{"DocumentNotes":[{"Audience":"Public","Ordinal":"0","Title":"Release Notes","Type":1,"Value":"

Updates this Month

\n

This release consists of security updates for the following products, features and roles.

\n\n

Please note the following information regarding the security updates:

\n

Security Update Guide Blog Posts

\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
DateBlog Post
January 11, 2022Coming Soon: New Security Update Guide Notification System
February 9, 2021Continuing to Listen: Good News about the Security Update Guide API
January 13, 2021Security Update Guide Supports CVEs Assigned by Industry Partners
December 8, 2020Security Update Guide: Let’s keep the conversation going
November 9, 2020Vulnerability Descriptions in the New Version of the Security Update Guide
\n

Relevant Information

\n\n

FAQs, Mitigations, and Workarounds

\n

The following CVEs have FAQs, Mitigations, or Workarounds. You can see these in more detail from the Vulnerabilities tab by selecting FAQs, Mitigations and Workarounds columns in the Edit Columns panel.

\n\n

Known Issues

\n

You can see these in more detail from the Deployments tab by selecting Known Issues column in the Edit Columns panel.

\n

For more information about Windows Known Issues, please see Windows message center (links to currently-supported versions of Windows are in the left pane).

\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
KB ArticleApplies To
5010324Microsoft Exchange Server 2013
5011487Windows 10, version 20H2, Windows Server, version 20H2, Windows 10, version 21H1, Windows 10, version 21H2
5011495Windows 10, version 1607, Windows Server 2016
5011497Windows Server 2022
5011503Windows 10, version 1809, Windows Server 2019
5011525Windows Server 2008 (Security-only update)
5011527Windows Server 2012 (Security-only update)
5011529Windows 7, Windows Server 2008 R2 (Security-only update)
5011534Windows Server 2008 (Monthly Rollup)
5011535Windows Server 2012 (Monthly Rollup)
5011552Windows 7, Windows Server 2008 R2 (Monthly Rollup)
5011560Windows 8.1, Windows Server 2012 R2 (Security-only update)
5011564Windows 8.1, Windows Server 2012 R2 (Monthly Rollup)
5012698Microsoft Exchange Server 2016, 2019
\n"},{"Audience":"Public","Ordinal":"1","Title":"Legal Disclaimer","Type":5,"Value":"The information provided in the Microsoft Knowledge Base is provided \"as is\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply."}],"DocumentPublisher":{"ContactDetails":{"Value":"secure@microsoft.com"},"IssuingAuthority":{"Value":"The Microsoft Security Response Center (MSRC) identifies, monitors, resolves, and responds to security incidents and Microsoft software security vulnerabilities. For more information, see http://www.microsoft.com/security/msrc."},"Type":0},"DocumentTitle":{"Value":"March 2022 Security Updates"},"DocumentTracking":{"CurrentReleaseDate":"2026-10-28T01:48:24","Identification":{"Alias":{"Value":"2022-Mar"},"ID":{"Value":"2022-Mar"}},"InitialReleaseDate":"2022-03-08T08:00:00","RevisionHistory":[{"Date":"2026-10-28T01:48:24","Description":{"Value":"March 2022 Security Updates"},"Number":"106"}],"Status":2,"Version":"1.0"},"DocumentType":{"Value":"Security Update"},"ProductTree":{"Branch":[{"Items":[{"Items":[{"ProductID":"11568","Value":"Windows 10 Version 1809 for 32-bit Systems"},{"ProductID":"11569","Value":"Windows 10 Version 1809 for x64-based Systems"},{"ProductID":"11570","Value":"Windows 10 Version 1809 for ARM64-based Systems"},{"ProductID":"11571","Value":"Windows Server 2019"},{"ProductID":"11572","Value":"Windows Server 2019 (Server Core installation)"},{"ProductID":"11712","Value":"Windows 10 Version 1909 for 32-bit Systems"},{"ProductID":"11713","Value":"Windows 10 Version 1909 for x64-based Systems"},{"ProductID":"11714","Value":"Windows 10 Version 1909 for ARM64-based Systems"},{"ProductID":"11896","Value":"Windows 10 Version 21H1 for x64-based Systems"},{"ProductID":"11897","Value":"Windows 10 Version 21H1 for ARM64-based Systems"},{"ProductID":"11898","Value":"Windows 10 Version 21H1 for 32-bit Systems"},{"ProductID":"11923","Value":"Windows Server 2022"},{"ProductID":"11924","Value":"Windows Server 2022 (Server Core installation)"},{"ProductID":"11801","Value":"Windows 10 Version 20H2 for 32-bit Systems"},{"ProductID":"11802","Value":"Windows 10 Version 20H2 for ARM64-based Systems"},{"ProductID":"11803","Value":"Windows Server, version 20H2 (Server Core Installation)"},{"ProductID":"11926","Value":"Windows 11 version 21H2 for x64-based Systems"},{"ProductID":"11927","Value":"Windows 11 version 21H2 for ARM64-based Systems"},{"ProductID":"11929","Value":"Windows 10 Version 21H2 for 32-bit Systems"},{"ProductID":"11930","Value":"Windows 10 Version 21H2 for ARM64-based Systems"},{"ProductID":"11931","Value":"Windows 10 Version 21H2 for x64-based Systems"},{"ProductID":"10729","Value":"Windows 10 for 32-bit Systems"},{"ProductID":"10735","Value":"Windows 10 for x64-based Systems"},{"ProductID":"10852","Value":"Windows 10 Version 1607 for 32-bit Systems"},{"ProductID":"10853","Value":"Windows 10 Version 1607 for x64-based Systems"},{"ProductID":"10816","Value":"Windows Server 2016"},{"ProductID":"10855","Value":"Windows Server 2016 (Server Core installation)"},{"ProductID":"10481","Value":"Windows 8.1 for 32-bit systems"},{"ProductID":"10482","Value":"Windows 8.1 for x64-based systems"},{"ProductID":"10484","Value":"Windows RT 8.1"},{"ProductID":"11849","Value":"Remote Desktop client for Windows Desktop"},{"ProductID":"11804-11568","Value":"Raw Image Extension on Windows 10 Version 1809 for 32-bit Systems"},{"ProductID":"11804-11569","Value":"Raw Image Extension on Windows 10 Version 1809 for x64-based Systems"},{"ProductID":"11804-11570","Value":"Raw Image Extension on Windows 10 Version 1809 for ARM64-based Systems"},{"ProductID":"11804-11673","Value":"Raw Image Extension on Windows 10 Version 1809 for HoloLens"},{"ProductID":"11804-11712","Value":"Raw Image Extension on Windows 10 Version 1909 for 32-bit Systems"},{"ProductID":"11804-11713","Value":"Raw Image Extension on Windows 10 Version 1909 for x64-based Systems"},{"ProductID":"11804-11714","Value":"Raw Image Extension on Windows 10 Version 1909 for ARM64-based Systems"},{"ProductID":"11804-11896","Value":"Raw Image Extension on Windows 10 Version 21H1 for x64-based Systems"},{"ProductID":"11804-11897","Value":"Raw Image Extension on Windows 10 Version 21H1 for ARM64-based Systems"},{"ProductID":"11804-11898","Value":"Raw Image Extension on Windows 10 Version 21H1 for 32-bit Systems"},{"ProductID":"11804-11801","Value":"Raw Image Extension on Windows 10 Version 20H2 for 32-bit Systems"},{"ProductID":"11804-11802","Value":"Raw Image Extension on Windows 10 Version 20H2 for ARM64-based Systems"},{"ProductID":"11804-11926","Value":"Raw Image Extension on Windows 11 version 21H2 for x64-based Systems"},{"ProductID":"11804-11927","Value":"Raw Image Extension on Windows 11 version 21H2 for ARM64-based Systems"},{"ProductID":"11804-11929","Value":"Raw Image Extension on Windows 10 Version 21H2 for 32-bit Systems"},{"ProductID":"11804-11930","Value":"Raw Image Extension on Windows 10 Version 21H2 for ARM64-based Systems"},{"ProductID":"11804-11931","Value":"Raw Image Extension on Windows 10 Version 21H2 for x64-based Systems"},{"ProductID":"11804-10729","Value":"Raw Image Extension on Windows 10 for 32-bit Systems"},{"ProductID":"11804-10735","Value":"Raw Image Extension on Windows 10 for x64-based Systems"},{"ProductID":"11804-10852","Value":"Raw Image Extension on Windows 10 Version 1607 for 32-bit Systems"},{"ProductID":"11804-10853","Value":"Raw Image Extension on Windows 10 Version 1607 for x64-based Systems"},{"ProductID":"12010","Value":"HEVC Video Extension"},{"ProductID":"11808","Value":"HEVC Video Extensions"},{"ProductID":"11884","Value":"VP9 Video Extensions"},{"ProductID":"11805","Value":"HEIF Image Extension"}],"Name":"Windows","Type":1},{"Items":[{"ProductID":"10483","Value":"Windows Server 2012 R2"},{"ProductID":"10543","Value":"Windows Server 2012 R2 (Server Core installation)"},{"ProductID":"10047","Value":"Windows 7 for 32-bit Systems Service Pack 1"},{"ProductID":"10048","Value":"Windows 7 for x64-based Systems Service Pack 1"},{"ProductID":"9312","Value":"Windows Server 2008 for 32-bit Systems Service Pack 2"},{"ProductID":"10287","Value":"Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)"},{"ProductID":"9318","Value":"Windows Server 2008 for x64-based Systems Service Pack 2"},{"ProductID":"9344","Value":"Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)"},{"ProductID":"10051","Value":"Windows Server 2008 R2 for x64-based Systems Service Pack 1"},{"ProductID":"10049","Value":"Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)"},{"ProductID":"10378","Value":"Windows Server 2012"},{"ProductID":"10379","Value":"Windows Server 2012 (Server Core installation)"}],"Name":"ESU","Type":1},{"Items":[{"ProductID":"11967","Value":"Microsoft Defender for IoT"},{"ProductID":"12015","Value":"Microsoft Defender for Endpoint for Linux"},{"ProductID":"12014","Value":"Microsoft Defender for Endpoint for Mac"},{"ProductID":"12019","Value":"Microsoft Defender for Endpoint for Android"},{"ProductID":"12023","Value":"Microsoft Defender for Endpoint for iOS"},{"ProductID":"12013-11801","Value":"Microsoft Defender for Endpoint for Windows on Windows 10 Version 20H2 for 32-bit Systems"},{"ProductID":"12013-11714","Value":"Microsoft Defender for Endpoint for Windows on Windows 10 Version 1909 for ARM64-based Systems"},{"ProductID":"12013-11803","Value":"Microsoft Defender for Endpoint for Windows on Windows Server, version 20H2 (Server Core Installation)"},{"ProductID":"12013-11926","Value":"Microsoft Defender for Endpoint for Windows on Windows 11 version 21H2 for x64-based Systems"},{"ProductID":"12013-11929","Value":"Microsoft Defender for Endpoint for Windows on Windows 10 Version 21H2 for 32-bit Systems"},{"ProductID":"12013-11927","Value":"Microsoft Defender for Endpoint for Windows on Windows 11 version 21H2 for ARM64-based Systems"},{"ProductID":"12013-11713","Value":"Microsoft Defender for Endpoint for Windows on Windows 10 Version 1909 for x64-based Systems"},{"ProductID":"12013-11923","Value":"Microsoft Defender for Endpoint for Windows on Windows Server 2022"},{"ProductID":"12013","Value":"Microsoft Defender for Endpoint for Windows on Windows Server 2022 Datacenter: Azure Edition"},{"ProductID":"12013-11712","Value":"Microsoft Defender for Endpoint for Windows on Windows 10 Version 1909 for 32-bit Systems"},{"ProductID":"12013-11897","Value":"Microsoft Defender for Endpoint for Windows on Windows 10 Version 21H1 for ARM64-based Systems"},{"ProductID":"12013-11802","Value":"Microsoft Defender for Endpoint for Windows on Windows 10 Version 20H2 for ARM64-based Systems"},{"ProductID":"12013-11572","Value":"Microsoft Defender for Endpoint for Windows on Windows Server 2019 (Server Core installation)"},{"ProductID":"12013-11898","Value":"Microsoft Defender for Endpoint for Windows on Windows 10 Version 21H1 for 32-bit Systems"},{"ProductID":"12013-11931","Value":"Microsoft Defender for Endpoint for Windows on Windows 10 Version 21H2 for x64-based Systems"},{"ProductID":"12013-11930","Value":"Microsoft Defender for Endpoint for Windows on Windows 10 Version 21H2 for ARM64-based Systems"},{"ProductID":"12013-11924","Value":"Microsoft Defender for Endpoint for Windows on Windows Server 2022 (Server Core installation)"},{"ProductID":"12013-11896","Value":"Microsoft Defender for Endpoint for Windows on Windows 10 Version 21H1 for x64-based Systems"},{"ProductID":"12013-11571","Value":"Microsoft Defender for Endpoint for Windows on Windows Server 2019"},{"ProductID":"12013-11569","Value":"Microsoft Defender for Endpoint for Windows on Windows 10 Version 1809 for x64-based Systems"},{"ProductID":"12013-11570","Value":"Microsoft Defender for Endpoint for Windows on Windows 10 Version 1809 for ARM64-based Systems"},{"ProductID":"12013-11568","Value":"Microsoft Defender for Endpoint for Windows on Windows 10 Version 1809 for 32-bit Systems"},{"ProductID":"12021-10816","Value":"Microsoft Defender for Endpoint EDR sensor on Windows Server 2016"},{"ProductID":"12021-10855","Value":"Microsoft Defender for Endpoint EDR sensor on Windows Server 2016 (Server Core installation)"},{"ProductID":"12021-10483","Value":"Microsoft Defender for Endpoint EDR sensor on Windows Server 2012 R2"},{"ProductID":"12021-10543","Value":"Microsoft Defender for Endpoint EDR sensor on Windows Server 2012 R2 (Server Core installation)"}],"Name":"System Center","Type":1},{"Items":[{"ProductID":"12018","Value":"Azure Site Recovery VMWare to Azure"}],"Name":"Azure","Type":1},{"Items":[{"ProductID":"11906","Value":"Microsoft Exchange Server 2016 Cumulative Update 21"},{"ProductID":"11908","Value":"Microsoft Exchange Server 2019 Cumulative Update 10"},{"ProductID":"11956","Value":"Microsoft Exchange Server 2016 Cumulative Update 22"},{"ProductID":"11957","Value":"Microsoft Exchange Server 2019 Cumulative Update 11"},{"ProductID":"11682","Value":"Microsoft Exchange Server 2013 Cumulative Update 23"}],"Name":"Server Software","Type":1},{"Items":[{"ProductID":"11785","Value":"Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6)"},{"ProductID":"11872","Value":"Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)"},{"ProductID":"11935","Value":"Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)"},{"ProductID":"11969","Value":"Microsoft Visual Studio 2022 version 17.0"},{"ProductID":"11761","Value":".NET 5.0"},{"ProductID":"12009","Value":".NET 6.0"},{"ProductID":"11730","Value":".NET Core 3.1"},{"ProductID":"11970","Value":"PowerShell 7.2"},{"ProductID":"11745","Value":"PowerShell 7.0"},{"ProductID":"11925","Value":"PowerShell 7.1"},{"ProductID":"12020","Value":"Microsoft Visual Studio 2022 version 17.1"},{"ProductID":"11622","Value":"Visual Studio Code"}],"Name":"Developer Tools","Type":1},{"Items":[{"ProductID":"12012","Value":"Intune Company Portal for iOS"},{"ProductID":"11758","Value":"Paint 3D"}],"Name":"Apps","Type":1},{"Items":[{"ProductID":"12016","Value":"Skype Extension for Chrome"},{"ProductID":"11573","Value":"Microsoft Office 2019 for 32-bit editions"},{"ProductID":"11574","Value":"Microsoft Office 2019 for 64-bit editions"},{"ProductID":"11762","Value":"Microsoft 365 Apps for Enterprise for 32-bit Systems"},{"ProductID":"11763","Value":"Microsoft 365 Apps for Enterprise for 64-bit Systems"},{"ProductID":"11952","Value":"Microsoft Office LTSC 2021 for 64-bit editions"},{"ProductID":"11953","Value":"Microsoft Office LTSC 2021 for 32-bit editions"},{"ProductID":"11575","Value":"Microsoft Office 2019 for Mac"},{"ProductID":"11951","Value":"Microsoft Office LTSC for Mac 2021"},{"ProductID":"10746","Value":"Microsoft Word 2016 (32-bit edition)"},{"ProductID":"10747","Value":"Microsoft Word 2016 (64-bit edition)"},{"ProductID":"10606","Value":"Microsoft Word 2013 RT Service Pack 1"},{"ProductID":"10604","Value":"Microsoft Word 2013 Service Pack 1 (32-bit editions)"},{"ProductID":"10605","Value":"Microsoft Word 2013 Service Pack 1 (64-bit editions)"}],"Name":"Microsoft Office","Type":1},{"Items":[{"ProductID":"11655","Value":"Microsoft Edge (Chromium-based)"}],"Name":"Browser","Type":1},{"Items":[{"ProductID":"12137","Value":"CBL Mariner 1.0 x64"},{"ProductID":"12138","Value":"CBL Mariner 1.0 ARM"},{"ProductID":"12139","Value":"CBL Mariner 2.0 x64"},{"ProductID":"12140","Value":"CBL Mariner 2.0 ARM"},{"ProductID":"18454-16820","Value":"cm1 kernel 5.10.111.1-1 on CBL Mariner 1.0"},{"ProductID":"18768-16820","Value":"cm1 kernel 5.10.102.1-3 on CBL Mariner 1.0"},{"ProductID":"18720-16823","Value":"cbl2 kernel 5.15.37.1-2 on CBL Mariner 2.0"},{"ProductID":"18765-16823","Value":"cbl2 kernel 5.15.26.1-2 on CBL Mariner 2.0"},{"ProductID":"18719-16820","Value":"cm1 kernel 5.10.116.1-1 on CBL Mariner 1.0"},{"ProductID":"18476-16823","Value":"cbl2 kernel 5.15.32.1-2 on CBL Mariner 2.0"},{"ProductID":"19485-16823","Value":"cbl2 haproxy 2.4.13-1 on CBL Mariner 2.0"},{"ProductID":"17993-16820","Value":"cm1 hyperv-daemons 5.10.168.1-1 on CBL Mariner 1.0"},{"ProductID":"17013-17084","Value":"azl3 shim-unsigned-aarch64 15.8-5 on Azure Linux 3.0"},{"ProductID":"17012-17084","Value":"azl3 shim-unsigned-x64 15.8-5 on Azure Linux 3.0"},{"ProductID":"18763-16820","Value":"cm1 openssl 1.1.1k-9 on CBL Mariner 1.0"},{"ProductID":"18764-16823","Value":"cbl2 openssl 1.1.1k-12 on CBL Mariner 2.0"},{"ProductID":"18131-17084","Value":"azl3 edk2 20240223gitedc6681206c1-1 on Azure Linux 3.0"},{"ProductID":"17859-17084","Value":"azl3 edk2 20230301gitf80f052277c8-37 on Azure Linux 3.0"},{"ProductID":"18781-16823","Value":"cbl2 kernel 5.15.26.1-1 on CBL Mariner 2.0"},{"ProductID":"18667-16820","Value":"cm1 kernel 5.10.131.1-1 on CBL Mariner 1.0"},{"ProductID":"18728-16823","Value":"cbl2 libtiff 4.3.0-2 on CBL Mariner 2.0"},{"ProductID":"18769-16820","Value":"cm1 libtiff 4.1.0-3 on CBL Mariner 1.0"},{"ProductID":"18727-16820","Value":"cm1 libtiff 4.4.0-1 on CBL Mariner 1.0"},{"ProductID":"18455-16823","Value":"cbl2 kernel 5.15.32.1-3 on CBL Mariner 2.0"},{"ProductID":"18756-16820","Value":"cm1 qemu-kvm 4.2.0-38 on CBL Mariner 1.0"},{"ProductID":"18757-16823","Value":"cbl2 qemu 6.2.0-2 on CBL Mariner 2.0"},{"ProductID":"18741-16820","Value":"cm1 vim 8.2.4763-1 on CBL Mariner 1.0"},{"ProductID":"18758-16823","Value":"cbl2 vim 8.2.4743-1 on CBL Mariner 2.0"},{"ProductID":"18766-16820","Value":"cm1 httpd 2.4.53-1 on CBL Mariner 1.0"},{"ProductID":"18767-16823","Value":"cbl2 httpd 2.4.53-1 on CBL Mariner 2.0"},{"ProductID":"18816-17084","Value":"azl3 rust regex-1.8.4 on Azure Linux 3.0"},{"ProductID":"17811-17084","Value":"azl3 rpm-ostree 2024.4-1 on Azure Linux 3.0"},{"ProductID":"18817-17084","Value":"azl3 librsvg2 2.58.1-1 on Azure Linux 3.0"},{"ProductID":"18815-17084","Value":"azl3 rpm-ostree 2022.1-7 on Azure Linux 3.0"},{"ProductID":"18701-16820","Value":"cm1 moby-runc 1.1.2+azure-1 on CBL Mariner 1.0"},{"ProductID":"18702-16823","Value":"cbl2 moby-runc 1.1.2-2 on CBL Mariner 2.0"},{"ProductID":"18773-16820","Value":"cm1 qt5-qtsvg 5.12.11-3 on CBL Mariner 1.0"},{"ProductID":"16857-16823","Value":"cbl2 qt5-qtsvg 5.12.11-3 on CBL Mariner 2.0"},{"ProductID":"19498-16823","Value":"cbl2 libarchive 3.6.1-1 on CBL Mariner 2.0"},{"ProductID":"18533-16820","Value":"cm1 qemu-kvm 4.2.0-48 on CBL Mariner 1.0"},{"ProductID":"18535-17084","Value":"azl3 qemu 6.2.0-18 on Azure Linux 3.0"},{"ProductID":"18762-16820","Value":"cm1 kernel 5.10.109.1-2 on CBL Mariner 1.0"},{"ProductID":"17995-16823","Value":"cbl2 hyperv-daemons 5.15.92.1-1 on CBL Mariner 2.0"},{"ProductID":"18887-16820","Value":"cm1 qemu-kvm 4.2.0-39 on CBL Mariner 1.0"},{"ProductID":"16864-17084","Value":"azl3 samba 4.18.3-1 on Azure Linux 3.0"},{"ProductID":"18890-16820","Value":"cm1 postgresql 12.7-2 on CBL Mariner 1.0"},{"ProductID":"18891-16823","Value":"cbl2 postgresql 14.2-1 on CBL Mariner 2.0"},{"ProductID":"17367-16823","Value":"cbl2 cri-o 1.21.7-2 on CBL Mariner 2.0"},{"ProductID":"18882-16820","Value":"cm1 vsftpd 3.0.5-1 on CBL Mariner 1.0"},{"ProductID":"18883-16820","Value":"cm1 nginx 1.20.1-3 on CBL Mariner 1.0"},{"ProductID":"18884-16823","Value":"cbl2 sendmail 8.15.2-46 on CBL Mariner 2.0"},{"ProductID":"18885-16823","Value":"cbl2 vsftpd 3.0.5-1 on CBL Mariner 2.0"},{"ProductID":"18886-16823","Value":"cbl2 nginx 1.20.2-2 on CBL Mariner 2.0"},{"ProductID":"18888-16820","Value":"cm1 openssh 8.9p1-1 on CBL Mariner 1.0"},{"ProductID":"17826-16823","Value":"cbl2 openssh 8.9p1-1 on CBL Mariner 2.0"},{"ProductID":"18895-16820","Value":"cm1 cockpit 248-3 on CBL Mariner 1.0"},{"ProductID":"18896-16820","Value":"cm1 postgresql 12.8-1 on CBL Mariner 1.0"},{"ProductID":"18878-16820","Value":"cm1 python2 2.7.18-10 on CBL Mariner 1.0"},{"ProductID":"18889-16820","Value":"cm1 python3 3.7.11-1 on CBL Mariner 1.0"},{"ProductID":"18780-16820","Value":"cm1 kernel 5.10.102.1-1 on CBL Mariner 1.0"},{"ProductID":"18893-16820","Value":"cm1 grub2 2.06~rc1-8 on CBL Mariner 1.0"},{"ProductID":"18894-16823","Value":"cbl2 grub2 2.06-5 on CBL Mariner 2.0"},{"ProductID":"18842-17084","Value":"azl3 grub2 2.06-14 on Azure Linux 3.0"},{"ProductID":"19468-16823","Value":"cbl2 lua 5.4.4-1 on CBL Mariner 2.0"},{"ProductID":"19082-17084","Value":"azl3 ntopng 5.2.1-5 on Azure Linux 3.0"},{"ProductID":"18752-16823","Value":"cbl2 kernel 5.15.41.1-1 on CBL Mariner 2.0"},{"ProductID":"16825-17084","Value":"azl3 teckit 2.5.12-4 on Azure Linux 3.0"},{"ProductID":"16982-17084","Value":"azl3 cloud-hypervisor-cvm 38.0.72.2-1 on Azure Linux 3.0"},{"ProductID":"16968-16820","Value":"cm1 openjdk8 1.8.0.332-2 on CBL Mariner 1.0"},{"ProductID":"16969-16820","Value":"cm1 tcl 8.6.13-1 on CBL Mariner 1.0"},{"ProductID":"16970-16820","Value":"cm1 python2 2.7.18-13 on CBL Mariner 1.0"},{"ProductID":"16971-16820","Value":"cm1 grpc 1.35.0-4 on CBL Mariner 1.0"},{"ProductID":"16972-16820","Value":"cm1 erlang 24.2-2 on CBL Mariner 1.0"},{"ProductID":"16973-16820","Value":"cm1 ccache 3.6-3 on CBL Mariner 1.0"},{"ProductID":"16947-16820","Value":"cm1 boost 1.66.0-4 on CBL Mariner 1.0"},{"ProductID":"16974-16820","Value":"cm1 python3 3.7.13-5 on CBL Mariner 1.0"},{"ProductID":"16975-16820","Value":"cm1 mariadb 10.3.36-1 on CBL Mariner 1.0"},{"ProductID":"16976-16820","Value":"cm1 zlib 1.2.12-1 on CBL Mariner 1.0"},{"ProductID":"16977-16823","Value":"cbl2 cloud-hypervisor-cvm 38.0.72.2-1 on CBL Mariner 2.0"},{"ProductID":"16978-16823","Value":"cbl2 tcl 8.6.13-1 on CBL Mariner 2.0"},{"ProductID":"16979-16823","Value":"cbl2 nmap 7.93-1 on CBL Mariner 2.0"},{"ProductID":"16980-16823","Value":"cbl2 boost 1.76.0-3 on CBL Mariner 2.0"},{"ProductID":"16981-16823","Value":"cbl2 zlib 1.2.12-1 on CBL Mariner 2.0"},{"ProductID":"16825-16817","Value":"azl3 teckit 2.5.12-4 on Azure Linux 3.0"},{"ProductID":"16982-16817","Value":"azl3 cloud-hypervisor-cvm 38.0.72.2-1 on Azure Linux 3.0"},{"ProductID":"19640-16823","Value":"cbl2 fish on CBL Mariner 2.0"},{"ProductID":"18824-17084","Value":"azl3 re2c 3.1-4 on Azure Linux 3.0"},{"ProductID":"17735-17084","Value":"azl3 rust 1.75.0-1 on Azure Linux 3.0"},{"ProductID":"18759-16820","Value":"cm1 bind 9.16.27-1 on CBL Mariner 1.0"},{"ProductID":"18760-16823","Value":"cbl2 bind 9.16.29-1 on CBL Mariner 2.0"},{"ProductID":"18761-16820","Value":"cm1 vim 8.2.4563-1 on CBL Mariner 1.0"},{"ProductID":"18685-16820","Value":"cm1 kernel 5.10.123.1-1 on CBL Mariner 1.0"},{"ProductID":"18770-16820","Value":"cm1 moby-containerd 1.5.9+azure-3 on CBL Mariner 1.0"},{"ProductID":"18771-16820","Value":"cm1 golang 1.16.15-1 on CBL Mariner 1.0"},{"ProductID":"18772-16823","Value":"cbl2 golang 1.17.8-1 on CBL Mariner 2.0"},{"ProductID":"17021-17084","Value":"azl3 python-tensorboard 2.16.2-2 on Azure Linux 3.0"},{"ProductID":"18892-16820","Value":"cm1 ansible 2.9.27-1 on CBL Mariner 1.0"},{"ProductID":"18897-16820","Value":"cm1 libvirt 6.1.0-5 on CBL Mariner 1.0"},{"ProductID":"19469-16823","Value":"cbl2 wavpack 5.6.0-1 on CBL Mariner 2.0"},{"ProductID":"19647-16823","Value":"cbl2 nbdkit on CBL Mariner 2.0"},{"ProductID":"19511-16823","Value":"cbl2 cri-o 1.22.3-1 on CBL Mariner 2.0"},{"ProductID":"17597-17084","Value":"azl3 python-waitress 3.0.1-1 on Azure Linux 3.0"}],"Name":"Mariner","Type":1},{"Items":[{"ProductID":"19743-17084","Value":"azl3 librsvg2 2.50.3-4 on Azure Linux 3.0"},{"ProductID":"19671-17084","Value":"azl3 rust 1.75.0-14 on Azure Linux 3.0"},{"ProductID":"19686-17084","Value":"azl3 rust 1.86.0-1 on Azure Linux 3.0"},{"ProductID":"19839-21692","Value":"cbl2 cri-o 1.21.7-3 on CBL-Mariner 2.0"},{"ProductID":"19839-17086","Value":"cbl2 cri-o 1.21.7-3 on CBL Mariner 2.0"},{"ProductID":"19663-17084","Value":"azl3 grub2 2.06-23 on Azure Linux 3.0"},{"ProductID":"19878-17086","Value":"cbl2 ntopng 5.2.1-3 on CBL Mariner 2.0"},{"ProductID":"19882-17086","Value":"cbl2 memcached 1.6.22-2 on CBL Mariner 2.0"},{"ProductID":"20791-17084","Value":"azl3 ntopng 5.2.1-6 on Azure Linux 3.0"},{"ProductID":"19746-17084","Value":"azl3 rubygem-mini_portile2 2.8.4-1 on Azure Linux 3.0"},{"ProductID":"19801-17086","Value":"cbl2 cloud-hypervisor-cvm 38.0.72-1 on CBL Mariner 2.0"},{"ProductID":"19807-17084","Value":"azl3 cloud-hypervisor-cvm 38.0.72-2 on Azure Linux 3.0"},{"ProductID":"19801-21692","Value":"cbl2 cloud-hypervisor-cvm 38.0.72-1 on CBL-Mariner 2.0"},{"ProductID":"19696-17084","Value":"azl3 python-tensorboard 2.11.0-3 on Azure Linux 3.0"},{"ProductID":"21778-17084","Value":"azl3 golang 1.27.0-1 on Azure Linux 3.0"},{"ProductID":"19777-17086","Value":"cbl2 cri-o 1.22.3-14 on CBL Mariner 2.0"}],"Name":"Open Source Software","Type":1}],"Name":"Microsoft","Type":0}],"FullProductName":[{"CPE":"cpe:2.3:o:microsoft:windows_7:6.1.7601.25898:sp1:*:*:*:*:x86:*","ProductID":"10047","Value":"Windows 7 for 32-bit Systems Service Pack 1"},{"CPE":"cpe:2.3:o:microsoft:windows_7:6.1.7601.25898:sp1:*:*:*:*:x64:*","ProductID":"10048","Value":"Windows 7 for x64-based Systems Service Pack 1"},{"CPE":"cpe:2.3:o:microsoft:windows_server_2008_R2:6.1.7601.25898:*:*:*:*:*:x64:*","ProductID":"10049","Value":"Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)"},{"CPE":"cpe:2.3:o:microsoft:windows_server_2008_R2:6.1.7601.25898:*:*:*:*:*:x64:*","ProductID":"10051","Value":"Windows Server 2008 R2 for x64-based Systems Service Pack 1"},{"CPE":"cpe:2.3:o:microsoft:windows_server_2008_sp2:6.0.6003.21416:*:*:*:*:*:x64:*","ProductID":"10287","Value":"Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)"},{"CPE":"cpe:2.3:o:microsoft:windows_server_2012:6.2.9200.23645:*:*:*:*:*:x64:*","ProductID":"10378","Value":"Windows Server 2012"},{"CPE":"cpe:2.3:o:microsoft:windows_server_2012:6.2.9200.23645:*:*:*:*:*:x64:*","ProductID":"10379","Value":"Windows Server 2012 (Server Core installation)"},{"CPE":"cpe:2.3:o:microsoft:windows_8.1:6.3.9600.20303:*:*:*:*:*:x86:*","ProductID":"10481","Value":"Windows 8.1 for 32-bit systems"},{"CPE":"cpe:2.3:o:microsoft:windows_8.1:6.3.9600.20303:*:*:*:*:*:x64:*","ProductID":"10482","Value":"Windows 8.1 for x64-based systems"},{"CPE":"cpe:2.3:o:microsoft:windows_server_2012_R2:6.3.9600.20303:*:*:*:*:*:x64:*","ProductID":"10483","Value":"Windows Server 2012 R2"},{"CPE":"cpe:2.3:o:microsoft:windows_rt_8.1:6.3.9600.20296:*:*:*:*:*:*:*","ProductID":"10484","Value":"Windows RT 8.1"},{"CPE":"cpe:2.3:o:microsoft:windows_server_2012_R2:6.3.9600.20303:*:*:*:*:*:x64:*","ProductID":"10543","Value":"Windows Server 2012 R2 (Server Core installation)"},{"CPE":"cpe:2.3:a:microsoft:word:2013:sp1:*:*:*:*:*:*","ProductID":"10604","Value":"Microsoft Word 2013 Service Pack 1 (32-bit editions)"},{"CPE":"cpe:2.3:a:microsoft:word:2013:sp1:*:*:*:*:*:*","ProductID":"10605","Value":"Microsoft Word 2013 Service Pack 1 (64-bit editions)"},{"CPE":"cpe:2.3:a:microsoft:word:2013:sp1:*:*:*:*:*:*","ProductID":"10606","Value":"Microsoft Word 2013 RT Service Pack 1"},{"CPE":"cpe:2.3:o:microsoft:windows_10_1507:10.0.10240.19235:*:*:*:*:*:x86:*","ProductID":"10729","Value":"Windows 10 for 32-bit Systems"},{"CPE":"cpe:2.3:o:microsoft:windows_10_1507:10.0.10240.19235:*:*:*:*:*:x64:*","ProductID":"10735","Value":"Windows 10 for x64-based Systems"},{"CPE":"cpe:2.3:a:microsoft:word:2016:*:*:*:*:*:*:*","ProductID":"10746","Value":"Microsoft Word 2016 (32-bit edition)"},{"CPE":"cpe:2.3:a:microsoft:word:2016:*:*:*:*:*:*:*","ProductID":"10747","Value":"Microsoft Word 2016 (64-bit edition)"},{"CPE":"cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.5006:*:*:*:*:*:*:*","ProductID":"10816","Value":"Windows Server 2016"},{"CPE":"cpe:2.3:o:microsoft:windows_10_1607:10.0.14393.5006:*:*:*:*:*:x86:*","ProductID":"10852","Value":"Windows 10 Version 1607 for 32-bit Systems"},{"CPE":"cpe:2.3:o:microsoft:windows_10_1607:10.0.14393.5006:*:*:*:*:*:x64:*","ProductID":"10853","Value":"Windows 10 Version 1607 for x64-based Systems"},{"CPE":"cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.5006:*:*:*:*:*:*:*","ProductID":"10855","Value":"Windows Server 2016 (Server Core installation)"},{"CPE":"cpe:2.3:o:microsoft:windows_10_1809:10.0.17763.2686:*:*:*:*:*:x86:*","ProductID":"11568","Value":"Windows 10 Version 1809 for 32-bit Systems"},{"CPE":"cpe:2.3:o:microsoft:windows_10_1809:10.0.17763.2686:*:*:*:*:*:x64:*","ProductID":"11569","Value":"Windows 10 Version 1809 for x64-based Systems"},{"CPE":"cpe:2.3:o:microsoft:windows_10_1809:10.0.17763.2686:*:*:*:*:*:arm64:*","ProductID":"11570","Value":"Windows 10 Version 1809 for ARM64-based Systems"},{"CPE":"cpe:2.3:o:microsoft:windows_server_2019:10.0.17763.2686:*:*:*:*:*:*:*","ProductID":"11571","Value":"Windows Server 2019"},{"CPE":"cpe:2.3:o:microsoft:windows_server_2019:10.0.17763.2686:*:*:*:*:*:*:*","ProductID":"11572","Value":"Windows Server 2019 (Server Core installation)"},{"CPE":"cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:*:*","ProductID":"11573","Value":"Microsoft Office 2019 for 32-bit editions"},{"CPE":"cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:*:*","ProductID":"11574","Value":"Microsoft Office 2019 for 64-bit editions"},{"CPE":"cpe:2.3:a:microsoft:office:2019:*:*:*:*:macos:*:*","ProductID":"11575","Value":"Microsoft Office 2019 for Mac"},{"CPE":"cpe:2.3:a:microsoft:visual_studio_code:*:*:*:*:*:*:*:*","ProductID":"11622","Value":"Visual Studio Code"},{"CPE":"cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:*","ProductID":"11655","Value":"Microsoft Edge (Chromium-based)"},{"CPE":"cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_23:*:*:*:*:*:*","ProductID":"11682","Value":"Microsoft Exchange Server 2013 Cumulative Update 23"},{"CPE":"cpe:2.3:o:microsoft:windows_10_1909:10.0.18363.2158:*:*:*:*:*:x86:*","ProductID":"11712","Value":"Windows 10 Version 1909 for 32-bit Systems"},{"CPE":"cpe:2.3:o:microsoft:windows_10_1909:10.0.18363.2158:*:*:*:*:*:x64:*","ProductID":"11713","Value":"Windows 10 Version 1909 for x64-based Systems"},{"CPE":"cpe:2.3:o:microsoft:windows_10_1809:10.0.18363.2158:*:*:*:*:*:x64:*","ProductID":"11714","Value":"Windows 10 Version 1909 for ARM64-based Systems"},{"CPE":"cpe:2.3:a:microsoft:.net_core:*:*:*:*:*:*:*:*","ProductID":"11730","Value":".NET Core 3.1"},{"CPE":"cpe:2.3:a:microsoft:powershell_core:*:*:*:*:*:*:*:*","ProductID":"11745","Value":"PowerShell 7.0"},{"CPE":"cpe:2.3:a:microsoft:paint_3d:-:*:*:*:*:*:*:*","ProductID":"11758","Value":"Paint 3D"},{"CPE":"cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*","ProductID":"11761","Value":".NET 5.0"},{"CPE":"cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*","ProductID":"11762","Value":"Microsoft 365 Apps for Enterprise for 32-bit Systems"},{"CPE":"cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*","ProductID":"11763","Value":"Microsoft 365 Apps for Enterprise for 64-bit Systems"},{"CPE":"cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*","ProductID":"11785","Value":"Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6)"},{"CPE":"cpe:2.3:o:microsoft:windows_10_20H2:10.0.19042.1586:*:*:*:*:*:x86:*","ProductID":"11801","Value":"Windows 10 Version 20H2 for 32-bit Systems"},{"CPE":"cpe:2.3:o:microsoft:windows_10_20H2:10.0.19042.1586:*:*:*:*:*:arm64:*","ProductID":"11802","Value":"Windows 10 Version 20H2 for ARM64-based Systems"},{"CPE":"cpe:2.3:o:microsoft:windows_server_20H2:10.0.19042.1586:*:*:*:*:*:*:*","ProductID":"11803","Value":"Windows Server, version 20H2 (Server Core Installation)"},{"CPE":"cpe:2.3:a:microsoft:raw_image_extension:-:*:*:*:*:*:*:*","ProductID":"11804-10729","Value":"Raw Image Extension on Windows 10 for 32-bit Systems"},{"CPE":"cpe:2.3:a:microsoft:raw_image_extension:-:*:*:*:*:*:*:*","ProductID":"11804-10735","Value":"Raw Image Extension on Windows 10 for x64-based Systems"},{"CPE":"cpe:2.3:a:microsoft:raw_image_extension:-:*:*:*:*:*:*:*","ProductID":"11804-10852","Value":"Raw Image Extension on Windows 10 Version 1607 for 32-bit Systems"},{"CPE":"cpe:2.3:a:microsoft:raw_image_extension:-:*:*:*:*:*:*:*","ProductID":"11804-10853","Value":"Raw Image Extension on Windows 10 Version 1607 for x64-based Systems"},{"CPE":"cpe:2.3:a:microsoft:raw_image_extension:-:*:*:*:*:*:*:*","ProductID":"11804-11568","Value":"Raw Image Extension on Windows 10 Version 1809 for 32-bit Systems"},{"CPE":"cpe:2.3:a:microsoft:raw_image_extension:-:*:*:*:*:*:*:*","ProductID":"11804-11569","Value":"Raw Image Extension on Windows 10 Version 1809 for x64-based Systems"},{"CPE":"cpe:2.3:a:microsoft:raw_image_extension:-:*:*:*:*:*:*:*","ProductID":"11804-11570","Value":"Raw Image Extension on Windows 10 Version 1809 for ARM64-based Systems"},{"CPE":"cpe:2.3:a:microsoft:raw_image_extension:-:*:*:*:*:*:*:*","ProductID":"11804-11673","Value":"Raw Image Extension on Windows 10 Version 1809 for HoloLens"},{"CPE":"cpe:2.3:a:microsoft:raw_image_extension:-:*:*:*:*:*:*:*","ProductID":"11804-11712","Value":"Raw Image Extension on Windows 10 Version 1909 for 32-bit Systems"},{"CPE":"cpe:2.3:a:microsoft:raw_image_extension:-:*:*:*:*:*:*:*","ProductID":"11804-11713","Value":"Raw Image Extension on Windows 10 Version 1909 for x64-based Systems"},{"CPE":"cpe:2.3:a:microsoft:raw_image_extension:-:*:*:*:*:*:*:*","ProductID":"11804-11714","Value":"Raw Image Extension on Windows 10 Version 1909 for ARM64-based Systems"},{"CPE":"cpe:2.3:a:microsoft:raw_image_extension:-:*:*:*:*:*:*:*","ProductID":"11804-11801","Value":"Raw Image Extension on Windows 10 Version 20H2 for 32-bit Systems"},{"CPE":"cpe:2.3:a:microsoft:raw_image_extension:-:*:*:*:*:*:*:*","ProductID":"11804-11802","Value":"Raw Image Extension on Windows 10 Version 20H2 for ARM64-based Systems"},{"CPE":"cpe:2.3:a:microsoft:raw_image_extension:-:*:*:*:*:*:*:*","ProductID":"11804-11896","Value":"Raw Image Extension on Windows 10 Version 21H1 for x64-based Systems"},{"CPE":"cpe:2.3:a:microsoft:raw_image_extension:-:*:*:*:*:*:*:*","ProductID":"11804-11897","Value":"Raw Image Extension on Windows 10 Version 21H1 for ARM64-based Systems"},{"CPE":"cpe:2.3:a:microsoft:raw_image_extension:-:*:*:*:*:*:*:*","ProductID":"11804-11898","Value":"Raw Image Extension on Windows 10 Version 21H1 for 32-bit Systems"},{"CPE":"cpe:2.3:a:microsoft:raw_image_extension:-:*:*:*:*:*:*:*","ProductID":"11804-11926","Value":"Raw Image Extension on Windows 11 version 21H2 for x64-based Systems"},{"CPE":"cpe:2.3:a:microsoft:raw_image_extension:-:*:*:*:*:*:*:*","ProductID":"11804-11927","Value":"Raw Image Extension on Windows 11 version 21H2 for ARM64-based Systems"},{"CPE":"cpe:2.3:a:microsoft:raw_image_extension:-:*:*:*:*:*:*:*","ProductID":"11804-11929","Value":"Raw Image Extension on Windows 10 Version 21H2 for 32-bit Systems"},{"CPE":"cpe:2.3:a:microsoft:raw_image_extension:-:*:*:*:*:*:*:*","ProductID":"11804-11930","Value":"Raw Image Extension on Windows 10 Version 21H2 for ARM64-based Systems"},{"CPE":"cpe:2.3:a:microsoft:raw_image_extension:-:*:*:*:*:*:*:*","ProductID":"11804-11931","Value":"Raw Image Extension on Windows 10 Version 21H2 for x64-based Systems"},{"CPE":"cpe:2.3:a:microsoft:heif_image_extension:*:*:*:*:*:*:*:*","ProductID":"11805","Value":"HEIF Image Extension"},{"CPE":"cpe:2.3:a:microsoft:hevc_video_extensions:*:*:*:*:*:*:*:*","ProductID":"11808","Value":"HEVC Video Extensions"},{"CPE":"cpe:2.3:a:microsoft:remote_desktop:-:*:*:*:*:windows:*:*","ProductID":"11849","Value":"Remote Desktop client for Windows Desktop"},{"CPE":"cpe:2.3:a:microsoft:visual_studio_2019:16.9:*:*:*:*:*:*:*","ProductID":"11872","Value":"Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)"},{"CPE":"cpe:2.3:a:microsoft:vp9_video_extensions:*:*:*:*:*:*:*:*","ProductID":"11884","Value":"VP9 Video Extensions"},{"CPE":"cpe:2.3:o:microsoft:windows_10_21H1:10.0.19043.1586:*:*:*:*:*:x64:*","ProductID":"11896","Value":"Windows 10 Version 21H1 for x64-based Systems"},{"CPE":"cpe:2.3:o:microsoft:windows_10_21H1:10.0.19043.1586:*:*:*:*:*:arm64:*","ProductID":"11897","Value":"Windows 10 Version 21H1 for ARM64-based Systems"},{"CPE":"cpe:2.3:o:microsoft:windows_10_21H1:10.0.19043.1586:*:*:*:*:*:x86:*","ProductID":"11898","Value":"Windows 10 Version 21H1 for 32-bit Systems"},{"CPE":"cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_21:*:*:*:*:*:*","ProductID":"11906","Value":"Microsoft Exchange Server 2016 Cumulative Update 21"},{"CPE":"cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_10:*:*:*:*:*:*","ProductID":"11908","Value":"Microsoft Exchange Server 2019 Cumulative Update 10"},{"CPE":"cpe:2.3:o:microsoft:windows_server_2022:10.0.20348.587:*:*:*:*:*:*:*","ProductID":"11923","Value":"Windows Server 2022"},{"CPE":"cpe:2.3:o:microsoft:windows_server_2022:10.0.20348.587:*:*:*:*:*:*:*","ProductID":"11924","Value":"Windows Server 2022 (Server Core installation)"},{"CPE":"cpe:2.3:a:microsoft:powershell_core:*:*:*:*:*:*:*:*","ProductID":"11925","Value":"PowerShell 7.1"},{"CPE":"cpe:2.3:o:microsoft:windows_11_21H2:10.0.22000.556:*:*:*:*:*:x64:*","ProductID":"11926","Value":"Windows 11 version 21H2 for x64-based Systems"},{"CPE":"cpe:2.3:o:microsoft:windows_11_21H2:10.0.22000.556:*:*:*:*:*:arm64:*","ProductID":"11927","Value":"Windows 11 version 21H2 for ARM64-based Systems"},{"CPE":"cpe:2.3:o:microsoft:windows_10_21H2:10.0.19043.1586:*:*:*:*:*:x86:*","ProductID":"11929","Value":"Windows 10 Version 21H2 for 32-bit Systems"},{"CPE":"cpe:2.3:o:microsoft:windows_10_21H2:10.0.19044.1586:*:*:*:*:*:arm64:*","ProductID":"11930","Value":"Windows 10 Version 21H2 for ARM64-based Systems"},{"CPE":"cpe:2.3:o:microsoft:windows_10_21H2:10.0.19044.1586:*:*:*:*:*:x64:*","ProductID":"11931","Value":"Windows 10 Version 21H2 for x64-based Systems"},{"CPE":"cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*","ProductID":"11935","Value":"Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)"},{"CPE":"cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:macos:*:*","ProductID":"11951","Value":"Microsoft Office LTSC for Mac 2021"},{"CPE":"cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:*:*:*","ProductID":"11952","Value":"Microsoft Office LTSC 2021 for 64-bit editions"},{"CPE":"cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:*:*:*","ProductID":"11953","Value":"Microsoft Office LTSC 2021 for 32-bit editions"},{"CPE":"cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_22:*:*:*:*:*:*","ProductID":"11956","Value":"Microsoft Exchange Server 2016 Cumulative Update 22"},{"CPE":"cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_11:*:*:*:*:*:*","ProductID":"11957","Value":"Microsoft Exchange Server 2019 Cumulative Update 11"},{"CPE":"cpe:2.3:a:microsoft:defender_for_iot:-:*:*:*:*:*:*:*","ProductID":"11967","Value":"Microsoft Defender for IoT"},{"CPE":"cpe:2.3:a:microsoft:visual_studio_2022:17.0:*:*:*:*:*:*:*","ProductID":"11969","Value":"Microsoft Visual Studio 2022 version 17.0"},{"CPE":"cpe:2.3:a:microsoft:powershell:7.2:*:*:*:*:*:*:*","ProductID":"11970","Value":"PowerShell 7.2"},{"CPE":"cpe:2.3:a:microsoft:.net:6.0.0:*:*:*:*:*:*:*","ProductID":"12009","Value":".NET 6.0"},{"CPE":"cpe:2.3:a:microsoft:hevc_video_extensions:*:*:*:*:*:*:*:*","ProductID":"12010","Value":"HEVC Video Extension"},{"CPE":"cpe:2.3:a:microsoft:intune_company_portal:-:*:*:*:*:iphone_os:*:*","ProductID":"12012","Value":"Intune Company Portal for iOS"},{"CPE":"cpe:2.3:a:microsoft:defender_for_endpoint:-:*:*:*:*:*:*:*","ProductID":"12013","Value":"Microsoft Defender for Endpoint for Windows on Windows Server 2022 Datacenter: Azure Edition"},{"CPE":"cpe:2.3:a:microsoft:defender_for_endpoint:-:*:*:*:*:*:*:*","ProductID":"12013-11568","Value":"Microsoft Defender for Endpoint for Windows on Windows 10 Version 1809 for 32-bit Systems"},{"CPE":"cpe:2.3:a:microsoft:defender_for_endpoint:-:*:*:*:*:*:*:*","ProductID":"12013-11569","Value":"Microsoft Defender for Endpoint for Windows on Windows 10 Version 1809 for x64-based Systems"},{"CPE":"cpe:2.3:a:microsoft:defender_for_endpoint:-:*:*:*:*:*:*:*","ProductID":"12013-11570","Value":"Microsoft Defender for Endpoint for Windows on Windows 10 Version 1809 for ARM64-based Systems"},{"CPE":"cpe:2.3:a:microsoft:defender_for_endpoint:-:*:*:*:*:*:*:*","ProductID":"12013-11571","Value":"Microsoft Defender for Endpoint for Windows on Windows Server 2019"},{"CPE":"cpe:2.3:a:microsoft:defender_for_endpoint:-:*:*:*:*:*:*:*","ProductID":"12013-11572","Value":"Microsoft Defender for Endpoint for Windows on Windows Server 2019 (Server Core installation)"},{"CPE":"cpe:2.3:a:microsoft:defender_for_endpoint:-:*:*:*:*:*:*:*","ProductID":"12013-11712","Value":"Microsoft Defender for Endpoint for Windows on Windows 10 Version 1909 for 32-bit Systems"},{"CPE":"cpe:2.3:a:microsoft:defender_for_endpoint:-:*:*:*:*:*:*:*","ProductID":"12013-11713","Value":"Microsoft Defender for Endpoint for Windows on Windows 10 Version 1909 for x64-based Systems"},{"CPE":"cpe:2.3:a:microsoft:defender_for_endpoint:-:*:*:*:*:*:*:*","ProductID":"12013-11714","Value":"Microsoft Defender for Endpoint for Windows on Windows 10 Version 1909 for ARM64-based Systems"},{"CPE":"cpe:2.3:a:microsoft:defender_for_endpoint:-:*:*:*:*:*:*:*","ProductID":"12013-11801","Value":"Microsoft Defender for Endpoint for Windows on Windows 10 Version 20H2 for 32-bit Systems"},{"CPE":"cpe:2.3:a:microsoft:defender_for_endpoint:-:*:*:*:*:*:*:*","ProductID":"12013-11802","Value":"Microsoft Defender for Endpoint for Windows on Windows 10 Version 20H2 for ARM64-based Systems"},{"CPE":"cpe:2.3:a:microsoft:defender_for_endpoint:-:*:*:*:*:*:*:*","ProductID":"12013-11803","Value":"Microsoft Defender for Endpoint for Windows on Windows Server, version 20H2 (Server Core Installation)"},{"CPE":"cpe:2.3:a:microsoft:defender_for_endpoint:-:*:*:*:*:*:*:*","ProductID":"12013-11896","Value":"Microsoft Defender for Endpoint for Windows on Windows 10 Version 21H1 for x64-based Systems"},{"CPE":"cpe:2.3:a:microsoft:defender_for_endpoint:-:*:*:*:*:*:*:*","ProductID":"12013-11897","Value":"Microsoft Defender for Endpoint for Windows on Windows 10 Version 21H1 for ARM64-based Systems"},{"CPE":"cpe:2.3:a:microsoft:defender_for_endpoint:-:*:*:*:*:*:*:*","ProductID":"12013-11898","Value":"Microsoft Defender for Endpoint for Windows on Windows 10 Version 21H1 for 32-bit Systems"},{"CPE":"cpe:2.3:a:microsoft:defender_for_endpoint:-:*:*:*:*:*:*:*","ProductID":"12013-11923","Value":"Microsoft Defender for Endpoint for Windows on Windows Server 2022"},{"CPE":"cpe:2.3:a:microsoft:defender_for_endpoint:-:*:*:*:*:*:*:*","ProductID":"12013-11924","Value":"Microsoft Defender for Endpoint for Windows on Windows Server 2022 (Server Core installation)"},{"CPE":"cpe:2.3:a:microsoft:defender_for_endpoint:-:*:*:*:*:*:*:*","ProductID":"12013-11926","Value":"Microsoft Defender for Endpoint for Windows on Windows 11 version 21H2 for x64-based Systems"},{"CPE":"cpe:2.3:a:microsoft:defender_for_endpoint:-:*:*:*:*:*:*:*","ProductID":"12013-11927","Value":"Microsoft Defender for Endpoint for Windows on Windows 11 version 21H2 for ARM64-based Systems"},{"CPE":"cpe:2.3:a:microsoft:defender_for_endpoint:-:*:*:*:*:*:*:*","ProductID":"12013-11929","Value":"Microsoft Defender for Endpoint for Windows on Windows 10 Version 21H2 for 32-bit Systems"},{"CPE":"cpe:2.3:a:microsoft:defender_for_endpoint:-:*:*:*:*:*:*:*","ProductID":"12013-11930","Value":"Microsoft Defender for Endpoint for Windows on Windows 10 Version 21H2 for ARM64-based Systems"},{"CPE":"cpe:2.3:a:microsoft:defender_for_endpoint:-:*:*:*:*:*:*:*","ProductID":"12013-11931","Value":"Microsoft Defender for Endpoint for Windows on Windows 10 Version 21H2 for x64-based Systems"},{"CPE":"cpe:2.3:a:microsoft:defender_for_endpoint:-:*:*:*:*:macos:*:*","ProductID":"12014","Value":"Microsoft Defender for Endpoint for Mac"},{"CPE":"cpe:2.3:a:microsoft:defender_for_endpoint:-:*:*:*:*:*:*:*","ProductID":"12015","Value":"Microsoft Defender for Endpoint for Linux"},{"CPE":"cpe:2.3:a:microsoft:skype_extension:*:*:*:*:*:chrome:*:*","ProductID":"12016","Value":"Skype Extension for Chrome"},{"CPE":"cpe:2.3:a:microsoft:azure_site_recovery:*:*:*:*:*:*:*:*","ProductID":"12018","Value":"Azure Site Recovery VMWare to Azure"},{"CPE":"cpe:2.3:a:microsoft:defender_for_endpoint:*:*:*:*:*:*:*:*","ProductID":"12019","Value":"Microsoft Defender for Endpoint for Android"},{"CPE":"cpe:2.3:a:microsoft:visual_studio_2022:17.1:*:*:*:*:*:*:*","ProductID":"12020","Value":"Microsoft Visual Studio 2022 version 17.1"},{"CPE":"cpe:2.3:a:microsoft:defender_for_endpoint_edr_sensor:*:*:*:*:*:*:*:*","ProductID":"12021-10483","Value":"Microsoft Defender for Endpoint EDR sensor on Windows Server 2012 R2"},{"CPE":"cpe:2.3:a:microsoft:defender_for_endpoint_edr_sensor:*:*:*:*:*:*:*:*","ProductID":"12021-10543","Value":"Microsoft Defender for Endpoint EDR sensor on Windows Server 2012 R2 (Server Core installation)"},{"CPE":"cpe:2.3:a:microsoft:defender_for_endpoint_edr_sensor:*:*:*:*:*:*:*:*","ProductID":"12021-10816","Value":"Microsoft Defender for Endpoint EDR sensor on Windows Server 2016"},{"CPE":"cpe:2.3:a:microsoft:defender_for_endpoint_edr_sensor:*:*:*:*:*:*:*:*","ProductID":"12021-10855","Value":"Microsoft Defender for Endpoint EDR sensor on Windows Server 2016 (Server Core installation)"},{"CPE":"cpe:2.3:a:microsoft:defender_for_endpoint:-:*:*:*:*:*:*:*","ProductID":"12023","Value":"Microsoft Defender for Endpoint for iOS"},{"CPE":"cpe:2.3:o:microsoft:cbl_mariner:1.0:*:*:*:*:*:*:x64","ProductID":"12137","Value":"CBL Mariner 1.0 x64"},{"CPE":"cpe:2.3:o:microsoft:cbl_mariner:1.0:*:*:*:*:*:*:arm","ProductID":"12138","Value":"CBL Mariner 1.0 ARM"},{"CPE":"cpe:2.3:o:microsoft:cbl_mariner:2.0:*:*:*:*:*:*:x64","ProductID":"12139","Value":"CBL Mariner 2.0 x64"},{"CPE":"cpe:2.3:o:microsoft:cbl_mariner:2.0:*:*:*:*:*:*:arm","ProductID":"12140","Value":"CBL Mariner 2.0 ARM"},{"CPE":"cpe:2.3:a:microsoft:azl3_teckit_2.5.12-4:*:*:*:*:*:*:*:*","ProductID":"16825-16817","Value":"azl3 teckit 2.5.12-4 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_teckit_2.5.12-4:*:*:*:*:*:*:*:*","ProductID":"16825-17084","Value":"azl3 teckit 2.5.12-4 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_qt5-qtsvg_5.12.11-3:*:*:*:*:*:*:*:*","ProductID":"16857-16823","Value":"cbl2 qt5-qtsvg 5.12.11-3 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_samba_4.18.3-1:*:*:*:*:*:*:*:*","ProductID":"16864-17084","Value":"azl3 samba 4.18.3-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cm1_boost_1.66.0-4:*:*:*:*:*:*:*:*","ProductID":"16947-16820","Value":"cm1 boost 1.66.0-4 on CBL Mariner 1.0"},{"CPE":"cpe:2.3:a:microsoft:cm1_openjdk8_1.8.0.332-2:*:*:*:*:*:*:*:*","ProductID":"16968-16820","Value":"cm1 openjdk8 1.8.0.332-2 on CBL Mariner 1.0"},{"CPE":"cpe:2.3:a:microsoft:cm1_tcl_8.6.13-1:*:*:*:*:*:*:*:*","ProductID":"16969-16820","Value":"cm1 tcl 8.6.13-1 on CBL Mariner 1.0"},{"CPE":"cpe:2.3:a:microsoft:cm1_python2_2.7.18-13:*:*:*:*:*:*:*:*","ProductID":"16970-16820","Value":"cm1 python2 2.7.18-13 on CBL Mariner 1.0"},{"CPE":"cpe:2.3:a:microsoft:cm1_grpc_1.35.0-4:*:*:*:*:*:*:*:*","ProductID":"16971-16820","Value":"cm1 grpc 1.35.0-4 on CBL Mariner 1.0"},{"CPE":"cpe:2.3:a:microsoft:cm1_erlang_24.2-2:*:*:*:*:*:*:*:*","ProductID":"16972-16820","Value":"cm1 erlang 24.2-2 on CBL Mariner 1.0"},{"CPE":"cpe:2.3:a:microsoft:cm1_ccache_3.6-3:*:*:*:*:*:*:*:*","ProductID":"16973-16820","Value":"cm1 ccache 3.6-3 on CBL Mariner 1.0"},{"CPE":"cpe:2.3:a:microsoft:cm1_python3_3.7.13-5:*:*:*:*:*:*:*:*","ProductID":"16974-16820","Value":"cm1 python3 3.7.13-5 on CBL Mariner 1.0"},{"CPE":"cpe:2.3:a:microsoft:cm1_mariadb_10.3.36-1:*:*:*:*:*:*:*:*","ProductID":"16975-16820","Value":"cm1 mariadb 10.3.36-1 on CBL Mariner 1.0"},{"CPE":"cpe:2.3:a:microsoft:cm1_zlib_1.2.12-1:*:*:*:*:*:*:*:*","ProductID":"16976-16820","Value":"cm1 zlib 1.2.12-1 on CBL Mariner 1.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_cloud-hypervisor-cvm_38.0.72.2-1:*:*:*:*:*:*:*:*","ProductID":"16977-16823","Value":"cbl2 cloud-hypervisor-cvm 38.0.72.2-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_tcl_8.6.13-1:*:*:*:*:*:*:*:*","ProductID":"16978-16823","Value":"cbl2 tcl 8.6.13-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_nmap_7.93-1:*:*:*:*:*:*:*:*","ProductID":"16979-16823","Value":"cbl2 nmap 7.93-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_boost_1.76.0-3:*:*:*:*:*:*:*:*","ProductID":"16980-16823","Value":"cbl2 boost 1.76.0-3 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_zlib_1.2.12-1:*:*:*:*:*:*:*:*","ProductID":"16981-16823","Value":"cbl2 zlib 1.2.12-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_cloud-hypervisor-cvm_38.0.72.2-1:*:*:*:*:*:*:*:*","ProductID":"16982-16817","Value":"azl3 cloud-hypervisor-cvm 38.0.72.2-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_cloud-hypervisor-cvm_38.0.72.2-1:*:*:*:*:*:*:*:*","ProductID":"16982-17084","Value":"azl3 cloud-hypervisor-cvm 38.0.72.2-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_shim-unsigned-x64_15.8-5:*:*:*:*:*:*:*:*","ProductID":"17012-17084","Value":"azl3 shim-unsigned-x64 15.8-5 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_shim-unsigned-aarch64_15.8-5:*:*:*:*:*:*:*:*","ProductID":"17013-17084","Value":"azl3 shim-unsigned-aarch64 15.8-5 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_python-tensorboard_2.16.2-2:*:*:*:*:*:*:*:*","ProductID":"17021-17084","Value":"azl3 python-tensorboard 2.16.2-2 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_qemu_6.2.0-24:*:*:*:*:*:*:*:*","ProductID":"17093-17086","Value":"cbl2 qemu 6.2.0-24 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_cri-o_1.21.7-2:*:*:*:*:*:*:*:*","ProductID":"17367-16823","Value":"cbl2 cri-o 1.21.7-2 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_qt5-qtbase_5.12.11-15:*:*:*:*:*:*:*:*","ProductID":"17384-17086","Value":"cbl2 qt5-qtbase 5.12.11-15 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_qemu_8.2.0-16:*:*:*:*:*:*:*:*","ProductID":"17459-17084","Value":"azl3 qemu 8.2.0-16 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_python-waitress_3.0.1-1:*:*:*:*:*:*:*:*","ProductID":"17597-17084","Value":"azl3 python-waitress 3.0.1-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_rust_1.75.0-1:*:*:*:*:*:*:*:*","ProductID":"17735-17084","Value":"azl3 rust 1.75.0-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_rpm-ostree_2024.4-1:*:*:*:*:*:*:*:*","ProductID":"17811-17084","Value":"azl3 rpm-ostree 2024.4-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_openssh_8.9p1-1:*:*:*:*:*:*:*:*","ProductID":"17826-16823","Value":"cbl2 openssh 8.9p1-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_edk2_20230301gitf80f052277c8-37:*:*:*:*:*:*:*:*","ProductID":"17859-17084","Value":"azl3 edk2 20230301gitf80f052277c8-37 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_cmake_3.21.4-10:*:*:*:*:*:*:*:*","ProductID":"17879-17084","Value":"azl3 cmake 3.21.4-10 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cm1_hyperv-daemons_5.10.168.1-1:*:*:*:*:*:*:*:*","ProductID":"17993-16820","Value":"cm1 hyperv-daemons 5.10.168.1-1 on CBL Mariner 1.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_hyperv-daemons_5.15.92.1-1:*:*:*:*:*:*:*:*","ProductID":"17995-16823","Value":"cbl2 hyperv-daemons 5.15.92.1-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_edk2_20240223gitedc6681206c1-1:*:*:*:*:*:*:*:*","ProductID":"18131-17084","Value":"azl3 edk2 20240223gitedc6681206c1-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cm1_kernel_5.10.111.1-1:*:*:*:*:*:*:*:*","ProductID":"18454-16820","Value":"cm1 kernel 5.10.111.1-1 on CBL Mariner 1.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_kernel_5.15.32.1-3:*:*:*:*:*:*:*:*","ProductID":"18455-16823","Value":"cbl2 kernel 5.15.32.1-3 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_kernel_5.15.32.1-2:*:*:*:*:*:*:*:*","ProductID":"18476-16823","Value":"cbl2 kernel 5.15.32.1-2 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cm1_qemu-kvm_4.2.0-48:*:*:*:*:*:*:*:*","ProductID":"18533-16820","Value":"cm1 qemu-kvm 4.2.0-48 on CBL Mariner 1.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_qemu_6.2.0-18:*:*:*:*:*:*:*:*","ProductID":"18535-17084","Value":"azl3 qemu 6.2.0-18 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cm1_kernel_5.10.131.1-1:*:*:*:*:*:*:*:*","ProductID":"18667-16820","Value":"cm1 kernel 5.10.131.1-1 on CBL Mariner 1.0"},{"CPE":"cpe:2.3:a:microsoft:cm1_kernel_5.10.123.1-1:*:*:*:*:*:*:*:*","ProductID":"18685-16820","Value":"cm1 kernel 5.10.123.1-1 on CBL Mariner 1.0"},{"CPE":"cpe:2.3:a:microsoft:cm1_moby-runc_1.1.2+azure-1:*:*:*:*:*:*:*:*","ProductID":"18701-16820","Value":"cm1 moby-runc 1.1.2+azure-1 on CBL Mariner 1.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_moby-runc_1.1.2-2:*:*:*:*:*:*:*:*","ProductID":"18702-16823","Value":"cbl2 moby-runc 1.1.2-2 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cm1_kernel_5.10.116.1-1:*:*:*:*:*:*:*:*","ProductID":"18719-16820","Value":"cm1 kernel 5.10.116.1-1 on CBL Mariner 1.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_kernel_5.15.37.1-2:*:*:*:*:*:*:*:*","ProductID":"18720-16823","Value":"cbl2 kernel 5.15.37.1-2 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cm1_libtiff_4.4.0-1:*:*:*:*:*:*:*:*","ProductID":"18727-16820","Value":"cm1 libtiff 4.4.0-1 on CBL Mariner 1.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_libtiff_4.3.0-2:*:*:*:*:*:*:*:*","ProductID":"18728-16823","Value":"cbl2 libtiff 4.3.0-2 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cm1_vim_8.2.4763-1:*:*:*:*:*:*:*:*","ProductID":"18741-16820","Value":"cm1 vim 8.2.4763-1 on CBL Mariner 1.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_kernel_5.15.41.1-1:*:*:*:*:*:*:*:*","ProductID":"18752-16823","Value":"cbl2 kernel 5.15.41.1-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cm1_qemu-kvm_4.2.0-38:*:*:*:*:*:*:*:*","ProductID":"18756-16820","Value":"cm1 qemu-kvm 4.2.0-38 on CBL Mariner 1.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_qemu_6.2.0-2:*:*:*:*:*:*:*:*","ProductID":"18757-16823","Value":"cbl2 qemu 6.2.0-2 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_vim_8.2.4743-1:*:*:*:*:*:*:*:*","ProductID":"18758-16823","Value":"cbl2 vim 8.2.4743-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cm1_bind_9.16.27-1:*:*:*:*:*:*:*:*","ProductID":"18759-16820","Value":"cm1 bind 9.16.27-1 on CBL Mariner 1.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_bind_9.16.29-1:*:*:*:*:*:*:*:*","ProductID":"18760-16823","Value":"cbl2 bind 9.16.29-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cm1_vim_8.2.4563-1:*:*:*:*:*:*:*:*","ProductID":"18761-16820","Value":"cm1 vim 8.2.4563-1 on CBL Mariner 1.0"},{"CPE":"cpe:2.3:a:microsoft:cm1_kernel_5.10.109.1-2:*:*:*:*:*:*:*:*","ProductID":"18762-16820","Value":"cm1 kernel 5.10.109.1-2 on CBL Mariner 1.0"},{"CPE":"cpe:2.3:a:microsoft:cm1_openssl_1.1.1k-9:*:*:*:*:*:*:*:*","ProductID":"18763-16820","Value":"cm1 openssl 1.1.1k-9 on CBL Mariner 1.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_openssl_1.1.1k-12:*:*:*:*:*:*:*:*","ProductID":"18764-16823","Value":"cbl2 openssl 1.1.1k-12 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_kernel_5.15.26.1-2:*:*:*:*:*:*:*:*","ProductID":"18765-16823","Value":"cbl2 kernel 5.15.26.1-2 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cm1_httpd_2.4.53-1:*:*:*:*:*:*:*:*","ProductID":"18766-16820","Value":"cm1 httpd 2.4.53-1 on CBL Mariner 1.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_httpd_2.4.53-1:*:*:*:*:*:*:*:*","ProductID":"18767-16823","Value":"cbl2 httpd 2.4.53-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cm1_kernel_5.10.102.1-3:*:*:*:*:*:*:*:*","ProductID":"18768-16820","Value":"cm1 kernel 5.10.102.1-3 on CBL Mariner 1.0"},{"CPE":"cpe:2.3:a:microsoft:cm1_libtiff_4.1.0-3:*:*:*:*:*:*:*:*","ProductID":"18769-16820","Value":"cm1 libtiff 4.1.0-3 on CBL Mariner 1.0"},{"CPE":"cpe:2.3:a:microsoft:cm1_moby-containerd_1.5.9+azure-3:*:*:*:*:*:*:*:*","ProductID":"18770-16820","Value":"cm1 moby-containerd 1.5.9+azure-3 on CBL Mariner 1.0"},{"CPE":"cpe:2.3:a:microsoft:cm1_golang_1.16.15-1:*:*:*:*:*:*:*:*","ProductID":"18771-16820","Value":"cm1 golang 1.16.15-1 on CBL Mariner 1.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_golang_1.17.8-1:*:*:*:*:*:*:*:*","ProductID":"18772-16823","Value":"cbl2 golang 1.17.8-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cm1_qt5-qtsvg_5.12.11-3:*:*:*:*:*:*:*:*","ProductID":"18773-16820","Value":"cm1 qt5-qtsvg 5.12.11-3 on CBL Mariner 1.0"},{"CPE":"cpe:2.3:a:microsoft:cm1_kernel_5.10.102.1-1:*:*:*:*:*:*:*:*","ProductID":"18780-16820","Value":"cm1 kernel 5.10.102.1-1 on CBL Mariner 1.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_kernel_5.15.26.1-1:*:*:*:*:*:*:*:*","ProductID":"18781-16823","Value":"cbl2 kernel 5.15.26.1-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_rpm-ostree_2022.1-7:*:*:*:*:*:*:*:*","ProductID":"18815-17084","Value":"azl3 rpm-ostree 2022.1-7 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_rust_regex-1.8.4:*:*:*:*:*:*:*:*","ProductID":"18816-17084","Value":"azl3 rust regex-1.8.4 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_librsvg2_2.58.1-1:*:*:*:*:*:*:*:*","ProductID":"18817-17084","Value":"azl3 librsvg2 2.58.1-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_re2c_3.1-4:*:*:*:*:*:*:*:*","ProductID":"18824-17084","Value":"azl3 re2c 3.1-4 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_grub2_2.06-14:*:*:*:*:*:*:*:*","ProductID":"18842-17084","Value":"azl3 grub2 2.06-14 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cm1_python2_2.7.18-10:*:*:*:*:*:*:*:*","ProductID":"18878-16820","Value":"cm1 python2 2.7.18-10 on CBL Mariner 1.0"},{"CPE":"cpe:2.3:a:microsoft:cm1_vsftpd_3.0.5-1:*:*:*:*:*:*:*:*","ProductID":"18882-16820","Value":"cm1 vsftpd 3.0.5-1 on CBL Mariner 1.0"},{"CPE":"cpe:2.3:a:microsoft:cm1_nginx_1.20.1-3:*:*:*:*:*:*:*:*","ProductID":"18883-16820","Value":"cm1 nginx 1.20.1-3 on CBL Mariner 1.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_sendmail_8.15.2-46:*:*:*:*:*:*:*:*","ProductID":"18884-16823","Value":"cbl2 sendmail 8.15.2-46 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_vsftpd_3.0.5-1:*:*:*:*:*:*:*:*","ProductID":"18885-16823","Value":"cbl2 vsftpd 3.0.5-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_nginx_1.20.2-2:*:*:*:*:*:*:*:*","ProductID":"18886-16823","Value":"cbl2 nginx 1.20.2-2 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cm1_qemu-kvm_4.2.0-39:*:*:*:*:*:*:*:*","ProductID":"18887-16820","Value":"cm1 qemu-kvm 4.2.0-39 on CBL Mariner 1.0"},{"CPE":"cpe:2.3:a:microsoft:cm1_openssh_8.9p1-1:*:*:*:*:*:*:*:*","ProductID":"18888-16820","Value":"cm1 openssh 8.9p1-1 on CBL Mariner 1.0"},{"CPE":"cpe:2.3:a:microsoft:cm1_python3_3.7.11-1:*:*:*:*:*:*:*:*","ProductID":"18889-16820","Value":"cm1 python3 3.7.11-1 on CBL Mariner 1.0"},{"CPE":"cpe:2.3:a:microsoft:cm1_postgresql_12.7-2:*:*:*:*:*:*:*:*","ProductID":"18890-16820","Value":"cm1 postgresql 12.7-2 on CBL Mariner 1.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_postgresql_14.2-1:*:*:*:*:*:*:*:*","ProductID":"18891-16823","Value":"cbl2 postgresql 14.2-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cm1_ansible_2.9.27-1:*:*:*:*:*:*:*:*","ProductID":"18892-16820","Value":"cm1 ansible 2.9.27-1 on CBL Mariner 1.0"},{"CPE":"cpe:2.3:a:microsoft:cm1_grub2_2.06~rc1-8:*:*:*:*:*:*:*:*","ProductID":"18893-16820","Value":"cm1 grub2 2.06~rc1-8 on CBL Mariner 1.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_grub2_2.06-5:*:*:*:*:*:*:*:*","ProductID":"18894-16823","Value":"cbl2 grub2 2.06-5 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cm1_cockpit_248-3:*:*:*:*:*:*:*:*","ProductID":"18895-16820","Value":"cm1 cockpit 248-3 on CBL Mariner 1.0"},{"CPE":"cpe:2.3:a:microsoft:cm1_postgresql_12.8-1:*:*:*:*:*:*:*:*","ProductID":"18896-16820","Value":"cm1 postgresql 12.8-1 on CBL Mariner 1.0"},{"CPE":"cpe:2.3:a:microsoft:cm1_libvirt_6.1.0-5:*:*:*:*:*:*:*:*","ProductID":"18897-16820","Value":"cm1 libvirt 6.1.0-5 on CBL Mariner 1.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_ntopng_5.2.1-5:*:*:*:*:*:*:*:*","ProductID":"19082-17084","Value":"azl3 ntopng 5.2.1-5 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_memcached_1.6.27-3:*:*:*:*:*:*:*:*","ProductID":"19084-17084","Value":"azl3 memcached 1.6.27-3 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_lua_5.4.4-1:*:*:*:*:*:*:*:*","ProductID":"19468-16823","Value":"cbl2 lua 5.4.4-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_wavpack_5.6.0-1:*:*:*:*:*:*:*:*","ProductID":"19469-16823","Value":"cbl2 wavpack 5.6.0-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_haproxy_2.4.13-1:*:*:*:*:*:*:*:*","ProductID":"19485-16823","Value":"cbl2 haproxy 2.4.13-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_libarchive_3.6.1-1:*:*:*:*:*:*:*:*","ProductID":"19498-16823","Value":"cbl2 libarchive 3.6.1-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_cri-o_1.22.3-1:*:*:*:*:*:*:*:*","ProductID":"19511-16823","Value":"cbl2 cri-o 1.22.3-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_fish_:*:*:*:*:*:*:*:*","ProductID":"19640-16823","Value":"cbl2 fish on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_nbdkit_:*:*:*:*:*:*:*:*","ProductID":"19647-16823","Value":"cbl2 nbdkit on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_qemu_6.2.0-24:*:*:*:*:*:*:*:*","ProductID":"19662-17086","Value":"cbl2 qemu 6.2.0-24 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_grub2_2.06-23:*:*:*:*:*:*:*:*","ProductID":"19663-17084","Value":"azl3 grub2 2.06-23 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_ceph_18.2.2-8:*:*:*:*:*:*:*:*","ProductID":"19666-17084","Value":"azl3 ceph 18.2.2-8 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_rust_1.75.0-14:*:*:*:*:*:*:*:*","ProductID":"19671-17084","Value":"azl3 rust 1.75.0-14 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_rust_1.86.0-1:*:*:*:*:*:*:*:*","ProductID":"19686-17084","Value":"azl3 rust 1.86.0-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_python-tensorboard_2.16.2-6:*:*:*:*:*:*:*:*","ProductID":"19693-17084","Value":"azl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_python-tensorboard_2.11.0-3:*:*:*:*:*:*:*:*","ProductID":"19696-17084","Value":"azl3 python-tensorboard 2.11.0-3 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_golang_1.24.3-1:*:*:*:*:*:*:*:*","ProductID":"19697-17084","Value":"azl3 golang 1.24.3-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_python-tensorboard_2.11.0-3:*:*:*:*:*:*:*:*","ProductID":"19712-17086","Value":"cbl2 python-tensorboard 2.11.0-3 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_qt5-qtbase_5.12.11-15:*:*:*:*:*:*:*:*","ProductID":"19737-17086","Value":"cbl2 qt5-qtbase 5.12.11-15 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_librsvg2_2.50.3-4:*:*:*:*:*:*:*:*","ProductID":"19743-17084","Value":"azl3 librsvg2 2.50.3-4 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_rubygem-mini_portile2_2.8.4-1:*:*:*:*:*:*:*:*","ProductID":"19746-17084","Value":"azl3 rubygem-mini_portile2 2.8.4-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_cri-o_1.22.3-14:*:*:*:*:*:*:*:*","ProductID":"19777-17086","Value":"cbl2 cri-o 1.22.3-14 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_cloud-hypervisor_37.0-2:*:*:*:*:*:*:*:*","ProductID":"19783-17084","Value":"azl3 cloud-hypervisor 37.0-2 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_cloud-hypervisor-cvm_38.0.72-1:*:*:*:*:*:*:*:*","ProductID":"19801-17086","Value":"cbl2 cloud-hypervisor-cvm 38.0.72-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_cloud-hypervisor-cvm_38.0.72-1:*:*:*:*:*:*:*:*","ProductID":"19801-21692","Value":"cbl2 cloud-hypervisor-cvm 38.0.72-1 on CBL-Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_cloud-hypervisor-cvm_38.0.72-2:*:*:*:*:*:*:*:*","ProductID":"19807-17084","Value":"azl3 cloud-hypervisor-cvm 38.0.72-2 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_ceph_16.2.10-7:*:*:*:*:*:*:*:*","ProductID":"19814-17086","Value":"cbl2 ceph 16.2.10-7 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_cri-o_1.21.7-3:*:*:*:*:*:*:*:*","ProductID":"19839-17086","Value":"cbl2 cri-o 1.21.7-3 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_cri-o_1.21.7-3:*:*:*:*:*:*:*:*","ProductID":"19839-21692","Value":"cbl2 cri-o 1.21.7-3 on CBL-Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_boost_1.83.0-2:*:*:*:*:*:*:*:*","ProductID":"19842-17084","Value":"azl3 boost 1.83.0-2 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_ntopng_5.2.1-3:*:*:*:*:*:*:*:*","ProductID":"19878-17086","Value":"cbl2 ntopng 5.2.1-3 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_memcached_1.6.22-2:*:*:*:*:*:*:*:*","ProductID":"19882-17086","Value":"cbl2 memcached 1.6.22-2 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_perl_5.34.1-490:*:*:*:*:*:*:*:*","ProductID":"19954-17086","Value":"cbl2 perl 5.34.1-490 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_grpc_1.42.0-7:*:*:*:*:*:*:*:*","ProductID":"20279-17084","Value":"azl3 grpc 1.42.0-7 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_ntopng_5.2.1-6:*:*:*:*:*:*:*:*","ProductID":"20791-17084","Value":"azl3 ntopng 5.2.1-6 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_python-py_1.11.0-1:*:*:*:*:*:*:*:*","ProductID":"21639-17084","Value":"azl3 python-py 1.11.0-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_golang_1.27.0-1:*:*:*:*:*:*:*:*","ProductID":"21778-17084","Value":"azl3 golang 1.27.0-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_golang_1.27.1-1:*:*:*:*:*:*:*:*","ProductID":"21809-17084","Value":"azl3 golang 1.27.1-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:o:microsoft:windows_server_2008_sp2:6.0.6003.21416:*:*:*:*:*:x64:*","ProductID":"9312","Value":"Windows Server 2008 for 32-bit Systems Service Pack 2"},{"CPE":"cpe:2.3:o:microsoft:windows_server_2008_sp2:6.0.6003.21416:*:*:*:*:*:x86:*","ProductID":"9318","Value":"Windows Server 2008 for x64-based Systems Service Pack 2"},{"CPE":"cpe:2.3:o:microsoft:windows_server_2008_sp2:6.0.6003.21416:*:*:*:*:*:x86:*","ProductID":"9344","Value":"Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)"}]},"Vulnerability":[{"Acknowledgments":[],"CVE":"CVE-2018-25032","CVSSScoreSets":[{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["16825-17084"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["16982-17084"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19746-17084"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19801-17086"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19807-17084"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["16968-16820"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["16969-16820"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["16970-16820"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["16971-16820"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["16972-16820"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["16973-16820"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["16947-16820"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["16974-16820"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["16975-16820"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["16976-16820"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["16977-16823"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["16978-16823"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["16979-16823"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["16980-16823"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["16981-16823"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["16825-16817"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["16982-16817"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19801-21692"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"CWE":[{"ID":"CWE-787","Value":"Out-of-bounds Write"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?

\n

One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See this blog post for more information. If impact to additional products is identified, we will update the CVE to reflect this.

\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"0","ProductStatuses":[{"ProductID":["16825-17084","16982-17084","19746-17084","19801-17086","19807-17084","16968-16820","16969-16820","16970-16820","16971-16820","16972-16820","16973-16820","16947-16820","16974-16820","16975-16820","16976-16820","16977-16823","16978-16823","16979-16823","16980-16823","16981-16823","16825-16817","16982-16817","19801-21692"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"2.5.12-4","ProductID":["16825-17084","16825-16817"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["16825-17084","16825-16817"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"-","ProductID":["16982-17084","16977-16823","16982-16817"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["16982-17084","16977-16823","16982-16817"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"38.0.72.2-1","ProductID":["19801-17086","19807-17084","19801-21692"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["19801-17086","19807-17084","19801-21692"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.8.0.332-2","ProductID":["16968-16820"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["16968-16820"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"8.6.13-1","ProductID":["16969-16820","16978-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["16969-16820","16978-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"2.7.18-13","ProductID":["16970-16820"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["16970-16820"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.35.0-4","ProductID":["16971-16820"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["16971-16820"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"24.2-2","ProductID":["16972-16820"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["16972-16820"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"3.6-3","ProductID":["16973-16820"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["16973-16820"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.66.0-4","ProductID":["16947-16820"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["16947-16820"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"3.7.13-5","ProductID":["16974-16820"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["16974-16820"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"10.3.36-1","ProductID":["16975-16820"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["16975-16820"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.2.12-1","ProductID":["16976-16820","16981-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["16976-16820","16981-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"7.93-1","ProductID":["16979-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["16979-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.76.0-3","ProductID":["16980-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["16980-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2026-02-18T15:06:05","Description":{"Value":"

Information published.

\n"},"Number":"3.0"},{"Date":"2026-08-17T21:09:43","Description":{"Value":"

Information published.

\n"},"Number":"5.0"},{"Date":"2022-03-31T00:00:00","Description":{"Value":"

Information published.

\n"},"Number":"1.0"},{"Date":"2022-09-17T00:00:00","Description":{"Value":"

Added mariadb to CBL-Mariner 1.0\nAdded python3 to CBL-Mariner 1.0

\n"},"Number":"1.1"},{"Date":"2023-04-17T00:00:00","Description":{"Value":"

Added tcl to CBL-Mariner 1.0

\n"},"Number":"1.2"},{"Date":"2023-04-18T00:00:00","Description":{"Value":"

Added boost to CBL-Mariner 2.0

\n"},"Number":"1.3"},{"Date":"2023-04-19T00:00:00","Description":{"Value":"

Added nmap to CBL-Mariner 2.0\nAdded tcl to CBL-Mariner 2.0

\n"},"Number":"1.4"},{"Date":"2024-06-30T07:00:00","Description":{"Value":"

Information published.

\n"},"Number":"1.5"},{"Date":"2024-07-13T00:00:00","Description":{"Value":"

Information published.

\n"},"Number":"1.6"},{"Date":"2024-08-29T00:00:00","Description":{"Value":"

Information published.

\n"},"Number":"1.7"},{"Date":"2024-08-30T00:00:00","Description":{"Value":"

Information published.

\n"},"Number":"1.8"},{"Date":"2024-08-31T00:00:00","Description":{"Value":"

Information published.

\n"},"Number":"1.9"},{"Date":"2024-09-01T00:00:00","Description":{"Value":"

Information published.

\n"},"Number":"2.0"},{"Date":"2024-09-02T00:00:00","Description":{"Value":"

Information published.

\n"},"Number":"2.1"},{"Date":"2024-09-03T00:00:00","Description":{"Value":"

Information published.

\n"},"Number":"2.2"},{"Date":"2024-09-05T00:00:00","Description":{"Value":"

Information published.

\n"},"Number":"2.3"},{"Date":"2024-09-06T00:00:00","Description":{"Value":"

Information published.

\n"},"Number":"2.4"},{"Date":"2024-09-07T00:00:00","Description":{"Value":"

Information published.

\n"},"Number":"2.5"},{"Date":"2024-09-08T00:00:00","Description":{"Value":"

Information published.

\n"},"Number":"2.6"},{"Date":"2024-09-11T00:00:00","Description":{"Value":"

Information published.

\n"},"Number":"2.7"},{"Date":"2025-03-14T00:00:00","Description":{"Value":"

Added teckit to Azure Linux 3.0\nAdded cloud-hypervisor-cvm to Azure Linux 3.0\nAdded grpc to Azure Linux 3.0\nAdded cmake to Azure Linux 3.0\nAdded cloud-hypervisor-cvm to CBL-Mariner 2.0\nAdded rust to CBL-Mariner 2.0\nAdded qt5-qtbase to CBL-Mariner 2.0\nAdded boost to CBL-Mariner 2.0\nAdded nmap to CBL-Mariner 2.0\nAdded tcl to CBL-Mariner 2.0\nAdded zlib to CBL-Mariner 2.0\nAdded nmap to CBL-Mariner 1.0\nAdded boost to CBL-Mariner 1.0\nAdded erlang to CBL-Mariner 1.0\nAdded tcl to CBL-Mariner 1.0\nAdded zlib to CBL-Mariner 1.0\nAdded mariadb to CBL-Mariner 1.0\nAdded python3 to CBL-Mariner 1.0

\n"},"Number":"2.8"},{"Date":"2026-08-12T23:17:16","Description":{"Value":"

Information published.

\n"},"Number":"4.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["16825-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["16982-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19746-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19801-17086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19807-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["16968-16820"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["16969-16820"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["16970-16820"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["16971-16820"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["16972-16820"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["16973-16820"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["16947-16820"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["16974-16820"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["16975-16820"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["16976-16820"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["16977-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["16978-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["16979-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["16980-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["16981-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["16825-16817"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["16982-16817"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19801-21692"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["16825-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["16982-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["19746-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["19801-17086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["19807-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["16968-16820"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["16969-16820"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["16970-16820"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["16971-16820"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["16972-16820"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["16973-16820"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["16947-16820"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["16974-16820"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["16975-16820"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["16976-16820"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["16977-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["16978-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["16979-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["16980-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["16981-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["16825-16817"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["16982-16817"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["19801-21692"],"Type":3}],"Title":{"Value":"zlib before 1.2.12 allows memory corruption when deflating (i.e. when compressing) if the input has many distant matches."}},{"Acknowledgments":[],"CVE":"CVE-2020-35501","CVSSScoreSets":[{"BaseScore":3.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18719-16820"],"TemporalScore":3.4,"Vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N"},{"BaseScore":3.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18752-16823"],"TemporalScore":3.4,"Vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N"}],"CWE":[{"ID":"CWE-863","Value":"Incorrect Authorization"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?

\n

One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See this blog post for more information. If impact to additional products is identified, we will update the CVE to reflect this.

\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"redhat","Type":8,"Value":"redhat"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"1","ProductStatuses":[{"ProductID":["18719-16820","18752-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"-","ProductID":["18719-16820","18752-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18719-16820","18752-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2022-04-08T00:00:00","Description":{"Value":"

Information published.

\n"},"Number":"1.0"},{"Date":"2022-04-09T00:00:00","Description":{"Value":"

Added kernel to CBL-Mariner 1.0

\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18719-16820"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18752-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["18719-16820"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["18752-16823"],"Type":3}],"Title":{"Value":"A flaw was found in the Linux kernels implementation of audit rules where a syscall can unexpectedly not be correctly not be logged by the audit subsystem"}},{"Acknowledgments":[],"CVE":"CVE-2021-20257","CVSSScoreSets":[{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18887-16820"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18757-16823"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H"}],"CWE":[{"ID":"CWE-835","Value":"Loop with Unreachable Exit Condition ('Infinite Loop')"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?

\n

One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See this blog post for more information. If impact to additional products is identified, we will update the CVE to reflect this.

\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"redhat","Type":8,"Value":"redhat"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"2","ProductStatuses":[{"ProductID":["18887-16820","18757-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"4.2.0-39","ProductID":["18887-16820"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18887-16820"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"6.2.0-2","ProductID":["18757-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18757-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2023-03-10T00:00:00","Description":{"Value":"

Information published.

\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18887-16820"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18757-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18887-16820"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18757-16823"],"Type":3}],"Title":{"Value":"An infinite loop flaw was found in the e1000 NIC emulator of the QEMU. This issue occurs while processing transmits (tx) descriptors in process_tx_desc if various descriptor fields are initialized with invalid values. This flaw allows a guest to consume CPU cycles on the host resulting in a denial of service. The highest threat from this vulnerability is to system availability."}},{"Acknowledgments":[],"CVE":"CVE-2021-23192","CVSSScoreSets":[{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["16864-17084"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"CWE":[{"ID":"CWE-20","Value":"Improper Input Validation"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?

\n

One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See this blog post for more information. If impact to additional products is identified, we will update the CVE to reflect this.

\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"redhat","Type":8,"Value":"redhat"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"3","ProductStatuses":[{"ProductID":["16864-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"4.18.3-1","ProductID":["16864-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["16864-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2024-10-15T00:00:00","Description":{"Value":"

Information published.

\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["16864-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["16864-17084"],"Type":3}],"Title":{"Value":"A flaw was found in the way samba implemented DCE/RPC. If a client to a Samba server sent a very large DCE/RPC request and chose to fragment it an attacker could replace later fragments with their own data bypassing the signature requirements."}},{"Acknowledgments":[],"CVE":"CVE-2021-23214","CVSSScoreSets":[{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18890-16820"],"TemporalScore":8.1,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18891-16823"],"TemporalScore":8.1,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"}],"CWE":[{"ID":"CWE-89","Value":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?

\n

One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See this blog post for more information. If impact to additional products is identified, we will update the CVE to reflect this.

\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"redhat","Type":8,"Value":"redhat"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"4","ProductStatuses":[{"ProductID":["18890-16820","18891-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"12.7-2","ProductID":["18890-16820"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18890-16820"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"14.2-1","ProductID":["18891-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18891-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2022-03-16T00:00:00","Description":{"Value":"

Information published.

\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18890-16820"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18891-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["18890-16820"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["18891-16823"],"Type":3}],"Title":{"Value":"When the server is configured to use trust authentication with a clientcert requirement or to use cert authentication a man-in-the-middle attacker can inject arbitrary SQL queries when a connection is first established despite the use of SSL certificate verification and encryption."}},{"Acknowledgments":[],"CVE":"CVE-2021-23222","CVSSScoreSets":[{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18890-16820"],"TemporalScore":5.9,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18891-16823"],"TemporalScore":5.9,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"}],"CWE":[{"ID":"CWE-522","Value":"Insufficiently Protected Credentials"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?

\n

One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See this blog post for more information. If impact to additional products is identified, we will update the CVE to reflect this.

\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"redhat","Type":8,"Value":"redhat"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"5","ProductStatuses":[{"ProductID":["18890-16820","18891-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"12.7-2","ProductID":["18890-16820"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18890-16820"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"14.2-1","ProductID":["18891-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18891-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2022-03-11T00:00:00","Description":{"Value":"

Information published.

\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18890-16820"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18891-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18890-16820"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18891-16823"],"Type":3}],"Title":{"Value":"A man-in-the-middle attacker can inject false responses to the client's first few queries despite the use of SSL certificate verification and encryption."}},{"Acknowledgments":[],"CVE":"CVE-2021-25220","CVSSScoreSets":[{"BaseScore":6.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18759-16820"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N"},{"BaseScore":6.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18760-16823"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N"}],"CWE":[{"ID":"CWE-444","Value":"Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?

\n

One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See this blog post for more information. If impact to additional products is identified, we will update the CVE to reflect this.

\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"isc","Type":8,"Value":"isc"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"6","ProductStatuses":[{"ProductID":["18759-16820","18760-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"9.16.27-1","ProductID":["18759-16820"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18759-16820"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"9.16.29-1","ProductID":["18760-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18760-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2022-03-30T00:00:00","Description":{"Value":"

Information published.

\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18759-16820"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18760-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18759-16820"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18760-16823"],"Type":3}],"Title":{"Value":"DNS forwarders - cache poisoning vulnerability"}},{"Acknowledgments":[],"CVE":"CVE-2021-3602","CVSSScoreSets":[{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17367-16823"],"TemporalScore":5.5,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19839-21692"],"TemporalScore":5.5,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19839-17086"],"TemporalScore":5.5,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"}],"CWE":[{"ID":"CWE-212","Value":"Improper Removal of Sensitive Information Before Storage or Transfer"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?

\n

One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See this blog post for more information. If impact to additional products is identified, we will update the CVE to reflect this.

\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"redhat","Type":8,"Value":"redhat"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"7","ProductStatuses":[{"ProductID":["17367-16823","19839-21692","19839-17086"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.21.7-2","ProductID":["17367-16823","19839-21692","19839-17086"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["17367-16823","19839-21692","19839-17086"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2026-08-12T21:44:58","Description":{"Value":"

Information published.

\n"},"Number":"2.0"},{"Date":"2024-04-15T00:00:00","Description":{"Value":"

Information published.

\n"},"Number":"1.0"},{"Date":"2026-02-18T02:21:51","Description":{"Value":"

Information published.

\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17367-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19839-21692"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19839-17086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["17367-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19839-21692"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19839-17086"],"Type":3}],"Title":{"Value":"An information disclosure flaw was found in Buildah when building containers using chroot isolation. Running processes in container builds (e.g. Dockerfile RUN commands) can access environment variables from parent and grandparent processes. When run in a container in a CI/CD environment environment variables may include sensitive information that was shared with the container in order to be used only by Buildah itself (e.g. container registry credentials)."}},{"Acknowledgments":[],"CVE":"CVE-2021-3609","CVSSScoreSets":[{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18780-16820"],"TemporalScore":7.0,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"}],"CWE":[{"ID":"CWE-362","Value":"Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?

\n

One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See this blog post for more information. If impact to additional products is identified, we will update the CVE to reflect this.

\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"redhat","Type":8,"Value":"redhat"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"8","ProductStatuses":[{"ProductID":["18780-16820"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"-","ProductID":["18780-16820"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18780-16820"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2022-03-11T00:00:00","Description":{"Value":"

Information published.

\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18780-16820"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["18780-16820"],"Type":3}],"Title":{"Value":".A flaw was found in the CAN BCM networking protocol in the Linux kernel where a local attacker can abuse a flaw in the CAN subsystem to corrupt memory crash the system or escalate privileges. This race condition in net/can/bcm.c in the Linux kernel allows for local privilege escalation to root."}},{"Acknowledgments":[],"CVE":"CVE-2021-3618","CVSSScoreSets":[{"BaseScore":7.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18882-16820"],"TemporalScore":7.4,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"},{"BaseScore":7.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18883-16820"],"TemporalScore":7.4,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"},{"BaseScore":7.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18884-16823"],"TemporalScore":7.4,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"},{"BaseScore":7.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18885-16823"],"TemporalScore":7.4,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"},{"BaseScore":7.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18886-16823"],"TemporalScore":7.4,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"}],"CWE":[{"ID":"CWE-295","Value":"Improper Certificate Validation"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?

\n

One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See this blog post for more information. If impact to additional products is identified, we will update the CVE to reflect this.

\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"redhat","Type":8,"Value":"redhat"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"9","ProductStatuses":[{"ProductID":["18882-16820","18883-16820","18884-16823","18885-16823","18886-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"3.0.5-1","ProductID":["18882-16820","18885-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18882-16820","18885-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.20.1-3","ProductID":["18883-16820"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18883-16820"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"8.15.2-46","ProductID":["18884-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18884-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.20.2-2","ProductID":["18886-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18886-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2022-04-05T00:00:00","Description":{"Value":"

Information published.

\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18882-16820"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18883-16820"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18884-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18885-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18886-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["18882-16820"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["18883-16820"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["18884-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["18885-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["18886-16823"],"Type":3}],"Title":{"Value":"ALPACA is an application layer protocol content confusion attack exploiting TLS servers implementing different protocols but using compatible certificates such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer."}},{"Acknowledgments":[],"CVE":"CVE-2021-3620","CVSSScoreSets":[{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18892-16820"],"TemporalScore":5.5,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"}],"CWE":[{"ID":"CWE-209","Value":"Generation of Error Message Containing Sensitive Information"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?

\n

One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See this blog post for more information. If impact to additional products is identified, we will update the CVE to reflect this.

\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"redhat","Type":8,"Value":"redhat"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"10","ProductStatuses":[{"ProductID":["18892-16820"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"2.9.27-1","ProductID":["18892-16820"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18892-16820"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2022-03-16T00:00:00","Description":{"Value":"

Information published.

\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18892-16820"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18892-16820"],"Type":3}],"Title":{"Value":"A flaw was found in Ansible Engine's ansible-connection module where sensitive information such as the Ansible user credentials is disclosed by default in the traceback error message. The highest threat from this vulnerability is to confidentiality."}},{"Acknowledgments":[],"CVE":"CVE-2021-3631","CVSSScoreSets":[{"BaseScore":6.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18897-16820"],"TemporalScore":6.3,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N"}],"CWE":[{"ID":"CWE-732","Value":"Incorrect Permission Assignment for Critical Resource"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?

\n

One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See this blog post for more information. If impact to additional products is identified, we will update the CVE to reflect this.

\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"redhat","Type":8,"Value":"redhat"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"11","ProductStatuses":[{"ProductID":["18897-16820"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"6.1.0-5","ProductID":["18897-16820"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18897-16820"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2022-03-11T00:00:00","Description":{"Value":"

Information published.

\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18897-16820"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18897-16820"],"Type":3}],"Title":{"Value":"A flaw was found in libvirt while it generates SELinux MCS category pairs for VMs' dynamic labels. This flaw allows one exploited guest to access files labeled for another guest resulting in the breaking out of sVirt confinement. The highest threat from this vulnerability is to confidentiality and integrity."}},{"Acknowledgments":[],"CVE":"CVE-2021-36368","CVSSScoreSets":[{"BaseScore":3.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18888-16820"],"TemporalScore":3.7,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"BaseScore":3.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17826-16823"],"TemporalScore":3.7,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"CWE":[{"ID":"CWE-287","Value":"Improper Authentication"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?

\n

One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See this blog post for more information. If impact to additional products is identified, we will update the CVE to reflect this.

\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"12","ProductStatuses":[{"ProductID":["18888-16820","17826-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"-","ProductID":["18888-16820","17826-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18888-16820","17826-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2022-03-20T00:00:00","Description":{"Value":"

Information published.

\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18888-16820"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17826-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["18888-16820"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["17826-16823"],"Type":3}],"Title":{"Value":"An issue was discovered in OpenSSH before 8.9. If a client is using public-key authentication with agent forwarding but without -oLogLevel=verbose and an attacker has silently modified the server to support the None authentication option then the user cannot determine whether FIDO authentication is going to confirm that the user wishes to connect to that server or that the user wishes to allow that server to connect to a different server on the user's behalf. NOTE: the vendor's position is \"this is not an authentication bypass since nothing is being bypassed."}},{"Acknowledgments":[],"CVE":"CVE-2021-3638","CVSSScoreSets":[{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18887-16820"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18757-16823"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H"}],"CWE":[{"ID":"CWE-787","Value":"Out-of-bounds Write"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?

\n

One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See this blog post for more information. If impact to additional products is identified, we will update the CVE to reflect this.

\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"redhat","Type":8,"Value":"redhat"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"13","ProductStatuses":[{"ProductID":["18887-16820","18757-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"4.2.0-39","ProductID":["18887-16820"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18887-16820"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"6.2.0-2","ProductID":["18757-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18757-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2023-03-10T00:00:00","Description":{"Value":"

Information published.

\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18887-16820"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18757-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18887-16820"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18757-16823"],"Type":3}],"Title":{"Value":"An out-of-bounds memory access flaw was found in the ATI VGA device emulation of QEMU. This flaw occurs in the ati_2d_blt() routine while handling MMIO write operations when the guest provides invalid values for the destination display parameters. A malicious guest could use this flaw to crash the QEMU process on the host resulting in a denial of service."}},{"Acknowledgments":[],"CVE":"CVE-2021-3640","CVSSScoreSets":[{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18768-16820"],"TemporalScore":7.0,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"}],"CWE":[{"ID":"CWE-362","Value":"Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?

\n

One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See this blog post for more information. If impact to additional products is identified, we will update the CVE to reflect this.

\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"redhat","Type":8,"Value":"redhat"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"14","ProductStatuses":[{"ProductID":["18768-16820"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"-","ProductID":["18768-16820"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18768-16820"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2022-03-17T00:00:00","Description":{"Value":"

Information published.

\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18768-16820"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["18768-16820"],"Type":3}],"Title":{"Value":"A flaw use-after-free in function sco_sock_sendmsg() of the Linux kernel HCI subsystem was found in the way user calls ioct UFFDIO_REGISTER or other way triggers race condition of the call sco_conn_del() together with the call sco_sock_sendmsg() with the expected controllable faulting memory page. A privileged local user could use this flaw to crash the system or escalate their privileges on the system."}},{"Acknowledgments":[],"CVE":"CVE-2021-3656","CVSSScoreSets":[{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18780-16820"],"TemporalScore":8.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"}],"CWE":[{"ID":"CWE-862","Value":"Missing Authorization"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?

\n

One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See this blog post for more information. If impact to additional products is identified, we will update the CVE to reflect this.

\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"redhat","Type":8,"Value":"redhat"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"15","ProductStatuses":[{"ProductID":["18780-16820"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"-","ProductID":["18780-16820"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18780-16820"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2022-03-11T00:00:00","Description":{"Value":"

Information published.

\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18780-16820"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["18780-16820"],"Type":3}],"Title":{"Value":"A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block) provided by the L1 guest to spawn/handle a nested guest (L2). Due to improper validation of the \"virt_ext\" field this issue could allow a malicious L1 to disable both VMLOAD/VMSAVE intercepts and VLS (Virtual VMLOAD/VMSAVE) for the L2 guest. As a result the L2 guest would be allowed to read/write physical pages of the host resulting in a crash of the entire system leak of sensitive data or potential guest-to-host escape."}},{"Acknowledgments":[],"CVE":"CVE-2021-3660","CVSSScoreSets":[{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18895-16820"],"TemporalScore":4.3,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"}],"CWE":[{"ID":"CWE-1021","Value":"Improper Restriction of Rendered UI Layers or Frames"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?

\n

One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See this blog post for more information. If impact to additional products is identified, we will update the CVE to reflect this.

\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"redhat","Type":8,"Value":"redhat"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"16","ProductStatuses":[{"ProductID":["18895-16820"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"-","ProductID":["18895-16820"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18895-16820"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2022-03-15T00:00:00","Description":{"Value":"

Information published.

\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18895-16820"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18895-16820"],"Type":3}],"Title":{"Value":"Cockpit (and its plugins) do not seem to protect itself against clickjacking. It is possible to render a page from a cockpit server via another website inside an