-39495 12139 kernel kernel 12140 kernel-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 python3-perf-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-dtb-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 bpftool-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.162.2-1 https://nvd.nist.gov/vuln/detail/CVE-2024-39495 12140 kernel kernel 12356 kernel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-39495 12356 kernel kernel 12357 kernel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-39495 12357 kernel 1.0 2024-08-04T17:00:00 <p>Information published.</p> 1.1 2024-08-28T17:00:00 <p>Information published.</p> 1.2 2024-08-29T17:00:00 <p>Information published.</p> 1.3 2024-08-30T17:00:00 <p>Information published.</p> 1.4 2024-08-31T17:00:00 <p>Information published.</p> 1.5 2024-09-01T17:00:00 <p>Information published.</p> 1.6 2024-09-02T17:00:00 <p>Information published.</p> 1.7 2024-09-04T17:00:00 <p>Information published.</p> 1.8 2024-09-05T17:00:00 <p>Information published.</p> 1.9 2024-09-06T17:00:00 <p>Information published.</p> 2.0 2024-09-07T17:00:00 <p>Information published.</p> 2.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-26461 https://nvd.nist.gov/vuln/detail/CVE-2024-26461 https://nvd.nist.gov/vuln/detail/CVE-2024-26461 https://nvd.nist.gov/vuln/detail/CVE-2024-26461 Mariner cve@mitre.org Yes CVE-2024-26461 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12139 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12140 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12356 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12357 krb5 12139 krb5-1.21.3-1.cm2.x86_64.rpm 0001-01-01T00:00:00 krb5-devel-1.21.3-1.cm2.x86_64.rpm 0001-01-01T00:00:00 krb5-lang-1.21.3-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.21.3-1 https://nvd.nist.gov/vuln/detail/CVE-2024-26461 12139 krb5 krb5 12140 krb5-1.21.3-1.cm2.aarch64.rpm 0001-01-01T00:00:00 krb5-devel-1.21.3-1.cm2.aarch64.rpm 0001-01-01T00:00:00 krb5-lang-1.21.3-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.21.3-1 https://nvd.nist.gov/vuln/detail/CVE-2024-26461 12140 krb5 krb5 12356 krb5-1.21.3-1.azl3.x86_64.rpm 0001-01-01T00:00:00 krb5-devel-1.21.3-1.azl3.x86_64.rpm 0001-01-01T00:00:00 krb5-lang-1.21.3-1.azl3.x86_64.rpm 0001-01-01T00:00:00 krb5-debuginfo-1.21.3-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.21.3-1 https://nvd.nist.gov/vuln/detail/CVE-2024-26461 12356 krb5 krb5 12357 krb5-1.21.3-1.azl3.aarch64.rpm 0001-01-01T00:00:00 krb5-devel-1.21.3-1.azl3.aarch64.rpm 0001-01-01T00:00:00 krb5-lang-1.21.3-1.azl3.aarch64.rpm 0001-01-01T00:00:00 krb5-debuginfo-1.21.3-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.21.3-1 https://nvd.nist.gov/vuln/detail/CVE-2024-26461 12357 krb5 1.0 2024-08-04T17:00:00 <p>Information published.</p> 1.1 2024-08-14T17:00:00 <p>Information published.</p> 1.2 2024-08-15T17:00:00 <p>Information published.</p> 1.3 2024-08-16T17:00:00 <p>Information published.</p> 1.4 2024-08-17T17:00:00 <p>Information published.</p> 1.5 2024-08-18T17:00:00 <p>Information published.</p> 1.6 2024-08-19T17:00:00 <p>Information published.</p> 1.7 2024-08-20T17:00:00 <p>Information published.</p> 1.8 2024-08-21T17:00:00 <p>Information published.</p> 1.9 2024-08-22T17:00:00 <p>Information published.</p> 2.0 2024-08-23T17:00:00 <p>Information published.</p> 2.1 2024-08-24T17:00:00 <p>Information published.</p> 2.2 2024-08-25T17:00:00 <p>Information published.</p> 2.3 2024-08-26T17:00:00 <p>Information published.</p> 2.4 2024-08-27T17:00:00 <p>Information published.</p> 2.5 2024-08-28T17:00:00 <p>Information published.</p> 2.6 2024-08-29T17:00:00 <p>Information published.</p> 2.7 2024-08-30T17:00:00 <p>Information published.</p> 2.8 2024-08-31T17:00:00 <p>Information published.</p> 2.9 2024-09-01T17:00:00 <p>Information published.</p> 3.0 2024-09-02T17:00:00 <p>Information published.</p> 3.1 2024-09-04T17:00:00 <p>Information published.</p> 3.2 2024-09-05T17:00:00 <p>Information published.</p> 3.3 2024-09-06T17:00:00 <p>Information published.</p> 3.4 2024-09-07T17:00:00 <p>Information published.</p> 3.5 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-37298 https://nvd.nist.gov/vuln/detail/CVE-2024-37298 https://nvd.nist.gov/vuln/detail/CVE-2024-37298 https://nvd.nist.gov/vuln/detail/CVE-2024-37298 https://nvd.nist.gov/vuln/detail/CVE-2024-37298 https://nvd.nist.gov/vuln/detail/CVE-2024-37298 Mariner security-advisories@github.com Yes CVE-2024-37298 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12139 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12140 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12356 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12357 libcontainers-common 12139 12140 libcontainers-common-20210626-4.cm2.noarch.rpm 0001-01-01T00:00:00 CBL-Mariner 20210626-4 https://nvd.nist.gov/vuln/detail/CVE-2024-37298 12139 12140 libcontainers-common telegraf 12139 telegraf-1.29.4-7.cm2.x86_64.rpm 0001-01-01T00:00:00 telegraf-debuginfo-1.29.4-7.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.29.4-7 https://nvd.nist.gov/vuln/detail/CVE-2024-37298 12139 telegraf telegraf 12140 telegraf-1.29.4-7.cm2.aarch64.rpm 0001-01-01T00:00:00 telegraf-debuginfo-1.29.4-7.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.29.4-7 https://nvd.nist.gov/vuln/detail/CVE-2024-37298 12140 telegraf libcontainers-common 12356 12357 libcontainers-common-20240213-2.azl3.noarch.rpm 0001-01-01T00:00:00 CBL-Mariner 20240213-2 https://nvd.nist.gov/vuln/detail/CVE-2024-37298 12356 12357 libcontainers-common telegraf 12356 telegraf-1.31.0-2.azl3.x86_64.rpm 0001-01-01T00:00:00 telegraf-debuginfo-1.31.0-2.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.31.0-2 https://nvd.nist.gov/vuln/detail/CVE-2024-37298 12356 telegraf telegraf 12357 telegraf-1.31.0-2.azl3.aarch64.rpm 0001-01-01T00:00:00 telegraf-debuginfo-1.31.0-2.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.31.0-2 https://nvd.nist.gov/vuln/detail/CVE-2024-37298 12357 telegraf 1.0 2024-07-18T17:00:00 <p>Information published.</p> 1.1 2024-08-04T17:00:00 <p>Information published.</p> 1.2 2024-08-28T17:00:00 <p>Information published.</p> 1.3 2024-08-29T17:00:00 <p>Information published.</p> 1.4 2024-08-30T17:00:00 <p>Information published.</p> 1.5 2024-08-31T17:00:00 <p>Information published.</p> 1.6 2024-09-01T17:00:00 <p>Information published.</p> 1.7 2024-09-02T17:00:00 <p>Information published.</p> 1.8 2024-09-04T17:00:00 <p>Information published.</p> 1.9 2024-09-05T17:00:00 <p>Information published.</p> 2.0 2024-09-06T17:00:00 <p>Information published.</p> 2.1 2024-09-07T17:00:00 <p>Information published.</p> 2.2 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-41110 https://nvd.nist.gov/vuln/detail/CVE-2024-41110 https://nvd.nist.gov/vuln/detail/CVE-2024-41110 https://nvd.nist.gov/vuln/detail/CVE-2024-41110 Mariner security-advisories@github.com Yes CVE-2024-41110 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 9.9 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H 12139 9.9 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H 12140 9.9 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H 12356 9.9 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H 12357 moby-engine 12139 moby-engine-24.0.9-7.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 24.0.9-7 https://nvd.nist.gov/vuln/detail/CVE-2024-41110 12139 moby-engine moby-engine 12140 moby-engine-24.0.9-7.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 24.0.9-7 https://nvd.nist.gov/vuln/detail/CVE-2024-41110 12140 moby-engine moby-engine 12356 moby-engine-25.0.3-5.azl3.x86_64.rpm 0001-01-01T00:00:00 moby-engine-debuginfo-25.0.3-5.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 25.0.3-5 https://nvd.nist.gov/vuln/detail/CVE-2024-41110 12356 moby-engine moby-engine 12357 moby-engine-25.0.3-5.azl3.aarch64.rpm 0001-01-01T00:00:00 moby-engine-debuginfo-25.0.3-5.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 25.0.3-5 https://nvd.nist.gov/vuln/detail/CVE-2024-41110 12357 moby-engine 1.0 2024-08-04T17:00:00 <p>Information published.</p> 1.1 2024-08-24T17:00:00 <p>Information published.</p> 1.2 2024-08-25T17:00:00 <p>Information published.</p> 1.3 2024-08-26T17:00:00 <p>Information published.</p> 1.4 2024-08-27T17:00:00 <p>Information published.</p> 1.5 2024-08-28T17:00:00 <p>Information published.</p> 1.6 2024-08-29T17:00:00 <p>Information published.</p> 1.7 2024-08-30T17:00:00 <p>Information published.</p> 1.8 2024-08-31T17:00:00 <p>Information published.</p> 1.9 2024-09-01T17:00:00 <p>Information published.</p> 2.0 2024-09-02T17:00:00 <p>Information published.</p> 2.1 2024-09-04T17:00:00 <p>Information published.</p> 2.2 2024-09-05T17:00:00 <p>Information published.</p> 2.3 2024-09-06T17:00:00 <p>Information published.</p> 2.4 2024-09-07T17:00:00 <p>Information published.</p> 2.5 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2021-44716 https://nvd.nist.gov/vuln/detail/CVE-2021-44716 https://nvd.nist.gov/vuln/detail/CVE-2021-44716 https://nvd.nist.gov/vuln/detail/CVE-2021-44716 https://nvd.nist.gov/vuln/detail/CVE-2021-44716 https://nvd.nist.gov/vuln/detail/CVE-2021-44716 https://nvd.nist.gov/vuln/detail/CVE-2021-44716 https://nvd.nist.gov/vuln/detail/CVE-2021-44716 https://nvd.nist.gov/vuln/detail/CVE-2021-44716 https://nvd.nist.gov/vuln/detail/CVE-2021-44716 https://nvd.nist.gov/vuln/detail/CVE-2021-44716 https://nvd.nist.gov/vuln/detail/CVE-2021-44716 https://nvd.nist.gov/vuln/detail/CVE-2021-44716 https://nvd.nist.gov/vuln/detail/CVE-2021-44716 https://nvd.nist.gov/vuln/detail/CVE-2021-44716 https://nvd.nist.gov/vuln/detail/CVE-2021-44716 https://nvd.nist.gov/vuln/detail/CVE-2021-44716 https://nvd.nist.gov/vuln/detail/CVE-2021-44716 Mariner cve@mitre.org Yes CVE-2021-44716 12137 12138 12139 12140 12356 12357 12137 12138 12139 12140 12356 12357 12137 12138 12139 12140 12356 12357 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12137 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12138 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12139 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12140 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12356 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12357 golang 12137 golang-1.16.12-1.cm1.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.16.12-1 https://nvd.nist.gov/vuln/detail/CVE-2021-44716 12137 golang golang 12138 golang-1.16.12-1.cm1.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.16.12-1 https://nvd.nist.gov/vuln/detail/CVE-2021-44716 12138 golang application-gateway-kubernetes-ingress 12139 application-gateway-kubernetes-ingress-1.4.0-19.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.4.0-19 https://nvd.nist.gov/vuln/detail/CVE-2021-44716 12139 application-gateway-kubernetes-ingress cf-cli 12139 cf-cli-8.4.0-16.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 8.4.0-16 https://nvd.nist.gov/vuln/detail/CVE-2021-44716 12139 cf-cli cri-o 12139 cri-o-1.21.7-2.cm2.x86_64.rpm 0001-01-01T00:00:00 cri-o-kubeadm-criconfig-1.21.7-2.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.21.7-2 https://nvd.nist.gov/vuln/detail/CVE-2021-44716 12139 cri-o csi-driver-lvm 12139 csi-driver-lvm-0.4.1-15.cm2.x86_64.rpm 0001-01-01T00:00:00 csi-driver-lvm-csi-lvmplugin-provisioner-0.4.1-15.cm2.x86_64.rpm 0001-01-01T00:00:00 csi-driver-lvm-lvmplugin-0.4.1-15.cm2.x86_64.rpm 0001-01-01T00:00:00 csi-driver-lvm-debuginfo-0.4.1-15.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 0.4.1-15 https://nvd.nist.gov/vuln/detail/CVE-2021-44716 12139 csi-driver-lvm application-gateway-kubernetes-ingress 12140 application-gateway-kubernetes-ingress-1.4.0-19.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.4.0-19 https://nvd.nist.gov/vuln/detail/CVE-2021-44716 12140 application-gateway-kubernetes-ingress cf-cli 12140 cf-cli-8.4.0-16.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 8.4.0-16 https://nvd.nist.gov/vuln/detail/CVE-2021-44716 12140 cf-cli cri-o 12140 cri-o-1.21.7-2.cm2.aarch64.rpm 0001-01-01T00:00:00 cri-o-kubeadm-criconfig-1.21.7-2.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.21.7-2 https://nvd.nist.gov/vuln/detail/CVE-2021-44716 12140 cri-o csi-driver-lvm 12140 csi-driver-lvm-0.4.1-15.cm2.aarch64.rpm 0001-01-01T00:00:00 csi-driver-lvm-csi-lvmplugin-provisioner-0.4.1-15.cm2.aarch64.rpm 0001-01-01T00:00:00 csi-driver-lvm-lvmplugin-0.4.1-15.cm2.aarch64.rpm 0001-01-01T00:00:00 csi-driver-lvm-debuginfo-0.4.1-15.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 0.4.1-15 https://nvd.nist.gov/vuln/detail/CVE-2021-44716 12140 csi-driver-lvm keda 12356 keda-2.14.0-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.14.0-1 https://nvd.nist.gov/vuln/detail/CVE-2021-44716 12356 keda moby-engine 12356 moby-engine-25.0.3-2.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 25.0.3-1 https://nvd.nist.gov/vuln/detail/CVE-2021-44716 12356 moby-engine multus 12356 multus-4.0.2-1.azl3.x86_64.rpm 0001-01-01T00:00:00 multus-k8s-yaml-4.0.2-1.azl3.x86_64.rpm 0001-01-01T00:00:00 multus-debuginfo-4.0.2-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 4.0.2-1 https://nvd.nist.gov/vuln/detail/CVE-2021-44716 12356 multus node-problem-detector 12356 node-problem-detector-0.8.15-1.azl3.x86_64.rpm 0001-01-01T00:00:00 node-problem-detector-config-0.8.15-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 0.8.15-1 https://nvd.nist.gov/vuln/detail/CVE-2021-44716 12356 node-problem-detector keda 12357 keda-2.14.0-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.14.0-1 https://nvd.nist.gov/vuln/detail/CVE-2021-44716 12357 keda moby-engine 12357 moby-engine-25.0.3-2.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 25.0.3-1 https://nvd.nist.gov/vuln/detail/CVE-2021-44716 12357 moby-engine multus 12357 multus-4.0.2-1.azl3.aarch64.rpm 0001-01-01T00:00:00 multus-k8s-yaml-4.0.2-1.azl3.aarch64.rpm 0001-01-01T00:00:00 multus-debuginfo-4.0.2-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 4.0.2-1 https://nvd.nist.gov/vuln/detail/CVE-2021-44716 12357 multus node-problem-detector 12357 node-problem-detector-0.8.15-1.azl3.aarch64.rpm 0001-01-01T00:00:00 node-problem-detector-config-0.8.15-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 0.8.15-1 https://nvd.nist.gov/vuln/detail/CVE-2021-44716 12357 node-problem-detector 1.0 2022-01-12T16:00:00 <p>Information published.</p> 1.1 2023-11-07T16:00:00 <p>Added kured to CBL-Mariner 2.0</p> 1.2 2024-01-23T16:00:00 <p>Added flannel to CBL-Mariner 2.0 Added kube-vip-cloud-provider to CBL-Mariner 2.0 Added libcontainers-common to CBL-Mariner 2.0 Added local-path-provisioner to CBL-Mariner 2.0</p> 1.3 2024-04-10T17:00:00 <p>Added cri-o to CBL-Mariner 2.0</p> 1.4 2024-06-30T00:00:00 <p>Information published.</p> 1.5 2024-08-28T17:00:00 <p>Information published.</p> 1.6 2024-08-29T17:00:00 <p>Information published.</p> 1.7 2024-08-30T17:00:00 <p>Information published.</p> 1.8 2024-08-31T17:00:00 <p>Information published.</p> 1.9 2024-09-01T17:00:00 <p>Information published.</p> 2.0 2024-09-02T17:00:00 <p>Information published.</p> 2.1 2024-09-04T17:00:00 <p>Information published.</p> 2.2 2024-09-05T17:00:00 <p>Information published.</p> 2.3 2024-09-06T17:00:00 <p>Information published.</p> 2.4 2024-09-07T17:00:00 <p>Information published.</p> 2.5 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2022-33099 https://nvd.nist.gov/vuln/detail/CVE-2022-33099 https://nvd.nist.gov/vuln/detail/CVE-2022-33099 https://nvd.nist.gov/vuln/detail/CVE-2022-33099 https://nvd.nist.gov/vuln/detail/CVE-2022-33099 https://nvd.nist.gov/vuln/detail/CVE-2022-33099 Mariner cve@mitre.org Yes CVE-2022-33099 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12139 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12140 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12356 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12357 lua 12139 lua-5.4.3-4.cm2.x86_64.rpm 0001-01-01T00:00:00 lua-devel-5.4.3-4.cm2.x86_64.rpm 0001-01-01T00:00:00 lua-libs-5.4.3-4.cm2.x86_64.rpm 0001-01-01T00:00:00 lua-static-5.4.3-4.cm2.x86_64.rpm 0001-01-01T00:00:00 lua-debuginfo-5.4.3-4.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.4.3-4 https://nvd.nist.gov/vuln/detail/CVE-2022-33099 12139 lua lua 12140 lua-5.4.3-4.cm2.aarch64.rpm 0001-01-01T00:00:00 lua-devel-5.4.3-4.cm2.aarch64.rpm 0001-01-01T00:00:00 lua-libs-5.4.3-4.cm2.aarch64.rpm 0001-01-01T00:00:00 lua-static-5.4.3-4.cm2.aarch64.rpm 0001-01-01T00:00:00 lua-debuginfo-5.4.3-4.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.4.3-4 https://nvd.nist.gov/vuln/detail/CVE-2022-33099 12140 lua nmap 12356 nmap-7.95-1.azl3.x86_64.rpm 0001-01-01T00:00:00 nmap-ncat-7.95-1.azl3.x86_64.rpm 0001-01-01T00:00:00 nmap-debuginfo-7.95-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 7.95-1 https://nvd.nist.gov/vuln/detail/CVE-2022-33099 12356 nmap ntopng 12356 ntopng-5.2.1-4.azl3.x86_64.rpm 0001-01-01T00:00:00 ntopng-debuginfo-5.2.1-4.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.2.1-4 https://nvd.nist.gov/vuln/detail/CVE-2022-33099 12356 ntopng nmap 12357 nmap-7.95-1.azl3.aarch64.rpm 0001-01-01T00:00:00 nmap-ncat-7.95-1.azl3.aarch64.rpm 0001-01-01T00:00:00 nmap-debuginfo-7.95-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 7.95-1 https://nvd.nist.gov/vuln/detail/CVE-2022-33099 12357 nmap ntopng 12357 ntopng-5.2.1-4.azl3.aarch64.rpm 0001-01-01T00:00:00 ntopng-debuginfo-5.2.1-4.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.2.1-4 https://nvd.nist.gov/vuln/detail/CVE-2022-33099 12357 ntopng 1.0 2022-07-11T17:00:00 <p>Information published.</p> 1.1 2024-08-28T17:00:00 <p>Information published.</p> 1.2 2024-08-29T17:00:00 <p>Information published.</p> 1.3 2024-08-30T17:00:00 <p>Information published.</p> 1.4 2024-08-31T17:00:00 <p>Information published.</p> 1.5 2024-09-01T17:00:00 <p>Information published.</p> 1.6 2024-09-02T17:00:00 <p>Information published.</p> 1.7 2024-09-04T17:00:00 <p>Information published.</p> 1.8 2024-09-05T17:00:00 <p>Information published.</p> 1.9 2024-09-06T17:00:00 <p>Information published.</p> 2.0 2024-09-07T17:00:00 <p>Information published.</p> 2.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2023-43804 https://nvd.nist.gov/vuln/detail/CVE-2023-43804 https://nvd.nist.gov/vuln/detail/CVE-2023-43804 https://nvd.nist.gov/vuln/detail/CVE-2023-43804 Mariner security-advisories@github.com Yes CVE-2023-43804 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 8.1 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N 12139 8.1 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N 12140 8.1 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N 12356 8.1 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N 12357 python-urllib3 12139 12140 python3-urllib3-1.26.18-1.cm2.noarch.rpm 0001-01-01T00:00:00 CBL-Mariner 1.26.18-1 https://nvd.nist.gov/vuln/detail/CVE-2023-43804 12139 12140 python-urllib3 python-urllib3 12356 12357 python3-urllib3-2.0.7-1.azl3.noarch.rpm 0001-01-01T00:00:00 CBL-Mariner 2.0.7-1 https://nvd.nist.gov/vuln/detail/CVE-2023-43804 12356 12357 python-urllib3 python3 12356 python3-3.12.3-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-libs-3.12.3-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-curses-3.12.3-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-devel-3.12.3-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-tools-3.12.3-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-test-3.12.3-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-debuginfo-3.12.3-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.12.3-1 https://nvd.nist.gov/vuln/detail/CVE-2023-43804 12356 python3 python3 12357 python3-3.12.3-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-libs-3.12.3-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-curses-3.12.3-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-devel-3.12.3-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-tools-3.12.3-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-test-3.12.3-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-debuginfo-3.12.3-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.12.3-1 https://nvd.nist.gov/vuln/detail/CVE-2023-43804 12357 python3 1.0 2023-10-08T17:00:00 <p>Information published.</p> 1.1 2024-08-24T17:00:00 <p>Information published.</p> 1.2 2024-08-25T17:00:00 <p>Information published.</p> 1.3 2024-08-26T17:00:00 <p>Information published.</p> 1.4 2024-08-27T17:00:00 <p>Information published.</p> 1.5 2024-08-28T17:00:00 <p>Information published.</p> 1.6 2024-08-29T17:00:00 <p>Information published.</p> 1.7 2024-08-30T17:00:00 <p>Information published.</p> 1.8 2024-08-31T17:00:00 <p>Information published.</p> 1.9 2024-09-01T17:00:00 <p>Information published.</p> 2.0 2024-09-02T17:00:00 <p>Information published.</p> 2.1 2024-09-04T17:00:00 <p>Information published.</p> 2.2 2024-09-05T17:00:00 <p>Information published.</p> 2.3 2024-09-06T17:00:00 <p>Information published.</p> 2.4 2024-09-07T17:00:00 <p>Information published.</p> 2.5 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2017-18214 https://nvd.nist.gov/vuln/detail/CVE-2017-18214 https://nvd.nist.gov/vuln/detail/CVE-2017-18214 https://nvd.nist.gov/vuln/detail/CVE-2017-18214 Mariner cve@mitre.org Yes CVE-2017-18214 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12139 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12140 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12356 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12357 reaper 12139 reaper-3.1.1-10.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.1.1-10 https://nvd.nist.gov/vuln/detail/CVE-2017-18214 12139 reaper reaper 12140 CBL-Mariner 3.1.1-10 https://nvd.nist.gov/vuln/detail/CVE-2017-18214 12140 reaper ntopng 12356 ntopng-5.2.1-4.azl3.x86_64.rpm 0001-01-01T00:00:00 ntopng-debuginfo-5.2.1-4.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.2.1-4 https://nvd.nist.gov/vuln/detail/CVE-2017-18214 12356 ntopng ntopng 12357 ntopng-5.2.1-4.azl3.aarch64.rpm 0001-01-01T00:00:00 ntopng-debuginfo-5.2.1-4.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.2.1-4 https://nvd.nist.gov/vuln/detail/CVE-2017-18214 12357 ntopng 1.0 2024-07-12T17:00:00 <p>Information published.</p> 1.1 2024-08-28T17:00:00 <p>Information published.</p> 1.2 2024-08-29T17:00:00 <p>Information published.</p> 1.3 2024-08-30T17:00:00 <p>Information published.</p> 1.4 2024-08-31T17:00:00 <p>Information published.</p> 1.5 2024-09-01T17:00:00 <p>Information published.</p> 1.6 2024-09-02T17:00:00 <p>Information published.</p> 1.7 2024-09-04T17:00:00 <p>Information published.</p> 1.8 2024-09-05T17:00:00 <p>Information published.</p> 1.9 2024-09-06T17:00:00 <p>Information published.</p> 2.0 2024-09-07T17:00:00 <p>Information published.</p> 2.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-0397 https://nvd.nist.gov/vuln/detail/CVE-2024-0397 https://nvd.nist.gov/vuln/detail/CVE-2024-0397 https://nvd.nist.gov/vuln/detail/CVE-2024-0397 Mariner cna@python.org Yes CVE-2024-0397 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 7.4 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H 12139 7.4 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H 12140 7.4 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H 12356 7.4 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H 12357 python3 12139 python3-3.9.19-3.cm2.x86_64.rpm 0001-01-01T00:00:00 python3-libs-3.9.19-3.cm2.x86_64.rpm 0001-01-01T00:00:00 python3-curses-3.9.19-3.cm2.x86_64.rpm 0001-01-01T00:00:00 python3-devel-3.9.19-3.cm2.x86_64.rpm 0001-01-01T00:00:00 python3-tools-3.9.19-3.cm2.x86_64.rpm 0001-01-01T00:00:00 python3-pip-3.9.19-3.cm2.noarch.rpm 0001-01-01T00:00:00 python3-setuptools-3.9.19-3.cm2.noarch.rpm 0001-01-01T00:00:00 python3-test-3.9.19-3.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.9.19-3 https://nvd.nist.gov/vuln/detail/CVE-2024-0397 12139 python3 python3 12140 python3-3.9.19-3.cm2.aarch64.rpm 0001-01-01T00:00:00 python3-libs-3.9.19-3.cm2.aarch64.rpm 0001-01-01T00:00:00 python3-curses-3.9.19-3.cm2.aarch64.rpm 0001-01-01T00:00:00 python3-devel-3.9.19-3.cm2.aarch64.rpm 0001-01-01T00:00:00 python3-tools-3.9.19-3.cm2.aarch64.rpm 0001-01-01T00:00:00 python3-pip-3.9.19-3.cm2.noarch.rpm 0001-01-01T00:00:00 python3-setuptools-3.9.19-3.cm2.noarch.rpm 0001-01-01T00:00:00 python3-test-3.9.19-3.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.9.19-3 https://nvd.nist.gov/vuln/detail/CVE-2024-0397 12140 python3 python3 12356 python3-3.12.3-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-libs-3.12.3-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-curses-3.12.3-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-devel-3.12.3-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-tools-3.12.3-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-test-3.12.3-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-debuginfo-3.12.3-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.12.3-1 https://nvd.nist.gov/vuln/detail/CVE-2024-0397 12356 python3 python3 12357 python3-3.12.3-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-libs-3.12.3-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-curses-3.12.3-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-devel-3.12.3-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-tools-3.12.3-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-test-3.12.3-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-debuginfo-3.12.3-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.12.3-1 https://nvd.nist.gov/vuln/detail/CVE-2024-0397 12357 python3 1.0 2024-08-04T17:00:00 <p>Information published.</p> 1.1 2024-08-24T17:00:00 <p>Information published.</p> 1.2 2024-08-25T17:00:00 <p>Information published.</p> 1.3 2024-08-26T17:00:00 <p>Information published.</p> 1.4 2024-08-27T17:00:00 <p>Information published.</p> 1.5 2024-08-28T17:00:00 <p>Information published.</p> 1.6 2024-08-29T17:00:00 <p>Information published.</p> 1.7 2024-08-30T17:00:00 <p>Information published.</p> 1.8 2024-08-31T17:00:00 <p>Information published.</p> 1.9 2024-09-01T17:00:00 <p>Information published.</p> 2.0 2024-09-02T17:00:00 <p>Information published.</p> 2.1 2024-09-04T17:00:00 <p>Information published.</p> 2.2 2024-09-05T17:00:00 <p>Information published.</p> 2.3 2024-09-06T17:00:00 <p>Information published.</p> 2.4 2024-09-07T17:00:00 <p>Information published.</p> 2.5 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-0450 https://nvd.nist.gov/vuln/detail/CVE-2024-0450 https://nvd.nist.gov/vuln/detail/CVE-2024-0450 https://nvd.nist.gov/vuln/detail/CVE-2024-0450 Mariner cna@python.org Yes CVE-2024-0450 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 6.2 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12139 6.2 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12140 6.2 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12356 6.2 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12357 python3 12139 python3-3.9.19-1.cm2.x86_64.rpm 0001-01-01T00:00:00 python3-libs-3.9.19-1.cm2.x86_64.rpm 0001-01-01T00:00:00 python3-curses-3.9.19-1.cm2.x86_64.rpm 0001-01-01T00:00:00 python3-devel-3.9.19-1.cm2.x86_64.rpm 0001-01-01T00:00:00 python3-tools-3.9.19-1.cm2.x86_64.rpm 0001-01-01T00:00:00 python3-pip-3.9.19-1.cm2.noarch.rpm 0001-01-01T00:00:00 python3-setuptools-3.9.19-1.cm2.noarch.rpm 0001-01-01T00:00:00 python3-test-3.9.19-1.cm2.x86_64.rpm 0001-01-01T00:00:00 python3-debuginfo-3.9.19-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.9.19-1 https://nvd.nist.gov/vuln/detail/CVE-2024-0450 12139 python3 python3 12140 python3-3.9.19-1.cm2.aarch64.rpm 0001-01-01T00:00:00 python3-libs-3.9.19-1.cm2.aarch64.rpm 0001-01-01T00:00:00 python3-curses-3.9.19-1.cm2.aarch64.rpm 0001-01-01T00:00:00 python3-devel-3.9.19-1.cm2.aarch64.rpm 0001-01-01T00:00:00 python3-tools-3.9.19-1.cm2.aarch64.rpm 0001-01-01T00:00:00 python3-pip-3.9.19-1.cm2.noarch.rpm 0001-01-01T00:00:00 python3-setuptools-3.9.19-1.cm2.noarch.rpm 0001-01-01T00:00:00 python3-test-3.9.19-1.cm2.aarch64.rpm 0001-01-01T00:00:00 python3-debuginfo-3.9.19-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.9.19-1 https://nvd.nist.gov/vuln/detail/CVE-2024-0450 12140 python3 python3 12356 python3-3.12.3-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-libs-3.12.3-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-curses-3.12.3-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-devel-3.12.3-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-tools-3.12.3-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-test-3.12.3-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-debuginfo-3.12.3-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.12.3-1 https://nvd.nist.gov/vuln/detail/CVE-2024-0450 12356 python3 python3 12357 python3-3.12.3-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-libs-3.12.3-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-curses-3.12.3-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-devel-3.12.3-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-tools-3.12.3-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-test-3.12.3-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-debuginfo-3.12.3-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.12.3-1 https://nvd.nist.gov/vuln/detail/CVE-2024-0450 12357 python3 1.0 2024-06-30T00:00:00 <p>Information published.</p> 1.1 2024-08-24T17:00:00 <p>Information published.</p> 1.2 2024-08-25T17:00:00 <p>Information published.</p> 1.3 2024-08-26T17:00:00 <p>Information published.</p> 1.4 2024-08-27T17:00:00 <p>Information published.</p> 1.5 2024-08-28T17:00:00 <p>Information published.</p> 1.6 2024-08-29T17:00:00 <p>Information published.</p> 1.7 2024-08-30T17:00:00 <p>Information published.</p> 1.8 2024-08-31T17:00:00 <p>Information published.</p> 1.9 2024-09-01T17:00:00 <p>Information published.</p> 2.0 2024-09-02T17:00:00 <p>Information published.</p> 2.1 2024-09-04T17:00:00 <p>Information published.</p> 2.2 2024-09-05T17:00:00 <p>Information published.</p> 2.3 2024-09-06T17:00:00 <p>Information published.</p> 2.4 2024-09-07T17:00:00 <p>Information published.</p> 2.5 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2021-20270 https://nvd.nist.gov/vuln/detail/CVE-2021-20270 https://nvd.nist.gov/vuln/detail/CVE-2021-20270 Mariner secalert@redhat.com Yes CVE-2021-20270 12137 12138 12139 12140 12356 12357 12137 12138 12139 12140 12356 12357 12137 12138 12139 12140 12356 12357 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12137 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12138 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12139 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12140 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12356 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12357 python-pygments 12137 12138 python-pygments-2.4.2-6.cm1.noarch.rpm 0001-01-01T00:00:00 python3-pygments-2.4.2-6.cm1.noarch.rpm 0001-01-01T00:00:00 CBL-Mariner 2.4.2-6 https://nvd.nist.gov/vuln/detail/CVE-2021-20270 12137 12138 python-pygments python-pygments 12139 12140 python3-pygments-2.4.2-7.cm2.noarch.rpm 0001-01-01T00:00:00 CBL-Mariner 2.4.2-7 https://nvd.nist.gov/vuln/detail/CVE-2021-20270 12139 12140 python-pygments python-pygments 12356 12357 python3-pygments-2.7.4-1.azl3.noarch.rpm 0001-01-01T00:00:00 CBL-Mariner 2.7.4-1 https://nvd.nist.gov/vuln/detail/CVE-2021-20270 12356 12357 python-pygments 1.0 2021-03-25T17:00:00 <p>Information published.</p> 1.1 2021-12-15T16:00:00 <p>Added python-pygments to CBL-Mariner 2.0</p> 1.2 2024-08-28T17:00:00 <p>Information published.</p> 1.3 2024-08-29T17:00:00 <p>Information published.</p> 1.4 2024-08-30T17:00:00 <p>Information published.</p> 1.5 2024-08-31T17:00:00 <p>Information published.</p> 1.6 2024-09-01T17:00:00 <p>Information published.</p> 1.7 2024-09-02T17:00:00 <p>Information published.</p> 1.8 2024-09-04T17:00:00 <p>Information published.</p> 1.9 2024-09-05T17:00:00 <p>Information published.</p> 2.0 2024-09-06T17:00:00 <p>Information published.</p> 2.1 2024-09-07T17:00:00 <p>Information published.</p> 2.2 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2020-14039 https://nvd.nist.gov/vuln/detail/CVE-2020-14039 https://nvd.nist.gov/vuln/detail/CVE-2020-14039 https://nvd.nist.gov/vuln/detail/CVE-2020-14039 Mariner cve@mitre.org Yes CVE-2020-14039 12137 12138 12356 12357 12137 12138 12356 12357 12137 12138 12356 12357 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N 12137 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N 12138 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N 12356 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N 12357 golang 12137 golang-1.15.13-1.cm1.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.15.13-1 https://nvd.nist.gov/vuln/detail/CVE-2020-14039 12137 golang golang 12138 golang-1.15.13-1.cm1.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.15.13-1 https://nvd.nist.gov/vuln/detail/CVE-2020-14039 12138 golang python-tensorboard 12356 python3-tensorboard-2.16.2-2.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-tensorboard-data-server-2.16.2-2.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.16.2-2 https://nvd.nist.gov/vuln/detail/CVE-2020-14039 12356 python-tensorboard python-tensorboard 12357 CBL-Mariner 2.16.2-2 https://nvd.nist.gov/vuln/detail/CVE-2020-14039 12357 python-tensorboard 1.0 2020-08-17T17:00:00 <p>Information published.</p> 1.1 2024-08-28T17:00:00 <p>Information published.</p> 1.2 2024-08-29T17:00:00 <p>Information published.</p> 1.3 2024-08-30T17:00:00 <p>Information published.</p> 1.4 2024-08-31T17:00:00 <p>Information published.</p> 1.5 2024-09-01T17:00:00 <p>Information published.</p> 1.6 2024-09-02T17:00:00 <p>Information published.</p> 1.7 2024-09-04T17:00:00 <p>Information published.</p> 1.8 2024-09-05T17:00:00 <p>Information published.</p> 1.9 2024-09-06T17:00:00 <p>Information published.</p> 2.0 2024-09-07T17:00:00 <p>Information published.</p> 2.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2021-27291 https://nvd.nist.gov/vuln/detail/CVE-2021-27291 https://nvd.nist.gov/vuln/detail/CVE-2021-27291 Mariner cve@mitre.org Yes CVE-2021-27291 12137 12138 12139 12140 12356 12357 12137 12138 12139 12140 12356 12357 12137 12138 12139 12140 12356 12357 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12137 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12138 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12139 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12140 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12356 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12357 python-pygments 12137 12138 python-pygments-2.4.2-6.cm1.noarch.rpm 0001-01-01T00:00:00 python3-pygments-2.4.2-6.cm1.noarch.rpm 0001-01-01T00:00:00 CBL-Mariner 2.4.2-6 https://nvd.nist.gov/vuln/detail/CVE-2021-27291 12137 12138 python-pygments python-pygments 12139 12140 python3-pygments-2.4.2-7.cm2.noarch.rpm 0001-01-01T00:00:00 CBL-Mariner 2.4.2-7 https://nvd.nist.gov/vuln/detail/CVE-2021-27291 12139 12140 python-pygments python-pygments 12356 12357 python3-pygments-2.7.4-1.azl3.noarch.rpm 0001-01-01T00:00:00 CBL-Mariner 2.7.4-1 https://nvd.nist.gov/vuln/detail/CVE-2021-27291 12356 12357 python-pygments 1.0 2021-03-23T17:00:00 <p>Information published.</p> 1.1 2021-12-15T16:00:00 <p>Added python-pygments to CBL-Mariner 2.0</p> 1.2 2024-08-28T17:00:00 <p>Information published.</p> 1.3 2024-08-29T17:00:00 <p>Information published.</p> 1.4 2024-08-30T17:00:00 <p>Information published.</p> 1.5 2024-08-31T17:00:00 <p>Information published.</p> 1.6 2024-09-01T17:00:00 <p>Information published.</p> 1.7 2024-09-02T17:00:00 <p>Information published.</p> 1.8 2024-09-04T17:00:00 <p>Information published.</p> 1.9 2024-09-05T17:00:00 <p>Information published.</p> 2.0 2024-09-06T17:00:00 <p>Information published.</p> 2.1 2024-09-07T17:00:00 <p>Information published.</p> 2.2 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2020-24553 https://nvd.nist.gov/vuln/detail/CVE-2020-24553 https://nvd.nist.gov/vuln/detail/CVE-2020-24553 https://nvd.nist.gov/vuln/detail/CVE-2020-24553 Mariner cve@mitre.org Yes CVE-2020-24553 12137 12138 12356 12357 12137 12138 12356 12357 12137 12138 12356 12357 6.1 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N 12137 6.1 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N 12138 6.1 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N 12356 6.1 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N 12357 golang 12137 golang-1.13.15-2.cm1.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.13.15-2 https://nvd.nist.gov/vuln/detail/CVE-2020-24553 12137 golang golang 12138 golang-1.13.15-2.cm1.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.13.15-2 https://nvd.nist.gov/vuln/detail/CVE-2020-24553 12138 golang python-tensorboard 12356 python3-tensorboard-2.16.2-2.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-tensorboard-data-server-2.16.2-2.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.16.2-2 https://nvd.nist.gov/vuln/detail/CVE-2020-24553 12356 python-tensorboard python-tensorboard 12357 CBL-Mariner 2.16.2-2 https://nvd.nist.gov/vuln/detail/CVE-2020-24553 12357 python-tensorboard 1.0 2020-09-02T17:00:00 <p>Information published.</p> 1.1 2024-08-28T17:00:00 <p>Information published.</p> 1.2 2024-08-29T17:00:00 <p>Information published.</p> 1.3 2024-08-30T17:00:00 <p>Information published.</p> 1.4 2024-08-31T17:00:00 <p>Information published.</p> 1.5 2024-09-01T17:00:00 <p>Information published.</p> 1.6 2024-09-02T17:00:00 <p>Information published.</p> 1.7 2024-09-04T17:00:00 <p>Information published.</p> 1.8 2024-09-05T17:00:00 <p>Information published.</p> 1.9 2024-09-06T17:00:00 <p>Information published.</p> 2.0 2024-09-07T17:00:00 <p>Information published.</p> 2.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2020-28367 https://nvd.nist.gov/vuln/detail/CVE-2020-28367 https://nvd.nist.gov/vuln/detail/CVE-2020-28367 https://nvd.nist.gov/vuln/detail/CVE-2020-28367 Mariner cve@mitre.org Yes CVE-2020-28367 12137 12138 12356 12357 12137 12138 12356 12357 12137 12138 12356 12357 7.5 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H 12137 7.5 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H 12138 7.5 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H 12356 7.5 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H 12357 golang 12137 golang-1.15.13-1.cm1.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.15.13-1 https://nvd.nist.gov/vuln/detail/CVE-2020-28367 12137 golang golang 12138 golang-1.15.13-1.cm1.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.15.13-1 https://nvd.nist.gov/vuln/detail/CVE-2020-28367 12138 golang python-tensorboard 12356 python3-tensorboard-2.16.2-2.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-tensorboard-data-server-2.16.2-2.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.16.2-2 https://nvd.nist.gov/vuln/detail/CVE-2020-28367 12356 python-tensorboard python-tensorboard 12357 CBL-Mariner 2.16.2-2 https://nvd.nist.gov/vuln/detail/CVE-2020-28367 12357 python-tensorboard 1.0 2020-11-18T16:00:00 <p>Information published.</p> 1.1 2024-08-28T17:00:00 <p>Information published.</p> 1.2 2024-08-29T17:00:00 <p>Information published.</p> 1.3 2024-08-30T17:00:00 <p>Information published.</p> 1.4 2024-08-31T17:00:00 <p>Information published.</p> 1.5 2024-09-01T17:00:00 <p>Information published.</p> 1.6 2024-09-02T17:00:00 <p>Information published.</p> 1.7 2024-09-04T17:00:00 <p>Information published.</p> 1.8 2024-09-05T17:00:00 <p>Information published.</p> 1.9 2024-09-06T17:00:00 <p>Information published.</p> 2.0 2024-09-07T17:00:00 <p>Information published.</p> 2.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2020-28362 https://nvd.nist.gov/vuln/detail/CVE-2020-28362 https://nvd.nist.gov/vuln/detail/CVE-2020-28362 https://nvd.nist.gov/vuln/detail/CVE-2020-28362 Mariner cve@mitre.org Yes CVE-2020-28362 12137 12138 12356 12357 12137 12138 12356 12357 12137 12138 12356 12357 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12137 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12138 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12356 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12357 golang 12137 golang-1.15.13-1.cm1.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.15.13-1 https://nvd.nist.gov/vuln/detail/CVE-2020-28362 12137 golang golang 12138 golang-1.15.13-1.cm1.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.15.13-1 https://nvd.nist.gov/vuln/detail/CVE-2020-28362 12138 golang python-tensorboard 12356 python3-tensorboard-2.16.2-2.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-tensorboard-data-server-2.16.2-2.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.16.2-2 https://nvd.nist.gov/vuln/detail/CVE-2020-28362 12356 python-tensorboard python-tensorboard 12357 CBL-Mariner 2.16.2-2 https://nvd.nist.gov/vuln/detail/CVE-2020-28362 12357 python-tensorboard 1.0 2020-11-18T16:00:00 <p>Information published.</p> 1.1 2024-08-28T17:00:00 <p>Information published.</p> 1.2 2024-08-29T17:00:00 <p>Information published.</p> 1.3 2024-08-30T17:00:00 <p>Information published.</p> 1.4 2024-08-31T17:00:00 <p>Information published.</p> 1.5 2024-09-01T17:00:00 <p>Information published.</p> 1.6 2024-09-02T17:00:00 <p>Information published.</p> 1.7 2024-09-04T17:00:00 <p>Information published.</p> 1.8 2024-09-05T17:00:00 <p>Information published.</p> 1.9 2024-09-06T17:00:00 <p>Information published.</p> 2.0 2024-09-07T17:00:00 <p>Information published.</p> 2.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2021-3114 https://nvd.nist.gov/vuln/detail/CVE-2021-3114 https://nvd.nist.gov/vuln/detail/CVE-2021-3114 https://nvd.nist.gov/vuln/detail/CVE-2021-3114 Mariner cve@mitre.org Yes CVE-2021-3114 12137 12138 12356 12357 12137 12138 12356 12357 12137 12138 12356 12357 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N 12137 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N 12138 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N 12356 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N 12357 golang 12137 golang-1.15.13-1.cm1.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.15.13-1 https://nvd.nist.gov/vuln/detail/CVE-2021-3114 12137 golang golang 12138 golang-1.15.13-1.cm1.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.15.13-1 https://nvd.nist.gov/vuln/detail/CVE-2021-3114 12138 golang python-tensorboard 12356 python3-tensorboard-2.16.2-2.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-tensorboard-data-server-2.16.2-2.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.16.2-2 https://nvd.nist.gov/vuln/detail/CVE-2021-3114 12356 python-tensorboard python-tensorboard 12357 CBL-Mariner 2.16.2-2 https://nvd.nist.gov/vuln/detail/CVE-2021-3114 12357 python-tensorboard 1.0 2021-02-02T16:00:00 <p>Information published.</p> 1.1 2024-08-28T17:00:00 <p>Information published.</p> 1.2 2024-08-29T17:00:00 <p>Information published.</p> 1.3 2024-08-30T17:00:00 <p>Information published.</p> 1.4 2024-08-31T17:00:00 <p>Information published.</p> 1.5 2024-09-01T17:00:00 <p>Information published.</p> 1.6 2024-09-02T17:00:00 <p>Information published.</p> 1.7 2024-09-04T17:00:00 <p>Information published.</p> 1.8 2024-09-05T17:00:00 <p>Information published.</p> 1.9 2024-09-06T17:00:00 <p>Information published.</p> 2.0 2024-09-07T17:00:00 <p>Information published.</p> 2.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2021-29923 https://nvd.nist.gov/vuln/detail/CVE-2021-29923 https://nvd.nist.gov/vuln/detail/CVE-2021-29923 https://nvd.nist.gov/vuln/detail/CVE-2021-29923 Mariner cve@mitre.org Yes CVE-2021-29923 12137 12138 12356 12357 12137 12138 12356 12357 12137 12138 12356 12357 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 12137 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 12138 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 12356 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 12357 golang 12137 golang-1.16.7-1.cm1.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.16.7-1 https://nvd.nist.gov/vuln/detail/CVE-2021-29923 12137 golang golang 12138 golang-1.16.7-1.cm1.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.16.7-1 https://nvd.nist.gov/vuln/detail/CVE-2021-29923 12138 golang python-tensorboard 12356 python3-tensorboard-2.16.2-2.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-tensorboard-data-server-2.16.2-2.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.16.2-2 https://nvd.nist.gov/vuln/detail/CVE-2021-29923 12356 python-tensorboard python-tensorboard 12357 CBL-Mariner 2.16.2-2 https://nvd.nist.gov/vuln/detail/CVE-2021-29923 12357 python-tensorboard 1.0 2021-08-17T17:00:00 <p>Information published.</p> 1.1 2024-08-28T17:00:00 <p>Information published.</p> 1.2 2024-08-29T17:00:00 <p>Information published.</p> 1.3 2024-08-30T17:00:00 <p>Information published.</p> 1.4 2024-08-31T17:00:00 <p>Information published.</p> 1.5 2024-09-01T17:00:00 <p>Information published.</p> 1.6 2024-09-02T17:00:00 <p>Information published.</p> 1.7 2024-09-04T17:00:00 <p>Information published.</p> 1.8 2024-09-05T17:00:00 <p>Information published.</p> 1.9 2024-09-06T17:00:00 <p>Information published.</p> 2.0 2024-09-07T17:00:00 <p>Information published.</p> 2.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2021-27918 https://nvd.nist.gov/vuln/detail/CVE-2021-27918 https://nvd.nist.gov/vuln/detail/CVE-2021-27918 https://nvd.nist.gov/vuln/detail/CVE-2021-27918 Mariner cve@mitre.org Yes CVE-2021-27918 12137 12138 12356 12357 12137 12138 12356 12357 12137 12138 12356 12357 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12137 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12138 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12356 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12357 golang 12137 golang-1.15.13-1.cm1.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.15.13-1 https://nvd.nist.gov/vuln/detail/CVE-2021-27918 12137 golang golang 12138 golang-1.15.13-1.cm1.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.15.13-1 https://nvd.nist.gov/vuln/detail/CVE-2021-27918 12138 golang python-tensorboard 12356 python3-tensorboard-2.16.2-2.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-tensorboard-data-server-2.16.2-2.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.16.2-2 https://nvd.nist.gov/vuln/detail/CVE-2021-27918 12356 python-tensorboard python-tensorboard 12357 CBL-Mariner 2.16.2-2 https://nvd.nist.gov/vuln/detail/CVE-2021-27918 12357 python-tensorboard 1.0 2021-03-18T17:00:00 <p>Information published.</p> 1.1 2024-08-28T17:00:00 <p>Information published.</p> 1.2 2024-08-29T17:00:00 <p>Information published.</p> 1.3 2024-08-30T17:00:00 <p>Information published.</p> 1.4 2024-08-31T17:00:00 <p>Information published.</p> 1.5 2024-09-01T17:00:00 <p>Information published.</p> 1.6 2024-09-02T17:00:00 <p>Information published.</p> 1.7 2024-09-04T17:00:00 <p>Information published.</p> 1.8 2024-09-05T17:00:00 <p>Information published.</p> 1.9 2024-09-06T17:00:00 <p>Information published.</p> 2.0 2024-09-07T17:00:00 <p>Information published.</p> 2.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2021-41772 https://nvd.nist.gov/vuln/detail/CVE-2021-41772 https://nvd.nist.gov/vuln/detail/CVE-2021-41772 https://nvd.nist.gov/vuln/detail/CVE-2021-41772 https://nvd.nist.gov/vuln/detail/CVE-2021-41772 https://nvd.nist.gov/vuln/detail/CVE-2021-41772 Mariner cve@mitre.org Yes CVE-2021-41772 12137 12138 12139 12140 12356 12357 12137 12138 12139 12140 12356 12357 12137 12138 12139 12140 12356 12357 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12137 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12138 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12139 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12140 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12356 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12357 golang 12137 golang-1.16.10-1.cm1.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.16.10-1 https://nvd.nist.gov/vuln/detail/CVE-2021-41772 12137 golang golang 12138 golang-1.16.10-1.cm1.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.16.10-1 https://nvd.nist.gov/vuln/detail/CVE-2021-41772 12138 golang golang 12139 golang-1.17.8-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.17.8-1 https://nvd.nist.gov/vuln/detail/CVE-2021-41772 12139 golang golang 12140 golang-1.17.8-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.17.8-1 https://nvd.nist.gov/vuln/detail/CVE-2021-41772 12140 golang python-tensorboard 12356 python3-tensorboard-2.16.2-2.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-tensorboard-data-server-2.16.2-2.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.16.2-2 https://nvd.nist.gov/vuln/detail/CVE-2021-41772 12356 python-tensorboard python-tensorboard 12357 CBL-Mariner 2.16.2-2 https://nvd.nist.gov/vuln/detail/CVE-2021-41772 12357 python-tensorboard 1.0 2021-11-10T16:00:00 <p>Information published.</p> 1.1 2021-12-15T16:00:00 <p>Added golang to CBL-Mariner 2.0</p> 1.2 2024-08-28T17:00:00 <p>Information published.</p> 1.3 2024-08-29T17:00:00 <p>Information published.</p> 1.4 2024-08-30T17:00:00 <p>Information published.</p> 1.5 2024-08-31T17:00:00 <p>Information published.</p> 1.6 2024-09-01T17:00:00 <p>Information published.</p> 1.7 2024-09-02T17:00:00 <p>Information published.</p> 1.8 2024-09-04T17:00:00 <p>Information published.</p> 1.9 2024-09-05T17:00:00 <p>Information published.</p> 2.0 2024-09-06T17:00:00 <p>Information published.</p> 2.1 2024-09-07T17:00:00 <p>Information published.</p> 2.2 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2022-23773 https://nvd.nist.gov/vuln/detail/CVE-2022-23773 https://nvd.nist.gov/vuln/detail/CVE-2022-23773 https://nvd.nist.gov/vuln/detail/CVE-2022-23773 https://nvd.nist.gov/vuln/detail/CVE-2022-23773 https://nvd.nist.gov/vuln/detail/CVE-2022-23773 Mariner cve@mitre.org Yes CVE-2022-23773 12137 12138 12139 12140 12356 12357 12137 12138 12139 12140 12356 12357 12137 12138 12139 12140 12356 12357 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 12137 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 12138 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 12139 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 12140 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 12356 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 12357 golang 12137 golang-1.16.14-1.cm1.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.16.14-1 https://nvd.nist.gov/vuln/detail/CVE-2022-23773 12137 golang golang 12138 golang-1.16.14-1.cm1.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.16.14-1 https://nvd.nist.gov/vuln/detail/CVE-2022-23773 12138 golang golang 12139 golang-1.17.8-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.17.8-1 https://nvd.nist.gov/vuln/detail/CVE-2022-23773 12139 golang golang 12140 golang-1.17.8-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.17.8-1 https://nvd.nist.gov/vuln/detail/CVE-2022-23773 12140 golang python-tensorboard 12356 python3-tensorboard-2.16.2-2.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-tensorboard-data-server-2.16.2-2.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.16.2-2 https://nvd.nist.gov/vuln/detail/CVE-2022-23773 12356 python-tensorboard python-tensorboard 12357 CBL-Mariner 2.16.2-2 https://nvd.nist.gov/vuln/detail/CVE-2022-23773 12357 python-tensorboard 1.0 2022-02-16T16:00:00 <p>Information published.</p> 1.1 2024-08-28T17:00:00 <p>Information published.</p> 1.2 2024-08-29T17:00:00 <p>Information published.</p> 1.3 2024-08-30T17:00:00 <p>Information published.</p> 1.4 2024-08-31T17:00:00 <p>Information published.</p> 1.5 2024-09-01T17:00:00 <p>Information published.</p> 1.6 2024-09-02T17:00:00 <p>Information published.</p> 1.7 2024-09-04T17:00:00 <p>Information published.</p> 1.8 2024-09-05T17:00:00 <p>Information published.</p> 1.9 2024-09-06T17:00:00 <p>Information published.</p> 2.0 2024-09-07T17:00:00 <p>Information published.</p> 2.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2022-23772 https://nvd.nist.gov/vuln/detail/CVE-2022-23772 https://nvd.nist.gov/vuln/detail/CVE-2022-23772 https://nvd.nist.gov/vuln/detail/CVE-2022-23772 https://nvd.nist.gov/vuln/detail/CVE-2022-23772 https://nvd.nist.gov/vuln/detail/CVE-2022-23772 Mariner cve@mitre.org Yes CVE-2022-23772 12137 12138 12139 12140 12356 12357 12137 12138 12139 12140 12356 12357 12137 12138 12139 12140 12356 12357 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12137 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12138 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12139 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12140 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12356 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12357 golang 12137 golang-1.16.14-1.cm1.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.16.14-1 https://nvd.nist.gov/vuln/detail/CVE-2022-23772 12137 golang golang 12138 golang-1.16.14-1.cm1.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.16.14-1 https://nvd.nist.gov/vuln/detail/CVE-2022-23772 12138 golang golang 12139 golang-1.17.8-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.17.8-1 https://nvd.nist.gov/vuln/detail/CVE-2022-23772 12139 golang golang 12140 golang-1.17.8-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.17.8-1 https://nvd.nist.gov/vuln/detail/CVE-2022-23772 12140 golang python-tensorboard 12356 python3-tensorboard-2.16.2-2.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-tensorboard-data-server-2.16.2-2.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.16.2-2 https://nvd.nist.gov/vuln/detail/CVE-2022-23772 12356 python-tensorboard python-tensorboard 12357 CBL-Mariner 2.16.2-2 https://nvd.nist.gov/vuln/detail/CVE-2022-23772 12357 python-tensorboard 1.0 2022-02-16T16:00:00 <p>Information published.</p> 1.1 2024-08-28T17:00:00 <p>Information published.</p> 1.2 2024-08-29T17:00:00 <p>Information published.</p> 1.3 2024-08-30T17:00:00 <p>Information published.</p> 1.4 2024-08-31T17:00:00 <p>Information published.</p> 1.5 2024-09-01T17:00:00 <p>Information published.</p> 1.6 2024-09-02T17:00:00 <p>Information published.</p> 1.7 2024-09-04T17:00:00 <p>Information published.</p> 1.8 2024-09-05T17:00:00 <p>Information published.</p> 1.9 2024-09-06T17:00:00 <p>Information published.</p> 2.0 2024-09-07T17:00:00 <p>Information published.</p> 2.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2022-23806 https://nvd.nist.gov/vuln/detail/CVE-2022-23806 https://nvd.nist.gov/vuln/detail/CVE-2022-23806 https://nvd.nist.gov/vuln/detail/CVE-2022-23806 Mariner cve@mitre.org Yes CVE-2022-23806 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 9.1 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H 12139 9.1 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H 12140 9.1 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H 12356 9.1 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H 12357 golang 12139 golang-1.18.8-3.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.18.8-3 https://nvd.nist.gov/vuln/detail/CVE-2022-23806 12139 golang golang 12140 golang-1.18.8-3.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.18.8-3 https://nvd.nist.gov/vuln/detail/CVE-2022-23806 12140 golang python-tensorboard 12356 python3-tensorboard-2.16.2-2.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-tensorboard-data-server-2.16.2-2.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.16.2-2 https://nvd.nist.gov/vuln/detail/CVE-2022-23806 12356 python-tensorboard python-tensorboard 12357 CBL-Mariner 2.16.2-2 https://nvd.nist.gov/vuln/detail/CVE-2022-23806 12357 python-tensorboard 1.0 2022-02-17T16:00:00 <p>Information published.</p> 1.1 2024-08-28T17:00:00 <p>Information published.</p> 1.2 2024-08-29T17:00:00 <p>Information published.</p> 1.3 2024-08-30T17:00:00 <p>Information published.</p> 1.4 2024-08-31T17:00:00 <p>Information published.</p> 1.5 2024-09-01T17:00:00 <p>Information published.</p> 1.6 2024-09-02T17:00:00 <p>Information published.</p> 1.7 2024-09-04T17:00:00 <p>Information published.</p> 1.8 2024-09-05T17:00:00 <p>Information published.</p> 1.9 2024-09-06T17:00:00 <p>Information published.</p> 2.0 2024-09-07T17:00:00 <p>Information published.</p> 2.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-41671 https://nvd.nist.gov/vuln/detail/CVE-2024-41671 https://nvd.nist.gov/vuln/detail/CVE-2024-41671 https://nvd.nist.gov/vuln/detail/CVE-2024-41671 Mariner security-advisories@github.com Yes CVE-2024-41671 12357 12356 12139 12140 12357 12356 12139 12140 12357 12356 12139 12140 8.3 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L 12357 8.3 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L 12356 8.3 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L 12139 8.3 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L 12140 python-twisted 12357 python3-twisted-22.10.0-3.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 22.10.0-3 https://nvd.nist.gov/vuln/detail/CVE-2024-41671 12357 python-twisted python-twisted 12356 python3-twisted-22.10.0-3.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 22.10.0-3 https://nvd.nist.gov/vuln/detail/CVE-2024-41671 12356 python-twisted python-twisted 12139 python3-twisted-22.10.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 22.10.0-3 https://nvd.nist.gov/vuln/detail/CVE-2024-41671 12139 python-twisted python-twisted 12140 python3-twisted-22.10.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 22.10.0-3 https://nvd.nist.gov/vuln/detail/CVE-2024-41671 12140 python-twisted 1.0 2024-08-17T17:00:00 <p>Information published.</p> 1.1 2024-08-18T17:00:00 <p>Information published.</p> 1.2 2024-08-19T17:00:00 <p>Information published.</p> 1.3 2024-08-20T17:00:00 <p>Information published.</p> 1.4 2024-08-21T17:00:00 <p>Information published.</p> 1.5 2024-08-22T17:00:00 <p>Information published.</p> 1.6 2024-08-23T17:00:00 <p>Information published.</p> 1.7 2024-08-24T17:00:00 <p>Information published.</p> 1.8 2024-08-25T17:00:00 <p>Information published.</p> 1.9 2024-08-26T17:00:00 <p>Information published.</p> 2.0 2024-08-27T17:00:00 <p>Information published.</p> 2.1 2024-08-28T17:00:00 <p>Information published.</p> 2.2 2024-08-29T17:00:00 <p>Information published.</p> 2.3 2024-08-30T17:00:00 <p>Information published.</p> 2.4 2024-08-31T17:00:00 <p>Information published.</p> 2.5 2024-09-01T17:00:00 <p>Information published.</p> 2.6 2024-09-02T17:00:00 <p>Information published.</p> 2.7 2024-09-04T17:00:00 <p>Information published.</p> 2.8 2024-09-05T17:00:00 <p>Information published.</p> 2.9 2024-09-06T17:00:00 <p>Information published.</p> 3.0 2024-09-07T17:00:00 <p>Information published.</p> 3.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2022-24921 https://nvd.nist.gov/vuln/detail/CVE-2022-24921 https://nvd.nist.gov/vuln/detail/CVE-2022-24921 https://nvd.nist.gov/vuln/detail/CVE-2022-24921 https://nvd.nist.gov/vuln/detail/CVE-2022-24921 https://nvd.nist.gov/vuln/detail/CVE-2022-24921 Mariner cve@mitre.org Yes CVE-2022-24921 12137 12138 12139 12140 12356 12357 12137 12138 12139 12140 12356 12357 12137 12138 12139 12140 12356 12357 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12137 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12138 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12139 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12140 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12356 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12357 golang 12137 golang-1.16.15-1.cm1.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.16.15-1 https://nvd.nist.gov/vuln/detail/CVE-2022-24921 12137 golang golang 12138 golang-1.16.15-1.cm1.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.16.15-1 https://nvd.nist.gov/vuln/detail/CVE-2022-24921 12138 golang golang 12139 golang-1.17.8-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.17.8-1 https://nvd.nist.gov/vuln/detail/CVE-2022-24921 12139 golang golang 12140 golang-1.17.8-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.17.8-1 https://nvd.nist.gov/vuln/detail/CVE-2022-24921 12140 golang python-tensorboard 12356 python3-tensorboard-2.16.2-2.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-tensorboard-data-server-2.16.2-2.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.16.2-2 https://nvd.nist.gov/vuln/detail/CVE-2022-24921 12356 python-tensorboard python-tensorboard 12357 CBL-Mariner 2.16.2-2 https://nvd.nist.gov/vuln/detail/CVE-2022-24921 12357 python-tensorboard 1.0 2022-03-10T16:00:00 <p>Information published.</p> 1.1 2024-08-28T17:00:00 <p>Information published.</p> 1.2 2024-08-29T17:00:00 <p>Information published.</p> 1.3 2024-08-30T17:00:00 <p>Information published.</p> 1.4 2024-08-31T17:00:00 <p>Information published.</p> 1.5 2024-09-01T17:00:00 <p>Information published.</p> 1.6 2024-09-02T17:00:00 <p>Information published.</p> 1.7 2024-09-04T17:00:00 <p>Information published.</p> 1.8 2024-09-05T17:00:00 <p>Information published.</p> 1.9 2024-09-06T17:00:00 <p>Information published.</p> 2.0 2024-09-07T17:00:00 <p>Information published.</p> 2.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2021-3750 https://nvd.nist.gov/vuln/detail/CVE-2021-3750 https://nvd.nist.gov/vuln/detail/CVE-2021-3750 https://nvd.nist.gov/vuln/detail/CVE-2021-3750 https://nvd.nist.gov/vuln/detail/CVE-2021-3750 https://nvd.nist.gov/vuln/detail/CVE-2021-3750 Mariner secalert@redhat.com Yes CVE-2021-3750 12137 12138 12139 12140 12356 12357 12137 12138 12139 12140 12356 12357 12137 12138 12139 12140 12356 12357 8.2 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H 12137 8.2 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H 12138 8.2 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H 12139 8.2 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H 12140 8.2 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H 12356 8.2 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H 12357 qemu-kvm 12137 qemu-kvm-4.2.0-41.cm1.x86_64.rpm 0001-01-01T00:00:00 qemu-img-4.2.0-41.cm1.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 4.2.0-41 https://nvd.nist.gov/vuln/detail/CVE-2021-3750 12137 qemu-kvm qemu-kvm 12138 qemu-kvm-4.2.0-41.cm1.aarch64.rpm 0001-01-01T00:00:00 qemu-img-4.2.0-41.cm1.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 4.2.0-41 https://nvd.nist.gov/vuln/detail/CVE-2021-3750 12138 qemu-kvm qemu 12139 qemu-6.2.0-16.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-common-6.2.0-16.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-docs-6.2.0-16.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-img-6.2.0-16.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-guest-agent-6.2.0-16.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-tools-6.2.0-16.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-pr-helper-6.2.0-16.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-virtiofsd-6.2.0-16.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-tests-6.2.0-16.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-curl-6.2.0-16.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-6.2.0-16.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-rbd-6.2.0-16.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-opengl-6.2.0-16.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-dmg-6.2.0-16.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-nfs-6.2.0-16.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-6.2.0-16.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-oss-6.2.0-16.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-curses-6.2.0-16.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-gtk-6.2.0-16.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-egl-headless-6.2.0-16.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-6.2.0-16.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-gl-6.2.0-16.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-6.2.0-16.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-gl-6.2.0-16.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-6.2.0-16.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-6.2.0-16.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-6.2.0-16.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-6.2.0-16.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-6.2.0-16.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-smartcard-6.2.0-16.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-vhost-user-gpu-6.2.0-16.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-6.2.0-16.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-core-6.2.0-16.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-user-6.2.0-16.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-6.2.0-16.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ipxe-6.2.0-16.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-6.2.0-16.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-6.2.0-16.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-x86-6.2.0-16.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-x86-core-6.2.0-16.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-6.2.0-16.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-6.2.0-16.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-6.2.0-16.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-6.2.0-16.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-6.2.0-16.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-6.2.0-16.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.2.0-16 https://nvd.nist.gov/vuln/detail/CVE-2021-3750 12139 qemu qemu 12140 qemu-6.2.0-16.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-common-6.2.0-16.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-docs-6.2.0-16.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-img-6.2.0-16.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-guest-agent-6.2.0-16.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-tools-6.2.0-16.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-pr-helper-6.2.0-16.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-virtiofsd-6.2.0-16.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-tests-6.2.0-16.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-curl-6.2.0-16.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-6.2.0-16.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-rbd-6.2.0-16.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-opengl-6.2.0-16.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-dmg-6.2.0-16.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-nfs-6.2.0-16.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-6.2.0-16.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-oss-6.2.0-16.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-curses-6.2.0-16.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-gtk-6.2.0-16.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-egl-headless-6.2.0-16.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-6.2.0-16.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-gl-6.2.0-16.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-6.2.0-16.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-gl-6.2.0-16.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-6.2.0-16.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-6.2.0-16.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-6.2.0-16.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-6.2.0-16.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-6.2.0-16.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-smartcard-6.2.0-16.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-vhost-user-gpu-6.2.0-16.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-6.2.0-16.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-core-6.2.0-16.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-user-6.2.0-16.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-6.2.0-16.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ipxe-6.2.0-16.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-6.2.0-16.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-6.2.0-16.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-6.2.0-16.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-6.2.0-16.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-6.2.0-16.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-6.2.0-16.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-6.2.0-16.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-6.2.0-16.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-6.2.0-16.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.2.0-16 https://nvd.nist.gov/vuln/detail/CVE-2021-3750 12140 qemu qemu 12356 qemu-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-common-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-docs-8.2.0-9.azl3.noarch.rpm 0001-01-01T00:00:00 qemu-img-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-guest-agent-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-tools-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-pr-helper-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-tests-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-curl-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-dmg-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-nfs-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-oss-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-curses-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-user-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-ipxe-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-cris-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-cris-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-hppa-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-hppa-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-m68k-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-m68k-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-mips-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.2.0-18 https://nvd.nist.gov/vuln/detail/CVE-2021-3750 12356 qemu qemu 12357 qemu-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-common-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-docs-8.2.0-9.azl3.noarch.rpm 0001-01-01T00:00:00 qemu-img-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-guest-agent-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-tools-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-pr-helper-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-tests-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-curl-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-dmg-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-nfs-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-oss-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-curses-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-user-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-ipxe-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-hppa-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-hppa-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-m68k-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-m68k-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.2.0-18 https://nvd.nist.gov/vuln/detail/CVE-2021-3750 12357 qemu 1.0 2022-05-16T17:00:00 <p>Information published.</p> 1.1 2024-08-04T17:00:00 <p>Information published.</p> 1.2 2024-08-05T17:00:00 <p>Information published.</p> 1.3 2024-08-06T17:00:00 <p>Information published.</p> 1.4 2024-08-07T17:00:00 <p>Information published.</p> 1.5 2024-08-08T17:00:00 <p>Information published.</p> 1.6 2024-08-09T17:00:00 <p>Information published.</p> 1.7 2024-08-10T17:00:00 <p>Information published.</p> 1.8 2024-08-11T17:00:00 <p>Information published.</p> 1.9 2024-08-15T17:00:00 <p>Information published.</p> 2.0 2024-08-16T17:00:00 <p>Information published.</p> 2.1 2024-08-17T17:00:00 <p>Information published.</p> 2.2 2024-08-18T17:00:00 <p>Information published.</p> 2.3 2024-08-19T17:00:00 <p>Information published.</p> 2.4 2024-08-20T17:00:00 <p>Information published.</p> 2.5 2024-08-21T17:00:00 <p>Information published.</p> 2.6 2024-08-22T17:00:00 <p>Information published.</p> 2.7 2024-08-23T17:00:00 <p>Information published.</p> 2.8 2024-08-24T17:00:00 <p>Information published.</p> 2.9 2024-08-25T17:00:00 <p>Information published.</p> 3.0 2024-08-26T17:00:00 <p>Information published.</p> 3.1 2024-08-27T17:00:00 <p>Information published.</p> 3.2 2024-08-28T17:00:00 <p>Information published.</p> 3.3 2024-08-29T17:00:00 <p>Information published.</p> 3.4 2024-08-30T17:00:00 <p>Information published.</p> 3.5 2024-08-31T17:00:00 <p>Information published.</p> 3.6 2024-09-01T17:00:00 <p>Information published.</p> 3.7 2024-09-02T17:00:00 <p>Information published.</p> 3.8 2024-09-04T17:00:00 <p>Information published.</p> 3.9 2024-09-05T17:00:00 <p>Information published.</p> 4.0 2024-09-06T17:00:00 <p>Information published.</p> 4.1 2024-09-07T17:00:00 <p>Information published.</p> 4.2 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2021-4158 https://nvd.nist.gov/vuln/detail/CVE-2021-4158 https://nvd.nist.gov/vuln/detail/CVE-2021-4158 https://nvd.nist.gov/vuln/detail/CVE-2021-4158 Mariner secalert@redhat.com Yes CVE-2021-4158 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 6.0 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H 12139 6.0 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H 12140 6.0 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H 12356 6.0 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H 12357 qemu 12139 qemu-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-common-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-docs-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-img-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-guest-agent-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-tools-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-pr-helper-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-virtiofsd-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-tests-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-curl-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-rbd-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-opengl-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-dmg-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-nfs-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-oss-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-curses-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-gtk-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-egl-headless-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-gl-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-gl-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-smartcard-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-vhost-user-gpu-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-core-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-user-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-x86-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-x86-core-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-cris-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-cris-core-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.2.0-7 https://nvd.nist.gov/vuln/detail/CVE-2021-4158 12139 qemu qemu 12140 qemu-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-common-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-docs-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-img-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-guest-agent-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-tools-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-pr-helper-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-virtiofsd-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-tests-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-curl-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-rbd-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-opengl-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-dmg-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-nfs-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-oss-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-curses-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-gtk-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-egl-headless-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-gl-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-gl-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-smartcard-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-vhost-user-gpu-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-core-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-user-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-core-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-hppa-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.2.0-7 https://nvd.nist.gov/vuln/detail/CVE-2021-4158 12140 qemu qemu 12356 qemu-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-common-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-docs-8.2.0-9.azl3.noarch.rpm 0001-01-01T00:00:00 qemu-img-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-guest-agent-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-tools-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-pr-helper-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-tests-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-curl-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-dmg-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-nfs-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-oss-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-curses-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-user-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-ipxe-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-cris-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-cris-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-hppa-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-hppa-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-m68k-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-m68k-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-mips-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.2.0-18 https://nvd.nist.gov/vuln/detail/CVE-2021-4158 12356 qemu qemu 12357 qemu-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-common-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-docs-8.2.0-9.azl3.noarch.rpm 0001-01-01T00:00:00 qemu-img-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-guest-agent-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-tools-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-pr-helper-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-tests-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-curl-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-dmg-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-nfs-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-oss-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-curses-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-user-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-ipxe-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-hppa-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-hppa-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-m68k-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-m68k-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.2.0-18 https://nvd.nist.gov/vuln/detail/CVE-2021-4158 12357 qemu 1.8 2024-08-15T17:00:00 <p>Information published.</p> 1.0 2024-08-04T17:00:00 <p>Information published.</p> 1.1 2024-08-05T17:00:00 <p>Information published.</p> 1.2 2024-08-06T17:00:00 <p>Information published.</p> 1.3 2024-08-07T17:00:00 <p>Information published.</p> 1.4 2024-08-08T17:00:00 <p>Information published.</p> 1.5 2024-08-09T17:00:00 <p>Information published.</p> 1.6 2024-08-10T17:00:00 <p>Information published.</p> 1.7 2024-08-11T17:00:00 <p>Information published.</p> 1.9 2024-08-16T17:00:00 <p>Information published.</p> 2.0 2024-08-17T17:00:00 <p>Information published.</p> 2.1 2024-08-18T17:00:00 <p>Information published.</p> 2.2 2024-08-19T17:00:00 <p>Information published.</p> 2.3 2024-08-20T17:00:00 <p>Information published.</p> 2.4 2024-08-21T17:00:00 <p>Information published.</p> 2.5 2024-08-22T17:00:00 <p>Information published.</p> 2.6 2024-08-23T17:00:00 <p>Information published.</p> 2.7 2024-08-24T17:00:00 <p>Information published.</p> 2.8 2024-08-25T17:00:00 <p>Information published.</p> 2.9 2024-08-26T17:00:00 <p>Information published.</p> 3.0 2024-08-27T17:00:00 <p>Information published.</p> 3.1 2024-08-28T17:00:00 <p>Information published.</p> 3.2 2024-08-29T17:00:00 <p>Information published.</p> 3.3 2024-08-30T17:00:00 <p>Information published.</p> 3.4 2024-08-31T17:00:00 <p>Information published.</p> 3.5 2024-09-01T17:00:00 <p>Information published.</p> 3.6 2024-09-02T17:00:00 <p>Information published.</p> 3.7 2024-09-04T17:00:00 <p>Information published.</p> 3.8 2024-09-05T17:00:00 <p>Information published.</p> 3.9 2024-09-06T17:00:00 <p>Information published.</p> 4.0 2024-09-07T17:00:00 <p>Information published.</p> 4.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2021-4206 https://nvd.nist.gov/vuln/detail/CVE-2021-4206 https://nvd.nist.gov/vuln/detail/CVE-2021-4206 https://nvd.nist.gov/vuln/detail/CVE-2021-4206 https://nvd.nist.gov/vuln/detail/CVE-2021-4206 https://nvd.nist.gov/vuln/detail/CVE-2021-4206 Mariner secalert@redhat.com Yes CVE-2021-4206 12137 12138 12139 12140 12356 12357 12137 12138 12139 12140 12356 12357 12137 12138 12139 12140 12356 12357 8.2 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H 12137 8.2 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H 12138 8.2 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H 12139 8.2 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H 12140 8.2 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H 12356 8.2 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H 12357 qemu-kvm 12137 qemu-kvm-4.2.0-41.cm1.x86_64.rpm 0001-01-01T00:00:00 qemu-img-4.2.0-41.cm1.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 4.2.0-41 https://nvd.nist.gov/vuln/detail/CVE-2021-4206 12137 qemu-kvm qemu-kvm 12138 qemu-kvm-4.2.0-41.cm1.aarch64.rpm 0001-01-01T00:00:00 qemu-img-4.2.0-41.cm1.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 4.2.0-41 https://nvd.nist.gov/vuln/detail/CVE-2021-4206 12138 qemu-kvm qemu 12139 qemu-6.2.0-4.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-common-6.2.0-4.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-docs-6.2.0-4.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-img-6.2.0-4.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-guest-agent-6.2.0-4.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-tools-6.2.0-4.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-pr-helper-6.2.0-4.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-virtiofsd-6.2.0-4.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-tests-6.2.0-4.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-curl-6.2.0-4.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-6.2.0-4.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-rbd-6.2.0-4.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-opengl-6.2.0-4.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-dmg-6.2.0-4.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-nfs-6.2.0-4.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-6.2.0-4.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-oss-6.2.0-4.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-curses-6.2.0-4.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-gtk-6.2.0-4.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-egl-headless-6.2.0-4.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-6.2.0-4.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-gl-6.2.0-4.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-6.2.0-4.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-gl-6.2.0-4.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-6.2.0-4.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-6.2.0-4.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-6.2.0-4.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-6.2.0-4.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-6.2.0-4.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-smartcard-6.2.0-4.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-vhost-user-gpu-6.2.0-4.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-6.2.0-4.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-core-6.2.0-4.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-user-6.2.0-4.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-6.2.0-4.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-6.2.0-4.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-6.2.0-4.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-x86-6.2.0-4.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-x86-core-6.2.0-4.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-6.2.0-4.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-6.2.0-4.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-6.2.0-4.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-6.2.0-4.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-6.2.0-4.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-6.2.0-4.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-cris-6.2.0-4.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-cris-core-6.2.0-4.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.2.0-4 https://nvd.nist.gov/vuln/detail/CVE-2021-4206 12139 qemu qemu 12140 qemu-6.2.0-4.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-common-6.2.0-4.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-docs-6.2.0-4.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-img-6.2.0-4.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-guest-agent-6.2.0-4.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-tools-6.2.0-4.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-pr-helper-6.2.0-4.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-virtiofsd-6.2.0-4.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-tests-6.2.0-4.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-curl-6.2.0-4.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-6.2.0-4.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-rbd-6.2.0-4.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-opengl-6.2.0-4.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-dmg-6.2.0-4.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-nfs-6.2.0-4.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-6.2.0-4.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-oss-6.2.0-4.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-curses-6.2.0-4.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-gtk-6.2.0-4.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-egl-headless-6.2.0-4.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-6.2.0-4.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-gl-6.2.0-4.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-6.2.0-4.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-gl-6.2.0-4.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-6.2.0-4.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-6.2.0-4.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-6.2.0-4.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-6.2.0-4.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-6.2.0-4.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-smartcard-6.2.0-4.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-vhost-user-gpu-6.2.0-4.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-6.2.0-4.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-core-6.2.0-4.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-user-6.2.0-4.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-6.2.0-4.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-6.2.0-4.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-6.2.0-4.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-6.2.0-4.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-6.2.0-4.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-6.2.0-4.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-6.2.0-4.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-6.2.0-4.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-6.2.0-4.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-6.2.0-4.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-core-6.2.0-4.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-hppa-6.2.0-4.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.2.0-4 https://nvd.nist.gov/vuln/detail/CVE-2021-4206 12140 qemu qemu 12356 qemu-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-common-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-docs-8.2.0-9.azl3.noarch.rpm 0001-01-01T00:00:00 qemu-img-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-guest-agent-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-tools-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-pr-helper-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-tests-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-curl-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-dmg-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-nfs-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-oss-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-curses-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-user-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-ipxe-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-cris-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-cris-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-hppa-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-hppa-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-m68k-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-m68k-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-mips-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.2.0-18 https://nvd.nist.gov/vuln/detail/CVE-2021-4206 12356 qemu qemu 12357 qemu-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-common-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-docs-8.2.0-9.azl3.noarch.rpm 0001-01-01T00:00:00 qemu-img-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-guest-agent-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-tools-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-pr-helper-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-tests-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-curl-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-dmg-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-nfs-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-oss-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-curses-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-user-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-ipxe-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-hppa-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-hppa-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-m68k-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-m68k-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.2.0-18 https://nvd.nist.gov/vuln/detail/CVE-2021-4206 12357 qemu 1.0 2024-08-04T17:00:00 <p>Information published.</p> 1.1 2024-08-05T17:00:00 <p>Information published.</p> 1.2 2024-08-06T17:00:00 <p>Information published.</p> 1.3 2024-08-07T17:00:00 <p>Information published.</p> 1.4 2024-08-08T17:00:00 <p>Information published.</p> 1.5 2024-08-09T17:00:00 <p>Information published.</p> 1.6 2024-08-10T17:00:00 <p>Information published.</p> 1.7 2024-08-11T17:00:00 <p>Information published.</p> 1.8 2024-08-15T17:00:00 <p>Information published.</p> 1.9 2024-08-16T17:00:00 <p>Information published.</p> 2.0 2024-08-17T17:00:00 <p>Information published.</p> 2.1 2024-08-18T17:00:00 <p>Information published.</p> 2.2 2024-08-19T17:00:00 <p>Information published.</p> 2.3 2024-08-20T17:00:00 <p>Information published.</p> 2.4 2024-08-21T17:00:00 <p>Information published.</p> 2.5 2024-08-22T17:00:00 <p>Information published.</p> 2.6 2024-08-23T17:00:00 <p>Information published.</p> 2.7 2024-08-24T17:00:00 <p>Information published.</p> 2.8 2024-08-25T17:00:00 <p>Information published.</p> 2.9 2024-08-26T17:00:00 <p>Information published.</p> 3.0 2024-08-27T17:00:00 <p>Information published.</p> 3.1 2024-08-28T17:00:00 <p>Information published.</p> 3.2 2024-08-29T17:00:00 <p>Information published.</p> 3.3 2024-08-30T17:00:00 <p>Information published.</p> 3.4 2024-08-31T17:00:00 <p>Information published.</p> 3.5 2024-09-01T17:00:00 <p>Information published.</p> 3.6 2024-09-02T17:00:00 <p>Information published.</p> 3.7 2024-09-04T17:00:00 <p>Information published.</p> 3.8 2024-09-05T17:00:00 <p>Information published.</p> 3.9 2024-09-06T17:00:00 <p>Information published.</p> 4.0 2024-09-07T17:00:00 <p>Information published.</p> 4.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2021-4207 https://nvd.nist.gov/vuln/detail/CVE-2021-4207 https://nvd.nist.gov/vuln/detail/CVE-2021-4207 https://nvd.nist.gov/vuln/detail/CVE-2021-4207 https://nvd.nist.gov/vuln/detail/CVE-2021-4207 https://nvd.nist.gov/vuln/detail/CVE-2021-4207 Mariner secalert@redhat.com Yes CVE-2021-4207 12137 12138 12139 12140 12356 12357 12137 12138 12139 12140 12356 12357 12137 12138 12139 12140 12356 12357 8.2 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H 12137 8.2 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H 12138 8.2 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H 12139 8.2 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H 12140 8.2 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H 12356 8.2 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H 12357 qemu-kvm 12137 qemu-kvm-4.2.0-48.cm1.x86_64.rpm 0001-01-01T00:00:00 qemu-img-4.2.0-48.cm1.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 4.2.0-48 https://nvd.nist.gov/vuln/detail/CVE-2021-4207 12137 qemu-kvm qemu-kvm 12138 qemu-kvm-4.2.0-48.cm1.aarch64.rpm 0001-01-01T00:00:00 qemu-img-4.2.0-48.cm1.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 4.2.0-48 https://nvd.nist.gov/vuln/detail/CVE-2021-4207 12138 qemu-kvm qemu 12139 qemu-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-common-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-docs-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-img-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-guest-agent-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-tools-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-pr-helper-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-virtiofsd-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-tests-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-curl-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-rbd-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-opengl-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-dmg-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-nfs-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-oss-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-curses-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-gtk-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-egl-headless-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-gl-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-gl-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-smartcard-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-vhost-user-gpu-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-core-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-user-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-x86-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-x86-core-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-cris-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.2.0-13 https://nvd.nist.gov/vuln/detail/CVE-2021-4207 12139 qemu qemu 12140 qemu-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-common-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-docs-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-img-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-guest-agent-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-tools-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-pr-helper-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-virtiofsd-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-tests-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-curl-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-rbd-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-opengl-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-dmg-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-nfs-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-oss-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-curses-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-gtk-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-egl-headless-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-gl-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-gl-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-smartcard-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-vhost-user-gpu-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-core-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-user-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-core-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.2.0-13 https://nvd.nist.gov/vuln/detail/CVE-2021-4207 12140 qemu qemu 12356 qemu-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-common-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-docs-8.2.0-9.azl3.noarch.rpm 0001-01-01T00:00:00 qemu-img-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-guest-agent-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-tools-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-pr-helper-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-tests-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-curl-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-dmg-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-nfs-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-oss-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-curses-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-user-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-ipxe-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-cris-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-cris-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-hppa-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-hppa-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-m68k-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-m68k-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-mips-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.2.0-18 https://nvd.nist.gov/vuln/detail/CVE-2021-4207 12356 qemu qemu 12357 qemu-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-common-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-docs-8.2.0-9.azl3.noarch.rpm 0001-01-01T00:00:00 qemu-img-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-guest-agent-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-tools-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-pr-helper-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-tests-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-curl-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-dmg-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-nfs-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-oss-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-curses-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-user-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-ipxe-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-hppa-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-hppa-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-m68k-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-m68k-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.2.0-18 https://nvd.nist.gov/vuln/detail/CVE-2021-4207 12357 qemu 1.8 2024-08-15T17:00:00 <p>Information published.</p> 1.0 2024-08-04T17:00:00 <p>Information published.</p> 1.1 2024-08-05T17:00:00 <p>Information published.</p> 1.2 2024-08-06T17:00:00 <p>Information published.</p> 1.3 2024-08-07T17:00:00 <p>Information published.</p> 1.4 2024-08-08T17:00:00 <p>Information published.</p> 1.5 2024-08-09T17:00:00 <p>Information published.</p> 1.6 2024-08-10T17:00:00 <p>Information published.</p> 1.7 2024-08-11T17:00:00 <p>Information published.</p> 1.9 2024-08-16T17:00:00 <p>Information published.</p> 2.0 2024-08-17T17:00:00 <p>Information published.</p> 2.1 2024-08-18T17:00:00 <p>Information published.</p> 2.2 2024-08-19T17:00:00 <p>Information published.</p> 2.3 2024-08-20T17:00:00 <p>Information published.</p> 2.4 2024-08-21T17:00:00 <p>Information published.</p> 2.5 2024-08-22T17:00:00 <p>Information published.</p> 2.6 2024-08-23T17:00:00 <p>Information published.</p> 2.7 2024-08-24T17:00:00 <p>Information published.</p> 2.8 2024-08-25T17:00:00 <p>Information published.</p> 2.9 2024-08-26T17:00:00 <p>Information published.</p> 3.0 2024-08-27T17:00:00 <p>Information published.</p> 3.1 2024-08-28T17:00:00 <p>Information published.</p> 3.2 2024-08-29T17:00:00 <p>Information published.</p> 3.3 2024-08-30T17:00:00 <p>Information published.</p> 3.4 2024-08-31T17:00:00 <p>Information published.</p> 3.5 2024-09-01T17:00:00 <p>Information published.</p> 3.6 2024-09-02T17:00:00 <p>Information published.</p> 3.7 2024-09-04T17:00:00 <p>Information published.</p> 3.8 2024-09-05T17:00:00 <p>Information published.</p> 3.9 2024-09-06T17:00:00 <p>Information published.</p> 4.0 2024-09-07T17:00:00 <p>Information published.</p> 4.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2022-26354 https://nvd.nist.gov/vuln/detail/CVE-2022-26354 https://nvd.nist.gov/vuln/detail/CVE-2022-26354 https://nvd.nist.gov/vuln/detail/CVE-2022-26354 https://nvd.nist.gov/vuln/detail/CVE-2022-26354 https://nvd.nist.gov/vuln/detail/CVE-2022-26354 Mariner secalert@redhat.com Yes CVE-2022-26354 12137 12138 12139 12140 12356 12357 12137 12138 12139 12140 12356 12357 12137 12138 12139 12140 12356 12357 3.2 3.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L 12137 3.2 3.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L 12138 3.2 3.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L 12139 3.2 3.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L 12140 3.2 3.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L 12356 3.2 3.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L 12357 qemu-kvm 12137 qemu-kvm-4.2.0-48.cm1.x86_64.rpm 0001-01-01T00:00:00 qemu-img-4.2.0-48.cm1.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 4.2.0-48 https://nvd.nist.gov/vuln/detail/CVE-2022-26354 12137 qemu-kvm qemu-kvm 12138 qemu-kvm-4.2.0-48.cm1.aarch64.rpm 0001-01-01T00:00:00 qemu-img-4.2.0-48.cm1.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 4.2.0-48 https://nvd.nist.gov/vuln/detail/CVE-2022-26354 12138 qemu-kvm qemu 12139 qemu-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-common-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-docs-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-img-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-guest-agent-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-tools-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-pr-helper-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-virtiofsd-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-tests-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-curl-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-rbd-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-opengl-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-dmg-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-nfs-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-oss-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-curses-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-gtk-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-egl-headless-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-gl-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-gl-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-smartcard-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-vhost-user-gpu-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-core-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-user-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-x86-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-x86-core-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-cris-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-cris-core-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.2.0-2 https://nvd.nist.gov/vuln/detail/CVE-2022-26354 12139 qemu qemu 12140 qemu-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-common-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-docs-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-img-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-guest-agent-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-tools-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-pr-helper-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-virtiofsd-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-tests-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-curl-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-rbd-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-opengl-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-dmg-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-nfs-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-oss-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-curses-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-gtk-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-egl-headless-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-gl-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-gl-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-smartcard-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-vhost-user-gpu-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-core-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-user-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-core-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-hppa-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.2.0-2 https://nvd.nist.gov/vuln/detail/CVE-2022-26354 12140 qemu qemu 12356 qemu-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-common-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-docs-8.2.0-9.azl3.noarch.rpm 0001-01-01T00:00:00 qemu-img-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-guest-agent-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-tools-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-pr-helper-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-tests-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-curl-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-dmg-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-nfs-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-oss-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-curses-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-user-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-ipxe-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-cris-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-cris-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-hppa-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-hppa-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-m68k-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-m68k-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-mips-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.2.0-18 https://nvd.nist.gov/vuln/detail/CVE-2022-26354 12356 qemu qemu 12357 qemu-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-common-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-docs-8.2.0-9.azl3.noarch.rpm 0001-01-01T00:00:00 qemu-img-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-guest-agent-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-tools-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-pr-helper-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-tests-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-curl-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-dmg-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-nfs-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-oss-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-curses-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-user-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-ipxe-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-hppa-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-hppa-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-m68k-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-m68k-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.2.0-18 https://nvd.nist.gov/vuln/detail/CVE-2022-26354 12357 qemu 1.0 2024-08-04T17:00:00 <p>Information published.</p> 1.1 2024-08-05T17:00:00 <p>Information published.</p> 1.2 2024-08-06T17:00:00 <p>Information published.</p> 1.3 2024-08-07T17:00:00 <p>Information published.</p> 1.4 2024-08-08T17:00:00 <p>Information published.</p> 1.5 2024-08-09T17:00:00 <p>Information published.</p> 1.6 2024-08-10T17:00:00 <p>Information published.</p> 1.7 2024-08-11T17:00:00 <p>Information published.</p> 1.8 2024-08-15T17:00:00 <p>Information published.</p> 1.9 2024-08-16T17:00:00 <p>Information published.</p> 2.0 2024-08-17T17:00:00 <p>Information published.</p> 2.1 2024-08-18T17:00:00 <p>Information published.</p> 2.2 2024-08-19T17:00:00 <p>Information published.</p> 2.3 2024-08-20T17:00:00 <p>Information published.</p> 2.4 2024-08-21T17:00:00 <p>Information published.</p> 2.5 2024-08-22T17:00:00 <p>Information published.</p> 2.6 2024-08-23T17:00:00 <p>Information published.</p> 2.7 2024-08-24T17:00:00 <p>Information published.</p> 2.8 2024-08-25T17:00:00 <p>Information published.</p> 2.9 2024-08-26T17:00:00 <p>Information published.</p> 3.0 2024-08-27T17:00:00 <p>Information published.</p> 3.1 2024-08-28T17:00:00 <p>Information published.</p> 3.2 2024-08-29T17:00:00 <p>Information published.</p> 3.3 2024-08-30T17:00:00 <p>Information published.</p> 3.4 2024-08-31T17:00:00 <p>Information published.</p> 3.5 2024-09-01T17:00:00 <p>Information published.</p> 3.6 2024-09-02T17:00:00 <p>Information published.</p> 3.7 2024-09-04T17:00:00 <p>Information published.</p> 3.8 2024-09-05T17:00:00 <p>Information published.</p> 3.9 2024-09-06T17:00:00 <p>Information published.</p> 4.0 2024-09-07T17:00:00 <p>Information published.</p> 4.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2022-26353 https://nvd.nist.gov/vuln/detail/CVE-2022-26353 https://nvd.nist.gov/vuln/detail/CVE-2022-26353 https://nvd.nist.gov/vuln/detail/CVE-2022-26353 Mariner secalert@redhat.com Yes CVE-2022-26353 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12139 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12140 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12356 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12357 qemu 12139 qemu-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-common-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-docs-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-img-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-guest-agent-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-tools-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-pr-helper-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-virtiofsd-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-tests-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-curl-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-rbd-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-opengl-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-dmg-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-nfs-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-oss-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-curses-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-gtk-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-egl-headless-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-gl-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-gl-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-smartcard-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-vhost-user-gpu-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-core-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-user-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-x86-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-x86-core-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-cris-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-cris-core-6.2.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.2.0-3 https://nvd.nist.gov/vuln/detail/CVE-2022-26353 12139 qemu qemu 12140 qemu-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-common-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-docs-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-img-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-guest-agent-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-tools-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-pr-helper-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-virtiofsd-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-tests-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-curl-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-rbd-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-opengl-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-dmg-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-nfs-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-oss-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-curses-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-gtk-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-egl-headless-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-gl-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-gl-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-smartcard-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-vhost-user-gpu-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-core-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-user-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-core-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-hppa-6.2.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.2.0-3 https://nvd.nist.gov/vuln/detail/CVE-2022-26353 12140 qemu qemu 12356 qemu-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-common-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-docs-8.2.0-9.azl3.noarch.rpm 0001-01-01T00:00:00 qemu-img-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-guest-agent-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-tools-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-pr-helper-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-tests-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-curl-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-dmg-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-nfs-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-oss-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-curses-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-user-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-ipxe-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-cris-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-cris-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-hppa-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-hppa-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-m68k-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-m68k-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-mips-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.2.0-18 https://nvd.nist.gov/vuln/detail/CVE-2022-26353 12356 qemu qemu 12357 qemu-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-common-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-docs-8.2.0-9.azl3.noarch.rpm 0001-01-01T00:00:00 qemu-img-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-guest-agent-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-tools-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-pr-helper-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-tests-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-curl-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-dmg-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-nfs-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-oss-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-curses-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-user-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-ipxe-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-hppa-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-hppa-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-m68k-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-m68k-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.2.0-18 https://nvd.nist.gov/vuln/detail/CVE-2022-26353 12357 qemu 1.0 2024-08-04T17:00:00 <p>Information published.</p> 1.1 2024-08-05T17:00:00 <p>Information published.</p> 1.2 2024-08-06T17:00:00 <p>Information published.</p> 1.3 2024-08-07T17:00:00 <p>Information published.</p> 1.4 2024-08-08T17:00:00 <p>Information published.</p> 1.5 2024-08-09T17:00:00 <p>Information published.</p> 1.6 2024-08-10T17:00:00 <p>Information published.</p> 1.7 2024-08-11T17:00:00 <p>Information published.</p> 1.8 2024-08-15T17:00:00 <p>Information published.</p> 1.9 2024-08-16T17:00:00 <p>Information published.</p> 2.0 2024-08-17T17:00:00 <p>Information published.</p> 2.1 2024-08-18T17:00:00 <p>Information published.</p> 2.2 2024-08-19T17:00:00 <p>Information published.</p> 2.3 2024-08-20T17:00:00 <p>Information published.</p> 2.4 2024-08-21T17:00:00 <p>Information published.</p> 2.5 2024-08-22T17:00:00 <p>Information published.</p> 2.6 2024-08-23T17:00:00 <p>Information published.</p> 2.7 2024-08-24T17:00:00 <p>Information published.</p> 2.8 2024-08-25T17:00:00 <p>Information published.</p> 2.9 2024-08-26T17:00:00 <p>Information published.</p> 3.0 2024-08-27T17:00:00 <p>Information published.</p> 3.1 2024-08-28T17:00:00 <p>Information published.</p> 3.2 2024-08-29T17:00:00 <p>Information published.</p> 3.3 2024-08-30T17:00:00 <p>Information published.</p> 3.4 2024-08-31T17:00:00 <p>Information published.</p> 3.5 2024-09-01T17:00:00 <p>Information published.</p> 3.6 2024-09-02T17:00:00 <p>Information published.</p> 3.7 2024-09-04T17:00:00 <p>Information published.</p> 3.8 2024-09-05T17:00:00 <p>Information published.</p> 3.9 2024-09-06T17:00:00 <p>Information published.</p> 4.0 2024-09-07T17:00:00 <p>Information published.</p> 4.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2022-2962 https://nvd.nist.gov/vuln/detail/CVE-2022-2962 https://nvd.nist.gov/vuln/detail/CVE-2022-2962 https://nvd.nist.gov/vuln/detail/CVE-2022-2962 https://nvd.nist.gov/vuln/detail/CVE-2022-2962 https://nvd.nist.gov/vuln/detail/CVE-2022-2962 Mariner secalert@redhat.com Yes CVE-2022-2962 12137 12138 12139 12140 12356 12357 12137 12138 12139 12140 12356 12357 12137 12138 12139 12140 12356 12357 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12137 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12138 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12139 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12140 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12356 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12357 qemu-kvm 12137 qemu-kvm-4.2.0-48.cm1.x86_64.rpm 0001-01-01T00:00:00 qemu-img-4.2.0-48.cm1.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 4.2.0-48 https://nvd.nist.gov/vuln/detail/CVE-2022-2962 12137 qemu-kvm qemu-kvm 12138 qemu-kvm-4.2.0-48.cm1.aarch64.rpm 0001-01-01T00:00:00 qemu-img-4.2.0-48.cm1.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 4.2.0-48 https://nvd.nist.gov/vuln/detail/CVE-2022-2962 12138 qemu-kvm qemu 12139 qemu-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-common-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-docs-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-img-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-guest-agent-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-tools-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-pr-helper-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-virtiofsd-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-tests-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-curl-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-rbd-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-opengl-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-dmg-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-nfs-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-oss-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-curses-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-gtk-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-egl-headless-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-gl-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-gl-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-smartcard-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-vhost-user-gpu-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-core-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-user-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-x86-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-x86-core-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-cris-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.2.0-13 https://nvd.nist.gov/vuln/detail/CVE-2022-2962 12139 qemu qemu 12140 qemu-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-common-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-docs-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-img-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-guest-agent-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-tools-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-pr-helper-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-virtiofsd-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-tests-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-curl-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-rbd-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-opengl-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-dmg-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-nfs-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-oss-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-curses-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-gtk-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-egl-headless-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-gl-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-gl-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-smartcard-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-vhost-user-gpu-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-core-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-user-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-core-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.2.0-13 https://nvd.nist.gov/vuln/detail/CVE-2022-2962 12140 qemu qemu 12356 qemu-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-common-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-docs-8.2.0-9.azl3.noarch.rpm 0001-01-01T00:00:00 qemu-img-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-guest-agent-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-tools-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-pr-helper-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-tests-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-curl-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-dmg-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-nfs-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-oss-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-curses-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-user-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-ipxe-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-cris-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-cris-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-hppa-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-hppa-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-m68k-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-m68k-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-mips-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.2.0-18 https://nvd.nist.gov/vuln/detail/CVE-2022-2962 12356 qemu qemu 12357 qemu-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-common-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-docs-8.2.0-9.azl3.noarch.rpm 0001-01-01T00:00:00 qemu-img-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-guest-agent-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-tools-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-pr-helper-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-tests-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-curl-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-dmg-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-nfs-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-oss-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-curses-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-user-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-ipxe-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-hppa-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-hppa-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-m68k-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-m68k-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.2.0-18 https://nvd.nist.gov/vuln/detail/CVE-2022-2962 12357 qemu 1.0 2024-08-04T17:00:00 <p>Information published.</p> 1.1 2024-08-05T17:00:00 <p>Information published.</p> 1.2 2024-08-06T17:00:00 <p>Information published.</p> 1.3 2024-08-07T17:00:00 <p>Information published.</p> 1.4 2024-08-08T17:00:00 <p>Information published.</p> 1.5 2024-08-09T17:00:00 <p>Information published.</p> 1.6 2024-08-10T17:00:00 <p>Information published.</p> 1.7 2024-08-11T17:00:00 <p>Information published.</p> 1.8 2024-08-15T17:00:00 <p>Information published.</p> 1.9 2024-08-16T17:00:00 <p>Information published.</p> 2.0 2024-08-17T17:00:00 <p>Information published.</p> 2.1 2024-08-18T17:00:00 <p>Information published.</p> 2.2 2024-08-19T17:00:00 <p>Information published.</p> 2.3 2024-08-20T17:00:00 <p>Information published.</p> 2.4 2024-08-21T17:00:00 <p>Information published.</p> 2.5 2024-08-22T17:00:00 <p>Information published.</p> 2.6 2024-08-23T17:00:00 <p>Information published.</p> 2.7 2024-08-24T17:00:00 <p>Information published.</p> 2.8 2024-08-25T17:00:00 <p>Information published.</p> 2.9 2024-08-26T17:00:00 <p>Information published.</p> 3.0 2024-08-27T17:00:00 <p>Information published.</p> 3.1 2024-08-28T17:00:00 <p>Information published.</p> 3.2 2024-08-29T17:00:00 <p>Information published.</p> 3.3 2024-08-30T17:00:00 <p>Information published.</p> 3.4 2024-08-31T17:00:00 <p>Information published.</p> 3.5 2024-09-01T17:00:00 <p>Information published.</p> 3.6 2024-09-02T17:00:00 <p>Information published.</p> 3.7 2024-09-04T17:00:00 <p>Information published.</p> 3.8 2024-09-05T17:00:00 <p>Information published.</p> 3.9 2024-09-06T17:00:00 <p>Information published.</p> 4.0 2024-09-07T17:00:00 <p>Information published.</p> 4.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2022-35414 https://nvd.nist.gov/vuln/detail/CVE-2022-35414 https://nvd.nist.gov/vuln/detail/CVE-2022-35414 https://nvd.nist.gov/vuln/detail/CVE-2022-35414 https://nvd.nist.gov/vuln/detail/CVE-2022-35414 https://nvd.nist.gov/vuln/detail/CVE-2022-35414 Mariner cve@mitre.org Yes CVE-2022-35414 12137 12138 12139 12140 12356 12357 12137 12138 12139 12140 12356 12357 12137 12138 12139 12140 12356 12357 8.8 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H 12137 8.8 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H 12138 8.8 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H 12139 8.8 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H 12140 8.8 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H 12356 8.8 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H 12357 qemu-kvm 12137 qemu-kvm-4.2.0-43.cm1.x86_64.rpm 0001-01-01T00:00:00 qemu-img-4.2.0-43.cm1.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 4.2.0-43 https://nvd.nist.gov/vuln/detail/CVE-2022-35414 12137 qemu-kvm qemu-kvm 12138 qemu-kvm-4.2.0-43.cm1.aarch64.rpm 0001-01-01T00:00:00 qemu-img-4.2.0-43.cm1.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 4.2.0-43 https://nvd.nist.gov/vuln/detail/CVE-2022-35414 12138 qemu-kvm qemu 12139 qemu-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-common-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-docs-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-img-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-guest-agent-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-tools-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-pr-helper-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-virtiofsd-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-tests-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-curl-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-rbd-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-opengl-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-dmg-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-nfs-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-oss-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-curses-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-gtk-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-egl-headless-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-gl-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-gl-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-smartcard-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-vhost-user-gpu-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-core-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-user-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-x86-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-x86-core-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-cris-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-cris-core-6.2.0-7.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.2.0-7 https://nvd.nist.gov/vuln/detail/CVE-2022-35414 12139 qemu qemu 12140 qemu-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-common-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-docs-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-img-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-guest-agent-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-tools-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-pr-helper-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-virtiofsd-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-tests-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-curl-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-rbd-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-opengl-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-dmg-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-nfs-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-oss-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-curses-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-gtk-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-egl-headless-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-gl-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-gl-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-smartcard-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-vhost-user-gpu-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-core-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-user-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-core-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-hppa-6.2.0-7.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.2.0-7 https://nvd.nist.gov/vuln/detail/CVE-2022-35414 12140 qemu qemu 12356 qemu-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-common-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-docs-8.2.0-9.azl3.noarch.rpm 0001-01-01T00:00:00 qemu-img-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-guest-agent-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-tools-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-pr-helper-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-tests-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-curl-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-dmg-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-nfs-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-oss-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-curses-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-user-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-ipxe-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-cris-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-cris-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-hppa-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-hppa-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-m68k-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-m68k-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-mips-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.2.0-18 https://nvd.nist.gov/vuln/detail/CVE-2022-35414 12356 qemu qemu 12357 qemu-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-common-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-docs-8.2.0-9.azl3.noarch.rpm 0001-01-01T00:00:00 qemu-img-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-guest-agent-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-tools-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-pr-helper-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-tests-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-curl-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-dmg-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-nfs-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-oss-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-curses-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-user-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-ipxe-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-hppa-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-hppa-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-m68k-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-m68k-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.2.0-18 https://nvd.nist.gov/vuln/detail/CVE-2022-35414 12357 qemu 1.0 2024-08-04T17:00:00 <p>Information published.</p> 1.1 2024-08-05T17:00:00 <p>Information published.</p> 1.2 2024-08-06T17:00:00 <p>Information published.</p> 1.3 2024-08-07T17:00:00 <p>Information published.</p> 1.4 2024-08-08T17:00:00 <p>Information published.</p> 1.5 2024-08-09T17:00:00 <p>Information published.</p> 1.6 2024-08-10T17:00:00 <p>Information published.</p> 1.7 2024-08-11T17:00:00 <p>Information published.</p> 1.8 2024-08-15T17:00:00 <p>Information published.</p> 1.9 2024-08-16T17:00:00 <p>Information published.</p> 2.0 2024-08-17T17:00:00 <p>Information published.</p> 2.1 2024-08-18T17:00:00 <p>Information published.</p> 2.2 2024-08-19T17:00:00 <p>Information published.</p> 2.3 2024-08-20T17:00:00 <p>Information published.</p> 2.4 2024-08-21T17:00:00 <p>Information published.</p> 2.5 2024-08-22T17:00:00 <p>Information published.</p> 2.6 2024-08-23T17:00:00 <p>Information published.</p> 2.7 2024-08-24T17:00:00 <p>Information published.</p> 2.8 2024-08-25T17:00:00 <p>Information published.</p> 2.9 2024-08-26T17:00:00 <p>Information published.</p> 3.0 2024-08-27T17:00:00 <p>Information published.</p> 3.1 2024-08-28T17:00:00 <p>Information published.</p> 3.2 2024-08-29T17:00:00 <p>Information published.</p> 3.3 2024-08-30T17:00:00 <p>Information published.</p> 3.4 2024-08-31T17:00:00 <p>Information published.</p> 3.5 2024-09-01T17:00:00 <p>Information published.</p> 3.6 2024-09-02T17:00:00 <p>Information published.</p> 3.7 2024-09-04T17:00:00 <p>Information published.</p> 3.8 2024-09-05T17:00:00 <p>Information published.</p> 3.9 2024-09-06T17:00:00 <p>Information published.</p> 4.0 2024-09-07T17:00:00 <p>Information published.</p> 4.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2022-3165 https://nvd.nist.gov/vuln/detail/CVE-2022-3165 https://nvd.nist.gov/vuln/detail/CVE-2022-3165 https://nvd.nist.gov/vuln/detail/CVE-2022-3165 Mariner secalert@redhat.com Yes CVE-2022-3165 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12139 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12140 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12356 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12357 qemu 12139 qemu-6.2.0-15.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-common-6.2.0-15.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-docs-6.2.0-15.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-img-6.2.0-15.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-guest-agent-6.2.0-15.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-tools-6.2.0-15.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-pr-helper-6.2.0-15.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-virtiofsd-6.2.0-15.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-tests-6.2.0-15.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-curl-6.2.0-15.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-6.2.0-15.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-rbd-6.2.0-15.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-opengl-6.2.0-15.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-dmg-6.2.0-15.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-nfs-6.2.0-15.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-6.2.0-15.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-oss-6.2.0-15.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-curses-6.2.0-15.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-gtk-6.2.0-15.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-egl-headless-6.2.0-15.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-6.2.0-15.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-gl-6.2.0-15.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-6.2.0-15.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-gl-6.2.0-15.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-6.2.0-15.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-6.2.0-15.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-6.2.0-15.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-6.2.0-15.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-6.2.0-15.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-smartcard-6.2.0-15.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-vhost-user-gpu-6.2.0-15.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-6.2.0-15.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-core-6.2.0-15.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-user-6.2.0-15.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-6.2.0-15.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ipxe-6.2.0-15.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-6.2.0-15.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-6.2.0-15.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-x86-6.2.0-15.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-x86-core-6.2.0-15.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-6.2.0-15.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-6.2.0-15.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-6.2.0-15.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-6.2.0-15.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-6.2.0-15.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-6.2.0-15.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.2.0-15 https://nvd.nist.gov/vuln/detail/CVE-2022-3165 12139 qemu qemu 12140 qemu-6.2.0-15.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-common-6.2.0-15.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-docs-6.2.0-15.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-img-6.2.0-15.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-guest-agent-6.2.0-15.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-tools-6.2.0-15.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-pr-helper-6.2.0-15.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-virtiofsd-6.2.0-15.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-tests-6.2.0-15.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-curl-6.2.0-15.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-6.2.0-15.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-rbd-6.2.0-15.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-opengl-6.2.0-15.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-dmg-6.2.0-15.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-nfs-6.2.0-15.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-6.2.0-15.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-oss-6.2.0-15.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-curses-6.2.0-15.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-gtk-6.2.0-15.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-egl-headless-6.2.0-15.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-6.2.0-15.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-gl-6.2.0-15.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-6.2.0-15.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-gl-6.2.0-15.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-6.2.0-15.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-6.2.0-15.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-6.2.0-15.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-6.2.0-15.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-6.2.0-15.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-smartcard-6.2.0-15.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-vhost-user-gpu-6.2.0-15.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-6.2.0-15.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-core-6.2.0-15.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-user-6.2.0-15.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-6.2.0-15.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ipxe-6.2.0-15.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-6.2.0-15.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-6.2.0-15.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-6.2.0-15.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-6.2.0-15.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-6.2.0-15.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-6.2.0-15.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-6.2.0-15.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-6.2.0-15.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-6.2.0-15.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.2.0-15 https://nvd.nist.gov/vuln/detail/CVE-2022-3165 12140 qemu qemu 12356 qemu-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-common-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-docs-8.2.0-9.azl3.noarch.rpm 0001-01-01T00:00:00 qemu-img-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-guest-agent-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-tools-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-pr-helper-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-tests-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-curl-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-dmg-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-nfs-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-oss-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-curses-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-user-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-ipxe-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-cris-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-cris-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-hppa-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-hppa-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-m68k-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-m68k-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-mips-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.2.0-18 https://nvd.nist.gov/vuln/detail/CVE-2022-3165 12356 qemu qemu 12357 qemu-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-common-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-docs-8.2.0-9.azl3.noarch.rpm 0001-01-01T00:00:00 qemu-img-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-guest-agent-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-tools-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-pr-helper-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-tests-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-curl-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-dmg-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-nfs-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-oss-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-curses-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-user-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-ipxe-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-hppa-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-hppa-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-m68k-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-m68k-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.2.0-18 https://nvd.nist.gov/vuln/detail/CVE-2022-3165 12357 qemu 1.0 2024-08-04T17:00:00 <p>Information published.</p> 1.1 2024-08-05T17:00:00 <p>Information published.</p> 1.2 2024-08-06T17:00:00 <p>Information published.</p> 1.3 2024-08-07T17:00:00 <p>Information published.</p> 1.4 2024-08-08T17:00:00 <p>Information published.</p> 1.5 2024-08-09T17:00:00 <p>Information published.</p> 1.6 2024-08-10T17:00:00 <p>Information published.</p> 1.7 2024-08-11T17:00:00 <p>Information published.</p> 1.8 2024-08-15T17:00:00 <p>Information published.</p> 1.9 2024-08-16T17:00:00 <p>Information published.</p> 2.0 2024-08-17T17:00:00 <p>Information published.</p> 2.1 2024-08-18T17:00:00 <p>Information published.</p> 2.2 2024-08-19T17:00:00 <p>Information published.</p> 2.3 2024-08-20T17:00:00 <p>Information published.</p> 2.4 2024-08-21T17:00:00 <p>Information published.</p> 2.5 2024-08-22T17:00:00 <p>Information published.</p> 2.6 2024-08-23T17:00:00 <p>Information published.</p> 2.7 2024-08-24T17:00:00 <p>Information published.</p> 2.8 2024-08-25T17:00:00 <p>Information published.</p> 2.9 2024-08-26T17:00:00 <p>Information published.</p> 3.0 2024-08-27T17:00:00 <p>Information published.</p> 3.1 2024-08-28T17:00:00 <p>Information published.</p> 3.2 2024-08-29T17:00:00 <p>Information published.</p> 3.3 2024-08-30T17:00:00 <p>Information published.</p> 3.4 2024-08-31T17:00:00 <p>Information published.</p> 3.5 2024-09-01T17:00:00 <p>Information published.</p> 3.6 2024-09-02T17:00:00 <p>Information published.</p> 3.7 2024-09-04T17:00:00 <p>Information published.</p> 3.8 2024-09-05T17:00:00 <p>Information published.</p> 3.9 2024-09-06T17:00:00 <p>Information published.</p> 4.0 2024-09-07T17:00:00 <p>Information published.</p> 4.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2022-36648 https://nvd.nist.gov/vuln/detail/CVE-2022-36648 https://nvd.nist.gov/vuln/detail/CVE-2022-36648 https://nvd.nist.gov/vuln/detail/CVE-2022-36648 Mariner cve@mitre.org Yes CVE-2022-36648 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 10.0 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H 12139 10.0 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H 12140 10.0 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H 12356 10.0 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H 12357 qemu 12139 qemu-6.2.0-17.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-common-6.2.0-17.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-docs-6.2.0-17.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-img-6.2.0-17.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-guest-agent-6.2.0-17.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-tools-6.2.0-17.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-pr-helper-6.2.0-17.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-virtiofsd-6.2.0-17.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-tests-6.2.0-17.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-curl-6.2.0-17.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-6.2.0-17.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-rbd-6.2.0-17.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-opengl-6.2.0-17.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-dmg-6.2.0-17.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-nfs-6.2.0-17.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-6.2.0-17.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-oss-6.2.0-17.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-curses-6.2.0-17.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-gtk-6.2.0-17.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-egl-headless-6.2.0-17.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-6.2.0-17.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-gl-6.2.0-17.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-6.2.0-17.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-gl-6.2.0-17.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-6.2.0-17.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-6.2.0-17.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-6.2.0-17.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-6.2.0-17.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-6.2.0-17.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-smartcard-6.2.0-17.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-vhost-user-gpu-6.2.0-17.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-6.2.0-17.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-core-6.2.0-17.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-user-6.2.0-17.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-6.2.0-17.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ipxe-6.2.0-17.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-6.2.0-17.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-6.2.0-17.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-x86-6.2.0-17.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-x86-core-6.2.0-17.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-6.2.0-17.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-6.2.0-17.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-6.2.0-17.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-6.2.0-17.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-6.2.0-17.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-6.2.0-17.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.2.0-17 https://nvd.nist.gov/vuln/detail/CVE-2022-36648 12139 qemu qemu 12140 qemu-6.2.0-17.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-common-6.2.0-17.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-docs-6.2.0-17.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-img-6.2.0-17.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-guest-agent-6.2.0-17.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-tools-6.2.0-17.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-pr-helper-6.2.0-17.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-virtiofsd-6.2.0-17.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-tests-6.2.0-17.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-curl-6.2.0-17.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-6.2.0-17.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-rbd-6.2.0-17.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-opengl-6.2.0-17.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-dmg-6.2.0-17.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-nfs-6.2.0-17.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-6.2.0-17.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-oss-6.2.0-17.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-curses-6.2.0-17.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-gtk-6.2.0-17.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-egl-headless-6.2.0-17.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-6.2.0-17.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-gl-6.2.0-17.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-6.2.0-17.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-gl-6.2.0-17.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-6.2.0-17.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-6.2.0-17.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-6.2.0-17.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-6.2.0-17.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-6.2.0-17.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-smartcard-6.2.0-17.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-vhost-user-gpu-6.2.0-17.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-6.2.0-17.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-core-6.2.0-17.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-user-6.2.0-17.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-6.2.0-17.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ipxe-6.2.0-17.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-6.2.0-17.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-6.2.0-17.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-6.2.0-17.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-6.2.0-17.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-6.2.0-17.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-6.2.0-17.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-6.2.0-17.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-6.2.0-17.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-6.2.0-17.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.2.0-17 https://nvd.nist.gov/vuln/detail/CVE-2022-36648 12140 qemu qemu 12356 qemu-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-common-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-docs-8.2.0-9.azl3.noarch.rpm 0001-01-01T00:00:00 qemu-img-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-guest-agent-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-tools-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-pr-helper-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-tests-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-curl-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-dmg-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-nfs-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-oss-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-curses-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-user-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-ipxe-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-cris-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-cris-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-hppa-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-hppa-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-m68k-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-m68k-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-mips-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.2.0-18 https://nvd.nist.gov/vuln/detail/CVE-2022-36648 12356 qemu qemu 12357 qemu-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-common-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-docs-8.2.0-9.azl3.noarch.rpm 0001-01-01T00:00:00 qemu-img-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-guest-agent-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-tools-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-pr-helper-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-tests-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-curl-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-dmg-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-nfs-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-oss-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-curses-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-user-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-ipxe-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-hppa-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-hppa-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-m68k-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-m68k-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.2.0-18 https://nvd.nist.gov/vuln/detail/CVE-2022-36648 12357 qemu 1.0 2024-08-04T17:00:00 <p>Information published.</p> 1.1 2024-08-05T17:00:00 <p>Information published.</p> 1.2 2024-08-06T17:00:00 <p>Information published.</p> 1.3 2024-08-07T17:00:00 <p>Information published.</p> 1.4 2024-08-08T17:00:00 <p>Information published.</p> 1.5 2024-08-09T17:00:00 <p>Information published.</p> 1.6 2024-08-10T17:00:00 <p>Information published.</p> 1.7 2024-08-11T17:00:00 <p>Information published.</p> 1.8 2024-08-15T17:00:00 <p>Information published.</p> 1.9 2024-08-16T17:00:00 <p>Information published.</p> 2.0 2024-08-17T17:00:00 <p>Information published.</p> 2.1 2024-08-18T17:00:00 <p>Information published.</p> 2.2 2024-08-19T17:00:00 <p>Information published.</p> 2.3 2024-08-20T17:00:00 <p>Information published.</p> 2.4 2024-08-21T17:00:00 <p>Information published.</p> 2.5 2024-08-22T17:00:00 <p>Information published.</p> 2.6 2024-08-23T17:00:00 <p>Information published.</p> 2.7 2024-08-24T17:00:00 <p>Information published.</p> 2.8 2024-08-25T17:00:00 <p>Information published.</p> 2.9 2024-08-26T17:00:00 <p>Information published.</p> 3.0 2024-08-27T17:00:00 <p>Information published.</p> 3.1 2024-08-28T17:00:00 <p>Information published.</p> 3.2 2024-08-29T17:00:00 <p>Information published.</p> 3.3 2024-08-30T17:00:00 <p>Information published.</p> 3.4 2024-08-31T17:00:00 <p>Information published.</p> 3.5 2024-09-01T17:00:00 <p>Information published.</p> 3.6 2024-09-02T17:00:00 <p>Information published.</p> 3.7 2024-09-04T17:00:00 <p>Information published.</p> 3.8 2024-09-05T17:00:00 <p>Information published.</p> 3.9 2024-09-06T17:00:00 <p>Information published.</p> 4.0 2024-09-07T17:00:00 <p>Information published.</p> 4.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-39936 https://nvd.nist.gov/vuln/detail/CVE-2024-39936 https://nvd.nist.gov/vuln/detail/CVE-2024-39936 https://nvd.nist.gov/vuln/detail/CVE-2024-39936 Mariner cve@mitre.org Yes CVE-2024-39936 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N 12139 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N 12140 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N 12356 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N 12357 qt5-qtbase 12139 qt5-qtbase-5.12.11-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qt5-qtbase-common-5.12.11-13.cm2.noarch.rpm 0001-01-01T00:00:00 qt5-qtbase-devel-5.12.11-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qt5-qtbase-private-devel-5.12.11-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qt5-qtbase-examples-5.12.11-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qt5-qtbase-static-5.12.11-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qt5-qtbase-gui-5.12.11-13.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.12.11-13 https://nvd.nist.gov/vuln/detail/CVE-2024-39936 12139 qt5-qtbase qt5-qtbase 12140 qt5-qtbase-5.12.11-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qt5-qtbase-common-5.12.11-13.cm2.noarch.rpm 0001-01-01T00:00:00 qt5-qtbase-devel-5.12.11-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qt5-qtbase-private-devel-5.12.11-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qt5-qtbase-examples-5.12.11-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qt5-qtbase-static-5.12.11-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qt5-qtbase-gui-5.12.11-13.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.12.11-13 https://nvd.nist.gov/vuln/detail/CVE-2024-39936 12140 qt5-qtbase qtbase 12356 qtbase-6.6.2-1.azl3.x86_64.rpm 0001-01-01T00:00:00 qtbase-common-6.6.2-1.azl3.noarch.rpm 0001-01-01T00:00:00 qtbase-devel-6.6.2-1.azl3.x86_64.rpm 0001-01-01T00:00:00 qtbase-private-devel-6.6.2-1.azl3.x86_64.rpm 0001-01-01T00:00:00 qtbase-examples-6.6.2-1.azl3.x86_64.rpm 0001-01-01T00:00:00 qtbase-static-6.6.2-1.azl3.x86_64.rpm 0001-01-01T00:00:00 qtbase-gui-6.6.2-1.azl3.x86_64.rpm 0001-01-01T00:00:00 qtbase-debuginfo-6.6.2-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.2-1 https://nvd.nist.gov/vuln/detail/CVE-2024-39936 12356 qtbase qtbase 12357 qtbase-6.6.2-1.azl3.aarch64.rpm 0001-01-01T00:00:00 qtbase-common-6.6.2-1.azl3.noarch.rpm 0001-01-01T00:00:00 qtbase-devel-6.6.2-1.azl3.aarch64.rpm 0001-01-01T00:00:00 qtbase-private-devel-6.6.2-1.azl3.aarch64.rpm 0001-01-01T00:00:00 qtbase-examples-6.6.2-1.azl3.aarch64.rpm 0001-01-01T00:00:00 qtbase-static-6.6.2-1.azl3.aarch64.rpm 0001-01-01T00:00:00 qtbase-gui-6.6.2-1.azl3.aarch64.rpm 0001-01-01T00:00:00 qtbase-debuginfo-6.6.2-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.2-1 https://nvd.nist.gov/vuln/detail/CVE-2024-39936 12357 qtbase 1.0 2024-08-17T17:00:00 <p>Information published.</p> 1.1 2024-08-28T17:00:00 <p>Information published.</p> 1.2 2024-08-29T17:00:00 <p>Information published.</p> 1.3 2024-08-30T17:00:00 <p>Information published.</p> 1.4 2024-08-31T17:00:00 <p>Information published.</p> 1.5 2024-09-01T17:00:00 <p>Information published.</p> 1.6 2024-09-02T17:00:00 <p>Information published.</p> 1.7 2024-09-04T17:00:00 <p>Information published.</p> 1.8 2024-09-05T17:00:00 <p>Information published.</p> 1.9 2024-09-06T17:00:00 <p>Information published.</p> 2.0 2024-09-07T17:00:00 <p>Information published.</p> 2.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2023-3354 https://nvd.nist.gov/vuln/detail/CVE-2023-3354 https://nvd.nist.gov/vuln/detail/CVE-2023-3354 https://nvd.nist.gov/vuln/detail/CVE-2023-3354 Mariner secalert@redhat.com Yes CVE-2023-3354 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12139 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12140 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12356 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12357 qemu 12139 qemu-6.2.0-19.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-common-6.2.0-19.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-docs-6.2.0-19.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-img-6.2.0-19.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-guest-agent-6.2.0-19.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-tools-6.2.0-19.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-pr-helper-6.2.0-19.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-virtiofsd-6.2.0-19.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-tests-6.2.0-19.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-curl-6.2.0-19.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-6.2.0-19.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-rbd-6.2.0-19.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-opengl-6.2.0-19.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-dmg-6.2.0-19.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-nfs-6.2.0-19.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-6.2.0-19.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-oss-6.2.0-19.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-curses-6.2.0-19.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-gtk-6.2.0-19.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-egl-headless-6.2.0-19.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-6.2.0-19.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-gl-6.2.0-19.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-6.2.0-19.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-gl-6.2.0-19.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-6.2.0-19.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-6.2.0-19.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-6.2.0-19.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-6.2.0-19.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-6.2.0-19.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-smartcard-6.2.0-19.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-vhost-user-gpu-6.2.0-19.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-6.2.0-19.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-core-6.2.0-19.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-user-6.2.0-19.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-6.2.0-19.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ipxe-6.2.0-19.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-6.2.0-19.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-6.2.0-19.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-x86-6.2.0-19.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-x86-core-6.2.0-19.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-6.2.0-19.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-6.2.0-19.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-6.2.0-19.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-6.2.0-19.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-6.2.0-19.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-6.2.0-19.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.2.0-19 https://nvd.nist.gov/vuln/detail/CVE-2023-3354 12139 qemu qemu 12140 qemu-6.2.0-19.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-common-6.2.0-19.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-docs-6.2.0-19.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-img-6.2.0-19.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-guest-agent-6.2.0-19.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-tools-6.2.0-19.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-pr-helper-6.2.0-19.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-virtiofsd-6.2.0-19.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-tests-6.2.0-19.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-curl-6.2.0-19.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-6.2.0-19.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-rbd-6.2.0-19.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-opengl-6.2.0-19.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-dmg-6.2.0-19.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-nfs-6.2.0-19.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-6.2.0-19.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-oss-6.2.0-19.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-curses-6.2.0-19.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-gtk-6.2.0-19.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-egl-headless-6.2.0-19.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-6.2.0-19.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-gl-6.2.0-19.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-6.2.0-19.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-gl-6.2.0-19.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-6.2.0-19.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-6.2.0-19.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-6.2.0-19.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-6.2.0-19.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-6.2.0-19.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-smartcard-6.2.0-19.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-vhost-user-gpu-6.2.0-19.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-6.2.0-19.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-core-6.2.0-19.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-user-6.2.0-19.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-6.2.0-19.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ipxe-6.2.0-19.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-6.2.0-19.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-6.2.0-19.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-6.2.0-19.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-6.2.0-19.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-6.2.0-19.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-6.2.0-19.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-6.2.0-19.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-6.2.0-19.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-6.2.0-19.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.2.0-19 https://nvd.nist.gov/vuln/detail/CVE-2023-3354 12140 qemu qemu 12356 qemu-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-common-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-docs-8.2.0-9.azl3.noarch.rpm 0001-01-01T00:00:00 qemu-img-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-guest-agent-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-tools-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-pr-helper-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-tests-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-curl-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-dmg-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-nfs-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-oss-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-curses-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-user-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-ipxe-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-cris-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-cris-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-hppa-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-hppa-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-m68k-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-m68k-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-mips-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 8.2.0-1 https://nvd.nist.gov/vuln/detail/CVE-2023-3354 12356 qemu qemu 12357 qemu-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-common-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-docs-8.2.0-9.azl3.noarch.rpm 0001-01-01T00:00:00 qemu-img-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-guest-agent-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-tools-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-pr-helper-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-tests-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-curl-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-dmg-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-nfs-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-oss-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-curses-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-user-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-ipxe-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-hppa-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-hppa-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-m68k-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-m68k-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 8.2.0-1 https://nvd.nist.gov/vuln/detail/CVE-2023-3354 12357 qemu 1.0 2024-08-04T17:00:00 <p>Information published.</p> 1.1 2024-08-05T17:00:00 <p>Information published.</p> 1.2 2024-08-06T17:00:00 <p>Information published.</p> 1.3 2024-08-07T17:00:00 <p>Information published.</p> 1.4 2024-08-08T17:00:00 <p>Information published.</p> 1.5 2024-08-09T17:00:00 <p>Information published.</p> 1.6 2024-08-10T17:00:00 <p>Information published.</p> 1.7 2024-08-11T17:00:00 <p>Information published.</p> 1.8 2024-08-15T17:00:00 <p>Information published.</p> 1.9 2024-08-16T17:00:00 <p>Information published.</p> 2.0 2024-08-17T17:00:00 <p>Information published.</p> 2.1 2024-08-18T17:00:00 <p>Information published.</p> 2.2 2024-08-19T17:00:00 <p>Information published.</p> 2.3 2024-08-20T17:00:00 <p>Information published.</p> 2.4 2024-08-21T17:00:00 <p>Information published.</p> 2.5 2024-08-22T17:00:00 <p>Information published.</p> 2.6 2024-08-23T17:00:00 <p>Information published.</p> 2.7 2024-08-24T17:00:00 <p>Information published.</p> 2.8 2024-08-25T17:00:00 <p>Information published.</p> 2.9 2024-08-26T17:00:00 <p>Information published.</p> 3.0 2024-08-27T17:00:00 <p>Information published.</p> 3.1 2024-08-28T17:00:00 <p>Information published.</p> 3.2 2024-08-29T17:00:00 <p>Information published.</p> 3.3 2024-08-30T17:00:00 <p>Information published.</p> 3.4 2024-08-31T17:00:00 <p>Information published.</p> 3.5 2024-09-01T17:00:00 <p>Information published.</p> 3.6 2024-09-02T17:00:00 <p>Information published.</p> 3.7 2024-09-04T17:00:00 <p>Information published.</p> 3.8 2024-09-05T17:00:00 <p>Information published.</p> 3.9 2024-09-06T17:00:00 <p>Information published.</p> 4.0 2024-09-07T17:00:00 <p>Information published.</p> 4.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2022-4144 https://nvd.nist.gov/vuln/detail/CVE-2022-4144 https://nvd.nist.gov/vuln/detail/CVE-2022-4144 https://nvd.nist.gov/vuln/detail/CVE-2022-4144 Mariner secalert@redhat.com Yes CVE-2022-4144 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 6.5 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H 12139 6.5 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H 12140 6.5 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H 12356 6.5 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H 12357 qemu 12139 qemu-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-common-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-docs-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-img-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-guest-agent-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-tools-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-pr-helper-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-virtiofsd-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-tests-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-curl-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-rbd-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-opengl-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-dmg-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-nfs-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-oss-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-curses-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-gtk-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-egl-headless-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-gl-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-gl-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-smartcard-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-vhost-user-gpu-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-core-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-user-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-x86-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-x86-core-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-cris-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.2.0-12 https://nvd.nist.gov/vuln/detail/CVE-2022-4144 12139 qemu qemu 12140 qemu-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-common-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-docs-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-img-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-guest-agent-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-tools-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-pr-helper-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-virtiofsd-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-tests-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-curl-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-rbd-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-opengl-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-dmg-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-nfs-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-oss-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-curses-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-gtk-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-egl-headless-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-gl-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-gl-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-smartcard-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-vhost-user-gpu-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-core-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-user-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-core-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.2.0-12 https://nvd.nist.gov/vuln/detail/CVE-2022-4144 12140 qemu qemu 12356 qemu-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-common-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-docs-8.2.0-9.azl3.noarch.rpm 0001-01-01T00:00:00 qemu-img-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-guest-agent-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-tools-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-pr-helper-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-tests-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-curl-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-dmg-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-nfs-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-oss-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-curses-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-user-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-ipxe-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-cris-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-cris-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-hppa-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-hppa-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-m68k-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-m68k-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-mips-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.2.0-18 https://nvd.nist.gov/vuln/detail/CVE-2022-4144 12356 qemu qemu 12357 qemu-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-common-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-docs-8.2.0-9.azl3.noarch.rpm 0001-01-01T00:00:00 qemu-img-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-guest-agent-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-tools-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-pr-helper-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-tests-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-curl-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-dmg-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-nfs-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-oss-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-curses-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-user-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-ipxe-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-hppa-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-hppa-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-m68k-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-m68k-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.2.0-18 https://nvd.nist.gov/vuln/detail/CVE-2022-4144 12357 qemu 1.0 2024-08-04T17:00:00 <p>Information published.</p> 1.1 2024-08-05T17:00:00 <p>Information published.</p> 1.2 2024-08-06T17:00:00 <p>Information published.</p> 1.3 2024-08-07T17:00:00 <p>Information published.</p> 1.4 2024-08-08T17:00:00 <p>Information published.</p> 1.5 2024-08-09T17:00:00 <p>Information published.</p> 1.6 2024-08-10T17:00:00 <p>Information published.</p> 1.7 2024-08-11T17:00:00 <p>Information published.</p> 1.8 2024-08-15T17:00:00 <p>Information published.</p> 1.9 2024-08-16T17:00:00 <p>Information published.</p> 2.0 2024-08-17T17:00:00 <p>Information published.</p> 2.1 2024-08-18T17:00:00 <p>Information published.</p> 2.2 2024-08-19T17:00:00 <p>Information published.</p> 2.3 2024-08-20T17:00:00 <p>Information published.</p> 2.4 2024-08-21T17:00:00 <p>Information published.</p> 2.5 2024-08-22T17:00:00 <p>Information published.</p> 2.6 2024-08-23T17:00:00 <p>Information published.</p> 2.7 2024-08-24T17:00:00 <p>Information published.</p> 2.8 2024-08-25T17:00:00 <p>Information published.</p> 2.9 2024-08-26T17:00:00 <p>Information published.</p> 3.0 2024-08-27T17:00:00 <p>Information published.</p> 3.1 2024-08-28T17:00:00 <p>Information published.</p> 3.2 2024-08-29T17:00:00 <p>Information published.</p> 3.3 2024-08-30T17:00:00 <p>Information published.</p> 3.4 2024-08-31T17:00:00 <p>Information published.</p> 3.5 2024-09-01T17:00:00 <p>Information published.</p> 3.6 2024-09-02T17:00:00 <p>Information published.</p> 3.7 2024-09-04T17:00:00 <p>Information published.</p> 3.8 2024-09-05T17:00:00 <p>Information published.</p> 3.9 2024-09-06T17:00:00 <p>Information published.</p> 4.0 2024-09-07T17:00:00 <p>Information published.</p> 4.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2022-23639 https://nvd.nist.gov/vuln/detail/CVE-2022-23639 https://nvd.nist.gov/vuln/detail/CVE-2022-23639 https://nvd.nist.gov/vuln/detail/CVE-2022-23639 Mariner security-advisories@github.com Yes CVE-2022-23639 12356 12357 12356 12357 12356 12357 8.1 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H 12356 8.1 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H 12357 librsvg2 12356 librsvg2-2.58.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 librsvg2-devel-2.58.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 librsvg2-tools-2.58.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.58.1-1 https://nvd.nist.gov/vuln/detail/CVE-2022-23639 12356 librsvg2 rpm-ostree 12356 rpm-ostree-2024.4-1.azl3.x86_64.rpm 0001-01-01T00:00:00 rpm-ostree-devel-2024.4-1.azl3.x86_64.rpm 0001-01-01T00:00:00 rpm-ostree-debuginfo-2024.4-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 2024.4-1 https://nvd.nist.gov/vuln/detail/CVE-2022-23639 12356 rpm-ostree librsvg2 12357 librsvg2-2.58.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 librsvg2-devel-2.58.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 librsvg2-tools-2.58.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.58.1-1 https://nvd.nist.gov/vuln/detail/CVE-2022-23639 12357 librsvg2 rpm-ostree 12357 CBL-Mariner 2024.4-1 https://nvd.nist.gov/vuln/detail/CVE-2022-23639 12357 rpm-ostree 1.0 2024-06-30T00:00:00 <p>Information published.</p> 1.1 2024-08-28T17:00:00 <p>Information published.</p> 1.2 2024-08-29T17:00:00 <p>Information published.</p> 1.3 2024-08-30T17:00:00 <p>Information published.</p> 1.4 2024-08-31T17:00:00 <p>Information published.</p> 1.5 2024-09-01T17:00:00 <p>Information published.</p> 1.6 2024-09-02T17:00:00 <p>Information published.</p> 1.7 2024-09-04T17:00:00 <p>Information published.</p> 1.8 2024-09-05T17:00:00 <p>Information published.</p> 1.9 2024-09-06T17:00:00 <p>Information published.</p> 2.0 2024-09-07T17:00:00 <p>Information published.</p> 2.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2022-24713 https://nvd.nist.gov/vuln/detail/CVE-2022-24713 https://nvd.nist.gov/vuln/detail/CVE-2022-24713 https://nvd.nist.gov/vuln/detail/CVE-2022-24713 Mariner security-advisories@github.com Yes CVE-2022-24713 12356 12357 12356 12357 12356 12357 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12356 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12357 librsvg2 12356 librsvg2-2.58.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 librsvg2-devel-2.58.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 librsvg2-tools-2.58.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.58.1-1 https://nvd.nist.gov/vuln/detail/CVE-2022-24713 12356 librsvg2 rpm-ostree 12356 rpm-ostree-2024.4-1.azl3.x86_64.rpm 0001-01-01T00:00:00 rpm-ostree-devel-2024.4-1.azl3.x86_64.rpm 0001-01-01T00:00:00 rpm-ostree-debuginfo-2024.4-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 2024.4-1 https://nvd.nist.gov/vuln/detail/CVE-2022-24713 12356 rpm-ostree librsvg2 12357 librsvg2-2.58.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 librsvg2-devel-2.58.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 librsvg2-tools-2.58.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.58.1-1 https://nvd.nist.gov/vuln/detail/CVE-2022-24713 12357 librsvg2 rpm-ostree 12357 CBL-Mariner 2024.4-1 https://nvd.nist.gov/vuln/detail/CVE-2022-24713 12357 rpm-ostree 1.0 2024-06-30T00:00:00 <p>Information published.</p> 1.1 2024-08-28T17:00:00 <p>Information published.</p> 1.2 2024-08-29T17:00:00 <p>Information published.</p> 1.3 2024-08-30T17:00:00 <p>Information published.</p> 1.4 2024-08-31T17:00:00 <p>Information published.</p> 1.5 2024-09-01T17:00:00 <p>Information published.</p> 1.6 2024-09-02T17:00:00 <p>Information published.</p> 1.7 2024-09-04T17:00:00 <p>Information published.</p> 1.8 2024-09-05T17:00:00 <p>Information published.</p> 1.9 2024-09-06T17:00:00 <p>Information published.</p> 2.0 2024-09-07T17:00:00 <p>Information published.</p> 2.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-27281 https://nvd.nist.gov/vuln/detail/CVE-2024-27281 https://nvd.nist.gov/vuln/detail/CVE-2024-27281 https://nvd.nist.gov/vuln/detail/CVE-2024-27281 Mariner cve@mitre.org Yes CVE-2024-27281 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 4.5 4.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L 12139 4.5 4.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L 12140 4.5 4.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L 12356 4.5 4.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L 12357 ruby 12139 ruby-3.1.4-4.cm2.x86_64.rpm 0001-01-01T00:00:00 rubygems-3.3.26-4.cm2.noarch.rpm 0001-01-01T00:00:00 rubygems-devel-3.3.26-4.cm2.noarch.rpm 0001-01-01T00:00:00 CBL-Mariner 3.1.4-4 https://nvd.nist.gov/vuln/detail/CVE-2024-27281 12139 ruby ruby 12140 ruby-3.1.4-4.cm2.aarch64.rpm 0001-01-01T00:00:00 rubygems-3.3.26-4.cm2.noarch.rpm 0001-01-01T00:00:00 rubygems-devel-3.3.26-4.cm2.noarch.rpm 0001-01-01T00:00:00 CBL-Mariner 3.1.4-4 https://nvd.nist.gov/vuln/detail/CVE-2024-27281 12140 ruby ruby 12356 ruby-3.3.3-1.azl3.x86_64.rpm 0001-01-01T00:00:00 rubygems-3.5.3-1.azl3.noarch.rpm 0001-01-01T00:00:00 rubygems-devel-3.5.3-1.azl3.noarch.rpm 0001-01-01T00:00:00 ruby-debuginfo-3.3.3-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.3.3-1 https://nvd.nist.gov/vuln/detail/CVE-2024-27281 12356 ruby ruby 12357 ruby-3.3.3-1.azl3.aarch64.rpm 0001-01-01T00:00:00 rubygems-3.5.3-1.azl3.noarch.rpm 0001-01-01T00:00:00 rubygems-devel-3.5.3-1.azl3.noarch.rpm 0001-01-01T00:00:00 ruby-debuginfo-3.3.3-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.3.3-1 https://nvd.nist.gov/vuln/detail/CVE-2024-27281 12357 ruby 1.0 2024-05-13T17:00:00 <p>Information published.</p> 1.1 2024-08-19T17:00:00 <p>Information published.</p> 1.2 2024-08-24T17:00:00 <p>Information published.</p> 1.3 2024-08-25T17:00:00 <p>Information published.</p> 1.4 2024-08-26T17:00:00 <p>Information published.</p> 1.5 2024-08-27T17:00:00 <p>Information published.</p> 1.6 2024-08-28T17:00:00 <p>Information published.</p> 1.7 2024-08-29T17:00:00 <p>Information published.</p> 1.8 2024-08-30T17:00:00 <p>Information published.</p> 1.9 2024-08-31T17:00:00 <p>Information published.</p> 2.0 2024-09-01T17:00:00 <p>Information published.</p> 2.1 2024-09-02T17:00:00 <p>Information published.</p> 2.2 2024-09-04T17:00:00 <p>Information published.</p> 2.3 2024-09-05T17:00:00 <p>Information published.</p> 2.4 2024-09-06T17:00:00 <p>Information published.</p> 2.5 2024-09-07T17:00:00 <p>Information published.</p> 2.6 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2021-33454 https://nvd.nist.gov/vuln/detail/CVE-2021-33454 https://nvd.nist.gov/vuln/detail/CVE-2021-33454 https://nvd.nist.gov/vuln/detail/CVE-2021-33454 Mariner cve@mitre.org Yes CVE-2021-33454 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 12139 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 12140 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 12356 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 12357 yasm 12139 yasm-1.3.0-15.cm2.x86_64.rpm 0001-01-01T00:00:00 yasm-devel-1.3.0-15.cm2.x86_64.rpm 0001-01-01T00:00:00 yasm-debuginfo-1.3.0-15.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.3.0-15 https://nvd.nist.gov/vuln/detail/CVE-2021-33454 12139 yasm yasm 12140 yasm-1.3.0-15.cm2.aarch64.rpm 0001-01-01T00:00:00 yasm-devel-1.3.0-15.cm2.aarch64.rpm 0001-01-01T00:00:00 yasm-debuginfo-1.3.0-15.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.3.0-15 https://nvd.nist.gov/vuln/detail/CVE-2021-33454 12140 yasm yasm 12356 yasm-1.3.0-15.azl3.x86_64.rpm 0001-01-01T00:00:00 yasm-devel-1.3.0-15.azl3.x86_64.rpm 0001-01-01T00:00:00 yasm-debuginfo-1.3.0-15.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.3.0-15 https://nvd.nist.gov/vuln/detail/CVE-2021-33454 12356 yasm yasm 12357 yasm-1.3.0-15.azl3.aarch64.rpm 0001-01-01T00:00:00 yasm-devel-1.3.0-15.azl3.aarch64.rpm 0001-01-01T00:00:00 yasm-debuginfo-1.3.0-15.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.3.0-15 https://nvd.nist.gov/vuln/detail/CVE-2021-33454 12357 yasm 1.0 2024-07-09T17:00:00 <p>Information published.</p> 1.1 2024-08-15T17:00:00 <p>Information published.</p> 1.2 2024-08-16T17:00:00 <p>Information published.</p> 1.3 2024-08-17T17:00:00 <p>Information published.</p> 1.4 2024-08-18T17:00:00 <p>Information published.</p> 1.5 2024-08-19T17:00:00 <p>Information published.</p> 1.6 2024-08-20T17:00:00 <p>Information published.</p> 1.7 2024-08-21T17:00:00 <p>Information published.</p> 1.8 2024-08-22T17:00:00 <p>Information published.</p> 1.9 2024-08-23T17:00:00 <p>Information published.</p> 2.0 2024-08-24T17:00:00 <p>Information published.</p> 2.1 2024-08-25T17:00:00 <p>Information published.</p> 2.2 2024-08-26T17:00:00 <p>Information published.</p> 2.3 2024-08-27T17:00:00 <p>Information published.</p> 2.4 2024-08-28T17:00:00 <p>Information published.</p> 2.5 2024-08-29T17:00:00 <p>Information published.</p> 2.6 2024-08-30T17:00:00 <p>Information published.</p> 2.7 2024-08-31T17:00:00 <p>Information published.</p> 2.8 2024-09-01T17:00:00 <p>Information published.</p> 2.9 2024-09-02T17:00:00 <p>Information published.</p> 3.0 2024-09-04T17:00:00 <p>Information published.</p> 3.1 2024-09-05T17:00:00 <p>Information published.</p> 3.2 2024-09-06T17:00:00 <p>Information published.</p> 3.3 2024-09-07T17:00:00 <p>Information published.</p> 3.4 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-35176 https://nvd.nist.gov/vuln/detail/CVE-2024-35176 https://nvd.nist.gov/vuln/detail/CVE-2024-35176 https://nvd.nist.gov/vuln/detail/CVE-2024-35176 https://nvd.nist.gov/vuln/detail/CVE-2024-35176 https://nvd.nist.gov/vuln/detail/CVE-2024-35176 https://nvd.nist.gov/vuln/detail/CVE-2024-35176 https://nvd.nist.gov/vuln/detail/CVE-2024-35176 Mariner security-advisories@github.com Yes CVE-2024-35176 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 12139 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 12140 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 12356 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 12357 ruby 12139 ruby-3.1.4-6.cm2.x86_64.rpm 0001-01-01T00:00:00 rubygems-3.3.26-6.cm2.noarch.rpm 0001-01-01T00:00:00 rubygems-devel-3.3.26-6.cm2.noarch.rpm 0001-01-01T00:00:00 ruby-debuginfo-3.1.4-6.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.1.4-6 https://nvd.nist.gov/vuln/detail/CVE-2024-35176 12139 ruby rubygem-rexml 12139 rubygem-rexml-3.2.7-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.2.7-1 https://nvd.nist.gov/vuln/detail/CVE-2024-35176 12139 rubygem-rexml ruby 12140 ruby-3.1.4-6.cm2.aarch64.rpm 0001-01-01T00:00:00 rubygems-3.3.26-6.cm2.noarch.rpm 0001-01-01T00:00:00 rubygems-devel-3.3.26-6.cm2.noarch.rpm 0001-01-01T00:00:00 ruby-debuginfo-3.1.4-6.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.1.4-6 https://nvd.nist.gov/vuln/detail/CVE-2024-35176 12140 ruby rubygem-rexml 12140 rubygem-rexml-3.2.7-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.2.7-1 https://nvd.nist.gov/vuln/detail/CVE-2024-35176 12140 rubygem-rexml ruby 12356 ruby-3.3.3-1.azl3.x86_64.rpm 0001-01-01T00:00:00 rubygems-3.5.3-1.azl3.noarch.rpm 0001-01-01T00:00:00 rubygems-devel-3.5.3-1.azl3.noarch.rpm 0001-01-01T00:00:00 ruby-debuginfo-3.3.3-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.3.3-1 https://nvd.nist.gov/vuln/detail/CVE-2024-35176 12356 ruby rubygem-rexml 12356 rubygem-rexml-3.2.8-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.2.8-1 https://nvd.nist.gov/vuln/detail/CVE-2024-35176 12356 rubygem-rexml ruby 12357 ruby-3.3.3-1.azl3.aarch64.rpm 0001-01-01T00:00:00 rubygems-3.5.3-1.azl3.noarch.rpm 0001-01-01T00:00:00 rubygems-devel-3.5.3-1.azl3.noarch.rpm 0001-01-01T00:00:00 ruby-debuginfo-3.3.3-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.3.3-1 https://nvd.nist.gov/vuln/detail/CVE-2024-35176 12357 ruby rubygem-rexml 12357 rubygem-rexml-3.2.8-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.2.8-1 https://nvd.nist.gov/vuln/detail/CVE-2024-35176 12357 rubygem-rexml 1.0 2024-05-18T17:00:00 <p>Information published.</p> 1.1 2024-06-30T00:00:00 <p>Information published.</p> 1.2 2024-08-24T17:00:00 <p>Information published.</p> 1.3 2024-08-25T17:00:00 <p>Information published.</p> 1.4 2024-08-26T17:00:00 <p>Information published.</p> 1.5 2024-08-27T17:00:00 <p>Information published.</p> 1.6 2024-08-28T17:00:00 <p>Information published.</p> 1.7 2024-08-29T17:00:00 <p>Information published.</p> 1.8 2024-08-30T17:00:00 <p>Information published.</p> 1.9 2024-08-31T17:00:00 <p>Information published.</p> 2.0 2024-09-01T17:00:00 <p>Information published.</p> 2.1 2024-09-02T17:00:00 <p>Information published.</p> 2.2 2024-09-04T17:00:00 <p>Information published.</p> 2.3 2024-09-05T17:00:00 <p>Information published.</p> 2.4 2024-09-06T17:00:00 <p>Information published.</p> 2.5 2024-09-07T17:00:00 <p>Information published.</p> 2.6 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2022-24795 https://nvd.nist.gov/vuln/detail/CVE-2022-24795 https://nvd.nist.gov/vuln/detail/CVE-2022-24795 https://nvd.nist.gov/vuln/detail/CVE-2022-24795 https://nvd.nist.gov/vuln/detail/CVE-2022-24795 https://nvd.nist.gov/vuln/detail/CVE-2022-24795 Mariner security-advisories@github.com Yes CVE-2022-24795 12137 12138 12139 12140 12356 12357 12137 12138 12139 12140 12356 12357 12137 12138 12139 12140 12356 12357 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12137 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12138 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12139 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12140 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12356 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12357 rubygem-yajl-ruby 12137 rubygem-yajl-ruby-1.4.2-1.cm1.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.4.2-1 https://nvd.nist.gov/vuln/detail/CVE-2022-24795 12137 rubygem-yajl-ruby rubygem-yajl-ruby 12138 rubygem-yajl-ruby-1.4.2-1.cm1.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.4.2-1 https://nvd.nist.gov/vuln/detail/CVE-2022-24795 12138 rubygem-yajl-ruby rubygem-yajl-ruby 12139 rubygem-yajl-ruby-1.3.1-2.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.3.1-2 https://nvd.nist.gov/vuln/detail/CVE-2022-24795 12139 rubygem-yajl-ruby rubygem-yajl-ruby 12140 rubygem-yajl-ruby-1.3.1-2.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.3.1-2 https://nvd.nist.gov/vuln/detail/CVE-2022-24795 12140 rubygem-yajl-ruby rubygem-yajl-ruby 12356 rubygem-yajl-ruby-1.4.3-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.4.3-1 https://nvd.nist.gov/vuln/detail/CVE-2022-24795 12356 rubygem-yajl-ruby rubygem-yajl-ruby 12357 rubygem-yajl-ruby-1.4.3-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.4.3-1 https://nvd.nist.gov/vuln/detail/CVE-2022-24795 12357 rubygem-yajl-ruby 1.0 2022-04-18T17:00:00 <p>Information published.</p> 1.1 2022-08-16T17:00:00 <p>Added rubygem-yajl-ruby to CBL-Mariner 2.0</p> 1.2 2024-08-28T17:00:00 <p>Information published.</p> 1.3 2024-08-29T17:00:00 <p>Information published.</p> 1.4 2024-08-30T17:00:00 <p>Information published.</p> 1.5 2024-08-31T17:00:00 <p>Information published.</p> 1.6 2024-09-01T17:00:00 <p>Information published.</p> 1.7 2024-09-02T17:00:00 <p>Information published.</p> 1.8 2024-09-04T17:00:00 <p>Information published.</p> 1.9 2024-09-05T17:00:00 <p>Information published.</p> 2.0 2024-09-06T17:00:00 <p>Information published.</p> 2.1 2024-09-07T17:00:00 <p>Information published.</p> 2.2 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2017-15370 https://nvd.nist.gov/vuln/detail/CVE-2017-15370 https://nvd.nist.gov/vuln/detail/CVE-2017-15370 https://nvd.nist.gov/vuln/detail/CVE-2017-15370 Mariner cve@mitre.org Yes CVE-2017-15370 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 12139 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 12140 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 12356 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 12357 sox 12139 sox-14.4.2.0-33.cm2.x86_64.rpm 0001-01-01T00:00:00 sox-devel-14.4.2.0-33.cm2.x86_64.rpm 0001-01-01T00:00:00 sox-debuginfo-14.4.2.0-33.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 14.4.2.0-33 https://nvd.nist.gov/vuln/detail/CVE-2017-15370 12139 sox sox 12140 sox-14.4.2.0-33.cm2.aarch64.rpm 0001-01-01T00:00:00 sox-devel-14.4.2.0-33.cm2.aarch64.rpm 0001-01-01T00:00:00 sox-debuginfo-14.4.2.0-33.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 14.4.2.0-33 https://nvd.nist.gov/vuln/detail/CVE-2017-15370 12140 sox sox 12356 sox-14.4.2.0-33.azl3.x86_64.rpm 0001-01-01T00:00:00 sox-devel-14.4.2.0-33.azl3.x86_64.rpm 0001-01-01T00:00:00 sox-debuginfo-14.4.2.0-33.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 14.4.2.0-33 https://nvd.nist.gov/vuln/detail/CVE-2017-15370 12356 sox sox 12357 sox-14.4.2.0-33.azl3.aarch64.rpm 0001-01-01T00:00:00 sox-devel-14.4.2.0-33.azl3.aarch64.rpm 0001-01-01T00:00:00 sox-debuginfo-14.4.2.0-33.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 14.4.2.0-33 https://nvd.nist.gov/vuln/detail/CVE-2017-15370 12357 sox 1.0 2024-07-22T17:00:00 <p>Information published.</p> 1.1 2024-08-15T17:00:00 <p>Information published.</p> 1.2 2024-08-16T17:00:00 <p>Information published.</p> 1.3 2024-08-17T17:00:00 <p>Information published.</p> 1.4 2024-08-18T17:00:00 <p>Information published.</p> 1.5 2024-08-19T17:00:00 <p>Information published.</p> 1.6 2024-08-20T17:00:00 <p>Information published.</p> 1.7 2024-08-21T17:00:00 <p>Information published.</p> 1.8 2024-08-22T17:00:00 <p>Information published.</p> 1.9 2024-08-23T17:00:00 <p>Information published.</p> 2.0 2024-08-24T17:00:00 <p>Information published.</p> 2.1 2024-08-25T17:00:00 <p>Information published.</p> 2.2 2024-08-26T17:00:00 <p>Information published.</p> 2.3 2024-08-27T17:00:00 <p>Information published.</p> 2.4 2024-08-28T17:00:00 <p>Information published.</p> 2.5 2024-08-29T17:00:00 <p>Information published.</p> 2.6 2024-08-30T17:00:00 <p>Information published.</p> 2.7 2024-08-31T17:00:00 <p>Information published.</p> 2.8 2024-09-01T17:00:00 <p>Information published.</p> 2.9 2024-09-02T17:00:00 <p>Information published.</p> 3.0 2024-09-04T17:00:00 <p>Information published.</p> 3.1 2024-09-05T17:00:00 <p>Information published.</p> 3.2 2024-09-06T17:00:00 <p>Information published.</p> 3.3 2024-09-07T17:00:00 <p>Information published.</p> 3.4 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2017-15371 https://nvd.nist.gov/vuln/detail/CVE-2017-15371 https://nvd.nist.gov/vuln/detail/CVE-2017-15371 https://nvd.nist.gov/vuln/detail/CVE-2017-15371 Mariner cve@mitre.org Yes CVE-2017-15371 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 12139 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 12140 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 12356 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 12357 sox 12139 sox-14.4.2.0-33.cm2.x86_64.rpm 0001-01-01T00:00:00 sox-devel-14.4.2.0-33.cm2.x86_64.rpm 0001-01-01T00:00:00 sox-debuginfo-14.4.2.0-33.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 14.4.2.0-33 https://nvd.nist.gov/vuln/detail/CVE-2017-15371 12139 sox sox 12140 sox-14.4.2.0-33.cm2.aarch64.rpm 0001-01-01T00:00:00 sox-devel-14.4.2.0-33.cm2.aarch64.rpm 0001-01-01T00:00:00 sox-debuginfo-14.4.2.0-33.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 14.4.2.0-33 https://nvd.nist.gov/vuln/detail/CVE-2017-15371 12140 sox sox 12356 sox-14.4.2.0-33.azl3.x86_64.rpm 0001-01-01T00:00:00 sox-devel-14.4.2.0-33.azl3.x86_64.rpm 0001-01-01T00:00:00 sox-debuginfo-14.4.2.0-33.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 14.4.2.0-33 https://nvd.nist.gov/vuln/detail/CVE-2017-15371 12356 sox sox 12357 sox-14.4.2.0-33.azl3.aarch64.rpm 0001-01-01T00:00:00 sox-devel-14.4.2.0-33.azl3.aarch64.rpm 0001-01-01T00:00:00 sox-debuginfo-14.4.2.0-33.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 14.4.2.0-33 https://nvd.nist.gov/vuln/detail/CVE-2017-15371 12357 sox 1.0 2024-07-22T17:00:00 <p>Information published.</p> 1.1 2024-08-15T17:00:00 <p>Information published.</p> 1.2 2024-08-16T17:00:00 <p>Information published.</p> 1.3 2024-08-17T17:00:00 <p>Information published.</p> 1.4 2024-08-18T17:00:00 <p>Information published.</p> 1.5 2024-08-19T17:00:00 <p>Information published.</p> 1.6 2024-08-20T17:00:00 <p>Information published.</p> 1.7 2024-08-21T17:00:00 <p>Information published.</p> 1.8 2024-08-22T17:00:00 <p>Information published.</p> 1.9 2024-08-23T17:00:00 <p>Information published.</p> 2.0 2024-08-24T17:00:00 <p>Information published.</p> 2.1 2024-08-25T17:00:00 <p>Information published.</p> 2.2 2024-08-26T17:00:00 <p>Information published.</p> 2.3 2024-08-27T17:00:00 <p>Information published.</p> 2.4 2024-08-28T17:00:00 <p>Information published.</p> 2.5 2024-08-29T17:00:00 <p>Information published.</p> 2.6 2024-08-30T17:00:00 <p>Information published.</p> 2.7 2024-08-31T17:00:00 <p>Information published.</p> 2.8 2024-09-01T17:00:00 <p>Information published.</p> 2.9 2024-09-02T17:00:00 <p>Information published.</p> 3.0 2024-09-04T17:00:00 <p>Information published.</p> 3.1 2024-09-05T17:00:00 <p>Information published.</p> 3.2 2024-09-06T17:00:00 <p>Information published.</p> 3.3 2024-09-07T17:00:00 <p>Information published.</p> 3.4 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2023-5764 https://nvd.nist.gov/vuln/detail/CVE-2023-5764 Mariner secalert@redhat.com Yes CVE-2023-5764 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12139 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12140 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12356 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12357 ansible 12139 12140 ansible-2.14.12-2.cm2.noarch.rpm 0001-01-01T00:00:00 CBL-Mariner 2.14.12-2 https://nvd.nist.gov/vuln/detail/CVE-2023-5764 12139 12140 ansible ansible 12356 12357 ansible-2.17.0-1.azl3.noarch.rpm 0001-01-01T00:00:00 CBL-Mariner 2.17.0-1 https://nvd.nist.gov/vuln/detail/CVE-2023-5764 12356 12357 ansible 1.0 2023-12-20T16:00:00 <p>Information published.</p> 1.1 2024-06-30T00:00:00 <p>Information published.</p> 1.2 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2023-25165 https://nvd.nist.gov/vuln/detail/CVE-2023-25165 https://nvd.nist.gov/vuln/detail/CVE-2023-25165 https://nvd.nist.gov/vuln/detail/CVE-2023-25165 https://nvd.nist.gov/vuln/detail/CVE-2023-25165 https://nvd.nist.gov/vuln/detail/CVE-2023-25165 Mariner security-advisories@github.com Yes CVE-2023-25165 12139 12140 12137 12138 12139 12140 12137 12138 12139 12140 12137 12138 4.3 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N 12139 4.3 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N 12140 4.3 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N 12137 4.3 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N 12138 cert-manager 12139 cert-manager-1.7.3-10.cm2.x86_64.rpm 0001-01-01T00:00:00 cert-manager-acmesolver-1.7.3-10.cm2.x86_64.rpm 0001-01-01T00:00:00 cert-manager-cainjector-1.7.3-10.cm2.x86_64.rpm 0001-01-01T00:00:00 cert-manager-controller-1.7.3-10.cm2.x86_64.rpm 0001-01-01T00:00:00 cert-manager-cmctl-1.7.3-10.cm2.x86_64.rpm 0001-01-01T00:00:00 cert-manager-webhook-1.7.3-10.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.7.3-8 https://nvd.nist.gov/vuln/detail/CVE-2023-25165 12139 cert-manager helm 12139 helm-3.10.3-3.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.10.3-3 https://nvd.nist.gov/vuln/detail/CVE-2023-25165 12139 helm cert-manager 12140 cert-manager-1.7.3-10.cm2.aarch64.rpm 0001-01-01T00:00:00 cert-manager-acmesolver-1.7.3-10.cm2.aarch64.rpm 0001-01-01T00:00:00 cert-manager-cainjector-1.7.3-10.cm2.aarch64.rpm 0001-01-01T00:00:00 cert-manager-controller-1.7.3-10.cm2.aarch64.rpm 0001-01-01T00:00:00 cert-manager-cmctl-1.7.3-10.cm2.aarch64.rpm 0001-01-01T00:00:00 cert-manager-webhook-1.7.3-10.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.7.3-8 https://nvd.nist.gov/vuln/detail/CVE-2023-25165 12140 cert-manager helm 12140 helm-3.10.3-3.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.10.3-3 https://nvd.nist.gov/vuln/detail/CVE-2023-25165 12140 helm helm 12137 helm-3.4.1-16.cm1.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.4.1-16 https://nvd.nist.gov/vuln/detail/CVE-2023-25165 12137 helm helm 12138 helm-3.4.1-16.cm1.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.4.1-16 https://nvd.nist.gov/vuln/detail/CVE-2023-25165 12138 helm 1.0 2023-02-16T16:00:00 <p>Information published.</p> 1.1 2023-02-12T16:00:00 <p>Information published.</p> 1.2 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-41073 https://nvd.nist.gov/vuln/detail/CVE-2024-41073 https://nvd.nist.gov/vuln/detail/CVE-2024-41073 https://nvd.nist.gov/vuln/detail/CVE-2024-41073 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-41073 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12139 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12140 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12356 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12357 kernel 12139 kernel-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 python3-perf-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 bpftool-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.164.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-41073 12139 kernel kernel 12140 kernel-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 python3-perf-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-dtb-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 bpftool-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.164.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-41073 12140 kernel kernel 12356 kernel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-41073 12356 kernel kernel 12357 kernel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-41073 12357 kernel 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-42101 https://nvd.nist.gov/vuln/detail/CVE-2024-42101 https://nvd.nist.gov/vuln/detail/CVE-2024-42101 https://nvd.nist.gov/vuln/detail/CVE-2024-42101 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-42101 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12139 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12140 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12356 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12357 kernel 12139 kernel-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 python3-perf-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 bpftool-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.164.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-42101 12139 kernel kernel 12140 kernel-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 python3-perf-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-dtb-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 bpftool-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.164.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-42101 12140 kernel kernel 12356 kernel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-42101 12356 kernel kernel 12357 kernel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-42101 12357 kernel 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-42102 https://nvd.nist.gov/vuln/detail/CVE-2024-42102 https://nvd.nist.gov/vuln/detail/CVE-2024-42102 https://nvd.nist.gov/vuln/detail/CVE-2024-42102 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-42102 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 12139 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 12140 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 12356 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 12357 kernel 12139 kernel-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 python3-perf-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 bpftool-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.164.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-42102 12139 kernel kernel 12140 kernel-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 python3-perf-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-dtb-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 bpftool-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.164.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-42102 12140 kernel kernel 12356 kernel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-42102 12356 kernel kernel 12357 kernel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-42102 12357 kernel 1.0 2024-09-10T17:00:00 <p>Information published.</p> 1.1 2024-09-19T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-37371 https://nvd.nist.gov/vuln/detail/CVE-2024-37371 https://nvd.nist.gov/vuln/detail/CVE-2024-37371 https://nvd.nist.gov/vuln/detail/CVE-2024-37371 Mariner cve@mitre.org Yes CVE-2024-37371 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 9.1 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H 12356 9.1 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H 12357 9.1 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H 12139 9.1 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H 12140 krb5 12356 krb5-1.21.3-1.azl3.x86_64.rpm 0001-01-01T00:00:00 krb5-devel-1.21.3-1.azl3.x86_64.rpm 0001-01-01T00:00:00 krb5-lang-1.21.3-1.azl3.x86_64.rpm 0001-01-01T00:00:00 krb5-debuginfo-1.21.3-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.21.3-1 https://nvd.nist.gov/vuln/detail/CVE-2024-37371 12356 krb5 krb5 12357 krb5-1.21.3-1.azl3.aarch64.rpm 0001-01-01T00:00:00 krb5-devel-1.21.3-1.azl3.aarch64.rpm 0001-01-01T00:00:00 krb5-lang-1.21.3-1.azl3.aarch64.rpm 0001-01-01T00:00:00 krb5-debuginfo-1.21.3-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.21.3-1 https://nvd.nist.gov/vuln/detail/CVE-2024-37371 12357 krb5 krb5 12139 krb5-1.21.3-1.cm2.x86_64.rpm 0001-01-01T00:00:00 krb5-devel-1.21.3-1.cm2.x86_64.rpm 0001-01-01T00:00:00 krb5-lang-1.21.3-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.21.3-1 https://nvd.nist.gov/vuln/detail/CVE-2024-37371 12139 krb5 krb5 12140 krb5-1.21.3-1.cm2.aarch64.rpm 0001-01-01T00:00:00 krb5-devel-1.21.3-1.cm2.aarch64.rpm 0001-01-01T00:00:00 krb5-lang-1.21.3-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.21.3-1 https://nvd.nist.gov/vuln/detail/CVE-2024-37371 12140 krb5 1.1 2024-08-15T17:00:00 <p>Information published.</p> 1.0 2024-08-04T17:00:00 <p>Information published.</p> 1.2 2024-08-16T17:00:00 <p>Information published.</p> 1.3 2024-08-17T17:00:00 <p>Information published.</p> 1.4 2024-08-18T17:00:00 <p>Information published.</p> 1.5 2024-08-19T17:00:00 <p>Information published.</p> 1.6 2024-08-20T17:00:00 <p>Information published.</p> 1.7 2024-08-21T17:00:00 <p>Information published.</p> 1.8 2024-08-22T17:00:00 <p>Information published.</p> 1.9 2024-08-23T17:00:00 <p>Information published.</p> 2.0 2024-08-24T17:00:00 <p>Information published.</p> 2.1 2024-08-25T17:00:00 <p>Information published.</p> 2.2 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2023-2953 https://nvd.nist.gov/vuln/detail/CVE-2023-2953 Mariner secalert@redhat.com Yes CVE-2023-2953 12139 12140 12139 12140 12139 12140 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12139 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12140 openldap 12139 openldap-2.4.57-9.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.4.57-9 https://nvd.nist.gov/vuln/detail/CVE-2023-2953 12139 openldap openldap 12140 openldap-2.4.57-9.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.4.57-9 https://nvd.nist.gov/vuln/detail/CVE-2023-2953 12140 openldap 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2022-33065 https://nvd.nist.gov/vuln/detail/CVE-2022-33065 https://nvd.nist.gov/vuln/detail/CVE-2022-33065 https://nvd.nist.gov/vuln/detail/CVE-2022-33065 Mariner cve@mitre.org Yes CVE-2022-33065 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 12356 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 12357 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 12139 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 12140 libsndfile 12356 libsndfile-1.2.2-2.azl3.x86_64.rpm 0001-01-01T00:00:00 libsndfile-devel-1.2.2-2.azl3.x86_64.rpm 0001-01-01T00:00:00 libsndfile-utils-1.2.2-2.azl3.x86_64.rpm 0001-01-01T00:00:00 libsndfile-debuginfo-1.2.2-2.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.2.2-2 https://nvd.nist.gov/vuln/detail/CVE-2022-33065 12356 libsndfile libsndfile 12357 libsndfile-1.2.2-2.azl3.aarch64.rpm 0001-01-01T00:00:00 libsndfile-devel-1.2.2-2.azl3.aarch64.rpm 0001-01-01T00:00:00 libsndfile-utils-1.2.2-2.azl3.aarch64.rpm 0001-01-01T00:00:00 libsndfile-debuginfo-1.2.2-2.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.2.2-2 https://nvd.nist.gov/vuln/detail/CVE-2022-33065 12357 libsndfile libsndfile 12139 libsndfile-1.0.31-3.cm2.x86_64.rpm 0001-01-01T00:00:00 libsndfile-devel-1.0.31-3.cm2.x86_64.rpm 0001-01-01T00:00:00 libsndfile-utils-1.0.31-3.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.0.31-3 https://nvd.nist.gov/vuln/detail/CVE-2022-33065 12139 libsndfile libsndfile 12140 libsndfile-1.0.31-3.cm2.aarch64.rpm 0001-01-01T00:00:00 libsndfile-devel-1.0.31-3.cm2.aarch64.rpm 0001-01-01T00:00:00 libsndfile-utils-1.0.31-3.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.0.31-3 https://nvd.nist.gov/vuln/detail/CVE-2022-33065 12140 libsndfile 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-34459 https://nvd.nist.gov/vuln/detail/CVE-2024-34459 Mariner cve@mitre.org Yes CVE-2024-34459 12139 12140 12139 12140 12139 12140 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 12139 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 12140 libxml2 12139 libxml2-2.10.4-3.cm2.x86_64.rpm 0001-01-01T00:00:00 python3-libxml2-2.10.4-3.cm2.x86_64.rpm 0001-01-01T00:00:00 libxml2-devel-2.10.4-3.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.10.4-3 https://nvd.nist.gov/vuln/detail/CVE-2024-34459 12139 libxml2 libxml2 12140 libxml2-2.10.4-3.cm2.aarch64.rpm 0001-01-01T00:00:00 python3-libxml2-2.10.4-3.cm2.aarch64.rpm 0001-01-01T00:00:00 libxml2-devel-2.10.4-3.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.10.4-3 https://nvd.nist.gov/vuln/detail/CVE-2024-34459 12140 libxml2 1.0 2024-05-16T17:00:00 <p>Information published.</p> 1.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-24474 https://nvd.nist.gov/vuln/detail/CVE-2024-24474 Mariner cve@mitre.org Yes CVE-2024-24474 12139 12140 12139 12140 12139 12140 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12139 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12140 qemu 12139 qemu-6.2.0-20.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-common-6.2.0-20.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-docs-6.2.0-20.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-img-6.2.0-20.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-guest-agent-6.2.0-20.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-tools-6.2.0-20.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-pr-helper-6.2.0-20.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-virtiofsd-6.2.0-20.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-tests-6.2.0-20.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-curl-6.2.0-20.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-6.2.0-20.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-rbd-6.2.0-20.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-opengl-6.2.0-20.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-dmg-6.2.0-20.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-nfs-6.2.0-20.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-6.2.0-20.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-oss-6.2.0-20.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-curses-6.2.0-20.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-gtk-6.2.0-20.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-egl-headless-6.2.0-20.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-6.2.0-20.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-gl-6.2.0-20.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-6.2.0-20.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-gl-6.2.0-20.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-6.2.0-20.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-6.2.0-20.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-6.2.0-20.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-6.2.0-20.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-6.2.0-20.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-smartcard-6.2.0-20.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-vhost-user-gpu-6.2.0-20.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-6.2.0-20.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-core-6.2.0-20.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-user-6.2.0-20.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-6.2.0-20.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ipxe-6.2.0-20.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-6.2.0-20.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-6.2.0-20.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-x86-6.2.0-20.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-x86-core-6.2.0-20.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-6.2.0-20.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-6.2.0-20.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-6.2.0-20.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-6.2.0-20.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-6.2.0-20.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-6.2.0-20.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.2.0-20 https://nvd.nist.gov/vuln/detail/CVE-2024-24474 12139 qemu qemu 12140 qemu-6.2.0-20.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-common-6.2.0-20.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-docs-6.2.0-20.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-img-6.2.0-20.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-guest-agent-6.2.0-20.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-tools-6.2.0-20.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-pr-helper-6.2.0-20.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-virtiofsd-6.2.0-20.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-tests-6.2.0-20.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-curl-6.2.0-20.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-6.2.0-20.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-rbd-6.2.0-20.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-opengl-6.2.0-20.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-dmg-6.2.0-20.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-nfs-6.2.0-20.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-6.2.0-20.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-oss-6.2.0-20.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-curses-6.2.0-20.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-gtk-6.2.0-20.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-egl-headless-6.2.0-20.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-6.2.0-20.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-gl-6.2.0-20.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-6.2.0-20.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-gl-6.2.0-20.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-6.2.0-20.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-6.2.0-20.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-6.2.0-20.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-6.2.0-20.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-6.2.0-20.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-smartcard-6.2.0-20.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-vhost-user-gpu-6.2.0-20.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-6.2.0-20.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-core-6.2.0-20.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-user-6.2.0-20.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-6.2.0-20.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ipxe-6.2.0-20.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-6.2.0-20.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-6.2.0-20.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-6.2.0-20.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-6.2.0-20.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-6.2.0-20.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-6.2.0-20.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-6.2.0-20.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-6.2.0-20.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-6.2.0-20.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.2.0-20 https://nvd.nist.gov/vuln/detail/CVE-2024-24474 12140 qemu 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-43168 https://nvd.nist.gov/vuln/detail/CVE-2024-43168 https://nvd.nist.gov/vuln/detail/CVE-2024-43168 https://nvd.nist.gov/vuln/detail/CVE-2024-43168 Mariner secalert@redhat.com Yes CVE-2024-43168 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 4.8 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L 12356 4.8 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L 12357 4.8 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L 12139 4.8 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L 12140 unbound 12356 unbound-1.19.1-2.azl3.x86_64.rpm 0001-01-01T00:00:00 unbound-devel-1.19.1-2.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-unbound-1.19.1-2.azl3.x86_64.rpm 0001-01-01T00:00:00 unbound-docs-1.19.1-2.azl3.x86_64.rpm 0001-01-01T00:00:00 unbound-debuginfo-1.19.1-2.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.19.1-2 https://nvd.nist.gov/vuln/detail/CVE-2024-43168 12356 unbound unbound 12357 unbound-1.19.1-2.azl3.aarch64.rpm 0001-01-01T00:00:00 unbound-devel-1.19.1-2.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-unbound-1.19.1-2.azl3.aarch64.rpm 0001-01-01T00:00:00 unbound-docs-1.19.1-2.azl3.aarch64.rpm 0001-01-01T00:00:00 unbound-debuginfo-1.19.1-2.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.19.1-2 https://nvd.nist.gov/vuln/detail/CVE-2024-43168 12357 unbound unbound 12139 unbound-1.19.1-2.cm2.x86_64.rpm 0001-01-01T00:00:00 unbound-devel-1.19.1-2.cm2.x86_64.rpm 0001-01-01T00:00:00 python3-unbound-1.19.1-2.cm2.x86_64.rpm 0001-01-01T00:00:00 unbound-docs-1.19.1-2.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.19.1-2 https://nvd.nist.gov/vuln/detail/CVE-2024-43168 12139 unbound unbound 12140 unbound-1.19.1-2.cm2.aarch64.rpm 0001-01-01T00:00:00 unbound-devel-1.19.1-2.cm2.aarch64.rpm 0001-01-01T00:00:00 python3-unbound-1.19.1-2.cm2.aarch64.rpm 0001-01-01T00:00:00 unbound-docs-1.19.1-2.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.19.1-2 https://nvd.nist.gov/vuln/detail/CVE-2024-43168 12140 unbound 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2023-33976 https://nvd.nist.gov/vuln/detail/CVE-2023-33976 Mariner security-advisories@github.com Yes CVE-2023-33976 12139 12140 12139 12140 12139 12140 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12139 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12140 tensorflow 12139 python3-tensorflow-2.11.1-2.cm2.x86_64.rpm 0001-01-01T00:00:00 python3-tf-nightly-2.11.1-2.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.11.1-2 https://nvd.nist.gov/vuln/detail/CVE-2023-33976 12139 tensorflow tensorflow 12140 CBL-Mariner 2.11.1-2 https://nvd.nist.gov/vuln/detail/CVE-2023-33976 12140 tensorflow 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-0684 https://nvd.nist.gov/vuln/detail/CVE-2024-0684 Mariner patrick@puiterwijk.org Yes CVE-2024-0684 12356 12357 12356 12357 12356 12357 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12356 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12357 coreutils 12356 coreutils-9.4-6.azl3.x86_64.rpm 0001-01-01T00:00:00 coreutils-lang-9.4-6.azl3.x86_64.rpm 0001-01-01T00:00:00 coreutils-debuginfo-9.4-6.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 9.4-5 https://nvd.nist.gov/vuln/detail/CVE-2024-0684 12356 coreutils coreutils 12357 coreutils-9.4-6.azl3.aarch64.rpm 0001-01-01T00:00:00 coreutils-lang-9.4-6.azl3.aarch64.rpm 0001-01-01T00:00:00 coreutils-debuginfo-9.4-6.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 9.4-5 https://nvd.nist.gov/vuln/detail/CVE-2024-0684 12357 coreutils 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2020-26160 https://nvd.nist.gov/vuln/detail/CVE-2020-26160 Mariner cve@mitre.org Yes CVE-2020-26160 12356 12357 12356 12357 12356 12357 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 12356 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 12357 dcos-cli 12356 dcos-cli-1.2.0-15.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.2.0-15 https://nvd.nist.gov/vuln/detail/CVE-2020-26160 12356 dcos-cli dcos-cli 12357 dcos-cli-1.2.0-15.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.2.0-15 https://nvd.nist.gov/vuln/detail/CVE-2020-26160 12357 dcos-cli 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2023-51779 https://nvd.nist.gov/vuln/detail/CVE-2023-51779 Mariner cve@mitre.org Yes CVE-2023-51779 12356 12357 12356 12357 12356 12357 7.0 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H 12356 7.0 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H 12357 hyperv-daemons 12356 hyperv-daemons-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.29.1-1 https://nvd.nist.gov/vuln/detail/CVE-2023-51779 12356 hyperv-daemons hyperv-daemons 12357 hyperv-daemons-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.29.1-1 https://nvd.nist.gov/vuln/detail/CVE-2023-51779 12357 hyperv-daemons 1.0 2024-06-30T00:00:00 <p>Information published.</p> 1.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2023-52647 https://nvd.nist.gov/vuln/detail/CVE-2023-52647 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2023-52647 12356 12357 12356 12357 12356 12357 hyperv-daemons 12356 hyperv-daemons-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2023-52647 12356 hyperv-daemons hyperv-daemons 12357 hyperv-daemons-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2023-52647 12357 hyperv-daemons 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2023-52648 https://nvd.nist.gov/vuln/detail/CVE-2023-52648 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2023-52648 12356 12357 12356 12357 12356 12357 hyperv-daemons 12356 hyperv-daemons-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2023-52648 12356 hyperv-daemons hyperv-daemons 12357 hyperv-daemons-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2023-52648 12357 hyperv-daemons 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2023-52659 https://nvd.nist.gov/vuln/detail/CVE-2023-52659 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2023-52659 12356 12357 12356 12357 12356 12357 hyperv-daemons 12356 hyperv-daemons-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2023-52659 12356 hyperv-daemons hyperv-daemons 12357 hyperv-daemons-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2023-52659 12357 hyperv-daemons 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2023-52661 https://nvd.nist.gov/vuln/detail/CVE-2023-52661 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2023-52661 12356 12357 12356 12357 12356 12357 hyperv-daemons 12356 hyperv-daemons-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2023-52661 12356 hyperv-daemons hyperv-daemons 12357 hyperv-daemons-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2023-52661 12357 hyperv-daemons 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2023-52662 https://nvd.nist.gov/vuln/detail/CVE-2023-52662 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2023-52662 12356 12357 12356 12357 12356 12357 hyperv-daemons 12356 hyperv-daemons-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2023-52662 12356 hyperv-daemons hyperv-daemons 12357 hyperv-daemons-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2023-52662 12357 hyperv-daemons 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-26651 https://nvd.nist.gov/vuln/detail/CVE-2024-26651 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-26651 12356 12357 12356 12357 12356 12357 hyperv-daemons 12356 hyperv-daemons-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-26651 12356 hyperv-daemons hyperv-daemons 12357 hyperv-daemons-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-26651 12357 hyperv-daemons 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2023-52663 https://nvd.nist.gov/vuln/detail/CVE-2023-52663 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2023-52663 12356 12357 12356 12357 12356 12357 hyperv-daemons 12356 hyperv-daemons-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2023-52663 12356 hyperv-daemons hyperv-daemons 12357 hyperv-daemons-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2023-52663 12357 hyperv-daemons 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-26946 https://nvd.nist.gov/vuln/detail/CVE-2024-26946 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-26946 12356 12357 12356 12357 12356 12357 hyperv-daemons 12356 hyperv-daemons-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-26946 12356 hyperv-daemons hyperv-daemons 12357 hyperv-daemons-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-26946 12357 hyperv-daemons 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-26943 https://nvd.nist.gov/vuln/detail/CVE-2024-26943 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-26943 12356 12357 12356 12357 12356 12357 hyperv-daemons 12356 hyperv-daemons-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-26943 12356 hyperv-daemons hyperv-daemons 12357 hyperv-daemons-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-26943 12357 hyperv-daemons 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-26963 https://nvd.nist.gov/vuln/detail/CVE-2024-26963 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-26963 12356 12357 12356 12357 12356 12357 hyperv-daemons 12356 hyperv-daemons-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-26963 12356 hyperv-daemons hyperv-daemons 12357 hyperv-daemons-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-26963 12357 hyperv-daemons 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-26986 https://nvd.nist.gov/vuln/detail/CVE-2024-26986 https://nvd.nist.gov/vuln/detail/CVE-2024-26986 https://nvd.nist.gov/vuln/detail/CVE-2024-26986 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-26986 12356 12357 12356 12357 12356 12357 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12356 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12357 hyperv-daemons 12356 hyperv-daemons-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-26986 12356 hyperv-daemons kernel 12356 kernel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-26986 12356 kernel hyperv-daemons 12357 hyperv-daemons-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-26986 12357 hyperv-daemons kernel 12357 kernel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-26986 12357 kernel 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-26990 https://nvd.nist.gov/vuln/detail/CVE-2024-26990 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-26990 12356 12357 12356 12357 12356 12357 hyperv-daemons 12356 hyperv-daemons-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-26990 12356 hyperv-daemons hyperv-daemons 12357 hyperv-daemons-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-26990 12357 hyperv-daemons 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-26987 https://nvd.nist.gov/vuln/detail/CVE-2024-26987 https://nvd.nist.gov/vuln/detail/CVE-2024-26987 https://nvd.nist.gov/vuln/detail/CVE-2024-26987 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-26987 12356 12357 12356 12357 12356 12357 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12356 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12357 hyperv-daemons 12356 hyperv-daemons-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-26987 12356 hyperv-daemons kernel 12356 kernel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-26987 12356 kernel hyperv-daemons 12357 hyperv-daemons-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-26987 12357 hyperv-daemons kernel 12357 kernel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-26987 12357 kernel 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-26988 https://nvd.nist.gov/vuln/detail/CVE-2024-26988 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-26988 12356 12357 12356 12357 12356 12357 hyperv-daemons 12356 hyperv-daemons-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-26988 12356 hyperv-daemons hyperv-daemons 12357 hyperv-daemons-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-26988 12357 hyperv-daemons 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-27009 https://nvd.nist.gov/vuln/detail/CVE-2024-27009 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-27009 12356 12357 12356 12357 12356 12357 hyperv-daemons 12356 hyperv-daemons-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-27009 12356 hyperv-daemons hyperv-daemons 12357 hyperv-daemons-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-27009 12357 hyperv-daemons 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-27026 https://nvd.nist.gov/vuln/detail/CVE-2024-27026 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-27026 12356 12357 12356 12357 12356 12357 hyperv-daemons 12356 hyperv-daemons-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-27026 12356 hyperv-daemons hyperv-daemons 12357 hyperv-daemons-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-27026 12357 hyperv-daemons 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-27063 https://nvd.nist.gov/vuln/detail/CVE-2024-27063 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-27063 12356 12357 12356 12357 12356 12357 hyperv-daemons 12356 hyperv-daemons-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-27063 12356 hyperv-daemons hyperv-daemons 12357 hyperv-daemons-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-27063 12357 hyperv-daemons 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-27050 https://nvd.nist.gov/vuln/detail/CVE-2024-27050 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-27050 12356 12357 12356 12357 12356 12357 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12356 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12357 hyperv-daemons 12356 hyperv-daemons-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-27050 12356 hyperv-daemons hyperv-daemons 12357 hyperv-daemons-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-27050 12357 hyperv-daemons 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-27053 https://nvd.nist.gov/vuln/detail/CVE-2024-27053 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-27053 12356 12357 12356 12357 12356 12357 9.1 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H 12356 9.1 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H 12357 hyperv-daemons 12356 hyperv-daemons-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-27053 12356 hyperv-daemons hyperv-daemons 12357 hyperv-daemons-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-27053 12357 hyperv-daemons 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-27075 https://nvd.nist.gov/vuln/detail/CVE-2024-27075 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-27075 12356 12357 12356 12357 12356 12357 hyperv-daemons 12356 hyperv-daemons-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-27075 12356 hyperv-daemons hyperv-daemons 12357 hyperv-daemons-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-27075 12357 hyperv-daemons 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-27432 https://nvd.nist.gov/vuln/detail/CVE-2024-27432 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-27432 12356 12357 12356 12357 12356 12357 hyperv-daemons 12356 hyperv-daemons-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-27432 12356 hyperv-daemons hyperv-daemons 12357 hyperv-daemons-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-27432 12357 hyperv-daemons 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-27395 https://nvd.nist.gov/vuln/detail/CVE-2024-27395 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-27395 12356 12357 12356 12357 12356 12357 hyperv-daemons 12356 hyperv-daemons-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-27395 12356 hyperv-daemons hyperv-daemons 12357 hyperv-daemons-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-27395 12357 hyperv-daemons 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-27434 https://nvd.nist.gov/vuln/detail/CVE-2024-27434 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-27434 12356 12357 12356 12357 12356 12357 hyperv-daemons 12356 hyperv-daemons-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-27434 12356 hyperv-daemons hyperv-daemons 12357 hyperv-daemons-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-27434 12357 hyperv-daemons 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-27433 https://nvd.nist.gov/vuln/detail/CVE-2024-27433 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-27433 12356 12357 12356 12357 12356 12357 hyperv-daemons 12356 hyperv-daemons-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-27433 12356 hyperv-daemons hyperv-daemons 12357 hyperv-daemons-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-27433 12357 hyperv-daemons 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-35792 https://nvd.nist.gov/vuln/detail/CVE-2024-35792 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-35792 12356 12357 12356 12357 12356 12357 hyperv-daemons 12356 hyperv-daemons-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-35792 12356 hyperv-daemons hyperv-daemons 12357 hyperv-daemons-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-35792 12357 hyperv-daemons 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-35790 https://nvd.nist.gov/vuln/detail/CVE-2024-35790 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-35790 12356 12357 12356 12357 12356 12357 hyperv-daemons 12356 hyperv-daemons-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-35790 12356 hyperv-daemons hyperv-daemons 12357 hyperv-daemons-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-35790 12357 hyperv-daemons 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-35795 https://nvd.nist.gov/vuln/detail/CVE-2024-35795 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-35795 12356 12357 12356 12357 12356 12357 hyperv-daemons 12356 hyperv-daemons-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-35795 12356 hyperv-daemons hyperv-daemons 12357 hyperv-daemons-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-35795 12357 hyperv-daemons 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-35801 https://nvd.nist.gov/vuln/detail/CVE-2024-35801 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-35801 12356 12357 12356 12357 12356 12357 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12356 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12357 hyperv-daemons 12356 hyperv-daemons-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-35801 12356 hyperv-daemons hyperv-daemons 12357 hyperv-daemons-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-35801 12357 hyperv-daemons 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-35794 https://nvd.nist.gov/vuln/detail/CVE-2024-35794 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-35794 12356 12357 12356 12357 12356 12357 hyperv-daemons 12356 hyperv-daemons-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-35794 12356 hyperv-daemons hyperv-daemons 12357 hyperv-daemons-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-35794 12357 hyperv-daemons 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-35816 https://nvd.nist.gov/vuln/detail/CVE-2024-35816 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-35816 12356 12357 12356 12357 12356 12357 hyperv-daemons 12356 hyperv-daemons-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-35816 12356 hyperv-daemons hyperv-daemons 12357 hyperv-daemons-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-35816 12357 hyperv-daemons 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-35827 https://nvd.nist.gov/vuln/detail/CVE-2024-35827 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-35827 12356 12357 12356 12357 12356 12357 hyperv-daemons 12356 hyperv-daemons-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-35827 12356 hyperv-daemons hyperv-daemons 12357 hyperv-daemons-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-35827 12357 hyperv-daemons 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-35830 https://nvd.nist.gov/vuln/detail/CVE-2024-35830 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-35830 12356 12357 12356 12357 12356 12357 hyperv-daemons 12356 hyperv-daemons-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-35830 12356 hyperv-daemons hyperv-daemons 12357 hyperv-daemons-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-35830 12357 hyperv-daemons 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-32650 https://nvd.nist.gov/vuln/detail/CVE-2024-32650 Mariner security-advisories@github.com Yes CVE-2024-32650 12356 12357 12356 12357 12356 12357 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12356 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12357 kata-containers 12356 kata-containers-3.2.0.azl2-3.azl3.x86_64.rpm 0001-01-01T00:00:00 kata-containers-tools-3.2.0.azl2-3.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.2.0.azl2-3 https://nvd.nist.gov/vuln/detail/CVE-2024-32650 12356 kata-containers kata-containers 12357 kata-containers-3.2.0.azl2-3.azl3.aarch64.rpm 0001-01-01T00:00:00 kata-containers-tools-3.2.0.azl2-3.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.2.0.azl2-3 https://nvd.nist.gov/vuln/detail/CVE-2024-32650 12357 kata-containers 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2022-23523 https://nvd.nist.gov/vuln/detail/CVE-2022-23523 Mariner security-advisories@github.com Yes CVE-2022-23523 12356 12357 12356 12357 12356 12357 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12356 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12357 kata-containers 12356 kata-containers-3.2.0.azl2-3.azl3.x86_64.rpm 0001-01-01T00:00:00 kata-containers-tools-3.2.0.azl2-3.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.2.0.azl2-3 https://nvd.nist.gov/vuln/detail/CVE-2022-23523 12356 kata-containers kata-containers 12357 kata-containers-3.2.0.azl2-3.azl3.aarch64.rpm 0001-01-01T00:00:00 kata-containers-tools-3.2.0.azl2-3.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.2.0.azl2-3 https://nvd.nist.gov/vuln/detail/CVE-2022-23523 12357 kata-containers 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2021-32923 https://nvd.nist.gov/vuln/detail/CVE-2021-32923 Mariner cve@mitre.org Yes CVE-2021-32923 12356 12357 12356 12357 12356 12357 7.4 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N 12356 7.4 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N 12357 keda 12356 keda-2.14.0-1.azl3.x86_64.rpm 0001-01-01T00:00:00 keda-debuginfo-2.14.0-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.14.0-1 https://nvd.nist.gov/vuln/detail/CVE-2021-32923 12356 keda keda 12357 keda-2.14.0-1.azl3.aarch64.rpm 0001-01-01T00:00:00 keda-debuginfo-2.14.0-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.14.0-1 https://nvd.nist.gov/vuln/detail/CVE-2021-32923 12357 keda 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2021-42248 https://nvd.nist.gov/vuln/detail/CVE-2021-42248 Mariner cve@mitre.org Yes CVE-2021-42248 12356 12357 12356 12357 12356 12357 keda 12356 keda-2.14.0-1.azl3.x86_64.rpm 0001-01-01T00:00:00 keda-debuginfo-2.14.0-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.14.0-1 https://nvd.nist.gov/vuln/detail/CVE-2021-42248 12356 keda keda 12357 keda-2.14.0-1.azl3.aarch64.rpm 0001-01-01T00:00:00 keda-debuginfo-2.14.0-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.14.0-1 https://nvd.nist.gov/vuln/detail/CVE-2021-42248 12357 keda 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2021-42836 https://nvd.nist.gov/vuln/detail/CVE-2021-42836 Mariner cve@mitre.org Yes CVE-2021-42836 12356 12357 12356 12357 12356 12357 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12356 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12357 keda 12356 keda-2.14.0-1.azl3.x86_64.rpm 0001-01-01T00:00:00 keda-debuginfo-2.14.0-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.14.0-1 https://nvd.nist.gov/vuln/detail/CVE-2021-42836 12356 keda keda 12357 keda-2.14.0-1.azl3.aarch64.rpm 0001-01-01T00:00:00 keda-debuginfo-2.14.0-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.14.0-1 https://nvd.nist.gov/vuln/detail/CVE-2021-42836 12357 keda 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-36967 https://nvd.nist.gov/vuln/detail/CVE-2024-36967 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-36967 12356 12357 12356 12357 12356 12357 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12356 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12357 kernel 12356 kernel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-36967 12356 kernel kernel 12357 kernel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-36967 12357 kernel 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-36965 https://nvd.nist.gov/vuln/detail/CVE-2024-36965 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-36965 12356 12357 12356 12357 12356 12357 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12356 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12357 kernel 12356 kernel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-36965 12356 kernel kernel 12357 kernel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-36965 12357 kernel 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-38570 https://nvd.nist.gov/vuln/detail/CVE-2024-38570 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-38570 12356 12357 12356 12357 12356 12357 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12356 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12357 kernel 12356 kernel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-38570 12356 kernel kernel 12357 kernel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-38570 12357 kernel 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-36968 https://nvd.nist.gov/vuln/detail/CVE-2024-36968 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-36968 12356 12357 12356 12357 12356 12357 6.5 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H 12356 6.5 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H 12357 kernel 12356 kernel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-36968 12356 kernel kernel 12357 kernel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-36968 12357 kernel 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-36969 https://nvd.nist.gov/vuln/detail/CVE-2024-36969 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-36969 12356 12357 12356 12357 12356 12357 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12356 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12357 kernel 12356 kernel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-36969 12356 kernel kernel 12357 kernel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-36969 12357 kernel 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-39479 https://nvd.nist.gov/vuln/detail/CVE-2024-39479 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-39479 12356 12357 12356 12357 12356 12357 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12356 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12357 kernel 12356 kernel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-39479 12356 kernel kernel 12357 kernel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-39479 12357 kernel 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-39481 https://nvd.nist.gov/vuln/detail/CVE-2024-39481 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-39481 12356 12357 12356 12357 12356 12357 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12356 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12357 kernel 12356 kernel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-39481 12356 kernel kernel 12357 kernel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-39481 12357 kernel 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-39494 https://nvd.nist.gov/vuln/detail/CVE-2024-39494 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-39494 12356 12357 12356 12357 12356 12357 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12356 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12357 kernel 12356 kernel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-39494 12356 kernel kernel 12357 kernel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-39494 12357 kernel 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-39486 https://nvd.nist.gov/vuln/detail/CVE-2024-39486 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-39486 12356 12357 12356 12357 12356 12357 7.0 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H 12356 7.0 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H 12357 kernel 12356 kernel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-39486 12356 kernel kernel 12357 kernel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-39486 12357 kernel 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-40960 https://nvd.nist.gov/vuln/detail/CVE-2024-40960 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-40960 12356 12357 12356 12357 12356 12357 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12356 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12357 kernel 12356 kernel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-40960 12356 kernel kernel 12357 kernel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-40960 12357 kernel 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-40961 https://nvd.nist.gov/vuln/detail/CVE-2024-40961 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-40961 12356 12357 12356 12357 12356 12357 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12356 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12357 kernel 12356 kernel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-40961 12356 kernel kernel 12357 kernel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-40961 12357 kernel 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-40994 https://nvd.nist.gov/vuln/detail/CVE-2024-40994 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-40994 12356 12357 12356 12357 12356 12357 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12356 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12357 kernel 12356 kernel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-40994 12356 kernel kernel 12357 kernel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-40994 12357 kernel 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-41000 https://nvd.nist.gov/vuln/detail/CVE-2024-41000 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-41000 12356 12357 12356 12357 12356 12357 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12356 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12357 kernel 12356 kernel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-41000 12356 kernel kernel 12357 kernel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-41000 12357 kernel 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-41001 https://nvd.nist.gov/vuln/detail/CVE-2024-41001 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-41001 12356 12357 12356 12357 12356 12357 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12356 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12357 kernel 12356 kernel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-41001 12356 kernel kernel 12357 kernel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-41001 12357 kernel 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-41002 https://nvd.nist.gov/vuln/detail/CVE-2024-41002 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-41002 12356 12357 12356 12357 12356 12357 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12356 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12357 kernel 12356 kernel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-41002 12356 kernel kernel 12357 kernel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-41002 12357 kernel 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-41006 https://nvd.nist.gov/vuln/detail/CVE-2024-41006 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-41006 12356 12357 12356 12357 12356 12357 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12356 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12357 kernel 12356 kernel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-41006 12356 kernel kernel 12357 kernel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-41006 12357 kernel 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-41053 https://nvd.nist.gov/vuln/detail/CVE-2024-41053 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-41053 12356 12357 12356 12357 12356 12357 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12356 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12357 kernel 12356 kernel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-41053 12356 kernel kernel 12357 kernel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-41053 12357 kernel 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-41054 https://nvd.nist.gov/vuln/detail/CVE-2024-41054 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-41054 12356 12357 12356 12357 12356 12357 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12356 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12357 kernel 12356 kernel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-41054 12356 kernel kernel 12357 kernel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-41054 12357 kernel 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-41057 https://nvd.nist.gov/vuln/detail/CVE-2024-41057 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-41057 12356 12357 12356 12357 12356 12357 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12356 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12357 kernel 12356 kernel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-41057 12356 kernel kernel 12357 kernel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-41057 12357 kernel 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-41064 https://nvd.nist.gov/vuln/detail/CVE-2024-41064 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-41064 12356 12357 12356 12357 12356 12357 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12356 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12357 kernel 12356 kernel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-41064 12356 kernel kernel 12357 kernel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-41064 12357 kernel 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-41058 https://nvd.nist.gov/vuln/detail/CVE-2024-41058 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-41058 12356 12357 12356 12357 12356 12357 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12356 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12357 kernel 12356 kernel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-41058 12356 kernel kernel 12357 kernel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-41058 12357 kernel 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-41094 https://nvd.nist.gov/vuln/detail/CVE-2024-41094 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-41094 12356 12357 12356 12357 12356 12357 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12356 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12357 kernel 12356 kernel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-41094 12356 kernel kernel 12357 kernel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-41094 12357 kernel 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-42085 https://nvd.nist.gov/vuln/detail/CVE-2024-42085 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-42085 12356 12357 12356 12357 12356 12357 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12356 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12357 kernel 12356 kernel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-42085 12356 kernel kernel 12357 kernel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-42085 12357 kernel 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-41097 https://nvd.nist.gov/vuln/detail/CVE-2024-41097 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-41097 12356 12357 12356 12357 12356 12357 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12356 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12357 kernel 12356 kernel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-41097 12356 kernel kernel 12357 kernel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-41097 12357 kernel 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-42090 https://nvd.nist.gov/vuln/detail/CVE-2024-42090 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-42090 12356 12357 12356 12357 12356 12357 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12356 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12357 kernel 12356 kernel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-42090 12356 kernel kernel 12357 kernel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-42090 12357 kernel 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-42268 https://nvd.nist.gov/vuln/detail/CVE-2024-42268 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-42268 12356 12357 12356 12357 12356 12357 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12356 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12357 kernel 12356 kernel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-42268 12356 kernel kernel 12357 kernel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-42268 12357 kernel 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-42316 https://nvd.nist.gov/vuln/detail/CVE-2024-42316 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-42316 12356 12357 12356 12357 12356 12357 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12356 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12357 kernel 12356 kernel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-42316 12356 kernel kernel 12357 kernel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-42316 12357 kernel 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-43837 https://nvd.nist.gov/vuln/detail/CVE-2024-43837 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-43837 12356 12357 12356 12357 12356 12357 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12356 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12357 kernel 12356 kernel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-43837 12356 kernel kernel 12357 kernel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-43837 12357 kernel 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-43833 https://nvd.nist.gov/vuln/detail/CVE-2024-43833 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-43833 12356 12357 12356 12357 12356 12357 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12356 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12357 kernel 12356 kernel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-43833 12356 kernel kernel 12357 kernel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-43833 12357 kernel 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-43859 https://nvd.nist.gov/vuln/detail/CVE-2024-43859 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-43859 12356 12357 12356 12357 12356 12357 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12356 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12357 kernel 12356 kernel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-43859 12356 kernel kernel 12357 kernel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-43859 12357 kernel 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-26462 https://nvd.nist.gov/vuln/detail/CVE-2024-26462 Mariner cve@mitre.org Yes CVE-2024-26462 12356 12357 12356 12357 12356 12357 krb5 12356 krb5-1.21.3-1.azl3.x86_64.rpm 0001-01-01T00:00:00 krb5-devel-1.21.3-1.azl3.x86_64.rpm 0001-01-01T00:00:00 krb5-lang-1.21.3-1.azl3.x86_64.rpm 0001-01-01T00:00:00 krb5-debuginfo-1.21.3-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.21.3-1 https://nvd.nist.gov/vuln/detail/CVE-2024-26462 12356 krb5 krb5 12357 krb5-1.21.3-1.azl3.aarch64.rpm 0001-01-01T00:00:00 krb5-devel-1.21.3-1.azl3.aarch64.rpm 0001-01-01T00:00:00 krb5-lang-1.21.3-1.azl3.aarch64.rpm 0001-01-01T00:00:00 krb5-debuginfo-1.21.3-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.21.3-1 https://nvd.nist.gov/vuln/detail/CVE-2024-26462 12357 krb5 1.0 2024-08-15T17:00:00 <p>Information published.</p> 1.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2020-28851 https://nvd.nist.gov/vuln/detail/CVE-2020-28851 Mariner cve@mitre.org Yes CVE-2020-28851 12356 12357 12356 12357 12356 12357 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12356 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12357 multus 12356 multus-4.0.2-1.azl3.x86_64.rpm 0001-01-01T00:00:00 multus-k8s-yaml-4.0.2-1.azl3.x86_64.rpm 0001-01-01T00:00:00 multus-debuginfo-4.0.2-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 4.0.2-1 https://nvd.nist.gov/vuln/detail/CVE-2020-28851 12356 multus multus 12357 multus-4.0.2-1.azl3.aarch64.rpm 0001-01-01T00:00:00 multus-k8s-yaml-4.0.2-1.azl3.aarch64.rpm 0001-01-01T00:00:00 multus-debuginfo-4.0.2-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 4.0.2-1 https://nvd.nist.gov/vuln/detail/CVE-2020-28851 12357 multus 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2020-28852 https://nvd.nist.gov/vuln/detail/CVE-2020-28852 Mariner cve@mitre.org Yes CVE-2020-28852 12356 12357 12356 12357 12356 12357 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12356 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12357 multus 12356 multus-4.0.2-1.azl3.x86_64.rpm 0001-01-01T00:00:00 multus-k8s-yaml-4.0.2-1.azl3.x86_64.rpm 0001-01-01T00:00:00 multus-debuginfo-4.0.2-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 4.0.2-1 https://nvd.nist.gov/vuln/detail/CVE-2020-28852 12356 multus multus 12357 multus-4.0.2-1.azl3.aarch64.rpm 0001-01-01T00:00:00 multus-k8s-yaml-4.0.2-1.azl3.aarch64.rpm 0001-01-01T00:00:00 multus-debuginfo-4.0.2-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 4.0.2-1 https://nvd.nist.gov/vuln/detail/CVE-2020-28852 12357 multus 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-39894 https://nvd.nist.gov/vuln/detail/CVE-2024-39894 Mariner cve@mitre.org Yes CVE-2024-39894 12356 12357 12356 12357 12356 12357 7.5 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H 12356 7.5 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H 12357 openssh 12356 openssh-9.8p1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 openssh-clients-9.8p1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 openssh-server-9.8p1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 pam_ssh_agent_auth-0.10.3-11.azl3.x86_64.rpm 0001-01-01T00:00:00 openssh-debuginfo-9.8p1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 9.8p1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-39894 12356 openssh openssh 12357 openssh-9.8p1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 openssh-clients-9.8p1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 openssh-server-9.8p1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 pam_ssh_agent_auth-0.10.3-11.azl3.aarch64.rpm 0001-01-01T00:00:00 openssh-debuginfo-9.8p1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 9.8p1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-39894 12357 openssh 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2022-46146 https://nvd.nist.gov/vuln/detail/CVE-2022-46146 Mariner security-advisories@github.com Yes CVE-2022-46146 12356 12357 12356 12357 12356 12357 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12356 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12357 prometheus-process-exporter 12356 prometheus-process-exporter-0.8.2-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 0.8.2-1 https://nvd.nist.gov/vuln/detail/CVE-2022-46146 12356 prometheus-process-exporter prometheus-process-exporter 12357 prometheus-process-exporter-0.8.2-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 0.8.2-1 https://nvd.nist.gov/vuln/detail/CVE-2022-46146 12357 prometheus-process-exporter 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2022-31627 https://nvd.nist.gov/vuln/detail/CVE-2022-31627 Mariner security@php.net Yes CVE-2022-31627 12356 12357 12356 12357 12356 12357 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 12356 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 12357 php 12356 php-8.3.8-1.azl3.x86_64.rpm 0001-01-01T00:00:00 php-cli-8.3.8-1.azl3.x86_64.rpm 0001-01-01T00:00:00 php-dbg-8.3.8-1.azl3.x86_64.rpm 0001-01-01T00:00:00 php-fpm-8.3.8-1.azl3.x86_64.rpm 0001-01-01T00:00:00 php-common-8.3.8-1.azl3.x86_64.rpm 0001-01-01T00:00:00 php-devel-8.3.8-1.azl3.x86_64.rpm 0001-01-01T00:00:00 php-opcache-8.3.8-1.azl3.x86_64.rpm 0001-01-01T00:00:00 php-ldap-8.3.8-1.azl3.x86_64.rpm 0001-01-01T00:00:00 php-pdo-8.3.8-1.azl3.x86_64.rpm 0001-01-01T00:00:00 php-mysqlnd-8.3.8-1.azl3.x86_64.rpm 0001-01-01T00:00:00 php-pgsql-8.3.8-1.azl3.x86_64.rpm 0001-01-01T00:00:00 php-process-8.3.8-1.azl3.x86_64.rpm 0001-01-01T00:00:00 php-odbc-8.3.8-1.azl3.x86_64.rpm 0001-01-01T00:00:00 php-soap-8.3.8-1.azl3.x86_64.rpm 0001-01-01T00:00:00 php-snmp-8.3.8-1.azl3.x86_64.rpm 0001-01-01T00:00:00 php-xml-8.3.8-1.azl3.x86_64.rpm 0001-01-01T00:00:00 php-mbstring-8.3.8-1.azl3.x86_64.rpm 0001-01-01T00:00:00 php-gd-8.3.8-1.azl3.x86_64.rpm 0001-01-01T00:00:00 php-bcmath-8.3.8-1.azl3.x86_64.rpm 0001-01-01T00:00:00 php-gmp-8.3.8-1.azl3.x86_64.rpm 0001-01-01T00:00:00 php-dba-8.3.8-1.azl3.x86_64.rpm 0001-01-01T00:00:00 php-tidy-8.3.8-1.azl3.x86_64.rpm 0001-01-01T00:00:00 php-pdo-dblib-8.3.8-1.azl3.x86_64.rpm 0001-01-01T00:00:00 php-embedded-8.3.8-1.azl3.x86_64.rpm 0001-01-01T00:00:00 php-pspell-8.3.8-1.azl3.x86_64.rpm 0001-01-01T00:00:00 php-intl-8.3.8-1.azl3.x86_64.rpm 0001-01-01T00:00:00 php-enchant-8.3.8-1.azl3.x86_64.rpm 0001-01-01T00:00:00 php-sodium-8.3.8-1.azl3.x86_64.rpm 0001-01-01T00:00:00 php-ffi-8.3.8-1.azl3.x86_64.rpm 0001-01-01T00:00:00 php-debuginfo-8.3.8-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 8.3.8-1 https://nvd.nist.gov/vuln/detail/CVE-2022-31627 12356 php php 12357 php-8.3.8-1.azl3.aarch64.rpm 0001-01-01T00:00:00 php-cli-8.3.8-1.azl3.aarch64.rpm 0001-01-01T00:00:00 php-dbg-8.3.8-1.azl3.aarch64.rpm 0001-01-01T00:00:00 php-fpm-8.3.8-1.azl3.aarch64.rpm 0001-01-01T00:00:00 php-common-8.3.8-1.azl3.aarch64.rpm 0001-01-01T00:00:00 php-devel-8.3.8-1.azl3.aarch64.rpm 0001-01-01T00:00:00 php-opcache-8.3.8-1.azl3.aarch64.rpm 0001-01-01T00:00:00 php-ldap-8.3.8-1.azl3.aarch64.rpm 0001-01-01T00:00:00 php-pdo-8.3.8-1.azl3.aarch64.rpm 0001-01-01T00:00:00 php-mysqlnd-8.3.8-1.azl3.aarch64.rpm 0001-01-01T00:00:00 php-pgsql-8.3.8-1.azl3.aarch64.rpm 0001-01-01T00:00:00 php-process-8.3.8-1.azl3.aarch64.rpm 0001-01-01T00:00:00 php-odbc-8.3.8-1.azl3.aarch64.rpm 0001-01-01T00:00:00 php-soap-8.3.8-1.azl3.aarch64.rpm 0001-01-01T00:00:00 php-snmp-8.3.8-1.azl3.aarch64.rpm 0001-01-01T00:00:00 php-xml-8.3.8-1.azl3.aarch64.rpm 0001-01-01T00:00:00 php-mbstring-8.3.8-1.azl3.aarch64.rpm 0001-01-01T00:00:00 php-gd-8.3.8-1.azl3.aarch64.rpm 0001-01-01T00:00:00 php-bcmath-8.3.8-1.azl3.aarch64.rpm 0001-01-01T00:00:00 php-gmp-8.3.8-1.azl3.aarch64.rpm 0001-01-01T00:00:00 php-dba-8.3.8-1.azl3.aarch64.rpm 0001-01-01T00:00:00 php-tidy-8.3.8-1.azl3.aarch64.rpm 0001-01-01T00:00:00 php-pdo-dblib-8.3.8-1.azl3.aarch64.rpm 0001-01-01T00:00:00 php-embedded-8.3.8-1.azl3.aarch64.rpm 0001-01-01T00:00:00 php-pspell-8.3.8-1.azl3.aarch64.rpm 0001-01-01T00:00:00 php-intl-8.3.8-1.azl3.aarch64.rpm 0001-01-01T00:00:00 php-enchant-8.3.8-1.azl3.aarch64.rpm 0001-01-01T00:00:00 php-sodium-8.3.8-1.azl3.aarch64.rpm 0001-01-01T00:00:00 php-ffi-8.3.8-1.azl3.aarch64.rpm 0001-01-01T00:00:00 php-debuginfo-8.3.8-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 8.3.8-1 https://nvd.nist.gov/vuln/detail/CVE-2022-31627 12357 php 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2019-11358 Mariner cve@mitre.org Yes CVE-2019-11358 12356 12357 12356 12357 12356 12357 6.1 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N 12356 6.1 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N 12357 python-pygments 12356 12357 python3-pygments-2.7.4-1.azl3.noarch.rpm 0001-01-01T00:00:00 CBL-Mariner 2.7.4-1 https://nvd.nist.gov/vuln/detail/CVE-2019-11358 12356 12357 python-pygments 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2019-16276 https://nvd.nist.gov/vuln/detail/CVE-2019-16276 Mariner cve@mitre.org Yes CVE-2019-16276 12356 12357 12356 12357 12356 12357 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 12356 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 12357 python-tensorboard 12356 python3-tensorboard-2.16.2-2.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-tensorboard-data-server-2.16.2-2.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.16.2-2 https://nvd.nist.gov/vuln/detail/CVE-2019-16276 12356 python-tensorboard python-tensorboard 12357 CBL-Mariner 2.16.2-2 https://nvd.nist.gov/vuln/detail/CVE-2019-16276 12357 python-tensorboard 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2021-33195 https://nvd.nist.gov/vuln/detail/CVE-2021-33195 Mariner cve@mitre.org Yes CVE-2021-33195 12356 12357 12356 12357 12356 12357 7.3 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L 12356 7.3 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L 12357 python-tensorboard 12356 python3-tensorboard-2.16.2-2.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-tensorboard-data-server-2.16.2-2.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.16.2-2 https://nvd.nist.gov/vuln/detail/CVE-2021-33195 12356 python-tensorboard python-tensorboard 12357 CBL-Mariner 2.16.2-2 https://nvd.nist.gov/vuln/detail/CVE-2021-33195 12357 python-tensorboard 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2019-17596 https://nvd.nist.gov/vuln/detail/CVE-2019-17596 Mariner cve@mitre.org Yes CVE-2019-17596 12356 12357 12356 12357 12356 12357 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12356 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12357 python-tensorboard 12356 python3-tensorboard-2.16.2-2.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-tensorboard-data-server-2.16.2-2.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.16.2-2 https://nvd.nist.gov/vuln/detail/CVE-2019-17596 12356 python-tensorboard python-tensorboard 12357 CBL-Mariner 2.16.2-2 https://nvd.nist.gov/vuln/detail/CVE-2019-17596 12357 python-tensorboard 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2021-22569 https://nvd.nist.gov/vuln/detail/CVE-2021-22569 Mariner cve-coordination@google.com Yes CVE-2021-22569 12356 12357 12356 12357 12356 12357 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 12356 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 12357 python-tensorboard 12356 python3-tensorboard-2.16.2-2.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-tensorboard-data-server-2.16.2-2.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.16.2-2 https://nvd.nist.gov/vuln/detail/CVE-2021-22569 12356 python-tensorboard python-tensorboard 12357 CBL-Mariner 2.16.2-2 https://nvd.nist.gov/vuln/detail/CVE-2021-22569 12357 python-tensorboard 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2021-33198 https://nvd.nist.gov/vuln/detail/CVE-2021-33198 Mariner cve@mitre.org Yes CVE-2021-33198 12356 12357 12356 12357 12356 12357 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12356 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12357 python-tensorboard 12356 python3-tensorboard-2.16.2-2.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-tensorboard-data-server-2.16.2-2.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.16.2-2 https://nvd.nist.gov/vuln/detail/CVE-2021-33198 12356 python-tensorboard python-tensorboard 12357 CBL-Mariner 2.16.2-2 https://nvd.nist.gov/vuln/detail/CVE-2021-33198 12357 python-tensorboard 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2022-3171 https://nvd.nist.gov/vuln/detail/CVE-2022-3171 Mariner cve-coordination@google.com Yes CVE-2022-3171 12356 12357 12356 12357 12356 12357 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12356 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12357 python-tensorboard 12356 python3-tensorboard-2.16.2-2.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-tensorboard-data-server-2.16.2-2.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.16.2-2 https://nvd.nist.gov/vuln/detail/CVE-2022-3171 12356 python-tensorboard python-tensorboard 12357 CBL-Mariner 2.16.2-2 https://nvd.nist.gov/vuln/detail/CVE-2022-3171 12357 python-tensorboard 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2022-3509 https://nvd.nist.gov/vuln/detail/CVE-2022-3509 Mariner cve-coordination@google.com Yes CVE-2022-3509 12356 12357 12356 12357 12356 12357 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12356 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12357 python-tensorboard 12356 python3-tensorboard-2.16.2-2.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-tensorboard-data-server-2.16.2-2.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.16.2-2 https://nvd.nist.gov/vuln/detail/CVE-2022-3509 12356 python-tensorboard python-tensorboard 12357 CBL-Mariner 2.16.2-2 https://nvd.nist.gov/vuln/detail/CVE-2022-3509 12357 python-tensorboard 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2022-46175 https://nvd.nist.gov/vuln/detail/CVE-2022-46175 Mariner security-advisories@github.com Yes CVE-2022-46175 12356 12357 12356 12357 12356 12357 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12356 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12357 python-tensorboard 12356 python3-tensorboard-2.16.2-2.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-tensorboard-data-server-2.16.2-2.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.16.2-2 https://nvd.nist.gov/vuln/detail/CVE-2022-46175 12356 python-tensorboard python-tensorboard 12357 CBL-Mariner 2.16.2-2 https://nvd.nist.gov/vuln/detail/CVE-2022-46175 12357 python-tensorboard 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2021-3611 https://nvd.nist.gov/vuln/detail/CVE-2021-3611 Mariner secalert@redhat.com Yes CVE-2021-3611 12356 12357 12356 12357 12356 12357 6.5 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H 12356 6.5 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H 12357 qemu 12356 qemu-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-common-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-docs-8.2.0-9.azl3.noarch.rpm 0001-01-01T00:00:00 qemu-img-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-guest-agent-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-tools-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-pr-helper-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-tests-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-curl-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-dmg-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-nfs-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-oss-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-curses-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-user-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-ipxe-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-cris-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-cris-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-hppa-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-hppa-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-m68k-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-m68k-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-mips-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 8.2.0-1 https://nvd.nist.gov/vuln/detail/CVE-2021-3611 12356 qemu qemu 12357 qemu-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-common-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-docs-8.2.0-9.azl3.noarch.rpm 0001-01-01T00:00:00 qemu-img-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-guest-agent-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-tools-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-pr-helper-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-tests-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-curl-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-dmg-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-nfs-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-oss-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-curses-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-user-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-ipxe-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-hppa-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-hppa-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-m68k-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-m68k-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 8.2.0-1 https://nvd.nist.gov/vuln/detail/CVE-2021-3611 12357 qemu 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2023-1544 https://nvd.nist.gov/vuln/detail/CVE-2023-1544 Mariner patrick@puiterwijk.org Yes CVE-2023-1544 12356 12357 12356 12357 12356 12357 6.3 6.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H 12356 6.3 6.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H 12357 qemu 12356 qemu-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-common-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-docs-8.2.0-9.azl3.noarch.rpm 0001-01-01T00:00:00 qemu-img-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-guest-agent-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-tools-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-pr-helper-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-tests-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-curl-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-dmg-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-nfs-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-oss-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-curses-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-user-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-ipxe-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-cris-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-cris-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-hppa-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-hppa-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-m68k-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-m68k-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-mips-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 8.2.0-1 https://nvd.nist.gov/vuln/detail/CVE-2023-1544 12356 qemu qemu 12357 qemu-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-common-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-docs-8.2.0-9.azl3.noarch.rpm 0001-01-01T00:00:00 qemu-img-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-guest-agent-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-tools-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-pr-helper-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-tests-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-curl-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-dmg-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-nfs-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-oss-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-curses-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-user-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-ipxe-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-hppa-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-hppa-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-m68k-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-m68k-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 8.2.0-1 https://nvd.nist.gov/vuln/detail/CVE-2023-1544 12357 qemu 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2023-2861 https://nvd.nist.gov/vuln/detail/CVE-2023-2861 Mariner patrick@puiterwijk.org Yes CVE-2023-2861 12356 12357 12356 12357 12356 12357 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N 12356 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N 12357 qemu 12356 qemu-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-common-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-docs-8.2.0-9.azl3.noarch.rpm 0001-01-01T00:00:00 qemu-img-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-guest-agent-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-tools-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-pr-helper-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-tests-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-curl-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-dmg-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-nfs-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-oss-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-curses-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-user-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-ipxe-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-cris-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-cris-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-hppa-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-hppa-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-m68k-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-m68k-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-mips-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 8.2.0-1 https://nvd.nist.gov/vuln/detail/CVE-2023-2861 12356 qemu qemu 12357 qemu-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-common-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-docs-8.2.0-9.azl3.noarch.rpm 0001-01-01T00:00:00 qemu-img-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-guest-agent-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-tools-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-pr-helper-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-tests-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-curl-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-dmg-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-nfs-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-oss-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-curses-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-user-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-ipxe-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-hppa-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-hppa-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-m68k-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-m68k-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 8.2.0-1 https://nvd.nist.gov/vuln/detail/CVE-2023-2861 12357 qemu 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2023-3255 https://nvd.nist.gov/vuln/detail/CVE-2023-3255 Mariner secalert@redhat.com Yes CVE-2023-3255 12356 12357 12356 12357 12356 12357 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12356 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12357 qemu 12356 qemu-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-common-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-docs-8.2.0-9.azl3.noarch.rpm 0001-01-01T00:00:00 qemu-img-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-guest-agent-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-tools-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-pr-helper-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-tests-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-curl-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-dmg-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-nfs-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-oss-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-curses-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-user-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-ipxe-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-cris-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-cris-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-hppa-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-hppa-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-m68k-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-m68k-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-mips-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 8.2.0-1 https://nvd.nist.gov/vuln/detail/CVE-2023-3255 12356 qemu qemu 12357 qemu-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-common-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-docs-8.2.0-9.azl3.noarch.rpm 0001-01-01T00:00:00 qemu-img-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-guest-agent-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-tools-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-pr-helper-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-tests-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-curl-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-dmg-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-nfs-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-oss-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-curses-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-user-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-ipxe-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-hppa-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-hppa-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-m68k-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-m68k-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 8.2.0-1 https://nvd.nist.gov/vuln/detail/CVE-2023-3255 12357 qemu 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2023-3180 https://nvd.nist.gov/vuln/detail/CVE-2023-3180 Mariner secalert@redhat.com Yes CVE-2023-3180 12356 12357 12356 12357 12356 12357 6.5 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H 12356 6.5 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H 12357 qemu 12356 qemu-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-common-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-docs-8.2.0-9.azl3.noarch.rpm 0001-01-01T00:00:00 qemu-img-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-guest-agent-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-tools-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-pr-helper-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-tests-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-curl-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-dmg-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-nfs-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-oss-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-curses-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-user-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-ipxe-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-cris-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-cris-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-hppa-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-hppa-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-m68k-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-m68k-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-mips-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 8.2.0-1 https://nvd.nist.gov/vuln/detail/CVE-2023-3180 12356 qemu qemu 12357 qemu-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-common-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-docs-8.2.0-9.azl3.noarch.rpm 0001-01-01T00:00:00 qemu-img-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-guest-agent-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-tools-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-pr-helper-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-tests-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-curl-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-dmg-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-nfs-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-oss-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-curses-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-user-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-ipxe-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-hppa-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-hppa-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-m68k-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-m68k-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 8.2.0-1 https://nvd.nist.gov/vuln/detail/CVE-2023-3180 12357 qemu 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2023-42467 https://nvd.nist.gov/vuln/detail/CVE-2023-42467 Mariner cve@mitre.org Yes CVE-2023-42467 12356 12357 12356 12357 12356 12357 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12356 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12357 qemu 12356 qemu-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-common-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-docs-8.2.0-9.azl3.noarch.rpm 0001-01-01T00:00:00 qemu-img-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-guest-agent-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-tools-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-pr-helper-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-tests-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-curl-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-dmg-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-nfs-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-oss-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-curses-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-user-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-ipxe-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-cris-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-cris-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-hppa-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-hppa-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-m68k-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-m68k-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-mips-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 8.2.0-1 https://nvd.nist.gov/vuln/detail/CVE-2023-42467 12356 qemu qemu 12357 qemu-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-common-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-docs-8.2.0-9.azl3.noarch.rpm 0001-01-01T00:00:00 qemu-img-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-guest-agent-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-tools-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-pr-helper-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-tests-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-curl-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-dmg-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-nfs-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-oss-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-curses-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-user-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-ipxe-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-hppa-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-hppa-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-m68k-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-m68k-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 8.2.0-1 https://nvd.nist.gov/vuln/detail/CVE-2023-42467 12357 qemu 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2021-32714 https://nvd.nist.gov/vuln/detail/CVE-2021-32714 Mariner security-advisories@github.com Yes CVE-2021-32714 12356 12357 12356 12357 12356 12357 9.1 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H 12356 9.1 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H 12357 rpm-ostree 12356 rpm-ostree-2024.4-1.azl3.x86_64.rpm 0001-01-01T00:00:00 rpm-ostree-devel-2024.4-1.azl3.x86_64.rpm 0001-01-01T00:00:00 rpm-ostree-debuginfo-2024.4-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 2024.4-1 https://nvd.nist.gov/vuln/detail/CVE-2021-32714 12356 rpm-ostree rpm-ostree 12357 CBL-Mariner 2024.4-1 https://nvd.nist.gov/vuln/detail/CVE-2021-32714 12357 rpm-ostree 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2021-32715 https://nvd.nist.gov/vuln/detail/CVE-2021-32715 Mariner security-advisories@github.com Yes CVE-2021-32715 12356 12357 12356 12357 12356 12357 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N 12356 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N 12357 rpm-ostree 12356 rpm-ostree-2024.4-1.azl3.x86_64.rpm 0001-01-01T00:00:00 rpm-ostree-devel-2024.4-1.azl3.x86_64.rpm 0001-01-01T00:00:00 rpm-ostree-debuginfo-2024.4-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 2024.4-1 https://nvd.nist.gov/vuln/detail/CVE-2021-32715 12356 rpm-ostree rpm-ostree 12357 CBL-Mariner 2024.4-1 https://nvd.nist.gov/vuln/detail/CVE-2021-32715 12357 rpm-ostree 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2015-9251 Mariner cve@mitre.org Yes CVE-2015-9251 12356 12357 12356 12357 12356 12357 6.1 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N 12356 6.1 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N 12357 slf4j 12356 12357 slf4j-2.0.7-1.azl3.noarch.rpm 0001-01-01T00:00:00 slf4j-javadoc-2.0.7-1.azl3.noarch.rpm 0001-01-01T00:00:00 slf4j-manual-2.0.7-1.azl3.noarch.rpm 0001-01-01T00:00:00 slf4j-jdk14-2.0.7-1.azl3.noarch.rpm 0001-01-01T00:00:00 jcl-over-slf4j-2.0.7-1.azl3.noarch.rpm 0001-01-01T00:00:00 log4j-over-slf4j-2.0.7-1.azl3.noarch.rpm 0001-01-01T00:00:00 slf4j-migrator-2.0.7-1.azl3.noarch.rpm 0001-01-01T00:00:00 slf4j-jdk-platform-logging-2.0.7-1.azl3.noarch.rpm 0001-01-01T00:00:00 slf4j-sources-2.0.7-1.azl3.noarch.rpm 0001-01-01T00:00:00 CBL-Mariner 2.0.7-1 https://nvd.nist.gov/vuln/detail/CVE-2015-9251 12356 12357 slf4j 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2023-27533 https://nvd.nist.gov/vuln/detail/CVE-2023-27533 https://nvd.nist.gov/vuln/detail/CVE-2023-27533 https://nvd.nist.gov/vuln/detail/CVE-2023-27533 https://nvd.nist.gov/vuln/detail/CVE-2023-27533 https://nvd.nist.gov/vuln/detail/CVE-2023-27533 https://nvd.nist.gov/vuln/detail/CVE-2023-27533 https://nvd.nist.gov/vuln/detail/CVE-2023-27533 https://nvd.nist.gov/vuln/detail/CVE-2023-27533 https://nvd.nist.gov/vuln/detail/CVE-2023-27533 https://nvd.nist.gov/vuln/detail/CVE-2023-27533 https://nvd.nist.gov/vuln/detail/CVE-2023-27533 Mariner support@hackerone.com Yes CVE-2023-27533 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 12139 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 12140 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 12356 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 12357 cmake 12139 cmake-3.21.4-12.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.21.4-12 https://nvd.nist.gov/vuln/detail/CVE-2023-27533 12139 cmake curl 12139 curl-8.0.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 curl-devel-8.0.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 curl-libs-8.0.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 curl-debuginfo-8.0.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 8.0.1-1 https://nvd.nist.gov/vuln/detail/CVE-2023-27533 12139 curl mysql 12139 mysql-8.0.34-1.cm2.x86_64.rpm 0001-01-01T00:00:00 mysql-devel-8.0.34-1.cm2.x86_64.rpm 0001-01-01T00:00:00 mysql-debuginfo-8.0.34-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 8.0.34-1 https://nvd.nist.gov/vuln/detail/CVE-2023-27533 12139 mysql rust 12139 rust-1.72.0-2.cm2.x86_64.rpm 0001-01-01T00:00:00 rust-doc-1.72.0-2.cm2.noarch.rpm 0001-01-01T00:00:00 rust-debuginfo-1.72.0-2.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.72.0-2 https://nvd.nist.gov/vuln/detail/CVE-2023-27533 12139 rust cmake 12140 cmake-3.21.4-12.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.21.4-12 https://nvd.nist.gov/vuln/detail/CVE-2023-27533 12140 cmake curl 12140 curl-8.0.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 curl-devel-8.0.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 curl-libs-8.0.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 curl-debuginfo-8.0.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 8.0.1-1 https://nvd.nist.gov/vuln/detail/CVE-2023-27533 12140 curl mysql 12140 mysql-8.0.34-1.cm2.aarch64.rpm 0001-01-01T00:00:00 mysql-devel-8.0.34-1.cm2.aarch64.rpm 0001-01-01T00:00:00 mysql-debuginfo-8.0.34-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 8.0.34-1 https://nvd.nist.gov/vuln/detail/CVE-2023-27533 12140 mysql rust 12140 rust-1.72.0-2.cm2.aarch64.rpm 0001-01-01T00:00:00 rust-doc-1.72.0-2.cm2.noarch.rpm 0001-01-01T00:00:00 rust-debuginfo-1.72.0-2.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.72.0-2 https://nvd.nist.gov/vuln/detail/CVE-2023-27533 12140 rust cmake 12356 cmake-3.28.2-6.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.28.2-1 https://nvd.nist.gov/vuln/detail/CVE-2023-27533 12356 cmake tensorflow 12356 python3-tensorflow-2.16.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.16.1-1 https://nvd.nist.gov/vuln/detail/CVE-2023-27533 12356 tensorflow cmake 12357 cmake-3.28.2-6.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.28.2-1 https://nvd.nist.gov/vuln/detail/CVE-2023-27533 12357 cmake tensorflow 12357 CBL-Mariner 2.16.1-1 https://nvd.nist.gov/vuln/detail/CVE-2023-27533 12357 tensorflow 1.0 2023-04-03T17:00:00 <p>Information published.</p> 1.1 2023-03-31T17:00:00 <p>Information published.</p> 1.2 2024-06-30T00:00:00 <p>Information published.</p> 1.3 2024-09-23T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2023-45230 https://nvd.nist.gov/vuln/detail/CVE-2023-45230 https://nvd.nist.gov/vuln/detail/CVE-2023-45230 https://nvd.nist.gov/vuln/detail/CVE-2023-45230 https://nvd.nist.gov/vuln/detail/CVE-2023-45230 https://nvd.nist.gov/vuln/detail/CVE-2023-45230 Mariner infosec@edk2.groups.io Yes CVE-2023-45230 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 8.8 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 12139 8.8 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 12140 8.8 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 12356 8.8 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 12357 edk2 12139 edk2-ovmf-20230301gitf80f052277c8-40.cm2.noarch.rpm 0001-01-01T00:00:00 edk2-tools-20230301gitf80f052277c8-40.cm2.x86_64.rpm 0001-01-01T00:00:00 edk2-tools-doc-20230301gitf80f052277c8-40.cm2.noarch.rpm 0001-01-01T00:00:00 edk2-ovmf-ia32-20230301gitf80f052277c8-40.cm2.noarch.rpm 0001-01-01T00:00:00 edk2-ovmf-xen-20230301gitf80f052277c8-40.cm2.noarch.rpm 0001-01-01T00:00:00 edk2-ext4-20230301gitf80f052277c8-40.cm2.noarch.rpm 0001-01-01T00:00:00 edk2-tools-python-20230301gitf80f052277c8-40.cm2.noarch.rpm 0001-01-01T00:00:00 CBL-Mariner 20230301gitf80f052277c8-40 https://nvd.nist.gov/vuln/detail/CVE-2023-45230 12139 edk2 hvloader 12139 hvloader-1.0.1-3.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.0.1-3 https://nvd.nist.gov/vuln/detail/CVE-2023-45230 12139 hvloader edk2 12140 CBL-Mariner 20230301gitf80f052277c8-40 https://nvd.nist.gov/vuln/detail/CVE-2023-45230 12140 edk2 hvloader 12140 CBL-Mariner 1.0.1-3 https://nvd.nist.gov/vuln/detail/CVE-2023-45230 12140 hvloader edk2 12356 edk2-ovmf-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-tools-20240223gitedc6681206c1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 edk2-tools-doc-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-ovmf-ia32-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-ovmf-xen-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-experimental-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-ext4-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-tools-python-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 CBL-Mariner 20240223gitedc6681206c1-1 https://nvd.nist.gov/vuln/detail/CVE-2023-45230 12356 edk2 edk2 12357 CBL-Mariner 20240223gitedc6681206c1-1 https://nvd.nist.gov/vuln/detail/CVE-2023-45230 12357 edk2 1.0 2024-04-07T17:00:00 <p>Information published.</p> 1.1 2024-06-30T00:00:00 <p>Information published.</p> 1.2 2024-09-23T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2023-45235 https://nvd.nist.gov/vuln/detail/CVE-2023-45235 https://nvd.nist.gov/vuln/detail/CVE-2023-45235 https://nvd.nist.gov/vuln/detail/CVE-2023-45235 https://nvd.nist.gov/vuln/detail/CVE-2023-45235 https://nvd.nist.gov/vuln/detail/CVE-2023-45235 Mariner infosec@edk2.groups.io Yes CVE-2023-45235 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 8.8 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 12139 8.8 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 12140 8.8 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 12356 8.8 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 12357 edk2 12139 edk2-ovmf-20230301gitf80f052277c8-40.cm2.noarch.rpm 0001-01-01T00:00:00 edk2-tools-20230301gitf80f052277c8-40.cm2.x86_64.rpm 0001-01-01T00:00:00 edk2-tools-doc-20230301gitf80f052277c8-40.cm2.noarch.rpm 0001-01-01T00:00:00 edk2-ovmf-ia32-20230301gitf80f052277c8-40.cm2.noarch.rpm 0001-01-01T00:00:00 edk2-ovmf-xen-20230301gitf80f052277c8-40.cm2.noarch.rpm 0001-01-01T00:00:00 edk2-ext4-20230301gitf80f052277c8-40.cm2.noarch.rpm 0001-01-01T00:00:00 edk2-tools-python-20230301gitf80f052277c8-40.cm2.noarch.rpm 0001-01-01T00:00:00 CBL-Mariner 20230301gitf80f052277c8-40 https://nvd.nist.gov/vuln/detail/CVE-2023-45235 12139 edk2 hvloader 12139 hvloader-1.0.1-3.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.0.1-3 https://nvd.nist.gov/vuln/detail/CVE-2023-45235 12139 hvloader edk2 12140 CBL-Mariner 20230301gitf80f052277c8-40 https://nvd.nist.gov/vuln/detail/CVE-2023-45235 12140 edk2 hvloader 12140 CBL-Mariner 1.0.1-3 https://nvd.nist.gov/vuln/detail/CVE-2023-45235 12140 hvloader edk2 12356 edk2-ovmf-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-tools-20240223gitedc6681206c1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 edk2-tools-doc-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-ovmf-ia32-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-ovmf-xen-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-experimental-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-ext4-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-tools-python-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 CBL-Mariner 20240223gitedc6681206c1-1 https://nvd.nist.gov/vuln/detail/CVE-2023-45235 12356 edk2 edk2 12357 CBL-Mariner 20240223gitedc6681206c1-1 https://nvd.nist.gov/vuln/detail/CVE-2023-45235 12357 edk2 1.0 2024-04-07T17:00:00 <p>Information published.</p> 1.1 2024-06-30T00:00:00 <p>Information published.</p> 1.2 2024-09-23T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2018-25032 https://nvd.nist.gov/vuln/detail/CVE-2018-25032 https://nvd.nist.gov/vuln/detail/CVE-2018-25032 https://nvd.nist.gov/vuln/detail/CVE-2018-25032 https://nvd.nist.gov/vuln/detail/CVE-2018-25032 https://nvd.nist.gov/vuln/detail/CVE-2018-25032 https://nvd.nist.gov/vuln/detail/CVE-2018-25032 https://nvd.nist.gov/vuln/detail/CVE-2018-25032 https://nvd.nist.gov/vuln/detail/CVE-2018-25032 https://nvd.nist.gov/vuln/detail/CVE-2018-25032 https://nvd.nist.gov/vuln/detail/CVE-2018-25032 https://nvd.nist.gov/vuln/detail/CVE-2018-25032 https://nvd.nist.gov/vuln/detail/CVE-2018-25032 https://nvd.nist.gov/vuln/detail/CVE-2018-25032 https://nvd.nist.gov/vuln/detail/CVE-2018-25032 https://nvd.nist.gov/vuln/detail/CVE-2018-25032 https://nvd.nist.gov/vuln/detail/CVE-2018-25032 https://nvd.nist.gov/vuln/detail/CVE-2018-25032 https://nvd.nist.gov/vuln/detail/CVE-2018-25032 https://nvd.nist.gov/vuln/detail/CVE-2018-25032 https://nvd.nist.gov/vuln/detail/CVE-2018-25032 Mariner cve@mitre.org Yes CVE-2018-25032 12137 12138 12139 12140 12356 12357 12137 12138 12139 12140 12356 12357 12137 12138 12139 12140 12356 12357 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12137 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12138 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12139 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12140 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12356 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12357 boost 12137 boost-1.66.0-4.cm1.x86_64.rpm 0001-01-01T00:00:00 boost-devel-1.66.0-4.cm1.x86_64.rpm 0001-01-01T00:00:00 boost-static-1.66.0-4.cm1.x86_64.rpm 0001-01-01T00:00:00 boost-debuginfo-1.66.0-4.cm1.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.66.0-4 https://nvd.nist.gov/vuln/detail/CVE-2018-25032 12137 boost erlang 12137 erlang-24.2-2.cm1.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 24.2-2 https://nvd.nist.gov/vuln/detail/CVE-2018-25032 12137 erlang mariadb 12137 mariadb-10.3.36-1.cm1.x86_64.rpm 0001-01-01T00:00:00 mariadb-server-10.3.36-1.cm1.x86_64.rpm 0001-01-01T00:00:00 mariadb-server-galera-10.3.36-1.cm1.x86_64.rpm 0001-01-01T00:00:00 mariadb-devel-10.3.36-1.cm1.x86_64.rpm 0001-01-01T00:00:00 mariadb-errmsg-10.3.36-1.cm1.x86_64.rpm 0001-01-01T00:00:00 mariadb-debuginfo-10.3.36-1.cm1.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 10.3.36-1 https://nvd.nist.gov/vuln/detail/CVE-2018-25032 12137 mariadb nmap 12137 nmap-7.90-4.cm1.x86_64.rpm 0001-01-01T00:00:00 nmap-ncat-7.90-4.cm1.x86_64.rpm 0001-01-01T00:00:00 nmap-debuginfo-7.90-4.cm1.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 7.90-4 https://nvd.nist.gov/vuln/detail/CVE-2018-25032 12137 nmap boost 12138 boost-1.66.0-4.cm1.aarch64.rpm 0001-01-01T00:00:00 boost-devel-1.66.0-4.cm1.aarch64.rpm 0001-01-01T00:00:00 boost-static-1.66.0-4.cm1.aarch64.rpm 0001-01-01T00:00:00 boost-debuginfo-1.66.0-4.cm1.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.66.0-4 https://nvd.nist.gov/vuln/detail/CVE-2018-25032 12138 boost erlang 12138 erlang-24.2-2.cm1.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 24.2-2 https://nvd.nist.gov/vuln/detail/CVE-2018-25032 12138 erlang mariadb 12138 mariadb-10.3.36-1.cm1.aarch64.rpm 0001-01-01T00:00:00 mariadb-server-10.3.36-1.cm1.aarch64.rpm 0001-01-01T00:00:00 mariadb-server-galera-10.3.36-1.cm1.aarch64.rpm 0001-01-01T00:00:00 mariadb-devel-10.3.36-1.cm1.aarch64.rpm 0001-01-01T00:00:00 mariadb-errmsg-10.3.36-1.cm1.aarch64.rpm 0001-01-01T00:00:00 mariadb-debuginfo-10.3.36-1.cm1.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 10.3.36-1 https://nvd.nist.gov/vuln/detail/CVE-2018-25032 12138 mariadb nmap 12138 nmap-7.90-4.cm1.aarch64.rpm 0001-01-01T00:00:00 nmap-ncat-7.90-4.cm1.aarch64.rpm 0001-01-01T00:00:00 nmap-debuginfo-7.90-4.cm1.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 7.90-4 https://nvd.nist.gov/vuln/detail/CVE-2018-25032 12138 nmap boost 12139 boost-1.76.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 boost-devel-1.76.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 boost-static-1.76.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 boost-debuginfo-1.76.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.76.0-3 https://nvd.nist.gov/vuln/detail/CVE-2018-25032 12139 boost cloud-hypervisor-cvm 12139 cloud-hypervisor-cvm-38.0.72.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 38.0.72.2-1 https://nvd.nist.gov/vuln/detail/CVE-2018-25032 12139 cloud-hypervisor-cvm nmap 12139 nmap-7.93-1.cm2.x86_64.rpm 0001-01-01T00:00:00 nmap-ncat-7.93-1.cm2.x86_64.rpm 0001-01-01T00:00:00 nmap-debuginfo-7.93-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 7.93-1 https://nvd.nist.gov/vuln/detail/CVE-2018-25032 12139 nmap qt5-qtbase 12139 qt5-qtbase-5.15.9-1.cm2.x86_64.rpm 0001-01-01T00:00:00 qt5-qtbase-common-5.15.9-1.cm2.noarch.rpm 0001-01-01T00:00:00 qt5-qtbase-devel-5.15.9-1.cm2.x86_64.rpm 0001-01-01T00:00:00 qt5-qtbase-private-devel-5.15.9-1.cm2.x86_64.rpm 0001-01-01T00:00:00 qt5-qtbase-examples-5.15.9-1.cm2.x86_64.rpm 0001-01-01T00:00:00 qt5-qtbase-static-5.15.9-1.cm2.x86_64.rpm 0001-01-01T00:00:00 qt5-qtbase-gui-5.15.9-1.cm2.x86_64.rpm 0001-01-01T00:00:00 qt5-qtbase-debuginfo-5.15.9-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.9-1 https://nvd.nist.gov/vuln/detail/CVE-2018-25032 12139 qt5-qtbase boost 12140 boost-1.76.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 boost-devel-1.76.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 boost-static-1.76.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 boost-debuginfo-1.76.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.76.0-3 https://nvd.nist.gov/vuln/detail/CVE-2018-25032 12140 boost cloud-hypervisor-cvm 12140 12357 CBL-Mariner 38.0.72.2-1 https://nvd.nist.gov/vuln/detail/CVE-2018-25032 12140 12357 cloud-hypervisor-cvm nmap 12140 nmap-7.93-1.cm2.aarch64.rpm 0001-01-01T00:00:00 nmap-ncat-7.93-1.cm2.aarch64.rpm 0001-01-01T00:00:00 nmap-debuginfo-7.93-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 7.93-1 https://nvd.nist.gov/vuln/detail/CVE-2018-25032 12140 nmap qt5-qtbase 12140 qt5-qtbase-5.15.9-1.cm2.aarch64.rpm 0001-01-01T00:00:00 qt5-qtbase-common-5.15.9-1.cm2.noarch.rpm 0001-01-01T00:00:00 qt5-qtbase-devel-5.15.9-1.cm2.aarch64.rpm 0001-01-01T00:00:00 qt5-qtbase-private-devel-5.15.9-1.cm2.aarch64.rpm 0001-01-01T00:00:00 qt5-qtbase-examples-5.15.9-1.cm2.aarch64.rpm 0001-01-01T00:00:00 qt5-qtbase-static-5.15.9-1.cm2.aarch64.rpm 0001-01-01T00:00:00 qt5-qtbase-gui-5.15.9-1.cm2.aarch64.rpm 0001-01-01T00:00:00 qt5-qtbase-debuginfo-5.15.9-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.9-1 https://nvd.nist.gov/vuln/detail/CVE-2018-25032 12140 qt5-qtbase cloud-hypervisor-cvm 12356 cloud-hypervisor-cvm-38.0.72.2-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 38.0.72.2-1 https://nvd.nist.gov/vuln/detail/CVE-2018-25032 12356 cloud-hypervisor-cvm cmake 12356 cmake-3.28.2-6.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.28.2-1 https://nvd.nist.gov/vuln/detail/CVE-2018-25032 12356 cmake grpc 12356 grpc-1.62.0-2.azl3.x86_64.rpm 0001-01-01T00:00:00 grpc-devel-1.62.0-2.azl3.x86_64.rpm 0001-01-01T00:00:00 grpc-plugins-1.62.0-2.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-grpcio-1.62.0-2.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.62.0-2 https://nvd.nist.gov/vuln/detail/CVE-2018-25032 12356 grpc cmake 12357 cmake-3.28.2-6.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.28.2-1 https://nvd.nist.gov/vuln/detail/CVE-2018-25032 12357 cmake grpc 12357 grpc-1.62.0-2.azl3.aarch64.rpm 0001-01-01T00:00:00 grpc-devel-1.62.0-2.azl3.aarch64.rpm 0001-01-01T00:00:00 grpc-plugins-1.62.0-2.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-grpcio-1.62.0-2.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.62.0-2 https://nvd.nist.gov/vuln/detail/CVE-2018-25032 12357 grpc 1.0 2022-03-30T17:00:00 <p>Information published.</p> 1.1 2022-09-16T17:00:00 <p>Added mariadb to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0</p> 1.2 2023-04-16T17:00:00 <p>Added tcl to CBL-Mariner 1.0</p> 1.3 2023-04-17T17:00:00 <p>Added boost to CBL-Mariner 2.0</p> 1.4 2023-04-18T17:00:00 <p>Added nmap to CBL-Mariner 2.0 Added tcl to CBL-Mariner 2.0</p> 1.5 2024-06-30T00:00:00 <p>Information published.</p> 1.6 2024-07-12T17:00:00 <p>Information published.</p> 1.7 2024-08-28T17:00:00 <p>Information published.</p> 1.8 2024-08-29T17:00:00 <p>Information published.</p> 1.9 2024-08-30T17:00:00 <p>Information published.</p> 2.0 2024-08-31T17:00:00 <p>Information published.</p> 2.1 2024-09-01T17:00:00 <p>Information published.</p> 2.2 2024-09-02T17:00:00 <p>Information published.</p> 2.3 2024-09-04T17:00:00 <p>Information published.</p> 2.4 2024-09-05T17:00:00 <p>Information published.</p> 2.5 2024-09-06T17:00:00 <p>Information published.</p> 2.6 2024-09-07T17:00:00 <p>Information published.</p> 2.7 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2023-49295 https://nvd.nist.gov/vuln/detail/CVE-2023-49295 https://nvd.nist.gov/vuln/detail/CVE-2023-49295 https://nvd.nist.gov/vuln/detail/CVE-2023-49295 Mariner security-advisories@github.com Yes CVE-2023-49295 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12139 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12140 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12356 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12357 coredns 12139 coredns-1.11.1-5.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.11.1-5 https://nvd.nist.gov/vuln/detail/CVE-2023-49295 12139 coredns coredns 12140 coredns-1.11.1-5.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.11.1-5 https://nvd.nist.gov/vuln/detail/CVE-2023-49295 12140 coredns coredns 12356 coredns-1.11.1-2.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.11.1-2 https://nvd.nist.gov/vuln/detail/CVE-2023-49295 12356 coredns coredns 12357 coredns-1.11.1-2.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.11.1-2 https://nvd.nist.gov/vuln/detail/CVE-2023-49295 12357 coredns 1.0 2024-01-15T16:00:00 <p>Information published.</p> 1.1 2024-08-28T17:00:00 <p>Information published.</p> 1.2 2024-08-29T17:00:00 <p>Information published.</p> 1.3 2024-08-30T17:00:00 <p>Information published.</p> 1.4 2024-08-31T17:00:00 <p>Information published.</p> 1.5 2024-09-01T17:00:00 <p>Information published.</p> 1.6 2024-09-02T17:00:00 <p>Information published.</p> 1.7 2024-09-04T17:00:00 <p>Information published.</p> 1.8 2024-09-05T17:00:00 <p>Information published.</p> 1.9 2024-09-06T17:00:00 <p>Information published.</p> 2.0 2024-09-07T17:00:00 <p>Information published.</p> 2.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2023-34241 https://nvd.nist.gov/vuln/detail/CVE-2023-34241 https://nvd.nist.gov/vuln/detail/CVE-2023-34241 https://nvd.nist.gov/vuln/detail/CVE-2023-34241 Mariner security-advisories@github.com Yes CVE-2023-34241 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 12139 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 12140 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 12356 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 12357 cups 12139 cups-2.3.3op2-7.cm2.x86_64.rpm 0001-01-01T00:00:00 cups-client-2.3.3op2-7.cm2.x86_64.rpm 0001-01-01T00:00:00 cups-devel-2.3.3op2-7.cm2.x86_64.rpm 0001-01-01T00:00:00 cups-libs-2.3.3op2-7.cm2.x86_64.rpm 0001-01-01T00:00:00 cups-filesystem-2.3.3op2-7.cm2.noarch.rpm 0001-01-01T00:00:00 cups-lpd-2.3.3op2-7.cm2.x86_64.rpm 0001-01-01T00:00:00 cups-ipptool-2.3.3op2-7.cm2.x86_64.rpm 0001-01-01T00:00:00 cups-printerapp-2.3.3op2-7.cm2.x86_64.rpm 0001-01-01T00:00:00 cups-debuginfo-2.3.3op2-7.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.3.3op2-7 https://nvd.nist.gov/vuln/detail/CVE-2023-34241 12139 cups cups 12140 cups-2.3.3op2-7.cm2.aarch64.rpm 0001-01-01T00:00:00 cups-client-2.3.3op2-7.cm2.aarch64.rpm 0001-01-01T00:00:00 cups-devel-2.3.3op2-7.cm2.aarch64.rpm 0001-01-01T00:00:00 cups-libs-2.3.3op2-7.cm2.aarch64.rpm 0001-01-01T00:00:00 cups-filesystem-2.3.3op2-7.cm2.noarch.rpm 0001-01-01T00:00:00 cups-lpd-2.3.3op2-7.cm2.aarch64.rpm 0001-01-01T00:00:00 cups-ipptool-2.3.3op2-7.cm2.aarch64.rpm 0001-01-01T00:00:00 cups-printerapp-2.3.3op2-7.cm2.aarch64.rpm 0001-01-01T00:00:00 cups-debuginfo-2.3.3op2-7.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.3.3op2-7 https://nvd.nist.gov/vuln/detail/CVE-2023-34241 12140 cups cups 12356 cups-2.4.10-1.azl3.x86_64.rpm 0001-01-01T00:00:00 cups-client-2.4.10-1.azl3.x86_64.rpm 0001-01-01T00:00:00 cups-devel-2.4.10-1.azl3.x86_64.rpm 0001-01-01T00:00:00 cups-libs-2.4.10-1.azl3.x86_64.rpm 0001-01-01T00:00:00 cups-filesystem-2.4.10-1.azl3.noarch.rpm 0001-01-01T00:00:00 cups-lpd-2.4.10-1.azl3.x86_64.rpm 0001-01-01T00:00:00 cups-ipptool-2.4.10-1.azl3.x86_64.rpm 0001-01-01T00:00:00 cups-printerapp-2.4.10-1.azl3.x86_64.rpm 0001-01-01T00:00:00 cups-debuginfo-2.4.10-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.4.10-1 https://nvd.nist.gov/vuln/detail/CVE-2023-34241 12356 cups cups 12357 cups-2.4.10-1.azl3.aarch64.rpm 0001-01-01T00:00:00 cups-client-2.4.10-1.azl3.aarch64.rpm 0001-01-01T00:00:00 cups-devel-2.4.10-1.azl3.aarch64.rpm 0001-01-01T00:00:00 cups-libs-2.4.10-1.azl3.aarch64.rpm 0001-01-01T00:00:00 cups-filesystem-2.4.10-1.azl3.noarch.rpm 0001-01-01T00:00:00 cups-lpd-2.4.10-1.azl3.aarch64.rpm 0001-01-01T00:00:00 cups-ipptool-2.4.10-1.azl3.aarch64.rpm 0001-01-01T00:00:00 cups-printerapp-2.4.10-1.azl3.aarch64.rpm 0001-01-01T00:00:00 cups-debuginfo-2.4.10-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.4.10-1 https://nvd.nist.gov/vuln/detail/CVE-2023-34241 12357 cups 1.0 2024-03-31T17:00:00 <p>Information published.</p> 1.1 2024-08-28T17:00:00 <p>Information published.</p> 1.2 2024-08-29T17:00:00 <p>Information published.</p> 1.3 2024-08-30T17:00:00 <p>Information published.</p> 1.4 2024-08-31T17:00:00 <p>Information published.</p> 1.5 2024-09-01T17:00:00 <p>Information published.</p> 1.6 2024-09-02T17:00:00 <p>Information published.</p> 1.7 2024-09-04T17:00:00 <p>Information published.</p> 1.8 2024-09-05T17:00:00 <p>Information published.</p> 1.9 2024-09-06T17:00:00 <p>Information published.</p> 2.0 2024-09-07T17:00:00 <p>Information published.</p> 2.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2022-0778 https://nvd.nist.gov/vuln/detail/CVE-2022-0778 https://nvd.nist.gov/vuln/detail/CVE-2022-0778 https://nvd.nist.gov/vuln/detail/CVE-2022-0778 https://nvd.nist.gov/vuln/detail/CVE-2022-0778 https://nvd.nist.gov/vuln/detail/CVE-2022-0778 Mariner openssl-security@openssl.org Yes CVE-2022-0778 12137 12138 12139 12140 12356 12357 12137 12138 12139 12140 12356 12357 12137 12138 12139 12140 12356 12357 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12137 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12138 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12139 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12140 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12356 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12357 openssl 12137 openssl-1.1.1k-9.cm1.x86_64.rpm 0001-01-01T00:00:00 openssl-libs-1.1.1k-9.cm1.x86_64.rpm 0001-01-01T00:00:00 openssl-devel-1.1.1k-9.cm1.x86_64.rpm 0001-01-01T00:00:00 openssl-static-1.1.1k-9.cm1.x86_64.rpm 0001-01-01T00:00:00 openssl-perl-1.1.1k-9.cm1.x86_64.rpm 0001-01-01T00:00:00 openssl-debuginfo-1.1.1k-9.cm1.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.1.1k-9 https://nvd.nist.gov/vuln/detail/CVE-2022-0778 12137 openssl openssl 12138 openssl-1.1.1k-9.cm1.aarch64.rpm 0001-01-01T00:00:00 openssl-libs-1.1.1k-9.cm1.aarch64.rpm 0001-01-01T00:00:00 openssl-devel-1.1.1k-9.cm1.aarch64.rpm 0001-01-01T00:00:00 openssl-static-1.1.1k-9.cm1.aarch64.rpm 0001-01-01T00:00:00 openssl-perl-1.1.1k-9.cm1.aarch64.rpm 0001-01-01T00:00:00 openssl-debuginfo-1.1.1k-9.cm1.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.1.1k-9 https://nvd.nist.gov/vuln/detail/CVE-2022-0778 12138 openssl openssl 12139 openssl-1.1.1k-13.cm2.x86_64.rpm 0001-01-01T00:00:00 openssl-libs-1.1.1k-13.cm2.x86_64.rpm 0001-01-01T00:00:00 openssl-devel-1.1.1k-13.cm2.x86_64.rpm 0001-01-01T00:00:00 openssl-static-1.1.1k-13.cm2.x86_64.rpm 0001-01-01T00:00:00 openssl-perl-1.1.1k-13.cm2.x86_64.rpm 0001-01-01T00:00:00 openssl-debuginfo-1.1.1k-13.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.1.1k-12 https://nvd.nist.gov/vuln/detail/CVE-2022-0778 12139 openssl openssl 12140 openssl-1.1.1k-13.cm2.aarch64.rpm 0001-01-01T00:00:00 openssl-libs-1.1.1k-13.cm2.aarch64.rpm 0001-01-01T00:00:00 openssl-devel-1.1.1k-13.cm2.aarch64.rpm 0001-01-01T00:00:00 openssl-static-1.1.1k-13.cm2.aarch64.rpm 0001-01-01T00:00:00 openssl-perl-1.1.1k-13.cm2.aarch64.rpm 0001-01-01T00:00:00 openssl-debuginfo-1.1.1k-13.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.1.1k-12 https://nvd.nist.gov/vuln/detail/CVE-2022-0778 12140 openssl edk2 12356 edk2-ovmf-20240223gitedc6681206c1-2.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-tools-20240223gitedc6681206c1-2.azl3.x86_64.rpm 0001-01-01T00:00:00 edk2-tools-doc-20240223gitedc6681206c1-2.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-ovmf-ia32-20240223gitedc6681206c1-2.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-ovmf-xen-20240223gitedc6681206c1-2.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-experimental-20240223gitedc6681206c1-2.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-ext4-20240223gitedc6681206c1-2.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-tools-python-20240223gitedc6681206c1-2.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-debuginfo-20240223gitedc6681206c1-2.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 20240223gitedc6681206c1-2 https://nvd.nist.gov/vuln/detail/CVE-2022-0778 12356 edk2 edk2 12357 CBL-Mariner 20240223gitedc6681206c1-2 https://nvd.nist.gov/vuln/detail/CVE-2022-0778 12357 edk2 1.0 2022-03-21T17:00:00 <p>Information published.</p> 1.1 2024-08-28T17:00:00 <p>Information published.</p> 1.2 2024-08-29T17:00:00 <p>Information published.</p> 1.3 2024-08-30T17:00:00 <p>Information published.</p> 1.4 2024-08-31T17:00:00 <p>Information published.</p> 1.5 2024-09-01T17:00:00 <p>Information published.</p> 1.6 2024-09-02T17:00:00 <p>Information published.</p> 1.7 2024-09-04T17:00:00 <p>Information published.</p> 1.8 2024-09-05T17:00:00 <p>Information published.</p> 1.9 2024-09-06T17:00:00 <p>Information published.</p> 2.0 2024-09-07T17:00:00 <p>Information published.</p> 2.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-39331 https://nvd.nist.gov/vuln/detail/CVE-2024-39331 https://nvd.nist.gov/vuln/detail/CVE-2024-39331 https://nvd.nist.gov/vuln/detail/CVE-2024-39331 Mariner cve@mitre.org Yes CVE-2024-39331 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 12139 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 12140 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 12356 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 12357 emacs 12139 emacs-29.4-1.cm2.x86_64.rpm 0001-01-01T00:00:00 emacs-filesystem-29.4-1.cm2.noarch.rpm 0001-01-01T00:00:00 CBL-Mariner 29.4-1 https://nvd.nist.gov/vuln/detail/CVE-2024-39331 12139 emacs emacs 12140 emacs-29.4-1.cm2.aarch64.rpm 0001-01-01T00:00:00 emacs-filesystem-29.4-1.cm2.noarch.rpm 0001-01-01T00:00:00 CBL-Mariner 29.4-1 https://nvd.nist.gov/vuln/detail/CVE-2024-39331 12140 emacs emacs 12356 emacs-29.4-1.azl3.x86_64.rpm 0001-01-01T00:00:00 emacs-filesystem-29.4-1.azl3.noarch.rpm 0001-01-01T00:00:00 emacs-debuginfo-29.4-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 29.4-1 https://nvd.nist.gov/vuln/detail/CVE-2024-39331 12356 emacs emacs 12357 emacs-29.4-1.azl3.aarch64.rpm 0001-01-01T00:00:00 emacs-filesystem-29.4-1.azl3.noarch.rpm 0001-01-01T00:00:00 emacs-debuginfo-29.4-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 29.4-1 https://nvd.nist.gov/vuln/detail/CVE-2024-39331 12357 emacs 1.0 2024-08-04T17:00:00 <p>Information published.</p> 1.1 2024-08-28T17:00:00 <p>Information published.</p> 1.2 2024-08-29T17:00:00 <p>Information published.</p> 1.3 2024-08-30T17:00:00 <p>Information published.</p> 1.4 2024-08-31T17:00:00 <p>Information published.</p> 1.5 2024-09-01T17:00:00 <p>Information published.</p> 1.6 2024-09-02T17:00:00 <p>Information published.</p> 1.7 2024-09-04T17:00:00 <p>Information published.</p> 1.8 2024-09-05T17:00:00 <p>Information published.</p> 1.9 2024-09-06T17:00:00 <p>Information published.</p> 2.0 2024-09-07T17:00:00 <p>Information published.</p> 2.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-27015 https://nvd.nist.gov/vuln/detail/CVE-2024-27015 https://nvd.nist.gov/vuln/detail/CVE-2024-27015 https://nvd.nist.gov/vuln/detail/CVE-2024-27015 https://nvd.nist.gov/vuln/detail/CVE-2024-27015 https://nvd.nist.gov/vuln/detail/CVE-2024-27015 Mariner cve@kernel.org Yes CVE-2024-27015 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12139 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12140 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12356 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12357 kernel 12139 kernel-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 python3-perf-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 bpftool-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.158.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-27015 12139 kernel kernel 12140 kernel-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 python3-perf-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-dtb-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 bpftool-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.158.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-27015 12140 kernel hyperv-daemons 12356 hyperv-daemons-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-27015 12356 hyperv-daemons kernel 12356 kernel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-27015 12356 kernel hyperv-daemons 12357 hyperv-daemons-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-27015 12357 hyperv-daemons kernel 12357 kernel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-27015 12357 kernel 1.0 2024-05-23T17:00:00 <p>Information published.</p> 1.1 2024-08-28T17:00:00 <p>Information published.</p> 1.2 2024-08-29T17:00:00 <p>Information published.</p> 1.3 2024-08-30T17:00:00 <p>Information published.</p> 1.4 2024-08-31T17:00:00 <p>Information published.</p> 1.5 2024-09-01T17:00:00 <p>Information published.</p> 1.6 2024-09-02T17:00:00 <p>Information published.</p> 1.7 2024-09-04T17:00:00 <p>Information published.</p> 1.8 2024-09-05T17:00:00 <p>Information published.</p> 1.9 2024-09-06T17:00:00 <p>Information published.</p> 2.0 2024-09-07T17:00:00 <p>Information published.</p> 2.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-26306 https://nvd.nist.gov/vuln/detail/CVE-2024-26306 https://nvd.nist.gov/vuln/detail/CVE-2024-26306 https://nvd.nist.gov/vuln/detail/CVE-2024-26306 Mariner cve@mitre.org Yes CVE-2024-26306 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 iperf3 12139 iperf3-3.17-1.cm2.x86_64.rpm 0001-01-01T00:00:00 iperf3-doc-3.17-1.cm2.x86_64.rpm 0001-01-01T00:00:00 iperf3-debuginfo-3.17-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.17-1 https://nvd.nist.gov/vuln/detail/CVE-2024-26306 12139 iperf3 iperf3 12140 iperf3-3.17-1.cm2.aarch64.rpm 0001-01-01T00:00:00 iperf3-doc-3.17-1.cm2.aarch64.rpm 0001-01-01T00:00:00 iperf3-debuginfo-3.17-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.17-1 https://nvd.nist.gov/vuln/detail/CVE-2024-26306 12140 iperf3 iperf3 12356 iperf3-3.17.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 iperf3-doc-3.17.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 iperf3-debuginfo-3.17.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.17.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-26306 12356 iperf3 iperf3 12357 iperf3-3.17.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 iperf3-doc-3.17.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 iperf3-debuginfo-3.17.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.17.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-26306 12357 iperf3 1.0 2024-05-13T17:00:00 <p>Information published.</p> 1.1 2024-08-14T17:00:00 <p>Information published.</p> 1.2 2024-08-15T17:00:00 <p>Information published.</p> 1.3 2024-08-16T17:00:00 <p>Information published.</p> 1.4 2024-08-17T17:00:00 <p>Information published.</p> 1.5 2024-08-18T17:00:00 <p>Information published.</p> 1.6 2024-08-19T17:00:00 <p>Information published.</p> 1.7 2024-08-20T17:00:00 <p>Information published.</p> 1.8 2024-08-21T17:00:00 <p>Information published.</p> 1.9 2024-08-22T17:00:00 <p>Information published.</p> 2.0 2024-08-23T17:00:00 <p>Information published.</p> 2.1 2024-08-24T17:00:00 <p>Information published.</p> 2.2 2024-08-25T17:00:00 <p>Information published.</p> 2.3 2024-08-26T17:00:00 <p>Information published.</p> 2.4 2024-08-27T17:00:00 <p>Information published.</p> 2.5 2024-08-28T17:00:00 <p>Information published.</p> 2.6 2024-08-29T17:00:00 <p>Information published.</p> 2.7 2024-08-30T17:00:00 <p>Information published.</p> 2.8 2024-08-31T17:00:00 <p>Information published.</p> 2.9 2024-09-01T17:00:00 <p>Information published.</p> 3.0 2024-09-02T17:00:00 <p>Information published.</p> 3.1 2024-09-04T17:00:00 <p>Information published.</p> 3.2 2024-09-05T17:00:00 <p>Information published.</p> 3.3 2024-09-06T17:00:00 <p>Information published.</p> 3.4 2024-09-07T17:00:00 <p>Information published.</p> 3.5 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-27014 https://nvd.nist.gov/vuln/detail/CVE-2024-27014 https://nvd.nist.gov/vuln/detail/CVE-2024-27014 https://nvd.nist.gov/vuln/detail/CVE-2024-27014 Mariner cve@kernel.org Yes CVE-2024-27014 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12139 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12140 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12356 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12357 kernel 12139 kernel-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 python3-perf-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 bpftool-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.15.158.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.158.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-27014 12139 kernel kernel 12140 kernel-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 python3-perf-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-dtb-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 bpftool-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.15.158.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.158.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-27014 12140 kernel kernel 12356 kernel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-27014 12356 kernel kernel 12357 kernel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-27014 12357 kernel 1.0 2024-05-23T17:00:00 <p>Information published.</p> 1.1 2024-08-28T17:00:00 <p>Information published.</p> 1.2 2024-08-29T17:00:00 <p>Information published.</p> 1.3 2024-08-30T17:00:00 <p>Information published.</p> 1.4 2024-08-31T17:00:00 <p>Information published.</p> 1.5 2024-09-01T17:00:00 <p>Information published.</p> 1.6 2024-09-02T17:00:00 <p>Information published.</p> 1.7 2024-09-04T17:00:00 <p>Information published.</p> 1.8 2024-09-05T17:00:00 <p>Information published.</p> 1.9 2024-09-06T17:00:00 <p>Information published.</p> 2.0 2024-09-07T17:00:00 <p>Information published.</p> 2.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-38571 https://nvd.nist.gov/vuln/detail/CVE-2024-38571 https://nvd.nist.gov/vuln/detail/CVE-2024-38571 https://nvd.nist.gov/vuln/detail/CVE-2024-38571 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-38571 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12139 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12140 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12356 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12357 kernel 12139 kernel-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 python3-perf-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 bpftool-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.162.2-1 https://nvd.nist.gov/vuln/detail/CVE-2024-38571 12139 kernel kernel 12140 kernel-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 python3-perf-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-dtb-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 bpftool-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.162.2-1 https://nvd.nist.gov/vuln/detail/CVE-2024-38571 12140 kernel kernel 12356 kernel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-38571 12356 kernel kernel 12357 kernel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-38571 12357 kernel 1.0 2024-08-07T17:00:00 <p>Information published.</p> 1.1 2024-08-28T17:00:00 <p>Information published.</p> 1.2 2024-08-29T17:00:00 <p>Information published.</p> 1.3 2024-08-30T17:00:00 <p>Information published.</p> 1.4 2024-08-31T17:00:00 <p>Information published.</p> 1.5 2024-09-01T17:00:00 <p>Information published.</p> 1.6 2024-09-02T17:00:00 <p>Information published.</p> 1.7 2024-09-04T17:00:00 <p>Information published.</p> 1.8 2024-09-05T17:00:00 <p>Information published.</p> 1.9 2024-09-06T17:00:00 <p>Information published.</p> 2.0 2024-09-07T17:00:00 <p>Information published.</p> 2.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-39475 https://nvd.nist.gov/vuln/detail/CVE-2024-39475 https://nvd.nist.gov/vuln/detail/CVE-2024-39475 https://nvd.nist.gov/vuln/detail/CVE-2024-39475 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-39475 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12139 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12140 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12356 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12357 kernel 12139 kernel-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 python3-perf-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 bpftool-5.15.162.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.162.2-1 https://nvd.nist.gov/vuln/detail/CVE-2024-39475 12139 kernel kernel 12140 kernel-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 python3-perf-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-dtb-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 bpftool-5.15.162.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.162.2-1 https://nvd.nist.gov/vuln/detail/CVE-2024-39475 12140 kernel kernel 12356 kernel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-39475 12356 kernel kernel 12357 kernel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-39475 12357 kernel 1.0 2024-08-04T17:00:00 <p>Information published.</p> 1.1 2024-08-28T17:00:00 <p>Information published.</p> 1.2 2024-08-29T17:00:00 <p>Information published.</p> 1.3 2024-08-30T17:00:00 <p>Information published.</p> 1.4 2024-08-31T17:00:00 <p>Information published.</p> 1.5 2024-09-01T17:00:00 <p>Information published.</p> 1.6 2024-09-02T17:00:00 <p>Information published.</p> 1.7 2024-09-04T17:00:00 <p>Information published.</p> 1.8 2024-09-05T17:00:00 <p>Information published.</p> 1.9 2024-09-06T17:00:00 <p>Information published.</p> 2.0 2024-09-07T17:00:00 <p>Information published.</p> 2.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2023-6597 https://nvd.nist.gov/vuln/detail/CVE-2023-6597 https://nvd.nist.gov/vuln/detail/CVE-2023-6597 https://nvd.nist.gov/vuln/detail/CVE-2023-6597 Mariner cna@python.org Yes CVE-2023-6597 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 7.8 7.8 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N 12139 7.8 7.8 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N 12140 7.8 7.8 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N 12356 7.8 7.8 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N 12357 python3 12139 python3-3.9.19-1.cm2.x86_64.rpm 0001-01-01T00:00:00 python3-libs-3.9.19-1.cm2.x86_64.rpm 0001-01-01T00:00:00 python3-curses-3.9.19-1.cm2.x86_64.rpm 0001-01-01T00:00:00 python3-devel-3.9.19-1.cm2.x86_64.rpm 0001-01-01T00:00:00 python3-tools-3.9.19-1.cm2.x86_64.rpm 0001-01-01T00:00:00 python3-pip-3.9.19-1.cm2.noarch.rpm 0001-01-01T00:00:00 python3-setuptools-3.9.19-1.cm2.noarch.rpm 0001-01-01T00:00:00 python3-test-3.9.19-1.cm2.x86_64.rpm 0001-01-01T00:00:00 python3-debuginfo-3.9.19-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.9.19-1 https://nvd.nist.gov/vuln/detail/CVE-2023-6597 12139 python3 python3 12140 python3-3.9.19-1.cm2.aarch64.rpm 0001-01-01T00:00:00 python3-libs-3.9.19-1.cm2.aarch64.rpm 0001-01-01T00:00:00 python3-curses-3.9.19-1.cm2.aarch64.rpm 0001-01-01T00:00:00 python3-devel-3.9.19-1.cm2.aarch64.rpm 0001-01-01T00:00:00 python3-tools-3.9.19-1.cm2.aarch64.rpm 0001-01-01T00:00:00 python3-pip-3.9.19-1.cm2.noarch.rpm 0001-01-01T00:00:00 python3-setuptools-3.9.19-1.cm2.noarch.rpm 0001-01-01T00:00:00 python3-test-3.9.19-1.cm2.aarch64.rpm 0001-01-01T00:00:00 python3-debuginfo-3.9.19-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.9.19-1 https://nvd.nist.gov/vuln/detail/CVE-2023-6597 12140 python3 python3 12356 python3-3.12.3-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-libs-3.12.3-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-curses-3.12.3-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-devel-3.12.3-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-tools-3.12.3-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-test-3.12.3-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-debuginfo-3.12.3-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.12.3-1 https://nvd.nist.gov/vuln/detail/CVE-2023-6597 12356 python3 python3 12357 python3-3.12.3-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-libs-3.12.3-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-curses-3.12.3-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-devel-3.12.3-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-tools-3.12.3-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-test-3.12.3-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-debuginfo-3.12.3-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.12.3-1 https://nvd.nist.gov/vuln/detail/CVE-2023-6597 12357 python3 1.0 2024-06-30T00:00:00 <p>Information published.</p> 1.1 2024-08-24T17:00:00 <p>Information published.</p> 1.2 2024-08-25T17:00:00 <p>Information published.</p> 1.3 2024-08-26T17:00:00 <p>Information published.</p> 1.4 2024-08-27T17:00:00 <p>Information published.</p> 1.5 2024-08-28T17:00:00 <p>Information published.</p> 1.6 2024-08-29T17:00:00 <p>Information published.</p> 1.7 2024-08-30T17:00:00 <p>Information published.</p> 1.8 2024-08-31T17:00:00 <p>Information published.</p> 1.9 2024-09-01T17:00:00 <p>Information published.</p> 2.0 2024-09-02T17:00:00 <p>Information published.</p> 2.1 2024-09-04T17:00:00 <p>Information published.</p> 2.2 2024-09-05T17:00:00 <p>Information published.</p> 2.3 2024-09-06T17:00:00 <p>Information published.</p> 2.4 2024-09-07T17:00:00 <p>Information published.</p> 2.5 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2020-16845 https://nvd.nist.gov/vuln/detail/CVE-2020-16845 https://nvd.nist.gov/vuln/detail/CVE-2020-16845 https://nvd.nist.gov/vuln/detail/CVE-2020-16845 Mariner cve@mitre.org Yes CVE-2020-16845 12137 12138 12356 12357 12137 12138 12356 12357 12137 12138 12356 12357 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12137 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12138 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12356 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12357 golang 12137 golang-1.15.13-1.cm1.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.15.13-1 https://nvd.nist.gov/vuln/detail/CVE-2020-16845 12137 golang golang 12138 golang-1.15.13-1.cm1.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.15.13-1 https://nvd.nist.gov/vuln/detail/CVE-2020-16845 12138 golang python-tensorboard 12356 python3-tensorboard-2.16.2-2.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-tensorboard-data-server-2.16.2-2.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.16.2-2 https://nvd.nist.gov/vuln/detail/CVE-2020-16845 12356 python-tensorboard python-tensorboard 12357 CBL-Mariner 2.16.2-2 https://nvd.nist.gov/vuln/detail/CVE-2020-16845 12357 python-tensorboard 1.0 2020-08-17T17:00:00 <p>Information published.</p> 1.1 2024-08-28T17:00:00 <p>Information published.</p> 1.2 2024-08-29T17:00:00 <p>Information published.</p> 1.3 2024-08-30T17:00:00 <p>Information published.</p> 1.4 2024-08-31T17:00:00 <p>Information published.</p> 1.5 2024-09-01T17:00:00 <p>Information published.</p> 1.6 2024-09-02T17:00:00 <p>Information published.</p> 1.7 2024-09-04T17:00:00 <p>Information published.</p> 1.8 2024-09-05T17:00:00 <p>Information published.</p> 1.9 2024-09-06T17:00:00 <p>Information published.</p> 2.0 2024-09-07T17:00:00 <p>Information published.</p> 2.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2021-41771 https://nvd.nist.gov/vuln/detail/CVE-2021-41771 https://nvd.nist.gov/vuln/detail/CVE-2021-41771 https://nvd.nist.gov/vuln/detail/CVE-2021-41771 https://nvd.nist.gov/vuln/detail/CVE-2021-41771 https://nvd.nist.gov/vuln/detail/CVE-2021-41771 Mariner cve@mitre.org Yes CVE-2021-41771 12137 12138 12139 12140 12356 12357 12137 12138 12139 12140 12356 12357 12137 12138 12139 12140 12356 12357 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12137 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12138 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12139 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12140 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12356 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12357 golang 12137 golang-1.16.10-1.cm1.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.16.10-1 https://nvd.nist.gov/vuln/detail/CVE-2021-41771 12137 golang golang 12138 golang-1.16.10-1.cm1.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.16.10-1 https://nvd.nist.gov/vuln/detail/CVE-2021-41771 12138 golang golang 12139 golang-1.17.8-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.17.8-1 https://nvd.nist.gov/vuln/detail/CVE-2021-41771 12139 golang golang 12140 golang-1.17.8-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.17.8-1 https://nvd.nist.gov/vuln/detail/CVE-2021-41771 12140 golang python-tensorboard 12356 python3-tensorboard-2.16.2-2.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-tensorboard-data-server-2.16.2-2.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.16.2-2 https://nvd.nist.gov/vuln/detail/CVE-2021-41771 12356 python-tensorboard python-tensorboard 12357 CBL-Mariner 2.16.2-2 https://nvd.nist.gov/vuln/detail/CVE-2021-41771 12357 python-tensorboard 1.0 2021-11-10T16:00:00 <p>Information published.</p> 1.1 2021-12-15T16:00:00 <p>Added golang to CBL-Mariner 2.0</p> 1.2 2024-08-28T17:00:00 <p>Information published.</p> 1.3 2024-08-29T17:00:00 <p>Information published.</p> 1.4 2024-08-30T17:00:00 <p>Information published.</p> 1.5 2024-08-31T17:00:00 <p>Information published.</p> 1.6 2024-09-01T17:00:00 <p>Information published.</p> 1.7 2024-09-02T17:00:00 <p>Information published.</p> 1.8 2024-09-04T17:00:00 <p>Information published.</p> 1.9 2024-09-05T17:00:00 <p>Information published.</p> 2.0 2024-09-06T17:00:00 <p>Information published.</p> 2.1 2024-09-07T17:00:00 <p>Information published.</p> 2.2 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-41810 https://nvd.nist.gov/vuln/detail/CVE-2024-41810 https://nvd.nist.gov/vuln/detail/CVE-2024-41810 https://nvd.nist.gov/vuln/detail/CVE-2024-41810 Mariner security-advisories@github.com Yes CVE-2024-41810 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 6.1 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N 12356 6.1 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N 12357 6.1 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N 12139 6.1 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N 12140 python-twisted 12356 python3-twisted-22.10.0-3.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 22.10.0-3 https://nvd.nist.gov/vuln/detail/CVE-2024-41810 12356 python-twisted python-twisted 12357 python3-twisted-22.10.0-3.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 22.10.0-3 https://nvd.nist.gov/vuln/detail/CVE-2024-41810 12357 python-twisted python-twisted 12139 python3-twisted-22.10.0-3.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 22.10.0-3 https://nvd.nist.gov/vuln/detail/CVE-2024-41810 12139 python-twisted python-twisted 12140 python3-twisted-22.10.0-3.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 22.10.0-3 https://nvd.nist.gov/vuln/detail/CVE-2024-41810 12140 python-twisted 1.0 2024-08-17T17:00:00 <p>Information published.</p> 1.1 2024-08-18T17:00:00 <p>Information published.</p> 1.2 2024-08-19T17:00:00 <p>Information published.</p> 1.3 2024-08-20T17:00:00 <p>Information published.</p> 1.4 2024-08-21T17:00:00 <p>Information published.</p> 1.5 2024-08-22T17:00:00 <p>Information published.</p> 1.6 2024-08-23T17:00:00 <p>Information published.</p> 1.7 2024-08-24T17:00:00 <p>Information published.</p> 1.8 2024-08-25T17:00:00 <p>Information published.</p> 1.9 2024-08-26T17:00:00 <p>Information published.</p> 2.0 2024-08-27T17:00:00 <p>Information published.</p> 2.1 2024-08-28T17:00:00 <p>Information published.</p> 2.2 2024-08-29T17:00:00 <p>Information published.</p> 2.3 2024-08-30T17:00:00 <p>Information published.</p> 2.4 2024-08-31T17:00:00 <p>Information published.</p> 2.5 2024-09-01T17:00:00 <p>Information published.</p> 2.6 2024-09-02T17:00:00 <p>Information published.</p> 2.7 2024-09-04T17:00:00 <p>Information published.</p> 2.8 2024-09-05T17:00:00 <p>Information published.</p> 2.9 2024-09-06T17:00:00 <p>Information published.</p> 3.0 2024-09-07T17:00:00 <p>Information published.</p> 3.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2021-3929 https://nvd.nist.gov/vuln/detail/CVE-2021-3929 https://nvd.nist.gov/vuln/detail/CVE-2021-3929 https://nvd.nist.gov/vuln/detail/CVE-2021-3929 Mariner secalert@redhat.com Yes CVE-2021-3929 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 8.2 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H 12139 8.2 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H 12140 8.2 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H 12356 8.2 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H 12357 qemu 12139 qemu-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-common-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-docs-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-img-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-guest-agent-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-tools-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-pr-helper-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-virtiofsd-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-tests-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-curl-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-rbd-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-opengl-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-dmg-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-nfs-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-oss-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-curses-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-gtk-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-egl-headless-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-gl-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-gl-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-smartcard-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-vhost-user-gpu-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-core-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-user-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-x86-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-x86-core-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-cris-6.2.0-13.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.2.0-13 https://nvd.nist.gov/vuln/detail/CVE-2021-3929 12139 qemu qemu 12140 qemu-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-common-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-docs-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-img-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-guest-agent-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-tools-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-pr-helper-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-virtiofsd-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-tests-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-curl-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-rbd-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-opengl-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-dmg-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-nfs-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-oss-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-curses-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-gtk-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-egl-headless-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-gl-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-gl-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-smartcard-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-vhost-user-gpu-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-core-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-user-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-core-6.2.0-13.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.2.0-13 https://nvd.nist.gov/vuln/detail/CVE-2021-3929 12140 qemu qemu 12356 qemu-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-common-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-docs-8.2.0-9.azl3.noarch.rpm 0001-01-01T00:00:00 qemu-img-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-guest-agent-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-tools-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-pr-helper-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-tests-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-curl-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-dmg-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-nfs-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-oss-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-curses-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-user-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-ipxe-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-cris-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-cris-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-hppa-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-hppa-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-m68k-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-m68k-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-mips-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.2.0-18 https://nvd.nist.gov/vuln/detail/CVE-2021-3929 12356 qemu qemu 12357 qemu-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-common-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-docs-8.2.0-9.azl3.noarch.rpm 0001-01-01T00:00:00 qemu-img-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-guest-agent-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-tools-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-pr-helper-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-tests-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-curl-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-dmg-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-nfs-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-oss-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-curses-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-user-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-ipxe-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-hppa-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-hppa-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-m68k-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-m68k-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.2.0-18 https://nvd.nist.gov/vuln/detail/CVE-2021-3929 12357 qemu 1.8 2024-08-15T17:00:00 <p>Information published.</p> 1.0 2024-08-04T17:00:00 <p>Information published.</p> 1.1 2024-08-05T17:00:00 <p>Information published.</p> 1.2 2024-08-06T17:00:00 <p>Information published.</p> 1.3 2024-08-07T17:00:00 <p>Information published.</p> 1.4 2024-08-08T17:00:00 <p>Information published.</p> 1.5 2024-08-09T17:00:00 <p>Information published.</p> 1.6 2024-08-10T17:00:00 <p>Information published.</p> 1.7 2024-08-11T17:00:00 <p>Information published.</p> 1.9 2024-08-16T17:00:00 <p>Information published.</p> 2.0 2024-08-17T17:00:00 <p>Information published.</p> 2.1 2024-08-18T17:00:00 <p>Information published.</p> 2.2 2024-08-19T17:00:00 <p>Information published.</p> 2.3 2024-08-20T17:00:00 <p>Information published.</p> 2.4 2024-08-21T17:00:00 <p>Information published.</p> 2.5 2024-08-22T17:00:00 <p>Information published.</p> 2.6 2024-08-23T17:00:00 <p>Information published.</p> 2.7 2024-08-24T17:00:00 <p>Information published.</p> 2.8 2024-08-25T17:00:00 <p>Information published.</p> 2.9 2024-08-26T17:00:00 <p>Information published.</p> 3.0 2024-08-27T17:00:00 <p>Information published.</p> 3.1 2024-08-28T17:00:00 <p>Information published.</p> 3.2 2024-08-29T17:00:00 <p>Information published.</p> 3.3 2024-08-30T17:00:00 <p>Information published.</p> 3.4 2024-08-31T17:00:00 <p>Information published.</p> 3.5 2024-09-01T17:00:00 <p>Information published.</p> 3.6 2024-09-02T17:00:00 <p>Information published.</p> 3.7 2024-09-04T17:00:00 <p>Information published.</p> 3.8 2024-09-05T17:00:00 <p>Information published.</p> 3.9 2024-09-06T17:00:00 <p>Information published.</p> 4.0 2024-09-07T17:00:00 <p>Information published.</p> 4.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2022-0358 https://nvd.nist.gov/vuln/detail/CVE-2022-0358 https://nvd.nist.gov/vuln/detail/CVE-2022-0358 https://nvd.nist.gov/vuln/detail/CVE-2022-0358 https://nvd.nist.gov/vuln/detail/CVE-2022-0358 https://nvd.nist.gov/vuln/detail/CVE-2022-0358 Mariner secalert@redhat.com Yes CVE-2022-0358 12137 12138 12139 12140 12356 12357 12137 12138 12139 12140 12356 12357 12137 12138 12139 12140 12356 12357 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12137 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12138 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12139 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12140 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12356 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12357 qemu-kvm 12137 qemu-kvm-4.2.0-48.cm1.x86_64.rpm 0001-01-01T00:00:00 qemu-img-4.2.0-48.cm1.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 4.2.0-48 https://nvd.nist.gov/vuln/detail/CVE-2022-0358 12137 qemu-kvm qemu-kvm 12138 qemu-kvm-4.2.0-48.cm1.aarch64.rpm 0001-01-01T00:00:00 qemu-img-4.2.0-48.cm1.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 4.2.0-48 https://nvd.nist.gov/vuln/detail/CVE-2022-0358 12138 qemu-kvm qemu 12139 qemu-6.2.0-5.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-common-6.2.0-5.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-docs-6.2.0-5.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-img-6.2.0-5.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-guest-agent-6.2.0-5.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-tools-6.2.0-5.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-pr-helper-6.2.0-5.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-virtiofsd-6.2.0-5.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-tests-6.2.0-5.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-curl-6.2.0-5.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-6.2.0-5.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-rbd-6.2.0-5.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-opengl-6.2.0-5.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-dmg-6.2.0-5.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-nfs-6.2.0-5.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-6.2.0-5.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-oss-6.2.0-5.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-curses-6.2.0-5.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-gtk-6.2.0-5.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-egl-headless-6.2.0-5.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-6.2.0-5.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-gl-6.2.0-5.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-6.2.0-5.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-gl-6.2.0-5.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-6.2.0-5.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-6.2.0-5.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-6.2.0-5.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-6.2.0-5.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-6.2.0-5.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-smartcard-6.2.0-5.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-vhost-user-gpu-6.2.0-5.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-6.2.0-5.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-core-6.2.0-5.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-user-6.2.0-5.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-6.2.0-5.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-6.2.0-5.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-6.2.0-5.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-x86-6.2.0-5.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-x86-core-6.2.0-5.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-6.2.0-5.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-6.2.0-5.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-6.2.0-5.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-6.2.0-5.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-6.2.0-5.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-6.2.0-5.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-cris-6.2.0-5.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-cris-core-6.2.0-5.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.2.0-5 https://nvd.nist.gov/vuln/detail/CVE-2022-0358 12139 qemu qemu 12140 qemu-6.2.0-5.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-common-6.2.0-5.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-docs-6.2.0-5.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-img-6.2.0-5.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-guest-agent-6.2.0-5.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-tools-6.2.0-5.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-pr-helper-6.2.0-5.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-virtiofsd-6.2.0-5.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-tests-6.2.0-5.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-curl-6.2.0-5.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-6.2.0-5.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-rbd-6.2.0-5.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-opengl-6.2.0-5.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-dmg-6.2.0-5.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-nfs-6.2.0-5.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-6.2.0-5.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-oss-6.2.0-5.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-curses-6.2.0-5.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-gtk-6.2.0-5.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-egl-headless-6.2.0-5.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-6.2.0-5.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-gl-6.2.0-5.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-6.2.0-5.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-gl-6.2.0-5.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-6.2.0-5.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-6.2.0-5.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-6.2.0-5.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-6.2.0-5.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-6.2.0-5.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-smartcard-6.2.0-5.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-vhost-user-gpu-6.2.0-5.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-6.2.0-5.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-core-6.2.0-5.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-user-6.2.0-5.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-6.2.0-5.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-6.2.0-5.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-6.2.0-5.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-6.2.0-5.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-6.2.0-5.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-6.2.0-5.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-6.2.0-5.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-6.2.0-5.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-6.2.0-5.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-6.2.0-5.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-core-6.2.0-5.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-hppa-6.2.0-5.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.2.0-5 https://nvd.nist.gov/vuln/detail/CVE-2022-0358 12140 qemu qemu 12356 qemu-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-common-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-docs-8.2.0-9.azl3.noarch.rpm 0001-01-01T00:00:00 qemu-img-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-guest-agent-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-tools-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-pr-helper-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-tests-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-curl-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-dmg-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-nfs-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-oss-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-curses-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-user-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-ipxe-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-cris-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-cris-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-hppa-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-hppa-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-m68k-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-m68k-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-mips-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.2.0-18 https://nvd.nist.gov/vuln/detail/CVE-2022-0358 12356 qemu qemu 12357 qemu-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-common-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-docs-8.2.0-9.azl3.noarch.rpm 0001-01-01T00:00:00 qemu-img-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-guest-agent-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-tools-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-pr-helper-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-tests-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-curl-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-dmg-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-nfs-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-oss-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-curses-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-user-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-ipxe-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-hppa-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-hppa-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-m68k-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-m68k-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.2.0-18 https://nvd.nist.gov/vuln/detail/CVE-2022-0358 12357 qemu 1.0 2024-08-04T17:00:00 <p>Information published.</p> 1.1 2024-08-05T17:00:00 <p>Information published.</p> 1.2 2024-08-06T17:00:00 <p>Information published.</p> 1.3 2024-08-07T17:00:00 <p>Information published.</p> 1.4 2024-08-08T17:00:00 <p>Information published.</p> 1.5 2024-08-09T17:00:00 <p>Information published.</p> 1.6 2024-08-10T17:00:00 <p>Information published.</p> 1.7 2024-08-11T17:00:00 <p>Information published.</p> 1.8 2024-08-15T17:00:00 <p>Information published.</p> 1.9 2024-08-16T17:00:00 <p>Information published.</p> 2.0 2024-08-17T17:00:00 <p>Information published.</p> 2.1 2024-08-18T17:00:00 <p>Information published.</p> 2.2 2024-08-19T17:00:00 <p>Information published.</p> 2.3 2024-08-20T17:00:00 <p>Information published.</p> 2.4 2024-08-21T17:00:00 <p>Information published.</p> 2.5 2024-08-22T17:00:00 <p>Information published.</p> 2.6 2024-08-23T17:00:00 <p>Information published.</p> 2.7 2024-08-24T17:00:00 <p>Information published.</p> 2.8 2024-08-25T17:00:00 <p>Information published.</p> 2.9 2024-08-26T17:00:00 <p>Information published.</p> 3.0 2024-08-27T17:00:00 <p>Information published.</p> 3.1 2024-08-28T17:00:00 <p>Information published.</p> 3.2 2024-08-29T17:00:00 <p>Information published.</p> 3.3 2024-08-30T17:00:00 <p>Information published.</p> 3.4 2024-08-31T17:00:00 <p>Information published.</p> 3.5 2024-09-01T17:00:00 <p>Information published.</p> 3.6 2024-09-02T17:00:00 <p>Information published.</p> 3.7 2024-09-04T17:00:00 <p>Information published.</p> 3.8 2024-09-05T17:00:00 <p>Information published.</p> 3.9 2024-09-06T17:00:00 <p>Information published.</p> 4.0 2024-09-07T17:00:00 <p>Information published.</p> 4.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2022-3872 https://nvd.nist.gov/vuln/detail/CVE-2022-3872 https://nvd.nist.gov/vuln/detail/CVE-2022-3872 https://nvd.nist.gov/vuln/detail/CVE-2022-3872 https://nvd.nist.gov/vuln/detail/CVE-2022-3872 https://nvd.nist.gov/vuln/detail/CVE-2022-3872 Mariner secalert@redhat.com Yes CVE-2022-3872 12137 12138 12139 12140 12356 12357 12137 12138 12139 12140 12356 12357 12137 12138 12139 12140 12356 12357 8.6 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H 12137 8.6 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H 12138 8.6 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H 12139 8.6 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H 12140 8.6 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H 12356 8.6 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H 12357 qemu-kvm 12137 qemu-kvm-4.2.0-48.cm1.x86_64.rpm 0001-01-01T00:00:00 qemu-img-4.2.0-48.cm1.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 4.2.0-48 https://nvd.nist.gov/vuln/detail/CVE-2022-3872 12137 qemu-kvm qemu-kvm 12138 qemu-kvm-4.2.0-48.cm1.aarch64.rpm 0001-01-01T00:00:00 qemu-img-4.2.0-48.cm1.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 4.2.0-48 https://nvd.nist.gov/vuln/detail/CVE-2022-3872 12138 qemu-kvm qemu 12139 qemu-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-common-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-docs-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-img-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-guest-agent-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-tools-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-pr-helper-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-virtiofsd-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-tests-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-curl-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-rbd-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-opengl-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-dmg-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-block-nfs-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-oss-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-curses-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-gtk-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-egl-headless-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-gl-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-gl-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-smartcard-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-vhost-user-gpu-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-core-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-user-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-x86-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-x86-core-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 qemu-system-cris-6.2.0-12.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.2.0-12 https://nvd.nist.gov/vuln/detail/CVE-2022-3872 12139 qemu qemu 12140 qemu-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-common-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-docs-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-img-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-guest-agent-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-tools-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-pr-helper-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-virtiofsd-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-tests-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-curl-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-rbd-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-opengl-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-dmg-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-block-nfs-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-oss-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-curses-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-gtk-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-egl-headless-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-gl-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-gl-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-smartcard-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-vhost-user-gpu-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-core-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-user-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-core-6.2.0-12.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.2.0-12 https://nvd.nist.gov/vuln/detail/CVE-2022-3872 12140 qemu qemu 12356 qemu-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-common-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-docs-8.2.0-9.azl3.noarch.rpm 0001-01-01T00:00:00 qemu-img-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-guest-agent-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-tools-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-pr-helper-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-tests-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-curl-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-dmg-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-nfs-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-oss-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-curses-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-user-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-ipxe-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-cris-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-cris-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-hppa-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-hppa-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-m68k-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-m68k-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-mips-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.2.0-18 https://nvd.nist.gov/vuln/detail/CVE-2022-3872 12356 qemu qemu 12357 qemu-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-common-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-docs-8.2.0-9.azl3.noarch.rpm 0001-01-01T00:00:00 qemu-img-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-guest-agent-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-tools-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-pr-helper-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-tests-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-curl-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-dmg-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-nfs-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-oss-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-curses-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-user-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-ipxe-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-hppa-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-hppa-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-m68k-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-m68k-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.2.0-18 https://nvd.nist.gov/vuln/detail/CVE-2022-3872 12357 qemu 1.0 2024-08-04T17:00:00 <p>Information published.</p> 1.1 2024-08-05T17:00:00 <p>Information published.</p> 1.2 2024-08-06T17:00:00 <p>Information published.</p> 1.3 2024-08-07T17:00:00 <p>Information published.</p> 1.4 2024-08-08T17:00:00 <p>Information published.</p> 1.5 2024-08-09T17:00:00 <p>Information published.</p> 1.6 2024-08-10T17:00:00 <p>Information published.</p> 1.7 2024-08-11T17:00:00 <p>Information published.</p> 1.8 2024-08-15T17:00:00 <p>Information published.</p> 1.9 2024-08-16T17:00:00 <p>Information published.</p> 2.0 2024-08-17T17:00:00 <p>Information published.</p> 2.1 2024-08-18T17:00:00 <p>Information published.</p> 2.2 2024-08-19T17:00:00 <p>Information published.</p> 2.3 2024-08-20T17:00:00 <p>Information published.</p> 2.4 2024-08-21T17:00:00 <p>Information published.</p> 2.5 2024-08-22T17:00:00 <p>Information published.</p> 2.6 2024-08-23T17:00:00 <p>Information published.</p> 2.7 2024-08-24T17:00:00 <p>Information published.</p> 2.8 2024-08-25T17:00:00 <p>Information published.</p> 2.9 2024-08-26T17:00:00 <p>Information published.</p> 3.0 2024-08-27T17:00:00 <p>Information published.</p> 3.1 2024-08-28T17:00:00 <p>Information published.</p> 3.2 2024-08-29T17:00:00 <p>Information published.</p> 3.3 2024-08-30T17:00:00 <p>Information published.</p> 3.4 2024-08-31T17:00:00 <p>Information published.</p> 3.5 2024-09-01T17:00:00 <p>Information published.</p> 3.6 2024-09-02T17:00:00 <p>Information published.</p> 3.7 2024-09-04T17:00:00 <p>Information published.</p> 3.8 2024-09-05T17:00:00 <p>Information published.</p> 3.9 2024-09-06T17:00:00 <p>Information published.</p> 4.0 2024-09-07T17:00:00 <p>Information published.</p> 4.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-27322 https://nvd.nist.gov/vuln/detail/CVE-2024-27322 https://nvd.nist.gov/vuln/detail/CVE-2024-27322 https://nvd.nist.gov/vuln/detail/CVE-2024-27322 Mariner 6f8de1f0-f67e-45a6-b68f-98777fdb759c Yes CVE-2024-27322 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 12139 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 12140 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 12356 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 12357 R 12139 CBL-Mariner 4.1.0-5 https://nvd.nist.gov/vuln/detail/CVE-2024-27322 12139 R R 12140 R-core-4.1.0-5.cm2.aarch64.rpm 0001-01-01T00:00:00 R-core-devel-4.1.0-5.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 4.1.0-5 https://nvd.nist.gov/vuln/detail/CVE-2024-27322 12140 R R 12356 R-core-4.4.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 R-core-devel-4.4.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 4.4.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-27322 12356 R R 12357 R-core-4.4.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 R-core-devel-4.4.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 4.4.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-27322 12357 R 1.0 2024-06-30T00:00:00 <p>Information published.</p> 1.1 2024-08-28T17:00:00 <p>Information published.</p> 1.2 2024-08-29T17:00:00 <p>Information published.</p> 1.3 2024-08-30T17:00:00 <p>Information published.</p> 1.4 2024-08-31T17:00:00 <p>Information published.</p> 1.5 2024-09-01T17:00:00 <p>Information published.</p> 1.6 2024-09-02T17:00:00 <p>Information published.</p> 1.7 2024-09-04T17:00:00 <p>Information published.</p> 1.8 2024-09-05T17:00:00 <p>Information published.</p> 1.9 2024-09-06T17:00:00 <p>Information published.</p> 2.0 2024-09-07T17:00:00 <p>Information published.</p> 2.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-42459 https://nvd.nist.gov/vuln/detail/CVE-2024-42459 Mariner cve@mitre.org Yes CVE-2024-42459 12139 12140 12139 12140 12139 12140 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N 12139 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N 12140 reaper 12139 reaper-3.1.1-11.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.1.1-11 https://nvd.nist.gov/vuln/detail/CVE-2024-42459 12139 reaper reaper 12140 CBL-Mariner 3.1.1-11 https://nvd.nist.gov/vuln/detail/CVE-2024-42459 12140 reaper 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-42460 https://nvd.nist.gov/vuln/detail/CVE-2024-42460 Mariner cve@mitre.org Yes CVE-2024-42460 12139 12140 12139 12140 12139 12140 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N 12139 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N 12140 reaper 12139 reaper-3.1.1-11.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.1.1-11 https://nvd.nist.gov/vuln/detail/CVE-2024-42460 12139 reaper reaper 12140 CBL-Mariner 3.1.1-11 https://nvd.nist.gov/vuln/detail/CVE-2024-42460 12140 reaper 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-42461 https://nvd.nist.gov/vuln/detail/CVE-2024-42461 Mariner cve@mitre.org Yes CVE-2024-42461 12139 12140 12139 12140 12139 12140 9.1 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N 12139 9.1 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N 12140 reaper 12139 reaper-3.1.1-11.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.1.1-11 https://nvd.nist.gov/vuln/detail/CVE-2024-42461 12139 reaper reaper 12140 CBL-Mariner 3.1.1-11 https://nvd.nist.gov/vuln/detail/CVE-2024-42461 12140 reaper 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2023-51257 https://nvd.nist.gov/vuln/detail/CVE-2023-51257 https://nvd.nist.gov/vuln/detail/CVE-2023-51257 https://nvd.nist.gov/vuln/detail/CVE-2023-51257 Mariner cve@mitre.org Yes CVE-2023-51257 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12356 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12357 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12139 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12140 jasper 12356 jasper-4.2.1-2.azl3.x86_64.rpm 0001-01-01T00:00:00 jasper-devel-4.2.1-2.azl3.x86_64.rpm 0001-01-01T00:00:00 jasper-libs-4.2.1-2.azl3.x86_64.rpm 0001-01-01T00:00:00 jasper-utils-4.2.1-2.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 4.2.1-1 https://nvd.nist.gov/vuln/detail/CVE-2023-51257 12356 jasper jasper 12357 jasper-4.2.1-2.azl3.aarch64.rpm 0001-01-01T00:00:00 jasper-devel-4.2.1-2.azl3.aarch64.rpm 0001-01-01T00:00:00 jasper-libs-4.2.1-2.azl3.aarch64.rpm 0001-01-01T00:00:00 jasper-utils-4.2.1-2.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 4.2.1-1 https://nvd.nist.gov/vuln/detail/CVE-2023-51257 12357 jasper jasper 12139 jasper-2.0.32-4.cm2.x86_64.rpm 0001-01-01T00:00:00 jasper-devel-2.0.32-4.cm2.x86_64.rpm 0001-01-01T00:00:00 jasper-libs-2.0.32-4.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.0.32-4 https://nvd.nist.gov/vuln/detail/CVE-2023-51257 12139 jasper jasper 12140 jasper-2.0.32-4.cm2.aarch64.rpm 0001-01-01T00:00:00 jasper-devel-2.0.32-4.cm2.aarch64.rpm 0001-01-01T00:00:00 jasper-libs-2.0.32-4.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.0.32-4 https://nvd.nist.gov/vuln/detail/CVE-2023-51257 12140 jasper 1.0 2024-06-30T00:00:00 <p>Information published.</p> 1.1 2024-09-05T17:00:00 <p>Information published.</p> 1.2 2024-09-06T17:00:00 <p>Information published.</p> 1.3 2024-09-07T17:00:00 <p>Information published.</p> 1.4 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-40725 https://nvd.nist.gov/vuln/detail/CVE-2024-40725 https://nvd.nist.gov/vuln/detail/CVE-2024-40725 https://nvd.nist.gov/vuln/detail/CVE-2024-40725 Mariner security@apache.org Yes CVE-2024-40725 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N 12139 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N 12140 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N 12356 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N 12357 httpd 12139 httpd-2.4.62-1.cm2.x86_64.rpm 0001-01-01T00:00:00 httpd-devel-2.4.62-1.cm2.x86_64.rpm 0001-01-01T00:00:00 httpd-docs-2.4.62-1.cm2.x86_64.rpm 0001-01-01T00:00:00 httpd-tools-2.4.62-1.cm2.x86_64.rpm 0001-01-01T00:00:00 mod_ldap-2.4.62-1.cm2.x86_64.rpm 0001-01-01T00:00:00 mod_proxy_html-2.4.62-1.cm2.x86_64.rpm 0001-01-01T00:00:00 mod_session-2.4.62-1.cm2.x86_64.rpm 0001-01-01T00:00:00 mod_ssl-2.4.62-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.4.62-1 https://nvd.nist.gov/vuln/detail/CVE-2024-40725 12139 httpd httpd 12140 httpd-2.4.62-1.cm2.aarch64.rpm 0001-01-01T00:00:00 httpd-devel-2.4.62-1.cm2.aarch64.rpm 0001-01-01T00:00:00 httpd-docs-2.4.62-1.cm2.aarch64.rpm 0001-01-01T00:00:00 httpd-tools-2.4.62-1.cm2.aarch64.rpm 0001-01-01T00:00:00 mod_ldap-2.4.62-1.cm2.aarch64.rpm 0001-01-01T00:00:00 mod_proxy_html-2.4.62-1.cm2.aarch64.rpm 0001-01-01T00:00:00 mod_session-2.4.62-1.cm2.aarch64.rpm 0001-01-01T00:00:00 mod_ssl-2.4.62-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.4.62-1 https://nvd.nist.gov/vuln/detail/CVE-2024-40725 12140 httpd httpd 12356 httpd-2.4.62-1.azl3.x86_64.rpm 0001-01-01T00:00:00 httpd-devel-2.4.62-1.azl3.x86_64.rpm 0001-01-01T00:00:00 httpd-docs-2.4.62-1.azl3.x86_64.rpm 0001-01-01T00:00:00 httpd-tools-2.4.62-1.azl3.x86_64.rpm 0001-01-01T00:00:00 mod_ldap-2.4.62-1.azl3.x86_64.rpm 0001-01-01T00:00:00 mod_proxy_html-2.4.62-1.azl3.x86_64.rpm 0001-01-01T00:00:00 mod_session-2.4.62-1.azl3.x86_64.rpm 0001-01-01T00:00:00 mod_ssl-2.4.62-1.azl3.x86_64.rpm 0001-01-01T00:00:00 httpd-debuginfo-2.4.62-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.4.62-1 https://nvd.nist.gov/vuln/detail/CVE-2024-40725 12356 httpd httpd 12357 httpd-2.4.62-1.azl3.aarch64.rpm 0001-01-01T00:00:00 httpd-devel-2.4.62-1.azl3.aarch64.rpm 0001-01-01T00:00:00 httpd-docs-2.4.62-1.azl3.aarch64.rpm 0001-01-01T00:00:00 httpd-tools-2.4.62-1.azl3.aarch64.rpm 0001-01-01T00:00:00 mod_ldap-2.4.62-1.azl3.aarch64.rpm 0001-01-01T00:00:00 mod_proxy_html-2.4.62-1.azl3.aarch64.rpm 0001-01-01T00:00:00 mod_session-2.4.62-1.azl3.aarch64.rpm 0001-01-01T00:00:00 mod_ssl-2.4.62-1.azl3.aarch64.rpm 0001-01-01T00:00:00 httpd-debuginfo-2.4.62-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.4.62-1 https://nvd.nist.gov/vuln/detail/CVE-2024-40725 12357 httpd 1.0 2024-07-25T17:00:00 <p>Information published.</p> 1.1 2024-08-14T17:00:00 <p>Information published.</p> 1.2 2024-08-15T17:00:00 <p>Information published.</p> 1.3 2024-08-16T17:00:00 <p>Information published.</p> 1.4 2024-08-17T17:00:00 <p>Information published.</p> 1.5 2024-08-18T17:00:00 <p>Information published.</p> 1.6 2024-08-19T17:00:00 <p>Information published.</p> 1.7 2024-08-20T17:00:00 <p>Information published.</p> 1.8 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-35848 https://nvd.nist.gov/vuln/detail/CVE-2024-35848 https://nvd.nist.gov/vuln/detail/CVE-2024-35848 https://nvd.nist.gov/vuln/detail/CVE-2024-35848 Mariner cve@kernel.org Yes CVE-2024-35848 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 hyperv-daemons 12139 hyperv-daemons-5.15.160.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-5.15.160.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-5.15.160.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-5.15.160.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-5.15.160.1-1.cm2.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-5.15.160.1-1.cm2.noarch.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.160.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-35848 12139 hyperv-daemons hyperv-daemons 12140 hyperv-daemons-5.15.160.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-5.15.160.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-5.15.160.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-5.15.160.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-5.15.160.1-1.cm2.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-5.15.160.1-1.cm2.noarch.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.160.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-35848 12140 hyperv-daemons hyperv-daemons 12356 hyperv-daemons-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-35848 12356 hyperv-daemons hyperv-daemons 12357 hyperv-daemons-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-35848 12357 hyperv-daemons 1.0 2024-05-22T17:00:00 <p>Information published.</p> 1.1 2024-08-14T17:00:00 <p>Information published.</p> 1.2 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-41070 https://nvd.nist.gov/vuln/detail/CVE-2024-41070 https://nvd.nist.gov/vuln/detail/CVE-2024-41070 https://nvd.nist.gov/vuln/detail/CVE-2024-41070 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-41070 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12139 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12140 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12356 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12357 kernel 12139 kernel-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 python3-perf-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 bpftool-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.164.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-41070 12139 kernel kernel 12140 kernel-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 python3-perf-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-dtb-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 bpftool-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.164.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-41070 12140 kernel kernel 12356 kernel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-41070 12356 kernel kernel 12357 kernel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-41070 12357 kernel 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-41055 https://nvd.nist.gov/vuln/detail/CVE-2024-41055 https://nvd.nist.gov/vuln/detail/CVE-2024-41055 https://nvd.nist.gov/vuln/detail/CVE-2024-41055 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-41055 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12139 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12140 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12356 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12357 kernel 12139 kernel-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 python3-perf-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 bpftool-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.164.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-41055 12139 kernel kernel 12140 kernel-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 python3-perf-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-dtb-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 bpftool-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.164.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-41055 12140 kernel kernel 12356 kernel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-41055 12356 kernel kernel 12357 kernel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-41055 12357 kernel 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-39487 https://nvd.nist.gov/vuln/detail/CVE-2024-39487 https://nvd.nist.gov/vuln/detail/CVE-2024-39487 https://nvd.nist.gov/vuln/detail/CVE-2024-39487 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-39487 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 12139 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 12140 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 12356 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 12357 kernel 12139 kernel-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 python3-perf-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 bpftool-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.164.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-39487 12139 kernel kernel 12140 kernel-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 python3-perf-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-dtb-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 bpftool-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.164.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-39487 12140 kernel kernel 12356 kernel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-39487 12356 kernel kernel 12357 kernel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-39487 12357 kernel 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-37370 https://nvd.nist.gov/vuln/detail/CVE-2024-37370 https://nvd.nist.gov/vuln/detail/CVE-2024-37370 https://nvd.nist.gov/vuln/detail/CVE-2024-37370 Mariner cve@mitre.org Yes CVE-2024-37370 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 12356 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 12357 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 12139 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 12140 krb5 12356 krb5-1.21.3-1.azl3.x86_64.rpm 0001-01-01T00:00:00 krb5-devel-1.21.3-1.azl3.x86_64.rpm 0001-01-01T00:00:00 krb5-lang-1.21.3-1.azl3.x86_64.rpm 0001-01-01T00:00:00 krb5-debuginfo-1.21.3-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.21.3-1 https://nvd.nist.gov/vuln/detail/CVE-2024-37370 12356 krb5 krb5 12357 krb5-1.21.3-1.azl3.aarch64.rpm 0001-01-01T00:00:00 krb5-devel-1.21.3-1.azl3.aarch64.rpm 0001-01-01T00:00:00 krb5-lang-1.21.3-1.azl3.aarch64.rpm 0001-01-01T00:00:00 krb5-debuginfo-1.21.3-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.21.3-1 https://nvd.nist.gov/vuln/detail/CVE-2024-37370 12357 krb5 krb5 12139 krb5-1.21.3-1.cm2.x86_64.rpm 0001-01-01T00:00:00 krb5-devel-1.21.3-1.cm2.x86_64.rpm 0001-01-01T00:00:00 krb5-lang-1.21.3-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.21.3-1 https://nvd.nist.gov/vuln/detail/CVE-2024-37370 12139 krb5 krb5 12140 krb5-1.21.3-1.cm2.aarch64.rpm 0001-01-01T00:00:00 krb5-devel-1.21.3-1.cm2.aarch64.rpm 0001-01-01T00:00:00 krb5-lang-1.21.3-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.21.3-1 https://nvd.nist.gov/vuln/detail/CVE-2024-37370 12140 krb5 1.1 2024-08-15T17:00:00 <p>Information published.</p> 1.0 2024-08-04T17:00:00 <p>Information published.</p> 1.2 2024-08-16T17:00:00 <p>Information published.</p> 1.3 2024-08-17T17:00:00 <p>Information published.</p> 1.4 2024-08-18T17:00:00 <p>Information published.</p> 1.5 2024-08-19T17:00:00 <p>Information published.</p> 1.6 2024-08-20T17:00:00 <p>Information published.</p> 1.7 2024-08-21T17:00:00 <p>Information published.</p> 1.8 2024-08-22T17:00:00 <p>Information published.</p> 1.9 2024-08-23T17:00:00 <p>Information published.</p> 2.0 2024-08-24T17:00:00 <p>Information published.</p> 2.1 2024-08-25T17:00:00 <p>Information published.</p> 2.2 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2023-2650 https://nvd.nist.gov/vuln/detail/CVE-2023-2650 https://nvd.nist.gov/vuln/detail/CVE-2023-2650 https://nvd.nist.gov/vuln/detail/CVE-2023-2650 https://nvd.nist.gov/vuln/detail/CVE-2023-2650 https://nvd.nist.gov/vuln/detail/CVE-2023-2650 https://nvd.nist.gov/vuln/detail/CVE-2023-2650 https://nvd.nist.gov/vuln/detail/CVE-2023-2650 https://nvd.nist.gov/vuln/detail/CVE-2023-2650 https://nvd.nist.gov/vuln/detail/CVE-2023-2650 https://nvd.nist.gov/vuln/detail/CVE-2023-2650 Mariner openssl-security@openssl.org Yes CVE-2023-2650 12137 12138 12139 12140 12356 12357 12137 12138 12139 12140 12356 12357 12137 12138 12139 12140 12356 12357 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 12137 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 12138 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 12139 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 12140 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 12356 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 12357 openssl 12137 openssl-1.1.1k-16.cm1.x86_64.rpm 0001-01-01T00:00:00 openssl-libs-1.1.1k-16.cm1.x86_64.rpm 0001-01-01T00:00:00 openssl-devel-1.1.1k-16.cm1.x86_64.rpm 0001-01-01T00:00:00 openssl-static-1.1.1k-16.cm1.x86_64.rpm 0001-01-01T00:00:00 openssl-perl-1.1.1k-16.cm1.x86_64.rpm 0001-01-01T00:00:00 openssl-debuginfo-1.1.1k-16.cm1.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.1.1k-16 https://nvd.nist.gov/vuln/detail/CVE-2023-2650 12137 openssl openssl 12138 openssl-1.1.1k-16.cm1.aarch64.rpm 0001-01-01T00:00:00 openssl-libs-1.1.1k-16.cm1.aarch64.rpm 0001-01-01T00:00:00 openssl-devel-1.1.1k-16.cm1.aarch64.rpm 0001-01-01T00:00:00 openssl-static-1.1.1k-16.cm1.aarch64.rpm 0001-01-01T00:00:00 openssl-perl-1.1.1k-16.cm1.aarch64.rpm 0001-01-01T00:00:00 openssl-debuginfo-1.1.1k-16.cm1.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.1.1k-16 https://nvd.nist.gov/vuln/detail/CVE-2023-2650 12138 openssl edk2 12139 edk2-ovmf-20230301gitf80f052277c8-37.cm2.noarch.rpm 0001-01-01T00:00:00 edk2-tools-20230301gitf80f052277c8-37.cm2.x86_64.rpm 0001-01-01T00:00:00 edk2-tools-doc-20230301gitf80f052277c8-37.cm2.noarch.rpm 0001-01-01T00:00:00 edk2-ovmf-ia32-20230301gitf80f052277c8-37.cm2.noarch.rpm 0001-01-01T00:00:00 edk2-ovmf-xen-20230301gitf80f052277c8-37.cm2.noarch.rpm 0001-01-01T00:00:00 edk2-ext4-20230301gitf80f052277c8-37.cm2.noarch.rpm 0001-01-01T00:00:00 edk2-tools-python-20230301gitf80f052277c8-37.cm2.noarch.rpm 0001-01-01T00:00:00 edk2-debuginfo-20230301gitf80f052277c8-37.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 20230301gitf80f052277c8-37 https://nvd.nist.gov/vuln/detail/CVE-2023-2650 12139 edk2 hvloader 12139 hvloader-1.0.1-3.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.0.1-3 https://nvd.nist.gov/vuln/detail/CVE-2023-2650 12139 hvloader openssl 12139 openssl-1.1.1k-26.cm2.x86_64.rpm 0001-01-01T00:00:00 openssl-libs-1.1.1k-26.cm2.x86_64.rpm 0001-01-01T00:00:00 openssl-devel-1.1.1k-26.cm2.x86_64.rpm 0001-01-01T00:00:00 openssl-static-1.1.1k-26.cm2.x86_64.rpm 0001-01-01T00:00:00 openssl-perl-1.1.1k-26.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.1.1k-25 https://nvd.nist.gov/vuln/detail/CVE-2023-2650 12139 openssl rust 12139 rust-1.72.0-2.cm2.x86_64.rpm 0001-01-01T00:00:00 rust-doc-1.72.0-2.cm2.noarch.rpm 0001-01-01T00:00:00 rust-debuginfo-1.72.0-2.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.72.0-2 https://nvd.nist.gov/vuln/detail/CVE-2023-2650 12139 rust edk2 12140 12357 CBL-Mariner 20230301gitf80f052277c8-37 https://nvd.nist.gov/vuln/detail/CVE-2023-2650 12140 12357 edk2 hvloader 12140 CBL-Mariner 1.0.1-3 https://nvd.nist.gov/vuln/detail/CVE-2023-2650 12140 hvloader openssl 12140 openssl-1.1.1k-26.cm2.aarch64.rpm 0001-01-01T00:00:00 openssl-libs-1.1.1k-26.cm2.aarch64.rpm 0001-01-01T00:00:00 openssl-devel-1.1.1k-26.cm2.aarch64.rpm 0001-01-01T00:00:00 openssl-static-1.1.1k-26.cm2.aarch64.rpm 0001-01-01T00:00:00 openssl-perl-1.1.1k-26.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.1.1k-25 https://nvd.nist.gov/vuln/detail/CVE-2023-2650 12140 openssl rust 12140 rust-1.72.0-2.cm2.aarch64.rpm 0001-01-01T00:00:00 rust-doc-1.72.0-2.cm2.noarch.rpm 0001-01-01T00:00:00 rust-debuginfo-1.72.0-2.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.72.0-2 https://nvd.nist.gov/vuln/detail/CVE-2023-2650 12140 rust edk2 12356 edk2-ovmf-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-tools-20240223gitedc6681206c1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 edk2-tools-doc-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-ovmf-ia32-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-ovmf-xen-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-experimental-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-ext4-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-tools-python-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 CBL-Mariner 20230301gitf80f052277c8-37 https://nvd.nist.gov/vuln/detail/CVE-2023-2650 12356 edk2 1.0 2023-06-04T17:00:00 <p>Information published.</p> 1.1 2023-06-05T17:00:00 <p>Added rust to CBL-Mariner 2.0</p> 1.2 2023-10-10T17:00:00 <p>Added edk2 to CBL-Mariner 2.0</p> 1.3 2024-04-05T17:00:00 <p>Added hvloader to CBL-Mariner 2.0</p> 1.4 2024-06-30T00:00:00 <p>Information published.</p> 1.5 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-7348 https://nvd.nist.gov/vuln/detail/CVE-2024-7348 https://nvd.nist.gov/vuln/detail/CVE-2024-7348 https://nvd.nist.gov/vuln/detail/CVE-2024-7348 Mariner f86ef6dc-4d3a-42ad-8f28-e6d5547a5007 Yes CVE-2024-7348 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 7.5 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H 12356 7.5 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H 12357 7.5 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H 12139 7.5 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H 12140 postgresql 12356 postgresql-16.4-1.azl3.x86_64.rpm 0001-01-01T00:00:00 postgresql-libs-16.4-1.azl3.x86_64.rpm 0001-01-01T00:00:00 postgresql-devel-16.4-1.azl3.x86_64.rpm 0001-01-01T00:00:00 postgresql-debuginfo-16.4-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 16.4-1 https://nvd.nist.gov/vuln/detail/CVE-2024-7348 12356 postgresql postgresql 12357 postgresql-16.4-1.azl3.aarch64.rpm 0001-01-01T00:00:00 postgresql-libs-16.4-1.azl3.aarch64.rpm 0001-01-01T00:00:00 postgresql-devel-16.4-1.azl3.aarch64.rpm 0001-01-01T00:00:00 postgresql-debuginfo-16.4-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 16.4-1 https://nvd.nist.gov/vuln/detail/CVE-2024-7348 12357 postgresql postgresql 12139 postgresql-14.13-1.cm2.x86_64.rpm 0001-01-01T00:00:00 postgresql-docs-14.13-1.cm2.x86_64.rpm 0001-01-01T00:00:00 postgresql-libs-14.13-1.cm2.x86_64.rpm 0001-01-01T00:00:00 postgresql-devel-14.13-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 14.13-1 https://nvd.nist.gov/vuln/detail/CVE-2024-7348 12139 postgresql postgresql 12140 postgresql-14.13-1.cm2.aarch64.rpm 0001-01-01T00:00:00 postgresql-docs-14.13-1.cm2.aarch64.rpm 0001-01-01T00:00:00 postgresql-libs-14.13-1.cm2.aarch64.rpm 0001-01-01T00:00:00 postgresql-devel-14.13-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 14.13-1 https://nvd.nist.gov/vuln/detail/CVE-2024-7348 12140 postgresql 1.0 2024-08-15T17:00:00 <p>Information published.</p> 1.1 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2023-6337 https://nvd.nist.gov/vuln/detail/CVE-2023-6337 Mariner security@hashicorp.com Yes CVE-2023-6337 12356 12357 12356 12357 12356 12357 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12356 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12357 cert-manager 12356 cert-manager-1.12.12-1.azl3.x86_64.rpm 0001-01-01T00:00:00 cert-manager-acmesolver-1.12.12-1.azl3.x86_64.rpm 0001-01-01T00:00:00 cert-manager-cainjector-1.12.12-1.azl3.x86_64.rpm 0001-01-01T00:00:00 cert-manager-controller-1.12.12-1.azl3.x86_64.rpm 0001-01-01T00:00:00 cert-manager-cmctl-1.12.12-1.azl3.x86_64.rpm 0001-01-01T00:00:00 cert-manager-webhook-1.12.12-1.azl3.x86_64.rpm 0001-01-01T00:00:00 cert-manager-debuginfo-1.12.12-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.12.12-1 https://nvd.nist.gov/vuln/detail/CVE-2023-6337 12356 cert-manager cert-manager 12357 cert-manager-1.12.12-1.azl3.aarch64.rpm 0001-01-01T00:00:00 cert-manager-acmesolver-1.12.12-1.azl3.aarch64.rpm 0001-01-01T00:00:00 cert-manager-cainjector-1.12.12-1.azl3.aarch64.rpm 0001-01-01T00:00:00 cert-manager-controller-1.12.12-1.azl3.aarch64.rpm 0001-01-01T00:00:00 cert-manager-cmctl-1.12.12-1.azl3.aarch64.rpm 0001-01-01T00:00:00 cert-manager-webhook-1.12.12-1.azl3.aarch64.rpm 0001-01-01T00:00:00 cert-manager-debuginfo-1.12.12-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.12.12-1 https://nvd.nist.gov/vuln/detail/CVE-2023-6337 12357 cert-manager 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2021-38561 https://nvd.nist.gov/vuln/detail/CVE-2021-38561 https://nvd.nist.gov/vuln/detail/CVE-2021-38561 https://nvd.nist.gov/vuln/detail/CVE-2021-38561 https://nvd.nist.gov/vuln/detail/CVE-2021-38561 https://nvd.nist.gov/vuln/detail/CVE-2021-38561 Mariner cve@mitre.org Yes CVE-2021-38561 12356 12357 12356 12357 12356 12357 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12356 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12357 cni 12356 cni-1.1.2-2.azl3.x86_64.rpm 0001-01-01T00:00:00 cni-debuginfo-1.1.2-2.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.1.2-2 https://nvd.nist.gov/vuln/detail/CVE-2021-38561 12356 cni keda 12356 keda-2.14.0-1.azl3.x86_64.rpm 0001-01-01T00:00:00 keda-debuginfo-2.14.0-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.14.0-1 https://nvd.nist.gov/vuln/detail/CVE-2021-38561 12356 keda multus 12356 multus-4.0.2-1.azl3.x86_64.rpm 0001-01-01T00:00:00 multus-k8s-yaml-4.0.2-1.azl3.x86_64.rpm 0001-01-01T00:00:00 multus-debuginfo-4.0.2-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 4.0.2-1 https://nvd.nist.gov/vuln/detail/CVE-2021-38561 12356 multus cni 12357 cni-1.1.2-2.azl3.aarch64.rpm 0001-01-01T00:00:00 cni-debuginfo-1.1.2-2.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.1.2-2 https://nvd.nist.gov/vuln/detail/CVE-2021-38561 12357 cni keda 12357 keda-2.14.0-1.azl3.aarch64.rpm 0001-01-01T00:00:00 keda-debuginfo-2.14.0-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.14.0-1 https://nvd.nist.gov/vuln/detail/CVE-2021-38561 12357 keda multus 12357 multus-4.0.2-1.azl3.aarch64.rpm 0001-01-01T00:00:00 multus-k8s-yaml-4.0.2-1.azl3.aarch64.rpm 0001-01-01T00:00:00 multus-debuginfo-4.0.2-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 4.0.2-1 https://nvd.nist.gov/vuln/detail/CVE-2021-38561 12357 multus 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2023-26253 https://nvd.nist.gov/vuln/detail/CVE-2023-26253 Mariner cve@mitre.org Yes CVE-2023-26253 12356 12357 12356 12357 12356 12357 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12356 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12357 glusterfs 12356 glusterfs-11.1-3.azl3.x86_64.rpm 0001-01-01T00:00:00 glusterfs-cli-11.1-3.azl3.x86_64.rpm 0001-01-01T00:00:00 glusterfs-cloudsync-plugins-11.1-3.azl3.x86_64.rpm 0001-01-01T00:00:00 glusterfs-extra-xlators-11.1-3.azl3.x86_64.rpm 0001-01-01T00:00:00 glusterfs-fuse-11.1-3.azl3.x86_64.rpm 0001-01-01T00:00:00 libglusterfs0-11.1-3.azl3.x86_64.rpm 0001-01-01T00:00:00 libglusterfs-devel-11.1-3.azl3.x86_64.rpm 0001-01-01T00:00:00 libgfapi0-11.1-3.azl3.x86_64.rpm 0001-01-01T00:00:00 libgfapi-devel-11.1-3.azl3.x86_64.rpm 0001-01-01T00:00:00 libgfchangelog0-11.1-3.azl3.x86_64.rpm 0001-01-01T00:00:00 libgfchangelog-devel-11.1-3.azl3.x86_64.rpm 0001-01-01T00:00:00 libgfrpc0-11.1-3.azl3.x86_64.rpm 0001-01-01T00:00:00 libgfrpc-devel-11.1-3.azl3.x86_64.rpm 0001-01-01T00:00:00 libgfxdr0-11.1-3.azl3.x86_64.rpm 0001-01-01T00:00:00 libgfxdr-devel-11.1-3.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-gluster-11.1-3.azl3.x86_64.rpm 0001-01-01T00:00:00 glusterfs-client-xlators-11.1-3.azl3.x86_64.rpm 0001-01-01T00:00:00 glusterfs-debuginfo-11.1-3.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 11.1-3 https://nvd.nist.gov/vuln/detail/CVE-2023-26253 12356 glusterfs glusterfs 12357 glusterfs-11.1-3.azl3.aarch64.rpm 0001-01-01T00:00:00 glusterfs-cli-11.1-3.azl3.aarch64.rpm 0001-01-01T00:00:00 glusterfs-cloudsync-plugins-11.1-3.azl3.aarch64.rpm 0001-01-01T00:00:00 glusterfs-extra-xlators-11.1-3.azl3.aarch64.rpm 0001-01-01T00:00:00 glusterfs-fuse-11.1-3.azl3.aarch64.rpm 0001-01-01T00:00:00 libglusterfs0-11.1-3.azl3.aarch64.rpm 0001-01-01T00:00:00 libglusterfs-devel-11.1-3.azl3.aarch64.rpm 0001-01-01T00:00:00 libgfapi0-11.1-3.azl3.aarch64.rpm 0001-01-01T00:00:00 libgfapi-devel-11.1-3.azl3.aarch64.rpm 0001-01-01T00:00:00 libgfchangelog0-11.1-3.azl3.aarch64.rpm 0001-01-01T00:00:00 libgfchangelog-devel-11.1-3.azl3.aarch64.rpm 0001-01-01T00:00:00 libgfrpc0-11.1-3.azl3.aarch64.rpm 0001-01-01T00:00:00 libgfrpc-devel-11.1-3.azl3.aarch64.rpm 0001-01-01T00:00:00 libgfxdr0-11.1-3.azl3.aarch64.rpm 0001-01-01T00:00:00 libgfxdr-devel-11.1-3.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-gluster-11.1-3.azl3.aarch64.rpm 0001-01-01T00:00:00 glusterfs-client-xlators-11.1-3.azl3.aarch64.rpm 0001-01-01T00:00:00 glusterfs-debuginfo-11.1-3.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 11.1-3 https://nvd.nist.gov/vuln/detail/CVE-2023-26253 12357 glusterfs 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2023-52652 https://nvd.nist.gov/vuln/detail/CVE-2023-52652 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2023-52652 12356 12357 12356 12357 12356 12357 hyperv-daemons 12356 hyperv-daemons-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2023-52652 12356 hyperv-daemons hyperv-daemons 12357 hyperv-daemons-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2023-52652 12357 hyperv-daemons 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2023-52654 https://nvd.nist.gov/vuln/detail/CVE-2023-52654 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2023-52654 12356 12357 12356 12357 12356 12357 hyperv-daemons 12356 hyperv-daemons-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2023-52654 12356 hyperv-daemons hyperv-daemons 12357 hyperv-daemons-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2023-52654 12357 hyperv-daemons 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-26939 https://nvd.nist.gov/vuln/detail/CVE-2024-26939 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-26939 12356 12357 12356 12357 12356 12357 hyperv-daemons 12356 hyperv-daemons-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-26939 12356 hyperv-daemons hyperv-daemons 12357 hyperv-daemons-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-26939 12357 hyperv-daemons 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-26935 https://nvd.nist.gov/vuln/detail/CVE-2024-26935 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-26935 12356 12357 12356 12357 12356 12357 hyperv-daemons 12356 hyperv-daemons-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-26935 12356 hyperv-daemons hyperv-daemons 12357 hyperv-daemons-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-26935 12357 hyperv-daemons 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-27001 https://nvd.nist.gov/vuln/detail/CVE-2024-27001 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-27001 12356 12357 12356 12357 12356 12357 hyperv-daemons 12356 hyperv-daemons-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-27001 12356 hyperv-daemons hyperv-daemons 12357 hyperv-daemons-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-27001 12357 hyperv-daemons 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-27004 https://nvd.nist.gov/vuln/detail/CVE-2024-27004 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-27004 12356 12357 12356 12357 12356 12357 hyperv-daemons 12356 hyperv-daemons-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-27004 12356 hyperv-daemons hyperv-daemons 12357 hyperv-daemons-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-27004 12357 hyperv-daemons 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-27066 https://nvd.nist.gov/vuln/detail/CVE-2024-27066 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-27066 12356 12357 12356 12357 12356 12357 hyperv-daemons 12356 hyperv-daemons-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-27066 12356 hyperv-daemons hyperv-daemons 12357 hyperv-daemons-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-27066 12357 hyperv-daemons 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-27067 https://nvd.nist.gov/vuln/detail/CVE-2024-27067 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-27067 12356 12357 12356 12357 12356 12357 hyperv-daemons 12356 hyperv-daemons-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-27067 12356 hyperv-daemons hyperv-daemons 12357 hyperv-daemons-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-27067 12357 hyperv-daemons 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-27388 https://nvd.nist.gov/vuln/detail/CVE-2024-27388 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-27388 12356 12357 12356 12357 12356 12357 hyperv-daemons 12356 hyperv-daemons-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-27388 12356 hyperv-daemons hyperv-daemons 12357 hyperv-daemons-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-27388 12357 hyperv-daemons 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-35786 https://nvd.nist.gov/vuln/detail/CVE-2024-35786 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-35786 12356 12357 12356 12357 12356 12357 hyperv-daemons 12356 hyperv-daemons-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-35786 12356 hyperv-daemons hyperv-daemons 12357 hyperv-daemons-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-35786 12357 hyperv-daemons 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-35787 https://nvd.nist.gov/vuln/detail/CVE-2024-35787 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-35787 12356 12357 12356 12357 12356 12357 hyperv-daemons 12356 hyperv-daemons-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-35787 12356 hyperv-daemons hyperv-daemons 12357 hyperv-daemons-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-35787 12357 hyperv-daemons 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-35808 https://nvd.nist.gov/vuln/detail/CVE-2024-35808 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-35808 12356 12357 12356 12357 12356 12357 hyperv-daemons 12356 hyperv-daemons-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-35808 12356 hyperv-daemons hyperv-daemons 12357 hyperv-daemons-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-35808 12357 hyperv-daemons 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-35810 https://nvd.nist.gov/vuln/detail/CVE-2024-35810 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-35810 12356 12357 12356 12357 12356 12357 hyperv-daemons 12356 hyperv-daemons-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-35810 12356 hyperv-daemons hyperv-daemons 12357 hyperv-daemons-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-35810 12357 hyperv-daemons 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-35917 https://nvd.nist.gov/vuln/detail/CVE-2024-35917 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-35917 12356 12357 12356 12357 12356 12357 hyperv-daemons 12356 hyperv-daemons-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-35917 12356 hyperv-daemons hyperv-daemons 12357 hyperv-daemons-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervkvpd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervvssd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hypervfcopyd-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 hyperv-daemons-license-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-tools-6.6.35.1-1.azl3.noarch.rpm 0001-01-01T00:00:00 hyperv-daemons-debuginfo-6.6.35.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-35917 12357 hyperv-daemons 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2020-25576 https://nvd.nist.gov/vuln/detail/CVE-2020-25576 Mariner cve@mitre.org Yes CVE-2020-25576 12356 12357 12356 12357 12356 12357 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 12356 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 12357 kata-containers 12356 kata-containers-3.2.0.azl2-3.azl3.x86_64.rpm 0001-01-01T00:00:00 kata-containers-tools-3.2.0.azl2-3.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.2.0.azl2-3 https://nvd.nist.gov/vuln/detail/CVE-2020-25576 12356 kata-containers kata-containers 12357 kata-containers-3.2.0.azl2-3.azl3.aarch64.rpm 0001-01-01T00:00:00 kata-containers-tools-3.2.0.azl2-3.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.2.0.azl2-3 https://nvd.nist.gov/vuln/detail/CVE-2020-25576 12357 kata-containers 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-26930 https://nvd.nist.gov/vuln/detail/CVE-2024-26930 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-26930 12356 12357 12356 12357 12356 12357 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12356 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12357 kernel 12356 kernel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-26930 12356 kernel kernel 12357 kernel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-26930 12357 kernel 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-38581 https://nvd.nist.gov/vuln/detail/CVE-2024-38581 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-38581 12356 12357 12356 12357 12356 12357 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12356 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12357 kernel 12356 kernel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-38581 12356 kernel kernel 12357 kernel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-38581 12357 kernel 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-38603 https://nvd.nist.gov/vuln/detail/CVE-2024-38603 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-38603 12356 12357 12356 12357 12356 12357 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12356 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12357 kernel 12356 kernel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-38603 12356 kernel kernel 12357 kernel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-38603 12357 kernel 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-39496 https://nvd.nist.gov/vuln/detail/CVE-2024-39496 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-39496 12356 12357 12356 12357 12356 12357 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12356 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12357 kernel 12356 kernel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-39496 12356 kernel kernel 12357 kernel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.35.1-5.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.35.1-5 https://nvd.nist.gov/vuln/detail/CVE-2024-39496 12357 kernel 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-40952 https://nvd.nist.gov/vuln/detail/CVE-2024-40952 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-40952 12356 12357 12356 12357 12356 12357 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12356 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12357 kernel 12356 kernel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-40952 12356 kernel kernel 12357 kernel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-40952 12357 kernel 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-40995 https://nvd.nist.gov/vuln/detail/CVE-2024-40995 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-40995 12356 12357 12356 12357 12356 12357 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12356 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12357 kernel 12356 kernel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-40995 12356 kernel kernel 12357 kernel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-40995 12357 kernel 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-40996 https://nvd.nist.gov/vuln/detail/CVE-2024-40996 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-40996 12356 12357 12356 12357 12356 12357 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12356 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12357 kernel 12356 kernel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-40996 12356 kernel kernel 12357 kernel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-40996 12357 kernel 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-40997 https://nvd.nist.gov/vuln/detail/CVE-2024-40997 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-40997 12356 12357 12356 12357 12356 12357 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12356 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12357 kernel 12356 kernel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-40997 12356 kernel kernel 12357 kernel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-40997 12357 kernel 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-41046 https://nvd.nist.gov/vuln/detail/CVE-2024-41046 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-41046 12356 12357 12356 12357 12356 12357 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12356 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12357 kernel 12356 kernel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-41046 12356 kernel kernel 12357 kernel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-41046 12357 kernel 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-41049 https://nvd.nist.gov/vuln/detail/CVE-2024-41049 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-41049 12356 12357 12356 12357 12356 12357 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12356 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12357 kernel 12356 kernel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-41049 12356 kernel kernel 12357 kernel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-41049 12357 kernel 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-41084 https://nvd.nist.gov/vuln/detail/CVE-2024-41084 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-41084 12356 12357 12356 12357 12356 12357 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12356 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12357 kernel 12356 kernel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-41084 12356 kernel kernel 12357 kernel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-41084 12357 kernel 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-41076 https://nvd.nist.gov/vuln/detail/CVE-2024-41076 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-41076 12356 12357 12356 12357 12356 12357 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12356 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12357 kernel 12356 kernel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-41076 12356 kernel kernel 12357 kernel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-41076 12357 kernel 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-41088 https://nvd.nist.gov/vuln/detail/CVE-2024-41088 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-41088 12356 12357 12356 12357 12356 12357 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12356 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12357 kernel 12356 kernel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-41088 12356 kernel kernel 12357 kernel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-41088 12357 kernel 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-42093 https://nvd.nist.gov/vuln/detail/CVE-2024-42093 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-42093 12356 12357 12356 12357 12356 12357 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12356 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12357 kernel 12356 kernel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-42093 12356 kernel kernel 12357 kernel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-42093 12357 kernel 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-42140 https://nvd.nist.gov/vuln/detail/CVE-2024-42140 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-42140 12356 12357 12356 12357 12356 12357 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12356 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12357 kernel 12356 kernel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-42140 12356 kernel kernel 12357 kernel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-42140 12357 kernel 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-42294 https://nvd.nist.gov/vuln/detail/CVE-2024-42294 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-42294 12356 12357 12356 12357 12356 12357 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12356 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12357 kernel 12356 kernel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-42294 12356 kernel kernel 12357 kernel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-42294 12357 kernel 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-42314 https://nvd.nist.gov/vuln/detail/CVE-2024-42314 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-42314 12356 12357 12356 12357 12356 12357 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12356 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12357 kernel 12356 kernel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-42314 12356 kernel kernel 12357 kernel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-42314 12357 kernel 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-42315 https://nvd.nist.gov/vuln/detail/CVE-2024-42315 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-42315 12356 12357 12356 12357 12356 12357 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12356 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12357 kernel 12356 kernel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-42315 12356 kernel kernel 12357 kernel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.47.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-42315 12357 kernel 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-37407 https://nvd.nist.gov/vuln/detail/CVE-2024-37407 Mariner cve@mitre.org Yes CVE-2024-37407 12356 12357 12356 12357 12356 12357 9.1 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H 12356 9.1 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H 12357 libarchive 12356 libarchive-3.7.1-2.azl3.x86_64.rpm 0001-01-01T00:00:00 libarchive-devel-3.7.1-2.azl3.x86_64.rpm 0001-01-01T00:00:00 libarchive-debuginfo-3.7.1-2.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.7.1-2 https://nvd.nist.gov/vuln/detail/CVE-2024-37407 12356 libarchive libarchive 12357 libarchive-3.7.1-2.azl3.aarch64.rpm 0001-01-01T00:00:00 libarchive-devel-3.7.1-2.azl3.aarch64.rpm 0001-01-01T00:00:00 libarchive-debuginfo-3.7.1-2.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.7.1-2 https://nvd.nist.gov/vuln/detail/CVE-2024-37407 12357 libarchive 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-1753 Mariner secalert@redhat.com Yes CVE-2024-1753 12356 12357 12356 12357 12356 12357 8.6 8.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H 12356 8.6 8.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H 12357 libcontainers-common 12356 12357 libcontainers-common-20240213-2.azl3.noarch.rpm 0001-01-01T00:00:00 CBL-Mariner 20240213-2 https://nvd.nist.gov/vuln/detail/CVE-2024-1753 12356 12357 libcontainers-common 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2023-5752 https://nvd.nist.gov/vuln/detail/CVE-2023-5752 Mariner cna@python.org Yes CVE-2023-5752 12356 12357 12356 12357 12356 12357 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N 12356 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N 12357 python3 12356 python3-3.12.3-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-libs-3.12.3-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-curses-3.12.3-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-devel-3.12.3-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-tools-3.12.3-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-test-3.12.3-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-debuginfo-3.12.3-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.12.3-1 https://nvd.nist.gov/vuln/detail/CVE-2023-5752 12356 python3 python3 12357 python3-3.12.3-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-libs-3.12.3-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-curses-3.12.3-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-devel-3.12.3-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-tools-3.12.3-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-test-3.12.3-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-debuginfo-3.12.3-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.12.3-1 https://nvd.nist.gov/vuln/detail/CVE-2023-5752 12357 python3 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2023-6507 https://nvd.nist.gov/vuln/detail/CVE-2023-6507 Mariner cna@python.org Yes CVE-2023-6507 12356 12357 12356 12357 12356 12357 4.9 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N 12356 4.9 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N 12357 python3 12356 python3-3.12.3-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-libs-3.12.3-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-curses-3.12.3-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-devel-3.12.3-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-tools-3.12.3-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-test-3.12.3-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-debuginfo-3.12.3-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.12.3-1 https://nvd.nist.gov/vuln/detail/CVE-2023-6507 12356 python3 python3 12357 python3-3.12.3-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-libs-3.12.3-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-curses-3.12.3-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-devel-3.12.3-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-tools-3.12.3-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-test-3.12.3-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-debuginfo-3.12.3-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.12.3-1 https://nvd.nist.gov/vuln/detail/CVE-2023-6507 12357 python3 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2021-33196 https://nvd.nist.gov/vuln/detail/CVE-2021-33196 Mariner cve@mitre.org Yes CVE-2021-33196 12356 12357 12356 12357 12356 12357 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12356 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12357 python-tensorboard 12356 python3-tensorboard-2.16.2-2.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-tensorboard-data-server-2.16.2-2.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.16.2-2 https://nvd.nist.gov/vuln/detail/CVE-2021-33196 12356 python-tensorboard python-tensorboard 12357 CBL-Mariner 2.16.2-2 https://nvd.nist.gov/vuln/detail/CVE-2021-33196 12357 python-tensorboard 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2021-33197 https://nvd.nist.gov/vuln/detail/CVE-2021-33197 Mariner cve@mitre.org Yes CVE-2021-33197 12356 12357 12356 12357 12356 12357 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N 12356 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N 12357 python-tensorboard 12356 python3-tensorboard-2.16.2-2.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-tensorboard-data-server-2.16.2-2.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.16.2-2 https://nvd.nist.gov/vuln/detail/CVE-2021-33197 12356 python-tensorboard python-tensorboard 12357 CBL-Mariner 2.16.2-2 https://nvd.nist.gov/vuln/detail/CVE-2021-33197 12357 python-tensorboard 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2023-3301 https://nvd.nist.gov/vuln/detail/CVE-2023-3301 Mariner secalert@redhat.com Yes CVE-2023-3301 12356 12357 12356 12357 12356 12357 5.6 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H 12356 5.6 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H 12357 qemu 12356 qemu-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-common-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-docs-8.2.0-9.azl3.noarch.rpm 0001-01-01T00:00:00 qemu-img-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-guest-agent-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-tools-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-pr-helper-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-tests-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-curl-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-dmg-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-block-nfs-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-audio-oss-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-ui-curses-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-kvm-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-user-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-ipxe-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-cris-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-cris-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-hppa-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-hppa-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-m68k-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-m68k-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-core-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 qemu-system-mips-8.2.0-9.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 8.2.0-1 https://nvd.nist.gov/vuln/detail/CVE-2023-3301 12356 qemu qemu 12357 qemu-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-common-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-docs-8.2.0-9.azl3.noarch.rpm 0001-01-01T00:00:00 qemu-img-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-guest-agent-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-tools-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-pr-helper-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-tests-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-curl-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-iscsi-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-dmg-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-block-nfs-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-alsa-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-audio-oss-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-ui-curses-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-pci-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-gpu-ccw-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-display-virtio-vga-gl-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-host-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-device-usb-redirect-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-kvm-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-user-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-user-binfmt-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-ipxe-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-aarch64-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-alpha-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-arm-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-avr-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-cris-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-hppa-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-hppa-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-loongarch64-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-m68k-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-m68k-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 qemu-system-microblaze-core-8.2.0-9.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 8.2.0-1 https://nvd.nist.gov/vuln/detail/CVE-2023-3301 12357 qemu 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2021-45707 https://nvd.nist.gov/vuln/detail/CVE-2021-45707 Mariner cve@mitre.org Yes CVE-2021-45707 12356 12357 12356 12357 12356 12357 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 12356 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 12357 rpm-ostree 12356 rpm-ostree-2024.4-1.azl3.x86_64.rpm 0001-01-01T00:00:00 rpm-ostree-devel-2024.4-1.azl3.x86_64.rpm 0001-01-01T00:00:00 rpm-ostree-debuginfo-2024.4-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 2024.4-1 https://nvd.nist.gov/vuln/detail/CVE-2021-45707 12356 rpm-ostree rpm-ostree 12357 CBL-Mariner 2024.4-1 https://nvd.nist.gov/vuln/detail/CVE-2021-45707 12357 rpm-ostree 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2012-6708 Mariner cve@mitre.org Yes CVE-2012-6708 12356 12357 12356 12357 12356 12357 6.1 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N 12356 6.1 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N 12357 slf4j 12356 12357 slf4j-2.0.7-1.azl3.noarch.rpm 0001-01-01T00:00:00 slf4j-javadoc-2.0.7-1.azl3.noarch.rpm 0001-01-01T00:00:00 slf4j-manual-2.0.7-1.azl3.noarch.rpm 0001-01-01T00:00:00 slf4j-jdk14-2.0.7-1.azl3.noarch.rpm 0001-01-01T00:00:00 jcl-over-slf4j-2.0.7-1.azl3.noarch.rpm 0001-01-01T00:00:00 log4j-over-slf4j-2.0.7-1.azl3.noarch.rpm 0001-01-01T00:00:00 slf4j-migrator-2.0.7-1.azl3.noarch.rpm 0001-01-01T00:00:00 slf4j-jdk-platform-logging-2.0.7-1.azl3.noarch.rpm 0001-01-01T00:00:00 slf4j-sources-2.0.7-1.azl3.noarch.rpm 0001-01-01T00:00:00 CBL-Mariner 2.0.7-1 https://nvd.nist.gov/vuln/detail/CVE-2012-6708 12356 12357 slf4j 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2017-14623 https://nvd.nist.gov/vuln/detail/CVE-2017-14623 Mariner cve@mitre.org Yes CVE-2017-14623 12356 12357 12356 12357 12356 12357 8.1 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H 12356 8.1 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H 12357 vitess 12356 vitess-19.0.4-2.azl3.x86_64.rpm 0001-01-01T00:00:00 vitess-debuginfo-19.0.4-2.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 19.0.4-2 https://nvd.nist.gov/vuln/detail/CVE-2017-14623 12356 vitess vitess 12357 vitess-19.0.4-2.azl3.aarch64.rpm 0001-01-01T00:00:00 vitess-debuginfo-19.0.4-2.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 19.0.4-2 https://nvd.nist.gov/vuln/detail/CVE-2017-14623 12357 vitess 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2019-20149 https://nvd.nist.gov/vuln/detail/CVE-2019-20149 Mariner cve@mitre.org Yes CVE-2019-20149 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 12356 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 12357 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 12139 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 12140 js-jquery 12356 12357 js-jquery-3.5.0-4.azl3.noarch.rpm 0001-01-01T00:00:00 CBL-Mariner 3.5.0-4 https://nvd.nist.gov/vuln/detail/CVE-2019-20149 12356 12357 js-jquery js-jquery 12139 12140 js-jquery-3.5.0-4.cm2.noarch.rpm 0001-01-01T00:00:00 CBL-Mariner 3.5.0-4 https://nvd.nist.gov/vuln/detail/CVE-2019-20149 12139 12140 js-jquery 1.0 2024-09-10T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-0409 https://nvd.nist.gov/vuln/detail/CVE-2024-0409 Mariner secalert@redhat.com Yes CVE-2024-0409 12139 12140 12139 12140 12139 12140 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12139 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12140 xorg-x11-server 12139 xorg-x11-server-common-1.20.10-12.cm2.x86_64.rpm 0001-01-01T00:00:00 xorg-x11-server-Xorg-1.20.10-12.cm2.x86_64.rpm 0001-01-01T00:00:00 xorg-x11-server-Xnest-1.20.10-12.cm2.x86_64.rpm 0001-01-01T00:00:00 xorg-x11-server-Xvfb-1.20.10-12.cm2.x86_64.rpm 0001-01-01T00:00:00 xorg-x11-server-Xwayland-1.20.10-12.cm2.x86_64.rpm 0001-01-01T00:00:00 xorg-x11-server-devel-1.20.10-12.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.20.10-12 https://nvd.nist.gov/vuln/detail/CVE-2024-0409 12139 xorg-x11-server xorg-x11-server 12140 xorg-x11-server-common-1.20.10-12.cm2.aarch64.rpm 0001-01-01T00:00:00 xorg-x11-server-Xorg-1.20.10-12.cm2.aarch64.rpm 0001-01-01T00:00:00 xorg-x11-server-Xnest-1.20.10-12.cm2.aarch64.rpm 0001-01-01T00:00:00 xorg-x11-server-Xvfb-1.20.10-12.cm2.aarch64.rpm 0001-01-01T00:00:00 xorg-x11-server-Xwayland-1.20.10-12.cm2.aarch64.rpm 0001-01-01T00:00:00 xorg-x11-server-devel-1.20.10-12.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.20.10-12 https://nvd.nist.gov/vuln/detail/CVE-2024-0409 12140 xorg-x11-server 1.0 2024-09-19T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-0229 https://nvd.nist.gov/vuln/detail/CVE-2024-0229 Mariner secalert@redhat.com Yes CVE-2024-0229 12139 12140 12139 12140 12139 12140 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12139 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12140 xorg-x11-server 12139 xorg-x11-server-common-1.20.10-12.cm2.x86_64.rpm 0001-01-01T00:00:00 xorg-x11-server-Xorg-1.20.10-12.cm2.x86_64.rpm 0001-01-01T00:00:00 xorg-x11-server-Xnest-1.20.10-12.cm2.x86_64.rpm 0001-01-01T00:00:00 xorg-x11-server-Xvfb-1.20.10-12.cm2.x86_64.rpm 0001-01-01T00:00:00 xorg-x11-server-Xwayland-1.20.10-12.cm2.x86_64.rpm 0001-01-01T00:00:00 xorg-x11-server-devel-1.20.10-12.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.20.10-12 https://nvd.nist.gov/vuln/detail/CVE-2024-0229 12139 xorg-x11-server xorg-x11-server 12140 xorg-x11-server-common-1.20.10-12.cm2.aarch64.rpm 0001-01-01T00:00:00 xorg-x11-server-Xorg-1.20.10-12.cm2.aarch64.rpm 0001-01-01T00:00:00 xorg-x11-server-Xnest-1.20.10-12.cm2.aarch64.rpm 0001-01-01T00:00:00 xorg-x11-server-Xvfb-1.20.10-12.cm2.aarch64.rpm 0001-01-01T00:00:00 xorg-x11-server-Xwayland-1.20.10-12.cm2.aarch64.rpm 0001-01-01T00:00:00 xorg-x11-server-devel-1.20.10-12.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.20.10-12 https://nvd.nist.gov/vuln/detail/CVE-2024-0229 12140 xorg-x11-server 1.0 2024-09-19T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-26147 https://nvd.nist.gov/vuln/detail/CVE-2024-26147 https://nvd.nist.gov/vuln/detail/CVE-2024-26147 https://nvd.nist.gov/vuln/detail/CVE-2024-26147 https://nvd.nist.gov/vuln/detail/CVE-2024-26147 https://nvd.nist.gov/vuln/detail/CVE-2024-26147 Mariner security-advisories@github.com Yes CVE-2024-26147 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12139 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12140 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12356 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12357 cert-manager 12139 cert-manager-1.11.2-10.cm2.x86_64.rpm 0001-01-01T00:00:00 cert-manager-acmesolver-1.11.2-10.cm2.x86_64.rpm 0001-01-01T00:00:00 cert-manager-cainjector-1.11.2-10.cm2.x86_64.rpm 0001-01-01T00:00:00 cert-manager-controller-1.11.2-10.cm2.x86_64.rpm 0001-01-01T00:00:00 cert-manager-cmctl-1.11.2-10.cm2.x86_64.rpm 0001-01-01T00:00:00 cert-manager-webhook-1.11.2-10.cm2.x86_64.rpm 0001-01-01T00:00:00 cert-manager-debuginfo-1.11.2-10.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.11.2-10 https://nvd.nist.gov/vuln/detail/CVE-2024-26147 12139 cert-manager cert-manager 12140 cert-manager-1.11.2-10.cm2.aarch64.rpm 0001-01-01T00:00:00 cert-manager-acmesolver-1.11.2-10.cm2.aarch64.rpm 0001-01-01T00:00:00 cert-manager-cainjector-1.11.2-10.cm2.aarch64.rpm 0001-01-01T00:00:00 cert-manager-controller-1.11.2-10.cm2.aarch64.rpm 0001-01-01T00:00:00 cert-manager-cmctl-1.11.2-10.cm2.aarch64.rpm 0001-01-01T00:00:00 cert-manager-webhook-1.11.2-10.cm2.aarch64.rpm 0001-01-01T00:00:00 cert-manager-debuginfo-1.11.2-10.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.11.2-10 https://nvd.nist.gov/vuln/detail/CVE-2024-26147 12140 cert-manager cert-manager 12356 cert-manager-1.12.13-1.azl3.x86_64.rpm 0001-01-01T00:00:00 cert-manager-acmesolver-1.12.13-1.azl3.x86_64.rpm 0001-01-01T00:00:00 cert-manager-cainjector-1.12.13-1.azl3.x86_64.rpm 0001-01-01T00:00:00 cert-manager-controller-1.12.13-1.azl3.x86_64.rpm 0001-01-01T00:00:00 cert-manager-cmctl-1.12.13-1.azl3.x86_64.rpm 0001-01-01T00:00:00 cert-manager-webhook-1.12.13-1.azl3.x86_64.rpm 0001-01-01T00:00:00 cert-manager-debuginfo-1.12.13-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.12.13-1 https://nvd.nist.gov/vuln/detail/CVE-2024-26147 12356 cert-manager helm 12356 helm-3.13.2-3.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.13.2-3 https://nvd.nist.gov/vuln/detail/CVE-2024-26147 12356 helm cert-manager 12357 cert-manager-1.12.13-1.azl3.aarch64.rpm 0001-01-01T00:00:00 cert-manager-acmesolver-1.12.13-1.azl3.aarch64.rpm 0001-01-01T00:00:00 cert-manager-cainjector-1.12.13-1.azl3.aarch64.rpm 0001-01-01T00:00:00 cert-manager-controller-1.12.13-1.azl3.aarch64.rpm 0001-01-01T00:00:00 cert-manager-cmctl-1.12.13-1.azl3.aarch64.rpm 0001-01-01T00:00:00 cert-manager-webhook-1.12.13-1.azl3.aarch64.rpm 0001-01-01T00:00:00 cert-manager-debuginfo-1.12.13-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.12.13-1 https://nvd.nist.gov/vuln/detail/CVE-2024-26147 12357 cert-manager helm 12357 helm-3.13.2-3.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.13.2-3 https://nvd.nist.gov/vuln/detail/CVE-2024-26147 12357 helm 1.0 2024-02-25T16:00:00 <p>Information published.</p> 1.1 2024-06-30T00:00:00 <p>Information published.</p> 1.2 2024-09-19T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-21886 https://nvd.nist.gov/vuln/detail/CVE-2024-21886 Mariner secalert@redhat.com Yes CVE-2024-21886 12139 12140 12139 12140 12139 12140 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12139 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12140 xorg-x11-server 12139 xorg-x11-server-common-1.20.10-12.cm2.x86_64.rpm 0001-01-01T00:00:00 xorg-x11-server-Xorg-1.20.10-12.cm2.x86_64.rpm 0001-01-01T00:00:00 xorg-x11-server-Xnest-1.20.10-12.cm2.x86_64.rpm 0001-01-01T00:00:00 xorg-x11-server-Xvfb-1.20.10-12.cm2.x86_64.rpm 0001-01-01T00:00:00 xorg-x11-server-Xwayland-1.20.10-12.cm2.x86_64.rpm 0001-01-01T00:00:00 xorg-x11-server-devel-1.20.10-12.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.20.10-12 https://nvd.nist.gov/vuln/detail/CVE-2024-21886 12139 xorg-x11-server xorg-x11-server 12140 xorg-x11-server-common-1.20.10-12.cm2.aarch64.rpm 0001-01-01T00:00:00 xorg-x11-server-Xorg-1.20.10-12.cm2.aarch64.rpm 0001-01-01T00:00:00 xorg-x11-server-Xnest-1.20.10-12.cm2.aarch64.rpm 0001-01-01T00:00:00 xorg-x11-server-Xvfb-1.20.10-12.cm2.aarch64.rpm 0001-01-01T00:00:00 xorg-x11-server-Xwayland-1.20.10-12.cm2.aarch64.rpm 0001-01-01T00:00:00 xorg-x11-server-devel-1.20.10-12.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.20.10-12 https://nvd.nist.gov/vuln/detail/CVE-2024-21886 12140 xorg-x11-server 1.0 2024-09-19T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-25062 https://nvd.nist.gov/vuln/detail/CVE-2024-25062 Mariner cve@mitre.org Yes CVE-2024-25062 12139 12140 12139 12140 12139 12140 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12139 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12140 libxml2 12139 libxml2-2.10.4-4.cm2.x86_64.rpm 0001-01-01T00:00:00 python3-libxml2-2.10.4-4.cm2.x86_64.rpm 0001-01-01T00:00:00 libxml2-devel-2.10.4-4.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.10.4-4 https://nvd.nist.gov/vuln/detail/CVE-2024-25062 12139 libxml2 libxml2 12140 libxml2-2.10.4-4.cm2.aarch64.rpm 0001-01-01T00:00:00 python3-libxml2-2.10.4-4.cm2.aarch64.rpm 0001-01-01T00:00:00 libxml2-devel-2.10.4-4.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.10.4-4 https://nvd.nist.gov/vuln/detail/CVE-2024-25062 12140 libxml2 1.0 2024-09-19T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-27318 https://nvd.nist.gov/vuln/detail/CVE-2024-27318 https://nvd.nist.gov/vuln/detail/CVE-2024-27318 https://nvd.nist.gov/vuln/detail/CVE-2024-27318 Mariner disclosure@hiddenlayer.com Yes CVE-2024-27318 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 12139 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 12140 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 12356 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 12357 pytorch 12139 python3-pytorch-2.0.0-6.cm2.x86_64.rpm 0001-01-01T00:00:00 python3-pytorch-doc-2.0.0-6.cm2.x86_64.rpm 0001-01-01T00:00:00 pytorch-debuginfo-2.0.0-6.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.0.0-6 https://nvd.nist.gov/vuln/detail/CVE-2024-27318 12139 pytorch pytorch 12140 python3-pytorch-2.0.0-6.cm2.aarch64.rpm 0001-01-01T00:00:00 python3-pytorch-doc-2.0.0-6.cm2.aarch64.rpm 0001-01-01T00:00:00 pytorch-debuginfo-2.0.0-6.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.0.0-6 https://nvd.nist.gov/vuln/detail/CVE-2024-27318 12140 pytorch pytorch 12356 python3-pytorch-2.2.2-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-pytorch-doc-2.2.2-1.azl3.x86_64.rpm 0001-01-01T00:00:00 pytorch-debuginfo-2.2.2-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.2.2-1 https://nvd.nist.gov/vuln/detail/CVE-2024-27318 12356 pytorch pytorch 12357 python3-pytorch-2.2.2-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-pytorch-doc-2.2.2-1.azl3.aarch64.rpm 0001-01-01T00:00:00 pytorch-debuginfo-2.2.2-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.2.2-1 https://nvd.nist.gov/vuln/detail/CVE-2024-27318 12357 pytorch 1.0 2024-02-25T16:00:00 <p>Information published.</p> 1.1 2024-06-30T00:00:00 <p>Information published.</p> 1.2 2024-09-20T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2019-10906 https://nvd.nist.gov/vuln/detail/CVE-2019-10906 Mariner cve@mitre.org Yes CVE-2019-10906 12356 12357 12356 12357 12356 12357 8.6 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N 12356 8.6 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N 12357 nodejs 12356 nodejs-20.14.0-1.azl3.x86_64.rpm 0001-01-01T00:00:00 nodejs-devel-20.14.0-1.azl3.x86_64.rpm 0001-01-01T00:00:00 nodejs-npm-20.14.0-1.azl3.x86_64.rpm 0001-01-01T00:00:00 nodejs-debuginfo-20.14.0-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 20.14.0-1 https://nvd.nist.gov/vuln/detail/CVE-2019-10906 12356 nodejs nodejs 12357 nodejs-20.14.0-1.azl3.aarch64.rpm 0001-01-01T00:00:00 nodejs-devel-20.14.0-1.azl3.aarch64.rpm 0001-01-01T00:00:00 nodejs-npm-20.14.0-1.azl3.aarch64.rpm 0001-01-01T00:00:00 nodejs-debuginfo-20.14.0-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 20.14.0-1 https://nvd.nist.gov/vuln/detail/CVE-2019-10906 12357 nodejs 1.0 2024-09-22T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2023-27534 https://nvd.nist.gov/vuln/detail/CVE-2023-27534 https://nvd.nist.gov/vuln/detail/CVE-2023-27534 https://nvd.nist.gov/vuln/detail/CVE-2023-27534 https://nvd.nist.gov/vuln/detail/CVE-2023-27534 https://nvd.nist.gov/vuln/detail/CVE-2023-27534 https://nvd.nist.gov/vuln/detail/CVE-2023-27534 https://nvd.nist.gov/vuln/detail/CVE-2023-27534 https://nvd.nist.gov/vuln/detail/CVE-2023-27534 https://nvd.nist.gov/vuln/detail/CVE-2023-27534 https://nvd.nist.gov/vuln/detail/CVE-2023-27534 https://nvd.nist.gov/vuln/detail/CVE-2023-27534 Mariner support@hackerone.com Yes CVE-2023-27534 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12139 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12140 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12356 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12357 cmake 12139 cmake-3.21.4-12.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.21.4-12 https://nvd.nist.gov/vuln/detail/CVE-2023-27534 12139 cmake curl 12139 curl-8.0.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 curl-devel-8.0.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 curl-libs-8.0.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 curl-debuginfo-8.0.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 8.0.1-1 https://nvd.nist.gov/vuln/detail/CVE-2023-27534 12139 curl mysql 12139 mysql-8.0.34-1.cm2.x86_64.rpm 0001-01-01T00:00:00 mysql-devel-8.0.34-1.cm2.x86_64.rpm 0001-01-01T00:00:00 mysql-debuginfo-8.0.34-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 8.0.34-1 https://nvd.nist.gov/vuln/detail/CVE-2023-27534 12139 mysql rust 12139 rust-1.72.0-2.cm2.x86_64.rpm 0001-01-01T00:00:00 rust-doc-1.72.0-2.cm2.noarch.rpm 0001-01-01T00:00:00 rust-debuginfo-1.72.0-2.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.72.0-2 https://nvd.nist.gov/vuln/detail/CVE-2023-27534 12139 rust cmake 12140 cmake-3.21.4-12.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.21.4-12 https://nvd.nist.gov/vuln/detail/CVE-2023-27534 12140 cmake curl 12140 curl-8.0.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 curl-devel-8.0.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 curl-libs-8.0.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 curl-debuginfo-8.0.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 8.0.1-1 https://nvd.nist.gov/vuln/detail/CVE-2023-27534 12140 curl mysql 12140 mysql-8.0.34-1.cm2.aarch64.rpm 0001-01-01T00:00:00 mysql-devel-8.0.34-1.cm2.aarch64.rpm 0001-01-01T00:00:00 mysql-debuginfo-8.0.34-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 8.0.34-1 https://nvd.nist.gov/vuln/detail/CVE-2023-27534 12140 mysql rust 12140 rust-1.72.0-2.cm2.aarch64.rpm 0001-01-01T00:00:00 rust-doc-1.72.0-2.cm2.noarch.rpm 0001-01-01T00:00:00 rust-debuginfo-1.72.0-2.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.72.0-2 https://nvd.nist.gov/vuln/detail/CVE-2023-27534 12140 rust cmake 12356 cmake-3.28.2-6.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.28.2-1 https://nvd.nist.gov/vuln/detail/CVE-2023-27534 12356 cmake tensorflow 12356 python3-tensorflow-2.16.1-5.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 2.16.1-1 https://nvd.nist.gov/vuln/detail/CVE-2023-27534 12356 tensorflow cmake 12357 cmake-3.28.2-6.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.28.2-1 https://nvd.nist.gov/vuln/detail/CVE-2023-27534 12357 cmake tensorflow 12357 CBL-Mariner 2.16.1-1 https://nvd.nist.gov/vuln/detail/CVE-2023-27534 12357 tensorflow 1.0 2023-04-02T17:00:00 <p>Information published.</p> 1.1 2023-03-31T17:00:00 <p>Information published.</p> 1.2 2024-06-30T00:00:00 <p>Information published.</p> 1.3 2024-09-23T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2022-36765 https://nvd.nist.gov/vuln/detail/CVE-2022-36765 https://nvd.nist.gov/vuln/detail/CVE-2022-36765 https://nvd.nist.gov/vuln/detail/CVE-2022-36765 https://nvd.nist.gov/vuln/detail/CVE-2022-36765 https://nvd.nist.gov/vuln/detail/CVE-2022-36765 Mariner infosec@edk2.groups.io Yes CVE-2022-36765 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12139 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12140 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12356 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12357 edk2 12139 edk2-ovmf-20230301gitf80f052277c8-40.cm2.noarch.rpm 0001-01-01T00:00:00 edk2-tools-20230301gitf80f052277c8-40.cm2.x86_64.rpm 0001-01-01T00:00:00 edk2-tools-doc-20230301gitf80f052277c8-40.cm2.noarch.rpm 0001-01-01T00:00:00 edk2-ovmf-ia32-20230301gitf80f052277c8-40.cm2.noarch.rpm 0001-01-01T00:00:00 edk2-ovmf-xen-20230301gitf80f052277c8-40.cm2.noarch.rpm 0001-01-01T00:00:00 edk2-ext4-20230301gitf80f052277c8-40.cm2.noarch.rpm 0001-01-01T00:00:00 edk2-tools-python-20230301gitf80f052277c8-40.cm2.noarch.rpm 0001-01-01T00:00:00 CBL-Mariner 20230301gitf80f052277c8-40 https://nvd.nist.gov/vuln/detail/CVE-2022-36765 12139 edk2 hvloader 12139 hvloader-1.0.1-3.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.0.1-3 https://nvd.nist.gov/vuln/detail/CVE-2022-36765 12139 hvloader edk2 12140 CBL-Mariner 20230301gitf80f052277c8-40 https://nvd.nist.gov/vuln/detail/CVE-2022-36765 12140 edk2 hvloader 12140 CBL-Mariner 1.0.1-3 https://nvd.nist.gov/vuln/detail/CVE-2022-36765 12140 hvloader edk2 12356 edk2-ovmf-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-tools-20240223gitedc6681206c1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 edk2-tools-doc-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-ovmf-ia32-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-ovmf-xen-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-experimental-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-ext4-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-tools-python-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 CBL-Mariner 20240223gitedc6681206c1-1 https://nvd.nist.gov/vuln/detail/CVE-2022-36765 12356 edk2 edk2 12357 CBL-Mariner 20240223gitedc6681206c1-1 https://nvd.nist.gov/vuln/detail/CVE-2022-36765 12357 edk2 1.0 2024-04-07T17:00:00 <p>Information published.</p> 1.1 2024-06-30T00:00:00 <p>Information published.</p> 1.2 2024-09-23T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2022-36763 https://nvd.nist.gov/vuln/detail/CVE-2022-36763 https://nvd.nist.gov/vuln/detail/CVE-2022-36763 https://nvd.nist.gov/vuln/detail/CVE-2022-36763 https://nvd.nist.gov/vuln/detail/CVE-2022-36763 https://nvd.nist.gov/vuln/detail/CVE-2022-36763 Mariner infosec@edk2.groups.io Yes CVE-2022-36763 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12139 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12140 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12356 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12357 edk2 12139 edk2-ovmf-20230301gitf80f052277c8-40.cm2.noarch.rpm 0001-01-01T00:00:00 edk2-tools-20230301gitf80f052277c8-40.cm2.x86_64.rpm 0001-01-01T00:00:00 edk2-tools-doc-20230301gitf80f052277c8-40.cm2.noarch.rpm 0001-01-01T00:00:00 edk2-ovmf-ia32-20230301gitf80f052277c8-40.cm2.noarch.rpm 0001-01-01T00:00:00 edk2-ovmf-xen-20230301gitf80f052277c8-40.cm2.noarch.rpm 0001-01-01T00:00:00 edk2-ext4-20230301gitf80f052277c8-40.cm2.noarch.rpm 0001-01-01T00:00:00 edk2-tools-python-20230301gitf80f052277c8-40.cm2.noarch.rpm 0001-01-01T00:00:00 CBL-Mariner 20230301gitf80f052277c8-40 https://nvd.nist.gov/vuln/detail/CVE-2022-36763 12139 edk2 hvloader 12139 hvloader-1.0.1-3.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.0.1-3 https://nvd.nist.gov/vuln/detail/CVE-2022-36763 12139 hvloader edk2 12140 CBL-Mariner 20230301gitf80f052277c8-40 https://nvd.nist.gov/vuln/detail/CVE-2022-36763 12140 edk2 hvloader 12140 CBL-Mariner 1.0.1-3 https://nvd.nist.gov/vuln/detail/CVE-2022-36763 12140 hvloader edk2 12356 edk2-ovmf-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-tools-20240223gitedc6681206c1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 edk2-tools-doc-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-ovmf-ia32-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-ovmf-xen-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-experimental-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-ext4-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-tools-python-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 CBL-Mariner 20240223gitedc6681206c1-1 https://nvd.nist.gov/vuln/detail/CVE-2022-36763 12356 edk2 edk2 12357 CBL-Mariner 20240223gitedc6681206c1-1 https://nvd.nist.gov/vuln/detail/CVE-2022-36763 12357 edk2 1.0 2024-04-07T17:00:00 <p>Information published.</p> 1.1 2024-06-30T00:00:00 <p>Information published.</p> 1.2 2024-09-23T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2022-36764 https://nvd.nist.gov/vuln/detail/CVE-2022-36764 https://nvd.nist.gov/vuln/detail/CVE-2022-36764 https://nvd.nist.gov/vuln/detail/CVE-2022-36764 https://nvd.nist.gov/vuln/detail/CVE-2022-36764 https://nvd.nist.gov/vuln/detail/CVE-2022-36764 Mariner infosec@edk2.groups.io Yes CVE-2022-36764 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12139 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12140 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12356 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12357 edk2 12139 edk2-ovmf-20230301gitf80f052277c8-40.cm2.noarch.rpm 0001-01-01T00:00:00 edk2-tools-20230301gitf80f052277c8-40.cm2.x86_64.rpm 0001-01-01T00:00:00 edk2-tools-doc-20230301gitf80f052277c8-40.cm2.noarch.rpm 0001-01-01T00:00:00 edk2-ovmf-ia32-20230301gitf80f052277c8-40.cm2.noarch.rpm 0001-01-01T00:00:00 edk2-ovmf-xen-20230301gitf80f052277c8-40.cm2.noarch.rpm 0001-01-01T00:00:00 edk2-ext4-20230301gitf80f052277c8-40.cm2.noarch.rpm 0001-01-01T00:00:00 edk2-tools-python-20230301gitf80f052277c8-40.cm2.noarch.rpm 0001-01-01T00:00:00 CBL-Mariner 20230301gitf80f052277c8-40 https://nvd.nist.gov/vuln/detail/CVE-2022-36764 12139 edk2 hvloader 12139 hvloader-1.0.1-3.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.0.1-3 https://nvd.nist.gov/vuln/detail/CVE-2022-36764 12139 hvloader edk2 12140 CBL-Mariner 20230301gitf80f052277c8-40 https://nvd.nist.gov/vuln/detail/CVE-2022-36764 12140 edk2 hvloader 12140 CBL-Mariner 1.0.1-3 https://nvd.nist.gov/vuln/detail/CVE-2022-36764 12140 hvloader edk2 12356 edk2-ovmf-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-tools-20240223gitedc6681206c1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 edk2-tools-doc-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-ovmf-ia32-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-ovmf-xen-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-experimental-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-ext4-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-tools-python-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 CBL-Mariner 20240223gitedc6681206c1-1 https://nvd.nist.gov/vuln/detail/CVE-2022-36764 12356 edk2 edk2 12357 CBL-Mariner 20240223gitedc6681206c1-1 https://nvd.nist.gov/vuln/detail/CVE-2022-36764 12357 edk2 1.0 2024-04-07T17:00:00 <p>Information published.</p> 1.1 2024-06-30T00:00:00 <p>Information published.</p> 1.2 2024-09-23T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2023-45233 https://nvd.nist.gov/vuln/detail/CVE-2023-45233 https://nvd.nist.gov/vuln/detail/CVE-2023-45233 https://nvd.nist.gov/vuln/detail/CVE-2023-45233 https://nvd.nist.gov/vuln/detail/CVE-2023-45233 https://nvd.nist.gov/vuln/detail/CVE-2023-45233 Mariner infosec@edk2.groups.io Yes CVE-2023-45233 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12139 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12140 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12356 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12357 edk2 12139 edk2-ovmf-20230301gitf80f052277c8-40.cm2.noarch.rpm 0001-01-01T00:00:00 edk2-tools-20230301gitf80f052277c8-40.cm2.x86_64.rpm 0001-01-01T00:00:00 edk2-tools-doc-20230301gitf80f052277c8-40.cm2.noarch.rpm 0001-01-01T00:00:00 edk2-ovmf-ia32-20230301gitf80f052277c8-40.cm2.noarch.rpm 0001-01-01T00:00:00 edk2-ovmf-xen-20230301gitf80f052277c8-40.cm2.noarch.rpm 0001-01-01T00:00:00 edk2-ext4-20230301gitf80f052277c8-40.cm2.noarch.rpm 0001-01-01T00:00:00 edk2-tools-python-20230301gitf80f052277c8-40.cm2.noarch.rpm 0001-01-01T00:00:00 CBL-Mariner 20230301gitf80f052277c8-40 https://nvd.nist.gov/vuln/detail/CVE-2023-45233 12139 edk2 hvloader 12139 hvloader-1.0.1-3.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.0.1-3 https://nvd.nist.gov/vuln/detail/CVE-2023-45233 12139 hvloader edk2 12140 CBL-Mariner 20230301gitf80f052277c8-40 https://nvd.nist.gov/vuln/detail/CVE-2023-45233 12140 edk2 hvloader 12140 CBL-Mariner 1.0.1-3 https://nvd.nist.gov/vuln/detail/CVE-2023-45233 12140 hvloader edk2 12356 edk2-ovmf-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-tools-20240223gitedc6681206c1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 edk2-tools-doc-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-ovmf-ia32-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-ovmf-xen-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-experimental-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-ext4-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-tools-python-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 CBL-Mariner 20240223gitedc6681206c1-1 https://nvd.nist.gov/vuln/detail/CVE-2023-45233 12356 edk2 edk2 12357 CBL-Mariner 20240223gitedc6681206c1-1 https://nvd.nist.gov/vuln/detail/CVE-2023-45233 12357 edk2 1.0 2024-04-07T17:00:00 <p>Information published.</p> 1.1 2024-06-30T00:00:00 <p>Information published.</p> 1.2 2024-09-23T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2023-45234 https://nvd.nist.gov/vuln/detail/CVE-2023-45234 https://nvd.nist.gov/vuln/detail/CVE-2023-45234 https://nvd.nist.gov/vuln/detail/CVE-2023-45234 https://nvd.nist.gov/vuln/detail/CVE-2023-45234 https://nvd.nist.gov/vuln/detail/CVE-2023-45234 Mariner infosec@edk2.groups.io Yes CVE-2023-45234 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 8.8 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 12139 8.8 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 12140 8.8 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 12356 8.8 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 12357 edk2 12139 edk2-ovmf-20230301gitf80f052277c8-40.cm2.noarch.rpm 0001-01-01T00:00:00 edk2-tools-20230301gitf80f052277c8-40.cm2.x86_64.rpm 0001-01-01T00:00:00 edk2-tools-doc-20230301gitf80f052277c8-40.cm2.noarch.rpm 0001-01-01T00:00:00 edk2-ovmf-ia32-20230301gitf80f052277c8-40.cm2.noarch.rpm 0001-01-01T00:00:00 edk2-ovmf-xen-20230301gitf80f052277c8-40.cm2.noarch.rpm 0001-01-01T00:00:00 edk2-ext4-20230301gitf80f052277c8-40.cm2.noarch.rpm 0001-01-01T00:00:00 edk2-tools-python-20230301gitf80f052277c8-40.cm2.noarch.rpm 0001-01-01T00:00:00 CBL-Mariner 20230301gitf80f052277c8-40 https://nvd.nist.gov/vuln/detail/CVE-2023-45234 12139 edk2 hvloader 12139 hvloader-1.0.1-3.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.0.1-3 https://nvd.nist.gov/vuln/detail/CVE-2023-45234 12139 hvloader edk2 12140 CBL-Mariner 20230301gitf80f052277c8-40 https://nvd.nist.gov/vuln/detail/CVE-2023-45234 12140 edk2 hvloader 12140 CBL-Mariner 1.0.1-3 https://nvd.nist.gov/vuln/detail/CVE-2023-45234 12140 hvloader edk2 12356 edk2-ovmf-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-tools-20240223gitedc6681206c1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 edk2-tools-doc-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-ovmf-ia32-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-ovmf-xen-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-experimental-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-ext4-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-tools-python-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 CBL-Mariner 20240223gitedc6681206c1-1 https://nvd.nist.gov/vuln/detail/CVE-2023-45234 12356 edk2 edk2 12357 CBL-Mariner 20240223gitedc6681206c1-1 https://nvd.nist.gov/vuln/detail/CVE-2023-45234 12357 edk2 1.0 2024-04-07T17:00:00 <p>Information published.</p> 1.1 2024-06-30T00:00:00 <p>Information published.</p> 1.2 2024-09-23T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2023-45232 https://nvd.nist.gov/vuln/detail/CVE-2023-45232 https://nvd.nist.gov/vuln/detail/CVE-2023-45232 https://nvd.nist.gov/vuln/detail/CVE-2023-45232 https://nvd.nist.gov/vuln/detail/CVE-2023-45232 https://nvd.nist.gov/vuln/detail/CVE-2023-45232 Mariner infosec@edk2.groups.io Yes CVE-2023-45232 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12139 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12140 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12356 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 12357 edk2 12139 edk2-ovmf-20230301gitf80f052277c8-40.cm2.noarch.rpm 0001-01-01T00:00:00 edk2-tools-20230301gitf80f052277c8-40.cm2.x86_64.rpm 0001-01-01T00:00:00 edk2-tools-doc-20230301gitf80f052277c8-40.cm2.noarch.rpm 0001-01-01T00:00:00 edk2-ovmf-ia32-20230301gitf80f052277c8-40.cm2.noarch.rpm 0001-01-01T00:00:00 edk2-ovmf-xen-20230301gitf80f052277c8-40.cm2.noarch.rpm 0001-01-01T00:00:00 edk2-ext4-20230301gitf80f052277c8-40.cm2.noarch.rpm 0001-01-01T00:00:00 edk2-tools-python-20230301gitf80f052277c8-40.cm2.noarch.rpm 0001-01-01T00:00:00 CBL-Mariner 20230301gitf80f052277c8-40 https://nvd.nist.gov/vuln/detail/CVE-2023-45232 12139 edk2 hvloader 12139 hvloader-1.0.1-3.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.0.1-3 https://nvd.nist.gov/vuln/detail/CVE-2023-45232 12139 hvloader edk2 12140 CBL-Mariner 20230301gitf80f052277c8-40 https://nvd.nist.gov/vuln/detail/CVE-2023-45232 12140 edk2 hvloader 12140 CBL-Mariner 1.0.1-3 https://nvd.nist.gov/vuln/detail/CVE-2023-45232 12140 hvloader edk2 12356 edk2-ovmf-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-tools-20240223gitedc6681206c1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 edk2-tools-doc-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-ovmf-ia32-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-ovmf-xen-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-experimental-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-ext4-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-tools-python-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 CBL-Mariner 20240223gitedc6681206c1-1 https://nvd.nist.gov/vuln/detail/CVE-2023-45232 12356 edk2 edk2 12357 CBL-Mariner 20240223gitedc6681206c1-1 https://nvd.nist.gov/vuln/detail/CVE-2023-45232 12357 edk2 1.0 2024-04-07T17:00:00 <p>Information published.</p> 1.1 2024-06-30T00:00:00 <p>Information published.</p> 1.2 2024-09-23T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2023-45236 https://nvd.nist.gov/vuln/detail/CVE-2023-45236 https://nvd.nist.gov/vuln/detail/CVE-2023-45236 https://nvd.nist.gov/vuln/detail/CVE-2023-45236 https://nvd.nist.gov/vuln/detail/CVE-2023-45236 https://nvd.nist.gov/vuln/detail/CVE-2023-45236 Mariner infosec@edk2.groups.io Yes CVE-2023-45236 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 12139 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 12140 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 12356 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 12357 edk2 12139 edk2-ovmf-20230301gitf80f052277c8-40.cm2.noarch.rpm 0001-01-01T00:00:00 edk2-tools-20230301gitf80f052277c8-40.cm2.x86_64.rpm 0001-01-01T00:00:00 edk2-tools-doc-20230301gitf80f052277c8-40.cm2.noarch.rpm 0001-01-01T00:00:00 edk2-ovmf-ia32-20230301gitf80f052277c8-40.cm2.noarch.rpm 0001-01-01T00:00:00 edk2-ovmf-xen-20230301gitf80f052277c8-40.cm2.noarch.rpm 0001-01-01T00:00:00 edk2-ext4-20230301gitf80f052277c8-40.cm2.noarch.rpm 0001-01-01T00:00:00 edk2-tools-python-20230301gitf80f052277c8-40.cm2.noarch.rpm 0001-01-01T00:00:00 CBL-Mariner 20230301gitf80f052277c8-40 https://nvd.nist.gov/vuln/detail/CVE-2023-45236 12139 edk2 hvloader 12139 hvloader-1.0.1-3.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.0.1-3 https://nvd.nist.gov/vuln/detail/CVE-2023-45236 12139 hvloader edk2 12140 CBL-Mariner 20230301gitf80f052277c8-40 https://nvd.nist.gov/vuln/detail/CVE-2023-45236 12140 edk2 hvloader 12140 CBL-Mariner 1.0.1-3 https://nvd.nist.gov/vuln/detail/CVE-2023-45236 12140 hvloader edk2 12356 edk2-ovmf-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-tools-20240223gitedc6681206c1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 edk2-tools-doc-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-ovmf-ia32-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-ovmf-xen-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-experimental-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-ext4-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-tools-python-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 CBL-Mariner 20240223gitedc6681206c1-1 https://nvd.nist.gov/vuln/detail/CVE-2023-45236 12356 edk2 edk2 12357 CBL-Mariner 20240223gitedc6681206c1-1 https://nvd.nist.gov/vuln/detail/CVE-2023-45236 12357 edk2 1.0 2024-04-07T17:00:00 <p>Information published.</p> 1.1 2024-06-30T00:00:00 <p>Information published.</p> 1.2 2024-09-23T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2023-45237 https://nvd.nist.gov/vuln/detail/CVE-2023-45237 https://nvd.nist.gov/vuln/detail/CVE-2023-45237 https://nvd.nist.gov/vuln/detail/CVE-2023-45237 https://nvd.nist.gov/vuln/detail/CVE-2023-45237 https://nvd.nist.gov/vuln/detail/CVE-2023-45237 Mariner infosec@edk2.groups.io Yes CVE-2023-45237 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 12139 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 12140 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 12356 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 12357 edk2 12139 edk2-ovmf-20230301gitf80f052277c8-40.cm2.noarch.rpm 0001-01-01T00:00:00 edk2-tools-20230301gitf80f052277c8-40.cm2.x86_64.rpm 0001-01-01T00:00:00 edk2-tools-doc-20230301gitf80f052277c8-40.cm2.noarch.rpm 0001-01-01T00:00:00 edk2-ovmf-ia32-20230301gitf80f052277c8-40.cm2.noarch.rpm 0001-01-01T00:00:00 edk2-ovmf-xen-20230301gitf80f052277c8-40.cm2.noarch.rpm 0001-01-01T00:00:00 edk2-ext4-20230301gitf80f052277c8-40.cm2.noarch.rpm 0001-01-01T00:00:00 edk2-tools-python-20230301gitf80f052277c8-40.cm2.noarch.rpm 0001-01-01T00:00:00 CBL-Mariner 20230301gitf80f052277c8-40 https://nvd.nist.gov/vuln/detail/CVE-2023-45237 12139 edk2 hvloader 12139 hvloader-1.0.1-3.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.0.1-3 https://nvd.nist.gov/vuln/detail/CVE-2023-45237 12139 hvloader edk2 12140 CBL-Mariner 20230301gitf80f052277c8-40 https://nvd.nist.gov/vuln/detail/CVE-2023-45237 12140 edk2 hvloader 12140 CBL-Mariner 1.0.1-3 https://nvd.nist.gov/vuln/detail/CVE-2023-45237 12140 hvloader edk2 12356 edk2-ovmf-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-tools-20240223gitedc6681206c1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 edk2-tools-doc-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-ovmf-ia32-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-ovmf-xen-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-experimental-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-ext4-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 edk2-tools-python-20240223gitedc6681206c1-1.azl3.noarch.rpm 0001-01-01T00:00:00 CBL-Mariner 20240223gitedc6681206c1-1 https://nvd.nist.gov/vuln/detail/CVE-2023-45237 12356 edk2 edk2 12357 CBL-Mariner 20240223gitedc6681206c1-1 https://nvd.nist.gov/vuln/detail/CVE-2023-45237 12357 edk2 1.0 2024-04-07T17:00:00 <p>Information published.</p> 1.1 2024-06-30T00:00:00 <p>Information published.</p> 1.2 2024-09-23T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-42161 https://nvd.nist.gov/vuln/detail/CVE-2024-42161 https://nvd.nist.gov/vuln/detail/CVE-2024-42161 https://nvd.nist.gov/vuln/detail/CVE-2024-42161 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-42161 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 6.3 6.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H 12356 6.3 6.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H 12357 6.3 6.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H 12139 6.3 6.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H 12140 kernel 12356 kernel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.43.1-7 https://nvd.nist.gov/vuln/detail/CVE-2024-42161 12356 kernel kernel 12357 kernel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.43.1-7 https://nvd.nist.gov/vuln/detail/CVE-2024-42161 12357 kernel kernel 12139 kernel-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 python3-perf-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 bpftool-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.164.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-42161 12139 kernel kernel 12140 kernel-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 python3-perf-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-dtb-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 bpftool-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.164.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-42161 12140 kernel 1.0 2024-08-15T17:00:00 <p>Information published.</p> 1.1 2024-08-20T17:00:00 <p>Information published.</p> 1.2 2024-09-24T17:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2024-42224 https://nvd.nist.gov/vuln/detail/CVE-2024-42224 https://nvd.nist.gov/vuln/detail/CVE-2024-42224 https://nvd.nist.gov/vuln/detail/CVE-2024-42224 Mariner 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Yes CVE-2024-42224 12356 12357 12139 12140 12356 12357 12139 12140 12356 12357 12139 12140 6.1 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H 12356 6.1 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H 12357 6.1 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H 12139 6.1 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H 12140 kernel 12356 kernel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.43.1-7 https://nvd.nist.gov/vuln/detail/CVE-2024-42224 12356 kernel kernel 12357 kernel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 python3-perf-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 bpftool-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-6.6.47.1-1.azl3.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 6.6.43.1-7 https://nvd.nist.gov/vuln/detail/CVE-2024-42224 12357 kernel kernel 12139 kernel-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 python3-perf-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 bpftool-5.15.164.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.164.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-42224 12139 kernel kernel 12140 kernel-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-gpu-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 python3-perf-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-dtb-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 bpftool-5.15.164.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.164.1-1 https://nvd.nist.gov/vuln/detail/CVE-2024-42224 12140 kernel 1.0 2024-08-15T17:00:00 <p>Information published.</p> 1.1 2024-08-20T17:00:00 <p>Information published.</p> 1.2 2024-09-24T17:00:00 <p>Information published.</p> Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker needs to edit the local configuration file to contain malicious code, then send the request to the server to exploit this vulnerability.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain administrator privileges.</p> Dynamics Business Central Microsoft Yes CVE-2024-38225 Improper Authentication 12219 12341 12294 Elevation of Privilege 12219 Elevation of Privilege 12341 Elevation of Privilege 12294 Important 12219 Important 12341 Important 12294 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12219 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12341 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12294 5042528 https://www.microsoft.com/download/details.aspx?familyid=fd83e799-e637-4c04-b0cf-4fab00fd5792 12219 Maybe Security Update 22.0.64727 http://support.microsoft.com/kb/5042528 12219 5042528 5042529 https://www.microsoft.com/download/details.aspx?familyid=7c4cdbc3-a9f8-47eb-b9ab-ea1bfd32fc7d 12341 Maybe Security Update 23.0.22561 http://support.microsoft.com/kb/5042529 12341 5042529 5042530 https://www.microsoft.com/en-us/download/details.aspx?id=106167 12294 Maybe Security Update 24.0.22865 http://support.microsoft.com/kb/5042530 12294 5042530 cjm00n with Cyber Kunlun &amp; Zhiniang Peng 1.0 2024-09-10T07:00:00 <p>Information published.</p> 1.1 2026-08-10T07:00:00 <p>Updated the build numbers. This is an informational update only.</p>