Microsoft CVE Summary

CVE-2025-21188 - Azure Network Watcher VM Extension Elevation of Privilege Vulnerability

CVE-2025-21206 - Visual Studio Installer Elevation of Privilege Vulnerability

CVE-2025-21351 - Windows Active Directory Domain Services API Denial of Service Vulnerability

CVE-2025-21352 - Internet Connection Sharing (ICS) Denial of Service Vulnerability

CVE-2025-21368 - Microsoft Digest Authentication Remote Code Execution Vulnerability

CVE-2025-21369 - Microsoft Digest Authentication Remote Code Execution Vulnerability

CVE-2025-21375 - Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

CVE-2025-21376 - Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVE-2025-21379 - DHCP Client Service Remote Code Execution Vulnerability

CVE-2025-21383 - Microsoft Excel Information Disclosure Vulnerability

CVE-2025-21182 - Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability

CVE-2025-21183 - Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability

CVE-2025-21391 - Windows Storage Elevation of Privilege Vulnerability

CVE-2025-21418 - Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVE-2025-21419 - Windows Setup Files Cleanup Elevation of Privilege Vulnerability

CVE-2025-21420 - Windows Disk Cleanup Tool Elevation of Privilege Vulnerability

CVE-2023-32002 - HackerOne: CVE-2023-32002 Node.js `Module._load()` policy Remote Code Execution Vulnerability

CVE-2025-24036 - Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability

CVE-2025-24039 - Visual Studio Code Elevation of Privilege Vulnerability

CVE-2025-21259 - Microsoft Outlook Spoofing Vulnerability

CVE-2025-21177 - Microsoft Dynamics 365 Sales Elevation of Privilege Vulnerability

CVE-2025-0444 - Chromium: CVE-2025-0444 Use after free in Skia

CVE-2025-0445 - Chromium: CVE-2025-0445 Use after free in V8

CVE-2025-0451 - Chromium: CVE-2025-0451 Inappropriate implementation in Extensions API

CVE-2025-21342 - Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

CVE-2025-21267 - Microsoft Edge (Chromium-based) Spoofing Vulnerability

CVE-2025-21279 - Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

CVE-2025-21283 - Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

CVE-2025-21404 - Microsoft Edge (Chromium-based) Spoofing Vulnerability

CVE-2025-21408 - Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

CVE-2025-21253 - Microsoft Edge for IOS and Android Spoofing Vulnerability

CVE-2025-21194 - Microsoft Surface Security Feature Bypass Vulnerability

CVE-2025-21208 - Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2025-21406 - Windows Telephony Service Remote Code Execution Vulnerability

CVE-2025-21407 - Windows Telephony Service Remote Code Execution Vulnerability

CVE-2025-21410 - Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVE-2025-21190 - Windows Telephony Service Remote Code Execution Vulnerability

CVE-2025-21200 - Windows Telephony Service Remote Code Execution Vulnerability

CVE-2025-21201 - Windows Telephony Server Remote Code Execution Vulnerability

CVE-2025-21337 - Windows NTFS Elevation of Privilege Vulnerability

CVE-2025-21347 - Windows Deployment Services Denial of Service Vulnerability

CVE-2025-21349 - Windows Remote Desktop Configuration Service Tampering Vulnerability

CVE-2025-21350 - Windows Kerberos Denial of Service Vulnerability

CVE-2025-21358 - Windows Core Messaging Elevation of Privileges Vulnerability

CVE-2025-21359 - Windows Kernel Security Feature Bypass Vulnerability

CVE-2025-21367 - Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

CVE-2025-21371 - Windows Telephony Service Remote Code Execution Vulnerability

CVE-2025-21377 - NTLM Hash Disclosure Spoofing Vulnerability

CVE-2025-21381 - Microsoft Excel Remote Code Execution Vulnerability

CVE-2025-21386 - Microsoft Excel Remote Code Execution Vulnerability

CVE-2025-21387 - Microsoft Excel Remote Code Execution Vulnerability

CVE-2025-21390 - Microsoft Excel Remote Code Execution Vulnerability

CVE-2025-21392 - Microsoft Office Remote Code Execution Vulnerability

CVE-2025-21394 - Microsoft Excel Remote Code Execution Vulnerability

CVE-2025-21397 - Microsoft Office Remote Code Execution Vulnerability

CVE-2025-21400 - Microsoft SharePoint Server Remote Code Execution Vulnerability

CVE-2025-21179 - DHCP Client Service Denial of Service Vulnerability

CVE-2025-21181 - Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVE-2025-21184 - Windows Core Messaging Elevation of Privileges Vulnerability

CVE-2025-21212 - Internet Connection Sharing (ICS) Denial of Service Vulnerability

CVE-2025-21216 - Internet Connection Sharing (ICS) Denial of Service Vulnerability

CVE-2025-21254 - Internet Connection Sharing (ICS) Denial of Service Vulnerability

CVE-2025-21322 - Microsoft PC Manager Elevation of Privilege Vulnerability

CVE-2025-21414 - Windows Core Messaging Elevation of Privileges Vulnerability

CVE-2025-21373 - Windows Installer Elevation of Privilege Vulnerability

CVE-2025-24042 - Visual Studio Code JS Debug Extension Elevation of Privilege Vulnerability

CVE-2017-17522 - Unknown

CVE-2024-7264 - Unknown

CVE-2022-32746 - Unknown

CVE-2020-22217 - Unknown

CVE-2024-35849 - Unknown

CVE-2024-27433 - Unknown

CVE-2024-4323 - Unknown

CVE-2024-25629 - Unknown

CVE-2020-15999 - Unknown

CVE-2024-22667 - Unknown

CVE-2024-45310 - Unknown

CVE-2024-24786 - Unknown

CVE-2023-3297 - Unknown

CVE-2021-32142 - Unknown

CVE-2015-1029 - Unknown

CVE-2023-45853 - Unknown

CVE-2024-53263 - Unknown

CVE-2024-45338 - Unknown

CVE-2022-32149 - Unknown

CVE-2024-3727 - Unknown

CVE-2024-6104 - Unknown

CVE-2022-49043 - Unknown

CVE-2022-47022 - Unknown

CVE-2023-45288 - Unknown

CVE-2007-4559 - Unknown

CVE-2017-18207 - Unknown

CVE-2024-52338 - Unknown

CVE-2019-20907 - Unknown

CVE-2021-23336 - Unknown

CVE-2024-28180 - Unknown

CVE-2024-9681 - Unknown

CVE-2024-34062 - Unknown

CVE-2024-32021 - Unknown

CVE-2024-32020 - Unknown

CVE-2024-32465 - Unknown

CVE-2024-50349 - Unknown

CVE-2024-52006 - Unknown

CVE-2025-23083 - Unknown

CVE-2024-7383 - Unknown

CVE-2021-20286 - Unknown

CVE-2023-39325 - Unknown

CVE-2022-40898 - Unknown

CVE-2019-14584 - Unknown

CVE-2023-40546 - Unknown

CVE-2022-28737 - Unknown

CVE-2023-40548 - Unknown

CVE-2023-40549 - Unknown

CVE-2023-40550 - Unknown

CVE-2024-9676 - Unknown

CVE-2020-27840 - Unknown

CVE-2024-37535 - Unknown

CVE-2023-1393 - Unknown

CVE-2021-20277 - Unknown

CVE-2019-3833 - Unknown

CVE-2023-27043 - Unknown

CVE-2019-3816 - Unknown

CVE-2019-9674 - Unknown

CVE-2012-6708 - Unknown

CVE-2015-9251 - Unknown

CVE-2024-35827 - Unknown

CVE-2013-2094 - Unknown

CVE-2025-22134 - Unknown

CVE-2024-51744 - Unknown

CVE-2023-3978 - Unknown

CVE-2022-41723 - Unknown

CVE-2024-53899 - Unknown

CVE-2024-43806 - Unknown

CVE-2024-45339 - Unknown

CVE-2012-6655 - Unknown

CVE-2024-40897 - Unknown

CVE-2022-4055 - Unknown

CVE-2019-11358 - Unknown

CVE-2023-47108 - Unknown

CVE-2022-23901 - Unknown

CVE-2025-21198 - Microsoft High Performance Compute (HPC) Pack Remote Code Execution Vulnerability

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

Exploitability Index

Affected Software

Acknowledgements

This report contains detail for the following vulnerabilities:

CVE Issued by	Tag	CVE ID	CVE Title
Microsoft	Active Directory Domain Services	CVE-2025-21351	Windows Active Directory Domain Services API Denial of Service Vulnerability
Microsoft	Azure Network Watcher	CVE-2025-21188	Azure Network Watcher VM Extension Elevation of Privilege Vulnerability
cve@mitre.org	Mariner	CVE-2019-20907	Unknown
security@apache.org	Mariner	CVE-2024-52338	Unknown
security-advisories@github.com	Mariner	CVE-2024-28180	Unknown
report@snyk.io	Mariner	CVE-2021-23336	Unknown
security@golang.org	Mariner	CVE-2023-45288	Unknown
cve@mitre.org	Mariner	CVE-2022-47022	Unknown
cve@mitre.org	Mariner	CVE-2017-18207	Unknown
cve@mitre.org	Mariner	CVE-2007-4559	Unknown
2499f714-1537-4658-8207-48ae4bb9eae9	Mariner	CVE-2024-9681	Unknown
security-advisories@github.com	Mariner	CVE-2024-52006	Unknown
security-advisories@github.com	Mariner	CVE-2024-50349	Unknown
secalert@redhat.com	Mariner	CVE-2024-7383	Unknown
support@hackerone.com	Mariner	CVE-2025-23083	Unknown
security-advisories@github.com	Mariner	CVE-2024-32021	Unknown
security-advisories@github.com	Mariner	CVE-2024-34062	Unknown
security-advisories@github.com	Mariner	CVE-2024-32465	Unknown
security-advisories@github.com	Mariner	CVE-2024-32020	Unknown
security-advisories@github.com	Mariner	CVE-2024-45310	Unknown
cve@mitre.org	Mariner	CVE-2024-22667	Unknown
security@ubuntu.com	Mariner	CVE-2023-3297	Unknown
security@golang.org	Mariner	CVE-2024-24786	Unknown
vulnreport@tenable.com	Mariner	CVE-2024-4323	Unknown
416baaa9-dc9f-4396-8d5f-8c081fb06d67	Mariner	CVE-2024-27433	Unknown
chrome-cve-admin@google.com	Mariner	CVE-2020-15999	Unknown
security-advisories@github.com	Mariner	CVE-2024-25629	Unknown
cve@mitre.org	Mariner	CVE-2021-32142	Unknown
secalert@redhat.com	Mariner	CVE-2024-3727	Unknown
security@golang.org	Mariner	CVE-2022-32149	Unknown
cve@mitre.org	Mariner	CVE-2022-49043	Unknown
security@hashicorp.com	Mariner	CVE-2024-6104	Unknown
cve@mitre.org	Mariner	CVE-2023-45853	Unknown
cve@mitre.org	Mariner	CVE-2015-1029	Unknown
security@golang.org	Mariner	CVE-2024-45338	Unknown
security-advisories@github.com	Mariner	CVE-2024-53263	Unknown
secalert@redhat.com	Mariner	CVE-2021-20286	Unknown
security-advisories@github.com	Mariner	CVE-2024-51744	Unknown
security-advisories@github.com	Mariner	CVE-2025-22134	Unknown
security@golang.org	Mariner	CVE-2022-41723	Unknown
security@golang.org	Mariner	CVE-2023-3978	Unknown
cve@mitre.org	Mariner	CVE-2015-9251	Unknown
cve@mitre.org	Mariner	CVE-2012-6708	Unknown
secalert@redhat.com	Mariner	CVE-2013-2094	Unknown
416baaa9-dc9f-4396-8d5f-8c081fb06d67	Mariner	CVE-2024-35827	Unknown
cve@mitre.org	Mariner	CVE-2024-53899	Unknown
cve@mitre.org	Mariner	CVE-2019-11358	Unknown
secalert@redhat.com	Mariner	CVE-2022-4055	Unknown
cve@mitre.org	Mariner	CVE-2022-23901	Unknown
security-advisories@github.com	Mariner	CVE-2023-47108	Unknown
security@golang.org	Mariner	CVE-2024-45339	Unknown
security-advisories@github.com	Mariner	CVE-2024-43806	Unknown
vultures@jpcert.or.jp	Mariner	CVE-2024-40897	Unknown
cve@mitre.org	Mariner	CVE-2012-6655	Unknown
secalert@redhat.com	Mariner	CVE-2023-40548	Unknown
security@ubuntu.com	Mariner	CVE-2022-28737	Unknown
secalert@redhat.com	Mariner	CVE-2023-40550	Unknown
secalert@redhat.com	Mariner	CVE-2023-40549	Unknown
cve@mitre.org	Mariner	CVE-2022-40898	Unknown
security@golang.org	Mariner	CVE-2023-39325	Unknown
secalert@redhat.com	Mariner	CVE-2023-40546	Unknown
secure@intel.com	Mariner	CVE-2019-14584	Unknown
secalert@redhat.com	Mariner	CVE-2024-9676	Unknown
cve@mitre.org	Mariner	CVE-2023-27043	Unknown
secalert@redhat.com	Mariner	CVE-2019-3833	Unknown
cve@mitre.org	Mariner	CVE-2019-9674	Unknown
secalert@redhat.com	Mariner	CVE-2019-3816	Unknown
cve@mitre.org	Mariner	CVE-2024-37535	Unknown
secalert@redhat.com	Mariner	CVE-2020-27840	Unknown
secalert@redhat.com	Mariner	CVE-2021-20277	Unknown
secalert@redhat.com	Mariner	CVE-2023-1393	Unknown
2499f714-1537-4658-8207-48ae4bb9eae9	Mariner	CVE-2024-7264	Unknown
cve@mitre.org	Mariner	CVE-2017-17522	Unknown
secalert@redhat.com	Mariner	CVE-2022-32746	Unknown
416baaa9-dc9f-4396-8d5f-8c081fb06d67	Mariner	CVE-2024-35849	Unknown
cve@mitre.org	Mariner	CVE-2020-22217	Unknown
Microsoft	Microsoft AutoUpdate (MAU)	CVE-2025-24036	Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability
Microsoft	Microsoft Digest Authentication	CVE-2025-21369	Microsoft Digest Authentication Remote Code Execution Vulnerability
Microsoft	Microsoft Digest Authentication	CVE-2025-21368	Microsoft Digest Authentication Remote Code Execution Vulnerability
Microsoft	Microsoft Dynamics 365 Sales	CVE-2025-21177	Microsoft Dynamics 365 Sales Elevation of Privilege Vulnerability
Microsoft	Microsoft Edge (Chromium-based)	CVE-2025-21283	Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft	Microsoft Edge (Chromium-based)	CVE-2025-21279	Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft	Microsoft Edge (Chromium-based)	CVE-2025-21408	Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft	Microsoft Edge (Chromium-based)	CVE-2025-21404	Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft	Microsoft Edge (Chromium-based)	CVE-2025-21267	Microsoft Edge (Chromium-based) Spoofing Vulnerability
Chrome	Microsoft Edge (Chromium-based)	CVE-2025-0445	Chromium: CVE-2025-0445 Use after free in V8
Chrome	Microsoft Edge (Chromium-based)	CVE-2025-0444	Chromium: CVE-2025-0444 Use after free in Skia
Microsoft	Microsoft Edge (Chromium-based)	CVE-2025-21342	Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Chrome	Microsoft Edge (Chromium-based)	CVE-2025-0451	Chromium: CVE-2025-0451 Inappropriate implementation in Extensions API
Microsoft	Microsoft Edge for iOS and Android	CVE-2025-21253	Microsoft Edge for IOS and Android Spoofing Vulnerability
Microsoft	Microsoft High Performance Compute Pack (HPC) Linux Node Agent	CVE-2025-21198	Microsoft High Performance Compute (HPC) Pack Remote Code Execution Vulnerability
Microsoft	Microsoft Office	CVE-2025-21397	Microsoft Office Remote Code Execution Vulnerability
Microsoft	Microsoft Office	CVE-2025-21392	Microsoft Office Remote Code Execution Vulnerability
Microsoft	Microsoft Office Excel	CVE-2025-21383	Microsoft Excel Information Disclosure Vulnerability
Microsoft	Microsoft Office Excel	CVE-2025-21394	Microsoft Excel Remote Code Execution Vulnerability
Microsoft	Microsoft Office Excel	CVE-2025-21390	Microsoft Excel Remote Code Execution Vulnerability
Microsoft	Microsoft Office Excel	CVE-2025-21381	Microsoft Excel Remote Code Execution Vulnerability
Microsoft	Microsoft Office Excel	CVE-2025-21387	Microsoft Excel Remote Code Execution Vulnerability
Microsoft	Microsoft Office Excel	CVE-2025-21386	Microsoft Excel Remote Code Execution Vulnerability
Microsoft	Microsoft Office SharePoint	CVE-2025-21400	Microsoft SharePoint Server Remote Code Execution Vulnerability
Microsoft	Microsoft PC Manager	CVE-2025-21322	Microsoft PC Manager Elevation of Privilege Vulnerability
Microsoft	Microsoft Streaming Service	CVE-2025-21375	Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
Microsoft	Microsoft Surface	CVE-2025-21194	Microsoft Surface Security Feature Bypass Vulnerability
Microsoft	Microsoft Windows	CVE-2025-21337	Windows NTFS Elevation of Privilege Vulnerability
HackerOne	Open Source Software	CVE-2023-32002	HackerOne: CVE-2023-32002 Node.js `Module._load()` policy Remote Code Execution Vulnerability
Microsoft	Outlook for Android	CVE-2025-21259	Microsoft Outlook Spoofing Vulnerability
Microsoft	Visual Studio	CVE-2025-21206	Visual Studio Installer Elevation of Privilege Vulnerability
Microsoft	Visual Studio Code	CVE-2025-24042	Visual Studio Code JS Debug Extension Elevation of Privilege Vulnerability
Microsoft	Visual Studio Code	CVE-2025-24039	Visual Studio Code Elevation of Privilege Vulnerability
Microsoft	Windows Ancillary Function Driver for WinSock	CVE-2025-21418	Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Microsoft	Windows CoreMessaging	CVE-2025-21184	Windows Core Messaging Elevation of Privileges Vulnerability
Microsoft	Windows CoreMessaging	CVE-2025-21358	Windows Core Messaging Elevation of Privileges Vulnerability
Microsoft	Windows DHCP Client	CVE-2025-21179	DHCP Client Service Denial of Service Vulnerability
Microsoft	Windows DHCP Server	CVE-2025-21379	DHCP Client Service Remote Code Execution Vulnerability
Microsoft	Windows Disk Cleanup Tool	CVE-2025-21420	Windows Disk Cleanup Tool Elevation of Privilege Vulnerability
Microsoft	Windows DWM Core Library	CVE-2025-21414	Windows Core Messaging Elevation of Privileges Vulnerability
Microsoft	Windows Installer	CVE-2025-21373	Windows Installer Elevation of Privilege Vulnerability
Microsoft	Windows Internet Connection Sharing (ICS)	CVE-2025-21216	Internet Connection Sharing (ICS) Denial of Service Vulnerability
Microsoft	Windows Internet Connection Sharing (ICS)	CVE-2025-21254	Internet Connection Sharing (ICS) Denial of Service Vulnerability
Microsoft	Windows Internet Connection Sharing (ICS)	CVE-2025-21352	Internet Connection Sharing (ICS) Denial of Service Vulnerability
Microsoft	Windows Internet Connection Sharing (ICS)	CVE-2025-21212	Internet Connection Sharing (ICS) Denial of Service Vulnerability
Microsoft	Windows Kerberos	CVE-2025-21350	Windows Kerberos Denial of Service Vulnerability
Microsoft	Windows Kernel	CVE-2025-21359	Windows Kernel Security Feature Bypass Vulnerability
Microsoft	Windows LDAP - Lightweight Directory Access Protocol	CVE-2025-21376	Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Microsoft	Windows Message Queuing	CVE-2025-21181	Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Microsoft	Windows NTLM	CVE-2025-21377	NTLM Hash Disclosure Spoofing Vulnerability
Microsoft	Windows Remote Desktop Services	CVE-2025-21349	Windows Remote Desktop Configuration Service Tampering Vulnerability
Microsoft	Windows Resilient File System (ReFS) Deduplication Service	CVE-2025-21182	Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability
Microsoft	Windows Resilient File System (ReFS) Deduplication Service	CVE-2025-21183	Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability
Microsoft	Windows Routing and Remote Access Service (RRAS)	CVE-2025-21208	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Microsoft	Windows Routing and Remote Access Service (RRAS)	CVE-2025-21410	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Microsoft	Windows Setup Files Cleanup	CVE-2025-21419	Windows Setup Files Cleanup Elevation of Privilege Vulnerability
Microsoft	Windows Storage	CVE-2025-21391	Windows Storage Elevation of Privilege Vulnerability
Microsoft	Windows Telephony Server	CVE-2025-21201	Windows Telephony Server Remote Code Execution Vulnerability
Microsoft	Windows Telephony Service	CVE-2025-21190	Windows Telephony Service Remote Code Execution Vulnerability
Microsoft	Windows Telephony Service	CVE-2025-21407	Windows Telephony Service Remote Code Execution Vulnerability
Microsoft	Windows Telephony Service	CVE-2025-21406	Windows Telephony Service Remote Code Execution Vulnerability
Microsoft	Windows Telephony Service	CVE-2025-21371	Windows Telephony Service Remote Code Execution Vulnerability
Microsoft	Windows Telephony Service	CVE-2025-21200	Windows Telephony Service Remote Code Execution Vulnerability
Microsoft	Windows Update Stack	CVE-2025-21347	Windows Deployment Services Denial of Service Vulnerability
Microsoft	Windows Win32 Kernel Subsystem	CVE-2025-21367	Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-21188
MITRE
NVD

Issuing CNA: Microsoft

CVE Title: Azure Network Watcher VM Extension Elevation of Privilege Vulnerability
CVSS:

CVSS:3.1 Highest BaseScore:6.0/TemporalScore:5.2

Base score metrics
Attack Vector	Local
Attack Complexity	Low
Privileges Required	High
User Interaction	None
Scope	Unchanged
Confidentiality	None
Integrity	High
Availability	High

Executive Summary:
None
FAQ:

How do I get the update for Microsoft HPC Pack?

If you do not have automatic updates enabled you need to manually update your extension. See Update Network Watcher extension to the latest version for update instructions. Customers who have automatic updates enabled do not need to take any further action.

According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?

The word Remote in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.

According to the CVSS metric, privileges required is high (PR:H). What does that mean for this vulnerability?

To successfully exploit this vulnerability, an attacker must be a Contributor or Owner in the target environment to perform actions restricted from average users.

Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Feb-25

Information published.

Important

Elevation of Privilege

The following table provides an exploitability assessment of each of the vulnerabilities addressed this month. The vulnerabilities are listed in order of bulletin ID then CVE ID. Only vulnerabilities that have a severity rating of Critical or Important in the bulletins are included.

Exploitability Assessment	Publicly Disclosed	Exploited
Exploitation Less Likely	No	No

The following tables list the affected software details for the vulnerability.

CVE-2025-21188
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Network Watcher VM Extension	Release Notes (Security Update)	Important	Elevation of Privilege	None	Base: 6.0 Temporal: 5.2 Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C	1.4.3563.1	Yes	None

CVE ID	Acknowledgements
CVE-2025-21188	Filip Dragović

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-21206
MITRE
NVD

Issuing CNA: Microsoft

CVE Title: Visual Studio Installer Elevation of Privilege Vulnerability
CVSS:

CVSS:3.1 Highest BaseScore:7.3/TemporalScore:6.4

Base score metrics
Attack Vector	Local
Attack Complexity	Low
Privileges Required	Low
User Interaction	Required
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High

Executive Summary:
None
FAQ:

According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?

Exploitation of this vulnerability requires that a local user executes the Visual Studio installer

What privileges could be gained by an attacker who successfully exploited this vulnerability?

An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.

According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability?

Any authenticated attacker could trigger this vulnerability. It does not require admin or other elevated privileges.

Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Feb-25

Information published.

Important

Elevation of Privilege

Exploitability Assessment	Publicly Disclosed	Exploited
Exploitation Less Likely	No	No

The following tables list the affected software details for the vulnerability.

CVE-2025-21206
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)	Release Notes (Security Update)	Important	Elevation of Privilege	None	Base: 7.3 Temporal: 6.4 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	15.9.70	Maybe	None
Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)	Release Notes (Security Update)	Important	Elevation of Privilege	None	Base: 7.3 Temporal: 6.4 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	16.11.44	Maybe	None
Microsoft Visual Studio 2022 version 17.10	Release Notes (Security Update)	Important	Elevation of Privilege	None	Base: 7.3 Temporal: 6.4 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	17.10.11	Maybe	None
Microsoft Visual Studio 2022 version 17.12	Release Notes (Security Update)	Important	Elevation of Privilege	None	Base: 7.3 Temporal: 6.4 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	17.12.5	Maybe	None
Microsoft Visual Studio 2022 version 17.8	Release Notes (Security Update)	Important	Elevation of Privilege	None	Base: 7.3 Temporal: 6.4 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	17.8.18	Maybe	None

CVE ID	Acknowledgements
CVE-2025-21206	Karan Bamal with Sentinel One Stefan Đurašković Sandro Poppi

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-21351
MITRE
NVD

Issuing CNA: Microsoft

CVE Title: Windows Active Directory Domain Services API Denial of Service Vulnerability
CVSS:

CVSS:3.1 Highest BaseScore:7.5/TemporalScore:6.5

Base score metrics
Attack Vector	Network
Attack Complexity	Low
Privileges Required	None
User Interaction	None
Scope	Unchanged
Confidentiality	None
Integrity	None
Availability	High

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Feb-25

Information published.

Important

Denial of Service

Exploitability Assessment	Publicly Disclosed	Exploited
Exploitation Less Likely	No	No

The following tables list the affected software details for the vulnerability.

CVE-2025-21351
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Windows 10 Version 1607 for 32-bit Systems	5052006 (Security Update)	Important	Denial of Service	5049993	Base: 7.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows 10 Version 1607 for x64-based Systems	5052006 (Security Update)	Important	Denial of Service	5049993	Base: 7.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows 10 Version 1809 for 32-bit Systems	5052000 (Security Update)	Important	Denial of Service	5050008	Base: 7.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows 10 Version 1809 for x64-based Systems	5052000 (Security Update)	Important	Denial of Service	5050008	Base: 7.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows 10 Version 21H2 for 32-bit Systems	5051974 (Security Update)	Important	Denial of Service	5049981	Base: 7.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 21H2 for ARM64-based Systems	5051974 (Security Update)	Important	Denial of Service	5049981	Base: 7.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 21H2 for x64-based Systems	5051974 (Security Update)	Important	Denial of Service	5049981	Base: 7.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 22H2 for 32-bit Systems	5051974 (Security Update)	Important	Denial of Service	5049981	Base: 7.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 10 Version 22H2 for ARM64-based Systems	5051974 (Security Update)	Important	Denial of Service	5049981	Base: 7.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 10 Version 22H2 for x64-based Systems	5051974 (Security Update)	Important	Denial of Service	5049981	Base: 7.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 11 Version 22H2 for ARM64-based Systems	5051989 (Security Update)	Important	Denial of Service	5050021	Base: 7.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.22621.4890	Yes	None
Windows 11 Version 22H2 for x64-based Systems	5051989 (Security Update)	Important	Denial of Service	5050021	Base: 7.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.22621.4890	Yes	None
Windows 11 Version 23H2 for ARM64-based Systems	5051989 (Security Update)	Important	Denial of Service	5050021	Base: 7.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.22631.4890	Yes	None
Windows 11 Version 23H2 for x64-based Systems	5051989 (Security Update)	Important	Denial of Service	5050021	Base: 7.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.22631.4890	Yes	None
Windows 11 Version 24H2 for ARM64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Denial of Service	5050009	Base: 7.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows 11 Version 24H2 for x64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Denial of Service	5050009	Base: 7.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2016	5052006 (Security Update)	Important	Denial of Service	5049993	Base: 7.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows Server 2016 (Server Core installation)	5052006 (Security Update)	Important	Denial of Service	5049993	Base: 7.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows Server 2019	5052000 (Security Update)	Important	Denial of Service	5050008	Base: 7.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2019 (Server Core installation)	5052000 (Security Update)	Important	Denial of Service	5050008	Base: 7.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2022	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Important	Denial of Service	5049983	Base: 7.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022 (Server Core installation)	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Important	Denial of Service	5049983	Base: 7.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022, 23H2 Edition (Server Core installation)	5051980 (Security Update)	Important	Denial of Service	5049984	Base: 7.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.25398.1425	Yes	None
Windows Server 2025	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Denial of Service	5050009	Base: 7.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2025 (Server Core installation)	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Denial of Service	5050009	Base: 7.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None

CVE ID	Acknowledgements
CVE-2025-21351	Yuki Chen

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-21352
MITRE
NVD

Issuing CNA: Microsoft

CVE Title: Internet Connection Sharing (ICS) Denial of Service Vulnerability
CVSS:

CVSS:3.1 Highest BaseScore:6.5/TemporalScore:5.7

Base score metrics
Attack Vector	Adjacent
Attack Complexity	Low
Privileges Required	None
User Interaction	None
Scope	Unchanged
Confidentiality	None
Integrity	None
Availability	High

Executive Summary:
None
FAQ:

According to the CVSS metric, successful exploitation of this vulnerability has a high impact on availability (A:H). What does that mean for this vulnerability?

An attacker can send specially crafted packets which could affect availability of the service and result in Denial of Service (DoS).

Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Feb-25

Information published.

Important

Denial of Service

Exploitability Assessment	Publicly Disclosed	Exploited
Exploitation Less Likely	No	No

The following tables list the affected software details for the vulnerability.

CVE-2025-21352
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Windows 10 for 32-bit Systems	5052040 (Security Update)	Important	Denial of Service	5050013	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.10240.20915	Yes	None
Windows 10 for x64-based Systems	5052040 (Security Update)	Important	Denial of Service	5050013	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.10240.20915	Yes	None
Windows 10 Version 1607 for 32-bit Systems	5052006 (Security Update)	Important	Denial of Service	5049993	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows 10 Version 1607 for x64-based Systems	5052006 (Security Update)	Important	Denial of Service	5049993	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows 10 Version 1809 for 32-bit Systems	5052000 (Security Update)	Important	Denial of Service	5050008	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows 10 Version 1809 for x64-based Systems	5052000 (Security Update)	Important	Denial of Service	5050008	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows 10 Version 21H2 for 32-bit Systems	5051974 (Security Update)	Important	Denial of Service	5049981	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 21H2 for ARM64-based Systems	5051974 (Security Update)	Important	Denial of Service	5049981	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 21H2 for x64-based Systems	5051974 (Security Update)	Important	Denial of Service	5049981	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 22H2 for 32-bit Systems	5051974 (Security Update)	Important	Denial of Service	5049981	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 10 Version 22H2 for ARM64-based Systems	5051974 (Security Update)	Important	Denial of Service	5049981	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 10 Version 22H2 for x64-based Systems	5051974 (Security Update)	Important	Denial of Service	5049981	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 11 Version 22H2 for ARM64-based Systems	5051989 (Security Update)	Important	Denial of Service	5050021	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.22621.4890	Yes	None
Windows 11 Version 22H2 for x64-based Systems	5051989 (Security Update)	Important	Denial of Service	5050021	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.22621.4890	Yes	None
Windows 11 Version 23H2 for ARM64-based Systems	5051989 (Security Update)	Important	Denial of Service	5050021	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.22631.4890	Yes	None
Windows 11 Version 23H2 for x64-based Systems	5051989 (Security Update)	Important	Denial of Service	5050021	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.22631.4890	Yes	None
Windows 11 Version 24H2 for ARM64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Denial of Service	5050009	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows 11 Version 24H2 for x64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Denial of Service	5050009	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2008 for 32-bit Systems Service Pack 2	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Denial of Service	5050063	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Denial of Service	5050063	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 for x64-based Systems Service Pack 2	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Denial of Service	5050063	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Denial of Service	5050063	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 R2 for x64-based Systems Service Pack 1	5052016 (Monthly Rollup) 5052032 (Security Only)	Important	Denial of Service	5050049	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	6.1.7601.27566	Yes	None
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)	5052016 (Monthly Rollup) 5052032 (Security Only)	Important	Denial of Service	5050049	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	6.1.7601.27566	Yes	None
Windows Server 2012	5052020 (Monthly Rollup)	Important	Denial of Service	5050004	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	6.2.9200.25317	Yes	None
Windows Server 2012 (Server Core installation)	5052020 (Monthly Rollup)	Important	Denial of Service	5050004	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	6.2.9200.25317	Yes	None
Windows Server 2012 R2	5052042 (Monthly Rollup)	Important	Denial of Service	5050048	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	6.3.9600.22417	Yes	None
Windows Server 2012 R2 (Server Core installation)	5052042 (Monthly Rollup)	Important	Denial of Service	5050048	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	6.3.9600.22417	Yes	None
Windows Server 2016	5052006 (Security Update)	Important	Denial of Service	5049993	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows Server 2016 (Server Core installation)	5052006 (Security Update)	Important	Denial of Service	5049993	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows Server 2019	5052000 (Security Update)	Important	Denial of Service	5050008	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2019 (Server Core installation)	5052000 (Security Update)	Important	Denial of Service	5050008	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2022	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Important	Denial of Service	5049983	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022 (Server Core installation)	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Important	Denial of Service	5049983	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022, 23H2 Edition (Server Core installation)	5051980 (Security Update)	Important	Denial of Service	5049984	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.25398.1425	Yes	None
Windows Server 2025	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Denial of Service	5050009	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2025 (Server Core installation)	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Denial of Service	5050009	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None

CVE ID	Acknowledgements
CVE-2025-21352	bee13oy with Cyber Kunlun Lab

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-21368
MITRE
NVD

Issuing CNA: Microsoft

CVE Title: Microsoft Digest Authentication Remote Code Execution Vulnerability
CVSS:

CVSS:3.1 Highest BaseScore:8.8/TemporalScore:7.7

Base score metrics
Attack Vector	Network
Attack Complexity	Low
Privileges Required	Low
User Interaction	None
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High

Executive Summary:
None
FAQ:

How could an attacker exploit this vulnerability?

To successfully exploit this remote code execution vulnerability, an attacker could send a malicious logon request to the target domain controller.

According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability?

Any authenticated attacker could trigger this vulnerability. It does not require admin or other elevated privileges.

Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Feb-25

Information published.

Important

Remote Code Execution

Exploitability Assessment	Publicly Disclosed	Exploited
Exploitation Less Likely	No	No

The following tables list the affected software details for the vulnerability.

CVE-2025-21368
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Windows 10 for 32-bit Systems	5052040 (Security Update)	Important	Remote Code Execution	5050013	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.10240.20915	Yes	None
Windows 10 for x64-based Systems	5052040 (Security Update)	Important	Remote Code Execution	5050013	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.10240.20915	Yes	None
Windows 10 Version 1607 for 32-bit Systems	5052006 (Security Update)	Important	Remote Code Execution	5049993	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows 10 Version 1607 for x64-based Systems	5052006 (Security Update)	Important	Remote Code Execution	5049993	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows 10 Version 1809 for 32-bit Systems	5052000 (Security Update)	Important	Remote Code Execution	5050008	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows 10 Version 1809 for x64-based Systems	5052000 (Security Update)	Important	Remote Code Execution	5050008	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows 10 Version 21H2 for 32-bit Systems	5051974 (Security Update)	Important	Remote Code Execution	5049981	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 21H2 for ARM64-based Systems	5051974 (Security Update)	Important	Remote Code Execution	5049981	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 21H2 for x64-based Systems	5051974 (Security Update)	Important	Remote Code Execution	5049981	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 22H2 for 32-bit Systems	5051974 (Security Update)	Important	Remote Code Execution	5049981	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 10 Version 22H2 for ARM64-based Systems	5051974 (Security Update)	Important	Remote Code Execution	5049981	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 10 Version 22H2 for x64-based Systems	5051974 (Security Update)	Important	Remote Code Execution	5049981	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 11 Version 22H2 for ARM64-based Systems	5051989 (Security Update)	Important	Remote Code Execution	5050021	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22621.4890	Yes	None
Windows 11 Version 22H2 for x64-based Systems	5051989 (Security Update)	Important	Remote Code Execution	5050021	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22621.4890	Yes	None
Windows 11 Version 23H2 for ARM64-based Systems	5051989 (Security Update)	Important	Remote Code Execution	5050021	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22631.4890	Yes	None
Windows 11 Version 23H2 for x64-based Systems	5051989 (Security Update)	Important	Remote Code Execution	5050021	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22631.4890	Yes	None
Windows 11 Version 24H2 for ARM64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Remote Code Execution	5050009	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows 11 Version 24H2 for x64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Remote Code Execution	5050009	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2008 for 32-bit Systems Service Pack 2	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Remote Code Execution	5050063	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Remote Code Execution	5050063	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 for x64-based Systems Service Pack 2	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Remote Code Execution	5050063	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Remote Code Execution	5050063	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 R2 for x64-based Systems Service Pack 1	5052016 (Monthly Rollup) 5052032 (Security Only)	Important	Remote Code Execution	5050049	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.1.7601.27566	Yes	None
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)	5052016 (Monthly Rollup) 5052032 (Security Only)	Important	Remote Code Execution	5050049	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.1.7601.27566	Yes	None
Windows Server 2012	5052020 (Monthly Rollup)	Important	Remote Code Execution	5050004	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.2.9200.25317	Yes	None
Windows Server 2012 (Server Core installation)	5052020 (Monthly Rollup)	Important	Remote Code Execution	5050004	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.2.9200.25317	Yes	None
Windows Server 2012 R2	5052042 (Monthly Rollup)	Important	Remote Code Execution	5050048	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.3.9600.22417	Yes	None
Windows Server 2012 R2 (Server Core installation)	5052042 (Monthly Rollup)	Important	Remote Code Execution	5050048	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.3.9600.22417	Yes	None
Windows Server 2016	5052006 (Security Update)	Important	Remote Code Execution	5049993	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows Server 2016 (Server Core installation)	5052006 (Security Update)	Important	Remote Code Execution	5049993	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows Server 2019	5052000 (Security Update)	Important	Remote Code Execution	5050008	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2019 (Server Core installation)	5052000 (Security Update)	Important	Remote Code Execution	5050008	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2022	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Important	Remote Code Execution	5049983	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022 (Server Core installation)	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Important	Remote Code Execution	5049983	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022, 23H2 Edition (Server Core installation)	5051980 (Security Update)	Important	Remote Code Execution	5049984	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.25398.1425	Yes	None
Windows Server 2025	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Remote Code Execution	5050009	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2025 (Server Core installation)	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Remote Code Execution	5050009	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None

CVE ID	Acknowledgements
CVE-2025-21368	Yuki Chen

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-21369
MITRE
NVD

Issuing CNA: Microsoft

CVE Title: Microsoft Digest Authentication Remote Code Execution Vulnerability
CVSS:

CVSS:3.1 Highest BaseScore:8.8/TemporalScore:7.7

Base score metrics
Attack Vector	Network
Attack Complexity	Low
Privileges Required	Low
User Interaction	None
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High

Executive Summary:
None
FAQ:

How could an attacker exploit this vulnerability?

To successfully exploit this remote code execution vulnerability, an attacker could send a malicious logon request to the target domain controller.

According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability?

Any authenticated attacker could trigger this vulnerability. It does not require admin or other elevated privileges.

Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Feb-25

Information published.

Important

Remote Code Execution

Exploitability Assessment	Publicly Disclosed	Exploited
Exploitation Less Likely	No	No

The following tables list the affected software details for the vulnerability.

CVE-2025-21369
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Windows 10 for 32-bit Systems	5052040 (Security Update)	Important	Remote Code Execution	5050013	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.10240.20915	Yes	None
Windows 10 for x64-based Systems	5052040 (Security Update)	Important	Remote Code Execution	5050013	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.10240.20915	Yes	None
Windows 10 Version 1607 for 32-bit Systems	5052006 (Security Update)	Important	Remote Code Execution	5049993	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows 10 Version 1607 for x64-based Systems	5052006 (Security Update)	Important	Remote Code Execution	5049993	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows 10 Version 1809 for 32-bit Systems	5052000 (Security Update)	Important	Remote Code Execution	5050008	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows 10 Version 1809 for x64-based Systems	5052000 (Security Update)	Important	Remote Code Execution	5050008	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows 10 Version 21H2 for 32-bit Systems	5051974 (Security Update)	Important	Remote Code Execution	5049981	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 21H2 for ARM64-based Systems	5051974 (Security Update)	Important	Remote Code Execution	5049981	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 21H2 for x64-based Systems	5051974 (Security Update)	Important	Remote Code Execution	5049981	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 22H2 for 32-bit Systems	5051974 (Security Update)	Important	Remote Code Execution	5049981	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 10 Version 22H2 for ARM64-based Systems	5051974 (Security Update)	Important	Remote Code Execution	5049981	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 10 Version 22H2 for x64-based Systems	5051974 (Security Update)	Important	Remote Code Execution	5049981	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 11 Version 22H2 for ARM64-based Systems	5051989 (Security Update)	Important	Remote Code Execution	5050021	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22621.4890	Yes	None
Windows 11 Version 22H2 for x64-based Systems	5051989 (Security Update)	Important	Remote Code Execution	5050021	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22621.4890	Yes	None
Windows 11 Version 23H2 for ARM64-based Systems	5051989 (Security Update)	Important	Remote Code Execution	5050021	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22631.4890	Yes	None
Windows 11 Version 23H2 for x64-based Systems	5051989 (Security Update)	Important	Remote Code Execution	5050021	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22631.4890	Yes	None
Windows 11 Version 24H2 for ARM64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Remote Code Execution	5050009	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows 11 Version 24H2 for x64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Remote Code Execution	5050009	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2008 for 32-bit Systems Service Pack 2	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Remote Code Execution	5050063	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Remote Code Execution	5050063	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 for x64-based Systems Service Pack 2	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Remote Code Execution	5050063	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Remote Code Execution	5050063	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 R2 for x64-based Systems Service Pack 1	5052016 (Monthly Rollup) 5052032 (Security Only)	Important	Remote Code Execution	5050049	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.1.7601.27566	Yes	None
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)	5052016 (Monthly Rollup) 5052032 (Security Only)	Important	Remote Code Execution	5050049	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.1.7601.27566	Yes	None
Windows Server 2012	5052020 (Monthly Rollup)	Important	Remote Code Execution	5050004	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.2.9200.25317	Yes	None
Windows Server 2012 (Server Core installation)	5052020 (Monthly Rollup)	Important	Remote Code Execution	5050004	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.2.9200.25317	Yes	None
Windows Server 2012 R2	5052042 (Monthly Rollup)	Important	Remote Code Execution	5050048	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.3.9600.22417	Yes	None
Windows Server 2012 R2 (Server Core installation)	5052042 (Monthly Rollup)	Important	Remote Code Execution	5050048	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.3.9600.22417	Yes	None
Windows Server 2016	5052006 (Security Update)	Important	Remote Code Execution	5049993	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows Server 2016 (Server Core installation)	5052006 (Security Update)	Important	Remote Code Execution	5049993	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows Server 2019	5052000 (Security Update)	Important	Remote Code Execution	5050008	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2019 (Server Core installation)	5052000 (Security Update)	Important	Remote Code Execution	5050008	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2022	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Important	Remote Code Execution	5049983	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022 (Server Core installation)	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Important	Remote Code Execution	5049983	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022, 23H2 Edition (Server Core installation)	5051980 (Security Update)	Important	Remote Code Execution	5049984	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.25398.1425	Yes	None
Windows Server 2025	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Remote Code Execution	5050009	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2025 (Server Core installation)	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Remote Code Execution	5050009	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None

CVE ID	Acknowledgements
CVE-2025-21369	Yuki Chen

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-21375
MITRE
NVD

Issuing CNA: Microsoft

CVE Title: Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
CVSS:

CVSS:3.1 Highest BaseScore:7.8/TemporalScore:6.8

Base score metrics
Attack Vector	Local
Attack Complexity	Low
Privileges Required	Low
User Interaction	None
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High

Executive Summary:
None
FAQ:

What privileges could be gained by an attacker who successfully exploited this vulnerability?

An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.

Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Feb-25

Information published.

Important

Elevation of Privilege

Exploitability Assessment	Publicly Disclosed	Exploited
Exploitation Less Likely	No	No

The following tables list the affected software details for the vulnerability.

CVE-2025-21375
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Windows 10 for 32-bit Systems	5052040 (Security Update)	Important	Elevation of Privilege	5050013	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.10240.20915	Yes	None
Windows 10 for x64-based Systems	5052040 (Security Update)	Important	Elevation of Privilege	5050013	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.10240.20915	Yes	None
Windows 10 Version 1607 for 32-bit Systems	5052006 (Security Update)	Important	Elevation of Privilege	5049993	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows 10 Version 1607 for x64-based Systems	5052006 (Security Update)	Important	Elevation of Privilege	5049993	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows 10 Version 1809 for 32-bit Systems	5052000 (Security Update)	Important	Elevation of Privilege	5050008	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows 10 Version 1809 for x64-based Systems	5052000 (Security Update)	Important	Elevation of Privilege	5050008	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows 10 Version 21H2 for 32-bit Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 21H2 for ARM64-based Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 21H2 for x64-based Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 22H2 for 32-bit Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 10 Version 22H2 for ARM64-based Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 10 Version 22H2 for x64-based Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 11 Version 22H2 for ARM64-based Systems	5051989 (Security Update)	Important	Elevation of Privilege	5050021	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22621.4890	Yes	None
Windows 11 Version 22H2 for x64-based Systems	5051989 (Security Update)	Important	Elevation of Privilege	5050021	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22621.4890	Yes	None
Windows 11 Version 23H2 for ARM64-based Systems	5051989 (Security Update)	Important	Elevation of Privilege	5050021	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22631.4890	Yes	None
Windows 11 Version 23H2 for x64-based Systems	5051989 (Security Update)	Important	Elevation of Privilege	5050021	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22631.4890	Yes	None
Windows 11 Version 24H2 for ARM64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5050009	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows 11 Version 24H2 for x64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5050009	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2008 for 32-bit Systems Service Pack 2	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Elevation of Privilege	5050063	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Elevation of Privilege	5050063	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 for x64-based Systems Service Pack 2	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Elevation of Privilege	5050063	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Elevation of Privilege	5050063	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 R2 for x64-based Systems Service Pack 1	5052016 (Monthly Rollup) 5052032 (Security Only)	Important	Elevation of Privilege	5050049	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.1.7601.27566	Yes	None
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)	5052016 (Monthly Rollup) 5052032 (Security Only)	Important	Elevation of Privilege	5050049	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.1.7601.27566	Yes	None
Windows Server 2012	5052020 (Monthly Rollup)	Important	Elevation of Privilege	5050004	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.2.9200.25317	Yes	None
Windows Server 2012 (Server Core installation)	5052020 (Monthly Rollup)	Important	Elevation of Privilege	5050004	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.2.9200.25317	Yes	None
Windows Server 2012 R2	5052042 (Monthly Rollup)	Important	Elevation of Privilege	5050048	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.3.9600.22417	Yes	None
Windows Server 2012 R2 (Server Core installation)	5052042 (Monthly Rollup)	Important	Elevation of Privilege	5050048	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.3.9600.22417	Yes	None
Windows Server 2016	5052006 (Security Update)	Important	Elevation of Privilege	5049993	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows Server 2016 (Server Core installation)	5052006 (Security Update)	Important	Elevation of Privilege	5049993	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows Server 2019	5052000 (Security Update)	Important	Elevation of Privilege	5050008	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2019 (Server Core installation)	5052000 (Security Update)	Important	Elevation of Privilege	5050008	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2022	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5049983	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022 (Server Core installation)	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5049983	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022, 23H2 Edition (Server Core installation)	5051980 (Security Update)	Important	Elevation of Privilege	5049984	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.25398.1425	Yes	None
Windows Server 2025	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5050009	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2025 (Server Core installation)	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5050009	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None

CVE ID	Acknowledgements
CVE-2025-21375	Angelboy (@scwuaptx) with DEVCORE

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-21376
MITRE
NVD

Issuing CNA: Microsoft

CVE Title: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
CVSS:

CVSS:3.1 Highest BaseScore:8.1/TemporalScore:7.1

Base score metrics
Attack Vector	Network
Attack Complexity	High
Privileges Required	None
User Interaction	None
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High

Executive Summary:
None
FAQ:

According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?

Successful exploitation of this vulnerability requires an attacker to win a race condition.

How could an attacker exploit this vulnerability?

An unauthenticated attacker could send a specially crafted request to a vulnerable LDAP server. Successful exploitation could result in a buffer overflow which could be leveraged to achieve remote code execution.

Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Feb-25

Information published.

Critical

Remote Code Execution

Exploitability Assessment	Publicly Disclosed	Exploited
Exploitation More Likely	No	No

The following tables list the affected software details for the vulnerability.

CVE-2025-21376
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Windows 10 for 32-bit Systems	5052040 (Security Update)	Critical	Remote Code Execution	5050013	Base: 8.1 Temporal: 7.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.10240.20915	Yes	None
Windows 10 for x64-based Systems	5052040 (Security Update)	Critical	Remote Code Execution	5050013	Base: 8.1 Temporal: 7.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.10240.20915	Yes	None
Windows 10 Version 1607 for 32-bit Systems	5052006 (Security Update)	Critical	Remote Code Execution	5049993	Base: 8.1 Temporal: 7.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows 10 Version 1607 for x64-based Systems	5052006 (Security Update)	Critical	Remote Code Execution	5049993	Base: 8.1 Temporal: 7.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows 10 Version 1809 for 32-bit Systems	5052000 (Security Update)	Critical	Remote Code Execution	5050008	Base: 8.1 Temporal: 7.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows 10 Version 1809 for x64-based Systems	5052000 (Security Update)	Critical	Remote Code Execution	5050008	Base: 8.1 Temporal: 7.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows 10 Version 21H2 for 32-bit Systems	5051974 (Security Update)	Critical	Remote Code Execution	5049981	Base: 8.1 Temporal: 7.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 21H2 for ARM64-based Systems	5051974 (Security Update)	Critical	Remote Code Execution	5049981	Base: 8.1 Temporal: 7.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 21H2 for x64-based Systems	5051974 (Security Update)	Critical	Remote Code Execution	5049981	Base: 8.1 Temporal: 7.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 22H2 for 32-bit Systems	5051974 (Security Update)	Critical	Remote Code Execution	5049981	Base: 8.1 Temporal: 7.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 10 Version 22H2 for ARM64-based Systems	5051974 (Security Update)	Critical	Remote Code Execution	5049981	Base: 8.1 Temporal: 7.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 10 Version 22H2 for x64-based Systems	5051974 (Security Update)	Critical	Remote Code Execution	5049981	Base: 8.1 Temporal: 7.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 11 Version 22H2 for ARM64-based Systems	5051989 (Security Update)	Critical	Remote Code Execution	5050021	Base: 8.1 Temporal: 7.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22621.4890	Yes	None
Windows 11 Version 22H2 for x64-based Systems	5051989 (Security Update)	Critical	Remote Code Execution	5050021	Base: 8.1 Temporal: 7.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22621.4890	Yes	None
Windows 11 Version 23H2 for ARM64-based Systems	5051989 (Security Update)	Critical	Remote Code Execution	5050021	Base: 8.1 Temporal: 7.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22631.4890	Yes	None
Windows 11 Version 23H2 for x64-based Systems	5051989 (Security Update)	Critical	Remote Code Execution	5050021	Base: 8.1 Temporal: 7.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22631.4890	Yes	None
Windows 11 Version 24H2 for ARM64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Critical	Remote Code Execution	5050009	Base: 8.1 Temporal: 7.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows 11 Version 24H2 for x64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Critical	Remote Code Execution	5050009	Base: 8.1 Temporal: 7.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2008 for 32-bit Systems Service Pack 2	5052038 (Monthly Rollup) 5052072 (Security Only)	Critical	Remote Code Execution	5050063	Base: 8.1 Temporal: 7.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)	5052038 (Monthly Rollup) 5052072 (Security Only)	Critical	Remote Code Execution	5050063	Base: 8.1 Temporal: 7.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 for x64-based Systems Service Pack 2	5052038 (Monthly Rollup) 5052072 (Security Only)	Critical	Remote Code Execution	5050063	Base: 8.1 Temporal: 7.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)	5052038 (Monthly Rollup) 5052072 (Security Only)	Critical	Remote Code Execution	5050063	Base: 8.1 Temporal: 7.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 R2 for x64-based Systems Service Pack 1	5052016 (Monthly Rollup) 5052032 (Security Only)	Critical	Remote Code Execution	5050049	Base: 8.1 Temporal: 7.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.1.7601.27566	Yes	None
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)	5052016 (Monthly Rollup) 5052032 (Security Only)	Critical	Remote Code Execution	5050049	Base: 8.1 Temporal: 7.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.1.7601.27566	Yes	None
Windows Server 2012	5052020 (Monthly Rollup)	Critical	Remote Code Execution	5050004	Base: 8.1 Temporal: 7.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.2.9200.25317	Yes	None
Windows Server 2012 (Server Core installation)	5052020 (Monthly Rollup)	Critical	Remote Code Execution	5050004	Base: 8.1 Temporal: 7.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.2.9200.25317	Yes	None
Windows Server 2012 R2	5052042 (Monthly Rollup)	Critical	Remote Code Execution	5050048	Base: 8.1 Temporal: 7.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.3.9600.22417	Yes	None
Windows Server 2012 R2 (Server Core installation)	5052042 (Monthly Rollup)	Critical	Remote Code Execution	5050048	Base: 8.1 Temporal: 7.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.3.9600.22417	Yes	None
Windows Server 2016	5052006 (Security Update)	Critical	Remote Code Execution	5049993	Base: 8.1 Temporal: 7.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows Server 2016 (Server Core installation)	5052006 (Security Update)	Critical	Remote Code Execution	5049993	Base: 8.1 Temporal: 7.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows Server 2019	5052000 (Security Update)	Critical	Remote Code Execution	5050008	Base: 8.1 Temporal: 7.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2019 (Server Core installation)	5052000 (Security Update)	Critical	Remote Code Execution	5050008	Base: 8.1 Temporal: 7.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2022	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Critical	Remote Code Execution	5049983	Base: 8.1 Temporal: 7.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022 (Server Core installation)	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Critical	Remote Code Execution	5049983	Base: 8.1 Temporal: 7.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022, 23H2 Edition (Server Core installation)	5051980 (Security Update)	Critical	Remote Code Execution	5049984	Base: 8.1 Temporal: 7.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.25398.1425	Yes	None
Windows Server 2025	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Critical	Remote Code Execution	5050009	Base: 8.1 Temporal: 7.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2025 (Server Core installation)	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Critical	Remote Code Execution	5050009	Base: 8.1 Temporal: 7.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None

CVE ID	Acknowledgements
CVE-2025-21376	Anonymous

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-21379
MITRE
NVD

Issuing CNA: Microsoft

CVE Title: DHCP Client Service Remote Code Execution Vulnerability
CVSS:

CVSS:3.1 Highest BaseScore:7.1/TemporalScore:6.2

Base score metrics
Attack Vector	Adjacent
Attack Complexity	High
Privileges Required	None
User Interaction	Required
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High

Executive Summary:
None
FAQ:

According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?

The attacker must inject themselves into the logical network path between the target and the resource requested by the victim to read or modify network communications. This is called a machine-in-the-middle (MITM) attack.

According to the CVSS score, the attack vector is adjacent (AV:A). What does this mean for this vulnerability?

This attack is limited to systems connected to the same network segment as the attacker. The attack cannot be performed across multiple networks (for example, a WAN) and would be limited to systems on the same network switch or virtual network.

Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Feb-25

Information published.

Critical

Remote Code Execution

Exploitability Assessment	Publicly Disclosed	Exploited
Exploitation Less Likely	No	No

The following tables list the affected software details for the vulnerability.

CVE-2025-21379
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Windows 11 Version 24H2 for ARM64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Critical	Remote Code Execution	5050009	Base: 7.1 Temporal: 6.2 Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows 11 Version 24H2 for x64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Critical	Remote Code Execution	5050009	Base: 7.1 Temporal: 6.2 Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2025	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Critical	Remote Code Execution	5050009	Base: 7.1 Temporal: 6.2 Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2025 (Server Core installation)	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Critical	Remote Code Execution	5050009	Base: 7.1 Temporal: 6.2 Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None

CVE ID	Acknowledgements
CVE-2025-21379	Milan Justel with Microsoft

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-21383
MITRE
NVD

Issuing CNA: Microsoft

CVE Title: Microsoft Excel Information Disclosure Vulnerability
CVSS:

CVSS:3.1 Highest BaseScore:7.8/TemporalScore:6.8

Base score metrics
Attack Vector	Local
Attack Complexity	Low
Privileges Required	None
User Interaction	Required
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High

Executive Summary:
None
FAQ:

What type of information could be disclosed by this vulnerability?

An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.

How could an attacker exploit this vulnerability?

To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.

Additionally, an attacker could convince a local user to open a malicious file. The attacker would have to convince the user to click a link, typically by way of an enticement in an email or instant message, and then convince them to open the specially crafted file.

Is the Preview Pane an attack vector for this vulnerability?

No, the Preview Pane is not an attack vector.

Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Feb-25

Information published.

Important

Information Disclosure

Exploitability Assessment	Publicly Disclosed	Exploited
Exploitation Less Likely	No	No

The following tables list the affected software details for the vulnerability.

CVE-2025-21383
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Microsoft 365 Apps for Enterprise for 32-bit Systems	Click to Run (Security Update)	Important	Information Disclosure	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	https://aka.ms/OfficeSecurityReleases	No	None
Microsoft 365 Apps for Enterprise for 64-bit Systems	Click to Run (Security Update)	Important	Information Disclosure	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	https://aka.ms/OfficeSecurityReleases	No	None
Microsoft Excel 2016 (32-bit edition)	5002179 (Security Update)	Important	Information Disclosure	3118335	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	16.0.5487.1000	Maybe	None
Microsoft Excel 2016 (64-bit edition)	5002179 (Security Update)	Important	Information Disclosure	3118335	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	16.0.5487.1000	Maybe	None
Microsoft Office 2019 for 32-bit editions	Click to Run (Security Update)	Important	Information Disclosure	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	https://aka.ms/OfficeSecurityReleases	No	None
Microsoft Office 2019 for 64-bit editions	Click to Run (Security Update)	Important	Information Disclosure	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	https://aka.ms/OfficeSecurityReleases	No	None
Microsoft Office LTSC 2021 for 32-bit editions	Click to Run (Security Update)	Important	Information Disclosure	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	https://aka.ms/OfficeSecurityReleases	No	None
Microsoft Office LTSC 2021 for 64-bit editions	Click to Run (Security Update)	Important	Information Disclosure	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	https://aka.ms/OfficeSecurityReleases	No	None
Microsoft Office LTSC 2024 for 32-bit editions	Click to Run (Security Update)	Important	Information Disclosure	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	https://aka.ms/OfficeSecurityReleases	No	None
Microsoft Office LTSC 2024 for 64-bit editions	Click to Run (Security Update)	Important	Information Disclosure	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	https://aka.ms/OfficeSecurityReleases	No	None
Microsoft Office LTSC for Mac 2021	Release Notes (Security Update)	Important	Information Disclosure	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	16.94.25020927	Maybe	None
Microsoft Office LTSC for Mac 2024	Release Notes (Security Update)	Important	Information Disclosure	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	16.94.25020927	Maybe	None

CVE ID	Acknowledgements
CVE-2025-21383	F4

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-21182
MITRE
NVD

Issuing CNA: Microsoft

CVE Title: Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability
CVSS:

CVSS:3.1 Highest BaseScore:7.4/TemporalScore:6.4

Base score metrics
Attack Vector	Local
Attack Complexity	High
Privileges Required	None
User Interaction	None
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High

Executive Summary:
None
FAQ:

According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?

Successful exploitation of this vulnerability requires an attacker to win a race condition.

What privileges could be gained by an attacker who successfully exploited this vulnerability?

An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.

Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Feb-25

Information published.

Important

Elevation of Privilege

Exploitability Assessment	Publicly Disclosed	Exploited
Exploitation Less Likely	No	No

The following tables list the affected software details for the vulnerability.

CVE-2025-21182
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Windows 11 Version 24H2 for ARM64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5050009	Base: 7.4 Temporal: 6.4 Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows 11 Version 24H2 for x64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5050009	Base: 7.4 Temporal: 6.4 Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2025	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5050009	Base: 7.4 Temporal: 6.4 Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2025 (Server Core installation)	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5050009	Base: 7.4 Temporal: 6.4 Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None

CVE ID	Acknowledgements
CVE-2025-21182	Jongseong Kim (nevul37) with Ajou University, and working at ENKI WhiteHat Dongjun Kim (smlijun) with Ajou University, and working at ENKI WhiteHat

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-21183
MITRE
NVD

Issuing CNA: Microsoft

CVE Title: Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability
CVSS:

CVSS:3.1 Highest BaseScore:7.4/TemporalScore:6.4

Base score metrics
Attack Vector	Local
Attack Complexity	High
Privileges Required	None
User Interaction	None
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High

Executive Summary:
None
FAQ:

According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?

Successful exploitation of this vulnerability requires an attacker to win a race condition.

What privileges could be gained by an attacker who successfully exploited this vulnerability?

An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.

Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Feb-25

Information published.

Important

Elevation of Privilege

Exploitability Assessment	Publicly Disclosed	Exploited
Exploitation Less Likely	No	No

The following tables list the affected software details for the vulnerability.

CVE-2025-21183
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Windows 11 Version 24H2 for ARM64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5050009	Base: 7.4 Temporal: 6.4 Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows 11 Version 24H2 for x64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5050009	Base: 7.4 Temporal: 6.4 Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2025	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5050009	Base: 7.4 Temporal: 6.4 Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2025 (Server Core installation)	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5050009	Base: 7.4 Temporal: 6.4 Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None

CVE ID	Acknowledgements
CVE-2025-21183	Jongseong Kim (nevul37) with Ajou University, and working at ENKI WhiteHat Dongjun Kim (smlijun) with Ajou University, and working at ENKI WhiteHat

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-21391
MITRE
NVD

Issuing CNA: Microsoft

CVE Title: Windows Storage Elevation of Privilege Vulnerability
CVSS:

CVSS:3.1 Highest BaseScore:7.1/TemporalScore:6.6

Base score metrics
Attack Vector	Local
Attack Complexity	Low
Privileges Required	Low
User Interaction	None
Scope	Unchanged
Confidentiality	None
Integrity	High
Availability	High

Executive Summary:
None
FAQ:

What privileges could be gained by an attacker who successfully exploited the vulnerability?

An attacker would only be able to delete targeted files on a system.

According to the CVSS metrics, successful exploitation of this vulnerability could lead to no loss of confidentiality (C:N) but have major impact on integrity (I:H) and on availability (A:H). What does that mean for this vulnerability?

This vulnerability does not allow disclosure of any confidential information, but could allow an attacker to delete data that could include data that results in the service being unavailable.

Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Feb-25

Information published.

Important

Elevation of Privilege

Exploitability Assessment	Publicly Disclosed	Exploited
Exploitation Detected	No	Yes

The following tables list the affected software details for the vulnerability.

CVE-2025-21391
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Windows 10 for 32-bit Systems	5052040 (Security Update)	Important	Elevation of Privilege	5050013	Base: 7.1 Temporal: 6.6 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C	10.0.10240.20915	Yes	None
Windows 10 for x64-based Systems	5052040 (Security Update)	Important	Elevation of Privilege	5050013	Base: 7.1 Temporal: 6.6 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C	10.0.10240.20915	Yes	None
Windows 10 Version 1607 for 32-bit Systems	5052006 (Security Update)	Important	Elevation of Privilege	5049993	Base: 7.1 Temporal: 6.6 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows 10 Version 1607 for x64-based Systems	5052006 (Security Update)	Important	Elevation of Privilege	5049993	Base: 7.1 Temporal: 6.6 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows 10 Version 1809 for 32-bit Systems	5052000 (Security Update)	Important	Elevation of Privilege	5050008	Base: 7.1 Temporal: 6.6 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows 10 Version 1809 for x64-based Systems	5052000 (Security Update)	Important	Elevation of Privilege	5050008	Base: 7.1 Temporal: 6.6 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows 10 Version 21H2 for 32-bit Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 7.1 Temporal: 6.6 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 21H2 for ARM64-based Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 7.1 Temporal: 6.6 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 21H2 for x64-based Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 7.1 Temporal: 6.6 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 22H2 for 32-bit Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 7.1 Temporal: 6.6 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 10 Version 22H2 for ARM64-based Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 7.1 Temporal: 6.6 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 10 Version 22H2 for x64-based Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 7.1 Temporal: 6.6 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 11 Version 22H2 for ARM64-based Systems	5051989 (Security Update)	Important	Elevation of Privilege	5050021	Base: 7.1 Temporal: 6.6 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C	10.0.22621.4890	Yes	None
Windows 11 Version 22H2 for x64-based Systems	5051989 (Security Update)	Important	Elevation of Privilege	5050021	Base: 7.1 Temporal: 6.6 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C	10.0.22621.4890	Yes	None
Windows 11 Version 23H2 for ARM64-based Systems	5051989 (Security Update)	Important	Elevation of Privilege	5050021	Base: 7.1 Temporal: 6.6 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C	10.0.22631.4890	Yes	None
Windows 11 Version 23H2 for x64-based Systems	5051989 (Security Update)	Important	Elevation of Privilege	5050021	Base: 7.1 Temporal: 6.6 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C	10.0.22631.4890	Yes	None
Windows 11 Version 24H2 for ARM64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5050009	Base: 7.1 Temporal: 6.6 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows 11 Version 24H2 for x64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5050009	Base: 7.1 Temporal: 6.6 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2016	5052006 (Security Update)	Important	Elevation of Privilege	5049993	Base: 7.1 Temporal: 6.6 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows Server 2016 (Server Core installation)	5052006 (Security Update)	Important	Elevation of Privilege	5049993	Base: 7.1 Temporal: 6.6 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows Server 2019	5052000 (Security Update)	Important	Elevation of Privilege	5050008	Base: 7.1 Temporal: 6.6 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2019 (Server Core installation)	5052000 (Security Update)	Important	Elevation of Privilege	5050008	Base: 7.1 Temporal: 6.6 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2022	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5049983	Base: 7.1 Temporal: 6.6 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022 (Server Core installation)	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5049983	Base: 7.1 Temporal: 6.6 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022, 23H2 Edition (Server Core installation)	5051980 (Security Update)	Important	Elevation of Privilege	5049984	Base: 7.1 Temporal: 6.6 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C	10.0.25398.1425	Yes	None
Windows Server 2025	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5050009	Base: 7.1 Temporal: 6.6 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2025 (Server Core installation)	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5050009	Base: 7.1 Temporal: 6.6 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None

CVE ID	Acknowledgements
CVE-2025-21391	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-21418
MITRE
NVD

Issuing CNA: Microsoft

CVE Title: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVSS:

CVSS:3.1 Highest BaseScore:7.8/TemporalScore:7.2

Base score metrics
Attack Vector	Local
Attack Complexity	Low
Privileges Required	Low
User Interaction	None
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High

Executive Summary:
None
FAQ:

What privileges could be gained by an attacker who successfully exploited this vulnerability?

An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.

Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Feb-25

Information published.

Important

Elevation of Privilege

Exploitability Assessment	Publicly Disclosed	Exploited
Exploitation Detected	No	Yes

The following tables list the affected software details for the vulnerability.

CVE-2025-21418
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Windows 10 for 32-bit Systems	5052040 (Security Update)	Important	Elevation of Privilege	5050013	Base: 7.8 Temporal: 7.2 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C	10.0.10240.20915	Yes	None
Windows 10 for x64-based Systems	5052040 (Security Update)	Important	Elevation of Privilege	5050013	Base: 7.8 Temporal: 7.2 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C	10.0.10240.20915	Yes	None
Windows 10 Version 1607 for 32-bit Systems	5052006 (Security Update)	Important	Elevation of Privilege	5049993	Base: 7.8 Temporal: 7.2 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows 10 Version 1607 for x64-based Systems	5052006 (Security Update)	Important	Elevation of Privilege	5049993	Base: 7.8 Temporal: 7.2 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows 10 Version 1809 for 32-bit Systems	5052000 (Security Update)	Important	Elevation of Privilege	5050008	Base: 7.8 Temporal: 7.2 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows 10 Version 1809 for x64-based Systems	5052000 (Security Update)	Important	Elevation of Privilege	5050008	Base: 7.8 Temporal: 7.2 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows 10 Version 21H2 for 32-bit Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 7.8 Temporal: 7.2 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 21H2 for ARM64-based Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 7.8 Temporal: 7.2 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 21H2 for x64-based Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 7.8 Temporal: 7.2 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 22H2 for 32-bit Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 7.8 Temporal: 7.2 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 10 Version 22H2 for ARM64-based Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 7.8 Temporal: 7.2 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 10 Version 22H2 for x64-based Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 7.8 Temporal: 7.2 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 11 Version 22H2 for ARM64-based Systems	5051989 (Security Update)	Important	Elevation of Privilege	5050021	Base: 7.8 Temporal: 7.2 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C	10.0.22621.4890	Yes	None
Windows 11 Version 22H2 for x64-based Systems	5051989 (Security Update)	Important	Elevation of Privilege	5050021	Base: 7.8 Temporal: 7.2 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C	10.0.22621.4890	Yes	None
Windows 11 Version 23H2 for ARM64-based Systems	5051989 (Security Update)	Important	Elevation of Privilege	5050021	Base: 7.8 Temporal: 7.2 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C	10.0.22631.4890	Yes	None
Windows 11 Version 23H2 for x64-based Systems	5051989 (Security Update)	Important	Elevation of Privilege	5050021	Base: 7.8 Temporal: 7.2 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C	10.0.22631.4890	Yes	None
Windows 11 Version 24H2 for ARM64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5050009	Base: 7.8 Temporal: 7.2 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows 11 Version 24H2 for x64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5050009	Base: 7.8 Temporal: 7.2 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2008 for 32-bit Systems Service Pack 2	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Elevation of Privilege	5050063	Base: 7.8 Temporal: 7.2 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Elevation of Privilege	5050063	Base: 7.8 Temporal: 7.2 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 for x64-based Systems Service Pack 2	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Elevation of Privilege	5050063	Base: 7.8 Temporal: 7.2 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Elevation of Privilege	5050063	Base: 7.8 Temporal: 7.2 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 R2 for x64-based Systems Service Pack 1	5052016 (Monthly Rollup) 5052032 (Security Only)	Important	Elevation of Privilege	5050049	Base: 7.8 Temporal: 7.2 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C	6.1.7601.27566	Yes	None
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)	5052016 (Monthly Rollup) 5052032 (Security Only)	Important	Elevation of Privilege	5050049	Base: 7.8 Temporal: 7.2 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C	6.1.7601.27566	Yes	None
Windows Server 2012	5052020 (Monthly Rollup)	Important	Elevation of Privilege	5050004	Base: 7.8 Temporal: 7.2 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C	6.2.9200.25317	Yes	None
Windows Server 2012 (Server Core installation)	5052020 (Monthly Rollup)	Important	Elevation of Privilege	5050004	Base: 7.8 Temporal: 7.2 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C	6.2.9200.25317	Yes	None
Windows Server 2012 R2	5052042 (Monthly Rollup)	Important	Elevation of Privilege	5050048	Base: 7.8 Temporal: 7.2 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C	6.3.9600.22417	Yes	None
Windows Server 2012 R2 (Server Core installation)	5052042 (Monthly Rollup)	Important	Elevation of Privilege	5050048	Base: 7.8 Temporal: 7.2 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C	6.3.9600.22417	Yes	None
Windows Server 2016	5052006 (Security Update)	Important	Elevation of Privilege	5049993	Base: 7.8 Temporal: 7.2 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows Server 2016 (Server Core installation)	5052006 (Security Update)	Important	Elevation of Privilege	5049993	Base: 7.8 Temporal: 7.2 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows Server 2019	5052000 (Security Update)	Important	Elevation of Privilege	5050008	Base: 7.8 Temporal: 7.2 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2019 (Server Core installation)	5052000 (Security Update)	Important	Elevation of Privilege	5050008	Base: 7.8 Temporal: 7.2 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2022	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5049983	Base: 7.8 Temporal: 7.2 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022 (Server Core installation)	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5049983	Base: 7.8 Temporal: 7.2 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022, 23H2 Edition (Server Core installation)	5051980 (Security Update)	Important	Elevation of Privilege	5049984	Base: 7.8 Temporal: 7.2 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C	10.0.25398.1425	Yes	None
Windows Server 2025	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5050009	Base: 7.8 Temporal: 7.2 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2025 (Server Core installation)	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5050009	Base: 7.8 Temporal: 7.2 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None

CVE ID	Acknowledgements
CVE-2025-21418	Anonymous

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-21419
MITRE
NVD

Issuing CNA: Microsoft

CVE Title: Windows Setup Files Cleanup Elevation of Privilege Vulnerability
CVSS:

CVSS:3.1 Highest BaseScore:7.1/TemporalScore:6.6

Base score metrics
Attack Vector	Local
Attack Complexity	Low
Privileges Required	Low
User Interaction	None
Scope	Unchanged
Confidentiality	None
Integrity	High
Availability	High

Executive Summary:
None
FAQ:

This vulnerability does not allow disclosure of any confidential information, but could allow an attacker to delete data that could include data that results in the service being unavailable.

What privileges could be gained by an attacker who successfully exploited the vulnerability?

An attacker would only be able to delete targeted files on a system.

Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Feb-25

Information published.

Important

Elevation of Privilege

Exploitability Assessment	Publicly Disclosed	Exploited
Exploitation More Likely	No	No

The following tables list the affected software details for the vulnerability.

CVE-2025-21419
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Windows 10 for 32-bit Systems	5052040 (Security Update)	Important	Elevation of Privilege	5050013	Base: 7.1 Temporal: 6.6 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C	10.0.10240.20915	Yes	None
Windows 10 for x64-based Systems	5052040 (Security Update)	Important	Elevation of Privilege	5050013	Base: 7.1 Temporal: 6.6 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C	10.0.10240.20915	Yes	None
Windows 10 Version 1607 for 32-bit Systems	5052006 (Security Update)	Important	Elevation of Privilege	5049993	Base: 7.1 Temporal: 6.6 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows 10 Version 1607 for x64-based Systems	5052006 (Security Update)	Important	Elevation of Privilege	5049993	Base: 7.1 Temporal: 6.6 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows 10 Version 1809 for 32-bit Systems	5052000 (Security Update)	Important	Elevation of Privilege	5050008	Base: 7.1 Temporal: 6.6 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows 10 Version 1809 for x64-based Systems	5052000 (Security Update)	Important	Elevation of Privilege	5050008	Base: 7.1 Temporal: 6.6 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows 10 Version 21H2 for 32-bit Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 7.1 Temporal: 6.6 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 21H2 for ARM64-based Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 7.1 Temporal: 6.6 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 21H2 for x64-based Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 7.1 Temporal: 6.6 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 22H2 for 32-bit Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 7.1 Temporal: 6.6 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 10 Version 22H2 for ARM64-based Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 7.1 Temporal: 6.6 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 10 Version 22H2 for x64-based Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 7.1 Temporal: 6.6 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 11 Version 22H2 for ARM64-based Systems	5051989 (Security Update)	Important	Elevation of Privilege	5050021	Base: 7.1 Temporal: 6.6 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C	10.0.22621.4890	Yes	None
Windows 11 Version 22H2 for x64-based Systems	5051989 (Security Update)	Important	Elevation of Privilege	5050021	Base: 7.1 Temporal: 6.6 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C	10.0.22621.4890	Yes	None
Windows 11 Version 23H2 for ARM64-based Systems	5051989 (Security Update)	Important	Elevation of Privilege	5050021	Base: 7.1 Temporal: 6.6 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C	10.0.22631.4890	Yes	None
Windows 11 Version 23H2 for x64-based Systems	5051989 (Security Update)	Important	Elevation of Privilege	5050021	Base: 7.1 Temporal: 6.6 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C	10.0.22631.4890	Yes	None
Windows 11 Version 24H2 for ARM64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5050009	Base: 7.1 Temporal: 6.6 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows 11 Version 24H2 for x64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5050009	Base: 7.1 Temporal: 6.6 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2008 R2 for x64-based Systems Service Pack 1	5052016 (Monthly Rollup) 5052032 (Security Only)	Important	Elevation of Privilege	5050049	Base: 7.1 Temporal: 6.6 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C	6.1.7601.27566	Yes	None
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)	5052016 (Monthly Rollup) 5052032 (Security Only)	Important	Elevation of Privilege	5050049	Base: 7.1 Temporal: 6.6 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C	6.1.7601.27566	Yes	None
Windows Server 2012	5052020 (Monthly Rollup)	Important	Elevation of Privilege	5050004	Base: 7.1 Temporal: 6.6 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C	6.2.9200.25317	Yes	None
Windows Server 2012 (Server Core installation)	5052020 (Monthly Rollup)	Important	Elevation of Privilege	5050004	Base: 7.1 Temporal: 6.6 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C	6.2.9200.25317	Yes	None
Windows Server 2012 R2	5052042 (Monthly Rollup)	Important	Elevation of Privilege	5050048	Base: 7.1 Temporal: 6.6 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C	6.3.9600.22417	Yes	None
Windows Server 2012 R2 (Server Core installation)	5052042 (Monthly Rollup)	Important	Elevation of Privilege	5050048	Base: 7.1 Temporal: 6.6 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C	6.3.9600.22417	Yes	None
Windows Server 2016	5052006 (Security Update)	Important	Elevation of Privilege	5049993	Base: 7.1 Temporal: 6.6 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows Server 2016 (Server Core installation)	5052006 (Security Update)	Important	Elevation of Privilege	5049993	Base: 7.1 Temporal: 6.6 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows Server 2019	5052000 (Security Update)	Important	Elevation of Privilege	5050008	Base: 7.1 Temporal: 6.6 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2019 (Server Core installation)	5052000 (Security Update)	Important	Elevation of Privilege	5050008	Base: 7.1 Temporal: 6.6 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2022	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5049983	Base: 7.1 Temporal: 6.6 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022 (Server Core installation)	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5049983	Base: 7.1 Temporal: 6.6 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022, 23H2 Edition (Server Core installation)	5051980 (Security Update)	Important	Elevation of Privilege	5049984	Base: 7.1 Temporal: 6.6 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C	10.0.25398.1425	Yes	None
Windows Server 2025	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5050009	Base: 7.1 Temporal: 6.6 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2025 (Server Core installation)	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5050009	Base: 7.1 Temporal: 6.6 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None

CVE ID	Acknowledgements
CVE-2025-21419	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-21420
MITRE
NVD

Issuing CNA: Microsoft

CVE Title: Windows Disk Cleanup Tool Elevation of Privilege Vulnerability
CVSS:

CVSS:3.1 Highest BaseScore:7.8/TemporalScore:6.8

Base score metrics
Attack Vector	Local
Attack Complexity	Low
Privileges Required	Low
User Interaction	None
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High

Executive Summary:
None
FAQ:

What privileges could be gained by an attacker who successfully exploited this vulnerability?

An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.

Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Feb-25

Information published.

Important

Elevation of Privilege

Exploitability Assessment	Publicly Disclosed	Exploited
Exploitation More Likely	No	No

The following tables list the affected software details for the vulnerability.

CVE-2025-21420
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Windows 10 for 32-bit Systems	5052040 (Security Update)	Important	Elevation of Privilege	5050013	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.10240.20915	Yes	None
Windows 10 for x64-based Systems	5052040 (Security Update)	Important	Elevation of Privilege	5050013	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.10240.20915	Yes	None
Windows 10 Version 1607 for 32-bit Systems	5052006 (Security Update)	Important	Elevation of Privilege	5049993	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows 10 Version 1607 for x64-based Systems	5052006 (Security Update)	Important	Elevation of Privilege	5049993	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows 10 Version 1809 for 32-bit Systems	5052000 (Security Update)	Important	Elevation of Privilege	5050008	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows 10 Version 1809 for x64-based Systems	5052000 (Security Update)	Important	Elevation of Privilege	5050008	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows 10 Version 21H2 for 32-bit Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 21H2 for ARM64-based Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 21H2 for x64-based Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 22H2 for 32-bit Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 10 Version 22H2 for ARM64-based Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 10 Version 22H2 for x64-based Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 11 Version 22H2 for ARM64-based Systems	5051989 (Security Update)	Important	Elevation of Privilege	5050021	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22621.4890	Yes	None
Windows 11 Version 22H2 for x64-based Systems	5051989 (Security Update)	Important	Elevation of Privilege	5050021	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22621.4890	Yes	None
Windows 11 Version 23H2 for ARM64-based Systems	5051989 (Security Update)	Important	Elevation of Privilege	5050021	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22631.4890	Yes	None
Windows 11 Version 23H2 for x64-based Systems	5051989 (Security Update)	Important	Elevation of Privilege	5050021	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22631.4890	Yes	None
Windows 11 Version 24H2 for ARM64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5050009	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows 11 Version 24H2 for x64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5050009	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2012	5052020 (Monthly Rollup)	Important	Elevation of Privilege	5050004	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.2.9200.25317	Yes	None
Windows Server 2012 (Server Core installation)	5052020 (Monthly Rollup)	Important	Elevation of Privilege	5050004	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.2.9200.25317	Yes	None
Windows Server 2012 R2	5052042 (Monthly Rollup)	Important	Elevation of Privilege	5050048	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.3.9600.22417	Yes	None
Windows Server 2012 R2 (Server Core installation)	5052042 (Monthly Rollup)	Important	Elevation of Privilege	5050048	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.3.9600.22417	Yes	None
Windows Server 2016	5052006 (Security Update)	Important	Elevation of Privilege	5049993	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows Server 2016 (Server Core installation)	5052006 (Security Update)	Important	Elevation of Privilege	5049993	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows Server 2019	5052000 (Security Update)	Important	Elevation of Privilege	5050008	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2019 (Server Core installation)	5052000 (Security Update)	Important	Elevation of Privilege	5050008	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2022	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5049983	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022 (Server Core installation)	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5049983	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022, 23H2 Edition (Server Core installation)	5051980 (Security Update)	Important	Elevation of Privilege	5049984	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.25398.1425	Yes	None
Windows Server 2025	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5050009	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2025 (Server Core installation)	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5050009	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None

CVE ID	Acknowledgements
CVE-2025-21420	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2023-32002
MITRE
NVD

Issuing CNA: HackerOne

CVE Title: HackerOne: CVE-2023-32002 Node.js `Module._load()` policy Remote Code Execution Vulnerability
CVSS:
None
Executive Summary:
None
FAQ:

Why is this HackerOne CVE included in the Security Update Guide?

The vulnerability assigned to this CVE is in Node.js software which is consumed by Microsoft Visual Studio. It is being documented in the Security Update Guide to announce that the latest builds of Visual Studio are no longer vulnerable. Please see Security Update Guide Supports CVEs Assigned by Industry Partners for more information.

Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Feb-25

Information published.

Important

Remote Code Execution

Exploitability Assessment	Publicly Disclosed	Exploited
Exploitation Unlikely	No	No

The following tables list the affected software details for the vulnerability.

CVE-2023-32002
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
CBL Mariner 2.0 ARM	nodejs (CBL-Mariner) nodejs18 (CBL-Mariner)	Unknown	Unknown		Base: N/A Temporal: N/A Vector: N/A	16.20.2-2 18.17.1-2		None
CBL Mariner 2.0 x64	nodejs (CBL-Mariner) nodejs18 (CBL-Mariner)	Unknown	Unknown		Base: N/A Temporal: N/A Vector: N/A	16.20.2-2 18.17.1-2		None
Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)	Release Notes (Security Update)	Important	Remote Code Execution	None	Base: N/A Temporal: N/A Vector: N/A	16.11.44	Maybe	None

CVE ID	Acknowledgements
CVE-2023-32002	Anonymous

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-24036
MITRE
NVD

Issuing CNA: Microsoft

CVE Title: Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability
CVSS:

CVSS:3.1 Highest BaseScore:7.0/TemporalScore:6.1

Base score metrics
Attack Vector	Local
Attack Complexity	High
Privileges Required	Low
User Interaction	None
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High

Executive Summary:
None
FAQ:

What privileges could be gained by an attacker who successfully exploited the vulnerability?

An attacker who successfully exploits this vulnerability could elevate their privileges to perform commands as Root in the target environment.

According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?

Successful exploitation of this vulnerability requires an attacker to win a race condition.

Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Feb-25

Information published.

Important

Elevation of Privilege

Exploitability Assessment	Publicly Disclosed	Exploited
Exploitation Less Likely	No	No

The following tables list the affected software details for the vulnerability.

CVE-2025-24036
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Microsoft AutoUpdate for Mac	Release Notes (Security Update)	Important	Elevation of Privilege	None	Base: 7.0 Temporal: 6.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	4.77.24121924	Maybe	None

CVE ID	Acknowledgements
CVE-2025-24036	Stéphane Emma with POST Luxembourg

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-24039
MITRE
NVD

Issuing CNA: Microsoft

CVE Title: Visual Studio Code Elevation of Privilege Vulnerability
CVSS:

CVSS:3.1 Highest BaseScore:7.3/TemporalScore:6.4

Base score metrics
Attack Vector	Local
Attack Complexity	Low
Privileges Required	Low
User Interaction	Required
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High

Executive Summary:
None
FAQ:

What privileges could be gained by an attacker who successfully exploited the vulnerability?

The attacker would gain the rights of the user that is running the affected application.

According to the CVSS metric, user interaction is required (UI:R) and privileges required is low (PR:L). What does that mean for this vulnerability?

An authorized attacker with standard user privileges could place a malicious file on the Visual Code server and then wait for the privileged victim to run the server.

Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Feb-25

Information published.

Important

Elevation of Privilege

Exploitability Assessment	Publicly Disclosed	Exploited
Exploitation Less Likely	No	No

The following tables list the affected software details for the vulnerability.

CVE-2025-24039
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Visual Studio Code	Release Notes (Security Update)	Important	Elevation of Privilege	None	Base: 7.3 Temporal: 6.4 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	1.97.1	Maybe	None

CVE ID	Acknowledgements
CVE-2025-24039	ycdxsb

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-21259
MITRE
NVD

Issuing CNA: Microsoft

CVE Title: Microsoft Outlook Spoofing Vulnerability
CVSS:

CVSS:3.1 Highest BaseScore:5.3/TemporalScore:4.6

Base score metrics
Attack Vector	Network
Attack Complexity	Low
Privileges Required	None
User Interaction	None
Scope	Unchanged
Confidentiality	None
Integrity	Low
Availability	None

Executive Summary:
None
FAQ:

According to the CVSS metric, Integrity (I:L) is Low. What does that mean for this vulnerability?

An attacker's message can inherit the sender's email address from another message in the UI. The attacker cannot control which message it inherits from. This issue occurs exclusively for messages in the Junk folder, as it is the only folder where the app displays the sender's email address. The attacker cannot affect confidentiality or availability.

Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Feb-25

Information published.

Important

Spoofing

Exploitability Assessment	Publicly Disclosed	Exploited
Exploitation Less Likely	No	No

The following tables list the affected software details for the vulnerability.

CVE-2025-21259
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Microsoft Outlook for Android	Release Notes (Security Update)	Important	Spoofing	None	Base: 5.3 Temporal: 4.6 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C	4.2501.1	Yes	None

CVE ID	Acknowledgements
CVE-2025-21259	Jérémie Fréreault Jérémie Fréreault

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-21177
MITRE
NVD

Issuing CNA: Microsoft

CVE Title: Microsoft Dynamics 365 Sales Elevation of Privilege Vulnerability
CVSS:

CVSS:3.1 Highest BaseScore:8.7/TemporalScore:7.6

Base score metrics
Attack Vector	Network
Attack Complexity	Low
Privileges Required	Low
User Interaction	Required
Scope	Changed
Confidentiality	High
Integrity	High
Availability	None

Executive Summary:

Server-Side Request Forgery (SSRF) in Microsoft Dynamics 365 Sales allows an authorized attacker to elevate privileges over a network.

FAQ:

Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?

This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.

Please see Toward greater transparency: Unveiling Cloud Service CVEs for more information.

Mitigations:
None
Workarounds:
None
Revision:
1.0 06-Feb-25

Information published.

Critical

Elevation of Privilege

Exploitability Assessment	Publicly Disclosed	Exploited
N/A	No	No

The following tables list the affected software details for the vulnerability.

CVE-2025-21177
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Dynamics 365 Sales		Critical	Elevation of Privilege	None	Base: 8.7 Temporal: 7.6 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C	Unknown	Unknown	None

CVE ID	Acknowledgements
CVE-2025-21177	Brad Schlintz (nmdhkr)

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-0444
MITRE
NVD

Issuing CNA: Chrome

CVE Title: Chromium: CVE-2025-0444 Use after free in Skia
CVSS:
None
Executive Summary:

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

FAQ:

Why is this Chrome CVE included in the Security Update Guide?

The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.

How can I see the version of the browser?

In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
Click on Help and Feedback
Click on About Microsoft Edge

What is the version information for this release?

Microsoft Edge Version	Date Released	Based on Chromium Version
133.0.3065.51	2/6/2025	133.0.6943.53/54

Mitigations:
None
Workarounds:
None
Revision:
1.0 06-Feb-25

Information published.

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2025-0444
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Microsoft Edge (Chromium-based)	Release Notes (Security Update)	Unknown	Unknown	None	Base: N/A Temporal: N/A Vector: N/A	133.0.3065.51	No	None

CVE ID	Acknowledgements
CVE-2025-0444	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-0445
MITRE
NVD

Issuing CNA: Chrome

CVE Title: Chromium: CVE-2025-0445 Use after free in V8
CVSS:
None
Executive Summary:

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

FAQ:

Why is this Chrome CVE included in the Security Update Guide?

How can I see the version of the browser?

In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
Click on Help and Feedback
Click on About Microsoft Edge

What is the version information for this release?

Microsoft Edge Version	Date Released	Based on Chromium Version
133.0.3065.51	2/6/2025	133.0.6943.53/54

Mitigations:
None
Workarounds:
None
Revision:
1.0 06-Feb-25

Information published.

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2025-0445
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Microsoft Edge (Chromium-based)	Release Notes (Security Update)	Unknown	Unknown	None	Base: N/A Temporal: N/A Vector: N/A	133.0.3065.51	No	None

CVE ID	Acknowledgements
CVE-2025-0445	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-0451
MITRE
NVD

Issuing CNA: Chrome

CVE Title: Chromium: CVE-2025-0451 Inappropriate implementation in Extensions API
CVSS:
None
Executive Summary:

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

FAQ:

Why is this Chrome CVE included in the Security Update Guide?

How can I see the version of the browser?

In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
Click on Help and Feedback
Click on About Microsoft Edge

What is the version information for this release?

Microsoft Edge Version	Date Released	Based on Chromium Version
133.0.3065.51	2/6/2025	133.0.6943.53/54

Mitigations:
None
Workarounds:
None
Revision:
1.0 06-Feb-25

Information published.

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2025-0451
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Microsoft Edge (Chromium-based)	Release Notes (Security Update)	Unknown	Unknown	None	Base: N/A Temporal: N/A Vector: N/A	133.0.3065.51	No	None

CVE ID	Acknowledgements
CVE-2025-0451	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-21342
MITRE
NVD

Issuing CNA: Microsoft

CVE Title: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVSS:

CVSS:3.1 Highest BaseScore:8.8/TemporalScore:7.7

Base score metrics
Attack Vector	Network
Attack Complexity	Low
Privileges Required	None
User Interaction	Required
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High

Executive Summary:
None
FAQ:

According to the CVSS metrics, successful exploitation of this vulnerability could lead to a high loss of confidentiality (C:H), and integrity (I:H) and some loss of availability (A:L). What is the impact of this vulnerability?

An attacker who successfully exploited this vulnerability could view sensitive information (Confidentiality), make changes to disclosed information (Integrity), and they might be able to force a crash within the browser tab (Availability).

What is the version information for this release?

Microsoft Edge Version	Date Released	Based on Chromium Version
133.0.3065.51	2/6/2025	133.0.6943.53/54

According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?

Successful exploitation of this vulnerability requires the victim user to click a malicious link so that the attacker can initiate remote code execution on the renderer process.

Mitigations:
None
Workarounds:
None
Revision:
1.0 06-Feb-25

Information published.

Important

Remote Code Execution

Exploitability Assessment	Publicly Disclosed	Exploited
Exploitation Less Likely	No	No

The following tables list the affected software details for the vulnerability.

CVE-2025-21342
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Microsoft Edge (Chromium-based)	Release Notes (Security Update)	Important	Remote Code Execution	None	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	133.0.3065.51	No	None

CVE ID	Acknowledgements
CVE-2025-21342	Nan Wang(@eternalsakura13)

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-21267
MITRE
NVD

Issuing CNA: Microsoft

CVE Title: Microsoft Edge (Chromium-based) Spoofing Vulnerability
CVSS:

CVSS:3.1 Highest BaseScore:4.4/TemporalScore:4.0

Base score metrics
Attack Vector	Local
Attack Complexity	Low
Privileges Required	None
User Interaction	Required
Scope	Unchanged
Confidentiality	Low
Integrity	Low
Availability	None

Executive Summary:
None
FAQ:

How could an attacker exploit this vulnerability?

What is the version information for this release?

Microsoft Edge Version	Date Released	Based on Chromium Version
133.0.3065.51	2/6/2025	133.0.6943.53/54

According to the CVSS metric, Confidentiality and Integrity are rated as Low and Availability is None (C:L, I:L, A:N). What does that mean for this vulnerability?

An attacker is only able to comprise files that they were allowed access to as part of their initial privilege but cannot affect the availability of the browser.

Mitigations:
None
Workarounds:
None
Revision:
1.0 06-Feb-25

Information published.

Low

Spoofing

Exploitability Assessment	Publicly Disclosed	Exploited
Exploitation Less Likely	No	No

The following tables list the affected software details for the vulnerability.

CVE-2025-21267
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Microsoft Edge (Chromium-based)	Release Notes (Security Update)	Low	Spoofing	None	Base: 4.4 Temporal: 4.0 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C	133.0.3065.51	No	None

CVE ID	Acknowledgements
CVE-2025-21267	MOAAD AKHRAZ

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-21279
MITRE
NVD

Issuing CNA: Microsoft

CVE Title: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVSS:

CVSS:3.1 Highest BaseScore:6.5/TemporalScore:6.2

Base score metrics
Attack Vector	Network
Attack Complexity	Low
Privileges Required	None
User Interaction	Required
Scope	Unchanged
Confidentiality	High
Integrity	None
Availability	None

Temporal score metrics
Exploit Code Maturity	Proof-of-Concept
Report Confidence	Confirmed

Executive Summary:
None
FAQ:

According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?

Successful exploitation of this vulnerability requires the victim user to click a malicious link so that the attacker can initiate remote code execution on the renderer process.

According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?

The user would have to click on a specially crafted URL to be compromised by the attacker.

What is the version information for this release?

Microsoft Edge Version	Date Released	Based on Chromium Version
133.0.3065.51	2/6/2025	133.0.6943.53/54

Mitigations:
None
Workarounds:
None
Revision:
1.0 06-Feb-25

Information published.

Important

Remote Code Execution

Exploitability Assessment	Publicly Disclosed	Exploited
Exploitation Less Likely	No	No

The following tables list the affected software details for the vulnerability.

CVE-2025-21279
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Microsoft Edge (Chromium-based)	Release Notes (Security Update)	Important	Remote Code Execution	None	Base: 6.5 Temporal: 6.2 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:P/RC:C	133.0.3065.51	No	None

CVE ID	Acknowledgements
CVE-2025-21279	Nan Wang(@eternalsakura13)

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-21283
MITRE
NVD

Issuing CNA: Microsoft

CVE Title: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVSS:

CVSS:3.1 Highest BaseScore:6.5/TemporalScore:5.9

Base score metrics
Attack Vector	Network
Attack Complexity	Low
Privileges Required	None
User Interaction	Required
Scope	Unchanged
Confidentiality	High
Integrity	None
Availability	None

Executive Summary:
None
FAQ:

According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?

Successful exploitation of this vulnerability requires the victim user to click a malicious link so that the attacker can initiate remote code execution on the renderer process.

According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?

The user would have to click on a specially crafted URL to be compromised by the attacker.

What is the version information for this release?

Microsoft Edge Version	Date Released	Based on Chromium Version
133.0.3065.51	2/6/2025	133.0.6943.53/54

Mitigations:
None
Workarounds:
None
Revision:
1.0 06-Feb-25

Information published.

Important

Remote Code Execution

Exploitability Assessment	Publicly Disclosed	Exploited
Exploitation Less Likely	No	No

The following tables list the affected software details for the vulnerability.

CVE-2025-21283
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Microsoft Edge (Chromium-based)	Release Notes (Security Update)	Important	Remote Code Execution	None	Base: 6.5 Temporal: 5.9 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C	133.0.3065.51	No	None

CVE ID	Acknowledgements
CVE-2025-21283	Nan Wang(@eternalsakura13)

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-21404
MITRE
NVD

Issuing CNA: Microsoft

CVE Title: Microsoft Edge (Chromium-based) Spoofing Vulnerability
CVSS:

CVSS:3.1 Highest BaseScore:4.3/TemporalScore:3.8

Base score metrics
Attack Vector	Network
Attack Complexity	Low
Privileges Required	None
User Interaction	Required
Scope	Unchanged
Confidentiality	None
Integrity	Low
Availability	None

Executive Summary:
None
FAQ:

What is the version information for this release?

Microsoft Edge Version	Date Released	Based on Chromium Version
133.0.3065.51	2/6/2025	133.0.6943.53/54

According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?

The user would have to click on a specially crafted URL to be compromised by the attacker.

According to the CVSS metric, successful exploitation of this vulnerability could lead to some loss of integrity (I:L)? What does that mean for this vulnerability?

The attacker is only able to modify the content of the vulnerable link to redirect the victim to a malicious site.

Mitigations:
None
Workarounds:
None
Revision:
1.0 06-Feb-25

Information published.

Low

Spoofing

Exploitability Assessment	Publicly Disclosed	Exploited
Exploitation Less Likely	No	No

The following tables list the affected software details for the vulnerability.

CVE-2025-21404
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Microsoft Edge (Chromium-based)	Release Notes (Security Update)	Low	Spoofing	None	Base: 4.3 Temporal: 3.8 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C	133.0.3065.51	No	None

CVE ID	Acknowledgements
CVE-2025-21404	Simon Zuckerbraun and Peter Girnus of Trend Micro Zero Day Initiative

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-21408
MITRE
NVD

Issuing CNA: Microsoft

CVE Title: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVSS:

CVSS:3.1 Highest BaseScore:8.8/TemporalScore:7.7

Base score metrics
Attack Vector	Network
Attack Complexity	Low
Privileges Required	None
User Interaction	Required
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High

Executive Summary:
None
FAQ:

According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?

Successful exploitation of this vulnerability requires the victim user to click a malicious link so that the attacker can initiate remote code execution on the renderer process.

What is the version information for this release?

Microsoft Edge Version	Date Released	Based on Chromium Version
133.0.3065.51	2/6/2025	133.0.6943.53/54

Mitigations:
None
Workarounds:
None
Revision:
1.0 06-Feb-25

Information published.

Important

Remote Code Execution

Exploitability Assessment	Publicly Disclosed	Exploited
Exploitation Unlikely	No	No

The following tables list the affected software details for the vulnerability.

CVE-2025-21408
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Microsoft Edge (Chromium-based)	Release Notes (Security Update)	Important	Remote Code Execution	None	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	133.0.3065.51	No	None

CVE ID	Acknowledgements
CVE-2025-21408	Nan Wang(@eternalsakura13)

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-21253
MITRE
NVD

Issuing CNA: Microsoft

CVE Title: Microsoft Edge for IOS and Android Spoofing Vulnerability
CVSS:

CVSS:3.1 Highest BaseScore:5.3/TemporalScore:4.8

Base score metrics
Attack Vector	Network
Attack Complexity	Low
Privileges Required	None
User Interaction	None
Scope	Unchanged
Confidentiality	Low
Integrity	None
Availability	None

Executive Summary:
None
FAQ:

What is the version information for this release?

Microsoft Edge Version	Date Released	Based on Chromium Version
133.0.3065.51	2/6/2025	133.0.6943.53/54

According to the CVSS metrics, successful exploitation of this vulnerability could lead to some loss of confidentiality (C:L) but have no effect on integrity (I:N) or on availability (A:N). What does that mean for this vulnerability?

An attacker who successfully exploited the vulnerability could view some sensitive information (Confidentiality) but not all resources within the impacted component may be divulged to the attacker. The attacker cannot make changes to disclosed information (Integrity) or limit access to the resource (Availability).

Mitigations:
None
Workarounds:
None
Revision:
1.0 06-Feb-25

Information published.

Moderate

Spoofing

Exploitability Assessment	Publicly Disclosed	Exploited
Exploitation Less Likely	No	No

The following tables list the affected software details for the vulnerability.

CVE-2025-21253
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Microsoft Edge for Android	Release Notes (Security Update)	Moderate	Spoofing	None	Base: 5.3 Temporal: 4.8 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C	133.0.3065.51	No	None
Microsoft Edge for iOS	Release Notes (Security Update)	Moderate	Spoofing	None	Base: 5.3 Temporal: 4.8 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C	133.0.3065.51	No	None

CVE ID	Acknowledgements
CVE-2025-21253	Renwa (@RenwaX23)

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-21194
MITRE
NVD

Issuing CNA: Microsoft

CVE Title: Microsoft Surface Security Feature Bypass Vulnerability
CVSS:

CVSS:3.1 Highest BaseScore:7.1/TemporalScore:6.2

Base score metrics
Attack Vector	Adjacent
Attack Complexity	High
Privileges Required	None
User Interaction	Required
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High

Executive Summary:
None
FAQ:

According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?

Successful exploitation of this vulnerability requires multiple conditions to be met, such as specific application behavior, user actions, manipulation of parameters passed to a function, and impersonation of an integrity level token.

According to the CVSS metric, the attack vector is adjacent (AV:A). What does that mean for this vulnerability?

Successful exploitation of this vulnerability requires that an attacker will need to first gain access to the restricted network before running an attack.

What kind of security feature could be bypassed by successfully exploiting this vulnerability?

This Hypervisor vulnerability relates to Virtual Machines within a Unified Extensible Firmware Interface (UEFI) host machine. On some specific hardware it might be possible to bypass the UEFI, which could lead to the compromise of the hypervisor and the secure kernel.

According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?

Successful exploitation of this vulnerability by an attacker requires a user to first reboot their machine.

What actions do customers need to perform to be protected against this vulnerability?

Surface devices get updates through Windows Update. See Surface update history for more information.

If you wish to install the updates manually, you can do the following:

In the Surface app, expand Help & support to check the update status.
If there are updates available, select the Check for updates button to open Windows Update and install the available updates.

Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Feb-25

Information published.

Important

Security Feature Bypass

Exploitability Assessment	Publicly Disclosed	Exploited
Exploitation Less Likely	Yes	No

The following tables list the affected software details for the vulnerability.

CVE-2025-21194
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Microsoft Surface Go 2		Important	Security Feature Bypass	None	Base: 7.1 Temporal: 6.2 Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	Unknown	Unknown	None
Microsoft Surface Go 3		Important	Security Feature Bypass	None	Base: 7.1 Temporal: 6.2 Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	Unknown	Unknown	None
Microsoft Surface Hub		Important	Security Feature Bypass	None	Base: 7.1 Temporal: 6.2 Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	Unknown	Unknown	None
Microsoft Surface Hub 2S		Important	Security Feature Bypass	None	Base: 7.1 Temporal: 6.2 Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	Unknown	Unknown	None
Microsoft Surface Hub 3		Important	Security Feature Bypass	None	Base: 7.1 Temporal: 6.2 Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	Unknown	Unknown	None
Microsoft Surface Laptop Go		Important	Security Feature Bypass	None	Base: 7.1 Temporal: 6.2 Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	Unknown	Unknown	None
Microsoft Surface Laptop Go 2		Important	Security Feature Bypass	None	Base: 7.1 Temporal: 6.2 Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	Unknown	Unknown	None
Microsoft Surface Laptop Go 3		Important	Security Feature Bypass	None	Base: 7.1 Temporal: 6.2 Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	Unknown	Unknown	None
Microsoft Surface Pro 7+		Important	Security Feature Bypass	None	Base: 7.1 Temporal: 6.2 Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	Unknown	Unknown	None
Microsoft Surface Pro 8		Important	Security Feature Bypass	None	Base: 7.1 Temporal: 6.2 Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	Unknown	Unknown	None
Microsoft Surface Pro 9 ARM		Important	Security Feature Bypass	None	Base: 7.1 Temporal: 6.2 Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	Unknown	Unknown	None
Surface Laptop 3 with Intel Processor		Important	Security Feature Bypass	None	Base: 7.1 Temporal: 6.2 Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	Unknown	Unknown	None
Surface Laptop 4 with AMD Processor		Important	Security Feature Bypass	None	Base: 7.1 Temporal: 6.2 Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	Unknown	Unknown	None
Surface Laptop 4 with Intel Processor		Important	Security Feature Bypass	None	Base: 7.1 Temporal: 6.2 Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	Unknown	Unknown	None
Surface Windows Dev Kit		Important	Security Feature Bypass	None	Base: 7.1 Temporal: 6.2 Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	Unknown	Unknown	None

CVE ID	Acknowledgements
CVE-2025-21194	Francisco Falcón and Iván Arce of Quarkslab

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-21208
MITRE
NVD

Issuing CNA: Microsoft

CVE Title: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVSS:

CVSS:3.1 Highest BaseScore:8.8/TemporalScore:7.7

Base score metrics
Attack Vector	Network
Attack Complexity	Low
Privileges Required	None
User Interaction	Required
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High

Executive Summary:
None
FAQ:

How could an attacker exploit this vulnerability?

An attacker could exploit this vulnerability by tricking a user into sending a request to a malicious server. This could result in the server returning malicious data that might cause arbitrary code execution on the user's system.

According to the CVSS metric, the attack vector is network (AV:N) and the user interaction is required (UI:R). What is the target context of the remote code execution?

This attack requires an admin user on the client to connect to a malicious server, and that could allow the attacker to gain code execution on the client.

Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Feb-25

Information published.

Important

Remote Code Execution

Exploitability Assessment	Publicly Disclosed	Exploited
Exploitation Less Likely	No	No

The following tables list the affected software details for the vulnerability.

CVE-2025-21208
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Windows Server 2008 for 32-bit Systems Service Pack 2	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Remote Code Execution	5050063	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Remote Code Execution	5050063	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 for x64-based Systems Service Pack 2	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Remote Code Execution	5050063	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Remote Code Execution	5050063	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 R2 for x64-based Systems Service Pack 1	5052016 (Monthly Rollup) 5052032 (Security Only)	Important	Remote Code Execution	5050049	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.1.7601.27566	Yes	None
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)	5052016 (Monthly Rollup) 5052032 (Security Only)	Important	Remote Code Execution	5050049	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.1.7601.27566	Yes	None
Windows Server 2012	5052020 (Monthly Rollup)	Important	Remote Code Execution	5050004	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.2.9200.25317	Yes	None
Windows Server 2012 (Server Core installation)	5052020 (Monthly Rollup)	Important	Remote Code Execution	5050004	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.2.9200.25317	Yes	None
Windows Server 2012 R2	5052042 (Monthly Rollup)	Important	Remote Code Execution	5050048	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.3.9600.22417	Yes	None
Windows Server 2012 R2 (Server Core installation)	5052042 (Monthly Rollup)	Important	Remote Code Execution	5050048	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.3.9600.22417	Yes	None
Windows Server 2016	5052006 (Security Update)	Important	Remote Code Execution	5049993	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows Server 2016 (Server Core installation)	5052006 (Security Update)	Important	Remote Code Execution	5049993	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows Server 2019	5052000 (Security Update)	Important	Remote Code Execution	5050008	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2019 (Server Core installation)	5052000 (Security Update)	Important	Remote Code Execution	5050008	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2022	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Important	Remote Code Execution	5049983	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022 (Server Core installation)	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Important	Remote Code Execution	5049983	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022, 23H2 Edition (Server Core installation)	5051980 (Security Update)	Important	Remote Code Execution	5049984	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.25398.1425	Yes	None
Windows Server 2025	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Remote Code Execution	5050009	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2025 (Server Core installation)	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Remote Code Execution	5050009	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None

CVE ID	Acknowledgements
CVE-2025-21208	Anonymous

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-21406
MITRE
NVD

Issuing CNA: Microsoft

CVE Title: Windows Telephony Service Remote Code Execution Vulnerability
CVSS:

CVSS:3.1 Highest BaseScore:8.8/TemporalScore:7.7

Base score metrics
Attack Vector	Network
Attack Complexity	Low
Privileges Required	None
User Interaction	Required
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High

Executive Summary:
None
FAQ:

How could an attacker exploit this vulnerability?

According to the CVSS metric, the attack vector is network (AV:N) and the user interaction is required (UI:R). What is the target context of the remote code execution?

This attack requires a client to connect to a malicious server, and that could allow the attacker to gain code execution on the client.

Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Feb-25

Information published.

Important

Remote Code Execution

Exploitability Assessment	Publicly Disclosed	Exploited
Exploitation Less Likely	No	No

The following tables list the affected software details for the vulnerability.

CVE-2025-21406
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Windows 10 for 32-bit Systems	5052040 (Security Update)	Important	Remote Code Execution	5050013	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.10240.20915	Yes	None
Windows 10 for x64-based Systems	5052040 (Security Update)	Important	Remote Code Execution	5050013	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.10240.20915	Yes	None
Windows 10 Version 1607 for 32-bit Systems	5052006 (Security Update)	Important	Remote Code Execution	5049993	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows 10 Version 1607 for x64-based Systems	5052006 (Security Update)	Important	Remote Code Execution	5049993	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows 10 Version 1809 for 32-bit Systems	5052000 (Security Update)	Important	Remote Code Execution	5050008	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows 10 Version 1809 for x64-based Systems	5052000 (Security Update)	Important	Remote Code Execution	5050008	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows 10 Version 21H2 for 32-bit Systems	5051974 (Security Update)	Important	Remote Code Execution	5049981	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 21H2 for ARM64-based Systems	5051974 (Security Update)	Important	Remote Code Execution	5049981	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 21H2 for x64-based Systems	5051974 (Security Update)	Important	Remote Code Execution	5049981	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 22H2 for 32-bit Systems	5051974 (Security Update)	Important	Remote Code Execution	5049981	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 10 Version 22H2 for ARM64-based Systems	5051974 (Security Update)	Important	Remote Code Execution	5049981	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 10 Version 22H2 for x64-based Systems	5051974 (Security Update)	Important	Remote Code Execution	5049981	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 11 Version 22H2 for ARM64-based Systems	5051989 (Security Update)	Important	Remote Code Execution	5050021	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22621.4890	Yes	None
Windows 11 Version 22H2 for x64-based Systems	5051989 (Security Update)	Important	Remote Code Execution	5050021	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22621.4890	Yes	None
Windows 11 Version 23H2 for ARM64-based Systems	5051989 (Security Update)	Important	Remote Code Execution	5050021	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22631.4890	Yes	None
Windows 11 Version 23H2 for x64-based Systems	5051989 (Security Update)	Important	Remote Code Execution	5050021	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22631.4890	Yes	None
Windows 11 Version 24H2 for ARM64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Remote Code Execution	5050009	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows 11 Version 24H2 for x64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Remote Code Execution	5050009	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2008 for 32-bit Systems Service Pack 2	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Remote Code Execution	5050063	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Remote Code Execution	5050063	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 for x64-based Systems Service Pack 2	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Remote Code Execution	5050063	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Remote Code Execution	5050063	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 R2 for x64-based Systems Service Pack 1	5052016 (Monthly Rollup) 5052032 (Security Only)	Important	Remote Code Execution	5050049	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.1.7601.27566	Yes	None
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)	5052016 (Monthly Rollup) 5052032 (Security Only)	Important	Remote Code Execution	5050049	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.1.7601.27566	Yes	None
Windows Server 2012	5052020 (Monthly Rollup)	Important	Remote Code Execution	5050004	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.2.9200.25317	Yes	None
Windows Server 2012 (Server Core installation)	5052020 (Monthly Rollup)	Important	Remote Code Execution	5050004	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.2.9200.25317	Yes	None
Windows Server 2012 R2	5052042 (Monthly Rollup)	Important	Remote Code Execution	5050048	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.3.9600.22417	Yes	None
Windows Server 2012 R2 (Server Core installation)	5052042 (Monthly Rollup)	Important	Remote Code Execution	5050048	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.3.9600.22417	Yes	None
Windows Server 2016	5052006 (Security Update)	Important	Remote Code Execution	5049993	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows Server 2016 (Server Core installation)	5052006 (Security Update)	Important	Remote Code Execution	5049993	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows Server 2019	5052000 (Security Update)	Important	Remote Code Execution	5050008	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2019 (Server Core installation)	5052000 (Security Update)	Important	Remote Code Execution	5050008	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2022	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Important	Remote Code Execution	5049983	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022 (Server Core installation)	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Important	Remote Code Execution	5049983	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022, 23H2 Edition (Server Core installation)	5051980 (Security Update)	Important	Remote Code Execution	5049984	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.25398.1425	Yes	None
Windows Server 2025	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Remote Code Execution	5050009	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2025 (Server Core installation)	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Remote Code Execution	5050009	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None

CVE ID	Acknowledgements
CVE-2025-21406	Anonymous

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-21407
MITRE
NVD

Issuing CNA: Microsoft

CVE Title: Windows Telephony Service Remote Code Execution Vulnerability
CVSS:

CVSS:3.1 Highest BaseScore:8.8/TemporalScore:7.7

Base score metrics
Attack Vector	Network
Attack Complexity	Low
Privileges Required	None
User Interaction	Required
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High

Executive Summary:
None
FAQ:

According to the CVSS metric, the attack vector is network (AV:N) and the user interaction is required (UI:R). What is the target context of the remote code execution?

This attack requires a client to connect to a malicious server, and that could allow the attacker to gain code execution on the client.

How could an attacker exploit this vulnerability?

Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Feb-25

Information published.

Important

Remote Code Execution

Exploitability Assessment	Publicly Disclosed	Exploited
Exploitation Less Likely	No	No

The following tables list the affected software details for the vulnerability.

CVE-2025-21407
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Windows 10 for 32-bit Systems	5052040 (Security Update)	Important	Remote Code Execution	5050013	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.10240.20915	Yes	None
Windows 10 for x64-based Systems	5052040 (Security Update)	Important	Remote Code Execution	5050013	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.10240.20915	Yes	None
Windows 10 Version 1607 for 32-bit Systems	5052006 (Security Update)	Important	Remote Code Execution	5049993	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows 10 Version 1607 for x64-based Systems	5052006 (Security Update)	Important	Remote Code Execution	5049993	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows 10 Version 1809 for 32-bit Systems	5052000 (Security Update)	Important	Remote Code Execution	5050008	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows 10 Version 1809 for x64-based Systems	5052000 (Security Update)	Important	Remote Code Execution	5050008	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows 10 Version 21H2 for 32-bit Systems	5051974 (Security Update)	Important	Remote Code Execution	5049981	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 21H2 for ARM64-based Systems	5051974 (Security Update)	Important	Remote Code Execution	5049981	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 21H2 for x64-based Systems	5051974 (Security Update)	Important	Remote Code Execution	5049981	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 22H2 for 32-bit Systems	5051974 (Security Update)	Important	Remote Code Execution	5049981	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 10 Version 22H2 for ARM64-based Systems	5051974 (Security Update)	Important	Remote Code Execution	5049981	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 10 Version 22H2 for x64-based Systems	5051974 (Security Update)	Important	Remote Code Execution	5049981	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 11 Version 22H2 for ARM64-based Systems	5051989 (Security Update)	Important	Remote Code Execution	5050021	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22621.4890	Yes	None
Windows 11 Version 22H2 for x64-based Systems	5051989 (Security Update)	Important	Remote Code Execution	5050021	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22621.4890	Yes	None
Windows 11 Version 23H2 for ARM64-based Systems	5051989 (Security Update)	Important	Remote Code Execution	5050021	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22631.4890	Yes	None
Windows 11 Version 23H2 for x64-based Systems	5051989 (Security Update)	Important	Remote Code Execution	5050021	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22631.4890	Yes	None
Windows 11 Version 24H2 for ARM64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Remote Code Execution	5050009	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows 11 Version 24H2 for x64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Remote Code Execution	5050009	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2008 for 32-bit Systems Service Pack 2	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Remote Code Execution	5050063	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Remote Code Execution	5050063	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 for x64-based Systems Service Pack 2	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Remote Code Execution	5050063	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Remote Code Execution	5050063	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 R2 for x64-based Systems Service Pack 1	5052016 (Monthly Rollup) 5052032 (Security Only)	Important	Remote Code Execution	5050049	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.1.7601.27566	Yes	None
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)	5052016 (Monthly Rollup) 5052032 (Security Only)	Important	Remote Code Execution	5050049	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.1.7601.27566	Yes	None
Windows Server 2012	5052020 (Monthly Rollup)	Important	Remote Code Execution	5050004	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.2.9200.25317	Yes	None
Windows Server 2012 (Server Core installation)	5052020 (Monthly Rollup)	Important	Remote Code Execution	5050004	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.2.9200.25317	Yes	None
Windows Server 2012 R2	5052042 (Monthly Rollup)	Important	Remote Code Execution	5050048	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.3.9600.22417	Yes	None
Windows Server 2012 R2 (Server Core installation)	5052042 (Monthly Rollup)	Important	Remote Code Execution	5050048	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.3.9600.22417	Yes	None
Windows Server 2016	5052006 (Security Update)	Important	Remote Code Execution	5049993	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows Server 2016 (Server Core installation)	5052006 (Security Update)	Important	Remote Code Execution	5049993	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows Server 2019	5052000 (Security Update)	Important	Remote Code Execution	5050008	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2019 (Server Core installation)	5052000 (Security Update)	Important	Remote Code Execution	5050008	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2022	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Important	Remote Code Execution	5049983	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022 (Server Core installation)	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Important	Remote Code Execution	5049983	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022, 23H2 Edition (Server Core installation)	5051980 (Security Update)	Important	Remote Code Execution	5049984	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.25398.1425	Yes	None
Windows Server 2025	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Remote Code Execution	5050009	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2025 (Server Core installation)	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Remote Code Execution	5050009	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None

CVE ID	Acknowledgements
CVE-2025-21407	Anonymous

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-21410
MITRE
NVD

Issuing CNA: Microsoft

CVE Title: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVSS:

CVSS:3.1 Highest BaseScore:8.8/TemporalScore:7.7

Base score metrics
Attack Vector	Network
Attack Complexity	Low
Privileges Required	None
User Interaction	Required
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High

Executive Summary:
None
FAQ:

According to the CVSS metric, the attack vector is network (AV:N) and the user interaction is required (UI:R). What is the target context of the remote code execution?

This attack requires an admin user on the client to connect to a malicious server, and that could allow the attacker to gain code execution on the client.

How could an attacker exploit this vulnerability?

Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Feb-25

Information published.

Important

Remote Code Execution

Exploitability Assessment	Publicly Disclosed	Exploited
Exploitation Less Likely	No	No

The following tables list the affected software details for the vulnerability.

CVE-2025-21410
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Windows Server 2008 for 32-bit Systems Service Pack 2	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Remote Code Execution	5050063	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Remote Code Execution	5050063	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 for x64-based Systems Service Pack 2	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Remote Code Execution	5050063	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Remote Code Execution	5050063	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 R2 for x64-based Systems Service Pack 1	5052016 (Monthly Rollup) 5052032 (Security Only)	Important	Remote Code Execution	5050049	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.1.7601.27566	Yes	None
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)	5052016 (Monthly Rollup) 5052032 (Security Only)	Important	Remote Code Execution	5050049	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.1.7601.27566	Yes	None
Windows Server 2012	5052020 (Monthly Rollup)	Important	Remote Code Execution	5050004	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.2.9200.25317	Yes	None
Windows Server 2012 (Server Core installation)	5052020 (Monthly Rollup)	Important	Remote Code Execution	5050004	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.2.9200.25317	Yes	None
Windows Server 2012 R2	5052042 (Monthly Rollup)	Important	Remote Code Execution	5050048	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.3.9600.22417	Yes	None
Windows Server 2012 R2 (Server Core installation)	5052042 (Monthly Rollup)	Important	Remote Code Execution	5050048	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.3.9600.22417	Yes	None
Windows Server 2016	5052006 (Security Update)	Important	Remote Code Execution	5049993	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows Server 2016 (Server Core installation)	5052006 (Security Update)	Important	Remote Code Execution	5049993	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows Server 2019	5052000 (Security Update)	Important	Remote Code Execution	5050008	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2019 (Server Core installation)	5052000 (Security Update)	Important	Remote Code Execution	5050008	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2022	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Important	Remote Code Execution	5049983	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022 (Server Core installation)	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Important	Remote Code Execution	5049983	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022, 23H2 Edition (Server Core installation)	5051980 (Security Update)	Important	Remote Code Execution	5049984	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.25398.1425	Yes	None
Windows Server 2025	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Remote Code Execution	5050009	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2025 (Server Core installation)	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Remote Code Execution	5050009	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None

CVE ID	Acknowledgements
CVE-2025-21410	Nirmala Nawale with Microsoft

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-21190
MITRE
NVD

Issuing CNA: Microsoft

CVE Title: Windows Telephony Service Remote Code Execution Vulnerability
CVSS:

CVSS:3.1 Highest BaseScore:8.8/TemporalScore:7.7

Base score metrics
Attack Vector	Network
Attack Complexity	Low
Privileges Required	None
User Interaction	Required
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High

Executive Summary:
None
FAQ:

How could an attacker exploit this vulnerability?

According to the CVSS metric, the attack vector is network (AV:N) and the user interaction is required (UI:R). What is the target context of the remote code execution?

This attack requires a client to connect to a malicious server, and that could allow the attacker to gain code execution on the client.

Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Feb-25

Information published.

Important

Remote Code Execution

Exploitability Assessment	Publicly Disclosed	Exploited
Exploitation Less Likely	No	No

The following tables list the affected software details for the vulnerability.

CVE-2025-21190
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Windows 10 for 32-bit Systems	5052040 (Security Update)	Important	Remote Code Execution	5050013	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.10240.20915	Yes	None
Windows 10 for x64-based Systems	5052040 (Security Update)	Important	Remote Code Execution	5050013	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.10240.20915	Yes	None
Windows 10 Version 1607 for 32-bit Systems	5052006 (Security Update)	Important	Remote Code Execution	5049993	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows 10 Version 1607 for x64-based Systems	5052006 (Security Update)	Important	Remote Code Execution	5049993	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows 10 Version 1809 for 32-bit Systems	5052000 (Security Update)	Important	Remote Code Execution	5050008	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows 10 Version 1809 for x64-based Systems	5052000 (Security Update)	Important	Remote Code Execution	5050008	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows 10 Version 21H2 for 32-bit Systems	5051974 (Security Update)	Important	Remote Code Execution	5049981	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 21H2 for ARM64-based Systems	5051974 (Security Update)	Important	Remote Code Execution	5049981	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 21H2 for x64-based Systems	5051974 (Security Update)	Important	Remote Code Execution	5049981	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 22H2 for 32-bit Systems	5051974 (Security Update)	Important	Remote Code Execution	5049981	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 10 Version 22H2 for ARM64-based Systems	5051974 (Security Update)	Important	Remote Code Execution	5049981	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 10 Version 22H2 for x64-based Systems	5051974 (Security Update)	Important	Remote Code Execution	5049981	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 11 Version 22H2 for ARM64-based Systems	5051989 (Security Update)	Important	Remote Code Execution	5050021	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22621.4890	Yes	None
Windows 11 Version 22H2 for x64-based Systems	5051989 (Security Update)	Important	Remote Code Execution	5050021	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22621.4890	Yes	None
Windows 11 Version 23H2 for ARM64-based Systems	5051989 (Security Update)	Important	Remote Code Execution	5050021	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22631.4890	Yes	None
Windows 11 Version 23H2 for x64-based Systems	5051989 (Security Update)	Important	Remote Code Execution	5050021	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22631.4890	Yes	None
Windows 11 Version 24H2 for ARM64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Remote Code Execution	5050009	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows 11 Version 24H2 for x64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Remote Code Execution	5050009	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2008 for 32-bit Systems Service Pack 2	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Remote Code Execution	5050063	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Remote Code Execution	5050063	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 for x64-based Systems Service Pack 2	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Remote Code Execution	5050063	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Remote Code Execution	5050063	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 R2 for x64-based Systems Service Pack 1	5052016 (Monthly Rollup) 5052032 (Security Only)	Important	Remote Code Execution	5050049	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.1.7601.27566	Yes	None
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)	5052016 (Monthly Rollup) 5052032 (Security Only)	Important	Remote Code Execution	5050049	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.1.7601.27566	Yes	None
Windows Server 2012	5052020 (Monthly Rollup)	Important	Remote Code Execution	5050004	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.2.9200.25317	Yes	None
Windows Server 2012 (Server Core installation)	5052020 (Monthly Rollup)	Important	Remote Code Execution	5050004	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.2.9200.25317	Yes	None
Windows Server 2012 R2	5052042 (Monthly Rollup)	Important	Remote Code Execution	5050048	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.3.9600.22417	Yes	None
Windows Server 2012 R2 (Server Core installation)	5052042 (Monthly Rollup)	Important	Remote Code Execution	5050048	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.3.9600.22417	Yes	None
Windows Server 2016	5052006 (Security Update)	Important	Remote Code Execution	5049993	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows Server 2016 (Server Core installation)	5052006 (Security Update)	Important	Remote Code Execution	5049993	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows Server 2019	5052000 (Security Update)	Important	Remote Code Execution	5050008	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2019 (Server Core installation)	5052000 (Security Update)	Important	Remote Code Execution	5050008	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2022	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Important	Remote Code Execution	5049983	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022 (Server Core installation)	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Important	Remote Code Execution	5049983	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022, 23H2 Edition (Server Core installation)	5051980 (Security Update)	Important	Remote Code Execution	5049984	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.25398.1425	Yes	None
Windows Server 2025	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Remote Code Execution	5050009	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2025 (Server Core installation)	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Remote Code Execution	5050009	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None

CVE ID	Acknowledgements
CVE-2025-21190	Anonymous

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-21200
MITRE
NVD

Issuing CNA: Microsoft

CVE Title: Windows Telephony Service Remote Code Execution Vulnerability
CVSS:

CVSS:3.1 Highest BaseScore:8.8/TemporalScore:7.7

Base score metrics
Attack Vector	Network
Attack Complexity	Low
Privileges Required	None
User Interaction	Required
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High

Executive Summary:
None
FAQ:

How could an attacker exploit this vulnerability?

According to the CVSS metric, the attack vector is network (AV:N) and the user interaction is required (UI:R). What is the target context of the remote code execution?

This attack requires a client to connect to a malicious server, and that could allow the attacker to gain code execution on the client.

Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Feb-25

Information published.

Important

Remote Code Execution

Exploitability Assessment	Publicly Disclosed	Exploited
Exploitation Less Likely	No	No

The following tables list the affected software details for the vulnerability.

CVE-2025-21200
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Windows 10 for 32-bit Systems	5052040 (Security Update)	Important	Remote Code Execution	5050013	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.10240.20915	Yes	None
Windows 10 for x64-based Systems	5052040 (Security Update)	Important	Remote Code Execution	5050013	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.10240.20915	Yes	None
Windows 10 Version 1607 for 32-bit Systems	5052006 (Security Update)	Important	Remote Code Execution	5049993	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows 10 Version 1607 for x64-based Systems	5052006 (Security Update)	Important	Remote Code Execution	5049993	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows 10 Version 1809 for 32-bit Systems	5052000 (Security Update)	Important	Remote Code Execution	5050008	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows 10 Version 1809 for x64-based Systems	5052000 (Security Update)	Important	Remote Code Execution	5050008	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows 10 Version 21H2 for 32-bit Systems	5051974 (Security Update)	Important	Remote Code Execution	5049981	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 21H2 for ARM64-based Systems	5051974 (Security Update)	Important	Remote Code Execution	5049981	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 21H2 for x64-based Systems	5051974 (Security Update)	Important	Remote Code Execution	5049981	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 22H2 for 32-bit Systems	5051974 (Security Update)	Important	Remote Code Execution	5049981	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 10 Version 22H2 for ARM64-based Systems	5051974 (Security Update)	Important	Remote Code Execution	5049981	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 10 Version 22H2 for x64-based Systems	5051974 (Security Update)	Important	Remote Code Execution	5049981	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 11 Version 22H2 for ARM64-based Systems	5051989 (Security Update)	Important	Remote Code Execution	5050021	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22621.4890	Yes	None
Windows 11 Version 22H2 for x64-based Systems	5051989 (Security Update)	Important	Remote Code Execution	5050021	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22621.4890	Yes	None
Windows 11 Version 23H2 for ARM64-based Systems	5051989 (Security Update)	Important	Remote Code Execution	5050021	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22631.4890	Yes	None
Windows 11 Version 23H2 for x64-based Systems	5051989 (Security Update)	Important	Remote Code Execution	5050021	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22631.4890	Yes	None
Windows 11 Version 24H2 for ARM64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Remote Code Execution	5050009	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows 11 Version 24H2 for x64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Remote Code Execution	5050009	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2008 for 32-bit Systems Service Pack 2	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Remote Code Execution	5050063	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Remote Code Execution	5050063	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 for x64-based Systems Service Pack 2	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Remote Code Execution	5050063	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Remote Code Execution	5050063	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 R2 for x64-based Systems Service Pack 1	5052016 (Monthly Rollup) 5052032 (Security Only)	Important	Remote Code Execution	5050049	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.1.7601.27566	Yes	None
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)	5052016 (Monthly Rollup) 5052032 (Security Only)	Important	Remote Code Execution	5050049	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.1.7601.27566	Yes	None
Windows Server 2012	5052020 (Monthly Rollup)	Important	Remote Code Execution	5050004	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.2.9200.25317	Yes	None
Windows Server 2012 (Server Core installation)	5052020 (Monthly Rollup)	Important	Remote Code Execution	5050004	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.2.9200.25317	Yes	None
Windows Server 2012 R2	5052042 (Monthly Rollup)	Important	Remote Code Execution	5050048	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.3.9600.22417	Yes	None
Windows Server 2012 R2 (Server Core installation)	5052042 (Monthly Rollup)	Important	Remote Code Execution	5050048	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.3.9600.22417	Yes	None
Windows Server 2016	5052006 (Security Update)	Important	Remote Code Execution	5049993	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows Server 2016 (Server Core installation)	5052006 (Security Update)	Important	Remote Code Execution	5049993	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows Server 2019	5052000 (Security Update)	Important	Remote Code Execution	5050008	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2019 (Server Core installation)	5052000 (Security Update)	Important	Remote Code Execution	5050008	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2022	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Important	Remote Code Execution	5049983	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022 (Server Core installation)	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Important	Remote Code Execution	5049983	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022, 23H2 Edition (Server Core installation)	5051980 (Security Update)	Important	Remote Code Execution	5049984	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.25398.1425	Yes	None
Windows Server 2025	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Remote Code Execution	5050009	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2025 (Server Core installation)	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Remote Code Execution	5050009	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None

CVE ID	Acknowledgements
CVE-2025-21200	Anonymous

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-21201
MITRE
NVD

Issuing CNA: Microsoft

CVE Title: Windows Telephony Server Remote Code Execution Vulnerability
CVSS:

CVSS:3.1 Highest BaseScore:8.8/TemporalScore:7.7

Base score metrics
Attack Vector	Network
Attack Complexity	Low
Privileges Required	None
User Interaction	Required
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High

Executive Summary:
None
FAQ:

According to the CVSS metric, the attack vector is network (AV:N) and the user interaction is required (UI:R). What is the target context of the remote code execution?

This attack requires a client to connect to a malicious server, and that could allow the attacker to gain code execution on the client.

How could an attacker exploit this vulnerability?

Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Feb-25

Information published.

Important

Remote Code Execution

Exploitability Assessment	Publicly Disclosed	Exploited
Exploitation Less Likely	No	No

The following tables list the affected software details for the vulnerability.

CVE-2025-21201
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Windows 10 for 32-bit Systems	5052040 (Security Update)	Important	Remote Code Execution	5050013	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.10240.20915	Yes	None
Windows 10 for x64-based Systems	5052040 (Security Update)	Important	Remote Code Execution	5050013	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.10240.20915	Yes	None
Windows 10 Version 1607 for 32-bit Systems	5052006 (Security Update)	Important	Remote Code Execution	5049993	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows 10 Version 1607 for x64-based Systems	5052006 (Security Update)	Important	Remote Code Execution	5049993	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows 10 Version 1809 for 32-bit Systems	5052000 (Security Update)	Important	Remote Code Execution	5050008	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows 10 Version 1809 for x64-based Systems	5052000 (Security Update)	Important	Remote Code Execution	5050008	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows 10 Version 21H2 for 32-bit Systems	5051974 (Security Update)	Important	Remote Code Execution	5049981	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 21H2 for ARM64-based Systems	5051974 (Security Update)	Important	Remote Code Execution	5049981	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 21H2 for x64-based Systems	5051974 (Security Update)	Important	Remote Code Execution	5049981	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 22H2 for 32-bit Systems	5051974 (Security Update)	Important	Remote Code Execution	5049981	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 10 Version 22H2 for ARM64-based Systems	5051974 (Security Update)	Important	Remote Code Execution	5049981	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 10 Version 22H2 for x64-based Systems	5051974 (Security Update)	Important	Remote Code Execution	5049981	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 11 Version 22H2 for ARM64-based Systems	5051989 (Security Update)	Important	Remote Code Execution	5050021	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22621.4890	Yes	None
Windows 11 Version 22H2 for x64-based Systems	5051989 (Security Update)	Important	Remote Code Execution	5050021	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22621.4890	Yes	None
Windows 11 Version 23H2 for ARM64-based Systems	5051989 (Security Update)	Important	Remote Code Execution	5050021	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22631.4890	Yes	None
Windows 11 Version 23H2 for x64-based Systems	5051989 (Security Update)	Important	Remote Code Execution	5050021	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22631.4890	Yes	None
Windows 11 Version 24H2 for ARM64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Remote Code Execution	5050009	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows 11 Version 24H2 for x64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Remote Code Execution	5050009	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2008 for 32-bit Systems Service Pack 2	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Remote Code Execution	5050063	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Remote Code Execution	5050063	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 for x64-based Systems Service Pack 2	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Remote Code Execution	5050063	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Remote Code Execution	5050063	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 R2 for x64-based Systems Service Pack 1	5052016 (Monthly Rollup) 5052032 (Security Only)	Important	Remote Code Execution	5050049	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.1.7601.27566	Yes	None
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)	5052016 (Monthly Rollup) 5052032 (Security Only)	Important	Remote Code Execution	5050049	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.1.7601.27566	Yes	None
Windows Server 2012	5052020 (Monthly Rollup)	Important	Remote Code Execution	5050004	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.2.9200.25317	Yes	None
Windows Server 2012 (Server Core installation)	5052020 (Monthly Rollup)	Important	Remote Code Execution	5050004	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.2.9200.25317	Yes	None
Windows Server 2012 R2	5052042 (Monthly Rollup)	Important	Remote Code Execution	5050048	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.3.9600.22417	Yes	None
Windows Server 2012 R2 (Server Core installation)	5052042 (Monthly Rollup)	Important	Remote Code Execution	5050048	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.3.9600.22417	Yes	None
Windows Server 2016	5052006 (Security Update)	Important	Remote Code Execution	5049993	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows Server 2016 (Server Core installation)	5052006 (Security Update)	Important	Remote Code Execution	5049993	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows Server 2019	5052000 (Security Update)	Important	Remote Code Execution	5050008	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2019 (Server Core installation)	5052000 (Security Update)	Important	Remote Code Execution	5050008	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2022	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Important	Remote Code Execution	5049983	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022 (Server Core installation)	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Important	Remote Code Execution	5049983	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022, 23H2 Edition (Server Core installation)	5051980 (Security Update)	Important	Remote Code Execution	5049984	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.25398.1425	Yes	None
Windows Server 2025	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Remote Code Execution	5050009	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2025 (Server Core installation)	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Remote Code Execution	5050009	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None

CVE ID	Acknowledgements
CVE-2025-21201	Anonymous

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-21337
MITRE
NVD

Issuing CNA: Microsoft

CVE Title: Windows NTFS Elevation of Privilege Vulnerability
CVSS:

CVSS:3.1 Highest BaseScore:3.3/TemporalScore:2.9

Base score metrics
Attack Vector	Local
Attack Complexity	Low
Privileges Required	Low
User Interaction	None
Scope	Unchanged
Confidentiality	Low
Integrity	None
Availability	None

Executive Summary:
None
FAQ:

What privileges could be gained by an attacker who successfully exploited the vulnerability?

An attacker would only be able to list folder contents and not gain system privileges.

Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Feb-25

Information published.

Important

Elevation of Privilege

Exploitability Assessment	Publicly Disclosed	Exploited
Exploitation Less Likely	No	No

The following tables list the affected software details for the vulnerability.

CVE-2025-21337
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Windows 10 for 32-bit Systems	5052040 (Security Update)	Important	Elevation of Privilege	5050013	Base: 3.3 Temporal: 2.9 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C	10.0.10240.20915	Yes	None
Windows 10 for x64-based Systems	5052040 (Security Update)	Important	Elevation of Privilege	5050013	Base: 3.3 Temporal: 2.9 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C	10.0.10240.20915	Yes	None
Windows 10 Version 1607 for 32-bit Systems	5052006 (Security Update)	Important	Elevation of Privilege	5049993	Base: 3.3 Temporal: 2.9 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows 10 Version 1607 for x64-based Systems	5052006 (Security Update)	Important	Elevation of Privilege	5049993	Base: 3.3 Temporal: 2.9 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows 10 Version 1809 for 32-bit Systems	5052000 (Security Update)	Important	Elevation of Privilege	5050008	Base: 3.3 Temporal: 2.9 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows 10 Version 1809 for x64-based Systems	5052000 (Security Update)	Important	Elevation of Privilege	5050008	Base: 3.3 Temporal: 2.9 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows 10 Version 21H2 for 32-bit Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 3.3 Temporal: 2.9 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 21H2 for ARM64-based Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 3.3 Temporal: 2.9 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 21H2 for x64-based Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 3.3 Temporal: 2.9 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 22H2 for 32-bit Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 3.3 Temporal: 2.9 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 10 Version 22H2 for ARM64-based Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 3.3 Temporal: 2.9 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 10 Version 22H2 for x64-based Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 3.3 Temporal: 2.9 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 11 Version 22H2 for ARM64-based Systems	5051989 (Security Update)	Important	Elevation of Privilege	5050021	Base: 3.3 Temporal: 2.9 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C	10.0.22621.4890	Yes	None
Windows 11 Version 22H2 for x64-based Systems	5051989 (Security Update)	Important	Elevation of Privilege	5050021	Base: 3.3 Temporal: 2.9 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C	10.0.22621.4890	Yes	None
Windows 11 Version 23H2 for ARM64-based Systems	5051989 (Security Update)	Important	Elevation of Privilege	5050021	Base: 3.3 Temporal: 2.9 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C	10.0.22631.4890	Yes	None
Windows 11 Version 23H2 for x64-based Systems	5051989 (Security Update)	Important	Elevation of Privilege	5050021	Base: 3.3 Temporal: 2.9 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C	10.0.22631.4890	Yes	None
Windows 11 Version 24H2 for ARM64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5050009	Base: 3.3 Temporal: 2.9 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows 11 Version 24H2 for x64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5050009	Base: 3.3 Temporal: 2.9 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2008 for 32-bit Systems Service Pack 2	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Elevation of Privilege	5050063	Base: 3.3 Temporal: 2.9 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Elevation of Privilege	5050063	Base: 3.3 Temporal: 2.9 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 for x64-based Systems Service Pack 2	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Elevation of Privilege	5050063	Base: 3.3 Temporal: 2.9 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Elevation of Privilege	5050063	Base: 3.3 Temporal: 2.9 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 R2 for x64-based Systems Service Pack 1	5052016 (Monthly Rollup) 5052032 (Security Only)	Important	Elevation of Privilege	5050049	Base: 3.3 Temporal: 2.9 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C	6.1.7601.27566	Yes	None
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)	5052016 (Monthly Rollup) 5052032 (Security Only)	Important	Elevation of Privilege	5050049	Base: 3.3 Temporal: 2.9 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C	6.1.7601.27566	Yes	None
Windows Server 2012	5052020 (Monthly Rollup)	Important	Elevation of Privilege	5050004	Base: 3.3 Temporal: 2.9 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C	6.2.9200.25317	Yes	None
Windows Server 2012 (Server Core installation)	5052020 (Monthly Rollup)	Important	Elevation of Privilege	5050004	Base: 3.3 Temporal: 2.9 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C	6.2.9200.25317	Yes	None
Windows Server 2012 R2	5052042 (Monthly Rollup)	Important	Elevation of Privilege	5050048	Base: 3.3 Temporal: 2.9 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C	6.3.9600.22417	Yes	None
Windows Server 2012 R2 (Server Core installation)	5052042 (Monthly Rollup)	Important	Elevation of Privilege	5050048	Base: 3.3 Temporal: 2.9 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C	6.3.9600.22417	Yes	None
Windows Server 2016	5052006 (Security Update)	Important	Elevation of Privilege	5049993	Base: 3.3 Temporal: 2.9 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows Server 2016 (Server Core installation)	5052006 (Security Update)	Important	Elevation of Privilege	5049993	Base: 3.3 Temporal: 2.9 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows Server 2019	5052000 (Security Update)	Important	Elevation of Privilege	5050008	Base: 3.3 Temporal: 2.9 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2019 (Server Core installation)	5052000 (Security Update)	Important	Elevation of Privilege	5050008	Base: 3.3 Temporal: 2.9 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2022	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5049983	Base: 3.3 Temporal: 2.9 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022 (Server Core installation)	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5049983	Base: 3.3 Temporal: 2.9 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022, 23H2 Edition (Server Core installation)	5051980 (Security Update)	Important	Elevation of Privilege	5049984	Base: 3.3 Temporal: 2.9 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C	10.0.25398.1425	Yes	None
Windows Server 2025	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5050009	Base: 3.3 Temporal: 2.9 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2025 (Server Core installation)	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5050009	Base: 3.3 Temporal: 2.9 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None

CVE ID	Acknowledgements
CVE-2025-21337	hazard

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-21347
MITRE
NVD

Issuing CNA: Microsoft

CVE Title: Windows Deployment Services Denial of Service Vulnerability
CVSS:

CVSS:3.1 Highest BaseScore:6.0/TemporalScore:5.2

Base score metrics
Attack Vector	Local
Attack Complexity	High
Privileges Required	Low
User Interaction	Required
Scope	Unchanged
Confidentiality	None
Integrity	High
Availability	High

Executive Summary:
None
FAQ:

According to the CVSS metrics, user interaction is required (UI:R) and privileges required is low (PR:L). What does that mean for this vulnerability?

An authenticated attacker would need to perform specific actions on a vulnerable system, then convince another user on that system to interact with the Windows Deployment Services functionality.

According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?

Successful exploitation of this vulnerability requires an attacker to prepare the target environment to improve exploit reliability.

According to the CVSS metrics, successful exploitation of this vulnerability does not impact confidentiality (C:N) but has major impact on integrity (I:H) and availability (A:H). What does that mean for this vulnerability?

An attacker who successfully exploits this vulnerability cannot access files but can overwrite their contents and potentially cause the service to become unavailable.

Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Feb-25

Information published.

Important

Denial of Service

Exploitability Assessment	Publicly Disclosed	Exploited
Exploitation Less Likely	No	No

The following tables list the affected software details for the vulnerability.

CVE-2025-21347
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Windows 10 for 32-bit Systems	5052040 (Security Update)	Important	Denial of Service	5050013	Base: 6.0 Temporal: 5.2 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C	10.0.10240.20915	Yes	None
Windows 10 for x64-based Systems	5052040 (Security Update)	Important	Denial of Service	5050013	Base: 6.0 Temporal: 5.2 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C	10.0.10240.20915	Yes	None
Windows 10 Version 1607 for 32-bit Systems	5052006 (Security Update)	Important	Denial of Service	5049993	Base: 6.0 Temporal: 5.2 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows 10 Version 1607 for x64-based Systems	5052006 (Security Update)	Important	Denial of Service	5049993	Base: 6.0 Temporal: 5.2 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows 10 Version 1809 for 32-bit Systems	5052000 (Security Update)	Important	Denial of Service	5050008	Base: 6.0 Temporal: 5.2 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows 10 Version 1809 for x64-based Systems	5052000 (Security Update)	Important	Denial of Service	5050008	Base: 6.0 Temporal: 5.2 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows 10 Version 21H2 for 32-bit Systems	5051974 (Security Update)	Important	Denial of Service	5049981	Base: 6.0 Temporal: 5.2 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 21H2 for ARM64-based Systems	5051974 (Security Update)	Important	Denial of Service	5049981	Base: 6.0 Temporal: 5.2 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 21H2 for x64-based Systems	5051974 (Security Update)	Important	Denial of Service	5049981	Base: 6.0 Temporal: 5.2 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 22H2 for 32-bit Systems	5051974 (Security Update)	Important	Denial of Service	5049981	Base: 6.0 Temporal: 5.2 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 10 Version 22H2 for ARM64-based Systems	5051974 (Security Update)	Important	Denial of Service	5049981	Base: 6.0 Temporal: 5.2 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 10 Version 22H2 for x64-based Systems	5051974 (Security Update)	Important	Denial of Service	5049981	Base: 6.0 Temporal: 5.2 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 11 Version 22H2 for ARM64-based Systems	5051989 (Security Update)	Important	Denial of Service	5050021	Base: 6.0 Temporal: 5.2 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C	10.0.22621.4890	Yes	None
Windows 11 Version 22H2 for x64-based Systems	5051989 (Security Update)	Important	Denial of Service	5050021	Base: 6.0 Temporal: 5.2 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C	10.0.22621.4890	Yes	None
Windows 11 Version 23H2 for ARM64-based Systems	5051989 (Security Update)	Important	Denial of Service	5050021	Base: 6.0 Temporal: 5.2 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C	10.0.22631.4890	Yes	None
Windows 11 Version 23H2 for x64-based Systems	5051989 (Security Update)	Important	Denial of Service	5050021	Base: 6.0 Temporal: 5.2 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C	10.0.22631.4890	Yes	None
Windows 11 Version 24H2 for ARM64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Denial of Service	5050009	Base: 6.0 Temporal: 5.2 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows 11 Version 24H2 for x64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Denial of Service	5050009	Base: 6.0 Temporal: 5.2 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2012	5052020 (Monthly Rollup)	Important	Denial of Service	5050004	Base: 6.0 Temporal: 5.2 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C	6.2.9200.25317	Yes	None
Windows Server 2012 (Server Core installation)	5052020 (Monthly Rollup)	Important	Denial of Service	5050004	Base: 6.0 Temporal: 5.2 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C	6.2.9200.25317	Yes	None
Windows Server 2012 R2	5052042 (Monthly Rollup)	Important	Denial of Service	5050048	Base: 6.0 Temporal: 5.2 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C	6.3.9600.22417	Yes	None
Windows Server 2012 R2 (Server Core installation)	5052042 (Monthly Rollup)	Important	Denial of Service	5050048	Base: 6.0 Temporal: 5.2 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C	6.3.9600.22417	Yes	None
Windows Server 2016	5052006 (Security Update)	Important	Denial of Service	5049993	Base: 6.0 Temporal: 5.2 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows Server 2016 (Server Core installation)	5052006 (Security Update)	Important	Denial of Service	5049993	Base: 6.0 Temporal: 5.2 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows Server 2019	5052000 (Security Update)	Important	Denial of Service	5050008	Base: 6.0 Temporal: 5.2 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2019 (Server Core installation)	5052000 (Security Update)	Important	Denial of Service	5050008	Base: 6.0 Temporal: 5.2 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2022	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Important	Denial of Service	5049983	Base: 6.0 Temporal: 5.2 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022 (Server Core installation)	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Important	Denial of Service	5049983	Base: 6.0 Temporal: 5.2 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022, 23H2 Edition (Server Core installation)	5051980 (Security Update)	Important	Denial of Service	5049984	Base: 6.0 Temporal: 5.2 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C	10.0.25398.1425	Yes	None
Windows Server 2025	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Denial of Service	5050009	Base: 6.0 Temporal: 5.2 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2025 (Server Core installation)	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Denial of Service	5050009	Base: 6.0 Temporal: 5.2 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None

CVE ID	Acknowledgements
CVE-2025-21347	BochengXiang(@Crispr) with FDU

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-21349
MITRE
NVD

Issuing CNA: Microsoft

CVE Title: Windows Remote Desktop Configuration Service Tampering Vulnerability
CVSS:

CVSS:3.1 Highest BaseScore:6.8/TemporalScore:5.9

Base score metrics
Attack Vector	Network
Attack Complexity	High
Privileges Required	None
User Interaction	Required
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	None

Executive Summary:
None
FAQ:

According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?

According to the CVSS metric, user interaction is required (UI:R) and privileges required are none (PR:N). What does that mean for this vulnerability?

An unauthorized attacker must wait for a user to initiate a connection.

Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Feb-25

Information published.

Important

Tampering

Exploitability Assessment	Publicly Disclosed	Exploited
Exploitation Less Likely	No	No

The following tables list the affected software details for the vulnerability.

CVE-2025-21349
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Windows 10 for 32-bit Systems	5052040 (Security Update)	Important	Tampering	5050013	Base: 6.8 Temporal: 5.9 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C	10.0.10240.20915	Yes	None
Windows 10 for x64-based Systems	5052040 (Security Update)	Important	Tampering	5050013	Base: 6.8 Temporal: 5.9 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C	10.0.10240.20915	Yes	None
Windows 10 Version 1607 for 32-bit Systems	5052006 (Security Update)	Important	Tampering	5049993	Base: 6.8 Temporal: 5.9 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows 10 Version 1607 for x64-based Systems	5052006 (Security Update)	Important	Tampering	5049993	Base: 6.8 Temporal: 5.9 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows 10 Version 1809 for 32-bit Systems	5052000 (Security Update)	Important	Tampering	5050008	Base: 6.8 Temporal: 5.9 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows 10 Version 1809 for x64-based Systems	5052000 (Security Update)	Important	Tampering	5050008	Base: 6.8 Temporal: 5.9 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows 10 Version 21H2 for 32-bit Systems	5051974 (Security Update)	Important	Tampering	5049981	Base: 6.8 Temporal: 5.9 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 21H2 for ARM64-based Systems	5051974 (Security Update)	Important	Tampering	5049981	Base: 6.8 Temporal: 5.9 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 21H2 for x64-based Systems	5051974 (Security Update)	Important	Tampering	5049981	Base: 6.8 Temporal: 5.9 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 22H2 for 32-bit Systems	5051974 (Security Update)	Important	Tampering	5049981	Base: 6.8 Temporal: 5.9 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 10 Version 22H2 for ARM64-based Systems	5051974 (Security Update)	Important	Tampering	5049981	Base: 6.8 Temporal: 5.9 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 10 Version 22H2 for x64-based Systems	5051974 (Security Update)	Important	Tampering	5049981	Base: 6.8 Temporal: 5.9 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 11 Version 22H2 for ARM64-based Systems	5051989 (Security Update)	Important	Tampering	5050021	Base: 6.8 Temporal: 5.9 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C	10.0.22621.4890	Yes	None
Windows 11 Version 22H2 for x64-based Systems	5051989 (Security Update)	Important	Tampering	5050021	Base: 6.8 Temporal: 5.9 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C	10.0.22621.4890	Yes	None
Windows 11 Version 23H2 for ARM64-based Systems	5051989 (Security Update)	Important	Tampering	5050021	Base: 6.8 Temporal: 5.9 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C	10.0.22631.4890	Yes	None
Windows 11 Version 23H2 for x64-based Systems	5051989 (Security Update)	Important	Tampering	5050021	Base: 6.8 Temporal: 5.9 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C	10.0.22631.4890	Yes	None
Windows 11 Version 24H2 for ARM64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Tampering	5050009	Base: 6.8 Temporal: 5.9 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows 11 Version 24H2 for x64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Tampering	5050009	Base: 6.8 Temporal: 5.9 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2016	5052006 (Security Update)	Important	Tampering	5049993	Base: 6.8 Temporal: 5.9 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows Server 2016 (Server Core installation)	5052006 (Security Update)	Important	Tampering	5049993	Base: 6.8 Temporal: 5.9 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows Server 2019	5052000 (Security Update)	Important	Tampering	5050008	Base: 6.8 Temporal: 5.9 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2019 (Server Core installation)	5052000 (Security Update)	Important	Tampering	5050008	Base: 6.8 Temporal: 5.9 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2022	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Important	Tampering	5049983	Base: 6.8 Temporal: 5.9 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022 (Server Core installation)	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Important	Tampering	5049983	Base: 6.8 Temporal: 5.9 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022, 23H2 Edition (Server Core installation)	5051980 (Security Update)	Important	Tampering	5049984	Base: 6.8 Temporal: 5.9 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C	10.0.25398.1425	Yes	None
Windows Server 2025	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Tampering	5050009	Base: 6.8 Temporal: 5.9 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2025 (Server Core installation)	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Tampering	5050009	Base: 6.8 Temporal: 5.9 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None

CVE ID	Acknowledgements
CVE-2025-21349	Philemon Orphee Favrod with Microsoft Josh Watson with Microsoft Ray Reskusich with Microsoft

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-21350
MITRE
NVD

Issuing CNA: Microsoft

CVE Title: Windows Kerberos Denial of Service Vulnerability
CVSS:

CVSS:3.1 Highest BaseScore:5.9/TemporalScore:5.2

Base score metrics
Attack Vector	Network
Attack Complexity	High
Privileges Required	None
User Interaction	None
Scope	Unchanged
Confidentiality	None
Integrity	None
Availability	High

Executive Summary:
None
FAQ:

According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?

Successful exploitation of this vulnerability requires an attacker to win a race condition.

Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Feb-25

Information published.

Important

Denial of Service

Exploitability Assessment	Publicly Disclosed	Exploited
Exploitation Less Likely	No	No

The following tables list the affected software details for the vulnerability.

CVE-2025-21350
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Windows 10 for 32-bit Systems	5052040 (Security Update)	Important	Denial of Service	5050013	Base: 5.9 Temporal: 5.2 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.10240.20915	Yes	None
Windows 10 for x64-based Systems	5052040 (Security Update)	Important	Denial of Service	5050013	Base: 5.9 Temporal: 5.2 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.10240.20915	Yes	None
Windows 10 Version 1607 for 32-bit Systems	5052006 (Security Update)	Important	Denial of Service	5049993	Base: 5.9 Temporal: 5.2 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows 10 Version 1607 for x64-based Systems	5052006 (Security Update)	Important	Denial of Service	5049993	Base: 5.9 Temporal: 5.2 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows 10 Version 1809 for 32-bit Systems	5052000 (Security Update)	Important	Denial of Service	5050008	Base: 5.9 Temporal: 5.2 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows 10 Version 1809 for x64-based Systems	5052000 (Security Update)	Important	Denial of Service	5050008	Base: 5.9 Temporal: 5.2 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows 10 Version 21H2 for 32-bit Systems	5051974 (Security Update)	Important	Denial of Service	5049981	Base: 5.9 Temporal: 5.2 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 21H2 for ARM64-based Systems	5051974 (Security Update)	Important	Denial of Service	5049981	Base: 5.9 Temporal: 5.2 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 21H2 for x64-based Systems	5051974 (Security Update)	Important	Denial of Service	5049981	Base: 5.9 Temporal: 5.2 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 22H2 for 32-bit Systems	5051974 (Security Update)	Important	Denial of Service	5049981	Base: 5.9 Temporal: 5.2 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 10 Version 22H2 for ARM64-based Systems	5051974 (Security Update)	Important	Denial of Service	5049981	Base: 5.9 Temporal: 5.2 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 10 Version 22H2 for x64-based Systems	5051974 (Security Update)	Important	Denial of Service	5049981	Base: 5.9 Temporal: 5.2 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 11 Version 22H2 for ARM64-based Systems	5051989 (Security Update)	Important	Denial of Service	5050021	Base: 5.9 Temporal: 5.2 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.22621.4890	Yes	None
Windows 11 Version 22H2 for x64-based Systems	5051989 (Security Update)	Important	Denial of Service	5050021	Base: 5.9 Temporal: 5.2 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.22621.4890	Yes	None
Windows 11 Version 23H2 for ARM64-based Systems	5051989 (Security Update)	Important	Denial of Service	5050021	Base: 5.9 Temporal: 5.2 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.22631.4890	Yes	None
Windows 11 Version 23H2 for x64-based Systems	5051989 (Security Update)	Important	Denial of Service	5050021	Base: 5.9 Temporal: 5.2 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.22631.4890	Yes	None
Windows 11 Version 24H2 for ARM64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Denial of Service	5050009	Base: 5.9 Temporal: 5.2 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows 11 Version 24H2 for x64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Denial of Service	5050009	Base: 5.9 Temporal: 5.2 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2008 for 32-bit Systems Service Pack 2	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Denial of Service	5050063	Base: 5.9 Temporal: 5.2 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Denial of Service	5050063	Base: 5.9 Temporal: 5.2 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 for x64-based Systems Service Pack 2	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Denial of Service	5050063	Base: 5.9 Temporal: 5.2 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Denial of Service	5050063	Base: 5.9 Temporal: 5.2 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 R2 for x64-based Systems Service Pack 1	5052016 (Monthly Rollup) 5052032 (Security Only)	Important	Denial of Service	5050049	Base: 5.9 Temporal: 5.2 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	6.1.7601.27566	Yes	None
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)	5052016 (Monthly Rollup) 5052032 (Security Only)	Important	Denial of Service	5050049	Base: 5.9 Temporal: 5.2 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	6.1.7601.27566	Yes	None
Windows Server 2012	5052020 (Monthly Rollup)	Important	Denial of Service	5050004	Base: 5.9 Temporal: 5.2 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	6.2.9200.25317	Yes	None
Windows Server 2012 (Server Core installation)	5052020 (Monthly Rollup)	Important	Denial of Service	5050004	Base: 5.9 Temporal: 5.2 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	6.2.9200.25317	Yes	None
Windows Server 2012 R2	5052042 (Monthly Rollup)	Important	Denial of Service	5050048	Base: 5.9 Temporal: 5.2 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	6.3.9600.22417	Yes	None
Windows Server 2012 R2 (Server Core installation)	5052042 (Monthly Rollup)	Important	Denial of Service	5050048	Base: 5.9 Temporal: 5.2 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	6.3.9600.22417	Yes	None
Windows Server 2016	5052006 (Security Update)	Important	Denial of Service	5049993	Base: 5.9 Temporal: 5.2 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows Server 2016 (Server Core installation)	5052006 (Security Update)	Important	Denial of Service	5049993	Base: 5.9 Temporal: 5.2 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows Server 2019	5052000 (Security Update)	Important	Denial of Service	5050008	Base: 5.9 Temporal: 5.2 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2019 (Server Core installation)	5052000 (Security Update)	Important	Denial of Service	5050008	Base: 5.9 Temporal: 5.2 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2022	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Important	Denial of Service	5049983	Base: 5.9 Temporal: 5.2 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022 (Server Core installation)	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Important	Denial of Service	5049983	Base: 5.9 Temporal: 5.2 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022, 23H2 Edition (Server Core installation)	5051980 (Security Update)	Important	Denial of Service	5049984	Base: 5.9 Temporal: 5.2 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.25398.1425	Yes	None
Windows Server 2025	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Denial of Service	5050009	Base: 5.9 Temporal: 5.2 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2025 (Server Core installation)	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Denial of Service	5050009	Base: 5.9 Temporal: 5.2 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None

CVE ID	Acknowledgements
CVE-2025-21350	Anonymous

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-21358
MITRE
NVD

Issuing CNA: Microsoft

CVE Title: Windows Core Messaging Elevation of Privileges Vulnerability
CVSS:

CVSS:3.1 Highest BaseScore:7.8/TemporalScore:6.8

Base score metrics
Attack Vector	Local
Attack Complexity	Low
Privileges Required	Low
User Interaction	None
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High

Executive Summary:
None
FAQ:

What privileges could be gained by an attacker who successfully exploited this vulnerability?

An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.

Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Feb-25

Information published.

Important

Elevation of Privilege

Exploitability Assessment	Publicly Disclosed	Exploited
Exploitation More Likely	No	No

The following tables list the affected software details for the vulnerability.

CVE-2025-21358
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Windows 10 for 32-bit Systems	5052040 (Security Update)	Important	Elevation of Privilege	5050013	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.10240.20915	Yes	None
Windows 10 for x64-based Systems	5052040 (Security Update)	Important	Elevation of Privilege	5050013	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.10240.20915	Yes	None
Windows 10 Version 1607 for 32-bit Systems	5052006 (Security Update)	Important	Elevation of Privilege	5049993	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows 10 Version 1607 for x64-based Systems	5052006 (Security Update)	Important	Elevation of Privilege	5049993	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows 10 Version 1809 for 32-bit Systems	5052000 (Security Update)	Important	Elevation of Privilege	5050008	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows 10 Version 1809 for x64-based Systems	5052000 (Security Update)	Important	Elevation of Privilege	5050008	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows 10 Version 21H2 for 32-bit Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 21H2 for ARM64-based Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 21H2 for x64-based Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 22H2 for 32-bit Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 10 Version 22H2 for ARM64-based Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 10 Version 22H2 for x64-based Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 11 Version 22H2 for ARM64-based Systems	5051989 (Security Update)	Important	Elevation of Privilege	5050021	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22621.4890	Yes	None
Windows 11 Version 22H2 for x64-based Systems	5051989 (Security Update)	Important	Elevation of Privilege	5050021	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22621.4890	Yes	None
Windows 11 Version 23H2 for ARM64-based Systems	5051989 (Security Update)	Important	Elevation of Privilege	5050021	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22631.4890	Yes	None
Windows 11 Version 23H2 for x64-based Systems	5051989 (Security Update)	Important	Elevation of Privilege	5050021	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22631.4890	Yes	None
Windows 11 Version 24H2 for ARM64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5050009	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows 11 Version 24H2 for x64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5050009	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2016	5052006 (Security Update)	Important	Elevation of Privilege	5049993	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows Server 2016 (Server Core installation)	5052006 (Security Update)	Important	Elevation of Privilege	5049993	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows Server 2019	5052000 (Security Update)	Important	Elevation of Privilege	5050008	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2019 (Server Core installation)	5052000 (Security Update)	Important	Elevation of Privilege	5050008	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2022	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5049983	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022 (Server Core installation)	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5049983	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022, 23H2 Edition (Server Core installation)	5051980 (Security Update)	Important	Elevation of Privilege	5049984	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.25398.1425	Yes	None
Windows Server 2025	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5050009	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2025 (Server Core installation)	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5050009	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None

CVE ID	Acknowledgements
CVE-2025-21358	YanZiShuang@BigCJTeam of cyberkl

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-21359
MITRE
NVD

Issuing CNA: Microsoft

CVE Title: Windows Kernel Security Feature Bypass Vulnerability
CVSS:

CVSS:3.1 Highest BaseScore:7.8/TemporalScore:6.8

Base score metrics
Attack Vector	Local
Attack Complexity	Low
Privileges Required	Low
User Interaction	None
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High

Executive Summary:
None
FAQ:

What kind of security feature could be bypassed by successfully exploiting this vulnerability?

An authenticated standard user is able to bypass user access control (UAC) promt.

Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Feb-25

Information published.

Important

Security Feature Bypass

Exploitability Assessment	Publicly Disclosed	Exploited
Exploitation Less Likely	No	No

The following tables list the affected software details for the vulnerability.

CVE-2025-21359
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Windows 10 for 32-bit Systems	5052040 (Security Update)	Important	Security Feature Bypass	5050013	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.10240.20915	Yes	None
Windows 10 for x64-based Systems	5052040 (Security Update)	Important	Security Feature Bypass	5050013	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.10240.20915	Yes	None
Windows 10 Version 1607 for 32-bit Systems	5052006 (Security Update)	Important	Security Feature Bypass	5049993	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows 10 Version 1607 for x64-based Systems	5052006 (Security Update)	Important	Security Feature Bypass	5049993	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows 10 Version 1809 for 32-bit Systems	5052000 (Security Update)	Important	Security Feature Bypass	5050008	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows 10 Version 1809 for x64-based Systems	5052000 (Security Update)	Important	Security Feature Bypass	5050008	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows 10 Version 21H2 for 32-bit Systems	5051974 (Security Update)	Important	Security Feature Bypass	5049981	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 21H2 for ARM64-based Systems	5051974 (Security Update)	Important	Security Feature Bypass	5049981	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 21H2 for x64-based Systems	5051974 (Security Update)	Important	Security Feature Bypass	5049981	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 22H2 for 32-bit Systems	5051974 (Security Update)	Important	Security Feature Bypass	5049981	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 10 Version 22H2 for ARM64-based Systems	5051974 (Security Update)	Important	Security Feature Bypass	5049981	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 10 Version 22H2 for x64-based Systems	5051974 (Security Update)	Important	Security Feature Bypass	5049981	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 11 Version 22H2 for ARM64-based Systems	5051989 (Security Update)	Important	Security Feature Bypass	5050021	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22621.4890	Yes	None
Windows 11 Version 22H2 for x64-based Systems	5051989 (Security Update)	Important	Security Feature Bypass	5050021	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22621.4890	Yes	None
Windows 11 Version 23H2 for ARM64-based Systems	5051989 (Security Update)	Important	Security Feature Bypass	5050021	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22631.4890	Yes	None
Windows 11 Version 23H2 for x64-based Systems	5051989 (Security Update)	Important	Security Feature Bypass	5050021	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22631.4890	Yes	None
Windows 11 Version 24H2 for ARM64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Security Feature Bypass	5050009	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows 11 Version 24H2 for x64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Security Feature Bypass	5050009	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2008 for 32-bit Systems Service Pack 2	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Security Feature Bypass	5050063	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Security Feature Bypass	5050063	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 for x64-based Systems Service Pack 2	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Security Feature Bypass	5050063	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Security Feature Bypass	5050063	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 R2 for x64-based Systems Service Pack 1	5052016 (Monthly Rollup) 5052032 (Security Only)	Important	Security Feature Bypass	5050049	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.1.7601.27566	Yes	None
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)	5052016 (Monthly Rollup) 5052032 (Security Only)	Important	Security Feature Bypass	5050049	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.1.7601.27566	Yes	None
Windows Server 2012	5052020 (Monthly Rollup)	Important	Security Feature Bypass	5050004	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.2.9200.25317	Yes	None
Windows Server 2012 (Server Core installation)	5052020 (Monthly Rollup)	Important	Security Feature Bypass	5050004	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.2.9200.25317	Yes	None
Windows Server 2012 R2	5052042 (Monthly Rollup)	Important	Security Feature Bypass	5050048	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.3.9600.22417	Yes	None
Windows Server 2012 R2 (Server Core installation)	5052042 (Monthly Rollup)	Important	Security Feature Bypass	5050048	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.3.9600.22417	Yes	None
Windows Server 2016	5052006 (Security Update)	Important	Security Feature Bypass	5049993	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows Server 2016 (Server Core installation)	5052006 (Security Update)	Important	Security Feature Bypass	5049993	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows Server 2019	5052000 (Security Update)	Important	Security Feature Bypass	5050008	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2019 (Server Core installation)	5052000 (Security Update)	Important	Security Feature Bypass	5050008	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2022	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Important	Security Feature Bypass	5049983	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022 (Server Core installation)	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Important	Security Feature Bypass	5049983	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022, 23H2 Edition (Server Core installation)	5051980 (Security Update)	Important	Security Feature Bypass	5049984	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.25398.1425	Yes	None
Windows Server 2025	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Security Feature Bypass	5050009	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2025 (Server Core installation)	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Security Feature Bypass	5050009	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None

CVE ID	Acknowledgements
CVE-2025-21359	hazard Varun Goel from Microsoft MORSE

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-21367
MITRE
NVD

Issuing CNA: Microsoft

CVE Title: Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
CVSS:

CVSS:3.1 Highest BaseScore:7.8/TemporalScore:6.8

Base score metrics
Attack Vector	Local
Attack Complexity	Low
Privileges Required	Low
User Interaction	None
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High

Executive Summary:
None
FAQ:

What privileges could be gained by an attacker who successfully exploited this vulnerability?

An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.

Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Feb-25

Information published.

Important

Elevation of Privilege

Exploitability Assessment	Publicly Disclosed	Exploited
Exploitation More Likely	No	No

The following tables list the affected software details for the vulnerability.

CVE-2025-21367
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Windows 10 Version 1809 for 32-bit Systems	5052000 (Security Update)	Important	Elevation of Privilege	5050008	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows 10 Version 1809 for x64-based Systems	5052000 (Security Update)	Important	Elevation of Privilege	5050008	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows 10 Version 21H2 for 32-bit Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 21H2 for ARM64-based Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 21H2 for x64-based Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 22H2 for 32-bit Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 10 Version 22H2 for ARM64-based Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 10 Version 22H2 for x64-based Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 11 Version 22H2 for ARM64-based Systems	5051989 (Security Update)	Important	Elevation of Privilege	5050021	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22621.4890	Yes	None
Windows 11 Version 22H2 for x64-based Systems	5051989 (Security Update)	Important	Elevation of Privilege	5050021	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22621.4890	Yes	None
Windows 11 Version 23H2 for ARM64-based Systems	5051989 (Security Update)	Important	Elevation of Privilege	5050021	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22631.4890	Yes	None
Windows 11 Version 23H2 for x64-based Systems	5051989 (Security Update)	Important	Elevation of Privilege	5050021	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22631.4890	Yes	None
Windows 11 Version 24H2 for ARM64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5050009	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows 11 Version 24H2 for x64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5050009	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2019	5052000 (Security Update)	Important	Elevation of Privilege	5050008	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2019 (Server Core installation)	5052000 (Security Update)	Important	Elevation of Privilege	5050008	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2022	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5049983	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022 (Server Core installation)	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5049983	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022, 23H2 Edition (Server Core installation)	5051980 (Security Update)	Important	Elevation of Privilege	5049984	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.25398.1425	Yes	None
Windows Server 2025	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5050009	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2025 (Server Core installation)	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5050009	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None

CVE ID	Acknowledgements
CVE-2025-21367	Devin Jensen with Microsoft George Hughey with MSRC Vulnerabilities & Mitigations Devin Jensen with Microsoft

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-21371
MITRE
NVD

Issuing CNA: Microsoft

CVE Title: Windows Telephony Service Remote Code Execution Vulnerability
CVSS:

CVSS:3.1 Highest BaseScore:8.8/TemporalScore:7.7

Base score metrics
Attack Vector	Network
Attack Complexity	Low
Privileges Required	None
User Interaction	Required
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High

Executive Summary:
None
FAQ:

According to the CVSS metric, the attack vector is network (AV:N) and the user interaction is required (UI:R). What is the target context of the remote code execution?

This attack requires a client to connect to a malicious server, and that could allow the attacker to gain code execution on the client.

How could an attacker exploit this vulnerability?

Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Feb-25

Information published.

Important

Remote Code Execution

Exploitability Assessment	Publicly Disclosed	Exploited
Exploitation Less Likely	No	No

The following tables list the affected software details for the vulnerability.

CVE-2025-21371
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Windows 10 for 32-bit Systems	5052040 (Security Update)	Important	Remote Code Execution	5050013	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.10240.20915	Yes	None
Windows 10 for x64-based Systems	5052040 (Security Update)	Important	Remote Code Execution	5050013	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.10240.20915	Yes	None
Windows 10 Version 1607 for 32-bit Systems	5052006 (Security Update)	Important	Remote Code Execution	5049993	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows 10 Version 1607 for x64-based Systems	5052006 (Security Update)	Important	Remote Code Execution	5049993	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows 10 Version 1809 for 32-bit Systems	5052000 (Security Update)	Important	Remote Code Execution	5050008	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows 10 Version 1809 for x64-based Systems	5052000 (Security Update)	Important	Remote Code Execution	5050008	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows 10 Version 21H2 for 32-bit Systems	5051974 (Security Update)	Important	Remote Code Execution	5049981	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 21H2 for ARM64-based Systems	5051974 (Security Update)	Important	Remote Code Execution	5049981	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 21H2 for x64-based Systems	5051974 (Security Update)	Important	Remote Code Execution	5049981	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 22H2 for 32-bit Systems	5051974 (Security Update)	Important	Remote Code Execution	5049981	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 10 Version 22H2 for ARM64-based Systems	5051974 (Security Update)	Important	Remote Code Execution	5049981	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 10 Version 22H2 for x64-based Systems	5051974 (Security Update)	Important	Remote Code Execution	5049981	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 11 Version 22H2 for ARM64-based Systems	5051989 (Security Update)	Important	Remote Code Execution	5050021	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22621.4890	Yes	None
Windows 11 Version 22H2 for x64-based Systems	5051989 (Security Update)	Important	Remote Code Execution	5050021	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22621.4890	Yes	None
Windows 11 Version 23H2 for ARM64-based Systems	5051989 (Security Update)	Important	Remote Code Execution	5050021	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22631.4890	Yes	None
Windows 11 Version 23H2 for x64-based Systems	5051989 (Security Update)	Important	Remote Code Execution	5050021	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22631.4890	Yes	None
Windows 11 Version 24H2 for ARM64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Remote Code Execution	5050009	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows 11 Version 24H2 for x64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Remote Code Execution	5050009	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2008 for 32-bit Systems Service Pack 2	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Remote Code Execution	5050063	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Remote Code Execution	5050063	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 for x64-based Systems Service Pack 2	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Remote Code Execution	5050063	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Remote Code Execution	5050063	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 R2 for x64-based Systems Service Pack 1	5052016 (Monthly Rollup) 5052032 (Security Only)	Important	Remote Code Execution	5050049	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.1.7601.27566	Yes	None
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)	5052016 (Monthly Rollup) 5052032 (Security Only)	Important	Remote Code Execution	5050049	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.1.7601.27566	Yes	None
Windows Server 2012	5052020 (Monthly Rollup)	Important	Remote Code Execution	5050004	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.2.9200.25317	Yes	None
Windows Server 2012 (Server Core installation)	5052020 (Monthly Rollup)	Important	Remote Code Execution	5050004	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.2.9200.25317	Yes	None
Windows Server 2012 R2	5052042 (Monthly Rollup)	Important	Remote Code Execution	5050048	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.3.9600.22417	Yes	None
Windows Server 2012 R2 (Server Core installation)	5052042 (Monthly Rollup)	Important	Remote Code Execution	5050048	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.3.9600.22417	Yes	None
Windows Server 2016	5052006 (Security Update)	Important	Remote Code Execution	5049993	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows Server 2016 (Server Core installation)	5052006 (Security Update)	Important	Remote Code Execution	5049993	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows Server 2019	5052000 (Security Update)	Important	Remote Code Execution	5050008	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2019 (Server Core installation)	5052000 (Security Update)	Important	Remote Code Execution	5050008	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2022	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Important	Remote Code Execution	5049983	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022 (Server Core installation)	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Important	Remote Code Execution	5049983	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022, 23H2 Edition (Server Core installation)	5051980 (Security Update)	Important	Remote Code Execution	5049984	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.25398.1425	Yes	None
Windows Server 2025	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Remote Code Execution	5050009	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2025 (Server Core installation)	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Remote Code Execution	5050009	Base: 8.8 Temporal: 7.7 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None

CVE ID	Acknowledgements
CVE-2025-21371	Anonymous

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-21377
MITRE
NVD

Issuing CNA: Microsoft

CVE Title: NTLM Hash Disclosure Spoofing Vulnerability
CVSS:

CVSS:3.1 Highest BaseScore:6.5/TemporalScore:6.0

Base score metrics
Attack Vector	Network
Attack Complexity	Low
Privileges Required	None
User Interaction	Required
Scope	Unchanged
Confidentiality	High
Integrity	None
Availability	None

Executive Summary:
None
FAQ:

According to the CVSS metric, successful exploitation of this vulnerability could lead to total loss of confidentiality (C:H)? What does that mean for this vulnerability?

This vulnerability discloses a user's NTLMv2 hash to the attacker who could use this to authenticate as the user.

According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?

Minimal interaction with a malicious file by a user such as selecting (single-click), inspecting (right-click), or performing an action other than opening or executing the file could trigger this vulnerability.

The Security Updates table indicates that this vulnerability affects all supported versions of Microsoft Windows. Why are IE Cumulative updates listed for Windows Server 2008, Windows Server 2008 R2, and Windows Server 2012 R2?

While Microsoft has announced retirement of the Internet Explorer 11 application on certain platforms and the Microsoft Edge Legacy application is deprecated, the underlying MSHTML, EdgeHTML, and scripting platforms are still supported. The MSHTML platform is used by Internet Explorer mode in Microsoft Edge as well as other applications through WebBrowser control. The EdgeHTML platform is used by WebView and some UWP applications. The scripting platforms are used by MSHTML and EdgeHTML but can also be used by other legacy applications. Updates to address vulnerabilities in the MSHTML platform and scripting engine are included in the IE Cumulative Updates; EdgeHTML and Chakra changes are not applicable to those platforms.

To stay fully protected, we recommend that customers who install Security Only updates install the IE Cumulative updates for this vulnerability.

Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Feb-25

Information published.

Important

Spoofing

Exploitability Assessment	Publicly Disclosed	Exploited
Exploitation More Likely	Yes	No

The following tables list the affected software details for the vulnerability.

CVE-2025-21377
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Windows 10 for 32-bit Systems	5052040 (Security Update)	Important	Spoofing	5050013	Base: 6.5 Temporal: 6.0 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C	10.0.10240.20915	Yes	None
Windows 10 for x64-based Systems	5052040 (Security Update)	Important	Spoofing	5050013	Base: 6.5 Temporal: 6.0 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C	10.0.10240.20915	Yes	None
Windows 10 Version 1607 for 32-bit Systems	5052006 (Security Update)	Important	Spoofing	5049993	Base: 6.5 Temporal: 6.0 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows 10 Version 1607 for x64-based Systems	5052006 (Security Update)	Important	Spoofing	5049993	Base: 6.5 Temporal: 6.0 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows 10 Version 1809 for 32-bit Systems	5052000 (Security Update)	Important	Spoofing	5050008	Base: 6.5 Temporal: 6.0 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows 10 Version 1809 for x64-based Systems	5052000 (Security Update)	Important	Spoofing	5050008	Base: 6.5 Temporal: 6.0 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows 10 Version 21H2 for 32-bit Systems	5051974 (Security Update)	Important	Spoofing	5049981	Base: 6.5 Temporal: 6.0 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 21H2 for ARM64-based Systems	5051974 (Security Update)	Important	Spoofing	5049981	Base: 6.5 Temporal: 6.0 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 21H2 for x64-based Systems	5051974 (Security Update)	Important	Spoofing	5049981	Base: 6.5 Temporal: 6.0 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 22H2 for 32-bit Systems	5051974 (Security Update)	Important	Spoofing	5049981	Base: 6.5 Temporal: 6.0 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 10 Version 22H2 for ARM64-based Systems	5051974 (Security Update)	Important	Spoofing	5049981	Base: 6.5 Temporal: 6.0 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 10 Version 22H2 for x64-based Systems	5051974 (Security Update)	Important	Spoofing	5049981	Base: 6.5 Temporal: 6.0 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 11 Version 22H2 for ARM64-based Systems	5051989 (Security Update)	Important	Spoofing	5050021	Base: 6.5 Temporal: 6.0 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C	10.0.22621.4890	Yes	None
Windows 11 Version 22H2 for x64-based Systems	5051989 (Security Update)	Important	Spoofing	5050021	Base: 6.5 Temporal: 6.0 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C	10.0.22621.4890	Yes	None
Windows 11 Version 23H2 for ARM64-based Systems	5051989 (Security Update)	Important	Spoofing	5050021	Base: 6.5 Temporal: 6.0 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C	10.0.22631.4890	Yes	None
Windows 11 Version 23H2 for x64-based Systems	5051989 (Security Update)	Important	Spoofing	5050021	Base: 6.5 Temporal: 6.0 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C	10.0.22631.4890	Yes	None
Windows 11 Version 24H2 for ARM64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Spoofing	5050009	Base: 6.5 Temporal: 6.0 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows 11 Version 24H2 for x64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Spoofing	5050009	Base: 6.5 Temporal: 6.0 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2008 for 32-bit Systems Service Pack 2	5052038 (Monthly Rollup) 5051972 (IE Cumulative)	Important	Spoofing	5050063	Base: 6.5 Temporal: 6.0 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C	6.0.6003.23117 1	Yes	None
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)	5052038 (Monthly Rollup) 5051972 (IE Cumulative)	Important	Spoofing	5050063	Base: 6.5 Temporal: 6.0 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C	6.0.6003.23117 1	Yes	None
Windows Server 2008 for x64-based Systems Service Pack 2	5052038 (Monthly Rollup) 5051972 (IE Cumulative)	Important	Spoofing	5050063	Base: 6.5 Temporal: 6.0 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C	6.0.6003.23117 1	Yes	None
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)	5052038 (Monthly Rollup) 5051972 (IE Cumulative)	Important	Spoofing	5050063	Base: 6.5 Temporal: 6.0 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C	6.0.6003.23117 1	Yes	None
Windows Server 2008 R2 for x64-based Systems Service Pack 1	5051972 (IE Cumulative) 5052016 (Monthly Rollup)	Important	Spoofing	5050049	Base: 6.5 Temporal: 6.0 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C	1 6.1.7601.27566	Yes	None
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)	5051972 (IE Cumulative) 5052016 (Monthly Rollup)	Important	Spoofing	5050049	Base: 6.5 Temporal: 6.0 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C	1 6.1.7601.27566	Yes	None
Windows Server 2012	5051972 (IE Cumulative) 5052020 (Monthly Rollup)	Important	Spoofing	5050004	Base: 6.5 Temporal: 6.0 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C	1 6.2.9200.25317	Yes	None
Windows Server 2012 (Server Core installation)	5051972 (IE Cumulative) 5052020 (Monthly Rollup)	Important	Spoofing	5050004	Base: 6.5 Temporal: 6.0 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C	1 6.2.9200.25317	Yes	None
Windows Server 2012 R2	5051972 (IE Cumulative) 5052042 (Monthly Rollup)	Important	Spoofing	5050048	Base: 6.5 Temporal: 6.0 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C	1 6.3.9600.22417	Yes	None
Windows Server 2012 R2 (Server Core installation)	5051972 (IE Cumulative) 5052042 (Monthly Rollup)	Important	Spoofing	5050048	Base: 6.5 Temporal: 6.0 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C	1 6.3.9600.22417	Yes	None
Windows Server 2016	5052006 (Security Update)	Important	Spoofing	5049993	Base: 6.5 Temporal: 6.0 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows Server 2016 (Server Core installation)	5052006 (Security Update)	Important	Spoofing	5049993	Base: 6.5 Temporal: 6.0 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows Server 2019	5052000 (Security Update)	Important	Spoofing	5050008	Base: 6.5 Temporal: 6.0 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2019 (Server Core installation)	5052000 (Security Update)	Important	Spoofing	5050008	Base: 6.5 Temporal: 6.0 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2022	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Important	Spoofing	5049983	Base: 6.5 Temporal: 6.0 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022 (Server Core installation)	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Important	Spoofing	5049983	Base: 6.5 Temporal: 6.0 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022, 23H2 Edition (Server Core installation)	5051980 (Security Update)	Important	Spoofing	5049984	Base: 6.5 Temporal: 6.0 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C	10.0.25398.1425	Yes	None
Windows Server 2025	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Spoofing	5050009	Base: 6.5 Temporal: 6.0 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2025 (Server Core installation)	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Spoofing	5050009	Base: 6.5 Temporal: 6.0 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None

CVE ID	Acknowledgements
CVE-2025-21377	Blaz Satler with 0patch by ACROS Security Yorick Koster of Securify B.V. Vincent Yau with Cathay Pacific Ivan Sheung with Cathay Pacific Owen Cheung with Cathay Pacific

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-21381
MITRE
NVD

Issuing CNA: Microsoft

CVE Title: Microsoft Excel Remote Code Execution Vulnerability
CVSS:

CVSS:3.1 Highest BaseScore:7.8/TemporalScore:6.8

Base score metrics
Attack Vector	Local
Attack Complexity	Low
Privileges Required	None
User Interaction	Required
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High

Executive Summary:
None
FAQ:

According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?

The word Remote in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally.

For example, when the score indicates that the Attack Vector is Local and User Interaction is Required, this could describe an exploit in which an attacker, through social engineering, convinces a victim to download and open a specially crafted file from a website which leads to a local attack on their computer.

Is the Preview Pane an attack vector for this vulnerability?

Yes, the Preview Pane is an attack vector.

Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Feb-25

Information published.

Critical

Remote Code Execution

Exploitability Assessment	Publicly Disclosed	Exploited
Exploitation Less Likely	No	No

The following tables list the affected software details for the vulnerability.

CVE-2025-21381
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Microsoft 365 Apps for Enterprise for 32-bit Systems	Click to Run (Security Update)	Critical	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	https://aka.ms/OfficeSecurityReleases	No	None
Microsoft 365 Apps for Enterprise for 64-bit Systems	Click to Run (Security Update)	Critical	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	https://aka.ms/OfficeSecurityReleases	No	None
Microsoft Excel 2016 (32-bit edition)	5002687 (Security Update)	Critical	Remote Code Execution	5002673	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	16.0.5487.1000	Maybe	None
Microsoft Excel 2016 (64-bit edition)	5002687 (Security Update)	Critical	Remote Code Execution	5002673	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	16.0.5487.1000	Maybe	None
Microsoft Office 2019 for 32-bit editions	Click to Run (Security Update)	Critical	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	https://aka.ms/OfficeSecurityReleases	No	None
Microsoft Office 2019 for 64-bit editions	Click to Run (Security Update)	Critical	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	https://aka.ms/OfficeSecurityReleases	No	None
Microsoft Office LTSC 2021 for 32-bit editions	Click to Run (Security Update)	Critical	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	https://aka.ms/OfficeSecurityReleases	No	None
Microsoft Office LTSC 2021 for 64-bit editions	Click to Run (Security Update)	Critical	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	https://aka.ms/OfficeSecurityReleases	No	None
Microsoft Office LTSC 2024 for 32-bit editions	Click to Run (Security Update)	Critical	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	https://aka.ms/OfficeSecurityReleases	No	None
Microsoft Office LTSC 2024 for 64-bit editions	Click to Run (Security Update)	Critical	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	https://aka.ms/OfficeSecurityReleases	No	None
Microsoft Office LTSC for Mac 2021	Release Notes (Security Update)	Critical	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	16.94.25020927	Maybe	None
Microsoft Office LTSC for Mac 2024	Release Notes (Security Update)	Critical	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	16.94.25020927	Maybe	None
Office Online Server	5002679 (Security Update)	Critical	Remote Code Execution	5002677	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	16.0.10416.20058	Maybe	None

CVE ID	Acknowledgements
CVE-2025-21381	0x140ce(Peace & Love)

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-21386
MITRE
NVD

Issuing CNA: Microsoft

CVE Title: Microsoft Excel Remote Code Execution Vulnerability
CVSS:

CVSS:3.1 Highest BaseScore:7.8/TemporalScore:6.8

Base score metrics
Attack Vector	Local
Attack Complexity	Low
Privileges Required	None
User Interaction	Required
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High

Executive Summary:
None
FAQ:

According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?

The word Remote in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally.

Is the Preview Pane an attack vector for this vulnerability?

Yes, the Preview Pane is an attack vector.

Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Feb-25

Information published.

Important

Remote Code Execution

Exploitability Assessment	Publicly Disclosed	Exploited
Exploitation Less Likely	No	No

The following tables list the affected software details for the vulnerability.

CVE-2025-21386
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Microsoft 365 Apps for Enterprise for 32-bit Systems	Click to Run (Security Update)	Important	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	https://aka.ms/OfficeSecurityReleases	No	None
Microsoft 365 Apps for Enterprise for 64-bit Systems	Click to Run (Security Update)	Important	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	https://aka.ms/OfficeSecurityReleases	No	None
Microsoft Excel 2016 (32-bit edition)	5002687 (Security Update)	Important	Remote Code Execution	5002673	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	16.0.5487.1000	Maybe	None
Microsoft Excel 2016 (64-bit edition)	5002687 (Security Update)	Important	Remote Code Execution	5002673	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	16.0.5487.1000	Maybe	None
Microsoft Office 2019 for 32-bit editions	Click to Run (Security Update)	Important	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	https://aka.ms/OfficeSecurityReleases	No	None
Microsoft Office 2019 for 64-bit editions	Click to Run (Security Update)	Important	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	https://aka.ms/OfficeSecurityReleases	No	None
Microsoft Office LTSC 2021 for 32-bit editions	Click to Run (Security Update)	Important	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	https://aka.ms/OfficeSecurityReleases	No	None
Microsoft Office LTSC 2021 for 64-bit editions	Click to Run (Security Update)	Important	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	https://aka.ms/OfficeSecurityReleases	No	None
Microsoft Office LTSC 2024 for 32-bit editions	Click to Run (Security Update)	Important	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	https://aka.ms/OfficeSecurityReleases	No	None
Microsoft Office LTSC 2024 for 64-bit editions	Click to Run (Security Update)	Important	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	https://aka.ms/OfficeSecurityReleases	No	None
Microsoft Office LTSC for Mac 2021	Release Notes (Security Update)	Important	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	16.94.25020927	Maybe	None
Microsoft Office LTSC for Mac 2024	Release Notes (Security Update)	Important	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	16.94.25020927	Maybe	None
Office Online Server	5002679 (Security Update)	Important	Remote Code Execution	5002677	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	16.0.10416.20058	Maybe	None

CVE ID	Acknowledgements
CVE-2025-21386	cdbb6164ddfda2b210fd348442322115

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-21387
MITRE
NVD

Issuing CNA: Microsoft

CVE Title: Microsoft Excel Remote Code Execution Vulnerability
CVSS:

CVSS:3.1 Highest BaseScore:7.8/TemporalScore:6.8

Base score metrics
Attack Vector	Local
Attack Complexity	Low
Privileges Required	None
User Interaction	Required
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High

Executive Summary:
None
FAQ:

Is the Preview Pane an attack vector for this vulnerability?

Yes, the Preview Pane is an attack vector.

According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?

The word Remote in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally.

There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?

Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.

Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Feb-25

Information published.

Important

Remote Code Execution

Exploitability Assessment	Publicly Disclosed	Exploited
Exploitation Less Likely	No	No

The following tables list the affected software details for the vulnerability.

CVE-2025-21387
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Microsoft 365 Apps for Enterprise for 32-bit Systems	Click to Run (Security Update)	Important	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	https://aka.ms/OfficeSecurityReleases	No	None
Microsoft 365 Apps for Enterprise for 64-bit Systems	Click to Run (Security Update)	Important	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	https://aka.ms/OfficeSecurityReleases	No	None
Microsoft Excel 2016 (32-bit edition)	5002687 (Security Update) 5002684 (Security Update)	Important	Remote Code Execution	5002673 5002595	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	16.0.5487.1000	Maybe	None
Microsoft Excel 2016 (64-bit edition)	5002687 (Security Update) 5002684 (Security Update)	Important	Remote Code Execution	5002673 5002595	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	16.0.5487.1000	Maybe	None
Microsoft Office 2019 for 32-bit editions	Click to Run (Security Update)	Important	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	https://aka.ms/OfficeSecurityReleases	No	None
Microsoft Office 2019 for 64-bit editions	Click to Run (Security Update)	Important	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	https://aka.ms/OfficeSecurityReleases	No	None
Microsoft Office LTSC 2021 for 32-bit editions	Click to Run (Security Update)	Important	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	https://aka.ms/OfficeSecurityReleases	No	None
Microsoft Office LTSC 2021 for 64-bit editions	Click to Run (Security Update)	Important	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	https://aka.ms/OfficeSecurityReleases	No	None
Microsoft Office LTSC 2024 for 32-bit editions	Click to Run (Security Update)	Important	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	https://aka.ms/OfficeSecurityReleases	No	None
Microsoft Office LTSC 2024 for 64-bit editions	Click to Run (Security Update)	Important	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	https://aka.ms/OfficeSecurityReleases	No	None
Microsoft Office LTSC for Mac 2021	Release Notes (Security Update)	Important	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	16.94.25020927	Maybe	None
Microsoft Office LTSC for Mac 2024	Release Notes (Security Update)	Important	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	16.94.25020927	Maybe	None
Office Online Server	5002679 (Security Update)	Important	Remote Code Execution	5002677	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	16.0.10416.20058	Maybe	None

CVE ID	Acknowledgements
CVE-2025-21387	f4

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-21390
MITRE
NVD

Issuing CNA: Microsoft

CVE Title: Microsoft Excel Remote Code Execution Vulnerability
CVSS:

CVSS:3.1 Highest BaseScore:7.8/TemporalScore:6.8

Base score metrics
Attack Vector	Local
Attack Complexity	Low
Privileges Required	None
User Interaction	Required
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High

Executive Summary:
None
FAQ:

According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?

How could an attacker exploit this vulnerability?

There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?

Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.

Is the Preview Pane an attack vector for this vulnerability?

Yes, the Preview Pane is an attack vector.

Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Feb-25

Information published.

Important

Remote Code Execution

Exploitability Assessment	Publicly Disclosed	Exploited
Exploitation Less Likely	No	No

The following tables list the affected software details for the vulnerability.

CVE-2025-21390
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Microsoft 365 Apps for Enterprise for 32-bit Systems	Click to Run (Security Update)	Important	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	https://aka.ms/OfficeSecurityReleases	No	None
Microsoft 365 Apps for Enterprise for 64-bit Systems	Click to Run (Security Update)	Important	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	https://aka.ms/OfficeSecurityReleases	No	None
Microsoft Excel 2016 (32-bit edition)	5002687 (Security Update) 5002179 (Security Update)	Important	Remote Code Execution	5002673 3118335	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	16.0.5487.1000	Maybe	None
Microsoft Excel 2016 (64-bit edition)	5002687 (Security Update) 5002179 (Security Update)	Important	Remote Code Execution	5002673 3118335	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	16.0.5487.1000	Maybe	None
Microsoft Office 2019 for 32-bit editions	Click to Run (Security Update)	Important	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	https://aka.ms/OfficeSecurityReleases	No	None
Microsoft Office 2019 for 64-bit editions	Click to Run (Security Update)	Important	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	https://aka.ms/OfficeSecurityReleases	No	None
Microsoft Office LTSC 2021 for 32-bit editions	Click to Run (Security Update)	Important	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	https://aka.ms/OfficeSecurityReleases	No	None
Microsoft Office LTSC 2021 for 64-bit editions	Click to Run (Security Update)	Important	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	https://aka.ms/OfficeSecurityReleases	No	None
Microsoft Office LTSC 2024 for 32-bit editions	Click to Run (Security Update)	Important	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	https://aka.ms/OfficeSecurityReleases	No	None
Microsoft Office LTSC 2024 for 64-bit editions	Click to Run (Security Update)	Important	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	https://aka.ms/OfficeSecurityReleases	No	None
Microsoft Office LTSC for Mac 2021	Release Notes (Security Update)	Important	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	16.94.25020927	Maybe	None
Microsoft Office LTSC for Mac 2024	Release Notes (Security Update)	Important	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	16.94.25020927	Maybe	None
Office Online Server	5002679 (Security Update)	Important	Remote Code Execution	5002677	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	16.0.10416.20058	Maybe	None

CVE ID	Acknowledgements
CVE-2025-21390	Anonymous

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-21392
MITRE
NVD

Issuing CNA: Microsoft

CVE Title: Microsoft Office Remote Code Execution Vulnerability
CVSS:

CVSS:3.1 Highest BaseScore:7.8/TemporalScore:6.8

Base score metrics
Attack Vector	Local
Attack Complexity	Low
Privileges Required	None
User Interaction	Required
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High

Executive Summary:
None
FAQ:

According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?

The word Remote in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally.

Is the Preview Pane an attack vector for this vulnerability?

No, the Preview Pane is not an attack vector.

Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Feb-25

Information published.

Important

Remote Code Execution

Exploitability Assessment	Publicly Disclosed	Exploited
Exploitation Less Likely	No	No

The following tables list the affected software details for the vulnerability.

CVE-2025-21392
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Microsoft 365 Apps for Enterprise for 32-bit Systems	Click to Run (Security Update)	Important	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	https://aka.ms/OfficeSecurityReleases	No	None
Microsoft 365 Apps for Enterprise for 64-bit Systems	Click to Run (Security Update)	Important	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	https://aka.ms/OfficeSecurityReleases	No	None
Microsoft Office 2016 (32-bit edition)	5002686 (Security Update)	Important	Remote Code Execution	5002675	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	16.0.5487.1000	Maybe	None
Microsoft Office 2016 (64-bit edition)	5002686 (Security Update)	Important	Remote Code Execution	5002675	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	16.0.5487.1000	Maybe	None
Microsoft Office 2019 for 32-bit editions	Click to Run (Security Update)	Important	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	https://aka.ms/OfficeSecurityReleases	No	None
Microsoft Office 2019 for 64-bit editions	Click to Run (Security Update)	Important	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	https://aka.ms/OfficeSecurityReleases	No	None
Microsoft Office LTSC 2021 for 32-bit editions	Click to Run (Security Update)	Important	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	https://aka.ms/OfficeSecurityReleases	No	None
Microsoft Office LTSC 2021 for 64-bit editions	Click to Run (Security Update)	Important	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	https://aka.ms/OfficeSecurityReleases	No	None
Microsoft Office LTSC 2024 for 32-bit editions	Click to Run (Security Update)	Important	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	https://aka.ms/OfficeSecurityReleases	No	None
Microsoft Office LTSC 2024 for 64-bit editions	Click to Run (Security Update)	Important	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	https://aka.ms/OfficeSecurityReleases	No	None
Microsoft Office LTSC for Mac 2021	Release Notes (Security Update)	Important	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	16.94.25020927	Maybe	None
Microsoft Office LTSC for Mac 2024	Release Notes (Security Update)	Important	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	16.94.25020927	Maybe	None

CVE ID	Acknowledgements
CVE-2025-21392	Haifei Li with EXPMON

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-21394
MITRE
NVD

Issuing CNA: Microsoft

CVE Title: Microsoft Excel Remote Code Execution Vulnerability
CVSS:

CVSS:3.1 Highest BaseScore:7.8/TemporalScore:6.8

Base score metrics
Attack Vector	Local
Attack Complexity	Low
Privileges Required	None
User Interaction	Required
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High

Executive Summary:
None
FAQ:

According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?

The word Remote in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally.

Is the Preview Pane an attack vector for this vulnerability?

Yes, the Preview Pane is an attack vector.

Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Feb-25

Information published.

Important

Remote Code Execution

Exploitability Assessment	Publicly Disclosed	Exploited
Exploitation Less Likely	No	No

The following tables list the affected software details for the vulnerability.

CVE-2025-21394
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Microsoft 365 Apps for Enterprise for 32-bit Systems	Click to Run (Security Update)	Important	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	https://aka.ms/OfficeSecurityReleases	No	None
Microsoft 365 Apps for Enterprise for 64-bit Systems	Click to Run (Security Update)	Important	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	https://aka.ms/OfficeSecurityReleases	No	None
Microsoft Excel 2016 (32-bit edition)	5002687 (Security Update)	Important	Remote Code Execution	5002673	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	16.0.5487.1000	Maybe	None
Microsoft Excel 2016 (64-bit edition)	5002687 (Security Update)	Important	Remote Code Execution	5002673	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	16.0.5487.1000	Maybe	None
Microsoft Office 2019 for 32-bit editions	Click to Run (Security Update)	Important	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	https://aka.ms/OfficeSecurityReleases	No	None
Microsoft Office 2019 for 64-bit editions	Click to Run (Security Update)	Important	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	https://aka.ms/OfficeSecurityReleases	No	None
Microsoft Office LTSC 2021 for 32-bit editions	Click to Run (Security Update)	Important	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	https://aka.ms/OfficeSecurityReleases	No	None
Microsoft Office LTSC 2021 for 64-bit editions	Click to Run (Security Update)	Important	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	https://aka.ms/OfficeSecurityReleases	No	None
Microsoft Office LTSC 2024 for 32-bit editions	Click to Run (Security Update)	Important	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	https://aka.ms/OfficeSecurityReleases	No	None
Microsoft Office LTSC 2024 for 64-bit editions	Click to Run (Security Update)	Important	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	https://aka.ms/OfficeSecurityReleases	No	None
Microsoft Office LTSC for Mac 2021	Release Notes (Security Update)	Important	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	16.94.25020927	Maybe	None
Microsoft Office LTSC for Mac 2024	Release Notes (Security Update)	Important	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	16.94.25020927	Maybe	None
Office Online Server	5002679 (Security Update)	Important	Remote Code Execution	5002677	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	16.0.10416.20058	Maybe	None

CVE ID	Acknowledgements
CVE-2025-21394	0x140ce(Peace & Love)

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-21397
MITRE
NVD

Issuing CNA: Microsoft

CVE Title: Microsoft Office Remote Code Execution Vulnerability
CVSS:

CVSS:3.1 Highest BaseScore:7.8/TemporalScore:6.8

Base score metrics
Attack Vector	Local
Attack Complexity	Low
Privileges Required	None
User Interaction	Required
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High

Executive Summary:
None
FAQ:

According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?

The word Remote in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally.

Is the Preview Pane an attack vector for this vulnerability?

No, the Preview Pane is not an attack vector.

Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Feb-25

Information published.

Important

Remote Code Execution

Exploitability Assessment	Publicly Disclosed	Exploited
Exploitation Less Likely	No	No

The following tables list the affected software details for the vulnerability.

CVE-2025-21397
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Microsoft 365 Apps for Enterprise for 32-bit Systems	Click to Run (Security Update)	Important	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	https://aka.ms/OfficeSecurityReleases	No	None
Microsoft 365 Apps for Enterprise for 64-bit Systems	Click to Run (Security Update)	Important	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	https://aka.ms/OfficeSecurityReleases	No	None
Microsoft Office LTSC 2021 for 32-bit editions	Click to Run (Security Update)	Important	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	https://aka.ms/OfficeSecurityReleases	No	None
Microsoft Office LTSC 2021 for 64-bit editions	Click to Run (Security Update)	Important	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	https://aka.ms/OfficeSecurityReleases	No	None
Microsoft Office LTSC 2024 for 32-bit editions	Click to Run (Security Update)	Important	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	https://aka.ms/OfficeSecurityReleases	No	None
Microsoft Office LTSC 2024 for 64-bit editions	Click to Run (Security Update)	Important	Remote Code Execution	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	https://aka.ms/OfficeSecurityReleases	No	None

CVE ID	Acknowledgements
CVE-2025-21397	Haifei Li with EXPMON

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-21400
MITRE
NVD

Issuing CNA: Microsoft

CVE Title: Microsoft SharePoint Server Remote Code Execution Vulnerability
CVSS:

CVSS:3.1 Highest BaseScore:8.0/TemporalScore:7.0

Base score metrics
Attack Vector	Network
Attack Complexity	Low
Privileges Required	Low
User Interaction	Required
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High

Executive Summary:
None
FAQ:

According to the CVSS metric, the attack vector is network (AV:N) and the user interaction is required (UI:R). What is the target context of the remote code execution?

This attack requires a client to connect to a malicious server, and that could allow the attacker to gain code execution on the client.

How could an attacker exploit the vulnerability?

In a network-based attack, an authenticated attacker, as at least a Site Owner, could write arbitrary code to inject and execute code remotely on the SharePoint Server.

Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Feb-25

Information published.

Important

Remote Code Execution

Exploitability Assessment	Publicly Disclosed	Exploited
Exploitation More Likely	No	No

The following tables list the affected software details for the vulnerability.

CVE-2025-21400
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Microsoft SharePoint Enterprise Server 2016	5002685 (Security Update)	Important	Remote Code Execution	5002672	Base: 8.0 Temporal: 7.0 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	16.0.5487.1000	Maybe	None
Microsoft SharePoint Server 2019	5002678 (Security Update)	Important	Remote Code Execution	5002666	Base: 8.0 Temporal: 7.0 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	16.0.10416.20050	Maybe	None
Microsoft SharePoint Server Subscription Edition	5002681 (Security Update)	Important	Remote Code Execution	5002676	Base: 8.0 Temporal: 7.0 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	16.0.17928.20396	Maybe	None

CVE ID	Acknowledgements
CVE-2025-21400	cjm00n with Cyber Kunlun & Zhiniang Peng

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-21179
MITRE
NVD

Issuing CNA: Microsoft

CVE Title: DHCP Client Service Denial of Service Vulnerability
CVSS:

CVSS:3.1 Highest BaseScore:4.8/TemporalScore:4.2

Base score metrics
Attack Vector	Adjacent
Attack Complexity	High
Privileges Required	None
User Interaction	Required
Scope	Unchanged
Confidentiality	None
Integrity	None
Availability	High

Executive Summary:
None
FAQ:

According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?

According to the CVSS score, the attack vector is adjacent (AV:A). What does this mean for this vulnerability?

Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Feb-25

Information published.

Important

Denial of Service

Exploitability Assessment	Publicly Disclosed	Exploited
Exploitation Less Likely	No	No

The following tables list the affected software details for the vulnerability.

CVE-2025-21179
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Windows 11 Version 24H2 for ARM64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Denial of Service	5050009	Base: 4.8 Temporal: 4.2 Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows 11 Version 24H2 for x64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Denial of Service	5050009	Base: 4.8 Temporal: 4.2 Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2025	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Denial of Service	5050009	Base: 4.8 Temporal: 4.2 Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2025 (Server Core installation)	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Denial of Service	5050009	Base: 4.8 Temporal: 4.2 Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None

CVE ID	Acknowledgements
CVE-2025-21179	Milan Justel with Microsoft

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-21181
MITRE
NVD

Issuing CNA: Microsoft

CVE Title: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
CVSS:

CVSS:3.1 Highest BaseScore:7.5/TemporalScore:6.5

Base score metrics
Attack Vector	Network
Attack Complexity	Low
Privileges Required	None
User Interaction	None
Scope	Unchanged
Confidentiality	None
Integrity	None
Availability	High

Executive Summary:
None
FAQ:

According to the CVSS metric, successful exploitation of this vulnerability has a high impact on availability (A:H). What does that mean for this vulnerability?

An attacker can send specially crafted messages to the MSMQ service, which could affect availability of the service and result in Denial of Service (DoS).

Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Feb-25

Information published.

Important

Denial of Service

Exploitability Assessment	Publicly Disclosed	Exploited
Exploitation Less Likely	No	No

The following tables list the affected software details for the vulnerability.

CVE-2025-21181
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Windows 10 for 32-bit Systems	5052040 (Security Update)	Important	Denial of Service	5050013	Base: 7.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.10240.20915	Yes	None
Windows 10 for x64-based Systems	5052040 (Security Update)	Important	Denial of Service	5050013	Base: 7.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.10240.20915	Yes	None
Windows 10 Version 1607 for 32-bit Systems	5052006 (Security Update)	Important	Denial of Service	5049993	Base: 7.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows 10 Version 1607 for x64-based Systems	5052006 (Security Update)	Important	Denial of Service	5049993	Base: 7.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows 10 Version 1809 for 32-bit Systems	5052000 (Security Update)	Important	Denial of Service	5050008	Base: 7.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows 10 Version 1809 for x64-based Systems	5052000 (Security Update)	Important	Denial of Service	5050008	Base: 7.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows 10 Version 21H2 for 32-bit Systems	5051974 (Security Update)	Important	Denial of Service	5049981	Base: 7.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 21H2 for ARM64-based Systems	5051974 (Security Update)	Important	Denial of Service	5049981	Base: 7.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 21H2 for x64-based Systems	5051974 (Security Update)	Important	Denial of Service	5049981	Base: 7.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 22H2 for 32-bit Systems	5051974 (Security Update)	Important	Denial of Service	5049981	Base: 7.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 10 Version 22H2 for ARM64-based Systems	5051974 (Security Update)	Important	Denial of Service	5049981	Base: 7.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 10 Version 22H2 for x64-based Systems	5051974 (Security Update)	Important	Denial of Service	5049981	Base: 7.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 11 Version 22H2 for ARM64-based Systems	5051989 (Security Update)	Important	Denial of Service	5050021	Base: 7.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.22621.4890	Yes	None
Windows 11 Version 22H2 for x64-based Systems	5051989 (Security Update)	Important	Denial of Service	5050021	Base: 7.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.22621.4890	Yes	None
Windows 11 Version 23H2 for ARM64-based Systems	5051989 (Security Update)	Important	Denial of Service	5050021	Base: 7.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.22631.4890	Yes	None
Windows 11 Version 23H2 for x64-based Systems	5051989 (Security Update)	Important	Denial of Service	5050021	Base: 7.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.22631.4890	Yes	None
Windows 11 Version 24H2 for ARM64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Denial of Service	5050009	Base: 7.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows 11 Version 24H2 for x64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Denial of Service	5050009	Base: 7.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2008 for 32-bit Systems Service Pack 2	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Denial of Service	5050063	Base: 7.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Denial of Service	5050063	Base: 7.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 for x64-based Systems Service Pack 2	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Denial of Service	5050063	Base: 7.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Denial of Service	5050063	Base: 7.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 R2 for x64-based Systems Service Pack 1	5052016 (Monthly Rollup) 5052032 (Security Only)	Important	Denial of Service	5050049	Base: 7.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	6.1.7601.27566	Yes	None
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)	5052016 (Monthly Rollup) 5052032 (Security Only)	Important	Denial of Service	5050049	Base: 7.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	6.1.7601.27566	Yes	None
Windows Server 2012	5052020 (Monthly Rollup)	Important	Denial of Service	5050004	Base: 7.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	6.2.9200.25317	Yes	None
Windows Server 2012 (Server Core installation)	5052020 (Monthly Rollup)	Important	Denial of Service	5050004	Base: 7.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	6.2.9200.25317	Yes	None
Windows Server 2012 R2	5052042 (Monthly Rollup)	Important	Denial of Service	5050048	Base: 7.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	6.3.9600.22417	Yes	None
Windows Server 2012 R2 (Server Core installation)	5052042 (Monthly Rollup)	Important	Denial of Service	5050048	Base: 7.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	6.3.9600.22417	Yes	None
Windows Server 2016	5052006 (Security Update)	Important	Denial of Service	5049993	Base: 7.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows Server 2016 (Server Core installation)	5052006 (Security Update)	Important	Denial of Service	5049993	Base: 7.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows Server 2019	5052000 (Security Update)	Important	Denial of Service	5050008	Base: 7.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2019 (Server Core installation)	5052000 (Security Update)	Important	Denial of Service	5050008	Base: 7.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2022	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Important	Denial of Service	5049983	Base: 7.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022 (Server Core installation)	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Important	Denial of Service	5049983	Base: 7.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022, 23H2 Edition (Server Core installation)	5051980 (Security Update)	Important	Denial of Service	5049984	Base: 7.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.25398.1425	Yes	None
Windows Server 2025	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Denial of Service	5050009	Base: 7.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2025 (Server Core installation)	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Denial of Service	5050009	Base: 7.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None

CVE ID	Acknowledgements
CVE-2025-21181	Azure Yang with Kunlun Lab

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-21184
MITRE
NVD

Issuing CNA: Microsoft

CVE Title: Windows Core Messaging Elevation of Privileges Vulnerability
CVSS:

CVSS:3.1 Highest BaseScore:7.0/TemporalScore:6.1

Base score metrics
Attack Vector	Local
Attack Complexity	High
Privileges Required	Low
User Interaction	None
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High

Executive Summary:
None
FAQ:

According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?

Successful exploitation of this vulnerability requires an attacker to gather information specific to the environment and take additional actions prior to exploitation to prepare the target environment.

What privileges could be gained by an attacker who successfully exploited this vulnerability?

An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.

Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Feb-25

Information published.

Important

Elevation of Privilege

Exploitability Assessment	Publicly Disclosed	Exploited
Exploitation More Likely	No	No

The following tables list the affected software details for the vulnerability.

CVE-2025-21184
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Windows 10 for 32-bit Systems	5052040 (Security Update)	Important	Elevation of Privilege	5050013	Base: 7.0 Temporal: 6.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.10240.20915	Yes	None
Windows 10 for x64-based Systems	5052040 (Security Update)	Important	Elevation of Privilege	5050013	Base: 7.0 Temporal: 6.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.10240.20915	Yes	None
Windows 10 Version 1607 for 32-bit Systems	5052006 (Security Update)	Important	Elevation of Privilege	5049993	Base: 7.0 Temporal: 6.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows 10 Version 1607 for x64-based Systems	5052006 (Security Update)	Important	Elevation of Privilege	5049993	Base: 7.0 Temporal: 6.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows 10 Version 1809 for 32-bit Systems	5052000 (Security Update)	Important	Elevation of Privilege	5050008	Base: 7.0 Temporal: 6.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows 10 Version 1809 for x64-based Systems	5052000 (Security Update)	Important	Elevation of Privilege	5050008	Base: 7.0 Temporal: 6.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows 10 Version 21H2 for 32-bit Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 7.0 Temporal: 6.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 21H2 for ARM64-based Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 7.0 Temporal: 6.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 21H2 for x64-based Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 7.0 Temporal: 6.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 22H2 for 32-bit Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 7.0 Temporal: 6.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 10 Version 22H2 for ARM64-based Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 7.0 Temporal: 6.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 10 Version 22H2 for x64-based Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 7.0 Temporal: 6.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 11 Version 22H2 for ARM64-based Systems	5051989 (Security Update)	Important	Elevation of Privilege	5050021	Base: 7.0 Temporal: 6.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22621.4890	Yes	None
Windows 11 Version 22H2 for x64-based Systems	5051989 (Security Update)	Important	Elevation of Privilege	5050021	Base: 7.0 Temporal: 6.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22621.4890	Yes	None
Windows 11 Version 23H2 for ARM64-based Systems	5051989 (Security Update)	Important	Elevation of Privilege	5050021	Base: 7.0 Temporal: 6.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22631.4890	Yes	None
Windows 11 Version 23H2 for x64-based Systems	5051989 (Security Update)	Important	Elevation of Privilege	5050021	Base: 7.0 Temporal: 6.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22631.4890	Yes	None
Windows 11 Version 24H2 for ARM64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5050009	Base: 7.0 Temporal: 6.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows 11 Version 24H2 for x64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5050009	Base: 7.0 Temporal: 6.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2016	5052006 (Security Update)	Important	Elevation of Privilege	5049993	Base: 7.0 Temporal: 6.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows Server 2016 (Server Core installation)	5052006 (Security Update)	Important	Elevation of Privilege	5049993	Base: 7.0 Temporal: 6.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows Server 2019	5052000 (Security Update)	Important	Elevation of Privilege	5050008	Base: 7.0 Temporal: 6.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2019 (Server Core installation)	5052000 (Security Update)	Important	Elevation of Privilege	5050008	Base: 7.0 Temporal: 6.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2022	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5049983	Base: 7.0 Temporal: 6.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022 (Server Core installation)	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5049983	Base: 7.0 Temporal: 6.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022, 23H2 Edition (Server Core installation)	5051980 (Security Update)	Important	Elevation of Privilege	5049984	Base: 7.0 Temporal: 6.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.25398.1425	Yes	None
Windows Server 2025	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5050009	Base: 7.0 Temporal: 6.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2025 (Server Core installation)	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5050009	Base: 7.0 Temporal: 6.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None

CVE ID	Acknowledgements
CVE-2025-21184	YanZiShuang@BigCJTeam of cyberkl

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-21212
MITRE
NVD

Issuing CNA: Microsoft

CVE Title: Internet Connection Sharing (ICS) Denial of Service Vulnerability
CVSS:

CVSS:3.1 Highest BaseScore:6.5/TemporalScore:5.7

Base score metrics
Attack Vector	Adjacent
Attack Complexity	Low
Privileges Required	None
User Interaction	None
Scope	Unchanged
Confidentiality	None
Integrity	None
Availability	High

Executive Summary:
None
FAQ:

According to the CVSS metric, successful exploitation of this vulnerability has a high impact on availability (A:H). What does that mean for this vulnerability?

An attacker can send specially crafted packets which could affect availability of the service and result in Denial of Service (DoS).

According to the CVSS score, the attack vector is adjacent (AV:A). What does this mean for this vulnerability?

Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Feb-25

Information published.

Important

Denial of Service

Exploitability Assessment	Publicly Disclosed	Exploited
Exploitation Less Likely	No	No

The following tables list the affected software details for the vulnerability.

CVE-2025-21212
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Windows 10 Version 1607 for 32-bit Systems	5052006 (Security Update)	Important	Denial of Service	5049993	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows 10 Version 1607 for x64-based Systems	5052006 (Security Update)	Important	Denial of Service	5049993	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows 10 Version 1809 for 32-bit Systems	5052000 (Security Update)	Important	Denial of Service	5050008	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows 10 Version 1809 for x64-based Systems	5052000 (Security Update)	Important	Denial of Service	5050008	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows 10 Version 21H2 for 32-bit Systems	5051974 (Security Update)	Important	Denial of Service	5049981	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 21H2 for ARM64-based Systems	5051974 (Security Update)	Important	Denial of Service	5049981	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 21H2 for x64-based Systems	5051974 (Security Update)	Important	Denial of Service	5049981	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 22H2 for 32-bit Systems	5051974 (Security Update)	Important	Denial of Service	5049981	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 10 Version 22H2 for ARM64-based Systems	5051974 (Security Update)	Important	Denial of Service	5049981	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 10 Version 22H2 for x64-based Systems	5051974 (Security Update)	Important	Denial of Service	5049981	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 11 Version 22H2 for ARM64-based Systems	5051989 (Security Update)	Important	Denial of Service	5050021	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.22621.4890	Yes	None
Windows 11 Version 22H2 for x64-based Systems	5051989 (Security Update)	Important	Denial of Service	5050021	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.22621.4890	Yes	None
Windows 11 Version 23H2 for ARM64-based Systems	5051989 (Security Update)	Important	Denial of Service	5050021	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.22631.4890	Yes	None
Windows 11 Version 23H2 for x64-based Systems	5051989 (Security Update)	Important	Denial of Service	5050021	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.22631.4890	Yes	None
Windows 11 Version 24H2 for ARM64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Denial of Service	5050009	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows 11 Version 24H2 for x64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Denial of Service	5050009	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2016	5052006 (Security Update)	Important	Denial of Service	5049993	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows Server 2016 (Server Core installation)	5052006 (Security Update)	Important	Denial of Service	5049993	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows Server 2019	5052000 (Security Update)	Important	Denial of Service	5050008	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2019 (Server Core installation)	5052000 (Security Update)	Important	Denial of Service	5050008	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2022	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Important	Denial of Service	5049983	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022 (Server Core installation)	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Important	Denial of Service	5049983	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022, 23H2 Edition (Server Core installation)	5051980 (Security Update)	Important	Denial of Service	5049984	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.25398.1425	Yes	None
Windows Server 2025	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Denial of Service	5050009	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2025 (Server Core installation)	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Denial of Service	5050009	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None

CVE ID	Acknowledgements
CVE-2025-21212	bee13oy with Cyber Kunlun Lab

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-21216
MITRE
NVD

Issuing CNA: Microsoft

CVE Title: Internet Connection Sharing (ICS) Denial of Service Vulnerability
CVSS:

CVSS:3.1 Highest BaseScore:6.5/TemporalScore:5.7

Base score metrics
Attack Vector	Adjacent
Attack Complexity	Low
Privileges Required	None
User Interaction	None
Scope	Unchanged
Confidentiality	None
Integrity	None
Availability	High

Executive Summary:
None
FAQ:

According to the CVSS metric, successful exploitation of this vulnerability has a high impact on availability (A:H). What does that mean for this vulnerability?

An attacker can send specially crafted packets which could affect availability of the service and result in Denial of Service (DoS).

According to the CVSS score, the attack vector is adjacent (AV:A). What does this mean for this vulnerability?

Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Feb-25

Information published.

Important

Denial of Service

Exploitability Assessment	Publicly Disclosed	Exploited
Exploitation Less Likely	No	No

The following tables list the affected software details for the vulnerability.

CVE-2025-21216
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Windows 10 Version 1607 for 32-bit Systems	5052006 (Security Update)	Important	Denial of Service	5049993	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows 10 Version 1607 for x64-based Systems	5052006 (Security Update)	Important	Denial of Service	5049993	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows 10 Version 1809 for 32-bit Systems	5052000 (Security Update)	Important	Denial of Service	5050008	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows 10 Version 1809 for x64-based Systems	5052000 (Security Update)	Important	Denial of Service	5050008	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows 10 Version 21H2 for 32-bit Systems	5051974 (Security Update)	Important	Denial of Service	5049981	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 21H2 for ARM64-based Systems	5051974 (Security Update)	Important	Denial of Service	5049981	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 21H2 for x64-based Systems	5051974 (Security Update)	Important	Denial of Service	5049981	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 22H2 for 32-bit Systems	5051974 (Security Update)	Important	Denial of Service	5049981	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 10 Version 22H2 for ARM64-based Systems	5051974 (Security Update)	Important	Denial of Service	5049981	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 10 Version 22H2 for x64-based Systems	5051974 (Security Update)	Important	Denial of Service	5049981	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 11 Version 22H2 for ARM64-based Systems	5051989 (Security Update)	Important	Denial of Service	5050021	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.22621.4890	Yes	None
Windows 11 Version 22H2 for x64-based Systems	5051989 (Security Update)	Important	Denial of Service	5050021	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.22621.4890	Yes	None
Windows 11 Version 23H2 for ARM64-based Systems	5051989 (Security Update)	Important	Denial of Service	5050021	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.22631.4890	Yes	None
Windows 11 Version 23H2 for x64-based Systems	5051989 (Security Update)	Important	Denial of Service	5050021	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.22631.4890	Yes	None
Windows 11 Version 24H2 for ARM64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Denial of Service	5050009	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows 11 Version 24H2 for x64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Denial of Service	5050009	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2016	5052006 (Security Update)	Important	Denial of Service	5049993	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows Server 2016 (Server Core installation)	5052006 (Security Update)	Important	Denial of Service	5049993	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows Server 2019	5052000 (Security Update)	Important	Denial of Service	5050008	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2019 (Server Core installation)	5052000 (Security Update)	Important	Denial of Service	5050008	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2022	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Important	Denial of Service	5049983	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022 (Server Core installation)	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Important	Denial of Service	5049983	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022, 23H2 Edition (Server Core installation)	5051980 (Security Update)	Important	Denial of Service	5049984	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.25398.1425	Yes	None
Windows Server 2025	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Denial of Service	5050009	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2025 (Server Core installation)	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Denial of Service	5050009	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None

CVE ID	Acknowledgements
CVE-2025-21216	bee13oy with Cyber Kunlun Lab

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-21254
MITRE
NVD

Issuing CNA: Microsoft

CVE Title: Internet Connection Sharing (ICS) Denial of Service Vulnerability
CVSS:

CVSS:3.1 Highest BaseScore:6.5/TemporalScore:5.7

Base score metrics
Attack Vector	Adjacent
Attack Complexity	Low
Privileges Required	None
User Interaction	None
Scope	Unchanged
Confidentiality	None
Integrity	None
Availability	High

Executive Summary:
None
FAQ:

According to the CVSS metric, successful exploitation of this vulnerability has a high impact on availability (A:H). What does that mean for this vulnerability?

An attacker can send specially crafted packets which could affect availability of the service and result in Denial of Service (DoS).

Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Feb-25

Information published.

Important

Denial of Service

Exploitability Assessment	Publicly Disclosed	Exploited
Exploitation Less Likely	No	No

The following tables list the affected software details for the vulnerability.

CVE-2025-21254
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Windows 10 Version 1607 for 32-bit Systems	5052006 (Security Update)	Important	Denial of Service	5049993	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows 10 Version 1607 for x64-based Systems	5052006 (Security Update)	Important	Denial of Service	5049993	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows 10 Version 1809 for 32-bit Systems	5052000 (Security Update)	Important	Denial of Service	5050008	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows 10 Version 1809 for x64-based Systems	5052000 (Security Update)	Important	Denial of Service	5050008	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows 10 Version 21H2 for 32-bit Systems	5051974 (Security Update)	Important	Denial of Service	5049981	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 21H2 for ARM64-based Systems	5051974 (Security Update)	Important	Denial of Service	5049981	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 21H2 for x64-based Systems	5051974 (Security Update)	Important	Denial of Service	5049981	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 22H2 for 32-bit Systems	5051974 (Security Update)	Important	Denial of Service	5049981	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 10 Version 22H2 for ARM64-based Systems	5051974 (Security Update)	Important	Denial of Service	5049981	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 10 Version 22H2 for x64-based Systems	5051974 (Security Update)	Important	Denial of Service	5049981	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 11 Version 22H2 for ARM64-based Systems	5051989 (Security Update)	Important	Denial of Service	5050021	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.22621.4890	Yes	None
Windows 11 Version 22H2 for x64-based Systems	5051989 (Security Update)	Important	Denial of Service	5050021	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.22621.4890	Yes	None
Windows 11 Version 23H2 for ARM64-based Systems	5051989 (Security Update)	Important	Denial of Service	5050021	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.22631.4890	Yes	None
Windows 11 Version 23H2 for x64-based Systems	5051989 (Security Update)	Important	Denial of Service	5050021	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.22631.4890	Yes	None
Windows 11 Version 24H2 for ARM64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Denial of Service	5050009	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows 11 Version 24H2 for x64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Denial of Service	5050009	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2016	5052006 (Security Update)	Important	Denial of Service	5049993	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows Server 2016 (Server Core installation)	5052006 (Security Update)	Important	Denial of Service	5049993	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows Server 2019	5052000 (Security Update)	Important	Denial of Service	5050008	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2019 (Server Core installation)	5052000 (Security Update)	Important	Denial of Service	5050008	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2022	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Important	Denial of Service	5049983	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022 (Server Core installation)	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Important	Denial of Service	5049983	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022, 23H2 Edition (Server Core installation)	5051980 (Security Update)	Important	Denial of Service	5049984	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.25398.1425	Yes	None
Windows Server 2025	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Denial of Service	5050009	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2025 (Server Core installation)	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Denial of Service	5050009	Base: 6.5 Temporal: 5.7 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None

CVE ID	Acknowledgements
CVE-2025-21254	bee13oy with Cyber Kunlun Lab

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-21322
MITRE
NVD

Issuing CNA: Microsoft

CVE Title: Microsoft PC Manager Elevation of Privilege Vulnerability
CVSS:

CVSS:3.1 Highest BaseScore:7.8/TemporalScore:6.8

Base score metrics
Attack Vector	Local
Attack Complexity	Low
Privileges Required	Low
User Interaction	None
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High

Executive Summary:
None
FAQ:

What privileges could be gained by an attacker who successfully exploited this vulnerability?

An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.

Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Feb-25

Information published.

Important

Elevation of Privilege

Exploitability Assessment	Publicly Disclosed	Exploited
Exploitation Less Likely	No	No

The following tables list the affected software details for the vulnerability.

CVE-2025-21322
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Microsoft PC Manager	Release Notes (Security Update)	Important	Elevation of Privilege	None	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	3.15.4.0	Maybe	None

CVE ID	Acknowledgements
CVE-2025-21322	AshLc

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-21414
MITRE
NVD

Issuing CNA: Microsoft

CVE Title: Windows Core Messaging Elevation of Privileges Vulnerability
CVSS:

CVSS:3.1 Highest BaseScore:7.0/TemporalScore:6.1

Base score metrics
Attack Vector	Local
Attack Complexity	High
Privileges Required	Low
User Interaction	None
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High

Executive Summary:
None
FAQ:

According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?

What privileges could be gained by an attacker who successfully exploited this vulnerability?

An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.

Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Feb-25

Information published.

Important

Elevation of Privilege

Exploitability Assessment	Publicly Disclosed	Exploited
Exploitation More Likely	No	No

The following tables list the affected software details for the vulnerability.

CVE-2025-21414
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Windows 10 for 32-bit Systems	5052040 (Security Update)	Important	Elevation of Privilege	5050013	Base: 7.0 Temporal: 6.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.10240.20915	Yes	None
Windows 10 for x64-based Systems	5052040 (Security Update)	Important	Elevation of Privilege	5050013	Base: 7.0 Temporal: 6.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.10240.20915	Yes	None
Windows 10 Version 1607 for 32-bit Systems	5052006 (Security Update)	Important	Elevation of Privilege	5049993	Base: 7.0 Temporal: 6.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows 10 Version 1607 for x64-based Systems	5052006 (Security Update)	Important	Elevation of Privilege	5049993	Base: 7.0 Temporal: 6.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows 10 Version 1809 for 32-bit Systems	5052000 (Security Update)	Important	Elevation of Privilege	5050008	Base: 7.0 Temporal: 6.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows 10 Version 1809 for x64-based Systems	5052000 (Security Update)	Important	Elevation of Privilege	5050008	Base: 7.0 Temporal: 6.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows 10 Version 21H2 for 32-bit Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 7.0 Temporal: 6.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 21H2 for ARM64-based Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 7.0 Temporal: 6.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 21H2 for x64-based Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 7.0 Temporal: 6.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 22H2 for 32-bit Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 7.0 Temporal: 6.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 10 Version 22H2 for ARM64-based Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 7.0 Temporal: 6.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 10 Version 22H2 for x64-based Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 7.0 Temporal: 6.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 11 Version 22H2 for ARM64-based Systems	5051989 (Security Update)	Important	Elevation of Privilege	5050021	Base: 7.0 Temporal: 6.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22621.4890	Yes	None
Windows 11 Version 22H2 for x64-based Systems	5051989 (Security Update)	Important	Elevation of Privilege	5050021	Base: 7.0 Temporal: 6.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22621.4890	Yes	None
Windows 11 Version 23H2 for ARM64-based Systems	5051989 (Security Update)	Important	Elevation of Privilege	5050021	Base: 7.0 Temporal: 6.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22631.4890	Yes	None
Windows 11 Version 23H2 for x64-based Systems	5051989 (Security Update)	Important	Elevation of Privilege	5050021	Base: 7.0 Temporal: 6.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22631.4890	Yes	None
Windows 11 Version 24H2 for ARM64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5050009	Base: 7.0 Temporal: 6.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows 11 Version 24H2 for x64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5050009	Base: 7.0 Temporal: 6.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2016	5052006 (Security Update)	Important	Elevation of Privilege	5049993	Base: 7.0 Temporal: 6.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows Server 2016 (Server Core installation)	5052006 (Security Update)	Important	Elevation of Privilege	5049993	Base: 7.0 Temporal: 6.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows Server 2019	5052000 (Security Update)	Important	Elevation of Privilege	5050008	Base: 7.0 Temporal: 6.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2019 (Server Core installation)	5052000 (Security Update)	Important	Elevation of Privilege	5050008	Base: 7.0 Temporal: 6.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2022	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5049983	Base: 7.0 Temporal: 6.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022 (Server Core installation)	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5049983	Base: 7.0 Temporal: 6.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022, 23H2 Edition (Server Core installation)	5051980 (Security Update)	Important	Elevation of Privilege	5049984	Base: 7.0 Temporal: 6.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.25398.1425	Yes	None
Windows Server 2025	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5050009	Base: 7.0 Temporal: 6.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2025 (Server Core installation)	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5050009	Base: 7.0 Temporal: 6.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None

CVE ID	Acknowledgements
CVE-2025-21414	YanZiShuang@BigCJTeam of cyberkl

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-21373
MITRE
NVD

Issuing CNA: Microsoft

CVE Title: Windows Installer Elevation of Privilege Vulnerability
CVSS:

CVSS:3.1 Highest BaseScore:7.8/TemporalScore:6.8

Base score metrics
Attack Vector	Local
Attack Complexity	Low
Privileges Required	Low
User Interaction	None
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High

Executive Summary:
None
FAQ:

What privileges could be gained by an attacker who successfully exploited this vulnerability?

An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.

Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Feb-25

Information published.

Important

Elevation of Privilege

Exploitability Assessment	Publicly Disclosed	Exploited
Exploitation Less Likely	No	No

The following tables list the affected software details for the vulnerability.

CVE-2025-21373
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Windows 10 for 32-bit Systems	5052040 (Security Update)	Important	Elevation of Privilege	5050013	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.10240.20915	Yes	None
Windows 10 for x64-based Systems	5052040 (Security Update)	Important	Elevation of Privilege	5050013	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.10240.20915	Yes	None
Windows 10 Version 1607 for 32-bit Systems	5052006 (Security Update)	Important	Elevation of Privilege	5049993	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows 10 Version 1607 for x64-based Systems	5052006 (Security Update)	Important	Elevation of Privilege	5049993	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows 10 Version 1809 for 32-bit Systems	5052000 (Security Update)	Important	Elevation of Privilege	5050008	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows 10 Version 1809 for x64-based Systems	5052000 (Security Update)	Important	Elevation of Privilege	5050008	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows 10 Version 21H2 for 32-bit Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 21H2 for ARM64-based Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 21H2 for x64-based Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19044.5487	Yes	None
Windows 10 Version 22H2 for 32-bit Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 10 Version 22H2 for ARM64-based Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 10 Version 22H2 for x64-based Systems	5051974 (Security Update)	Important	Elevation of Privilege	5049981	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.19045.5487	Yes	None
Windows 11 Version 22H2 for ARM64-based Systems	5051989 (Security Update)	Important	Elevation of Privilege	5050021	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22621.4890	Yes	None
Windows 11 Version 22H2 for x64-based Systems	5051989 (Security Update)	Important	Elevation of Privilege	5050021	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22621.4890	Yes	None
Windows 11 Version 23H2 for ARM64-based Systems	5051989 (Security Update)	Important	Elevation of Privilege	5050021	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22631.4890	Yes	None
Windows 11 Version 23H2 for x64-based Systems	5051989 (Security Update)	Important	Elevation of Privilege	5050021	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.22631.4890	Yes	None
Windows 11 Version 24H2 for ARM64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5050009	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows 11 Version 24H2 for x64-based Systems	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5050009	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2008 for 32-bit Systems Service Pack 2	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Elevation of Privilege	5050063	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Elevation of Privilege	5050063	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 for x64-based Systems Service Pack 2	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Elevation of Privilege	5050063	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)	5052038 (Monthly Rollup) 5052072 (Security Only)	Important	Elevation of Privilege	5050063	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.0.6003.23117	Yes	None
Windows Server 2008 R2 for x64-based Systems Service Pack 1	5052016 (Monthly Rollup) 5052032 (Security Only)	Important	Elevation of Privilege	5050049	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.1.7601.27566	Yes	None
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)	5052016 (Monthly Rollup) 5052032 (Security Only)	Important	Elevation of Privilege	5050049	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.1.7601.27566	Yes	None
Windows Server 2012	5052020 (Monthly Rollup)	Important	Elevation of Privilege	5050004	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.2.9200.25317	Yes	None
Windows Server 2012 (Server Core installation)	5052020 (Monthly Rollup)	Important	Elevation of Privilege	5050004	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.2.9200.25317	Yes	None
Windows Server 2012 R2	5052042 (Monthly Rollup)	Important	Elevation of Privilege	5050048	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.3.9600.22417	Yes	None
Windows Server 2012 R2 (Server Core installation)	5052042 (Monthly Rollup)	Important	Elevation of Privilege	5050048	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	6.3.9600.22417	Yes	None
Windows Server 2016	5052006 (Security Update)	Important	Elevation of Privilege	5049993	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows Server 2016 (Server Core installation)	5052006 (Security Update)	Important	Elevation of Privilege	5049993	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.14393.7785	Yes	None
Windows Server 2019	5052000 (Security Update)	Important	Elevation of Privilege	5050008	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2019 (Server Core installation)	5052000 (Security Update)	Important	Elevation of Privilege	5050008	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.17763.6893	Yes	None
Windows Server 2022	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5049983	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022 (Server Core installation)	5051979 (Security Update) 5052106 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5049983	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.20348.3207 10.0.20348.3148	Yes	None
Windows Server 2022, 23H2 Edition (Server Core installation)	5051980 (Security Update)	Important	Elevation of Privilege	5049984	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.25398.1425	Yes	None
Windows Server 2025	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5050009	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None
Windows Server 2025 (Server Core installation)	5051987 (Security Update) 5052105 (SecurityHotpatchUpdate)	Important	Elevation of Privilege	5050009	Base: 7.8 Temporal: 6.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	10.0.26100.3194 10.0.26100.3107	Yes	None

CVE ID	Acknowledgements
CVE-2025-21373	Simon Zuckerbraun with Trend Micro Zero Day Initiative

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-24042
MITRE
NVD

Issuing CNA: Microsoft

CVE Title: Visual Studio Code JS Debug Extension Elevation of Privilege Vulnerability
CVSS:

CVSS:3.1 Highest BaseScore:7.3/TemporalScore:6.4

Base score metrics
Attack Vector	Local
Attack Complexity	Low
Privileges Required	Low
User Interaction	Required
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High

Executive Summary:
None
FAQ:

According to the CVSS metric, user interaction is required (UI:R) and privileges required is Low (PR:L). What does that mean for this vulnerability?

An authorized attacker with standard user privileges could place a malicious file on the machine running Visual Studio Code and then wait for the privileged victim to use certain JavaScript debugger functionality.

What privileges could be gained by an attacker who successfully exploited the vulnerability?

The attacker would gain the rights of the user that is running the affected application.

Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Feb-25

Information published.

Important

Elevation of Privilege

Exploitability Assessment	Publicly Disclosed	Exploited
Exploitation Less Likely	No	No

The following tables list the affected software details for the vulnerability.

CVE-2025-24042
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Visual Studio Code - JS Debug Extension	Release Notes (Security Update)	Important	Elevation of Privilege	None	Base: 7.3 Temporal: 6.4 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C	1.97.1	Maybe	None

CVE ID	Acknowledgements
CVE-2025-24042	ycdxsb

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2017-17522
MITRE
NVD

Issuing CNA: cve@mitre.org

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:8.8/TemporalScore:8.8

Base score metrics
Attack Vector	Network
Attack Complexity	Low
Privileges Required	None
User Interaction	Required
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
1.0 18-Aug-20

Information published.

1.6 30-Jun-24

Information published.

1.7 08-Jul-24

Information published.

1.8 09-Jul-24

Information published.

1.9 10-Jul-24

Information published.

2.0 12-Jul-24

Information published.

2.1 13-Jul-24

Information published.

2.2 14-Jul-24

Information published.

2.3 15-Jul-24

Information published.

2.4 16-Jul-24

Information published.

2.5 17-Jul-24

Information published.

2.6 19-Jul-24

Information published.

2.7 20-Jul-24

Information published.

2.8 21-Jul-24

Information published.

2.9 22-Jul-24

Information published.

3.0 23-Jul-24

Information published.

3.1 24-Jul-24

Information published.

3.2 25-Jul-24

Information published.

3.3 26-Jul-24

Information published.

3.4 27-Jul-24

Information published.

3.5 28-Jul-24

Information published.

3.6 29-Jul-24

Information published.

3.7 02-Aug-24

Information published.

3.8 03-Aug-24

Information published.

3.9 04-Aug-24

Information published.

4.0 05-Aug-24

Information published.

4.1 06-Aug-24

Information published.

4.2 07-Aug-24

Information published.

4.3 08-Aug-24

Information published.

4.4 09-Aug-24

Information published.

4.5 10-Aug-24

Information published.

4.6 11-Aug-24

Information published.

4.7 12-Aug-24

Information published.

4.8 15-Aug-24

Information published.

4.9 16-Aug-24

Information published.

5.0 17-Aug-24

Information published.

5.1 18-Aug-24

Information published.

5.2 19-Aug-24

Information published.

5.3 20-Aug-24

Information published.

5.4 21-Aug-24

Information published.

5.5 22-Aug-24

Information published.

5.6 23-Aug-24

Information published.

5.7 24-Aug-24

Information published.

5.8 25-Aug-24

Information published.

5.9 26-Aug-24

Information published.

6.0 27-Aug-24

Information published.

6.1 28-Aug-24

Information published.

6.2 29-Aug-24

Information published.

6.3 30-Aug-24

Information published.

6.4 31-Aug-24

Information published.

6.5 01-Sep-24

Information published.

6.6 02-Sep-24

Information published.

6.7 03-Sep-24

Information published.

6.8 05-Sep-24

Information published.

6.9 06-Sep-24

Information published.

7.0 07-Sep-24

Information published.

7.1 08-Sep-24

Information published.

7.2 11-Sep-24

Information published.

7.3 12-Sep-24

Information published.

7.4 13-Sep-24

Information published.

7.5 14-Sep-24

Information published.

7.6 15-Sep-24

Information published.

7.7 16-Sep-24

Information published.

7.8 17-Sep-24

Information published.

7.9 18-Sep-24

Information published.

8.0 19-Sep-24

Information published.

8.1 20-Sep-24

Information published.

8.2 21-Sep-24

Information published.

8.3 22-Sep-24

Information published.

8.4 23-Sep-24

Information published.

8.5 24-Sep-24

Information published.

8.6 25-Sep-24

Information published.

8.7 26-Sep-24

Information published.

8.8 27-Sep-24

Information published.

8.9 28-Sep-24

Information published.

9.0 29-Sep-24

Information published.

9.1 30-Sep-24

Information published.

9.2 01-Oct-24

Information published.

9.3 02-Oct-24

Information published.

9.4 03-Oct-24

Information published.

9.5 04-Oct-24

Information published.

9.6 05-Oct-24

Information published.

9.7 06-Oct-24

Information published.

9.8 07-Oct-24

Information published.

9.9 08-Oct-24

Information published.

10.0 09-Oct-24

Information published.

10.1 10-Oct-24

Information published.

10.2 11-Oct-24

Information published.

10.3 12-Oct-24

Information published.

10.4 13-Oct-24

Information published.

10.5 14-Oct-24

Information published.

10.6 15-Oct-24

Added python2 to CBL-Mariner 1.0

10.7 16-Oct-24

Added python2 to CBL-Mariner 1.0

10.8 17-Oct-24

Added python2 to CBL-Mariner 1.0

10.9 18-Oct-24

Added python2 to CBL-Mariner 1.0

11.0 19-Oct-24

Added python2 to CBL-Mariner 1.0

11.1 20-Oct-24

Added python2 to CBL-Mariner 1.0

11.2 21-Oct-24

Added python2 to CBL-Mariner 1.0

11.3 22-Oct-24

Added python2 to CBL-Mariner 1.0

11.4 23-Oct-24

Added python2 to CBL-Mariner 1.0

11.5 24-Oct-24

Added python2 to CBL-Mariner 1.0

11.6 25-Oct-24

Added python2 to CBL-Mariner 1.0

11.7 26-Oct-24

Added python2 to CBL-Mariner 1.0

11.8 27-Oct-24

Added python2 to CBL-Mariner 1.0

11.9 28-Oct-24

Added python2 to CBL-Mariner 1.0

12.0 29-Oct-24

Added python2 to CBL-Mariner 1.0

12.1 30-Oct-24

Added python2 to CBL-Mariner 1.0

12.2 31-Oct-24

Added python2 to CBL-Mariner 1.0

12.3 01-Nov-24

Added python2 to CBL-Mariner 1.0

12.4 02-Nov-24

Added python2 to CBL-Mariner 1.0

12.5 04-Nov-24

Added python2 to CBL-Mariner 1.0

12.6 05-Nov-24

Added python2 to CBL-Mariner 1.0

12.7 06-Nov-24

Added python2 to CBL-Mariner 1.0

12.8 07-Nov-24

Added python2 to CBL-Mariner 1.0

12.9 08-Nov-24

Added python2 to CBL-Mariner 1.0

13.0 09-Nov-24

Added python2 to CBL-Mariner 1.0

13.1 10-Nov-24

Added python2 to CBL-Mariner 1.0

13.2 11-Nov-24

Added python2 to CBL-Mariner 1.0

13.3 12-Nov-24

Added python2 to CBL-Mariner 1.0

13.4 13-Nov-24

Added python2 to CBL-Mariner 1.0

13.5 14-Nov-24

Added python2 to CBL-Mariner 1.0

13.6 15-Nov-24

Added python2 to CBL-Mariner 1.0

13.7 16-Nov-24

Added python2 to CBL-Mariner 1.0

13.8 17-Nov-24

Added python2 to CBL-Mariner 1.0

13.9 18-Nov-24

Added python2 to CBL-Mariner 1.0

14.0 19-Nov-24

Added python2 to CBL-Mariner 1.0

14.1 20-Nov-24

Added python2 to CBL-Mariner 1.0

14.2 21-Nov-24

Added python2 to CBL-Mariner 1.0

14.3 23-Nov-24

Added python2 to CBL-Mariner 1.0

14.4 24-Nov-24

Added python2 to CBL-Mariner 1.0

14.5 25-Nov-24

Added python2 to CBL-Mariner 1.0

14.6 26-Nov-24

Added python2 to CBL-Mariner 1.0

14.7 27-Nov-24

Added python2 to CBL-Mariner 1.0

14.8 28-Nov-24

Added python2 to CBL-Mariner 1.0

14.9 29-Nov-24

Added python2 to CBL-Mariner 1.0

15.0 30-Nov-24

Added python2 to CBL-Mariner 1.0

15.1 01-Dec-24

Added python2 to CBL-Mariner 1.0

15.2 02-Dec-24

Added python2 to CBL-Mariner 1.0

15.3 03-Dec-24

Added python2 to CBL-Mariner 1.0

15.4 04-Dec-24

Added python2 to CBL-Mariner 1.0

15.5 05-Dec-24

Added python2 to CBL-Mariner 1.0

15.6 07-Dec-24

Added python2 to CBL-Mariner 1.0

15.7 08-Dec-24

Added python2 to CBL-Mariner 1.0

15.8 09-Dec-24

Added python2 to CBL-Mariner 1.0

15.9 10-Dec-24

Added python2 to CBL-Mariner 1.0

16.0 11-Dec-24

Added python2 to CBL-Mariner 1.0

16.1 12-Dec-24

Added python2 to CBL-Mariner 1.0

16.2 13-Dec-24

Added python2 to CBL-Mariner 1.0

16.3 14-Dec-24

Added python2 to CBL-Mariner 1.0

16.4 15-Dec-24

Added python2 to CBL-Mariner 1.0

16.5 16-Dec-24

Added python2 to CBL-Mariner 1.0

16.6 17-Dec-24

Added python2 to CBL-Mariner 1.0

16.7 18-Dec-24

Added python2 to CBL-Mariner 1.0

16.8 19-Dec-24

Added python2 to CBL-Mariner 1.0

16.9 20-Dec-24

Added python2 to CBL-Mariner 1.0

17.0 21-Dec-24

Added python2 to CBL-Mariner 1.0

17.1 22-Dec-24

Added python2 to CBL-Mariner 1.0

17.2 23-Dec-24

Added python2 to CBL-Mariner 1.0

17.3 24-Dec-24

Added python2 to CBL-Mariner 1.0

17.4 25-Dec-24

Added python2 to CBL-Mariner 1.0

17.5 26-Dec-24

Added python2 to CBL-Mariner 1.0

17.6 27-Dec-24

Added python2 to CBL-Mariner 1.0

17.7 28-Dec-24

Added python2 to CBL-Mariner 1.0

17.8 29-Dec-24

Added python2 to CBL-Mariner 1.0

17.9 30-Dec-24

Added python2 to CBL-Mariner 1.0

18.0 31-Dec-24

Added python2 to CBL-Mariner 1.0

18.1 01-Jan-25

Added python2 to CBL-Mariner 1.0

18.2 02-Jan-25

Added python2 to CBL-Mariner 1.0

18.3 03-Jan-25

Added python2 to CBL-Mariner 1.0

18.4 04-Jan-25

Added python2 to CBL-Mariner 1.0

18.5 05-Jan-25

Added python2 to CBL-Mariner 1.0

18.6 06-Jan-25

Added python2 to CBL-Mariner 1.0

18.7 07-Jan-25

Added python2 to CBL-Mariner 1.0

18.8 08-Jan-25

Added python2 to CBL-Mariner 1.0

18.9 09-Jan-25

Added python2 to CBL-Mariner 1.0

19.0 10-Jan-25

Added python2 to CBL-Mariner 1.0

19.1 11-Jan-25

Added python2 to CBL-Mariner 1.0

19.2 12-Jan-25

Added python2 to CBL-Mariner 1.0

19.3 13-Jan-25

Added python2 to CBL-Mariner 1.0

19.4 15-Jan-25

Added python2 to CBL-Mariner 1.0

19.5 16-Jan-25

Added python2 to CBL-Mariner 1.0

19.6 17-Jan-25

Added python2 to CBL-Mariner 1.0

19.7 18-Jan-25

Added python2 to CBL-Mariner 1.0

19.8 19-Jan-25

Added python2 to CBL-Mariner 1.0

19.9 20-Jan-25

Added python2 to CBL-Mariner 1.0

20.0 21-Jan-25

Added python2 to CBL-Mariner 1.0

20.1 22-Jan-25

Added python2 to CBL-Mariner 1.0

20.2 23-Jan-25

Added python2 to CBL-Mariner 1.0

20.3 24-Jan-25

Added python2 to CBL-Mariner 1.0

20.4 25-Jan-25

Added python2 to CBL-Mariner 1.0

20.5 27-Jan-25

Added python2 to CBL-Mariner 1.0

20.6 28-Jan-25

Added python2 to CBL-Mariner 1.0

20.7 29-Jan-25

Added python2 to CBL-Mariner 1.0

20.8 30-Jan-25

Added python2 to CBL-Mariner 1.0

20.9 01-Feb-25

Added python2 to CBL-Mariner 1.0

21.0 02-Feb-25

Added python2 to CBL-Mariner 1.0

21.1 03-Feb-25

Added python2 to CBL-Mariner 1.0

21.2 04-Feb-25

Added python2 to CBL-Mariner 1.0

21.3 05-Feb-25

Added python2 to CBL-Mariner 1.0

21.4 07-Feb-25

Added python2 to CBL-Mariner 1.0

21.5 08-Feb-25

Added python2 to CBL-Mariner 1.0

21.6 09-Feb-25

Added python2 to CBL-Mariner 1.0

21.7 10-Feb-25

Added python2 to CBL-Mariner 1.0

21.8 11-Feb-25

Added python2 to CBL-Mariner 1.0

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2017-17522
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
CBL Mariner 1.0 ARM	python2 (CBL-Mariner)	Unknown	Unknown	None	Base: 8.8 Temporal: 8.8 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	2.7.18-3	Unknown	None
CBL Mariner 1.0 x64	python2 (CBL-Mariner)	Unknown	Unknown	None	Base: 8.8 Temporal: 8.8 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	2.7.18-3	Unknown	None
CBL Mariner 2.0 ARM		Unknown	Unknown	None	Base: 8.8 Temporal: 8.8 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	Unknown	Unknown	None
CBL Mariner 2.0 x64		Unknown	Unknown	None	Base: 8.8 Temporal: 8.8 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	Unknown	Unknown	None

CVE ID	Acknowledgements
CVE-2017-17522	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2024-7264
MITRE
NVD

Issuing CNA: 2499f714-1537-4658-8207-48ae4bb9eae9

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:6.5/TemporalScore:6.5

Base score metrics
Attack Vector	Network
Attack Complexity	Low
Privileges Required	None
User Interaction	Required
Scope	Unchanged
Confidentiality	None
Integrity	None
Availability	High

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
1.0 23-Oct-24

Information published.

1.1 25-Oct-24

Added mysql to Azure Linux 3.0 Added mysql to CBL-Mariner 2.0

1.2 09-Nov-24

Added mysql to Azure Linux 3.0 Added mysql to CBL-Mariner 2.0

1.3 04-Dec-24

Added mysql to Azure Linux 3.0 Added mysql to CBL-Mariner 2.0

1.4 01-Feb-25

Added cmake to Azure Linux 3.0 Added mysql to Azure Linux 3.0 Added mysql to CBL-Mariner 2.0

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2024-7264
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Linux 3.0 ARM	cmake (CBL-Mariner) mysql (CBL-Mariner)	Unknown	Unknown		Base: 6.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H	3.30.3-4 8.0.40-1		None
Azure Linux 3.0 x64	cmake (CBL-Mariner) mysql (CBL-Mariner)	Unknown	Unknown		Base: 6.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H	3.30.3-4 8.0.40-1		None
CBL Mariner 2.0 ARM	mysql (CBL-Mariner)	Unknown	Unknown	None	Base: 6.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H	8.0.40-1	Unknown	None
CBL Mariner 2.0 x64	mysql (CBL-Mariner)	Unknown	Unknown	None	Base: 6.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H	8.0.40-1	Unknown	None

CVE ID	Acknowledgements
CVE-2024-7264	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2022-32746
MITRE
NVD

Issuing CNA: secalert@redhat.com

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:5.4/TemporalScore:5.4

Base score metrics
Attack Vector	Network
Attack Complexity	Low
Privileges Required	Low
User Interaction	None
Scope	Unchanged
Confidentiality	None
Integrity	Low
Availability	Low

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
1.0 15-Oct-24

Information published.

1.1 16-Oct-24

Added samba to Azure Linux 3.0

1.2 17-Oct-24

Added samba to Azure Linux 3.0

1.3 18-Oct-24

Added samba to Azure Linux 3.0

1.4 19-Oct-24

Added samba to Azure Linux 3.0

1.5 20-Oct-24

Added samba to Azure Linux 3.0

1.6 21-Oct-24

Added samba to Azure Linux 3.0

1.7 22-Oct-24

Added samba to Azure Linux 3.0

1.8 23-Oct-24

Added samba to Azure Linux 3.0

1.9 24-Oct-24

Added samba to Azure Linux 3.0

2.0 25-Oct-24

Added samba to Azure Linux 3.0

2.1 26-Oct-24

Added samba to Azure Linux 3.0

2.2 27-Oct-24

Added samba to Azure Linux 3.0

2.3 28-Oct-24

Added samba to Azure Linux 3.0

2.4 29-Oct-24

Added samba to Azure Linux 3.0

2.5 30-Oct-24

Added samba to Azure Linux 3.0

2.6 31-Oct-24

Added samba to Azure Linux 3.0

2.7 01-Nov-24

Added samba to Azure Linux 3.0

2.8 02-Nov-24

Added samba to Azure Linux 3.0

2.9 04-Nov-24

Added samba to Azure Linux 3.0

3.0 05-Nov-24

Added samba to Azure Linux 3.0

3.1 06-Nov-24

Added samba to Azure Linux 3.0

3.2 07-Nov-24

Added samba to Azure Linux 3.0

3.3 08-Nov-24

Added samba to Azure Linux 3.0

3.4 09-Nov-24

Added samba to Azure Linux 3.0

3.5 10-Nov-24

Added samba to Azure Linux 3.0

3.6 11-Nov-24

Added samba to Azure Linux 3.0

3.7 12-Nov-24

Added samba to Azure Linux 3.0

3.8 13-Nov-24

Added samba to Azure Linux 3.0

3.9 14-Nov-24

Added samba to Azure Linux 3.0

4.0 15-Nov-24

Added samba to Azure Linux 3.0

4.1 16-Nov-24

Added samba to Azure Linux 3.0

4.2 17-Nov-24

Added samba to Azure Linux 3.0

4.3 18-Nov-24

Added samba to Azure Linux 3.0

4.4 19-Nov-24

Added samba to Azure Linux 3.0

4.5 20-Nov-24

Added samba to Azure Linux 3.0

4.6 21-Nov-24

Added samba to Azure Linux 3.0

4.7 23-Nov-24

Added samba to Azure Linux 3.0

4.8 24-Nov-24

Added samba to Azure Linux 3.0

4.9 25-Nov-24

Added samba to Azure Linux 3.0

5.0 26-Nov-24

Added samba to Azure Linux 3.0

5.1 27-Nov-24

Added samba to Azure Linux 3.0

5.2 28-Nov-24

Added samba to Azure Linux 3.0

5.3 29-Nov-24

Added samba to Azure Linux 3.0

5.4 30-Nov-24

Added samba to Azure Linux 3.0

5.5 01-Dec-24

Added samba to Azure Linux 3.0

5.6 02-Dec-24

Added samba to Azure Linux 3.0

5.7 03-Dec-24

Added samba to Azure Linux 3.0

5.8 04-Dec-24

Added samba to Azure Linux 3.0

5.9 05-Dec-24

Added samba to Azure Linux 3.0

6.0 07-Dec-24

Added samba to Azure Linux 3.0

6.1 08-Dec-24

Added samba to Azure Linux 3.0

6.2 09-Dec-24

Added samba to Azure Linux 3.0

6.3 10-Dec-24

Added samba to Azure Linux 3.0

6.4 11-Dec-24

Added samba to Azure Linux 3.0

6.5 12-Dec-24

Added samba to Azure Linux 3.0

6.6 13-Dec-24

Added samba to Azure Linux 3.0

6.7 14-Dec-24

Added samba to Azure Linux 3.0

6.8 15-Dec-24

Added samba to Azure Linux 3.0

6.9 16-Dec-24

Added samba to Azure Linux 3.0

7.0 17-Dec-24

Added samba to Azure Linux 3.0

7.1 18-Dec-24

Added samba to Azure Linux 3.0

7.2 19-Dec-24

Added samba to Azure Linux 3.0

7.3 20-Dec-24

Added samba to Azure Linux 3.0

7.4 21-Dec-24

Added samba to Azure Linux 3.0

7.5 22-Dec-24

Added samba to Azure Linux 3.0

7.6 23-Dec-24

Added samba to Azure Linux 3.0

7.7 24-Dec-24

Added samba to Azure Linux 3.0

7.8 25-Dec-24

Added samba to Azure Linux 3.0

7.9 26-Dec-24

Added samba to Azure Linux 3.0

8.0 27-Dec-24

Added samba to Azure Linux 3.0

8.1 28-Dec-24

Added samba to Azure Linux 3.0

8.2 29-Dec-24

Added samba to Azure Linux 3.0

8.3 30-Dec-24

Added samba to Azure Linux 3.0

8.4 31-Dec-24

Added samba to Azure Linux 3.0

8.5 01-Jan-25

Added samba to Azure Linux 3.0

8.6 02-Jan-25

Added samba to Azure Linux 3.0

8.7 03-Jan-25

Added samba to Azure Linux 3.0

8.8 04-Jan-25

Added samba to Azure Linux 3.0

8.9 05-Jan-25

Added samba to Azure Linux 3.0

9.0 06-Jan-25

Added samba to Azure Linux 3.0

9.1 07-Jan-25

Added samba to Azure Linux 3.0

9.2 08-Jan-25

Added samba to Azure Linux 3.0

9.3 09-Jan-25

Added samba to Azure Linux 3.0

9.4 10-Jan-25

Added samba to Azure Linux 3.0

9.5 11-Jan-25

Added samba to Azure Linux 3.0

9.6 12-Jan-25

Added samba to Azure Linux 3.0

9.7 13-Jan-25

Added samba to Azure Linux 3.0

9.8 15-Jan-25

Added samba to Azure Linux 3.0

9.9 16-Jan-25

Added samba to Azure Linux 3.0

10.0 17-Jan-25

Added samba to Azure Linux 3.0

10.1 18-Jan-25

Added samba to Azure Linux 3.0

10.2 19-Jan-25

Added samba to Azure Linux 3.0

10.3 20-Jan-25

Added samba to Azure Linux 3.0

10.4 21-Jan-25

Added samba to Azure Linux 3.0

10.5 22-Jan-25

Added samba to Azure Linux 3.0

10.6 23-Jan-25

Added samba to Azure Linux 3.0

10.7 24-Jan-25

Added samba to Azure Linux 3.0

10.8 25-Jan-25

Added samba to Azure Linux 3.0

10.9 27-Jan-25

Added samba to Azure Linux 3.0

11.0 28-Jan-25

Added samba to Azure Linux 3.0

11.1 29-Jan-25

Added samba to Azure Linux 3.0

11.2 30-Jan-25

Added samba to Azure Linux 3.0

11.3 01-Feb-25

Added samba to Azure Linux 3.0

11.4 02-Feb-25

Added samba to Azure Linux 3.0

11.5 03-Feb-25

Added samba to Azure Linux 3.0

11.6 04-Feb-25

Added samba to Azure Linux 3.0

11.7 05-Feb-25

Added samba to Azure Linux 3.0

11.8 07-Feb-25

Added samba to Azure Linux 3.0

11.9 08-Feb-25

Added samba to Azure Linux 3.0

12.0 09-Feb-25

Added samba to Azure Linux 3.0

12.1 10-Feb-25

Added samba to Azure Linux 3.0

12.2 11-Feb-25

Added samba to Azure Linux 3.0

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2022-32746
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Linux 3.0 ARM	samba (CBL-Mariner)	Unknown	Unknown	None	Base: 5.4 Temporal: 5.4 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L	4.18.3-1	Unknown	None
Azure Linux 3.0 x64	samba (CBL-Mariner)	Unknown	Unknown	None	Base: 5.4 Temporal: 5.4 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L	4.18.3-1	Unknown	None

CVE ID	Acknowledgements
CVE-2022-32746	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2020-22217
MITRE
NVD

Issuing CNA: cve@mitre.org

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:5.9/TemporalScore:5.9

Base score metrics
Attack Vector	Network
Attack Complexity	High
Privileges Required	None
User Interaction	None
Scope	Unchanged
Confidentiality	None
Integrity	None
Availability	High

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
1.0 04-Sep-23

Information published.

1.1 30-Jun-24

Information published.

1.2 03-Feb-25

Added grpc to Azure Linux 3.0 Added python-gevent to CBL-Mariner 2.0

1.3 04-Feb-25

Added grpc to Azure Linux 3.0 Added python-gevent to CBL-Mariner 2.0

1.4 05-Feb-25

Added grpc to Azure Linux 3.0 Added python-gevent to CBL-Mariner 2.0

1.5 07-Feb-25

Added grpc to Azure Linux 3.0 Added python-gevent to CBL-Mariner 2.0

1.6 08-Feb-25

Added grpc to Azure Linux 3.0 Added python-gevent to CBL-Mariner 2.0

1.7 09-Feb-25

Added grpc to Azure Linux 3.0 Added python-gevent to CBL-Mariner 2.0

1.8 10-Feb-25

Added grpc to Azure Linux 3.0 Added python-gevent to CBL-Mariner 2.0

1.9 11-Feb-25

Added grpc to Azure Linux 3.0 Added python-gevent to CBL-Mariner 2.0

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2020-22217
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Linux 3.0 ARM	grpc (CBL-Mariner)	Unknown	Unknown	None	Base: 5.9 Temporal: 5.9 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H	1.62.0-2	Unknown	None
Azure Linux 3.0 x64	grpc (CBL-Mariner)	Unknown	Unknown	None	Base: 5.9 Temporal: 5.9 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H	1.62.0-2	Unknown	None
CBL Mariner 2.0 ARM	python-gevent (CBL-Mariner)	Unknown	Unknown	None	Base: 5.9 Temporal: 5.9 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H	21.1.2-1	Unknown	None
CBL Mariner 2.0 x64	python-gevent (CBL-Mariner)	Unknown	Unknown	None	Base: 5.9 Temporal: 5.9 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H	21.1.2-1	Unknown	None

CVE ID	Acknowledgements
CVE-2020-22217	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2024-35849
MITRE
NVD

Issuing CNA: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:7.1/TemporalScore:7.1

Base score metrics
Attack Vector	Local
Attack Complexity	Low
Privileges Required	Low
User Interaction	None
Scope	Unchanged
Confidentiality	High
Integrity	None
Availability	High

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
0.1 04-Feb-25

Information published.

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2024-35849
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Linux 3.0 ARM	hyperv-daemons (CBL-Mariner)	Unknown	Unknown	None	Base: 7.1 Temporal: 7.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H	6.6.35.1-1	Unknown	None
Azure Linux 3.0 x64	hyperv-daemons (CBL-Mariner)	Unknown	Unknown	None	Base: 7.1 Temporal: 7.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H	6.6.35.1-1	Unknown	None

CVE ID	Acknowledgements
CVE-2024-35849	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2024-27433
MITRE
NVD

Issuing CNA: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:7.8/TemporalScore:7.8

Base score metrics
Attack Vector	Local
Attack Complexity	Low
Privileges Required	Low
User Interaction	None
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Sep-24

Information published.

1.1 04-Feb-25

Added hyperv-daemons to Azure Linux 3.0

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2024-27433
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Linux 3.0 ARM	hyperv-daemons (CBL-Mariner)	Unknown	Unknown	None	Base: 7.8 Temporal: 7.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	6.6.35.1-1	Unknown	None
Azure Linux 3.0 x64	hyperv-daemons (CBL-Mariner)	Unknown	Unknown	None	Base: 7.8 Temporal: 7.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	6.6.35.1-1	Unknown	None

CVE ID	Acknowledgements
CVE-2024-27433	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2024-4323
MITRE
NVD

Issuing CNA: vulnreport@tenable.com

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:9.8/TemporalScore:9.8

Base score metrics
Attack Vector	Network
Attack Complexity	Low
Privileges Required	None
User Interaction	None
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
1.0 23-May-24

Information published.

1.1 30-Jun-24

Information published.

1.2 17-Nov-24

Added fluent-bit to CBL-Mariner 2.0 Added fluent-bit to Azure Linux 3.0

1.3 05-Feb-25

Added fluent-bit to CBL-Mariner 2.0 Added fluent-bit to Azure Linux 3.0

1.4 07-Feb-25

Added fluent-bit to CBL-Mariner 2.0 Added fluent-bit to Azure Linux 3.0

1.5 08-Feb-25

Added fluent-bit to CBL-Mariner 2.0 Added fluent-bit to Azure Linux 3.0

1.6 09-Feb-25

Added fluent-bit to CBL-Mariner 2.0 Added fluent-bit to Azure Linux 3.0

1.7 10-Feb-25

Added fluent-bit to CBL-Mariner 2.0 Added fluent-bit to Azure Linux 3.0

1.8 11-Feb-25

Added fluent-bit to CBL-Mariner 2.0 Added fluent-bit to Azure Linux 3.0

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2024-4323
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Linux 3.0 ARM	fluent-bit (CBL-Mariner)	Unknown	Unknown	None	Base: 9.8 Temporal: 9.8 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.0.6-1	Unknown	None
Azure Linux 3.0 x64	fluent-bit (CBL-Mariner)	Unknown	Unknown	None	Base: 9.8 Temporal: 9.8 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.0.6-1	Unknown	None
CBL Mariner 2.0 ARM	fluent-bit (CBL-Mariner)	Unknown	Unknown	None	Base: 9.8 Temporal: 9.8 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	2.2.3-1	Unknown	None
CBL Mariner 2.0 x64	fluent-bit (CBL-Mariner)	Unknown	Unknown	None	Base: 9.8 Temporal: 9.8 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	2.2.3-1	Unknown	None

CVE ID	Acknowledgements
CVE-2024-4323	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2024-25629
MITRE
NVD

Issuing CNA: security-advisories@github.com

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:5.5/TemporalScore:5.5

Base score metrics
Attack Vector	Local
Attack Complexity	Low
Privileges Required	Low
User Interaction	None
Scope	Unchanged
Confidentiality	None
Integrity	None
Availability	High

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
1.0 26-Feb-24

Information published.

1.1 30-Jun-24

Information published.

1.2 29-Aug-24

Information published.

1.3 30-Aug-24

Information published.

1.4 31-Aug-24

Information published.

1.5 01-Sep-24

Information published.

1.6 02-Sep-24

Information published.

1.7 03-Sep-24

Information published.

1.8 05-Sep-24

Information published.

1.9 06-Sep-24

Information published.

2.0 07-Sep-24

Information published.

2.1 08-Sep-24

Information published.

2.2 11-Sep-24

Information published.

2.3 22-Oct-24

Added fluent-bit to CBL-Mariner 2.0 Added nodejs18 to CBL-Mariner 2.0 Added fluent-bit to Azure Linux 3.0 Added c-ares to Azure Linux 3.0 Added nodejs to Azure Linux 3.0

2.4 09-Nov-24

Added python-gevent to Azure Linux 3.0 Added fluent-bit to Azure Linux 3.0 Added c-ares to Azure Linux 3.0 Added nodejs to Azure Linux 3.0 Added fluent-bit to CBL-Mariner 2.0 Added nodejs18 to CBL-Mariner 2.0

2.5 08-Feb-25

Added fluent-bit to CBL-Mariner 2.0 Added nodejs18 to CBL-Mariner 2.0 Added c-ares to Azure Linux 3.0 Added fluent-bit to Azure Linux 3.0 Added nodejs to Azure Linux 3.0 Added python-gevent to Azure Linux 3.0

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2024-25629
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Linux 3.0 ARM	c-ares (CBL-Mariner) fluent-bit (CBL-Mariner) nodejs (CBL-Mariner) python-gevent (CBL-Mariner)	Unknown	Unknown		Base: 5.5 Temporal: 5.5 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	1.30.0-1 3.0.6-1 20.14.0-1 23.9.1-4		None
Azure Linux 3.0 x64	c-ares (CBL-Mariner) fluent-bit (CBL-Mariner) nodejs (CBL-Mariner) python-gevent (CBL-Mariner)	Unknown	Unknown		Base: 5.5 Temporal: 5.5 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	1.30.0-1 3.0.6-1 20.14.0-1 23.9.1-4		None
CBL Mariner 2.0 ARM	fluent-bit (CBL-Mariner) nodejs18 (CBL-Mariner)	Unknown	Unknown		Base: 5.5 Temporal: 5.5 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	2.2.3-1 18.20.2-1		None
CBL Mariner 2.0 x64	fluent-bit (CBL-Mariner) nodejs18 (CBL-Mariner)	Unknown	Unknown		Base: 5.5 Temporal: 5.5 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	2.2.3-1 18.20.2-1		None

CVE ID	Acknowledgements
CVE-2024-25629	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2020-15999
MITRE
NVD

Issuing CNA: chrome-cve-admin@google.com

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:9.6/TemporalScore:9.6

Base score metrics
Attack Vector	Network
Attack Complexity	Low
Privileges Required	None
User Interaction	Required
Scope	Changed
Confidentiality	High
Integrity	High
Availability	High

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
1.0 29-Jan-22

Information published.

1.1 08-Feb-25

Added freetype to CBL-Mariner 2.0

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2020-15999
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
CBL Mariner 1.0 ARM	freetype (CBL-Mariner)	Unknown	Unknown	None	Base: 6.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H	2.11.1-1	Unknown	None
CBL Mariner 1.0 x64	freetype (CBL-Mariner)	Unknown	Unknown	None	Base: 6.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H	2.11.1-1	Unknown	None
CBL Mariner 2.0 ARM	freetype (CBL-Mariner)	Unknown	Unknown	None	Base: 9.6 Temporal: 9.6 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H	2.11.1-1	Unknown	None
CBL Mariner 2.0 x64	freetype (CBL-Mariner)	Unknown	Unknown	None	Base: 9.6 Temporal: 9.6 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H	2.11.1-1	Unknown	None

CVE ID	Acknowledgements
CVE-2020-15999	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2024-22667
MITRE
NVD

Issuing CNA: cve@mitre.org

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:7.8/TemporalScore:7.8

Base score metrics
Attack Vector	Local
Attack Complexity	Low
Privileges Required	None
User Interaction	Required
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
1.0 12-Feb-24

Information published.

1.1 08-Feb-25

Added vim to CBL-Mariner 2.0

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2024-22667
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
CBL Mariner 2.0 ARM	vim (CBL-Mariner)	Unknown	Unknown	None	Base: 7.8 Temporal: 7.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	9.0.2121-2	Unknown	None
CBL Mariner 2.0 x64	vim (CBL-Mariner)	Unknown	Unknown	None	Base: 7.8 Temporal: 7.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	9.0.2121-2	Unknown	None

CVE ID	Acknowledgements
CVE-2024-22667	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2024-45310
MITRE
NVD

Issuing CNA: security-advisories@github.com

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:3.6/TemporalScore:3.6

Base score metrics
Attack Vector	Local
Attack Complexity	Low
Privileges Required	None
User Interaction	Required
Scope	Changed
Confidentiality	None
Integrity	Low
Availability	None

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
0.1 10-Jan-25

Information published.

0.2 11-Feb-25

Information published.

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2024-45310
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Linux 3.0 ARM	cri-tools (CBL-Mariner) runc (CBL-Mariner)	Unknown	Unknown		Base: 3.6 Temporal: 3.6 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N	1.32.0-1 1.2.2-1		None
Azure Linux 3.0 x64	cri-tools (CBL-Mariner) runc (CBL-Mariner)	Unknown	Unknown		Base: 3.6 Temporal: 3.6 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N	1.32.0-1 1.2.2-1		None

CVE ID	Acknowledgements
CVE-2024-45310	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2024-24786
MITRE
NVD

Issuing CNA: security@golang.org

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:7.5/TemporalScore:7.5

Base score metrics
Attack Vector	Network
Attack Complexity	Low
Privileges Required	None
User Interaction	None
Scope	Unchanged
Confidentiality	None
Integrity	None
Availability	High

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
1.0 08-Mar-24

Information published.

1.1 01-Apr-24

Added node-problem-detector to CBL-Mariner 2.0

1.3 30-Jun-24

Information published.

1.2 02-Jul-24

Information published.

1.4 10-Jul-24

Information published.

1.5 16-Aug-24

Information published.

1.6 25-Aug-24

Information published.

1.7 26-Aug-24

Information published.

1.8 27-Aug-24

Information published.

1.9 28-Aug-24

Information published.

2.0 29-Aug-24

Information published.

2.1 30-Aug-24

Information published.

2.2 31-Aug-24

Information published.

2.3 01-Sep-24

Information published.

2.4 02-Sep-24

Information published.

2.5 03-Sep-24

Information published.

2.6 05-Sep-24

Information published.

2.7 06-Sep-24

Information published.

2.8 07-Sep-24

Information published.

2.9 08-Sep-24

Information published.

3.0 11-Sep-24

Information published.

3.1 13-Sep-24

Information published.

3.2 12-Oct-24

Information published.

3.3 16-Oct-24

Added prometheus to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added prometheus-adapter to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added vitess to Azure Linux 3.0 Added skopeo to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added keda to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added ig to Azure Linux 3.0

3.4 01-Nov-24

Added kubernetes to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added prometheus-adapter to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added vitess to Azure Linux 3.0 Added skopeo to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added keda to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added ig to Azure Linux 3.0

3.5 08-Nov-24

Added azcopy to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added prometheus-adapter to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added keda to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added skopeo to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

3.6 14-Nov-24

Added skopeo to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added prometheus-adapter to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added keda to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added skopeo to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

3.7 27-Nov-24

Added sriov-network-device-plugin to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added prometheus-adapter to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added keda to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added skopeo to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

3.8 03-Dec-24

Added cert-manager to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added prometheus-adapter to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added keda to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added skopeo to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

3.9 04-Dec-24

4.0 07-Dec-24

Added cf-cli to Azure Linux 3.0 Added containerd to Azure Linux 3.0 Added containerized-data-importer to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added docker-cli to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added kubevirt to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added moby-containerd-cc to Azure Linux 3.0 Added moby-engine to Azure Linux 3.0 Added node-problem-detector to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added keda to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added skopeo to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added prometheus-adapter to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0

4.1 13-Dec-24

Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added prometheus-adapter to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added gh to Azure Linux 3.0 Added cf-cli to Azure Linux 3.0 Added containerd to Azure Linux 3.0 Added containerized-data-importer to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added docker-cli to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added kubevirt to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added moby-containerd-cc to Azure Linux 3.0 Added moby-engine to Azure Linux 3.0 Added node-problem-detector to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added keda to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added skopeo to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

4.2 14-Dec-24

Added blobfuse2 to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added prometheus-adapter to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added gh to Azure Linux 3.0 Added cf-cli to Azure Linux 3.0 Added containerd to Azure Linux 3.0 Added containerized-data-importer to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added docker-cli to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added kubevirt to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added moby-containerd-cc to Azure Linux 3.0 Added moby-engine to Azure Linux 3.0 Added node-problem-detector to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added keda to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added skopeo to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

4.3 18-Dec-24

4.4 19-Dec-24

Added cf-cli to CBL-Mariner 2.0 Added moby-buildx to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added packer to CBL-Mariner 2.0 Added terraform to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added prometheus-adapter to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added flannel to Azure Linux 3.0 Added gh to Azure Linux 3.0 Added cf-cli to Azure Linux 3.0 Added containerd to Azure Linux 3.0 Added containerized-data-importer to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added docker-cli to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added kubevirt to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added moby-containerd-cc to Azure Linux 3.0 Added moby-engine to Azure Linux 3.0 Added node-problem-detector to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added keda to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added skopeo to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

4.5 21-Dec-24

Added coredns to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added influxdb to CBL-Mariner 2.0 Added cf-cli to CBL-Mariner 2.0 Added moby-buildx to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added packer to CBL-Mariner 2.0 Added terraform to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added prometheus-adapter to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added etcd to Azure Linux 3.0 Added flannel to Azure Linux 3.0 Added gh to Azure Linux 3.0 Added cf-cli to Azure Linux 3.0 Added containerd to Azure Linux 3.0 Added containerized-data-importer to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added docker-cli to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added kubevirt to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added moby-containerd-cc to Azure Linux 3.0 Added moby-engine to Azure Linux 3.0 Added node-problem-detector to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added keda to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added skopeo to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

4.6 27-Dec-24

Added moby-engine to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added influxdb to CBL-Mariner 2.0 Added cf-cli to CBL-Mariner 2.0 Added moby-buildx to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added packer to CBL-Mariner 2.0 Added terraform to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added prometheus-adapter to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added etcd to Azure Linux 3.0 Added flannel to Azure Linux 3.0 Added gh to Azure Linux 3.0 Added cf-cli to Azure Linux 3.0 Added containerd to Azure Linux 3.0 Added containerized-data-importer to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added docker-cli to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added kubevirt to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added moby-containerd-cc to Azure Linux 3.0 Added moby-engine to Azure Linux 3.0 Added node-problem-detector to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added keda to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added skopeo to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

4.7 11-Feb-25

Added kata-containers to Azure Linux 3.0 Added kata-containers-cc to Azure Linux 3.0 Added etcd to Azure Linux 3.0 Added flannel to Azure Linux 3.0 Added gh to Azure Linux 3.0 Added cf-cli to Azure Linux 3.0 Added containerd to Azure Linux 3.0 Added containerized-data-importer to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added docker-cli to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added kubevirt to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added moby-containerd-cc to Azure Linux 3.0 Added moby-engine to Azure Linux 3.0 Added node-problem-detector to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added keda to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added skopeo to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0 Added moby-engine to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added influxdb to CBL-Mariner 2.0 Added cf-cli to CBL-Mariner 2.0 Added moby-buildx to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added packer to CBL-Mariner 2.0 Added terraform to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added prometheus-adapter to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2024-24786
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Linux 3.0 ARM	azcopy (CBL-Mariner) blobfuse2 (CBL-Mariner) cert-manager (CBL-Mariner) cf-cli (CBL-Mariner)	Unknown	Unknown		Base: 7.5 Temporal: 7.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	10.24.0-1 2.3.0-1 1.12.12-1 8.7.3-3		None
Azure Linux 3.0 x64	azcopy (CBL-Mariner) blobfuse2 (CBL-Mariner) cert-manager (CBL-Mariner) cf-cli (CBL-Mariner)	Unknown	Unknown		Base: 7.5 Temporal: 7.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	10.24.0-1 2.3.0-1 1.12.12-1 8.7.3-3		None
CBL Mariner 2.0 ARM	azcopy (CBL-Mariner) blobfuse2 (CBL-Mariner) cert-manager (CBL-Mariner) cf-cli (CBL-Mariner)	Unknown	Unknown		Base: 7.5 Temporal: 7.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	10.24.0-1 2.1.2-7 1.11.2-14 8.4.0-22		None
CBL Mariner 2.0 x64	azcopy (CBL-Mariner) blobfuse2 (CBL-Mariner) cert-manager (CBL-Mariner) cf-cli (CBL-Mariner)	Unknown	Unknown		Base: 7.5 Temporal: 7.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	10.24.0-1 2.1.2-7 1.11.2-14 8.4.0-22		None

CVE ID	Acknowledgements
CVE-2024-24786	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2023-3297
MITRE
NVD

Issuing CNA: security@ubuntu.com

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:7.8/TemporalScore:7.8

Base score metrics
Attack Vector	Local
Attack Complexity	Low
Privileges Required	Low
User Interaction	None
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
0.1 11-Feb-25

Information published.

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2023-3297
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Linux 3.0 ARM	accountsservice (CBL-Mariner)	Unknown	Unknown	None	Base: 7.8 Temporal: 7.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	23.13.9-1	Unknown	None
Azure Linux 3.0 x64	accountsservice (CBL-Mariner)	Unknown	Unknown	None	Base: 7.8 Temporal: 7.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	23.13.9-1	Unknown	None

CVE ID	Acknowledgements
CVE-2023-3297	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2021-32142
MITRE
NVD

Issuing CNA: cve@mitre.org

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:7.8/TemporalScore:7.8

Base score metrics
Attack Vector	Local
Attack Complexity	Low
Privileges Required	None
User Interaction	Required
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
0.1 11-Feb-25

Information published.

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2021-32142
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Linux 3.0 ARM	LibRaw (CBL-Mariner)	Unknown	Unknown	None	Base: 7.8 Temporal: 7.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	0.21.3-1	Unknown	None
Azure Linux 3.0 x64	LibRaw (CBL-Mariner)	Unknown	Unknown	None	Base: 7.8 Temporal: 7.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	0.21.3-1	Unknown	None

CVE ID	Acknowledgements
CVE-2021-32142	None

(top)

CVE ID	Vulnerability Description	Maximum Severity Rating	Vulnerability Impact
CVE-2015-1029 MITRE NVD Issuing CNA: cve@mitre.org	CVE Title: Unknown CVSS: None Executive Summary: None FAQ: None Mitigations: None Workarounds: None Revision: 0.1 11-Feb-25 Information published.	Unknown	Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2015-1029
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Linux 3.0 ARM	puppet (CBL-Mariner)	Unknown	Unknown	None	Base: N/A Temporal: N/A Vector: N/A	7.34.0-1	Unknown	None
Azure Linux 3.0 x64	puppet (CBL-Mariner)	Unknown	Unknown	None	Base: N/A Temporal: N/A Vector: N/A	7.34.0-1	Unknown	None

CVE ID	Acknowledgements
CVE-2015-1029	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2023-45853
MITRE
NVD

Issuing CNA: cve@mitre.org

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:9.8/TemporalScore:9.8

Base score metrics
Attack Vector	Network
Attack Complexity	Low
Privileges Required	None
User Interaction	None
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
1.0 16-Oct-23

Information published.

1.1 17-Oct-23

Added tcl to CBL-Mariner 2.0

1.2 30-Jun-24

Information published.

1.3 13-Jul-24

Information published.

1.4 29-Aug-24

Information published.

1.5 30-Aug-24

Information published.

1.6 31-Aug-24

Information published.

1.7 01-Sep-24

Information published.

1.8 02-Sep-24

Information published.

1.9 03-Sep-24

Information published.

2.0 05-Sep-24

Information published.

2.1 06-Sep-24

Information published.

2.2 07-Sep-24

Information published.

2.3 08-Sep-24

Information published.

2.4 11-Sep-24

Information published.

2.5 11-Feb-25

Added blosc to Azure Linux 3.0 Added cloud-hypervisor-cvm to Azure Linux 3.0 Added nmap to Azure Linux 3.0 Added zlib to Azure Linux 3.0 Added tcl to Azure Linux 3.0 Added rust to Azure Linux 3.0 Added keras to Azure Linux 3.0 Added cloud-hypervisor-cvm to CBL-Mariner 2.0 Added cloud-hypervisor to CBL-Mariner 2.0 Added rust to CBL-Mariner 2.0 Added zlib to CBL-Mariner 2.0 Added boost to CBL-Mariner 2.0 Added tcl to CBL-Mariner 2.0

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2023-45853
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Linux 3.0 ARM	cloud-hypervisor-cvm (CBL-Mariner) blosc (CBL-Mariner) keras (CBL-Mariner) nmap (CBL-Mariner)	Unknown	Unknown		Base: 9.8 Temporal: 9.8 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	38.0.72.2-1 1.21.6-1 3.1.1-1 7.95-1		None
Azure Linux 3.0 x64	blosc (CBL-Mariner) cloud-hypervisor-cvm (CBL-Mariner) keras (CBL-Mariner) nmap (CBL-Mariner)	Unknown	Unknown		Base: 9.8 Temporal: 9.8 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	1.21.6-1 38.0.72.2-1 3.1.1-1 7.95-1		None
CBL Mariner 2.0 ARM	boost (CBL-Mariner) cloud-hypervisor (CBL-Mariner) cloud-hypervisor-cvm (CBL-Mariner) rust (CBL-Mariner)	Unknown	Unknown		Base: 9.8 Temporal: 9.8 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	1.76.0-4 32.0-2 38.0.72.2-1 1.72.0-5		None
CBL Mariner 2.0 x64	boost (CBL-Mariner) cloud-hypervisor (CBL-Mariner) cloud-hypervisor-cvm (CBL-Mariner) rust (CBL-Mariner)	Unknown	Unknown		Base: 9.8 Temporal: 9.8 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	1.76.0-4 32.0-2 38.0.72.2-1 1.72.0-5		None

CVE ID	Acknowledgements
CVE-2023-45853	None

(top)

CVE ID	Vulnerability Description	Maximum Severity Rating	Vulnerability Impact
CVE-2024-53263 MITRE NVD Issuing CNA: security-advisories@github.com	CVE Title: Unknown CVSS: None Executive Summary: None FAQ: None Mitigations: None Workarounds: None Revision: 0.1 01-Feb-25 Information published.	Unknown	Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2024-53263
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Linux 3.0 ARM	git-lfs (CBL-Mariner)	Unknown	Unknown	None	Base: N/A Temporal: N/A Vector: N/A	3.6.1-1	Unknown	None
Azure Linux 3.0 x64	git-lfs (CBL-Mariner)	Unknown	Unknown	None	Base: N/A Temporal: N/A Vector: N/A	3.6.1-1	Unknown	None
CBL Mariner 2.0 ARM	git-lfs (CBL-Mariner)	Unknown	Unknown	None	Base: N/A Temporal: N/A Vector: N/A	3.5.1-4	Unknown	None
CBL Mariner 2.0 x64	git-lfs (CBL-Mariner)	Unknown	Unknown	None	Base: N/A Temporal: N/A Vector: N/A	3.5.1-4	Unknown	None

CVE ID	Acknowledgements
CVE-2024-53263	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2024-45338
MITRE
NVD

Issuing CNA: security@golang.org

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:5.3/TemporalScore:5.3

Base score metrics
Attack Vector	Network
Attack Complexity	Low
Privileges Required	None
User Interaction	None
Scope	Unchanged
Confidentiality	None
Integrity	None
Availability	Low

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
0.1 09-Jan-25

Information published.

0.2 12-Jan-25

Information published.

0.3 13-Jan-25

Information published.

0.4 15-Jan-25

Information published.

0.5 16-Jan-25

Information published.

0.6 17-Jan-25

Information published.

0.7 18-Jan-25

Information published.

0.8 19-Jan-25

Information published.

0.9 20-Jan-25

Information published.

1.0 21-Jan-25

Information published.

1.1 22-Jan-25

1.2 23-Jan-25

Added gh to CBL-Mariner 2.0 Added keda to CBL-Mariner 2.0 Added application-gateway-kubernetes-ingress to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added cf-cli to CBL-Mariner 2.0 Added cni-plugins to CBL-Mariner 2.0 Added containerized-data-importer to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added influxdb to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added packer to CBL-Mariner 2.0 Added prometheus-adapter to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added terraform to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added application-gateway-kubernetes-ingress to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added cf-cli to Azure Linux 3.0 Added containerized-data-importer to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added gh to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added keda to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added kubevirt to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added sriov-network-device-plugin to Azure Linux 3.0 Added telegraf to Azure Linux 3.0

1.3 24-Jan-25

1.4 25-Jan-25

1.5 27-Jan-25

Added kubernetes to CBL-Mariner 2.0 Added packer to CBL-Mariner 2.0 Added gh to CBL-Mariner 2.0 Added keda to CBL-Mariner 2.0 Added application-gateway-kubernetes-ingress to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added cf-cli to CBL-Mariner 2.0 Added cni-plugins to CBL-Mariner 2.0 Added containerized-data-importer to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added influxdb to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added prometheus-adapter to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added terraform to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added application-gateway-kubernetes-ingress to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added cf-cli to Azure Linux 3.0 Added containerized-data-importer to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added gh to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added keda to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added kubevirt to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added sriov-network-device-plugin to Azure Linux 3.0 Added telegraf to Azure Linux 3.0

1.6 28-Jan-25

1.7 29-Jan-25

1.8 30-Jan-25

Added kubernetes to CBL-Mariner 2.0 Added packer to CBL-Mariner 2.0 Added gh to CBL-Mariner 2.0 Added keda to CBL-Mariner 2.0 Added application-gateway-kubernetes-ingress to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added cf-cli to CBL-Mariner 2.0 Added cni-plugins to CBL-Mariner 2.0 Added containerized-data-importer to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added influxdb to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added prometheus-adapter to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added terraform to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added cert-manager to Azure Linux 3.0 Added cni to Azure Linux 3.0 Added cni-plugins to Azure Linux 3.0 Added containerized-data-importer to Azure Linux 3.0 Added gh to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added node-problem-detector to Azure Linux 3.0 Added application-gateway-kubernetes-ingress to Azure Linux 3.0 Added cf-cli to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added keda to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added kubevirt to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added sriov-network-device-plugin to Azure Linux 3.0 Added telegraf to Azure Linux 3.0

1.9 01-Feb-25

Added kubernetes to CBL-Mariner 2.0 Added packer to CBL-Mariner 2.0 Added gh to CBL-Mariner 2.0 Added keda to CBL-Mariner 2.0 Added application-gateway-kubernetes-ingress to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added cf-cli to CBL-Mariner 2.0 Added cni-plugins to CBL-Mariner 2.0 Added containerized-data-importer to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added influxdb to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added prometheus-adapter to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added terraform to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added cert-manager to Azure Linux 3.0 Added cni to Azure Linux 3.0 Added cni-plugins to Azure Linux 3.0 Added containerized-data-importer to Azure Linux 3.0 Added gh to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added node-problem-detector to Azure Linux 3.0 Added application-gateway-kubernetes-ingress to Azure Linux 3.0 Added cf-cli to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added keda to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added kubevirt to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added sriov-network-device-plugin to Azure Linux 3.0 Added telegraf to Azure Linux 3.0

2.0 02-Feb-25

Added kubernetes to CBL-Mariner 2.0 Added packer to CBL-Mariner 2.0 Added gh to CBL-Mariner 2.0 Added keda to CBL-Mariner 2.0 Added application-gateway-kubernetes-ingress to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added cf-cli to CBL-Mariner 2.0 Added cni-plugins to CBL-Mariner 2.0 Added containerized-data-importer to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added influxdb to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added prometheus-adapter to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added terraform to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added cert-manager to Azure Linux 3.0 Added cni to Azure Linux 3.0 Added cni-plugins to Azure Linux 3.0 Added containerized-data-importer to Azure Linux 3.0 Added gh to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added node-problem-detector to Azure Linux 3.0 Added application-gateway-kubernetes-ingress to Azure Linux 3.0 Added cf-cli to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added keda to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added kubevirt to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added sriov-network-device-plugin to Azure Linux 3.0 Added telegraf to Azure Linux 3.0

2.1 03-Feb-25

Added kubernetes to CBL-Mariner 2.0 Added packer to CBL-Mariner 2.0 Added gh to CBL-Mariner 2.0 Added keda to CBL-Mariner 2.0 Added application-gateway-kubernetes-ingress to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added cf-cli to CBL-Mariner 2.0 Added cni-plugins to CBL-Mariner 2.0 Added containerized-data-importer to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added influxdb to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added prometheus-adapter to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added terraform to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added cert-manager to Azure Linux 3.0 Added cni to Azure Linux 3.0 Added cni-plugins to Azure Linux 3.0 Added containerized-data-importer to Azure Linux 3.0 Added gh to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added node-problem-detector to Azure Linux 3.0 Added application-gateway-kubernetes-ingress to Azure Linux 3.0 Added cf-cli to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added keda to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added kubevirt to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added sriov-network-device-plugin to Azure Linux 3.0 Added telegraf to Azure Linux 3.0

2.2 04-Feb-25

Added kubernetes to CBL-Mariner 2.0 Added packer to CBL-Mariner 2.0 Added gh to CBL-Mariner 2.0 Added keda to CBL-Mariner 2.0 Added application-gateway-kubernetes-ingress to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added cf-cli to CBL-Mariner 2.0 Added cni-plugins to CBL-Mariner 2.0 Added containerized-data-importer to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added influxdb to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added prometheus-adapter to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added terraform to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added cert-manager to Azure Linux 3.0 Added cni to Azure Linux 3.0 Added cni-plugins to Azure Linux 3.0 Added containerized-data-importer to Azure Linux 3.0 Added gh to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added node-problem-detector to Azure Linux 3.0 Added application-gateway-kubernetes-ingress to Azure Linux 3.0 Added cf-cli to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added keda to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added kubevirt to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added sriov-network-device-plugin to Azure Linux 3.0 Added telegraf to Azure Linux 3.0

2.3 05-Feb-25

Added kubernetes to CBL-Mariner 2.0 Added packer to CBL-Mariner 2.0 Added gh to CBL-Mariner 2.0 Added keda to CBL-Mariner 2.0 Added application-gateway-kubernetes-ingress to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added cf-cli to CBL-Mariner 2.0 Added cni-plugins to CBL-Mariner 2.0 Added containerized-data-importer to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added influxdb to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added prometheus-adapter to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added terraform to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added cert-manager to Azure Linux 3.0 Added cni to Azure Linux 3.0 Added cni-plugins to Azure Linux 3.0 Added containerized-data-importer to Azure Linux 3.0 Added gh to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added node-problem-detector to Azure Linux 3.0 Added application-gateway-kubernetes-ingress to Azure Linux 3.0 Added cf-cli to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added keda to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added kubevirt to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added sriov-network-device-plugin to Azure Linux 3.0 Added telegraf to Azure Linux 3.0

2.4 07-Feb-25

Added kubernetes to CBL-Mariner 2.0 Added packer to CBL-Mariner 2.0 Added gh to CBL-Mariner 2.0 Added keda to CBL-Mariner 2.0 Added application-gateway-kubernetes-ingress to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added cf-cli to CBL-Mariner 2.0 Added cni-plugins to CBL-Mariner 2.0 Added containerized-data-importer to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added influxdb to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added prometheus-adapter to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added terraform to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added cert-manager to Azure Linux 3.0 Added cni to Azure Linux 3.0 Added cni-plugins to Azure Linux 3.0 Added containerized-data-importer to Azure Linux 3.0 Added gh to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added node-problem-detector to Azure Linux 3.0 Added application-gateway-kubernetes-ingress to Azure Linux 3.0 Added cf-cli to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added keda to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added kubevirt to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added sriov-network-device-plugin to Azure Linux 3.0 Added telegraf to Azure Linux 3.0

2.5 08-Feb-25

Added kubernetes to CBL-Mariner 2.0 Added packer to CBL-Mariner 2.0 Added gh to CBL-Mariner 2.0 Added keda to CBL-Mariner 2.0 Added application-gateway-kubernetes-ingress to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added cf-cli to CBL-Mariner 2.0 Added cni-plugins to CBL-Mariner 2.0 Added containerized-data-importer to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added influxdb to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added prometheus-adapter to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added terraform to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added cert-manager to Azure Linux 3.0 Added cni to Azure Linux 3.0 Added cni-plugins to Azure Linux 3.0 Added containerized-data-importer to Azure Linux 3.0 Added gh to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added node-problem-detector to Azure Linux 3.0 Added application-gateway-kubernetes-ingress to Azure Linux 3.0 Added cf-cli to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added keda to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added kubevirt to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added sriov-network-device-plugin to Azure Linux 3.0 Added telegraf to Azure Linux 3.0

2.6 09-Feb-25

Added kubernetes to CBL-Mariner 2.0 Added packer to CBL-Mariner 2.0 Added gh to CBL-Mariner 2.0 Added keda to CBL-Mariner 2.0 Added application-gateway-kubernetes-ingress to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added cf-cli to CBL-Mariner 2.0 Added cni-plugins to CBL-Mariner 2.0 Added containerized-data-importer to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added influxdb to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added prometheus-adapter to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added terraform to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added cert-manager to Azure Linux 3.0 Added cni to Azure Linux 3.0 Added cni-plugins to Azure Linux 3.0 Added containerized-data-importer to Azure Linux 3.0 Added gh to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added node-problem-detector to Azure Linux 3.0 Added application-gateway-kubernetes-ingress to Azure Linux 3.0 Added cf-cli to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added keda to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added kubevirt to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added sriov-network-device-plugin to Azure Linux 3.0 Added telegraf to Azure Linux 3.0

2.7 10-Feb-25

Added kubernetes to CBL-Mariner 2.0 Added packer to CBL-Mariner 2.0 Added gh to CBL-Mariner 2.0 Added keda to CBL-Mariner 2.0 Added application-gateway-kubernetes-ingress to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added cf-cli to CBL-Mariner 2.0 Added cni-plugins to CBL-Mariner 2.0 Added containerized-data-importer to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added influxdb to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added prometheus-adapter to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added terraform to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added cert-manager to Azure Linux 3.0 Added cni to Azure Linux 3.0 Added cni-plugins to Azure Linux 3.0 Added containerized-data-importer to Azure Linux 3.0 Added gh to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added node-problem-detector to Azure Linux 3.0 Added application-gateway-kubernetes-ingress to Azure Linux 3.0 Added cf-cli to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added keda to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added kubevirt to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added sriov-network-device-plugin to Azure Linux 3.0 Added telegraf to Azure Linux 3.0

2.8 11-Feb-25

Added kubernetes to CBL-Mariner 2.0 Added packer to CBL-Mariner 2.0 Added gh to CBL-Mariner 2.0 Added keda to CBL-Mariner 2.0 Added application-gateway-kubernetes-ingress to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added cf-cli to CBL-Mariner 2.0 Added cni-plugins to CBL-Mariner 2.0 Added containerized-data-importer to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added influxdb to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added prometheus-adapter to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added terraform to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added containerd2 to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added cni to Azure Linux 3.0 Added cni-plugins to Azure Linux 3.0 Added containerized-data-importer to Azure Linux 3.0 Added gh to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added node-problem-detector to Azure Linux 3.0 Added application-gateway-kubernetes-ingress to Azure Linux 3.0 Added cf-cli to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added keda to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added kubevirt to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added sriov-network-device-plugin to Azure Linux 3.0 Added telegraf to Azure Linux 3.0

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2024-45338
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Linux 3.0 ARM	application-gateway-kubernetes-ingress (CBL-Mariner) cert-manager (CBL-Mariner) cf-cli (CBL-Mariner) cni (CBL-Mariner)	Unknown	Unknown		Base: 5.3 Temporal: 5.3 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L	1.7.2-3 1.12.15-1 8.7.3-5 1.1.2-4		None
Azure Linux 3.0 x64	application-gateway-kubernetes-ingress (CBL-Mariner) cert-manager (CBL-Mariner) cf-cli (CBL-Mariner) cni (CBL-Mariner)	Unknown	Unknown		Base: 5.3 Temporal: 5.3 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L	1.7.2-3 1.12.15-1 8.7.3-5 1.1.2-4		None
CBL Mariner 2.0 ARM	application-gateway-kubernetes-ingress (CBL-Mariner) cert-manager (CBL-Mariner) cf-cli (CBL-Mariner) cni-plugins (CBL-Mariner)	Unknown	Unknown		Base: 5.3 Temporal: 5.3 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L	1.4.0-24 1.11.2-17 8.4.0-23 1.3.0-7		None
CBL Mariner 2.0 x64	application-gateway-kubernetes-ingress (CBL-Mariner) cert-manager (CBL-Mariner) cf-cli (CBL-Mariner) cni-plugins (CBL-Mariner)	Unknown	Unknown		Base: 5.3 Temporal: 5.3 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L	1.4.0-24 1.11.2-17 8.4.0-23 1.3.0-7		None

CVE ID	Acknowledgements
CVE-2024-45338	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2022-32149
MITRE
NVD

Issuing CNA: security@golang.org

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:7.5/TemporalScore:7.5

Base score metrics
Attack Vector	Network
Attack Complexity	Low
Privileges Required	None
User Interaction	None
Scope	Unchanged
Confidentiality	None
Integrity	None
Availability	High

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
1.0 08-Nov-23

Information published.

1.1 24-Jan-24

Added sriov-network-device-plugin to CBL-Mariner 2.0

1.2 30-Jun-24

Information published.

1.3 29-Aug-24

Information published.

1.4 30-Aug-24

Information published.

1.5 31-Aug-24

Information published.

1.6 01-Sep-24

Information published.

1.7 02-Sep-24

Information published.

1.8 03-Sep-24

Information published.

1.9 05-Sep-24

Information published.

2.0 06-Sep-24

Information published.

2.1 07-Sep-24

Information published.

2.2 08-Sep-24

Information published.

2.3 11-Sep-24

Information published.

2.4 13-Sep-24

Information published.

2.5 19-Sep-24

Information published.

2.6 20-Sep-24

Information published.

2.7 21-Sep-24

Information published.

2.8 22-Sep-24

Information published.

2.9 23-Sep-24

Information published.

3.0 24-Sep-24

Information published.

3.1 25-Sep-24

Information published.

3.2 26-Sep-24

Information published.

3.3 27-Sep-24

Information published.

3.4 28-Sep-24

Information published.

3.5 29-Sep-24

Information published.

3.6 30-Sep-24

Information published.

3.7 01-Oct-24

Information published.

3.8 02-Oct-24

Information published.

3.9 03-Oct-24

Information published.

4.0 04-Oct-24

Information published.

4.1 05-Oct-24

Information published.

4.2 06-Oct-24

Information published.

4.3 07-Oct-24

Information published.

4.4 08-Oct-24

Information published.

4.5 09-Oct-24

Information published.

4.6 11-Oct-24

Information published.

4.7 12-Oct-24

Information published.

4.8 13-Oct-24

Information published.

4.9 14-Oct-24

Information published.

5.0 15-Oct-24

Added kubevirt to CBL-Mariner 2.0 Added application-gateway-kubernetes-ingress to CBL-Mariner 2.0 Added containerized-data-importer to CBL-Mariner 2.0 Added keda to CBL-Mariner 2.0 Added prometheus-adapter to CBL-Mariner 2.0 Added cf-cli to CBL-Mariner 2.0 Added influxdb to CBL-Mariner 2.0 Added libcontainers-common to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added cni to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added keda to Azure Linux 3.0 Added kubevirt to Azure Linux 3.0 Added sriov-network-device-plugin to Azure Linux 3.0 Added node-problem-detector to Azure Linux 3.0

5.1 16-Oct-24

5.2 17-Oct-24

Added terraform to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added application-gateway-kubernetes-ingress to CBL-Mariner 2.0 Added containerized-data-importer to CBL-Mariner 2.0 Added keda to CBL-Mariner 2.0 Added prometheus-adapter to CBL-Mariner 2.0 Added cf-cli to CBL-Mariner 2.0 Added influxdb to CBL-Mariner 2.0 Added libcontainers-common to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added cni to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added keda to Azure Linux 3.0 Added kubevirt to Azure Linux 3.0 Added sriov-network-device-plugin to Azure Linux 3.0 Added node-problem-detector to Azure Linux 3.0

5.3 18-Oct-24

5.4 19-Oct-24

5.5 20-Oct-24

5.6 21-Oct-24

5.7 22-Oct-24

5.8 23-Oct-24

5.9 24-Oct-24

6.0 25-Oct-24

6.1 26-Oct-24

6.2 27-Oct-24

6.3 28-Oct-24

6.4 29-Oct-24

6.5 30-Oct-24

6.6 31-Oct-24

6.7 01-Nov-24

Added gh to CBL-Mariner 2.0 Added terraform to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added application-gateway-kubernetes-ingress to CBL-Mariner 2.0 Added containerized-data-importer to CBL-Mariner 2.0 Added keda to CBL-Mariner 2.0 Added prometheus-adapter to CBL-Mariner 2.0 Added cf-cli to CBL-Mariner 2.0 Added influxdb to CBL-Mariner 2.0 Added libcontainers-common to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added cni to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added keda to Azure Linux 3.0 Added kubevirt to Azure Linux 3.0 Added sriov-network-device-plugin to Azure Linux 3.0 Added node-problem-detector to Azure Linux 3.0

6.8 02-Nov-24

6.9 04-Nov-24

7.0 05-Nov-24

7.1 06-Nov-24

7.2 07-Nov-24

7.3 08-Nov-24

7.4 09-Nov-24

7.5 10-Nov-24

7.6 11-Nov-24

7.7 12-Nov-24

7.8 13-Nov-24

7.9 14-Nov-24

8.0 15-Nov-24

8.1 16-Nov-24

8.2 17-Nov-24

8.3 18-Nov-24

8.4 19-Nov-24

8.5 20-Nov-24

8.6 21-Nov-24

8.7 23-Nov-24

8.8 24-Nov-24

8.9 25-Nov-24

9.0 26-Nov-24

9.1 27-Nov-24

9.2 28-Nov-24

9.3 29-Nov-24

9.4 30-Nov-24

9.5 01-Dec-24

9.6 02-Dec-24

9.7 03-Dec-24

Added application-gateway-kubernetes-ingress to CBL-Mariner 2.0 Added containerized-data-importer to CBL-Mariner 2.0 Added keda to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added libcontainers-common to CBL-Mariner 2.0 Added prometheus-adapter to CBL-Mariner 2.0 Added gh to CBL-Mariner 2.0 Added terraform to CBL-Mariner 2.0 Added cf-cli to CBL-Mariner 2.0 Added influxdb to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added cni to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added keda to Azure Linux 3.0 Added kubevirt to Azure Linux 3.0 Added sriov-network-device-plugin to Azure Linux 3.0 Added node-problem-detector to Azure Linux 3.0

9.8 04-Dec-24

9.9 05-Dec-24

10.0 07-Dec-24

10.1 08-Dec-24

10.2 09-Dec-24

10.3 10-Dec-24

10.4 11-Dec-24

10.5 12-Dec-24

10.6 13-Dec-24

10.7 14-Dec-24

10.8 15-Dec-24

10.9 16-Dec-24

11.0 17-Dec-24

11.1 18-Dec-24

11.2 19-Dec-24

11.3 20-Dec-24

11.4 21-Dec-24

11.5 22-Dec-24

11.6 23-Dec-24

11.7 24-Dec-24

11.8 25-Dec-24

11.9 26-Dec-24

12.0 27-Dec-24

12.1 28-Dec-24

12.2 29-Dec-24

12.3 30-Dec-24

12.4 31-Dec-24

12.5 01-Jan-25

12.6 02-Jan-25

12.7 03-Jan-25

12.8 04-Jan-25

12.9 05-Jan-25

13.0 06-Jan-25

13.1 07-Jan-25

13.2 08-Jan-25

13.3 09-Jan-25

13.4 10-Jan-25

13.5 11-Jan-25

13.6 12-Jan-25

13.7 13-Jan-25

13.8 15-Jan-25

13.9 16-Jan-25

14.0 17-Jan-25

14.1 18-Jan-25

14.2 19-Jan-25

14.3 20-Jan-25

14.4 21-Jan-25

14.5 22-Jan-25

14.6 23-Jan-25

14.7 24-Jan-25

14.8 25-Jan-25

14.9 27-Jan-25

15.0 28-Jan-25

15.1 29-Jan-25

15.2 30-Jan-25

15.3 01-Feb-25

15.4 02-Feb-25

15.5 03-Feb-25

15.6 04-Feb-25

15.7 05-Feb-25

15.8 07-Feb-25

15.9 08-Feb-25

16.0 09-Feb-25

16.1 10-Feb-25

16.2 11-Feb-25

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2022-32149
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Linux 3.0 ARM	cni (CBL-Mariner) keda (CBL-Mariner) kubevirt (CBL-Mariner) multus (CBL-Mariner)	Unknown	Unknown		Base: 7.5 Temporal: 7.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	1.1.2-3 2.14.0-1 1.2.0-1 4.0.2-1		None
Azure Linux 3.0 x64	cni (CBL-Mariner) keda (CBL-Mariner) kubevirt (CBL-Mariner) multus (CBL-Mariner)	Unknown	Unknown		Base: 7.5 Temporal: 7.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	1.1.2-3 2.14.0-1 1.2.0-1 4.0.2-1		None
CBL Mariner 2.0 ARM	application-gateway-kubernetes-ingress (CBL-Mariner) cf-cli (CBL-Mariner) containerized-data-importer (CBL-Mariner) gh (CBL-Mariner)	Unknown	Unknown		Base: 7.5 Temporal: 7.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	1.4.0-22 8.4.0-21 1.55.0-20 2.13.0-22		None
CBL Mariner 2.0 x64	application-gateway-kubernetes-ingress (CBL-Mariner) cf-cli (CBL-Mariner) containerized-data-importer (CBL-Mariner) gh (CBL-Mariner)	Unknown	Unknown		Base: 7.5 Temporal: 7.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	1.4.0-22 8.4.0-21 1.55.0-20 2.13.0-22		None

CVE ID	Acknowledgements
CVE-2022-32149	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2024-3727
MITRE
NVD

Issuing CNA: secalert@redhat.com

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:8.3/TemporalScore:8.3

Base score metrics
Attack Vector	Network
Attack Complexity	High
Privileges Required	None
User Interaction	Required
Scope	Changed
Confidentiality	High
Integrity	High
Availability	High

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
1.1 30-Jun-24

Information published.

1.2 10-Jul-24

Information published.

1.3 16-Aug-24

Information published.

1.4 29-Aug-24

Information published.

1.5 30-Aug-24

Information published.

1.6 31-Aug-24

Information published.

1.7 01-Sep-24

Information published.

1.8 02-Sep-24

Information published.

1.9 03-Sep-24

Information published.

2.0 05-Sep-24

Information published.

2.1 06-Sep-24

Information published.

2.2 07-Sep-24

Information published.

2.3 08-Sep-24

Information published.

2.4 11-Sep-24

Information published.

2.5 19-Sep-24

Information published.

2.6 03-Dec-24

Added skopeo to CBL-Mariner 2.0 Added libcontainers-common to CBL-Mariner 2.0 Added cri-o to CBL-Mariner 2.0 Added containerized-data-importer to CBL-Mariner 2.0 Added libcontainers-common to Azure Linux 3.0 Added skopeo to Azure Linux 3.0 Added containerized-data-importer to Azure Linux 3.0 Added ig to Azure Linux 3.0

2.7 04-Dec-24

2.8 05-Dec-24

2.9 07-Dec-24

3.0 08-Dec-24

3.1 09-Dec-24

3.2 10-Dec-24

3.3 11-Dec-24

3.4 12-Dec-24

3.5 13-Dec-24

3.6 14-Dec-24

3.7 15-Dec-24

3.8 16-Dec-24

3.9 17-Dec-24

4.0 18-Dec-24

4.1 19-Dec-24

4.2 20-Dec-24

4.3 21-Dec-24

4.4 22-Dec-24

4.5 23-Dec-24

4.6 24-Dec-24

4.7 25-Dec-24

4.8 26-Dec-24

4.9 27-Dec-24

5.0 28-Dec-24

5.1 29-Dec-24

5.2 30-Dec-24

5.3 31-Dec-24

5.4 01-Jan-25

5.5 02-Jan-25

5.6 03-Jan-25

5.7 04-Jan-25

5.8 05-Jan-25

5.9 06-Jan-25

6.0 07-Jan-25

6.1 08-Jan-25

6.2 09-Jan-25

6.3 10-Jan-25

6.4 11-Jan-25

6.5 12-Jan-25

6.6 13-Jan-25

6.7 15-Jan-25

6.8 16-Jan-25

6.9 17-Jan-25

7.0 18-Jan-25

7.1 19-Jan-25

7.2 20-Jan-25

7.3 21-Jan-25

7.4 22-Jan-25

7.5 23-Jan-25

7.6 24-Jan-25

7.7 25-Jan-25

7.8 27-Jan-25

7.9 28-Jan-25

8.0 29-Jan-25

8.1 30-Jan-25

8.2 01-Feb-25

8.3 02-Feb-25

8.4 03-Feb-25

8.5 04-Feb-25

8.6 05-Feb-25

8.7 07-Feb-25

8.8 08-Feb-25

8.9 09-Feb-25

9.0 10-Feb-25

9.1 11-Feb-25

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2024-3727
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Linux 3.0 ARM	libcontainers-common (CBL-Mariner) containerized-data-importer (CBL-Mariner) ig (CBL-Mariner) skopeo (CBL-Mariner)	Unknown	Unknown		Base: 8.3 Temporal: 8.3 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H	20240213-2 1.57.0-2 0.29.0-1 1.14.4-1		None
Azure Linux 3.0 x64	containerized-data-importer (CBL-Mariner) ig (CBL-Mariner) libcontainers-common (CBL-Mariner) skopeo (CBL-Mariner)	Unknown	Unknown		Base: 8.3 Temporal: 8.3 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H	1.57.0-2 0.29.0-1 20240213-2 1.14.4-1		None
CBL Mariner 2.0 ARM	libcontainers-common (CBL-Mariner) containerized-data-importer (CBL-Mariner) cri-o (CBL-Mariner) skopeo (CBL-Mariner)	Unknown	Unknown		Base: 8.3 Temporal: 8.3 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H	20210626-7 1.55.0-19 1.22.3-4 1.14.2-4		None
CBL Mariner 2.0 x64	containerized-data-importer (CBL-Mariner) cri-o (CBL-Mariner) libcontainers-common (CBL-Mariner) skopeo (CBL-Mariner)	Unknown	Unknown		Base: 8.3 Temporal: 8.3 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H	1.55.0-19 1.22.3-4 20210626-7 1.14.2-4		None

CVE ID	Acknowledgements
CVE-2024-3727	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2024-6104
MITRE
NVD

Issuing CNA: security@hashicorp.com

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:5.5/TemporalScore:5.5

Base score metrics
Attack Vector	Local
Attack Complexity	Low
Privileges Required	Low
User Interaction	None
Scope	Unchanged
Confidentiality	High
Integrity	None
Availability	None

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
1.0 05-Aug-24

Information published.

1.1 15-Aug-24

Information published.

1.2 16-Aug-24

Information published.

1.3 17-Aug-24

Information published.

1.4 18-Aug-24

Information published.

1.5 19-Aug-24

Information published.

1.6 20-Aug-24

Information published.

1.7 21-Aug-24

Information published.

1.8 22-Aug-24

Information published.

1.9 23-Aug-24

Information published.

2.0 24-Aug-24

Information published.

2.1 25-Aug-24

Information published.

2.2 26-Aug-24

Information published.

2.3 27-Aug-24

Information published.

2.4 28-Aug-24

Information published.

2.5 29-Aug-24

Information published.

2.6 30-Aug-24

Information published.

2.7 31-Aug-24

Information published.

2.8 01-Sep-24

Information published.

2.9 02-Sep-24

Information published.

3.0 03-Sep-24

Information published.

3.1 05-Sep-24

Information published.

3.2 06-Sep-24

Information published.

3.3 07-Sep-24

Information published.

3.4 08-Sep-24

Information published.

3.5 11-Sep-24

Information published.

3.6 13-Sep-24

Information published.

3.7 14-Sep-24

Information published.

3.8 15-Sep-24

Information published.

3.9 16-Sep-24

Information published.

4.0 17-Sep-24

Information published.

4.1 18-Sep-24

Information published.

4.2 19-Sep-24

Information published.

4.3 20-Sep-24

Information published.

4.4 21-Sep-24

Information published.

4.5 22-Sep-24

Information published.

4.6 23-Sep-24

Information published.

4.7 24-Sep-24

Information published.

4.8 25-Sep-24

Information published.

4.9 26-Sep-24

Information published.

5.0 27-Sep-24

Information published.

5.1 28-Sep-24

Information published.

5.2 29-Sep-24

Information published.

5.3 30-Sep-24

Information published.

5.4 01-Oct-24

Information published.

5.5 02-Oct-24

Information published.

5.6 03-Oct-24

Information published.

5.7 04-Oct-24

Information published.

5.8 05-Oct-24

Information published.

5.9 06-Oct-24

Information published.

6.0 07-Oct-24

Information published.

6.1 08-Oct-24

Information published.

6.2 09-Oct-24

Information published.

6.3 11-Oct-24

Information published.

6.4 12-Oct-24

Information published.

6.5 13-Oct-24

Information published.

6.6 14-Oct-24

Information published.

6.7 15-Oct-24

Added cert-manager to CBL-Mariner 2.0 Added influxdb to CBL-Mariner 2.0 Added keda to CBL-Mariner 2.0 Added packer to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added rook to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added terraform to CBL-Mariner 2.0 Added cert-manager to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added keda to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added skopeo to Azure Linux 3.0 Added prometheus to Azure Linux 3.0

6.8 16-Oct-24

6.9 17-Oct-24

7.0 18-Oct-24

7.1 19-Oct-24

7.2 20-Oct-24

7.3 21-Oct-24

7.4 22-Oct-24

7.5 23-Oct-24

7.6 24-Oct-24

7.7 25-Oct-24

7.8 26-Oct-24

7.9 27-Oct-24

8.0 28-Oct-24

8.1 29-Oct-24

8.2 30-Oct-24

8.3 31-Oct-24

8.4 01-Nov-24

8.5 02-Nov-24

8.6 04-Nov-24

8.7 05-Nov-24

8.8 06-Nov-24

8.9 07-Nov-24

9.0 08-Nov-24

9.1 09-Nov-24

9.2 10-Nov-24

9.3 11-Nov-24

9.4 12-Nov-24

9.5 13-Nov-24

9.6 14-Nov-24

9.7 15-Nov-24

9.8 16-Nov-24

9.9 17-Nov-24

10.0 18-Nov-24

10.1 19-Nov-24

10.2 20-Nov-24

10.3 21-Nov-24

10.4 23-Nov-24

10.5 24-Nov-24

10.6 25-Nov-24

10.7 26-Nov-24

10.8 27-Nov-24

10.9 28-Nov-24

11.0 29-Nov-24

11.1 30-Nov-24

11.2 01-Dec-24

11.3 02-Dec-24

11.4 03-Dec-24

11.5 04-Dec-24

11.6 05-Dec-24

11.7 07-Dec-24

11.8 08-Dec-24

11.9 09-Dec-24

12.0 10-Dec-24

12.1 11-Dec-24

12.2 12-Dec-24

12.3 13-Dec-24

12.4 14-Dec-24

12.5 15-Dec-24

12.6 16-Dec-24

12.7 17-Dec-24

12.8 18-Dec-24

12.9 19-Dec-24

13.0 20-Dec-24

13.1 21-Dec-24

13.2 22-Dec-24

13.3 23-Dec-24

13.4 24-Dec-24

13.5 25-Dec-24

13.6 26-Dec-24

13.7 27-Dec-24

13.8 28-Dec-24

13.9 29-Dec-24

14.0 30-Dec-24

14.1 31-Dec-24

14.2 01-Jan-25

14.3 02-Jan-25

14.4 03-Jan-25

14.5 04-Jan-25

14.6 05-Jan-25

14.7 06-Jan-25

14.8 07-Jan-25

14.9 08-Jan-25

15.0 09-Jan-25

15.1 10-Jan-25

15.2 11-Jan-25

15.3 12-Jan-25

15.4 13-Jan-25

15.5 15-Jan-25

15.6 16-Jan-25

15.7 17-Jan-25

15.8 18-Jan-25

15.9 19-Jan-25

16.0 20-Jan-25

16.1 21-Jan-25

16.2 22-Jan-25

16.3 23-Jan-25

16.4 24-Jan-25

16.5 25-Jan-25

16.6 27-Jan-25

16.7 28-Jan-25

16.8 29-Jan-25

16.9 30-Jan-25

17.0 01-Feb-25

17.1 02-Feb-25

17.2 03-Feb-25

17.3 04-Feb-25

17.4 05-Feb-25

17.5 07-Feb-25

17.6 08-Feb-25

17.7 09-Feb-25

17.8 10-Feb-25

17.9 11-Feb-25

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2024-6104
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Linux 3.0 ARM	libcontainers-common (CBL-Mariner) cert-manager (CBL-Mariner) influxdb (CBL-Mariner) keda (CBL-Mariner)	Unknown	Unknown		Base: 5.5 Temporal: 5.5 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N	20240213-2 1.12.12-3 2.7.3-5 2.14.0-2		None
Azure Linux 3.0 x64	cert-manager (CBL-Mariner) influxdb (CBL-Mariner) keda (CBL-Mariner) libcontainers-common (CBL-Mariner)	Unknown	Unknown		Base: 5.5 Temporal: 5.5 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N	1.12.12-3 2.7.3-5 2.14.0-2 20240213-2		None
CBL Mariner 2.0 ARM	cert-manager (CBL-Mariner) influxdb (CBL-Mariner) keda (CBL-Mariner) packer (CBL-Mariner)	Unknown	Unknown		Base: 5.5 Temporal: 5.5 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N	1.11.2-12 2.6.1-15 2.4.0-22 1.9.5-2		None
CBL Mariner 2.0 x64	cert-manager (CBL-Mariner) influxdb (CBL-Mariner) keda (CBL-Mariner) packer (CBL-Mariner)	Unknown	Unknown		Base: 5.5 Temporal: 5.5 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N	1.11.2-12 2.6.1-15 2.4.0-22 1.9.5-2		None

CVE ID	Acknowledgements
CVE-2024-6104	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2022-49043
MITRE
NVD

Issuing CNA: cve@mitre.org

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:8.1/TemporalScore:8.1

Base score metrics
Attack Vector	Local
Attack Complexity	High
Privileges Required	None
User Interaction	None
Scope	Changed
Confidentiality	High
Integrity	High
Availability	High

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
0.1 01-Feb-25

Information published.

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2022-49043
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
CBL Mariner 2.0 ARM	libxml2 (CBL-Mariner)	Unknown	Unknown	None	Base: 8.1 Temporal: 8.1 Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H	2.10.4-5	Unknown	None
CBL Mariner 2.0 x64	libxml2 (CBL-Mariner)	Unknown	Unknown	None	Base: 8.1 Temporal: 8.1 Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H	2.10.4-5	Unknown	None

CVE ID	Acknowledgements
CVE-2022-49043	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2022-47022
MITRE
NVD

Issuing CNA: cve@mitre.org

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:4.7/TemporalScore:4.7

Base score metrics
Attack Vector	Local
Attack Complexity	High
Privileges Required	Low
User Interaction	None
Scope	Unchanged
Confidentiality	None
Integrity	None
Availability	High

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
1.0 29-Aug-23

Information published.

1.1 01-Feb-25

Added openmpi to CBL-Mariner 2.0 Added hwloc to CBL-Mariner 2.0

1.2 11-Feb-25

Added hwloc to Azure Linux 3.0 Added openmpi to CBL-Mariner 2.0 Added hwloc to CBL-Mariner 2.0

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2022-47022
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Linux 3.0 ARM	hwloc (CBL-Mariner)	Unknown	Unknown	None	Base: 4.7 Temporal: 4.7 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H	2.9.2-2	Unknown	None
Azure Linux 3.0 x64	hwloc (CBL-Mariner)	Unknown	Unknown	None	Base: 4.7 Temporal: 4.7 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H	2.9.2-2	Unknown	None
CBL Mariner 2.0 ARM	hwloc (CBL-Mariner) openmpi (CBL-Mariner)	Unknown	Unknown		Base: 4.7 Temporal: 4.7 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H	2.5.0-2 4.1.4-12		None
CBL Mariner 2.0 x64	hwloc (CBL-Mariner) openmpi (CBL-Mariner)	Unknown	Unknown		Base: 4.7 Temporal: 4.7 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H	2.5.0-2 4.1.4-12		None

CVE ID	Acknowledgements
CVE-2022-47022	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2023-45288
MITRE
NVD

Issuing CNA: security@golang.org

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:7.5/TemporalScore:7.5

Base score metrics
Attack Vector	Network
Attack Complexity	Low
Privileges Required	None
User Interaction	None
Scope	Unchanged
Confidentiality	None
Integrity	None
Availability	High

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
1.0 08-Apr-24

Information published.

1.1 20-Apr-24

Information published.

1.2 30-Jun-24

Information published.

1.3 02-Jul-24

Information published.

1.4 12-Jul-24

Information published.

1.5 07-Aug-24

Information published.

1.6 08-Aug-24

Information published.

1.7 09-Aug-24

Information published.

1.8 10-Aug-24

Information published.

1.9 11-Aug-24

Information published.

2.0 12-Aug-24

Information published.

2.1 15-Aug-24

Information published.

2.2 16-Aug-24

Information published.

2.3 17-Aug-24

Information published.

2.4 18-Aug-24

Information published.

2.5 19-Aug-24

Information published.

2.6 20-Aug-24

Information published.

2.7 21-Aug-24

Information published.

2.8 22-Aug-24

Information published.

2.9 23-Aug-24

Information published.

3.0 24-Aug-24

Information published.

3.1 25-Aug-24

Information published.

3.2 26-Aug-24

Information published.

3.3 11-Sep-24

Information published.

3.4 13-Sep-24

Information published.

3.5 14-Sep-24

Information published.

3.6 15-Sep-24

Information published.

3.7 16-Sep-24

Information published.

3.8 17-Sep-24

Information published.

3.9 18-Sep-24

Information published.

4.0 19-Sep-24

Information published.

4.1 20-Sep-24

Information published.

4.2 21-Sep-24

Information published.

4.3 22-Sep-24

Information published.

4.4 23-Sep-24

Information published.

4.5 24-Sep-24

Information published.

4.6 25-Sep-24

Information published.

4.7 26-Sep-24

Information published.

4.8 27-Sep-24

Information published.

4.9 28-Sep-24

Information published.

5.0 29-Sep-24

Information published.

5.1 30-Sep-24

Information published.

5.2 01-Oct-24

Information published.

5.3 02-Oct-24

Information published.

5.4 03-Oct-24

Information published.

5.5 04-Oct-24

Information published.

5.6 05-Oct-24

Information published.

5.7 06-Oct-24

Information published.

5.8 07-Oct-24

Information published.

5.9 09-Oct-24

Information published.

6.0 10-Oct-24

Information published.

6.1 11-Oct-24

Information published.

6.2 12-Oct-24

Information published.

6.3 13-Oct-24

Information published.

6.4 14-Oct-24

Information published.

6.5 15-Oct-24

Added nmi to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

6.6 16-Oct-24

6.7 17-Oct-24

6.8 18-Oct-24

6.9 19-Oct-24

7.0 20-Oct-24

7.1 21-Oct-24

7.2 22-Oct-24

7.3 23-Oct-24

7.4 24-Oct-24

7.5 25-Oct-24

7.6 26-Oct-24

7.7 27-Oct-24

7.8 28-Oct-24

7.9 29-Oct-24

8.0 30-Oct-24

8.1 31-Oct-24

8.2 01-Nov-24

8.3 02-Nov-24

8.4 04-Nov-24

8.5 05-Nov-24

8.6 06-Nov-24

8.7 07-Nov-24

8.8 08-Nov-24

8.9 09-Nov-24

Added nmi to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

9.0 10-Nov-24

Added nmi to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

9.1 11-Nov-24

Added nmi to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

9.2 12-Nov-24

Added nmi to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

9.3 13-Nov-24

9.4 14-Nov-24

Added nmi to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

9.5 15-Nov-24

Added nmi to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

9.6 16-Nov-24

Added nmi to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

9.7 17-Nov-24

Added nmi to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

9.8 18-Nov-24

Added nmi to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

9.9 19-Nov-24

Added nmi to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

10.0 20-Nov-24

Added nmi to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

10.1 21-Nov-24

Added nmi to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

10.2 23-Nov-24

Added nmi to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

10.3 24-Nov-24

Added nmi to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

10.4 25-Nov-24

Added nmi to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

10.5 26-Nov-24

Added nmi to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

10.6 27-Nov-24

Added nmi to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

10.7 28-Nov-24

Added nmi to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

10.8 29-Nov-24

Added nmi to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

10.9 30-Nov-24

Added nmi to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

11.0 01-Dec-24

Added nmi to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

11.1 02-Dec-24

Added nmi to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

11.2 03-Dec-24

Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added nmi to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

11.3 04-Dec-24

Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added nmi to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

11.4 05-Dec-24

Added nmi to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

11.5 07-Dec-24

Added nmi to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added multus to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

11.6 08-Dec-24

Added nmi to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added multus to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

11.7 09-Dec-24

Added nmi to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added multus to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

11.8 10-Dec-24

Added nmi to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added multus to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

11.9 11-Dec-24

Added nmi to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added multus to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

12.0 12-Dec-24

Added nmi to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added multus to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

12.1 13-Dec-24

Added nmi to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added gh to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

12.2 14-Dec-24

Added nmi to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added gh to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

12.3 15-Dec-24

Added nmi to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added gh to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

12.4 16-Dec-24

Added nmi to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added gh to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

12.5 17-Dec-24

Added nmi to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added gh to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

12.6 18-Dec-24

Added nmi to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added gh to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

12.7 19-Dec-24

Added nmi to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added gh to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

12.8 20-Dec-24

Added nmi to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added gh to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

12.9 21-Dec-24

Added nmi to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added gh to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

13.0 22-Dec-24

Added nmi to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added gh to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

13.1 23-Dec-24

Added nmi to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added gh to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

13.2 24-Dec-24

Added nmi to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added gh to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

13.3 25-Dec-24

Added nmi to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added gh to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

13.4 26-Dec-24

Added nmi to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added gh to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

13.5 27-Dec-24

Added nmi to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added gh to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

13.6 28-Dec-24

Added nmi to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added gh to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

13.7 29-Dec-24

Added nmi to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added gh to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

13.8 30-Dec-24

Added nmi to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added gh to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

13.9 31-Dec-24

Added nmi to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added gh to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

14.0 01-Jan-25

Added nmi to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added gh to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

14.1 02-Jan-25

Added nmi to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added gh to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

14.2 03-Jan-25

Added nmi to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added gh to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

14.3 04-Jan-25

Added nmi to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added gh to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

14.4 05-Jan-25

Added nmi to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added gh to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

14.5 06-Jan-25

Added nmi to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added gh to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

14.6 07-Jan-25

Added nmi to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added gh to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

14.7 08-Jan-25

Added nmi to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added gh to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

14.8 09-Jan-25

Added nmi to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added gh to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

14.9 10-Jan-25

Added nmi to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added gh to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

15.0 11-Jan-25

Added nmi to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added gh to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

15.1 12-Jan-25

Added nmi to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added gh to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

15.2 13-Jan-25

Added nmi to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added gh to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

15.3 15-Jan-25

Added nmi to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added gh to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

15.4 16-Jan-25

Added nmi to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added gh to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

15.5 17-Jan-25

Added nmi to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added gh to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

15.6 18-Jan-25

Added nmi to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added gh to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

15.7 19-Jan-25

Added nmi to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added gh to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

15.8 20-Jan-25

Added nmi to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added gh to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

15.9 21-Jan-25

Added nmi to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added gh to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

16.0 22-Jan-25

Added nmi to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added gh to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

16.1 23-Jan-25

Added nmi to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added gh to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

16.2 24-Jan-25

Added nmi to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added gh to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

16.3 25-Jan-25

Added nmi to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added gh to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

16.4 27-Jan-25

Added nmi to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added gh to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

16.5 28-Jan-25

Added nmi to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added gh to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

16.6 29-Jan-25

Added nmi to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added gh to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

16.7 30-Jan-25

Added nmi to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added gh to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

16.8 01-Feb-25

Added nmi to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added git-lfs to Azure Linux 3.0 Added skopeo to Azure Linux 3.0 Added gh to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

16.9 02-Feb-25

Added nmi to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added git-lfs to Azure Linux 3.0 Added skopeo to Azure Linux 3.0 Added gh to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

17.0 03-Feb-25

Added nmi to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added git-lfs to Azure Linux 3.0 Added skopeo to Azure Linux 3.0 Added gh to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

17.1 04-Feb-25

Added nmi to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added git-lfs to Azure Linux 3.0 Added skopeo to Azure Linux 3.0 Added gh to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

17.2 05-Feb-25

Added nmi to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added git-lfs to Azure Linux 3.0 Added skopeo to Azure Linux 3.0 Added gh to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

17.3 07-Feb-25

Added nmi to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added git-lfs to Azure Linux 3.0 Added skopeo to Azure Linux 3.0 Added gh to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

17.4 08-Feb-25

Added nmi to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added git-lfs to Azure Linux 3.0 Added skopeo to Azure Linux 3.0 Added gh to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

17.5 09-Feb-25

Added nmi to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added git-lfs to Azure Linux 3.0 Added skopeo to Azure Linux 3.0 Added gh to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

17.6 10-Feb-25

Added nmi to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added git-lfs to Azure Linux 3.0 Added skopeo to Azure Linux 3.0 Added gh to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

17.7 11-Feb-25

Added nmi to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added moby-engine to CBL-Mariner 2.0 Added prometheus to CBL-Mariner 2.0 Added azcopy to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added helm to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-cli to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added node-problem-detector to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added sriov-network-device-plugin to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added application-gateway-kubernetes-ingress to Azure Linux 3.0 Added etcd to Azure Linux 3.0 Added kata-containers to Azure Linux 3.0 Added kata-containers-cc to Azure Linux 3.0 Added git-lfs to Azure Linux 3.0 Added skopeo to Azure Linux 3.0 Added gh to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added prometheus to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added jx to Azure Linux 3.0 Added azcopy to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added cri-tools to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added helm to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added libcontainers-common to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added vitess to Azure Linux 3.0

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2023-45288
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Linux 3.0 ARM	application-gateway-kubernetes-ingress (CBL-Mariner) azcopy (CBL-Mariner) blobfuse2 (CBL-Mariner) cert-manager (CBL-Mariner)	Unknown	Unknown		Base: 7.5 Temporal: 7.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	1.7.7-1 10.25.1-1 2.3.0-1 1.12.12-1		None
Azure Linux 3.0 x64	application-gateway-kubernetes-ingress (CBL-Mariner) azcopy (CBL-Mariner) blobfuse2 (CBL-Mariner) cert-manager (CBL-Mariner)	Unknown	Unknown		Base: 7.5 Temporal: 7.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	1.7.7-1 10.25.1-1 2.3.0-1 1.12.12-1		None
CBL Mariner 2.0 ARM	azcopy (CBL-Mariner) blobfuse2 (CBL-Mariner) cert-manager (CBL-Mariner) coredns (CBL-Mariner)	Unknown	Unknown		Base: 7.5 Temporal: 7.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	10.25.1-1 2.1.2-3 1.11.2-9 1.11.1-8		None
CBL Mariner 2.0 x64	azcopy (CBL-Mariner) blobfuse2 (CBL-Mariner) cert-manager (CBL-Mariner) coredns (CBL-Mariner)	Unknown	Unknown		Base: 7.5 Temporal: 7.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	10.25.1-1 2.1.2-3 1.11.2-9 1.11.1-8		None

CVE ID	Acknowledgements
CVE-2023-45288	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2007-4559
MITRE
NVD

Issuing CNA: cve@mitre.org

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:9.8/TemporalScore:9.8

Base score metrics
Attack Vector	Network
Attack Complexity	Low
Privileges Required	None
User Interaction	None
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
1.0 25-Sep-20

Information published.

1.1 16-Dec-21

Added python3 to CBL-Mariner 2.0

1.7 30-Jun-24

Information published.

1.8 08-Jul-24

Information published.

1.9 09-Jul-24

Information published.

2.0 10-Jul-24

Information published.

2.1 12-Jul-24

Information published.

2.2 13-Jul-24

Information published.

2.3 14-Jul-24

Information published.

2.4 15-Jul-24

Information published.

2.5 16-Jul-24

Information published.

2.6 17-Jul-24

Information published.

2.7 19-Jul-24

Information published.

2.8 20-Jul-24

Information published.

2.9 21-Jul-24

Information published.

3.0 22-Jul-24

Information published.

3.1 23-Jul-24

Information published.

3.2 24-Jul-24

Information published.

3.3 25-Jul-24

Information published.

3.4 26-Jul-24

Information published.

3.5 27-Jul-24

Information published.

3.6 28-Jul-24

Information published.

3.7 29-Jul-24

Information published.

3.8 02-Aug-24

Information published.

3.9 03-Aug-24

Information published.

4.0 04-Aug-24

Information published.

4.1 05-Aug-24

Information published.

4.2 06-Aug-24

Information published.

4.3 07-Aug-24

Information published.

4.4 08-Aug-24

Information published.

4.5 09-Aug-24

Information published.

4.6 10-Aug-24

Information published.

4.7 11-Aug-24

Information published.

4.8 12-Aug-24

Information published.

4.9 15-Aug-24

Information published.

5.0 16-Aug-24

Information published.

5.1 17-Aug-24

Information published.

5.2 18-Aug-24

Information published.

5.3 19-Aug-24

Information published.

5.4 20-Aug-24

Information published.

5.5 21-Aug-24

Information published.

5.6 22-Aug-24

Information published.

5.7 23-Aug-24

Information published.

5.8 24-Aug-24

Information published.

5.9 25-Aug-24

Information published.

6.0 26-Aug-24

Information published.

6.1 27-Aug-24

Information published.

6.2 28-Aug-24

Information published.

6.3 29-Aug-24

Information published.

6.4 30-Aug-24

Information published.

6.5 31-Aug-24

Information published.

6.6 01-Sep-24

Information published.

6.7 02-Sep-24

Information published.

6.8 03-Sep-24

Information published.

6.9 05-Sep-24

Information published.

7.0 06-Sep-24

Information published.

7.1 07-Sep-24

Information published.

7.2 08-Sep-24

Information published.

7.3 11-Sep-24

Information published.

7.4 12-Sep-24

Information published.

7.5 13-Sep-24

Information published.

7.6 14-Sep-24

Information published.

7.7 15-Sep-24

Information published.

7.8 16-Sep-24

Information published.

7.9 17-Sep-24

Information published.

8.0 18-Sep-24

Information published.

8.1 19-Sep-24

Information published.

8.2 20-Sep-24

Information published.

8.3 21-Sep-24

Information published.

8.4 22-Sep-24

Information published.

8.5 23-Sep-24

Information published.

8.6 24-Sep-24

Information published.

8.7 25-Sep-24

Information published.

8.8 26-Sep-24

Information published.

8.9 27-Sep-24

Information published.

9.0 28-Sep-24

Information published.

9.1 29-Sep-24

Information published.

9.2 30-Sep-24

Information published.

9.3 01-Oct-24

Information published.

9.4 02-Oct-24

Information published.

9.5 03-Oct-24

Information published.

9.6 04-Oct-24

Information published.

9.7 05-Oct-24

Information published.

9.8 06-Oct-24

Information published.

9.9 07-Oct-24

Information published.

10.0 08-Oct-24

Information published.

10.1 09-Oct-24

Information published.

10.2 10-Oct-24

Information published.

10.3 11-Oct-24

Information published.

10.4 12-Oct-24

Information published.

10.5 13-Oct-24

Information published.

10.6 14-Oct-24

Information published.

10.7 15-Oct-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

10.8 16-Oct-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

10.9 17-Oct-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

11.0 18-Oct-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

11.1 19-Oct-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

11.2 20-Oct-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

11.3 21-Oct-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

11.4 22-Oct-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

11.5 23-Oct-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

11.6 24-Oct-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

11.7 25-Oct-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

11.8 26-Oct-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

11.9 27-Oct-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

12.0 28-Oct-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

12.1 29-Oct-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

12.2 30-Oct-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

12.3 31-Oct-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

12.4 01-Nov-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

12.5 02-Nov-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

12.6 04-Nov-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

12.7 05-Nov-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

12.8 06-Nov-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

12.9 07-Nov-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

13.0 08-Nov-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

13.1 09-Nov-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

13.2 10-Nov-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

13.3 11-Nov-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

13.4 12-Nov-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

13.5 13-Nov-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

13.6 14-Nov-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

13.7 15-Nov-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

13.8 16-Nov-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

13.9 17-Nov-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

14.0 18-Nov-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

14.1 19-Nov-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

14.2 20-Nov-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

14.3 21-Nov-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

14.4 23-Nov-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

14.5 24-Nov-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

14.6 25-Nov-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

14.7 26-Nov-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

14.8 27-Nov-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

14.9 28-Nov-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

15.0 29-Nov-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

15.1 30-Nov-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

15.2 01-Dec-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

15.3 02-Dec-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

15.4 03-Dec-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

15.5 04-Dec-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

15.6 05-Dec-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

15.7 07-Dec-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

15.8 08-Dec-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

15.9 09-Dec-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

16.0 10-Dec-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

16.1 11-Dec-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

16.2 12-Dec-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

16.3 13-Dec-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

16.4 14-Dec-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

16.5 15-Dec-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

16.6 16-Dec-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

16.7 17-Dec-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

16.8 18-Dec-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

16.9 19-Dec-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

17.0 20-Dec-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

17.1 21-Dec-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

17.2 22-Dec-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

17.3 23-Dec-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

17.4 24-Dec-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

17.5 25-Dec-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

17.6 26-Dec-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

17.7 27-Dec-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

17.8 28-Dec-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

17.9 29-Dec-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

18.0 30-Dec-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

18.1 31-Dec-24

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

18.2 01-Jan-25

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

18.3 02-Jan-25

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

18.4 03-Jan-25

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

18.5 04-Jan-25

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

18.6 05-Jan-25

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

18.7 06-Jan-25

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

18.8 07-Jan-25

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

18.9 08-Jan-25

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

19.0 09-Jan-25

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

19.1 10-Jan-25

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

19.2 11-Jan-25

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

19.3 12-Jan-25

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

19.4 13-Jan-25

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

19.5 15-Jan-25

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

19.6 16-Jan-25

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

19.7 17-Jan-25

Added python3 to CBL-Mariner 2.0 Added python2 to CBL-Mariner 1.0

19.8 18-Jan-25

Added python3 to CBL-Mariner 2.0

19.9 19-Jan-25

Added python3 to CBL-Mariner 2.0

20.0 20-Jan-25

Added python3 to CBL-Mariner 2.0

20.1 21-Jan-25

Added python3 to CBL-Mariner 2.0

20.2 22-Jan-25

Added python3 to CBL-Mariner 2.0

20.3 23-Jan-25

Added python3 to CBL-Mariner 2.0

20.4 24-Jan-25

Added python3 to CBL-Mariner 2.0

20.5 25-Jan-25

Added python3 to CBL-Mariner 2.0

20.6 27-Jan-25

Added python3 to CBL-Mariner 2.0

20.7 28-Jan-25

Added python3 to CBL-Mariner 2.0

20.8 29-Jan-25

Added python3 to CBL-Mariner 2.0

20.9 30-Jan-25

Added python3 to CBL-Mariner 2.0

21.0 01-Feb-25

Added python3 to CBL-Mariner 2.0

21.1 02-Feb-25

Added python3 to CBL-Mariner 2.0

21.2 03-Feb-25

Added python3 to CBL-Mariner 2.0

21.3 04-Feb-25

Added python3 to CBL-Mariner 2.0

21.4 05-Feb-25

Added python3 to CBL-Mariner 2.0

21.5 07-Feb-25

Added python3 to CBL-Mariner 2.0

21.6 08-Feb-25

Added python3 to CBL-Mariner 2.0

21.7 09-Feb-25

Added python3 to CBL-Mariner 2.0

21.8 10-Feb-25

Added python3 to CBL-Mariner 2.0

21.9 11-Feb-25

Added python3 to CBL-Mariner 2.0

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2007-4559
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
CBL Mariner 1.0 ARM	python2 (CBL-Mariner)	Unknown	Unknown	None	Base: 9.8 Temporal: 9.8 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	2.7.18-5	Unknown	None
CBL Mariner 1.0 x64	python2 (CBL-Mariner)	Unknown	Unknown	None	Base: 9.8 Temporal: 9.8 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	2.7.18-5	Unknown	None
CBL Mariner 2.0 ARM	python3 (CBL-Mariner)	Unknown	Unknown	None	Base: 9.8 Temporal: 9.8 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9.19-1	Unknown	None
CBL Mariner 2.0 x64	python3 (CBL-Mariner)	Unknown	Unknown	None	Base: 9.8 Temporal: 9.8 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9.19-1	Unknown	None

CVE ID	Acknowledgements
CVE-2007-4559	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2017-18207
MITRE
NVD

Issuing CNA: cve@mitre.org

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:6.5/TemporalScore:6.5

Base score metrics
Attack Vector	Network
Attack Complexity	Low
Privileges Required	None
User Interaction	Required
Scope	Unchanged
Confidentiality	None
Integrity	None
Availability	High

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
1.0 18-Aug-20

Information published.

1.6 30-Jun-24

Information published.

1.7 08-Jul-24

Information published.

1.8 09-Jul-24

Information published.

1.9 10-Jul-24

Information published.

2.0 12-Jul-24

Information published.

2.1 13-Jul-24

Information published.

2.2 14-Jul-24

Information published.

2.3 15-Jul-24

Information published.

2.4 16-Jul-24

Information published.

2.5 17-Jul-24

Information published.

2.6 19-Jul-24

Information published.

2.7 20-Jul-24

Information published.

2.8 21-Jul-24

Information published.

2.9 22-Jul-24

Information published.

3.0 23-Jul-24

Information published.

3.1 24-Jul-24

Information published.

3.2 25-Jul-24

Information published.

3.3 26-Jul-24

Information published.

3.4 27-Jul-24

Information published.

3.5 28-Jul-24

Information published.

3.6 29-Jul-24

Information published.

3.7 02-Aug-24

Information published.

3.8 03-Aug-24

Information published.

3.9 04-Aug-24

Information published.

4.0 05-Aug-24

Information published.

4.1 06-Aug-24

Information published.

4.2 07-Aug-24

Information published.

4.3 08-Aug-24

Information published.

4.4 09-Aug-24

Information published.

4.5 10-Aug-24

Information published.

4.6 11-Aug-24

Information published.

4.7 12-Aug-24

Information published.

4.8 15-Aug-24

Information published.

4.9 16-Aug-24

Information published.

5.0 17-Aug-24

Information published.

5.1 18-Aug-24

Information published.

5.2 19-Aug-24

Information published.

5.3 20-Aug-24

Information published.

5.4 21-Aug-24

Information published.

5.5 22-Aug-24

Information published.

5.6 23-Aug-24

Information published.

5.7 24-Aug-24

Information published.

5.8 25-Aug-24

Information published.

5.9 26-Aug-24

Information published.

6.0 27-Aug-24

Information published.

6.1 28-Aug-24

Information published.

6.2 29-Aug-24

Information published.

6.3 30-Aug-24

Information published.

6.4 31-Aug-24

Information published.

6.5 01-Sep-24

Information published.

6.6 02-Sep-24

Information published.

6.7 03-Sep-24

Information published.

6.8 05-Sep-24

Information published.

6.9 06-Sep-24

Information published.

7.0 07-Sep-24

Information published.

7.1 08-Sep-24

Information published.

7.2 11-Sep-24

Information published.

7.3 12-Sep-24

Information published.

7.4 13-Sep-24

Information published.

7.5 14-Sep-24

Information published.

7.6 15-Sep-24

Information published.

7.7 16-Sep-24

Information published.

7.8 17-Sep-24

Information published.

7.9 18-Sep-24

Information published.

8.0 19-Sep-24

Information published.

8.1 20-Sep-24

Information published.

8.2 21-Sep-24

Information published.

8.3 22-Sep-24

Information published.

8.4 23-Sep-24

Information published.

8.5 24-Sep-24

Information published.

8.6 25-Sep-24

Information published.

8.7 26-Sep-24

Information published.

8.8 27-Sep-24

Information published.

8.9 28-Sep-24

Information published.

9.0 29-Sep-24

Information published.

9.1 30-Sep-24

Information published.

9.2 01-Oct-24

Information published.

9.3 02-Oct-24

Information published.

9.4 03-Oct-24

Information published.

9.5 04-Oct-24

Information published.

9.6 05-Oct-24

Information published.

9.7 06-Oct-24

Information published.

9.8 07-Oct-24

Information published.

9.9 08-Oct-24

Information published.

10.0 09-Oct-24

Information published.

10.1 10-Oct-24

Information published.

10.2 11-Oct-24

Information published.

10.3 12-Oct-24

Information published.

10.4 13-Oct-24

Information published.

10.5 14-Oct-24

Information published.

10.6 15-Oct-24

Added python2 to CBL-Mariner 1.0

10.7 16-Oct-24

Added python2 to CBL-Mariner 1.0

10.8 17-Oct-24

Added python2 to CBL-Mariner 1.0

10.9 18-Oct-24

Added python2 to CBL-Mariner 1.0

11.0 19-Oct-24

Added python2 to CBL-Mariner 1.0

11.1 20-Oct-24

Added python2 to CBL-Mariner 1.0

11.2 21-Oct-24

Added python2 to CBL-Mariner 1.0

11.3 22-Oct-24

Added python2 to CBL-Mariner 1.0

11.4 23-Oct-24

Added python2 to CBL-Mariner 1.0

11.5 24-Oct-24

Added python2 to CBL-Mariner 1.0

11.6 25-Oct-24

Added python2 to CBL-Mariner 1.0

11.7 26-Oct-24

Added python2 to CBL-Mariner 1.0

11.8 27-Oct-24

Added python2 to CBL-Mariner 1.0

11.9 28-Oct-24

Added python2 to CBL-Mariner 1.0

12.0 29-Oct-24

Added python2 to CBL-Mariner 1.0

12.1 30-Oct-24

Added python2 to CBL-Mariner 1.0

12.2 31-Oct-24

Added python2 to CBL-Mariner 1.0

12.3 01-Nov-24

Added python2 to CBL-Mariner 1.0

12.4 02-Nov-24

Added python2 to CBL-Mariner 1.0

12.5 04-Nov-24

Added python2 to CBL-Mariner 1.0

12.6 05-Nov-24

Added python2 to CBL-Mariner 1.0

12.7 06-Nov-24

Added python2 to CBL-Mariner 1.0

12.8 07-Nov-24

Added python2 to CBL-Mariner 1.0

12.9 08-Nov-24

Added python2 to CBL-Mariner 1.0

13.0 09-Nov-24

Added python2 to CBL-Mariner 1.0

13.1 10-Nov-24

Added python2 to CBL-Mariner 1.0

13.2 11-Nov-24

Added python2 to CBL-Mariner 1.0

13.3 12-Nov-24

Added python2 to CBL-Mariner 1.0

13.4 13-Nov-24

Added python2 to CBL-Mariner 1.0

13.5 14-Nov-24

Added python2 to CBL-Mariner 1.0

13.6 15-Nov-24

Added python2 to CBL-Mariner 1.0

13.7 16-Nov-24

Added python2 to CBL-Mariner 1.0

13.8 17-Nov-24

Added python2 to CBL-Mariner 1.0

13.9 18-Nov-24

Added python2 to CBL-Mariner 1.0

14.0 19-Nov-24

Added python2 to CBL-Mariner 1.0

14.1 20-Nov-24

Added python2 to CBL-Mariner 1.0

14.2 21-Nov-24

Added python2 to CBL-Mariner 1.0

14.3 23-Nov-24

Added python2 to CBL-Mariner 1.0

14.4 24-Nov-24

Added python2 to CBL-Mariner 1.0

14.5 25-Nov-24

Added python2 to CBL-Mariner 1.0

14.6 26-Nov-24

Added python2 to CBL-Mariner 1.0

14.7 27-Nov-24

Added python2 to CBL-Mariner 1.0

14.8 28-Nov-24

Added python2 to CBL-Mariner 1.0

14.9 29-Nov-24

Added python2 to CBL-Mariner 1.0

15.0 30-Nov-24

Added python2 to CBL-Mariner 1.0

15.1 01-Dec-24

Added python2 to CBL-Mariner 1.0

15.2 02-Dec-24

Added python2 to CBL-Mariner 1.0

15.3 03-Dec-24

Added python2 to CBL-Mariner 1.0

15.4 04-Dec-24

Added python2 to CBL-Mariner 1.0

15.5 05-Dec-24

Added python2 to CBL-Mariner 1.0

15.6 07-Dec-24

Added python2 to CBL-Mariner 1.0

15.7 08-Dec-24

Added python2 to CBL-Mariner 1.0

15.8 09-Dec-24

Added python2 to CBL-Mariner 1.0

15.9 10-Dec-24

Added python2 to CBL-Mariner 1.0

16.0 11-Dec-24

Added python2 to CBL-Mariner 1.0

16.1 12-Dec-24

Added python2 to CBL-Mariner 1.0

16.2 13-Dec-24

Added python2 to CBL-Mariner 1.0

16.3 14-Dec-24

Added python2 to CBL-Mariner 1.0

16.4 15-Dec-24

Added python2 to CBL-Mariner 1.0

16.5 16-Dec-24

Added python2 to CBL-Mariner 1.0

16.6 17-Dec-24

Added python2 to CBL-Mariner 1.0

16.7 18-Dec-24

Added python2 to CBL-Mariner 1.0

16.8 19-Dec-24

Added python2 to CBL-Mariner 1.0

16.9 20-Dec-24

Added python2 to CBL-Mariner 1.0

17.0 21-Dec-24

Added python2 to CBL-Mariner 1.0

17.1 22-Dec-24

Added python2 to CBL-Mariner 1.0

17.2 23-Dec-24

Added python2 to CBL-Mariner 1.0

17.3 24-Dec-24

Added python2 to CBL-Mariner 1.0

17.4 25-Dec-24

Added python2 to CBL-Mariner 1.0

17.5 26-Dec-24

Added python2 to CBL-Mariner 1.0

17.6 27-Dec-24

Added python2 to CBL-Mariner 1.0

17.7 28-Dec-24

Added python2 to CBL-Mariner 1.0

17.8 29-Dec-24

Added python2 to CBL-Mariner 1.0

17.9 30-Dec-24

Added python2 to CBL-Mariner 1.0

18.0 31-Dec-24

Added python2 to CBL-Mariner 1.0

18.1 01-Jan-25

Added python2 to CBL-Mariner 1.0

18.2 02-Jan-25

Added python2 to CBL-Mariner 1.0

18.3 03-Jan-25

Added python2 to CBL-Mariner 1.0

18.4 04-Jan-25

Added python2 to CBL-Mariner 1.0

18.5 05-Jan-25

Added python2 to CBL-Mariner 1.0

18.6 06-Jan-25

Added python2 to CBL-Mariner 1.0

18.7 07-Jan-25

Added python2 to CBL-Mariner 1.0

18.8 08-Jan-25

Added python2 to CBL-Mariner 1.0

18.9 09-Jan-25

Added python2 to CBL-Mariner 1.0

19.0 10-Jan-25

Added python2 to CBL-Mariner 1.0

19.1 11-Jan-25

Added python2 to CBL-Mariner 1.0

19.2 12-Jan-25

Added python2 to CBL-Mariner 1.0

19.3 13-Jan-25

Added python2 to CBL-Mariner 1.0

19.4 15-Jan-25

Added python2 to CBL-Mariner 1.0

19.5 16-Jan-25

Added python2 to CBL-Mariner 1.0

19.6 17-Jan-25

Added python2 to CBL-Mariner 1.0

19.7 18-Jan-25

Added python2 to CBL-Mariner 1.0

19.8 19-Jan-25

Added python2 to CBL-Mariner 1.0

19.9 20-Jan-25

Added python2 to CBL-Mariner 1.0

20.0 21-Jan-25

Added python2 to CBL-Mariner 1.0

20.1 22-Jan-25

Added python2 to CBL-Mariner 1.0

20.2 23-Jan-25

Added python2 to CBL-Mariner 1.0

20.3 24-Jan-25

Added python2 to CBL-Mariner 1.0

20.4 25-Jan-25

Added python2 to CBL-Mariner 1.0

20.5 27-Jan-25

Added python2 to CBL-Mariner 1.0

20.6 28-Jan-25

Added python2 to CBL-Mariner 1.0

20.7 29-Jan-25

Added python2 to CBL-Mariner 1.0

20.8 30-Jan-25

Added python2 to CBL-Mariner 1.0

20.9 01-Feb-25

Added python2 to CBL-Mariner 1.0

21.0 02-Feb-25

Added python2 to CBL-Mariner 1.0

21.1 03-Feb-25

Added python2 to CBL-Mariner 1.0

21.2 04-Feb-25

Added python2 to CBL-Mariner 1.0

21.3 05-Feb-25

Added python2 to CBL-Mariner 1.0

21.4 07-Feb-25

Added python2 to CBL-Mariner 1.0

21.5 08-Feb-25

Added python2 to CBL-Mariner 1.0

21.6 09-Feb-25

Added python2 to CBL-Mariner 1.0

21.7 10-Feb-25

Added python2 to CBL-Mariner 1.0

21.8 11-Feb-25

Added python2 to CBL-Mariner 1.0

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2017-18207
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
CBL Mariner 1.0 ARM	python2 (CBL-Mariner)	Unknown	Unknown	None	Base: 6.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H	2.7.18-5	Unknown	None
CBL Mariner 1.0 x64	python2 (CBL-Mariner)	Unknown	Unknown	None	Base: 6.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H	2.7.18-5	Unknown	None
CBL Mariner 2.0 ARM		Unknown	Unknown	None	Base: 6.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H	Unknown	Unknown	None
CBL Mariner 2.0 x64		Unknown	Unknown	None	Base: 6.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H	Unknown	Unknown	None

CVE ID	Acknowledgements
CVE-2017-18207	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2024-52338
MITRE
NVD

Issuing CNA: security@apache.org

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:9.8/TemporalScore:9.8

Base score metrics
Attack Vector	Network
Attack Complexity	Low
Privileges Required	None
User Interaction	None
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
0.1 13-Dec-24

Information published.

0.2 14-Dec-24

Information published.

0.3 15-Dec-24

Information published.

0.4 16-Dec-24

Information published.

0.5 17-Dec-24

Information published.

0.6 18-Dec-24

Information published.

0.7 19-Dec-24

Information published.

0.8 20-Dec-24

Information published.

0.9 21-Dec-24

Information published.

1.0 22-Dec-24

Information published.

1.1 23-Dec-24

Added libarrow to Azure Linux 3.0

1.2 24-Dec-24

Added libarrow to Azure Linux 3.0

1.3 25-Dec-24

Added libarrow to Azure Linux 3.0

1.4 26-Dec-24

Added libarrow to Azure Linux 3.0

1.5 27-Dec-24

Added libarrow to Azure Linux 3.0

1.6 28-Dec-24

Added libarrow to Azure Linux 3.0

1.7 29-Dec-24

Added libarrow to Azure Linux 3.0

1.8 30-Dec-24

Added libarrow to Azure Linux 3.0

1.9 31-Dec-24

Added libarrow to Azure Linux 3.0

2.0 01-Jan-25

Added libarrow to Azure Linux 3.0

2.1 02-Jan-25

Added libarrow to Azure Linux 3.0

2.2 03-Jan-25

Added libarrow to Azure Linux 3.0

2.3 04-Jan-25

Added libarrow to Azure Linux 3.0

2.4 05-Jan-25

Added libarrow to Azure Linux 3.0

2.5 06-Jan-25

Added libarrow to Azure Linux 3.0

2.6 07-Jan-25

Added libarrow to Azure Linux 3.0

2.7 08-Jan-25

Added libarrow to Azure Linux 3.0

2.8 09-Jan-25

Added libarrow to Azure Linux 3.0

2.9 10-Jan-25

Added libarrow to Azure Linux 3.0

3.0 11-Jan-25

Added libarrow to Azure Linux 3.0

3.1 12-Jan-25

Added libarrow to Azure Linux 3.0

3.2 13-Jan-25

Added libarrow to Azure Linux 3.0

3.3 15-Jan-25

Added libarrow to Azure Linux 3.0

3.4 16-Jan-25

Added libarrow to Azure Linux 3.0

3.5 17-Jan-25

Added libarrow to Azure Linux 3.0

3.6 18-Jan-25

Added libarrow to Azure Linux 3.0

3.7 19-Jan-25

Added libarrow to Azure Linux 3.0

3.8 20-Jan-25

Added libarrow to Azure Linux 3.0

3.9 21-Jan-25

Added libarrow to Azure Linux 3.0

4.0 22-Jan-25

Added libarrow to Azure Linux 3.0

4.1 23-Jan-25

Added libarrow to Azure Linux 3.0

4.2 24-Jan-25

Added libarrow to Azure Linux 3.0

4.3 25-Jan-25

Added libarrow to Azure Linux 3.0

4.4 27-Jan-25

Added libarrow to Azure Linux 3.0

4.5 28-Jan-25

Added libarrow to Azure Linux 3.0

4.6 29-Jan-25

Added libarrow to Azure Linux 3.0

4.7 30-Jan-25

Added libarrow to Azure Linux 3.0

4.8 01-Feb-25

Added libarrow to Azure Linux 3.0

4.9 02-Feb-25

Added libarrow to Azure Linux 3.0

5.0 03-Feb-25

Added libarrow to Azure Linux 3.0

5.1 04-Feb-25

Added libarrow to Azure Linux 3.0

5.2 05-Feb-25

Added libarrow to Azure Linux 3.0

5.3 07-Feb-25

Added libarrow to Azure Linux 3.0

5.4 08-Feb-25

Added libarrow to Azure Linux 3.0

5.5 09-Feb-25

Added libarrow to Azure Linux 3.0

5.6 10-Feb-25

Added libarrow to Azure Linux 3.0

5.7 11-Feb-25

Added libarrow to Azure Linux 3.0

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2024-52338
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Linux 3.0 ARM	libarrow (CBL-Mariner)	Unknown	Unknown	None	Base: 9.8 Temporal: 9.8 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	15.0.0-7	Unknown	None
Azure Linux 3.0 x64	libarrow (CBL-Mariner)	Unknown	Unknown	None	Base: 9.8 Temporal: 9.8 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	15.0.0-7	Unknown	None

CVE ID	Acknowledgements
CVE-2024-52338	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2019-20907
MITRE
NVD

Issuing CNA: cve@mitre.org

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:7.5/TemporalScore:7.5

Base score metrics
Attack Vector	Network
Attack Complexity	Low
Privileges Required	None
User Interaction	None
Scope	Unchanged
Confidentiality	None
Integrity	None
Availability	High

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
1.0 18-Aug-20

Information published.

1.6 30-Jun-24

Information published.

1.7 08-Jul-24

Information published.

1.8 09-Jul-24

Information published.

1.9 10-Jul-24

Information published.

2.0 12-Jul-24

Information published.

2.1 13-Jul-24

Information published.

2.2 14-Jul-24

Information published.

2.3 15-Jul-24

Information published.

2.4 16-Jul-24

Information published.

2.5 17-Jul-24

Information published.

2.6 19-Jul-24

Information published.

2.7 20-Jul-24

Information published.

2.8 21-Jul-24

Information published.

2.9 22-Jul-24

Information published.

3.0 23-Jul-24

Information published.

3.1 24-Jul-24

Information published.

3.2 25-Jul-24

Information published.

3.3 26-Jul-24

Information published.

3.4 27-Jul-24

Information published.

3.5 28-Jul-24

Information published.

3.6 29-Jul-24

Information published.

3.7 02-Aug-24

Information published.

3.8 03-Aug-24

Information published.

3.9 04-Aug-24

Information published.

4.0 05-Aug-24

Information published.

4.1 06-Aug-24

Information published.

4.2 07-Aug-24

Information published.

4.3 08-Aug-24

Information published.

4.4 09-Aug-24

Information published.

4.5 10-Aug-24

Information published.

4.6 11-Aug-24

Information published.

4.7 12-Aug-24

Information published.

4.8 15-Aug-24

Information published.

4.9 16-Aug-24

Information published.

5.0 17-Aug-24

Information published.

5.1 18-Aug-24

Information published.

5.2 19-Aug-24

Information published.

5.3 20-Aug-24

Information published.

5.4 21-Aug-24

Information published.

5.5 22-Aug-24

Information published.

5.6 23-Aug-24

Information published.

5.7 24-Aug-24

Information published.

5.8 25-Aug-24

Information published.

5.9 26-Aug-24

Information published.

6.0 27-Aug-24

Information published.

6.1 28-Aug-24

Information published.

6.2 29-Aug-24

Information published.

6.3 30-Aug-24

Information published.

6.4 31-Aug-24

Information published.

6.5 01-Sep-24

Information published.

6.6 02-Sep-24

Information published.

6.7 03-Sep-24

Information published.

6.8 05-Sep-24

Information published.

6.9 06-Sep-24

Information published.

7.0 07-Sep-24

Information published.

7.1 08-Sep-24

Information published.

7.2 11-Sep-24

Information published.

7.3 12-Sep-24

Information published.

7.4 13-Sep-24

Information published.

7.5 14-Sep-24

Information published.

7.6 15-Sep-24

Information published.

7.7 16-Sep-24

Information published.

7.8 17-Sep-24

Information published.

7.9 18-Sep-24

Information published.

8.0 19-Sep-24

Information published.

8.1 20-Sep-24

Information published.

8.2 21-Sep-24

Information published.

8.3 22-Sep-24

Information published.

8.4 23-Sep-24

Information published.

8.5 24-Sep-24

Information published.

8.6 25-Sep-24

Information published.

8.7 26-Sep-24

Information published.

8.8 27-Sep-24

Information published.

8.9 28-Sep-24

Information published.

9.0 29-Sep-24

Information published.

9.1 30-Sep-24

Information published.

9.2 01-Oct-24

Information published.

9.3 02-Oct-24

Information published.

9.4 03-Oct-24

Information published.

9.5 04-Oct-24

Information published.

9.6 05-Oct-24

Information published.

9.7 06-Oct-24

Information published.

9.8 07-Oct-24

Information published.

9.9 08-Oct-24

Information published.

10.0 09-Oct-24

Information published.

10.1 10-Oct-24

Information published.

10.2 11-Oct-24

Information published.

10.3 12-Oct-24

Information published.

10.4 13-Oct-24

Information published.

10.5 14-Oct-24

Information published.

10.6 15-Oct-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

10.7 16-Oct-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

10.8 17-Oct-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

10.9 18-Oct-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

11.0 19-Oct-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

11.1 20-Oct-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

11.2 21-Oct-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

11.3 22-Oct-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

11.4 23-Oct-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

11.5 24-Oct-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

11.6 25-Oct-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

11.7 26-Oct-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

11.8 27-Oct-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

11.9 28-Oct-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

12.0 29-Oct-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

12.1 30-Oct-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

12.2 31-Oct-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

12.3 01-Nov-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

12.4 02-Nov-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

12.5 04-Nov-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

12.6 05-Nov-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

12.7 06-Nov-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

12.8 07-Nov-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

12.9 08-Nov-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

13.0 09-Nov-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

13.1 10-Nov-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

13.2 11-Nov-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

13.3 12-Nov-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

13.4 13-Nov-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

13.5 14-Nov-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

13.6 15-Nov-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

13.7 16-Nov-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

13.8 17-Nov-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

13.9 18-Nov-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

14.0 19-Nov-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

14.1 20-Nov-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

14.2 21-Nov-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

14.3 23-Nov-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

14.4 24-Nov-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

14.5 25-Nov-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

14.6 26-Nov-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

14.7 27-Nov-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

14.8 28-Nov-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

14.9 29-Nov-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

15.0 30-Nov-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

15.1 01-Dec-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

15.2 02-Dec-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

15.3 03-Dec-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

15.4 04-Dec-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

15.5 05-Dec-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

15.6 07-Dec-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

15.7 08-Dec-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

15.8 09-Dec-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

15.9 10-Dec-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

16.0 11-Dec-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

16.1 12-Dec-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

16.2 13-Dec-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

16.3 14-Dec-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

16.4 15-Dec-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

16.5 16-Dec-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

16.6 17-Dec-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

16.7 18-Dec-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

16.8 19-Dec-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

16.9 20-Dec-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

17.0 21-Dec-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

17.1 22-Dec-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

17.2 23-Dec-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

17.3 24-Dec-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

17.4 25-Dec-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

17.5 26-Dec-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

17.6 27-Dec-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

17.7 28-Dec-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

17.8 29-Dec-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

17.9 30-Dec-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

18.0 31-Dec-24

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

18.1 01-Jan-25

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

18.2 02-Jan-25

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

18.3 03-Jan-25

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

18.4 04-Jan-25

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

18.5 05-Jan-25

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

18.6 06-Jan-25

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

18.7 07-Jan-25

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

18.8 08-Jan-25

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

18.9 09-Jan-25

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

19.0 10-Jan-25

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

19.1 11-Jan-25

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

19.2 12-Jan-25

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

19.3 13-Jan-25

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

19.4 15-Jan-25

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

19.5 16-Jan-25

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

19.6 17-Jan-25

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

19.7 18-Jan-25

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

19.8 19-Jan-25

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

19.9 20-Jan-25

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

20.0 21-Jan-25

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

20.1 22-Jan-25

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

20.2 23-Jan-25

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

20.3 24-Jan-25

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

20.4 25-Jan-25

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

20.5 27-Jan-25

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

20.6 28-Jan-25

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

20.7 29-Jan-25

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

20.8 30-Jan-25

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

20.9 01-Feb-25

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

21.0 02-Feb-25

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

21.1 03-Feb-25

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

21.2 04-Feb-25

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

21.3 05-Feb-25

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

21.4 07-Feb-25

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

21.5 08-Feb-25

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

21.6 09-Feb-25

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

21.7 10-Feb-25

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

21.8 11-Feb-25

Added python3 to CBL-Mariner 1.0 Added python2 to CBL-Mariner 1.0

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2019-20907
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
CBL Mariner 1.0 ARM	python2 (CBL-Mariner) python3 (CBL-Mariner)	Unknown	Unknown		Base: 7.5 Temporal: 7.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	2.7.18-5 3.7.10-3		None
CBL Mariner 1.0 x64	python2 (CBL-Mariner) python3 (CBL-Mariner)	Unknown	Unknown		Base: 7.5 Temporal: 7.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	2.7.18-5 3.7.10-3		None
CBL Mariner 2.0 ARM		Unknown	Unknown	None	Base: 7.5 Temporal: 7.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	Unknown	Unknown	None
CBL Mariner 2.0 x64		Unknown	Unknown	None	Base: 7.5 Temporal: 7.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	Unknown	Unknown	None

CVE ID	Acknowledgements
CVE-2019-20907	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2021-23336
MITRE
NVD

Issuing CNA: report@snyk.io

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:5.9/TemporalScore:5.9

Base score metrics
Attack Vector	Network
Attack Complexity	High
Privileges Required	None
User Interaction	Required
Scope	Unchanged
Confidentiality	None
Integrity	Low
Availability	High

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
1.0 27-Feb-21

Information published.

1.6 30-Jun-24

Information published.

1.7 08-Jul-24

Information published.

1.8 09-Jul-24

Information published.

1.9 10-Jul-24

Information published.

2.0 12-Jul-24

Information published.

2.1 13-Jul-24

Information published.

2.2 14-Jul-24

Information published.

2.3 15-Jul-24

Information published.

2.4 16-Jul-24

Information published.

2.5 17-Jul-24

Information published.

2.6 19-Jul-24

Information published.

2.7 20-Jul-24

Information published.

2.8 21-Jul-24

Information published.

2.9 22-Jul-24

Information published.

3.0 23-Jul-24

Information published.

3.1 24-Jul-24

Information published.

3.2 25-Jul-24

Information published.

3.3 26-Jul-24

Information published.

3.4 27-Jul-24

Information published.

3.5 28-Jul-24

Information published.

3.6 29-Jul-24

Information published.

3.7 02-Aug-24

Information published.

3.8 03-Aug-24

Information published.

3.9 04-Aug-24

Information published.

4.0 05-Aug-24

Information published.

4.1 06-Aug-24

Information published.

4.2 07-Aug-24

Information published.

4.3 08-Aug-24

Information published.

4.4 09-Aug-24

Information published.

4.5 10-Aug-24

Information published.

4.6 11-Aug-24

Information published.

4.7 12-Aug-24

Information published.

4.8 15-Aug-24

Information published.

4.9 16-Aug-24

Information published.

5.0 17-Aug-24

Information published.

5.1 18-Aug-24

Information published.

5.2 19-Aug-24

Information published.

5.3 20-Aug-24

Information published.

5.4 21-Aug-24

Information published.

5.5 22-Aug-24

Information published.

5.6 23-Aug-24

Information published.

5.7 24-Aug-24

Information published.

5.8 25-Aug-24

Information published.

5.9 26-Aug-24

Information published.

6.0 27-Aug-24

Information published.

6.1 28-Aug-24

Information published.

6.2 29-Aug-24

Information published.

6.3 30-Aug-24

Information published.

6.4 31-Aug-24

Information published.

6.5 01-Sep-24

Information published.

6.6 02-Sep-24

Information published.

6.7 03-Sep-24

Information published.

6.8 05-Sep-24

Information published.

6.9 06-Sep-24

Information published.

7.0 07-Sep-24

Information published.

7.1 08-Sep-24

Information published.

7.2 11-Sep-24

Information published.

7.3 12-Sep-24

Information published.

7.4 13-Sep-24

Information published.

7.5 14-Sep-24

Information published.

7.6 15-Sep-24

Information published.

7.7 16-Sep-24

Information published.

7.8 17-Sep-24

Information published.

7.9 18-Sep-24

Information published.

8.0 19-Sep-24

Information published.

8.1 20-Sep-24

Information published.

8.2 21-Sep-24

Information published.

8.3 22-Sep-24

Information published.

8.4 23-Sep-24

Information published.

8.5 24-Sep-24

Information published.

8.6 25-Sep-24

Information published.

8.7 26-Sep-24

Information published.

8.8 27-Sep-24

Information published.

8.9 28-Sep-24

Information published.

9.0 29-Sep-24

Information published.

9.1 30-Sep-24

Information published.

9.2 01-Oct-24

Information published.

9.3 02-Oct-24

Information published.

9.4 03-Oct-24

Information published.

9.5 04-Oct-24

Information published.

9.6 05-Oct-24

Information published.

9.7 06-Oct-24

Information published.

9.8 07-Oct-24

Information published.

9.9 08-Oct-24

Information published.

10.0 09-Oct-24

Information published.

10.1 10-Oct-24

Information published.

10.2 11-Oct-24

Information published.

10.3 12-Oct-24

Information published.

10.4 13-Oct-24

Information published.

10.5 14-Oct-24

Information published.

10.6 15-Oct-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

10.7 16-Oct-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

10.8 17-Oct-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

10.9 18-Oct-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

11.0 19-Oct-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

11.1 20-Oct-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

11.2 21-Oct-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

11.3 22-Oct-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

11.4 23-Oct-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

11.5 24-Oct-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

11.6 25-Oct-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

11.7 26-Oct-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

11.8 27-Oct-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

11.9 28-Oct-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

12.0 29-Oct-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

12.1 30-Oct-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

12.2 31-Oct-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

12.3 01-Nov-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

12.4 02-Nov-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

12.5 04-Nov-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

12.6 05-Nov-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

12.7 06-Nov-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

12.8 07-Nov-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

12.9 08-Nov-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

13.0 09-Nov-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

13.1 10-Nov-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

13.2 11-Nov-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

13.3 12-Nov-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

13.4 13-Nov-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

13.5 14-Nov-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

13.6 15-Nov-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

13.7 16-Nov-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

13.8 17-Nov-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

13.9 18-Nov-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

14.0 19-Nov-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

14.1 20-Nov-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

14.2 21-Nov-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

14.3 23-Nov-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

14.4 24-Nov-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

14.5 25-Nov-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

14.6 26-Nov-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

14.7 27-Nov-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

14.8 28-Nov-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

14.9 29-Nov-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

15.0 30-Nov-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

15.1 01-Dec-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

15.2 02-Dec-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

15.3 03-Dec-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

15.4 04-Dec-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

15.5 05-Dec-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

15.6 07-Dec-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

15.7 08-Dec-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

15.8 09-Dec-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

15.9 10-Dec-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

16.0 11-Dec-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

16.1 12-Dec-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

16.2 13-Dec-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

16.3 14-Dec-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

16.4 15-Dec-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

16.5 16-Dec-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

16.6 17-Dec-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

16.7 18-Dec-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

16.8 19-Dec-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

16.9 20-Dec-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

17.0 21-Dec-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

17.1 22-Dec-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

17.2 23-Dec-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

17.3 24-Dec-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

17.4 25-Dec-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

17.5 26-Dec-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

17.6 27-Dec-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

17.7 28-Dec-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

17.8 29-Dec-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

17.9 30-Dec-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

18.0 31-Dec-24

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

18.1 01-Jan-25

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

18.2 02-Jan-25

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

18.3 03-Jan-25

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

18.4 04-Jan-25

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

18.5 05-Jan-25

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

18.6 06-Jan-25

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

18.7 07-Jan-25

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

18.8 08-Jan-25

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

18.9 09-Jan-25

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

19.0 10-Jan-25

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

19.1 11-Jan-25

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

19.2 12-Jan-25

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

19.3 13-Jan-25

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

19.4 15-Jan-25

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

19.5 16-Jan-25

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

19.6 17-Jan-25

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

19.7 18-Jan-25

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

19.8 19-Jan-25

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

19.9 20-Jan-25

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

20.0 21-Jan-25

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

20.1 22-Jan-25

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

20.2 23-Jan-25

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

20.3 24-Jan-25

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

20.4 25-Jan-25

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

20.5 27-Jan-25

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

20.6 28-Jan-25

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

20.7 29-Jan-25

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

20.8 30-Jan-25

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

20.9 01-Feb-25

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

21.0 02-Feb-25

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

21.1 03-Feb-25

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

21.2 04-Feb-25

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

21.3 05-Feb-25

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

21.4 07-Feb-25

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

21.5 08-Feb-25

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

21.6 09-Feb-25

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

21.7 10-Feb-25

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

21.8 11-Feb-25

Added python2 to CBL-Mariner 1.0 Added python3 to CBL-Mariner 1.0

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2021-23336
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
CBL Mariner 1.0 ARM	python2 (CBL-Mariner) python3 (CBL-Mariner)	Unknown	Unknown		Base: 5.9 Temporal: 5.9 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H	2.7.18-6 3.7.10-3		None
CBL Mariner 1.0 x64	python2 (CBL-Mariner) python3 (CBL-Mariner)	Unknown	Unknown		Base: 5.9 Temporal: 5.9 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H	2.7.18-6 3.7.10-3		None
CBL Mariner 2.0 ARM		Unknown	Unknown	None	Base: 5.9 Temporal: 5.9 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H	Unknown	Unknown	None
CBL Mariner 2.0 x64		Unknown	Unknown	None	Base: 5.9 Temporal: 5.9 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H	Unknown	Unknown	None

CVE ID	Acknowledgements
CVE-2021-23336	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2024-28180
MITRE
NVD

Issuing CNA: security-advisories@github.com

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:4.3/TemporalScore:4.3

Base score metrics
Attack Vector	Network
Attack Complexity	Low
Privileges Required	Low
User Interaction	None
Scope	Unchanged
Confidentiality	None
Integrity	None
Availability	Low

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Apr-24

Information published.

1.2 30-Jun-24

Information published.

1.3 16-Aug-24

Information published.

1.4 25-Aug-24

Information published.

1.5 26-Aug-24

Information published.

1.6 27-Aug-24

Information published.

1.7 28-Aug-24

Information published.

1.8 29-Aug-24

Information published.

1.9 30-Aug-24

Information published.

2.0 31-Aug-24

Information published.

2.1 01-Sep-24

Information published.

2.2 02-Sep-24

Information published.

2.3 03-Sep-24

Information published.

2.4 05-Sep-24

Information published.

2.5 06-Sep-24

Information published.

2.6 07-Sep-24

Information published.

2.7 08-Sep-24

Information published.

2.8 11-Sep-24

Information published.

2.9 13-Sep-24

Information published.

3.0 05-Oct-24

Information published.

3.1 09-Oct-24

Information published.

3.2 12-Oct-24

Information published.

3.3 16-Oct-24

Added kube-vip-cloud-provider to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added containerized-data-importer to CBL-Mariner 2.0 Added cri-o to CBL-Mariner 2.0 Added kubernetes to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added skopeo to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added keda to Azure Linux 3.0

3.4 01-Nov-24

Added dcos-cli to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kube-vip-cloud-provider to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added containerized-data-importer to CBL-Mariner 2.0 Added cri-o to CBL-Mariner 2.0 Added kubernetes to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added skopeo to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added keda to Azure Linux 3.0

3.5 09-Nov-24

Added dcos-cli to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added skopeo to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added keda to Azure Linux 3.0 Added dcos-cli to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kube-vip-cloud-provider to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added containerized-data-importer to CBL-Mariner 2.0 Added cri-o to CBL-Mariner 2.0

3.6 14-Nov-24

Added skopeo to CBL-Mariner 2.0 Added dcos-cli to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kube-vip-cloud-provider to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added containerized-data-importer to CBL-Mariner 2.0 Added cri-o to CBL-Mariner 2.0 Added dcos-cli to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added skopeo to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added keda to Azure Linux 3.0

3.7 03-Dec-24

Added cert-manager to CBL-Mariner 2.0 Added containerized-data-importer to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added dcos-cli to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kube-vip-cloud-provider to CBL-Mariner 2.0 Added cri-o to CBL-Mariner 2.0 Added dcos-cli to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added skopeo to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added keda to Azure Linux 3.0

3.8 24-Jan-25

Added influxdb to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added containerized-data-importer to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added dcos-cli to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kube-vip-cloud-provider to CBL-Mariner 2.0 Added cri-o to CBL-Mariner 2.0 Added dcos-cli to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added skopeo to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added keda to Azure Linux 3.0

3.9 30-Jan-25

Added influxdb to Azure Linux 3.0 Added dcos-cli to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added skopeo to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added keda to Azure Linux 3.0 Added influxdb to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added containerized-data-importer to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added dcos-cli to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kube-vip-cloud-provider to CBL-Mariner 2.0 Added cri-o to CBL-Mariner 2.0

4.0 01-Feb-25

Added rook to CBL-Mariner 2.0 Added influxdb to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added containerized-data-importer to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added dcos-cli to CBL-Mariner 2.0 Added kubernetes to CBL-Mariner 2.0 Added kube-vip-cloud-provider to CBL-Mariner 2.0 Added cri-o to CBL-Mariner 2.0 Added containerized-data-importer to Azure Linux 3.0 Added influxdb to Azure Linux 3.0 Added dcos-cli to Azure Linux 3.0 Added kubernetes to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added skopeo to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added keda to Azure Linux 3.0

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2024-28180
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Linux 3.0 ARM	cert-manager (CBL-Mariner) containerized-data-importer (CBL-Mariner) dcos-cli (CBL-Mariner) influxdb (CBL-Mariner)	Unknown	Unknown		Base: 4.3 Temporal: 4.3 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L	1.12.12-1 1.57.0-9 1.2.0-16 2.7.3-9		None
Azure Linux 3.0 x64	cert-manager (CBL-Mariner) containerized-data-importer (CBL-Mariner) dcos-cli (CBL-Mariner) influxdb (CBL-Mariner)	Unknown	Unknown		Base: 4.3 Temporal: 4.3 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L	1.12.12-1 1.57.0-9 1.2.0-16 2.7.3-9		None
CBL Mariner 2.0 ARM	cert-manager (CBL-Mariner) containerized-data-importer (CBL-Mariner) cri-o (CBL-Mariner) dcos-cli (CBL-Mariner)	Unknown	Unknown		Base: 4.3 Temporal: 4.3 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L	1.11.2-14 1.55.0-20 1.21.7-2 1.2.0-19		None
CBL Mariner 2.0 x64	cert-manager (CBL-Mariner) containerized-data-importer (CBL-Mariner) cri-o (CBL-Mariner) dcos-cli (CBL-Mariner)	Unknown	Unknown		Base: 4.3 Temporal: 4.3 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L	1.11.2-14 1.55.0-20 1.21.7-2 1.2.0-19		None

CVE ID	Acknowledgements
CVE-2024-28180	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2024-9681
MITRE
NVD

Issuing CNA: 2499f714-1537-4658-8207-48ae4bb9eae9

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:6.5/TemporalScore:6.5

Base score metrics
Attack Vector	Network
Attack Complexity	High
Privileges Required	None
User Interaction	None
Scope	Unchanged
Confidentiality	None
Integrity	High
Availability	Low

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
0.1 29-Jan-25

Information published.

0.2 30-Jan-25

Information published.

0.3 01-Feb-25

Information published.

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2024-9681
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Linux 3.0 ARM	cmake (CBL-Mariner) curl (CBL-Mariner) mysql (CBL-Mariner)	Unknown	Unknown		Base: 6.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L	3.30.3-4 8.8.0-4 8.0.40-5		None
Azure Linux 3.0 x64	cmake (CBL-Mariner) curl (CBL-Mariner) mysql (CBL-Mariner)	Unknown	Unknown		Base: 6.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L	3.30.3-4 8.8.0-4 8.0.40-5		None
CBL Mariner 2.0 ARM	cmake (CBL-Mariner)	Unknown	Unknown	None	Base: 6.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L	3.21.4-16	Unknown	None
CBL Mariner 2.0 x64	cmake (CBL-Mariner)	Unknown	Unknown	None	Base: 6.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L	3.21.4-16	Unknown	None

CVE ID	Acknowledgements
CVE-2024-9681	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2024-34062
MITRE
NVD

Issuing CNA: security-advisories@github.com

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:4.8/TemporalScore:4.8

Base score metrics
Attack Vector	Local
Attack Complexity	Low
Privileges Required	Low
User Interaction	Required
Scope	Unchanged
Confidentiality	Low
Integrity	Low
Availability	Low

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
1.0 07-May-24

Information published.

1.1 30-Jun-24

Information published.

1.2 29-Aug-24

Information published.

1.3 30-Aug-24

Information published.

1.4 31-Aug-24

Information published.

1.5 01-Sep-24

Information published.

1.6 02-Sep-24

Information published.

1.7 03-Sep-24

Information published.

1.8 05-Sep-24

Information published.

1.9 06-Sep-24

Information published.

2.0 07-Sep-24

Information published.

2.1 08-Sep-24

Information published.

2.2 11-Sep-24

Information published.

2.3 12-Sep-24

Information published.

2.4 13-Sep-24

Information published.

2.5 14-Sep-24

Information published.

2.6 15-Sep-24

Information published.

2.7 16-Sep-24

Information published.

2.8 17-Sep-24

Information published.

2.9 18-Sep-24

Information published.

3.0 19-Sep-24

Information published.

3.1 20-Sep-24

Information published.

3.2 21-Sep-24

Information published.

3.3 22-Sep-24

Information published.

3.4 23-Sep-24

Information published.

3.5 24-Sep-24

Information published.

3.6 25-Sep-24

Information published.

3.7 26-Sep-24

Information published.

3.8 27-Sep-24

Information published.

3.9 28-Sep-24

Information published.

4.0 29-Sep-24

Information published.

4.1 30-Sep-24

Information published.

4.2 01-Oct-24

Information published.

4.3 02-Oct-24

Information published.

4.4 03-Oct-24

Information published.

4.5 04-Oct-24

Information published.

4.6 05-Oct-24

Information published.

4.7 06-Oct-24

Information published.

4.8 07-Oct-24

Information published.

4.9 08-Oct-24

Information published.

5.0 09-Oct-24

Information published.

5.1 10-Oct-24

Information published.

5.2 11-Oct-24

Information published.

5.3 12-Oct-24

Information published.

5.4 13-Oct-24

Information published.

5.5 14-Oct-24

Information published.

5.6 15-Oct-24

Added python-tqdm to CBL-Mariner 2.0

5.7 16-Oct-24

Added python-tqdm to CBL-Mariner 2.0

5.8 17-Oct-24

Added python-tqdm to CBL-Mariner 2.0

5.9 18-Oct-24

Added python-tqdm to CBL-Mariner 2.0

6.0 19-Oct-24

Added python-tqdm to CBL-Mariner 2.0

6.1 20-Oct-24

Added python-tqdm to CBL-Mariner 2.0

6.2 21-Oct-24

Added python-tqdm to CBL-Mariner 2.0

6.3 22-Oct-24

Added python-tqdm to CBL-Mariner 2.0

6.4 23-Oct-24

Added python-tqdm to CBL-Mariner 2.0

6.5 24-Oct-24

Added python-tqdm to CBL-Mariner 2.0

6.6 25-Oct-24

Added python-tqdm to CBL-Mariner 2.0

6.7 26-Oct-24

Added python-tqdm to CBL-Mariner 2.0

6.8 27-Oct-24

Added python-tqdm to CBL-Mariner 2.0

6.9 28-Oct-24

Added python-tqdm to CBL-Mariner 2.0

7.0 29-Oct-24

Added python-tqdm to CBL-Mariner 2.0

7.1 30-Oct-24

Added python-tqdm to CBL-Mariner 2.0

7.2 31-Oct-24

Added python-tqdm to CBL-Mariner 2.0

7.3 01-Nov-24

Added python-tqdm to CBL-Mariner 2.0

7.4 02-Nov-24

Added python-tqdm to CBL-Mariner 2.0

7.5 04-Nov-24

Added python-tqdm to CBL-Mariner 2.0

7.6 05-Nov-24

Added python-tqdm to CBL-Mariner 2.0

7.7 06-Nov-24

Added python-tqdm to CBL-Mariner 2.0

7.8 07-Nov-24

Added python-tqdm to CBL-Mariner 2.0

7.9 08-Nov-24

Added python-tqdm to CBL-Mariner 2.0

8.0 09-Nov-24

Added python-tqdm to CBL-Mariner 2.0

8.1 10-Nov-24

Added python-tqdm to CBL-Mariner 2.0

8.2 11-Nov-24

Added python-tqdm to CBL-Mariner 2.0

8.3 12-Nov-24

Added python-tqdm to CBL-Mariner 2.0

8.4 13-Nov-24

Added python-tqdm to CBL-Mariner 2.0

8.5 14-Nov-24

Added python-tqdm to CBL-Mariner 2.0

8.6 15-Nov-24

Added python-tqdm to CBL-Mariner 2.0

8.7 16-Nov-24

Added python-tqdm to CBL-Mariner 2.0

8.8 17-Nov-24

Added python-tqdm to CBL-Mariner 2.0

8.9 18-Nov-24

Added python-tqdm to CBL-Mariner 2.0

9.0 19-Nov-24

Added python-tqdm to CBL-Mariner 2.0

9.1 20-Nov-24

Added python-tqdm to CBL-Mariner 2.0

9.2 21-Nov-24

Added python-tqdm to CBL-Mariner 2.0

9.3 23-Nov-24

Added python-tqdm to CBL-Mariner 2.0

9.4 24-Nov-24

Added python-tqdm to CBL-Mariner 2.0

9.5 25-Nov-24

Added python-tqdm to CBL-Mariner 2.0

9.6 26-Nov-24

Added python-tqdm to CBL-Mariner 2.0

9.7 27-Nov-24

Added python-tqdm to CBL-Mariner 2.0

9.8 28-Nov-24

Added python-tqdm to CBL-Mariner 2.0

9.9 29-Nov-24

Added python-tqdm to CBL-Mariner 2.0

10.0 30-Nov-24

Added python-tqdm to CBL-Mariner 2.0

10.1 01-Dec-24

Added python-tqdm to CBL-Mariner 2.0

10.2 02-Dec-24

Added python-tqdm to CBL-Mariner 2.0

10.3 03-Dec-24

Added python-tqdm to CBL-Mariner 2.0

10.4 04-Dec-24

Added python-tqdm to CBL-Mariner 2.0

10.5 05-Dec-24

Added python-tqdm to CBL-Mariner 2.0

10.6 07-Dec-24

Added python-tqdm to CBL-Mariner 2.0

10.7 08-Dec-24

Added python-tqdm to CBL-Mariner 2.0

10.8 09-Dec-24

Added python-tqdm to CBL-Mariner 2.0

10.9 10-Dec-24

Added python-tqdm to CBL-Mariner 2.0

11.0 11-Dec-24

Added python-tqdm to CBL-Mariner 2.0

11.1 12-Dec-24

Added python-tqdm to CBL-Mariner 2.0

11.2 13-Dec-24

Added python-tqdm to CBL-Mariner 2.0

11.3 14-Dec-24

Added python-tqdm to CBL-Mariner 2.0

11.4 15-Dec-24

Added python-tqdm to CBL-Mariner 2.0

11.5 16-Dec-24

Added python-tqdm to CBL-Mariner 2.0

11.6 17-Dec-24

Added python-tqdm to CBL-Mariner 2.0

11.7 18-Dec-24

Added python-tqdm to CBL-Mariner 2.0

11.8 19-Dec-24

Added python-tqdm to CBL-Mariner 2.0

11.9 20-Dec-24

Added python-tqdm to CBL-Mariner 2.0

12.0 21-Dec-24

Added python-tqdm to CBL-Mariner 2.0

12.1 22-Dec-24

Added python-tqdm to CBL-Mariner 2.0

12.2 23-Dec-24

Added python-tqdm to CBL-Mariner 2.0

12.3 24-Dec-24

Added python-tqdm to CBL-Mariner 2.0

12.4 25-Dec-24

Added python-tqdm to CBL-Mariner 2.0

12.5 26-Dec-24

Added python-tqdm to CBL-Mariner 2.0

12.6 27-Dec-24

Added python-tqdm to CBL-Mariner 2.0

12.7 28-Dec-24

Added python-tqdm to CBL-Mariner 2.0

12.8 29-Dec-24

Added python-tqdm to CBL-Mariner 2.0

12.9 30-Dec-24

Added python-tqdm to CBL-Mariner 2.0

13.0 31-Dec-24

Added python-tqdm to CBL-Mariner 2.0

13.1 01-Jan-25

Added python-tqdm to CBL-Mariner 2.0

13.2 02-Jan-25

Added python-tqdm to CBL-Mariner 2.0

13.3 03-Jan-25

Added python-tqdm to CBL-Mariner 2.0

13.4 04-Jan-25

Added python-tqdm to CBL-Mariner 2.0

13.5 05-Jan-25

Added python-tqdm to CBL-Mariner 2.0

13.6 06-Jan-25

Added python-tqdm to CBL-Mariner 2.0

13.7 07-Jan-25

Added python-tqdm to CBL-Mariner 2.0

13.8 08-Jan-25

Added python-tqdm to CBL-Mariner 2.0

13.9 09-Jan-25

Added python-tqdm to CBL-Mariner 2.0

14.0 10-Jan-25

Added python-tqdm to CBL-Mariner 2.0

14.1 11-Jan-25

Added python-tqdm to CBL-Mariner 2.0

14.2 12-Jan-25

Added python-tqdm to CBL-Mariner 2.0

14.3 13-Jan-25

Added python-tqdm to CBL-Mariner 2.0

14.4 15-Jan-25

Added python-tqdm to CBL-Mariner 2.0

14.5 16-Jan-25

Added python-tqdm to CBL-Mariner 2.0

14.6 17-Jan-25

Added python-tqdm to CBL-Mariner 2.0

14.7 18-Jan-25

Added python-tqdm to CBL-Mariner 2.0

14.8 19-Jan-25

Added python-tqdm to CBL-Mariner 2.0

14.9 20-Jan-25

Added python-tqdm to CBL-Mariner 2.0

15.0 21-Jan-25

Added python-tqdm to CBL-Mariner 2.0

15.1 22-Jan-25

Added python-tqdm to CBL-Mariner 2.0

15.2 23-Jan-25

Added python-tqdm to CBL-Mariner 2.0

15.3 24-Jan-25

Added python-tqdm to CBL-Mariner 2.0

15.4 25-Jan-25

Added python-tqdm to CBL-Mariner 2.0

15.5 27-Jan-25

Added python-tqdm to CBL-Mariner 2.0

15.6 28-Jan-25

Added python-tqdm to CBL-Mariner 2.0

15.7 29-Jan-25

Added python-tqdm to CBL-Mariner 2.0

15.8 30-Jan-25

Added python-tqdm to CBL-Mariner 2.0

15.9 01-Feb-25

Added python-tqdm to CBL-Mariner 2.0

16.0 02-Feb-25

Added python-tqdm to CBL-Mariner 2.0

16.1 03-Feb-25

Added python-tqdm to CBL-Mariner 2.0

16.2 04-Feb-25

Added python-tqdm to CBL-Mariner 2.0

16.3 05-Feb-25

Added python-tqdm to CBL-Mariner 2.0

16.4 07-Feb-25

Added python-tqdm to CBL-Mariner 2.0

16.5 08-Feb-25

Added python-tqdm to CBL-Mariner 2.0

16.6 09-Feb-25

Added python-tqdm to CBL-Mariner 2.0

16.7 10-Feb-25

Added python-tqdm to CBL-Mariner 2.0

16.8 11-Feb-25

Added python-tqdm to CBL-Mariner 2.0

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2024-34062
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Linux 3.0 ARM		Unknown	Unknown	None	Base: 4.8 Temporal: 4.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L	Unknown	Unknown	None
Azure Linux 3.0 x64		Unknown	Unknown	None	Base: 4.8 Temporal: 4.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L	Unknown	Unknown	None
CBL Mariner 2.0 ARM	python-tqdm (CBL-Mariner)	Unknown	Unknown	None	Base: 4.8 Temporal: 4.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L	4.63.1-3	Unknown	None
CBL Mariner 2.0 x64	python-tqdm (CBL-Mariner)	Unknown	Unknown	None	Base: 4.8 Temporal: 4.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L	4.63.1-3	Unknown	None

CVE ID	Acknowledgements
CVE-2024-34062	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2024-32021
MITRE
NVD

Issuing CNA: security-advisories@github.com

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:3.9/TemporalScore:3.9

Base score metrics
Attack Vector	Local
Attack Complexity	High
Privileges Required	Low
User Interaction	Required
Scope	Changed
Confidentiality	None
Integrity	Low
Availability	Low

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
1.0 17-May-24

Information published.

1.1 30-Jun-24

Information published.

1.2 29-Aug-24

Information published.

1.3 30-Aug-24

Information published.

1.4 31-Aug-24

Information published.

1.5 01-Sep-24

Information published.

1.6 02-Sep-24

Information published.

1.7 03-Sep-24

Information published.

1.8 05-Sep-24

Information published.

1.9 06-Sep-24

Information published.

2.0 07-Sep-24

Information published.

2.1 08-Sep-24

Information published.

2.2 11-Sep-24

Information published.

2.3 12-Sep-24

Information published.

2.4 13-Sep-24

Information published.

2.5 14-Sep-24

Information published.

2.6 15-Sep-24

Information published.

2.7 16-Sep-24

Information published.

2.8 17-Sep-24

Information published.

2.9 18-Sep-24

Information published.

3.0 19-Sep-24

Information published.

3.1 20-Sep-24

Information published.

3.2 21-Sep-24

Information published.

3.3 22-Sep-24

Information published.

3.4 23-Sep-24

Information published.

3.5 24-Sep-24

Information published.

3.6 25-Sep-24

Information published.

3.7 26-Sep-24

Information published.

3.8 27-Sep-24

Information published.

3.9 28-Sep-24

Information published.

4.0 29-Sep-24

Information published.

4.1 30-Sep-24

Information published.

4.2 01-Oct-24

Information published.

4.3 02-Oct-24

Information published.

4.4 03-Oct-24

Information published.

4.5 04-Oct-24

Information published.

4.6 05-Oct-24

Information published.

4.7 06-Oct-24

Information published.

4.8 07-Oct-24

Information published.

4.9 08-Oct-24

Information published.

5.0 09-Oct-24

Information published.

5.1 10-Oct-24

Information published.

5.2 11-Oct-24

Information published.

5.3 12-Oct-24

Information published.

5.4 13-Oct-24

Information published.

5.5 14-Oct-24

Information published.

5.6 15-Oct-24

Added git to CBL-Mariner 2.0

5.7 16-Oct-24

Added git to CBL-Mariner 2.0

5.8 17-Oct-24

Added git to CBL-Mariner 2.0

5.9 18-Oct-24

Added git to CBL-Mariner 2.0

6.0 19-Oct-24

Added git to CBL-Mariner 2.0

6.1 20-Oct-24

Added git to CBL-Mariner 2.0

6.2 21-Oct-24

Added git to CBL-Mariner 2.0

6.3 22-Oct-24

Added git to CBL-Mariner 2.0

6.4 23-Oct-24

Added git to CBL-Mariner 2.0

6.5 24-Oct-24

Added git to CBL-Mariner 2.0

6.6 25-Oct-24

Added git to CBL-Mariner 2.0

6.7 26-Oct-24

Added git to CBL-Mariner 2.0

6.8 27-Oct-24

Added git to CBL-Mariner 2.0

6.9 28-Oct-24

Added git to CBL-Mariner 2.0

7.0 29-Oct-24

Added git to CBL-Mariner 2.0

7.1 30-Oct-24

Added git to CBL-Mariner 2.0

7.2 31-Oct-24

Added git to CBL-Mariner 2.0

7.3 01-Nov-24

Added git to CBL-Mariner 2.0

7.4 02-Nov-24

Added git to CBL-Mariner 2.0

7.5 04-Nov-24

Added git to CBL-Mariner 2.0

7.6 05-Nov-24

Added git to CBL-Mariner 2.0

7.7 06-Nov-24

Added git to CBL-Mariner 2.0

7.8 07-Nov-24

Added git to CBL-Mariner 2.0

7.9 08-Nov-24

Added git to CBL-Mariner 2.0

8.0 09-Nov-24

Added git to CBL-Mariner 2.0

8.1 10-Nov-24

Added git to CBL-Mariner 2.0

8.2 11-Nov-24

Added git to CBL-Mariner 2.0

8.3 12-Nov-24

Added git to CBL-Mariner 2.0

8.4 13-Nov-24

Added git to CBL-Mariner 2.0

8.5 14-Nov-24

Added git to CBL-Mariner 2.0

8.6 15-Nov-24

Added git to CBL-Mariner 2.0

8.7 16-Nov-24

Added git to CBL-Mariner 2.0

8.8 17-Nov-24

Added git to CBL-Mariner 2.0

8.9 18-Nov-24

Added git to CBL-Mariner 2.0

9.0 19-Nov-24

Added git to CBL-Mariner 2.0

9.1 20-Nov-24

Added git to CBL-Mariner 2.0

9.2 21-Nov-24

Added git to CBL-Mariner 2.0

9.3 23-Nov-24

Added git to CBL-Mariner 2.0

9.4 24-Nov-24

Added git to CBL-Mariner 2.0

9.5 25-Nov-24

Added git to CBL-Mariner 2.0

9.6 26-Nov-24

Added git to CBL-Mariner 2.0

9.7 27-Nov-24

Added git to CBL-Mariner 2.0

9.8 28-Nov-24

Added git to CBL-Mariner 2.0

9.9 29-Nov-24

Added git to CBL-Mariner 2.0

10.0 30-Nov-24

Added git to CBL-Mariner 2.0

10.1 01-Dec-24

Added git to CBL-Mariner 2.0

10.2 02-Dec-24

Added git to CBL-Mariner 2.0

10.3 03-Dec-24

Added git to CBL-Mariner 2.0

10.4 04-Dec-24

Added git to CBL-Mariner 2.0

10.5 05-Dec-24

Added git to CBL-Mariner 2.0

10.6 07-Dec-24

Added git to CBL-Mariner 2.0

10.7 08-Dec-24

Added git to CBL-Mariner 2.0

10.8 09-Dec-24

Added git to CBL-Mariner 2.0

10.9 10-Dec-24

Added git to CBL-Mariner 2.0

11.0 11-Dec-24

Added git to CBL-Mariner 2.0

11.1 12-Dec-24

Added git to CBL-Mariner 2.0

11.2 13-Dec-24

Added git to CBL-Mariner 2.0

11.3 14-Dec-24

Added git to CBL-Mariner 2.0

11.4 15-Dec-24

Added git to CBL-Mariner 2.0

11.5 16-Dec-24

Added git to CBL-Mariner 2.0

11.6 17-Dec-24

Added git to CBL-Mariner 2.0

11.7 18-Dec-24

Added git to CBL-Mariner 2.0

11.8 19-Dec-24

Added git to CBL-Mariner 2.0

11.9 20-Dec-24

Added git to CBL-Mariner 2.0

12.0 21-Dec-24

Added git to CBL-Mariner 2.0

12.1 22-Dec-24

Added git to CBL-Mariner 2.0

12.2 23-Dec-24

Added git to CBL-Mariner 2.0

12.3 24-Dec-24

Added git to CBL-Mariner 2.0

12.4 25-Dec-24

Added git to CBL-Mariner 2.0

12.5 26-Dec-24

Added git to CBL-Mariner 2.0

12.6 27-Dec-24

Added git to CBL-Mariner 2.0

12.7 28-Dec-24

Added git to CBL-Mariner 2.0

12.8 29-Dec-24

Added git to CBL-Mariner 2.0

12.9 30-Dec-24

Added git to CBL-Mariner 2.0

13.0 31-Dec-24

Added git to CBL-Mariner 2.0

13.1 01-Jan-25

Added git to CBL-Mariner 2.0

13.2 02-Jan-25

Added git to CBL-Mariner 2.0

13.3 03-Jan-25

Added git to CBL-Mariner 2.0

13.4 04-Jan-25

Added git to CBL-Mariner 2.0

13.5 05-Jan-25

Added git to CBL-Mariner 2.0

13.6 06-Jan-25

Added git to CBL-Mariner 2.0

13.7 07-Jan-25

Added git to CBL-Mariner 2.0

13.8 08-Jan-25

Added git to CBL-Mariner 2.0

13.9 09-Jan-25

Added git to CBL-Mariner 2.0

14.0 10-Jan-25

Added git to CBL-Mariner 2.0

14.1 11-Jan-25

Added git to CBL-Mariner 2.0

14.2 12-Jan-25

Added git to CBL-Mariner 2.0

14.3 13-Jan-25

Added git to CBL-Mariner 2.0

14.4 15-Jan-25

Added git to CBL-Mariner 2.0

14.5 16-Jan-25

Added git to CBL-Mariner 2.0

14.6 17-Jan-25

Added git to CBL-Mariner 2.0

14.7 18-Jan-25

Added git to CBL-Mariner 2.0

14.8 19-Jan-25

Added git to CBL-Mariner 2.0

14.9 20-Jan-25

Added git to CBL-Mariner 2.0

15.0 21-Jan-25

Added git to CBL-Mariner 2.0

15.1 22-Jan-25

Added git to CBL-Mariner 2.0

15.2 23-Jan-25

Added git to CBL-Mariner 2.0

15.3 24-Jan-25

Added git to CBL-Mariner 2.0

15.4 25-Jan-25

Added git to CBL-Mariner 2.0

15.5 27-Jan-25

Added git to CBL-Mariner 2.0

15.6 28-Jan-25

Added git to CBL-Mariner 2.0

15.7 29-Jan-25

Added git to CBL-Mariner 2.0

15.8 30-Jan-25

Added git to CBL-Mariner 2.0

15.9 01-Feb-25

Added git to CBL-Mariner 2.0

16.0 02-Feb-25

Added git to CBL-Mariner 2.0

16.1 03-Feb-25

Added git to CBL-Mariner 2.0

16.2 04-Feb-25

Added git to CBL-Mariner 2.0

16.3 05-Feb-25

Added git to CBL-Mariner 2.0

16.4 07-Feb-25

Added git to CBL-Mariner 2.0

16.5 08-Feb-25

Added git to CBL-Mariner 2.0

16.6 09-Feb-25

Added git to CBL-Mariner 2.0

16.7 10-Feb-25

Added git to CBL-Mariner 2.0

16.8 11-Feb-25

Added git to CBL-Mariner 2.0

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2024-32021
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Linux 3.0 ARM		Unknown	Unknown	None	Base: 3.9 Temporal: 3.9 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:L	Unknown	Unknown	None
Azure Linux 3.0 x64		Unknown	Unknown	None	Base: 3.9 Temporal: 3.9 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:L	Unknown	Unknown	None
CBL Mariner 2.0 ARM	git (CBL-Mariner)	Unknown	Unknown	None	Base: 3.9 Temporal: 3.9 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:L	2.39.4-1	Unknown	None
CBL Mariner 2.0 x64	git (CBL-Mariner)	Unknown	Unknown	None	Base: 3.9 Temporal: 3.9 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:L	2.39.4-1	Unknown	None

CVE ID	Acknowledgements
CVE-2024-32021	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2024-32020
MITRE
NVD

Issuing CNA: security-advisories@github.com

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:3.9/TemporalScore:3.9

Base score metrics
Attack Vector	Local
Attack Complexity	High
Privileges Required	Low
User Interaction	Required
Scope	Changed
Confidentiality	None
Integrity	Low
Availability	Low

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
1.0 17-May-24

Information published.

1.1 30-Jun-24

Information published.

1.2 29-Aug-24

Information published.

1.3 30-Aug-24

Information published.

1.4 31-Aug-24

Information published.

1.5 01-Sep-24

Information published.

1.6 02-Sep-24

Information published.

1.7 03-Sep-24

Information published.

1.8 05-Sep-24

Information published.

1.9 06-Sep-24

Information published.

2.0 07-Sep-24

Information published.

2.1 08-Sep-24

Information published.

2.2 11-Sep-24

Information published.

2.3 12-Sep-24

Information published.

2.4 13-Sep-24

Information published.

2.5 14-Sep-24

Information published.

2.6 15-Sep-24

Information published.

2.7 16-Sep-24

Information published.

2.8 17-Sep-24

Information published.

2.9 18-Sep-24

Information published.

3.0 19-Sep-24

Information published.

3.1 20-Sep-24

Information published.

3.2 21-Sep-24

Information published.

3.3 22-Sep-24

Information published.

3.4 23-Sep-24

Information published.

3.5 24-Sep-24

Information published.

3.6 25-Sep-24

Information published.

3.7 26-Sep-24

Information published.

3.8 27-Sep-24

Information published.

3.9 28-Sep-24

Information published.

4.0 29-Sep-24

Information published.

4.1 30-Sep-24

Information published.

4.2 01-Oct-24

Information published.

4.3 02-Oct-24

Information published.

4.4 03-Oct-24

Information published.

4.5 04-Oct-24

Information published.

4.6 05-Oct-24

Information published.

4.7 06-Oct-24

Information published.

4.8 07-Oct-24

Information published.

4.9 08-Oct-24

Information published.

5.0 09-Oct-24

Information published.

5.1 10-Oct-24

Information published.

5.2 11-Oct-24

Information published.

5.3 12-Oct-24

Information published.

5.4 13-Oct-24

Information published.

5.5 14-Oct-24

Information published.

5.6 15-Oct-24

Added git to CBL-Mariner 2.0

5.7 16-Oct-24

Added git to CBL-Mariner 2.0

5.8 17-Oct-24

Added git to CBL-Mariner 2.0

5.9 18-Oct-24

Added git to CBL-Mariner 2.0

6.0 19-Oct-24

Added git to CBL-Mariner 2.0

6.1 20-Oct-24

Added git to CBL-Mariner 2.0

6.2 21-Oct-24

Added git to CBL-Mariner 2.0

6.3 22-Oct-24

Added git to CBL-Mariner 2.0

6.4 23-Oct-24

Added git to CBL-Mariner 2.0

6.5 24-Oct-24

Added git to CBL-Mariner 2.0

6.6 25-Oct-24

Added git to CBL-Mariner 2.0

6.7 26-Oct-24

Added git to CBL-Mariner 2.0

6.8 27-Oct-24

Added git to CBL-Mariner 2.0

6.9 28-Oct-24

Added git to CBL-Mariner 2.0

7.0 29-Oct-24

Added git to CBL-Mariner 2.0

7.1 30-Oct-24

Added git to CBL-Mariner 2.0

7.2 31-Oct-24

Added git to CBL-Mariner 2.0

7.3 01-Nov-24

Added git to CBL-Mariner 2.0

7.4 02-Nov-24

Added git to CBL-Mariner 2.0

7.5 04-Nov-24

Added git to CBL-Mariner 2.0

7.6 05-Nov-24

Added git to CBL-Mariner 2.0

7.7 06-Nov-24

Added git to CBL-Mariner 2.0

7.8 07-Nov-24

Added git to CBL-Mariner 2.0

7.9 08-Nov-24

Added git to CBL-Mariner 2.0

8.0 09-Nov-24

Added git to CBL-Mariner 2.0

8.1 10-Nov-24

Added git to CBL-Mariner 2.0

8.2 11-Nov-24

Added git to CBL-Mariner 2.0

8.3 12-Nov-24

Added git to CBL-Mariner 2.0

8.4 13-Nov-24

Added git to CBL-Mariner 2.0

8.5 14-Nov-24

Added git to CBL-Mariner 2.0

8.6 15-Nov-24

Added git to CBL-Mariner 2.0

8.7 16-Nov-24

Added git to CBL-Mariner 2.0

8.8 17-Nov-24

Added git to CBL-Mariner 2.0

8.9 18-Nov-24

Added git to CBL-Mariner 2.0

9.0 19-Nov-24

Added git to CBL-Mariner 2.0

9.1 20-Nov-24

Added git to CBL-Mariner 2.0

9.2 21-Nov-24

Added git to CBL-Mariner 2.0

9.3 23-Nov-24

Added git to CBL-Mariner 2.0

9.4 24-Nov-24

Added git to CBL-Mariner 2.0

9.5 25-Nov-24

Added git to CBL-Mariner 2.0

9.6 26-Nov-24

Added git to CBL-Mariner 2.0

9.7 27-Nov-24

Added git to CBL-Mariner 2.0

9.8 28-Nov-24

Added git to CBL-Mariner 2.0

9.9 29-Nov-24

Added git to CBL-Mariner 2.0

10.0 30-Nov-24

Added git to CBL-Mariner 2.0

10.1 01-Dec-24

Added git to CBL-Mariner 2.0

10.2 02-Dec-24

Added git to CBL-Mariner 2.0

10.3 03-Dec-24

Added git to CBL-Mariner 2.0

10.4 04-Dec-24

Added git to CBL-Mariner 2.0

10.5 05-Dec-24

Added git to CBL-Mariner 2.0

10.6 07-Dec-24

Added git to CBL-Mariner 2.0

10.7 08-Dec-24

Added git to CBL-Mariner 2.0

10.8 09-Dec-24

Added git to CBL-Mariner 2.0

10.9 10-Dec-24

Added git to CBL-Mariner 2.0

11.0 11-Dec-24

Added git to CBL-Mariner 2.0

11.1 12-Dec-24

Added git to CBL-Mariner 2.0

11.2 13-Dec-24

Added git to CBL-Mariner 2.0

11.3 14-Dec-24

Added git to CBL-Mariner 2.0

11.4 15-Dec-24

Added git to CBL-Mariner 2.0

11.5 16-Dec-24

Added git to CBL-Mariner 2.0

11.6 17-Dec-24

Added git to CBL-Mariner 2.0

11.7 18-Dec-24

Added git to CBL-Mariner 2.0

11.8 19-Dec-24

Added git to CBL-Mariner 2.0

11.9 20-Dec-24

Added git to CBL-Mariner 2.0

12.0 21-Dec-24

Added git to CBL-Mariner 2.0

12.1 22-Dec-24

Added git to CBL-Mariner 2.0

12.2 23-Dec-24

Added git to CBL-Mariner 2.0

12.3 24-Dec-24

Added git to CBL-Mariner 2.0

12.4 25-Dec-24

Added git to CBL-Mariner 2.0

12.5 26-Dec-24

Added git to CBL-Mariner 2.0

12.6 27-Dec-24

Added git to CBL-Mariner 2.0

12.7 28-Dec-24

Added git to CBL-Mariner 2.0

12.8 29-Dec-24

Added git to CBL-Mariner 2.0

12.9 30-Dec-24

Added git to CBL-Mariner 2.0

13.0 31-Dec-24

Added git to CBL-Mariner 2.0

13.1 01-Jan-25

Added git to CBL-Mariner 2.0

13.2 02-Jan-25

Added git to CBL-Mariner 2.0

13.3 03-Jan-25

Added git to CBL-Mariner 2.0

13.4 04-Jan-25

Added git to CBL-Mariner 2.0

13.5 05-Jan-25

Added git to CBL-Mariner 2.0

13.6 06-Jan-25

Added git to CBL-Mariner 2.0

13.7 07-Jan-25

Added git to CBL-Mariner 2.0

13.8 08-Jan-25

Added git to CBL-Mariner 2.0

13.9 09-Jan-25

Added git to CBL-Mariner 2.0

14.0 10-Jan-25

Added git to CBL-Mariner 2.0

14.1 11-Jan-25

Added git to CBL-Mariner 2.0

14.2 12-Jan-25

Added git to CBL-Mariner 2.0

14.3 13-Jan-25

Added git to CBL-Mariner 2.0

14.4 15-Jan-25

Added git to CBL-Mariner 2.0

14.5 16-Jan-25

Added git to CBL-Mariner 2.0

14.6 17-Jan-25

Added git to CBL-Mariner 2.0

14.7 18-Jan-25

Added git to CBL-Mariner 2.0

14.8 19-Jan-25

Added git to CBL-Mariner 2.0

14.9 20-Jan-25

Added git to CBL-Mariner 2.0

15.0 21-Jan-25

Added git to CBL-Mariner 2.0

15.1 22-Jan-25

Added git to CBL-Mariner 2.0

15.2 23-Jan-25

Added git to CBL-Mariner 2.0

15.3 24-Jan-25

Added git to CBL-Mariner 2.0

15.4 25-Jan-25

Added git to CBL-Mariner 2.0

15.5 27-Jan-25

Added git to CBL-Mariner 2.0

15.6 28-Jan-25

Added git to CBL-Mariner 2.0

15.7 29-Jan-25

Added git to CBL-Mariner 2.0

15.8 30-Jan-25

Added git to CBL-Mariner 2.0

15.9 01-Feb-25

Added git to CBL-Mariner 2.0

16.0 02-Feb-25

Added git to CBL-Mariner 2.0

16.1 03-Feb-25

Added git to CBL-Mariner 2.0

16.2 04-Feb-25

Added git to CBL-Mariner 2.0

16.3 05-Feb-25

Added git to CBL-Mariner 2.0

16.4 07-Feb-25

Added git to CBL-Mariner 2.0

16.5 08-Feb-25

Added git to CBL-Mariner 2.0

16.6 09-Feb-25

Added git to CBL-Mariner 2.0

16.7 10-Feb-25

Added git to CBL-Mariner 2.0

16.8 11-Feb-25

Added git to CBL-Mariner 2.0

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2024-32020
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Linux 3.0 ARM		Unknown	Unknown	None	Base: 3.9 Temporal: 3.9 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:L	Unknown	Unknown	None
Azure Linux 3.0 x64		Unknown	Unknown	None	Base: 3.9 Temporal: 3.9 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:L	Unknown	Unknown	None
CBL Mariner 2.0 ARM	git (CBL-Mariner)	Unknown	Unknown	None	Base: 3.9 Temporal: 3.9 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:L	2.39.4-1	Unknown	None
CBL Mariner 2.0 x64	git (CBL-Mariner)	Unknown	Unknown	None	Base: 3.9 Temporal: 3.9 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:L	2.39.4-1	Unknown	None

CVE ID	Acknowledgements
CVE-2024-32020	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2024-32465
MITRE
NVD

Issuing CNA: security-advisories@github.com

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:7.3/TemporalScore:7.3

Base score metrics
Attack Vector	Physical
Attack Complexity	Low
Privileges Required	None
User Interaction	Required
Scope	Changed
Confidentiality	High
Integrity	High
Availability	High

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
1.0 17-May-24

Information published.

1.1 30-Jun-24

Information published.

1.2 29-Aug-24

Information published.

1.3 30-Aug-24

Information published.

1.4 31-Aug-24

Information published.

1.5 01-Sep-24

Information published.

1.6 02-Sep-24

Information published.

1.7 03-Sep-24

Information published.

1.8 05-Sep-24

Information published.

1.9 06-Sep-24

Information published.

2.0 07-Sep-24

Information published.

2.1 08-Sep-24

Information published.

2.2 11-Sep-24

Information published.

2.3 12-Sep-24

Information published.

2.4 13-Sep-24

Information published.

2.5 14-Sep-24

Information published.

2.6 15-Sep-24

Information published.

2.7 16-Sep-24

Information published.

2.8 17-Sep-24

Information published.

2.9 18-Sep-24

Information published.

3.0 19-Sep-24

Information published.

3.1 20-Sep-24

Information published.

3.2 21-Sep-24

Information published.

3.3 22-Sep-24

Information published.

3.4 23-Sep-24

Information published.

3.5 24-Sep-24

Information published.

3.6 25-Sep-24

Information published.

3.7 26-Sep-24

Information published.

3.8 27-Sep-24

Information published.

3.9 28-Sep-24

Information published.

4.0 29-Sep-24

Information published.

4.1 30-Sep-24

Information published.

4.2 01-Oct-24

Information published.

4.3 02-Oct-24

Information published.

4.4 03-Oct-24

Information published.

4.5 04-Oct-24

Information published.

4.6 05-Oct-24

Information published.

4.7 06-Oct-24

Information published.

4.8 07-Oct-24

Information published.

4.9 08-Oct-24

Information published.

5.0 09-Oct-24

Information published.

5.1 10-Oct-24

Information published.

5.2 11-Oct-24

Information published.

5.3 12-Oct-24

Information published.

5.4 13-Oct-24

Information published.

5.5 14-Oct-24

Information published.

5.6 15-Oct-24

Added git to CBL-Mariner 2.0

5.7 16-Oct-24

Added git to CBL-Mariner 2.0

5.8 17-Oct-24

Added git to CBL-Mariner 2.0

5.9 18-Oct-24

Added git to CBL-Mariner 2.0

6.0 19-Oct-24

Added git to CBL-Mariner 2.0

6.1 20-Oct-24

Added git to CBL-Mariner 2.0

6.2 21-Oct-24

Added git to CBL-Mariner 2.0

6.3 22-Oct-24

Added git to CBL-Mariner 2.0

6.4 23-Oct-24

Added git to CBL-Mariner 2.0

6.5 24-Oct-24

Added git to CBL-Mariner 2.0

6.6 25-Oct-24

Added git to CBL-Mariner 2.0

6.7 26-Oct-24

Added git to CBL-Mariner 2.0

6.8 27-Oct-24

Added git to CBL-Mariner 2.0

6.9 28-Oct-24

Added git to CBL-Mariner 2.0

7.0 29-Oct-24

Added git to CBL-Mariner 2.0

7.1 30-Oct-24

Added git to CBL-Mariner 2.0

7.2 31-Oct-24

Added git to CBL-Mariner 2.0

7.3 01-Nov-24

Added git to CBL-Mariner 2.0

7.4 02-Nov-24

Added git to CBL-Mariner 2.0

7.5 04-Nov-24

Added git to CBL-Mariner 2.0

7.6 05-Nov-24

Added git to CBL-Mariner 2.0

7.7 06-Nov-24

Added git to CBL-Mariner 2.0

7.8 07-Nov-24

Added git to CBL-Mariner 2.0

7.9 08-Nov-24

Added git to CBL-Mariner 2.0

8.0 09-Nov-24

Added git to CBL-Mariner 2.0

8.1 10-Nov-24

Added git to CBL-Mariner 2.0

8.2 11-Nov-24

Added git to CBL-Mariner 2.0

8.3 12-Nov-24

Added git to CBL-Mariner 2.0

8.4 13-Nov-24

Added git to CBL-Mariner 2.0

8.5 14-Nov-24

Added git to CBL-Mariner 2.0

8.6 15-Nov-24

Added git to CBL-Mariner 2.0

8.7 16-Nov-24

Added git to CBL-Mariner 2.0

8.8 17-Nov-24

Added git to CBL-Mariner 2.0

8.9 18-Nov-24

Added git to CBL-Mariner 2.0

9.0 19-Nov-24

Added git to CBL-Mariner 2.0

9.1 20-Nov-24

Added git to CBL-Mariner 2.0

9.2 21-Nov-24

Added git to CBL-Mariner 2.0

9.3 23-Nov-24

Added git to CBL-Mariner 2.0

9.4 24-Nov-24

Added git to CBL-Mariner 2.0

9.5 25-Nov-24

Added git to CBL-Mariner 2.0

9.6 26-Nov-24

Added git to CBL-Mariner 2.0

9.7 27-Nov-24

Added git to CBL-Mariner 2.0

9.8 28-Nov-24

Added git to CBL-Mariner 2.0

9.9 29-Nov-24

Added git to CBL-Mariner 2.0

10.0 30-Nov-24

Added git to CBL-Mariner 2.0

10.1 01-Dec-24

Added git to CBL-Mariner 2.0

10.2 02-Dec-24

Added git to CBL-Mariner 2.0

10.3 03-Dec-24

Added git to CBL-Mariner 2.0

10.4 04-Dec-24

Added git to CBL-Mariner 2.0

10.5 05-Dec-24

Added git to CBL-Mariner 2.0

10.6 07-Dec-24

Added git to CBL-Mariner 2.0

10.7 08-Dec-24

Added git to CBL-Mariner 2.0

10.8 09-Dec-24

Added git to CBL-Mariner 2.0

10.9 10-Dec-24

Added git to CBL-Mariner 2.0

11.0 11-Dec-24

Added git to CBL-Mariner 2.0

11.1 12-Dec-24

Added git to CBL-Mariner 2.0

11.2 13-Dec-24

Added git to CBL-Mariner 2.0

11.3 14-Dec-24

Added git to CBL-Mariner 2.0

11.4 15-Dec-24

Added git to CBL-Mariner 2.0

11.5 16-Dec-24

Added git to CBL-Mariner 2.0

11.6 17-Dec-24

Added git to CBL-Mariner 2.0

11.7 18-Dec-24

Added git to CBL-Mariner 2.0

11.8 19-Dec-24

Added git to CBL-Mariner 2.0

11.9 20-Dec-24

Added git to CBL-Mariner 2.0

12.0 21-Dec-24

Added git to CBL-Mariner 2.0

12.1 22-Dec-24

Added git to CBL-Mariner 2.0

12.2 23-Dec-24

Added git to CBL-Mariner 2.0

12.3 24-Dec-24

Added git to CBL-Mariner 2.0

12.4 25-Dec-24

Added git to CBL-Mariner 2.0

12.5 26-Dec-24

Added git to CBL-Mariner 2.0

12.6 27-Dec-24

Added git to CBL-Mariner 2.0

12.7 28-Dec-24

Added git to CBL-Mariner 2.0

12.8 29-Dec-24

Added git to CBL-Mariner 2.0

12.9 30-Dec-24

Added git to CBL-Mariner 2.0

13.0 31-Dec-24

Added git to CBL-Mariner 2.0

13.1 01-Jan-25

Added git to CBL-Mariner 2.0

13.2 02-Jan-25

Added git to CBL-Mariner 2.0

13.3 03-Jan-25

Added git to CBL-Mariner 2.0

13.4 04-Jan-25

Added git to CBL-Mariner 2.0

13.5 05-Jan-25

Added git to CBL-Mariner 2.0

13.6 06-Jan-25

Added git to CBL-Mariner 2.0

13.7 07-Jan-25

Added git to CBL-Mariner 2.0

13.8 08-Jan-25

Added git to CBL-Mariner 2.0

13.9 09-Jan-25

Added git to CBL-Mariner 2.0

14.0 10-Jan-25

Added git to CBL-Mariner 2.0

14.1 11-Jan-25

Added git to CBL-Mariner 2.0

14.2 12-Jan-25

Added git to CBL-Mariner 2.0

14.3 13-Jan-25

Added git to CBL-Mariner 2.0

14.4 15-Jan-25

Added git to CBL-Mariner 2.0

14.5 16-Jan-25

Added git to CBL-Mariner 2.0

14.6 17-Jan-25

Added git to CBL-Mariner 2.0

14.7 18-Jan-25

Added git to CBL-Mariner 2.0

14.8 19-Jan-25

Added git to CBL-Mariner 2.0

14.9 20-Jan-25

Added git to CBL-Mariner 2.0

15.0 21-Jan-25

Added git to CBL-Mariner 2.0

15.1 22-Jan-25

Added git to CBL-Mariner 2.0

15.2 23-Jan-25

Added git to CBL-Mariner 2.0

15.3 24-Jan-25

Added git to CBL-Mariner 2.0

15.4 25-Jan-25

Added git to CBL-Mariner 2.0

15.5 27-Jan-25

Added git to CBL-Mariner 2.0

15.6 28-Jan-25

Added git to CBL-Mariner 2.0

15.7 29-Jan-25

Added git to CBL-Mariner 2.0

15.8 30-Jan-25

Added git to CBL-Mariner 2.0

15.9 01-Feb-25

Added git to CBL-Mariner 2.0

16.0 02-Feb-25

Added git to CBL-Mariner 2.0

16.1 03-Feb-25

Added git to CBL-Mariner 2.0

16.2 04-Feb-25

Added git to CBL-Mariner 2.0

16.3 05-Feb-25

Added git to CBL-Mariner 2.0

16.4 07-Feb-25

Added git to CBL-Mariner 2.0

16.5 08-Feb-25

Added git to CBL-Mariner 2.0

16.6 09-Feb-25

Added git to CBL-Mariner 2.0

16.7 10-Feb-25

Added git to CBL-Mariner 2.0

16.8 11-Feb-25

Added git to CBL-Mariner 2.0

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2024-32465
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Linux 3.0 ARM		Unknown	Unknown	None	Base: 7.3 Temporal: 7.3 Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H	Unknown	Unknown	None
Azure Linux 3.0 x64		Unknown	Unknown	None	Base: 7.3 Temporal: 7.3 Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H	Unknown	Unknown	None
CBL Mariner 2.0 ARM	git (CBL-Mariner)	Unknown	Unknown	None	Base: 7.3 Temporal: 7.3 Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H	2.39.4-1	Unknown	None
CBL Mariner 2.0 x64	git (CBL-Mariner)	Unknown	Unknown	None	Base: 7.3 Temporal: 7.3 Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H	2.39.4-1	Unknown	None

CVE ID	Acknowledgements
CVE-2024-32465	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2024-50349
MITRE
NVD

Issuing CNA: security-advisories@github.com

CVE Title: Unknown
CVSS:
None
Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
0.1 22-Jan-25

Information published.

0.2 23-Jan-25

Information published.

0.3 24-Jan-25

Information published.

0.4 25-Jan-25

Information published.

0.5 27-Jan-25

Information published.

0.6 28-Jan-25

Information published.

0.7 29-Jan-25

Information published.

0.8 30-Jan-25

Information published.

0.9 01-Feb-25

Information published.

1.0 02-Feb-25

Information published.

1.1 03-Feb-25

Added git to CBL-Mariner 2.0

1.2 04-Feb-25

Added git to CBL-Mariner 2.0

1.3 05-Feb-25

Added git to CBL-Mariner 2.0

1.4 07-Feb-25

Added git to CBL-Mariner 2.0

1.5 08-Feb-25

Added git to CBL-Mariner 2.0

1.6 09-Feb-25

Added git to CBL-Mariner 2.0

1.7 10-Feb-25

Added git to CBL-Mariner 2.0

1.8 11-Feb-25

Added git to CBL-Mariner 2.0

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2024-50349
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Linux 3.0 ARM		Unknown	Unknown	None	Base: N/A Temporal: N/A Vector: N/A	Unknown	Unknown	None
Azure Linux 3.0 x64		Unknown	Unknown	None	Base: N/A Temporal: N/A Vector: N/A	Unknown	Unknown	None
CBL Mariner 2.0 ARM	git (CBL-Mariner)	Unknown	Unknown	None	Base: N/A Temporal: N/A Vector: N/A	2.40.4-1	Unknown	None
CBL Mariner 2.0 x64	git (CBL-Mariner)	Unknown	Unknown	None	Base: N/A Temporal: N/A Vector: N/A	2.40.4-1	Unknown	None

CVE ID	Acknowledgements
CVE-2024-50349	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2024-52006
MITRE
NVD

Issuing CNA: security-advisories@github.com

CVE Title: Unknown
CVSS:
None
Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
0.1 22-Jan-25

Information published.

0.2 23-Jan-25

Information published.

0.3 24-Jan-25

Information published.

0.4 25-Jan-25

Information published.

0.5 27-Jan-25

Information published.

0.6 28-Jan-25

Information published.

0.7 29-Jan-25

Information published.

0.8 30-Jan-25

Information published.

0.9 01-Feb-25

Information published.

1.0 02-Feb-25

Information published.

1.1 03-Feb-25

Added git to CBL-Mariner 2.0

1.2 04-Feb-25

Added git to CBL-Mariner 2.0

1.3 05-Feb-25

Added git to CBL-Mariner 2.0

1.4 07-Feb-25

Added git to CBL-Mariner 2.0

1.5 08-Feb-25

Added git to CBL-Mariner 2.0

1.6 09-Feb-25

Added git to CBL-Mariner 2.0

1.7 10-Feb-25

Added git to CBL-Mariner 2.0

1.8 11-Feb-25

Added git to CBL-Mariner 2.0

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2024-52006
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Linux 3.0 ARM		Unknown	Unknown	None	Base: N/A Temporal: N/A Vector: N/A	Unknown	Unknown	None
Azure Linux 3.0 x64		Unknown	Unknown	None	Base: N/A Temporal: N/A Vector: N/A	Unknown	Unknown	None
CBL Mariner 2.0 ARM	git (CBL-Mariner)	Unknown	Unknown	None	Base: N/A Temporal: N/A Vector: N/A	2.40.4-1	Unknown	None
CBL Mariner 2.0 x64	git (CBL-Mariner)	Unknown	Unknown	None	Base: N/A Temporal: N/A Vector: N/A	2.40.4-1	Unknown	None

CVE ID	Acknowledgements
CVE-2024-52006	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-23083
MITRE
NVD

Issuing CNA: support@hackerone.com

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:7.7/TemporalScore:7.7

Base score metrics
Attack Vector	Local
Attack Complexity	Low
Privileges Required	None
User Interaction	None
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	None

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
0.1 01-Feb-25

Information published.

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2025-23083
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Linux 3.0 ARM	nodejs (CBL-Mariner)	Unknown	Unknown	None	Base: 7.7 Temporal: 7.7 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N	20.14.0-4	Unknown	None
Azure Linux 3.0 x64	nodejs (CBL-Mariner)	Unknown	Unknown	None	Base: 7.7 Temporal: 7.7 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N	20.14.0-4	Unknown	None

CVE ID	Acknowledgements
CVE-2025-23083	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2024-7383
MITRE
NVD

Issuing CNA: secalert@redhat.com

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:7.4/TemporalScore:7.4

Base score metrics
Attack Vector	Network
Attack Complexity	High
Privileges Required	None
User Interaction	None
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	None

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Sep-24

Information published.

1.1 15-Oct-24

Added libnbd to CBL-Mariner 2.0

1.2 16-Oct-24

Added libnbd to CBL-Mariner 2.0

1.3 17-Oct-24

Added libnbd to CBL-Mariner 2.0

1.4 18-Oct-24

Added libnbd to CBL-Mariner 2.0

1.5 19-Oct-24

Added libnbd to CBL-Mariner 2.0

1.6 20-Oct-24

Added libnbd to CBL-Mariner 2.0

1.7 21-Oct-24

Added libnbd to CBL-Mariner 2.0

1.8 22-Oct-24

Added libnbd to CBL-Mariner 2.0

1.9 23-Oct-24

Added libnbd to CBL-Mariner 2.0

2.0 24-Oct-24

Added libnbd to CBL-Mariner 2.0

2.1 25-Oct-24

Added libnbd to CBL-Mariner 2.0

2.2 26-Oct-24

Added libnbd to CBL-Mariner 2.0

2.3 27-Oct-24

Added libnbd to CBL-Mariner 2.0

2.4 28-Oct-24

Added libnbd to CBL-Mariner 2.0

2.5 29-Oct-24

Added libnbd to CBL-Mariner 2.0

2.6 30-Oct-24

Added libnbd to CBL-Mariner 2.0

2.7 31-Oct-24

Added libnbd to CBL-Mariner 2.0

2.8 01-Nov-24

Added libnbd to CBL-Mariner 2.0

2.9 02-Nov-24

Added libnbd to CBL-Mariner 2.0

3.0 04-Nov-24

Added libnbd to CBL-Mariner 2.0

3.1 05-Nov-24

Added libnbd to CBL-Mariner 2.0

3.2 06-Nov-24

Added libnbd to CBL-Mariner 2.0

3.3 07-Nov-24

Added libnbd to CBL-Mariner 2.0

3.4 08-Nov-24

Added libnbd to CBL-Mariner 2.0

3.5 09-Nov-24

Added libnbd to CBL-Mariner 2.0

3.6 10-Nov-24

Added libnbd to CBL-Mariner 2.0

3.7 11-Nov-24

Added libnbd to CBL-Mariner 2.0

3.8 12-Nov-24

Added libnbd to CBL-Mariner 2.0

3.9 13-Nov-24

Added libnbd to CBL-Mariner 2.0

4.0 14-Nov-24

Added libnbd to CBL-Mariner 2.0

4.1 15-Nov-24

Added libnbd to CBL-Mariner 2.0

4.2 16-Nov-24

Added libnbd to CBL-Mariner 2.0

4.3 17-Nov-24

Added libnbd to CBL-Mariner 2.0

4.4 18-Nov-24

Added libnbd to CBL-Mariner 2.0

4.5 19-Nov-24

Added libnbd to CBL-Mariner 2.0

4.6 20-Nov-24

Added libnbd to CBL-Mariner 2.0

4.7 21-Nov-24

Added libnbd to CBL-Mariner 2.0

4.8 23-Nov-24

Added libnbd to CBL-Mariner 2.0

4.9 24-Nov-24

Added libnbd to CBL-Mariner 2.0

5.0 25-Nov-24

Added libnbd to CBL-Mariner 2.0

5.1 26-Nov-24

Added libnbd to CBL-Mariner 2.0

5.2 27-Nov-24

Added libnbd to CBL-Mariner 2.0

5.3 28-Nov-24

Added libnbd to CBL-Mariner 2.0

5.4 29-Nov-24

Added libnbd to CBL-Mariner 2.0

5.5 30-Nov-24

Added libnbd to CBL-Mariner 2.0

5.6 01-Dec-24

Added libnbd to CBL-Mariner 2.0

5.7 02-Dec-24

Added libnbd to CBL-Mariner 2.0

5.8 03-Dec-24

Added libnbd to CBL-Mariner 2.0

5.9 04-Dec-24

Added libnbd to CBL-Mariner 2.0

6.0 05-Dec-24

Added libnbd to CBL-Mariner 2.0

6.1 07-Dec-24

Added libnbd to CBL-Mariner 2.0

6.2 08-Dec-24

Added libnbd to CBL-Mariner 2.0

6.3 09-Dec-24

Added libnbd to CBL-Mariner 2.0

6.4 10-Dec-24

Added libnbd to CBL-Mariner 2.0

6.5 11-Dec-24

Added libnbd to CBL-Mariner 2.0

6.6 12-Dec-24

Added libnbd to CBL-Mariner 2.0

6.7 13-Dec-24

Added libnbd to CBL-Mariner 2.0

6.8 14-Dec-24

Added libnbd to CBL-Mariner 2.0

6.9 15-Dec-24

Added libnbd to CBL-Mariner 2.0

7.0 16-Dec-24

Added libnbd to CBL-Mariner 2.0

7.1 17-Dec-24

Added libnbd to CBL-Mariner 2.0

7.2 18-Dec-24

Added libnbd to CBL-Mariner 2.0

7.3 19-Dec-24

Added libnbd to CBL-Mariner 2.0

7.4 20-Dec-24

Added libnbd to CBL-Mariner 2.0

7.5 21-Dec-24

Added libnbd to CBL-Mariner 2.0

7.6 22-Dec-24

Added libnbd to CBL-Mariner 2.0

7.7 23-Dec-24

Added libnbd to CBL-Mariner 2.0

7.8 24-Dec-24

Added libnbd to CBL-Mariner 2.0

7.9 25-Dec-24

Added libnbd to CBL-Mariner 2.0

8.0 26-Dec-24

Added libnbd to CBL-Mariner 2.0

8.1 27-Dec-24

Added libnbd to CBL-Mariner 2.0

8.2 28-Dec-24

Added libnbd to CBL-Mariner 2.0

8.3 29-Dec-24

Added libnbd to CBL-Mariner 2.0

8.4 30-Dec-24

Added libnbd to CBL-Mariner 2.0

8.5 31-Dec-24

Added libnbd to CBL-Mariner 2.0

8.6 01-Jan-25

Added libnbd to CBL-Mariner 2.0

8.7 02-Jan-25

Added libnbd to CBL-Mariner 2.0

8.8 03-Jan-25

Added libnbd to CBL-Mariner 2.0

8.9 04-Jan-25

Added libnbd to CBL-Mariner 2.0

9.0 05-Jan-25

Added libnbd to CBL-Mariner 2.0

9.1 06-Jan-25

Added libnbd to CBL-Mariner 2.0

9.2 07-Jan-25

Added libnbd to CBL-Mariner 2.0

9.3 08-Jan-25

Added libnbd to CBL-Mariner 2.0

9.4 09-Jan-25

Added libnbd to CBL-Mariner 2.0

9.5 10-Jan-25

Added libnbd to CBL-Mariner 2.0

9.6 11-Jan-25

Added libnbd to CBL-Mariner 2.0

9.7 12-Jan-25

Added libnbd to CBL-Mariner 2.0

9.8 13-Jan-25

Added libnbd to CBL-Mariner 2.0

9.9 15-Jan-25

Added libnbd to CBL-Mariner 2.0

10.0 16-Jan-25

Added libnbd to CBL-Mariner 2.0

10.1 17-Jan-25

Added libnbd to CBL-Mariner 2.0

10.2 18-Jan-25

Added libnbd to CBL-Mariner 2.0

10.3 19-Jan-25

Added libnbd to CBL-Mariner 2.0

10.4 20-Jan-25

Added libnbd to CBL-Mariner 2.0

10.5 21-Jan-25

Added libnbd to CBL-Mariner 2.0

10.6 22-Jan-25

Added libnbd to CBL-Mariner 2.0

10.7 23-Jan-25

Added libnbd to CBL-Mariner 2.0

10.8 24-Jan-25

Added libnbd to CBL-Mariner 2.0

10.9 25-Jan-25

Added libnbd to CBL-Mariner 2.0

11.0 27-Jan-25

Added libnbd to CBL-Mariner 2.0

11.1 28-Jan-25

Added libnbd to CBL-Mariner 2.0

11.2 29-Jan-25

Added libnbd to CBL-Mariner 2.0

11.3 30-Jan-25

Added libnbd to CBL-Mariner 2.0

11.4 01-Feb-25

Added libnbd to CBL-Mariner 2.0

11.5 02-Feb-25

Added libnbd to CBL-Mariner 2.0

11.6 03-Feb-25

Added libnbd to CBL-Mariner 2.0

11.7 04-Feb-25

Added libnbd to CBL-Mariner 2.0

11.8 05-Feb-25

Added libnbd to CBL-Mariner 2.0

11.9 07-Feb-25

Added libnbd to CBL-Mariner 2.0

12.0 08-Feb-25

Added libnbd to CBL-Mariner 2.0

12.1 09-Feb-25

Added libnbd to CBL-Mariner 2.0

12.2 10-Feb-25

Added libnbd to CBL-Mariner 2.0

12.3 11-Feb-25

Added libnbd to CBL-Mariner 2.0

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2024-7383
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Linux 3.0 ARM		Unknown	Unknown	None	Base: 7.4 Temporal: 7.4 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N	Unknown	Unknown	None
Azure Linux 3.0 x64		Unknown	Unknown	None	Base: 7.4 Temporal: 7.4 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N	Unknown	Unknown	None
CBL Mariner 2.0 ARM	libnbd (CBL-Mariner)	Unknown	Unknown	None	Base: 7.4 Temporal: 7.4 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N	1.12.1-4	Unknown	None
CBL Mariner 2.0 x64	libnbd (CBL-Mariner)	Unknown	Unknown	None	Base: 7.4 Temporal: 7.4 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N	1.12.1-4	Unknown	None

CVE ID	Acknowledgements
CVE-2024-7383	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2021-20286
MITRE
NVD

Issuing CNA: secalert@redhat.com

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:2.7/TemporalScore:2.7

Base score metrics
Attack Vector	Network
Attack Complexity	Low
Privileges Required	High
User Interaction	None
Scope	Unchanged
Confidentiality	None
Integrity	None
Availability	Low

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
1.0 19-Jan-22

Information published.

1.1 29-Aug-24

Information published.

1.2 30-Aug-24

Information published.

1.3 31-Aug-24

Information published.

1.4 01-Sep-24

Information published.

1.5 02-Sep-24

Information published.

1.6 03-Sep-24

Information published.

1.7 05-Sep-24

Information published.

1.8 06-Sep-24

Information published.

1.9 07-Sep-24

Information published.

2.0 08-Sep-24

Information published.

2.1 11-Sep-24

Information published.

2.2 12-Sep-24

Information published.

2.3 13-Sep-24

Information published.

2.4 14-Sep-24

Information published.

2.5 15-Sep-24

Information published.

2.6 16-Sep-24

Information published.

2.7 17-Sep-24

Information published.

2.8 18-Sep-24

Information published.

2.9 19-Sep-24

Information published.

3.0 20-Sep-24

Information published.

3.1 21-Sep-24

Information published.

3.2 22-Sep-24

Information published.

3.3 23-Sep-24

Information published.

3.4 24-Sep-24

Information published.

3.5 25-Sep-24

Information published.

3.6 26-Sep-24

Information published.

3.7 27-Sep-24

Information published.

3.8 28-Sep-24

Information published.

3.9 29-Sep-24

Information published.

4.0 30-Sep-24

Information published.

4.1 01-Oct-24

Information published.

4.2 02-Oct-24

Information published.

4.3 03-Oct-24

Information published.

4.4 04-Oct-24

Information published.

4.5 05-Oct-24

Information published.

4.6 06-Oct-24

Information published.

4.7 07-Oct-24

Information published.

4.8 09-Oct-24

Information published.

4.9 10-Oct-24

Information published.

5.0 11-Oct-24

Information published.

5.1 12-Oct-24

Information published.

5.2 13-Oct-24

Information published.

5.3 14-Oct-24

Information published.

5.4 15-Oct-24

Added libnbd to CBL-Mariner 2.0

5.5 16-Oct-24

Added libnbd to CBL-Mariner 2.0

5.6 17-Oct-24

Added libnbd to CBL-Mariner 2.0

5.7 18-Oct-24

Added libnbd to CBL-Mariner 2.0

5.8 19-Oct-24

Added libnbd to CBL-Mariner 2.0

5.9 20-Oct-24

Added libnbd to CBL-Mariner 2.0

6.0 21-Oct-24

Added libnbd to CBL-Mariner 2.0

6.1 22-Oct-24

Added libnbd to CBL-Mariner 2.0

6.2 23-Oct-24

Added libnbd to CBL-Mariner 2.0

6.3 24-Oct-24

Added libnbd to CBL-Mariner 2.0

6.4 25-Oct-24

Added libnbd to CBL-Mariner 2.0

6.5 26-Oct-24

Added libnbd to CBL-Mariner 2.0

6.6 27-Oct-24

Added libnbd to CBL-Mariner 2.0

6.7 28-Oct-24

Added libnbd to CBL-Mariner 2.0

6.8 29-Oct-24

Added libnbd to CBL-Mariner 2.0

6.9 30-Oct-24

Added libnbd to CBL-Mariner 2.0

7.0 31-Oct-24

Added libnbd to CBL-Mariner 2.0

7.1 01-Nov-24

Added libnbd to CBL-Mariner 2.0

7.2 02-Nov-24

Added libnbd to CBL-Mariner 2.0

7.3 04-Nov-24

Added libnbd to CBL-Mariner 2.0

7.4 05-Nov-24

Added libnbd to CBL-Mariner 2.0

7.5 06-Nov-24

Added libnbd to CBL-Mariner 2.0

7.6 07-Nov-24

Added libnbd to CBL-Mariner 2.0

7.7 08-Nov-24

Added libnbd to CBL-Mariner 2.0

7.8 09-Nov-24

Added libnbd to CBL-Mariner 2.0

7.9 10-Nov-24

Added libnbd to CBL-Mariner 2.0

8.0 11-Nov-24

Added libnbd to CBL-Mariner 2.0

8.1 12-Nov-24

Added libnbd to CBL-Mariner 2.0

8.2 13-Nov-24

Added libnbd to CBL-Mariner 2.0

8.3 14-Nov-24

Added libnbd to CBL-Mariner 2.0

8.4 15-Nov-24

Added libnbd to CBL-Mariner 2.0

8.5 16-Nov-24

Added libnbd to CBL-Mariner 2.0

8.6 17-Nov-24

Added libnbd to CBL-Mariner 2.0

8.7 18-Nov-24

Added libnbd to CBL-Mariner 2.0

8.8 19-Nov-24

Added libnbd to CBL-Mariner 2.0

8.9 20-Nov-24

Added libnbd to CBL-Mariner 2.0

9.0 21-Nov-24

Added libnbd to CBL-Mariner 2.0

9.1 23-Nov-24

Added libnbd to CBL-Mariner 2.0

9.2 24-Nov-24

Added libnbd to CBL-Mariner 2.0

9.3 25-Nov-24

Added libnbd to CBL-Mariner 2.0

9.4 26-Nov-24

Added libnbd to CBL-Mariner 2.0

9.5 27-Nov-24

Added libnbd to CBL-Mariner 2.0

9.6 28-Nov-24

Added libnbd to CBL-Mariner 2.0

9.7 29-Nov-24

Added libnbd to CBL-Mariner 2.0

9.8 30-Nov-24

Added libnbd to CBL-Mariner 2.0

9.9 01-Dec-24

Added libnbd to CBL-Mariner 2.0

10.0 02-Dec-24

Added libnbd to CBL-Mariner 2.0

10.1 03-Dec-24

Added libnbd to CBL-Mariner 2.0

10.2 04-Dec-24

Added libnbd to CBL-Mariner 2.0

10.3 05-Dec-24

Added libnbd to CBL-Mariner 2.0

10.4 07-Dec-24

Added libnbd to CBL-Mariner 2.0

10.5 08-Dec-24

Added libnbd to CBL-Mariner 2.0

10.6 09-Dec-24

Added libnbd to CBL-Mariner 2.0

10.7 10-Dec-24

Added libnbd to CBL-Mariner 2.0

10.8 11-Dec-24

Added libnbd to CBL-Mariner 2.0

10.9 12-Dec-24

Added libnbd to CBL-Mariner 2.0

11.0 13-Dec-24

Added libnbd to CBL-Mariner 2.0

11.1 14-Dec-24

Added libnbd to CBL-Mariner 2.0

11.2 15-Dec-24

Added libnbd to CBL-Mariner 2.0

11.3 16-Dec-24

Added libnbd to CBL-Mariner 2.0

11.4 17-Dec-24

Added libnbd to CBL-Mariner 2.0

11.5 18-Dec-24

Added libnbd to CBL-Mariner 2.0

11.6 19-Dec-24

Added libnbd to CBL-Mariner 2.0

11.7 20-Dec-24

Added libnbd to CBL-Mariner 2.0

11.8 21-Dec-24

Added libnbd to CBL-Mariner 2.0

11.9 22-Dec-24

Added libnbd to CBL-Mariner 2.0

12.0 23-Dec-24

Added libnbd to CBL-Mariner 2.0

12.1 24-Dec-24

Added libnbd to CBL-Mariner 2.0

12.2 25-Dec-24

Added libnbd to CBL-Mariner 2.0

12.3 26-Dec-24

Added libnbd to CBL-Mariner 2.0

12.4 27-Dec-24

Added libnbd to CBL-Mariner 2.0

12.5 28-Dec-24

Added libnbd to CBL-Mariner 2.0

12.6 29-Dec-24

Added libnbd to CBL-Mariner 2.0

12.7 30-Dec-24

Added libnbd to CBL-Mariner 2.0

12.8 31-Dec-24

Added libnbd to CBL-Mariner 2.0

12.9 01-Jan-25

Added libnbd to CBL-Mariner 2.0

13.0 02-Jan-25

Added libnbd to CBL-Mariner 2.0

13.1 03-Jan-25

Added libnbd to CBL-Mariner 2.0

13.2 04-Jan-25

Added libnbd to CBL-Mariner 2.0

13.3 05-Jan-25

Added libnbd to CBL-Mariner 2.0

13.4 06-Jan-25

Added libnbd to CBL-Mariner 2.0

13.5 07-Jan-25

Added libnbd to CBL-Mariner 2.0

13.6 08-Jan-25

Added libnbd to CBL-Mariner 2.0

13.7 09-Jan-25

Added libnbd to CBL-Mariner 2.0

13.8 10-Jan-25

Added libnbd to CBL-Mariner 2.0

13.9 11-Jan-25

Added libnbd to CBL-Mariner 2.0

14.0 12-Jan-25

Added libnbd to CBL-Mariner 2.0

14.1 13-Jan-25

Added libnbd to CBL-Mariner 2.0

14.2 15-Jan-25

Added libnbd to CBL-Mariner 2.0

14.3 16-Jan-25

Added libnbd to CBL-Mariner 2.0

14.4 17-Jan-25

Added libnbd to CBL-Mariner 2.0

14.5 18-Jan-25

Added libnbd to CBL-Mariner 2.0

14.6 19-Jan-25

Added libnbd to CBL-Mariner 2.0

14.7 20-Jan-25

Added libnbd to CBL-Mariner 2.0

14.8 21-Jan-25

Added libnbd to CBL-Mariner 2.0

14.9 22-Jan-25

Added libnbd to CBL-Mariner 2.0

15.0 23-Jan-25

Added libnbd to CBL-Mariner 2.0

15.1 24-Jan-25

Added libnbd to CBL-Mariner 2.0

15.2 25-Jan-25

Added libnbd to CBL-Mariner 2.0

15.3 27-Jan-25

Added libnbd to CBL-Mariner 2.0

15.4 28-Jan-25

Added libnbd to CBL-Mariner 2.0

15.5 29-Jan-25

Added libnbd to CBL-Mariner 2.0

15.6 30-Jan-25

Added libnbd to CBL-Mariner 2.0

15.7 01-Feb-25

Added libnbd to CBL-Mariner 2.0

15.8 02-Feb-25

Added libnbd to CBL-Mariner 2.0

15.9 03-Feb-25

Added libnbd to CBL-Mariner 2.0

16.0 04-Feb-25

Added libnbd to CBL-Mariner 2.0

16.1 05-Feb-25

Added libnbd to CBL-Mariner 2.0

16.2 07-Feb-25

Added libnbd to CBL-Mariner 2.0

16.3 08-Feb-25

Added libnbd to CBL-Mariner 2.0

16.4 09-Feb-25

Added libnbd to CBL-Mariner 2.0

16.5 10-Feb-25

Added libnbd to CBL-Mariner 2.0

16.6 11-Feb-25

Added libnbd to CBL-Mariner 2.0

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2021-20286
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Linux 3.0 ARM		Unknown	Unknown	None	Base: 2.7 Temporal: 2.7 Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L	Unknown	Unknown	None
Azure Linux 3.0 x64		Unknown	Unknown	None	Base: 2.7 Temporal: 2.7 Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L	Unknown	Unknown	None
CBL Mariner 2.0 ARM	libnbd (CBL-Mariner)	Unknown	Unknown	None	Base: 2.7 Temporal: 2.7 Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L	1.12.1-1	Unknown	None
CBL Mariner 2.0 x64	libnbd (CBL-Mariner)	Unknown	Unknown	None	Base: 2.7 Temporal: 2.7 Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L	1.12.1-1	Unknown	None

CVE ID	Acknowledgements
CVE-2021-20286	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2023-39325
MITRE
NVD

Issuing CNA: security@golang.org

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:7.5/TemporalScore:7.5

Base score metrics
Attack Vector	Network
Attack Complexity	Low
Privileges Required	None
User Interaction	None
Scope	Unchanged
Confidentiality	None
Integrity	None
Availability	High

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
1.0 23-Oct-23

Information published.

1.2 24-Oct-23

Added moby-compose to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0

1.1 28-Oct-23

Added coredns to CBL-Mariner 2.0

1.3 18-Jan-24

Added packer to CBL-Mariner 2.0

1.5 02-Feb-24

Added kata-containers-cc to CBL-Mariner 2.0

1.6 07-Mar-24

Added kata-containers to CBL-Mariner 2.0

1.4 20-Apr-24

Added git-lfs to CBL-Mariner 2.0

1.7 30-Jun-24

Information published.

1.8 12-Jul-24

Information published.

1.9 15-Aug-24

Information published.

2.0 16-Aug-24

Information published.

2.1 17-Aug-24

Information published.

2.2 18-Aug-24

Information published.

2.3 19-Aug-24

Information published.

2.4 20-Aug-24

Information published.

2.5 21-Aug-24

Information published.

2.6 22-Aug-24

Information published.

2.7 23-Aug-24

Information published.

2.8 24-Aug-24

Information published.

2.9 25-Aug-24

Information published.

3.0 26-Aug-24

Information published.

3.1 27-Aug-24

Information published.

3.2 28-Aug-24

Information published.

3.3 29-Aug-24

Information published.

3.4 30-Aug-24

Information published.

3.5 31-Aug-24

Information published.

3.6 01-Sep-24

Information published.

3.7 02-Sep-24

Information published.

3.8 03-Sep-24

Information published.

3.9 05-Sep-24

Information published.

4.0 06-Sep-24

Information published.

4.1 07-Sep-24

Information published.

4.2 08-Sep-24

Information published.

4.3 11-Sep-24

Information published.

4.4 12-Nov-24

Added prometheus to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added packer to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added cf-cli to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added vitess to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added etcd to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added moby-containerd-cc to Azure Linux 3.0

4.5 30-Jan-25

Added containerized-data-importer to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added cf-cli to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added vitess to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added etcd to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added moby-containerd-cc to Azure Linux 3.0 Added prometheus to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added packer to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0

4.6 01-Feb-25

Added git-lfs to Azure Linux 3.0 Added containerized-data-importer to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added cf-cli to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added vitess to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added etcd to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added moby-containerd-cc to Azure Linux 3.0 Added prometheus to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added packer to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0

4.7 11-Feb-25

Added application-gateway-kubernetes-ingress to Azure Linux 3.0 Added kata-containers to Azure Linux 3.0 Added kata-containers-cc to Azure Linux 3.0 Added git-lfs to Azure Linux 3.0 Added containerized-data-importer to Azure Linux 3.0 Added blobfuse2 to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added cf-cli to Azure Linux 3.0 Added coredns to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added opa to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added vitess to Azure Linux 3.0 Added packer to Azure Linux 3.0 Added etcd to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added moby-containerd-cc to Azure Linux 3.0 Added prometheus to CBL-Mariner 2.0 Added etcd to CBL-Mariner 2.0 Added kured to CBL-Mariner 2.0 Added moby-containerd to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added cri-tools to CBL-Mariner 2.0 Added kata-containers-cc to CBL-Mariner 2.0 Added kata-containers to CBL-Mariner 2.0 Added git-lfs to CBL-Mariner 2.0 Added opa to CBL-Mariner 2.0 Added moby-compose to CBL-Mariner 2.0 Added moby-containerd-cc to CBL-Mariner 2.0 Added packer to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added coredns to CBL-Mariner 2.0 Added blobfuse2 to CBL-Mariner 2.0

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2023-39325
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Linux 3.0 ARM	application-gateway-kubernetes-ingress (CBL-Mariner) blobfuse2 (CBL-Mariner) cert-manager (CBL-Mariner) cf-cli (CBL-Mariner)	Unknown	Unknown		Base: 7.5 Temporal: 7.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	1.7.7-1 2.3.0-1 1.12.12-1 8.7.3-2		None
Azure Linux 3.0 x64	application-gateway-kubernetes-ingress (CBL-Mariner) blobfuse2 (CBL-Mariner) cert-manager (CBL-Mariner) cf-cli (CBL-Mariner)	Unknown	Unknown		Base: 7.5 Temporal: 7.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	1.7.7-1 2.3.0-1 1.12.12-1 8.7.3-2		None
CBL Mariner 2.0 ARM	blobfuse2 (CBL-Mariner) coredns (CBL-Mariner) cri-tools (CBL-Mariner) etcd (CBL-Mariner)	Unknown	Unknown		Base: 7.5 Temporal: 7.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	2.1.1-1 1.11.1-2 1.29.0-2 3.5.12-1		None
CBL Mariner 2.0 x64	blobfuse2 (CBL-Mariner) coredns (CBL-Mariner) cri-tools (CBL-Mariner) etcd (CBL-Mariner)	Unknown	Unknown		Base: 7.5 Temporal: 7.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	2.1.1-1 1.11.1-2 1.29.0-2 3.5.12-1		None

CVE ID	Acknowledgements
CVE-2023-39325	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2022-40898
MITRE
NVD

Issuing CNA: cve@mitre.org

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:7.5/TemporalScore:7.5

Base score metrics
Attack Vector	Network
Attack Complexity	Low
Privileges Required	None
User Interaction	None
Scope	Unchanged
Confidentiality	None
Integrity	None
Availability	High

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
1.0 13-Sep-24

Information published.

1.1 14-Sep-24

Information published.

1.2 15-Sep-24

Information published.

1.3 16-Sep-24

Information published.

1.4 17-Sep-24

Information published.

1.5 18-Sep-24

Information published.

1.6 19-Sep-24

Information published.

1.7 20-Sep-24

Information published.

1.8 21-Sep-24

Information published.

1.9 22-Sep-24

Information published.

2.0 23-Sep-24

Information published.

2.1 24-Sep-24

Information published.

2.2 25-Sep-24

Information published.

2.3 26-Sep-24

Information published.

2.4 27-Sep-24

Information published.

2.5 28-Sep-24

Information published.

2.6 29-Sep-24

Information published.

2.7 30-Sep-24

Information published.

2.8 01-Oct-24

Information published.

2.9 02-Oct-24

Information published.

3.0 03-Oct-24

Information published.

3.1 04-Oct-24

Information published.

3.2 05-Oct-24

Information published.

3.3 06-Oct-24

Information published.

3.4 07-Oct-24

Information published.

3.5 09-Oct-24

Information published.

3.6 10-Oct-24

Information published.

3.7 11-Oct-24

Information published.

3.8 12-Oct-24

Information published.

3.9 13-Oct-24

Information published.

4.0 14-Oct-24

Information published.

4.1 15-Oct-24

Added python-wheel to CBL-Mariner 2.0

4.2 16-Oct-24

Added python-wheel to CBL-Mariner 2.0

4.3 17-Oct-24

Added python-wheel to CBL-Mariner 2.0

4.4 18-Oct-24

Added python-wheel to CBL-Mariner 2.0

4.5 19-Oct-24

Added python-wheel to CBL-Mariner 2.0

4.6 20-Oct-24

Added python-wheel to CBL-Mariner 2.0

4.7 21-Oct-24

Added python-wheel to CBL-Mariner 2.0

4.8 22-Oct-24

Added python-wheel to CBL-Mariner 2.0

4.9 23-Oct-24

Added python-wheel to CBL-Mariner 2.0

5.0 24-Oct-24

Added python-wheel to CBL-Mariner 2.0

5.1 25-Oct-24

Added python-wheel to CBL-Mariner 2.0

5.2 26-Oct-24

Added python-wheel to CBL-Mariner 2.0

5.3 27-Oct-24

Added python-wheel to CBL-Mariner 2.0

5.4 28-Oct-24

Added python-wheel to CBL-Mariner 2.0

5.5 29-Oct-24

Added python-wheel to CBL-Mariner 2.0

5.6 30-Oct-24

Added python-wheel to CBL-Mariner 2.0

5.7 31-Oct-24

Added python-wheel to CBL-Mariner 2.0

5.8 01-Nov-24

Added python-wheel to CBL-Mariner 2.0

5.9 02-Nov-24

Added python-wheel to CBL-Mariner 2.0

6.0 04-Nov-24

Added python-wheel to CBL-Mariner 2.0

6.1 05-Nov-24

Added python-wheel to CBL-Mariner 2.0

6.2 06-Nov-24

Added python-wheel to CBL-Mariner 2.0

6.3 07-Nov-24

Added python-wheel to CBL-Mariner 2.0

6.4 08-Nov-24

Added python-wheel to CBL-Mariner 2.0

6.5 09-Nov-24

Added python-wheel to CBL-Mariner 2.0

6.6 10-Nov-24

Added python-wheel to CBL-Mariner 2.0

6.7 11-Nov-24

Added python-wheel to CBL-Mariner 2.0

6.8 12-Nov-24

Added python-wheel to CBL-Mariner 2.0

6.9 13-Nov-24

Added python-wheel to CBL-Mariner 2.0

7.0 14-Nov-24

Added python-wheel to CBL-Mariner 2.0

7.1 15-Nov-24

Added python-wheel to CBL-Mariner 2.0

7.2 16-Nov-24

Added python-wheel to CBL-Mariner 2.0

7.3 17-Nov-24

Added python-wheel to CBL-Mariner 2.0

7.4 18-Nov-24

Added python-wheel to CBL-Mariner 2.0

7.5 19-Nov-24

Added python-wheel to CBL-Mariner 2.0

7.6 20-Nov-24

Added python-wheel to CBL-Mariner 2.0

7.7 21-Nov-24

Added python-wheel to CBL-Mariner 2.0

7.8 23-Nov-24

Added python-wheel to CBL-Mariner 2.0

7.9 24-Nov-24

Added python-wheel to CBL-Mariner 2.0

8.0 25-Nov-24

Added python-wheel to CBL-Mariner 2.0

8.1 26-Nov-24

Added python-wheel to CBL-Mariner 2.0

8.2 27-Nov-24

Added python-wheel to CBL-Mariner 2.0

8.3 28-Nov-24

Added python-wheel to CBL-Mariner 2.0

8.4 29-Nov-24

Added python-wheel to CBL-Mariner 2.0

8.5 30-Nov-24

Added python-wheel to CBL-Mariner 2.0

8.6 01-Dec-24

Added python-wheel to CBL-Mariner 2.0

8.7 02-Dec-24

Added python-wheel to CBL-Mariner 2.0

8.8 03-Dec-24

Added python-wheel to CBL-Mariner 2.0

8.9 04-Dec-24

Added python-wheel to CBL-Mariner 2.0

9.0 05-Dec-24

Added python-wheel to CBL-Mariner 2.0

9.1 07-Dec-24

Added python-wheel to CBL-Mariner 2.0

9.2 08-Dec-24

Added python-wheel to CBL-Mariner 2.0

9.3 09-Dec-24

Added python-wheel to CBL-Mariner 2.0

9.4 10-Dec-24

Added python-wheel to CBL-Mariner 2.0

9.5 11-Dec-24

Added python-wheel to CBL-Mariner 2.0

9.6 12-Dec-24

Added python-wheel to CBL-Mariner 2.0

9.7 13-Dec-24

Added python-wheel to CBL-Mariner 2.0

9.8 14-Dec-24

Added python-wheel to CBL-Mariner 2.0

9.9 15-Dec-24

Added python-wheel to CBL-Mariner 2.0

10.0 16-Dec-24

Added python-wheel to CBL-Mariner 2.0

10.1 17-Dec-24

Added python-wheel to CBL-Mariner 2.0

10.2 18-Dec-24

Added python-wheel to CBL-Mariner 2.0

10.3 19-Dec-24

Added python-wheel to CBL-Mariner 2.0

10.4 20-Dec-24

Added python-wheel to CBL-Mariner 2.0

10.5 21-Dec-24

Added python-wheel to CBL-Mariner 2.0

10.6 22-Dec-24

Added python-wheel to CBL-Mariner 2.0

10.7 23-Dec-24

Added python-wheel to CBL-Mariner 2.0

10.8 24-Dec-24

Added python-wheel to CBL-Mariner 2.0

10.9 25-Dec-24

Added python-wheel to CBL-Mariner 2.0

11.0 26-Dec-24

Added python-wheel to CBL-Mariner 2.0

11.1 27-Dec-24

Added python-wheel to CBL-Mariner 2.0

11.2 28-Dec-24

Added python-wheel to CBL-Mariner 2.0

11.3 29-Dec-24

Added python-wheel to CBL-Mariner 2.0

11.4 30-Dec-24

Added python-wheel to CBL-Mariner 2.0

11.5 31-Dec-24

Added python-wheel to CBL-Mariner 2.0

11.6 01-Jan-25

Added python-wheel to CBL-Mariner 2.0

11.7 02-Jan-25

Added python-wheel to CBL-Mariner 2.0

11.8 03-Jan-25

Added python-wheel to CBL-Mariner 2.0

11.9 04-Jan-25

Added python-wheel to CBL-Mariner 2.0

12.0 05-Jan-25

Added python-wheel to CBL-Mariner 2.0

12.1 06-Jan-25

Added python-wheel to CBL-Mariner 2.0

12.2 07-Jan-25

Added python-wheel to CBL-Mariner 2.0

12.3 08-Jan-25

Added python-wheel to CBL-Mariner 2.0

12.4 09-Jan-25

Added python-wheel to CBL-Mariner 2.0

12.5 10-Jan-25

Added python-wheel to CBL-Mariner 2.0

12.6 11-Jan-25

Added python-wheel to CBL-Mariner 2.0

12.7 12-Jan-25

Added python-wheel to CBL-Mariner 2.0

12.8 13-Jan-25

Added python-wheel to CBL-Mariner 2.0

12.9 15-Jan-25

Added python-wheel to CBL-Mariner 2.0

13.0 16-Jan-25

Added python-wheel to CBL-Mariner 2.0

13.1 17-Jan-25

Added python-wheel to CBL-Mariner 2.0

13.2 18-Jan-25

Added python-wheel to CBL-Mariner 2.0

13.3 19-Jan-25

Added python-wheel to CBL-Mariner 2.0

13.4 20-Jan-25

Added python-wheel to CBL-Mariner 2.0

13.5 21-Jan-25

Added python-wheel to CBL-Mariner 2.0

13.6 22-Jan-25

Added python-wheel to CBL-Mariner 2.0

13.7 23-Jan-25

Added python-wheel to CBL-Mariner 2.0

13.8 24-Jan-25

Added python-wheel to CBL-Mariner 2.0

13.9 25-Jan-25

Added python-wheel to CBL-Mariner 2.0

14.0 27-Jan-25

Added python-wheel to CBL-Mariner 2.0

14.1 28-Jan-25

Added python-wheel to CBL-Mariner 2.0

14.2 29-Jan-25

Added python-wheel to CBL-Mariner 2.0

14.3 30-Jan-25

Added python-wheel to CBL-Mariner 2.0

14.4 01-Feb-25

Added python-wheel to CBL-Mariner 2.0

14.5 02-Feb-25

Added python-wheel to CBL-Mariner 2.0

14.6 03-Feb-25

Added python-wheel to CBL-Mariner 2.0

14.7 04-Feb-25

Added python-wheel to CBL-Mariner 2.0

14.8 05-Feb-25

Added python-wheel to CBL-Mariner 2.0

14.9 07-Feb-25

Added python-wheel to CBL-Mariner 2.0

15.0 08-Feb-25

Added python-wheel to CBL-Mariner 2.0

15.1 09-Feb-25

Added python-wheel to CBL-Mariner 2.0

15.2 10-Feb-25

Added python-wheel to CBL-Mariner 2.0

15.3 11-Feb-25

Added python-wheel to CBL-Mariner 2.0

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2022-40898
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Linux 3.0 ARM		Unknown	Unknown	None	Base: 7.5 Temporal: 7.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	Unknown	Unknown	None
Azure Linux 3.0 x64		Unknown	Unknown	None	Base: 7.5 Temporal: 7.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	Unknown	Unknown	None
CBL Mariner 2.0 ARM	python-wheel (CBL-Mariner)	Unknown	Unknown	None	Base: 7.5 Temporal: 7.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	0.33.6-8	Unknown	None
CBL Mariner 2.0 x64	python-wheel (CBL-Mariner)	Unknown	Unknown	None	Base: 7.5 Temporal: 7.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	0.33.6-8	Unknown	None

CVE ID	Acknowledgements
CVE-2022-40898	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2019-14584
MITRE
NVD

Issuing CNA: secure@intel.com

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:7.8/TemporalScore:7.8

Base score metrics
Attack Vector	Local
Attack Complexity	Low
Privileges Required	Low
User Interaction	None
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
1.0 07-Dec-24

Information published.

1.1 08-Dec-24

Added shim-unsigned-aarch64 to Azure Linux 3.0

1.2 09-Dec-24

Added shim-unsigned-aarch64 to Azure Linux 3.0

1.3 10-Dec-24

Added shim-unsigned-aarch64 to Azure Linux 3.0

1.4 11-Dec-24

Added shim-unsigned-aarch64 to Azure Linux 3.0

1.5 12-Dec-24

Added shim-unsigned-aarch64 to Azure Linux 3.0

1.6 13-Dec-24

Added shim-unsigned-aarch64 to Azure Linux 3.0

1.7 14-Dec-24

Added shim-unsigned-aarch64 to Azure Linux 3.0

1.8 15-Dec-24

Added shim-unsigned-aarch64 to Azure Linux 3.0

1.9 16-Dec-24

Added shim-unsigned-aarch64 to Azure Linux 3.0

2.0 17-Dec-24

Added shim-unsigned-aarch64 to Azure Linux 3.0

2.1 18-Dec-24

Added shim-unsigned-aarch64 to Azure Linux 3.0

2.2 19-Dec-24

Added shim-unsigned-aarch64 to Azure Linux 3.0

2.3 20-Dec-24

Added shim-unsigned-aarch64 to Azure Linux 3.0

2.4 21-Dec-24

Added shim-unsigned-aarch64 to Azure Linux 3.0

2.5 22-Dec-24

Added shim-unsigned-aarch64 to Azure Linux 3.0

2.6 23-Dec-24

Added shim-unsigned-aarch64 to Azure Linux 3.0

2.7 24-Dec-24

Added shim-unsigned-aarch64 to Azure Linux 3.0

2.8 25-Dec-24

Added shim-unsigned-aarch64 to Azure Linux 3.0

2.9 26-Dec-24

Added shim-unsigned-aarch64 to Azure Linux 3.0

3.0 27-Dec-24

Added shim-unsigned-aarch64 to Azure Linux 3.0

3.1 28-Dec-24

Added shim-unsigned-aarch64 to Azure Linux 3.0

3.2 29-Dec-24

Added shim-unsigned-aarch64 to Azure Linux 3.0

3.3 30-Dec-24

Added shim-unsigned-aarch64 to Azure Linux 3.0

3.4 31-Dec-24

Added shim-unsigned-aarch64 to Azure Linux 3.0

3.5 01-Jan-25

Added shim-unsigned-aarch64 to Azure Linux 3.0

3.6 02-Jan-25

Added shim-unsigned-aarch64 to Azure Linux 3.0

3.7 03-Jan-25

Added shim-unsigned-aarch64 to Azure Linux 3.0

3.8 04-Jan-25

Added shim-unsigned-aarch64 to Azure Linux 3.0

3.9 05-Jan-25

Added shim-unsigned-aarch64 to Azure Linux 3.0

4.0 06-Jan-25

Added shim-unsigned-aarch64 to Azure Linux 3.0

4.1 07-Jan-25

Added shim-unsigned-aarch64 to Azure Linux 3.0

4.2 08-Jan-25

Added shim-unsigned-aarch64 to Azure Linux 3.0

4.3 09-Jan-25

Added shim-unsigned-aarch64 to Azure Linux 3.0

4.4 10-Jan-25

Added shim-unsigned-aarch64 to Azure Linux 3.0

4.5 11-Jan-25

Added shim-unsigned-aarch64 to Azure Linux 3.0

4.6 12-Jan-25

Added shim-unsigned-aarch64 to Azure Linux 3.0

4.7 13-Jan-25

Added shim-unsigned-aarch64 to Azure Linux 3.0

4.8 15-Jan-25

Added shim-unsigned-aarch64 to Azure Linux 3.0

4.9 16-Jan-25

Added shim-unsigned-aarch64 to Azure Linux 3.0

5.0 17-Jan-25

Added shim-unsigned-aarch64 to Azure Linux 3.0

5.1 18-Jan-25

Added shim-unsigned-aarch64 to Azure Linux 3.0

5.2 19-Jan-25

Added shim-unsigned-aarch64 to Azure Linux 3.0

5.3 20-Jan-25

Added shim-unsigned-aarch64 to Azure Linux 3.0

5.4 21-Jan-25

Added shim-unsigned-aarch64 to Azure Linux 3.0

5.5 22-Jan-25

Added shim-unsigned-aarch64 to Azure Linux 3.0

5.6 23-Jan-25

Added shim-unsigned-aarch64 to Azure Linux 3.0

5.7 24-Jan-25

Added shim-unsigned-aarch64 to Azure Linux 3.0

5.8 25-Jan-25

Added shim-unsigned-aarch64 to Azure Linux 3.0

5.9 27-Jan-25

Added shim-unsigned-aarch64 to Azure Linux 3.0

6.0 28-Jan-25

Added shim-unsigned-aarch64 to Azure Linux 3.0

6.1 29-Jan-25

Added shim-unsigned-aarch64 to Azure Linux 3.0

6.2 30-Jan-25

Added shim-unsigned-aarch64 to Azure Linux 3.0

6.3 01-Feb-25

Added shim-unsigned-aarch64 to Azure Linux 3.0

6.4 02-Feb-25

Added shim-unsigned-aarch64 to Azure Linux 3.0

6.5 03-Feb-25

Added shim-unsigned-aarch64 to Azure Linux 3.0

6.6 04-Feb-25

Added shim-unsigned-aarch64 to Azure Linux 3.0

6.7 05-Feb-25

Added shim-unsigned-aarch64 to Azure Linux 3.0

6.8 07-Feb-25

Added shim-unsigned-aarch64 to Azure Linux 3.0

6.9 08-Feb-25

Added shim-unsigned-aarch64 to Azure Linux 3.0

7.0 09-Feb-25

Added shim-unsigned-aarch64 to Azure Linux 3.0

7.1 10-Feb-25

Added shim-unsigned-aarch64 to Azure Linux 3.0

7.2 11-Feb-25

Added shim-unsigned-aarch64 to Azure Linux 3.0

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2019-14584
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Linux 3.0 ARM	shim-unsigned-aarch64 (CBL-Mariner)	Unknown	Unknown	None	Base: 7.8 Temporal: 7.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	15.8-3	Unknown	None
Azure Linux 3.0 x64	shim-unsigned-aarch64 (CBL-Mariner)	Unknown	Unknown	None	Base: 7.8 Temporal: 7.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	15.8-3	Unknown	None

CVE ID	Acknowledgements
CVE-2019-14584	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2023-40546
MITRE
NVD

Issuing CNA: secalert@redhat.com

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:5.5/TemporalScore:5.5

Base score metrics
Attack Vector	Local
Attack Complexity	Low
Privileges Required	Low
User Interaction	None
Scope	Unchanged
Confidentiality	None
Integrity	None
Availability	High

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Sep-24

Information published.

1.1 07-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

1.2 08-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

1.3 09-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

1.4 10-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

1.5 11-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

1.6 12-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

1.7 13-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

1.8 14-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

1.9 15-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

2.0 16-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

2.1 17-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

2.2 18-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

2.3 19-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

2.4 20-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

2.5 21-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

2.6 22-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

2.7 23-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

2.8 24-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

2.9 25-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

3.0 26-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

3.1 27-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

3.2 28-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

3.3 29-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

3.4 30-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

3.5 31-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

3.6 01-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

3.7 02-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

3.8 03-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

3.9 04-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

4.0 05-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

4.1 06-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

4.2 07-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

4.3 08-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

4.4 09-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

4.5 10-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

4.6 11-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

4.7 12-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

4.8 13-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

4.9 15-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

5.0 16-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

5.1 17-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

5.2 18-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

5.3 19-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

5.4 20-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

5.5 21-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

5.6 22-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

5.7 23-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

5.8 24-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

5.9 25-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

6.0 27-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

6.1 28-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

6.2 29-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

6.3 30-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

6.4 01-Feb-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

6.5 02-Feb-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

6.6 03-Feb-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

6.7 04-Feb-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

6.8 05-Feb-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

6.9 07-Feb-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

7.0 08-Feb-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

7.1 09-Feb-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

7.2 10-Feb-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

7.3 11-Feb-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2023-40546
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Linux 3.0 ARM	shim (CBL-Mariner) shim-unsigned-aarch64 (CBL-Mariner)	Unknown	Unknown		Base: 5.5 Temporal: 5.5 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	15.8-3		None
Azure Linux 3.0 x64	shim (CBL-Mariner) shim-unsigned-aarch64 (CBL-Mariner)	Unknown	Unknown		Base: 5.5 Temporal: 5.5 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	15.8-3		None
CBL Mariner 2.0 ARM	shim (CBL-Mariner) shim-unsigned-x64 (CBL-Mariner)	Unknown	Unknown		Base: 5.5 Temporal: 5.5 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	15.8-1		None
CBL Mariner 2.0 x64	shim (CBL-Mariner) shim-unsigned-x64 (CBL-Mariner)	Unknown	Unknown		Base: 5.5 Temporal: 5.5 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	15.8-1		None

CVE ID	Acknowledgements
CVE-2023-40546	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2022-28737
MITRE
NVD

Issuing CNA: security@ubuntu.com

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:7.8/TemporalScore:7.8

Base score metrics
Attack Vector	Local
Attack Complexity	Low
Privileges Required	None
User Interaction	Required
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Sep-24

Information published.

1.1 07-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0

1.2 08-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0

1.3 09-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0

1.4 10-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0

1.5 11-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0

1.6 12-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0

1.7 13-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0

1.8 14-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0

1.9 15-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0

2.0 16-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0

2.1 17-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0

2.2 18-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0

2.3 19-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0

2.4 20-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0

2.5 21-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0

2.6 22-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0

2.7 23-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0

2.8 24-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0

2.9 25-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0

3.0 26-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0

3.1 27-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0

3.2 28-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0

3.3 29-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0

3.4 30-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0

3.5 31-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0

3.6 01-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0

3.7 02-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0

3.8 03-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0

3.9 04-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0

4.0 05-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0

4.1 06-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0

4.2 07-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0

4.3 08-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0

4.4 09-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0

4.5 10-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0

4.6 11-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0

4.7 12-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0

4.8 13-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0

4.9 15-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0

5.0 16-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0

5.1 17-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0

5.2 18-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0

5.3 19-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0

5.4 20-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0

5.5 21-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0

5.6 22-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0

5.7 23-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0

5.8 24-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0

5.9 25-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0

6.0 27-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0

6.1 28-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0

6.2 29-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0

6.3 30-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0

6.4 01-Feb-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0

6.5 02-Feb-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0

6.6 03-Feb-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0

6.7 04-Feb-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0

6.8 05-Feb-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0

6.9 07-Feb-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0

7.0 08-Feb-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0

7.1 09-Feb-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0

7.2 10-Feb-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0

7.3 11-Feb-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2022-28737
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Linux 3.0 ARM	shim (CBL-Mariner) shim-unsigned-aarch64 (CBL-Mariner)	Unknown	Unknown		Base: 7.8 Temporal: 7.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	15.8-3		None
Azure Linux 3.0 x64	shim (CBL-Mariner) shim-unsigned-aarch64 (CBL-Mariner)	Unknown	Unknown		Base: 7.8 Temporal: 7.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	15.8-3		None
CBL Mariner 2.0 ARM	shim (CBL-Mariner)	Unknown	Unknown	None	Base: 7.8 Temporal: 7.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	15.8-1	Unknown	None
CBL Mariner 2.0 x64	shim (CBL-Mariner)	Unknown	Unknown	None	Base: 7.8 Temporal: 7.8 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	15.8-1	Unknown	None

CVE ID	Acknowledgements
CVE-2022-28737	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2023-40548
MITRE
NVD

Issuing CNA: secalert@redhat.com

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:7.4/TemporalScore:7.4

Base score metrics
Attack Vector	Local
Attack Complexity	High
Privileges Required	None
User Interaction	None
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Sep-24

Information published.

1.1 07-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

1.2 08-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

1.3 09-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

1.4 10-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

1.5 11-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

1.6 12-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

1.7 13-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

1.8 14-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

1.9 15-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

2.0 16-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

2.1 17-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

2.2 18-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

2.3 19-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

2.4 20-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

2.5 21-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

2.6 22-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

2.7 23-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

2.8 24-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

2.9 25-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

3.0 26-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

3.1 27-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

3.2 28-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

3.3 29-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

3.4 30-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

3.5 31-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

3.6 01-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

3.7 02-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

3.8 03-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

3.9 04-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

4.0 05-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

4.1 06-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

4.2 07-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

4.3 08-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

4.4 09-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

4.5 10-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

4.6 11-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

4.7 12-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

4.8 13-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

4.9 15-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

5.0 16-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

5.1 17-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

5.2 18-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

5.3 19-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

5.4 20-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

5.5 21-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

5.6 22-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

5.7 23-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

5.8 24-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

5.9 25-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

6.0 27-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

6.1 28-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

6.2 29-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

6.3 30-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

6.4 01-Feb-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

6.5 02-Feb-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

6.6 03-Feb-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

6.7 04-Feb-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

6.8 05-Feb-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

6.9 07-Feb-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

7.0 08-Feb-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

7.1 09-Feb-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

7.2 10-Feb-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

7.3 11-Feb-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2023-40548
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Linux 3.0 ARM	shim (CBL-Mariner) shim-unsigned-aarch64 (CBL-Mariner)	Unknown	Unknown		Base: 7.4 Temporal: 7.4 Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H	15.8-3		None
Azure Linux 3.0 x64	shim (CBL-Mariner) shim-unsigned-aarch64 (CBL-Mariner)	Unknown	Unknown		Base: 7.4 Temporal: 7.4 Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H	15.8-3		None
CBL Mariner 2.0 ARM	shim (CBL-Mariner) shim-unsigned-x64 (CBL-Mariner)	Unknown	Unknown		Base: 7.4 Temporal: 7.4 Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H	15.8-1		None
CBL Mariner 2.0 x64	shim (CBL-Mariner) shim-unsigned-x64 (CBL-Mariner)	Unknown	Unknown		Base: 7.4 Temporal: 7.4 Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H	15.8-1		None

CVE ID	Acknowledgements
CVE-2023-40548	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2023-40549
MITRE
NVD

Issuing CNA: secalert@redhat.com

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:5.5/TemporalScore:5.5

Base score metrics
Attack Vector	Local
Attack Complexity	Low
Privileges Required	Low
User Interaction	None
Scope	Unchanged
Confidentiality	None
Integrity	None
Availability	High

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Sep-24

Information published.

1.1 07-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

1.2 08-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

1.3 09-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

1.4 10-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

1.5 11-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

1.6 12-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

1.7 13-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

1.8 14-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

1.9 15-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

2.0 16-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

2.1 17-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

2.2 18-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

2.3 19-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

2.4 20-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

2.5 21-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

2.6 22-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

2.7 23-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

2.8 24-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

2.9 25-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

3.0 26-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

3.1 27-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

3.2 28-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

3.3 29-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

3.4 30-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

3.5 31-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

3.6 01-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

3.7 02-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

3.8 03-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

3.9 04-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

4.0 05-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

4.1 06-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

4.2 07-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

4.3 08-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

4.4 09-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

4.5 10-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

4.6 11-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

4.7 12-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

4.8 13-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

4.9 15-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

5.0 16-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

5.1 17-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

5.2 18-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

5.3 19-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

5.4 20-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

5.5 21-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

5.6 22-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

5.7 23-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

5.8 24-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

5.9 25-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

6.0 27-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

6.1 28-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

6.2 29-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

6.3 30-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

6.4 01-Feb-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

6.5 02-Feb-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

6.6 03-Feb-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

6.7 04-Feb-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

6.8 05-Feb-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

6.9 07-Feb-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

7.0 08-Feb-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

7.1 09-Feb-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

7.2 10-Feb-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

7.3 11-Feb-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2023-40549
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Linux 3.0 ARM	shim (CBL-Mariner) shim-unsigned-aarch64 (CBL-Mariner)	Unknown	Unknown		Base: 5.5 Temporal: 5.5 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	15.8-3		None
Azure Linux 3.0 x64	shim (CBL-Mariner) shim-unsigned-aarch64 (CBL-Mariner)	Unknown	Unknown		Base: 5.5 Temporal: 5.5 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	15.8-3		None
CBL Mariner 2.0 ARM	shim (CBL-Mariner) shim-unsigned-x64 (CBL-Mariner)	Unknown	Unknown		Base: 5.5 Temporal: 5.5 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	15.8-1		None
CBL Mariner 2.0 x64	shim (CBL-Mariner) shim-unsigned-x64 (CBL-Mariner)	Unknown	Unknown		Base: 5.5 Temporal: 5.5 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	15.8-1		None

CVE ID	Acknowledgements
CVE-2023-40549	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2023-40550
MITRE
NVD

Issuing CNA: secalert@redhat.com

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:5.5/TemporalScore:5.5

Base score metrics
Attack Vector	Local
Attack Complexity	Low
Privileges Required	Low
User Interaction	None
Scope	Unchanged
Confidentiality	High
Integrity	None
Availability	None

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Sep-24

Information published.

1.1 07-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

1.2 08-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

1.3 09-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

1.4 10-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

1.5 11-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

1.6 12-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

1.7 13-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

1.8 14-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

1.9 15-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

2.0 16-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

2.1 17-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

2.2 18-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

2.3 19-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

2.4 20-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

2.5 21-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

2.6 22-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

2.7 23-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

2.8 24-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

2.9 25-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

3.0 26-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

3.1 27-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

3.2 28-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

3.3 29-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

3.4 30-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

3.5 31-Dec-24

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

3.6 01-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

3.7 02-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

3.8 03-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

3.9 04-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

4.0 05-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

4.1 06-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

4.2 07-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

4.3 08-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

4.4 09-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

4.5 10-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

4.6 11-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

4.7 12-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

4.8 13-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

4.9 15-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

5.0 16-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

5.1 17-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

5.2 18-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

5.3 19-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

5.4 20-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

5.5 21-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

5.6 22-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

5.7 23-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

5.8 24-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

5.9 25-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

6.0 27-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

6.1 28-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

6.2 29-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

6.3 30-Jan-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

6.4 01-Feb-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

6.5 02-Feb-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

6.6 03-Feb-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

6.7 04-Feb-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

6.8 05-Feb-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

6.9 07-Feb-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

7.0 08-Feb-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

7.1 09-Feb-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

7.2 10-Feb-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

7.3 11-Feb-25

Added shim to Azure Linux 3.0 Added shim-unsigned-aarch64 to Azure Linux 3.0 Added shim to CBL-Mariner 2.0 Added shim-unsigned-x64 to CBL-Mariner 2.0

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2023-40550
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Linux 3.0 ARM	shim (CBL-Mariner) shim-unsigned-aarch64 (CBL-Mariner)	Unknown	Unknown		Base: 5.5 Temporal: 5.5 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N	15.8-3		None
Azure Linux 3.0 x64	shim (CBL-Mariner) shim-unsigned-aarch64 (CBL-Mariner)	Unknown	Unknown		Base: 5.5 Temporal: 5.5 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N	15.8-3		None
CBL Mariner 2.0 ARM	shim (CBL-Mariner) shim-unsigned-x64 (CBL-Mariner)	Unknown	Unknown		Base: 5.5 Temporal: 5.5 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N	15.8-1		None
CBL Mariner 2.0 x64	shim (CBL-Mariner) shim-unsigned-x64 (CBL-Mariner)	Unknown	Unknown		Base: 5.5 Temporal: 5.5 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N	15.8-1		None

CVE ID	Acknowledgements
CVE-2023-40550	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2024-9676
MITRE
NVD

Issuing CNA: secalert@redhat.com

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:6.5/TemporalScore:6.5

Base score metrics
Attack Vector	Network
Attack Complexity	Low
Privileges Required	Low
User Interaction	None
Scope	Unchanged
Confidentiality	None
Integrity	None
Availability	High

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
1.0 14-Nov-24

Information published.

1.1 01-Feb-25

Added skopeo to Azure Linux 3.0 Added skopeo to CBL-Mariner 2.0

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2024-9676
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Linux 3.0 ARM	skopeo (CBL-Mariner)	Unknown	Unknown	None	Base: 6.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	1.14.4-3	Unknown	None
Azure Linux 3.0 x64	skopeo (CBL-Mariner)	Unknown	Unknown	None	Base: 6.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	1.14.4-3	Unknown	None
CBL Mariner 2.0 ARM	skopeo (CBL-Mariner)	Unknown	Unknown	None	Base: 6.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	1.14.2-9	Unknown	None
CBL Mariner 2.0 x64	skopeo (CBL-Mariner)	Unknown	Unknown	None	Base: 6.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	1.14.2-9	Unknown	None

CVE ID	Acknowledgements
CVE-2024-9676	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2020-27840
MITRE
NVD

Issuing CNA: secalert@redhat.com

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:7.5/TemporalScore:7.5

Base score metrics
Attack Vector	Network
Attack Complexity	Low
Privileges Required	None
User Interaction	None
Scope	Unchanged
Confidentiality	None
Integrity	None
Availability	High

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
1.0 15-Oct-24

Information published.

1.1 16-Oct-24

Added samba to Azure Linux 3.0

1.2 17-Oct-24

Added samba to Azure Linux 3.0

1.3 18-Oct-24

Added samba to Azure Linux 3.0

1.4 19-Oct-24

Added samba to Azure Linux 3.0

1.5 20-Oct-24

Added samba to Azure Linux 3.0

1.6 21-Oct-24

Added samba to Azure Linux 3.0

1.7 22-Oct-24

Added samba to Azure Linux 3.0

1.8 23-Oct-24

Added samba to Azure Linux 3.0

1.9 24-Oct-24

Added samba to Azure Linux 3.0

2.0 25-Oct-24

Added samba to Azure Linux 3.0

2.1 26-Oct-24

Added samba to Azure Linux 3.0

2.2 27-Oct-24

Added samba to Azure Linux 3.0

2.3 28-Oct-24

Added samba to Azure Linux 3.0

2.4 29-Oct-24

Added samba to Azure Linux 3.0

2.5 30-Oct-24

Added samba to Azure Linux 3.0

2.6 31-Oct-24

Added samba to Azure Linux 3.0

2.7 01-Nov-24

Added samba to Azure Linux 3.0

2.8 02-Nov-24

Added samba to Azure Linux 3.0

2.9 04-Nov-24

Added samba to Azure Linux 3.0

3.0 05-Nov-24

Added samba to Azure Linux 3.0

3.1 06-Nov-24

Added samba to Azure Linux 3.0

3.2 07-Nov-24

Added samba to Azure Linux 3.0

3.3 08-Nov-24

Added samba to Azure Linux 3.0

3.4 09-Nov-24

Added samba to Azure Linux 3.0

3.5 10-Nov-24

Added samba to Azure Linux 3.0

3.6 11-Nov-24

Added samba to Azure Linux 3.0

3.7 12-Nov-24

Added samba to Azure Linux 3.0

3.8 13-Nov-24

Added samba to Azure Linux 3.0

3.9 14-Nov-24

Added samba to Azure Linux 3.0

4.0 15-Nov-24

Added samba to Azure Linux 3.0

4.1 16-Nov-24

Added samba to Azure Linux 3.0

4.2 17-Nov-24

Added samba to Azure Linux 3.0

4.3 18-Nov-24

Added samba to Azure Linux 3.0

4.4 19-Nov-24

Added samba to Azure Linux 3.0

4.5 20-Nov-24

Added samba to Azure Linux 3.0

4.6 21-Nov-24

Added samba to Azure Linux 3.0

4.7 23-Nov-24

Added samba to Azure Linux 3.0

4.8 24-Nov-24

Added samba to Azure Linux 3.0

4.9 25-Nov-24

Added samba to Azure Linux 3.0

5.0 26-Nov-24

Added samba to Azure Linux 3.0

5.1 27-Nov-24

Added samba to Azure Linux 3.0

5.2 28-Nov-24

Added samba to Azure Linux 3.0

5.3 29-Nov-24

Added samba to Azure Linux 3.0

5.4 30-Nov-24

Added samba to Azure Linux 3.0

5.5 01-Dec-24

Added samba to Azure Linux 3.0

5.6 02-Dec-24

Added samba to Azure Linux 3.0

5.7 03-Dec-24

Added samba to Azure Linux 3.0

5.8 04-Dec-24

Added samba to Azure Linux 3.0

5.9 05-Dec-24

Added samba to Azure Linux 3.0

6.0 07-Dec-24

Added samba to Azure Linux 3.0

6.1 08-Dec-24

Added samba to Azure Linux 3.0

6.2 09-Dec-24

Added samba to Azure Linux 3.0

6.3 10-Dec-24

Added samba to Azure Linux 3.0

6.4 11-Dec-24

Added samba to Azure Linux 3.0

6.5 12-Dec-24

Added samba to Azure Linux 3.0

6.6 13-Dec-24

Added samba to Azure Linux 3.0

6.7 14-Dec-24

Added samba to Azure Linux 3.0

6.8 15-Dec-24

Added samba to Azure Linux 3.0

6.9 16-Dec-24

Added samba to Azure Linux 3.0

7.0 17-Dec-24

Added samba to Azure Linux 3.0

7.1 18-Dec-24

Added samba to Azure Linux 3.0

7.2 19-Dec-24

Added samba to Azure Linux 3.0

7.3 20-Dec-24

Added samba to Azure Linux 3.0

7.4 21-Dec-24

Added samba to Azure Linux 3.0

7.5 22-Dec-24

Added samba to Azure Linux 3.0

7.6 23-Dec-24

Added samba to Azure Linux 3.0

7.7 24-Dec-24

Added samba to Azure Linux 3.0

7.8 25-Dec-24

Added samba to Azure Linux 3.0

7.9 26-Dec-24

Added samba to Azure Linux 3.0

8.0 27-Dec-24

Added samba to Azure Linux 3.0

8.1 28-Dec-24

Added samba to Azure Linux 3.0

8.2 29-Dec-24

Added samba to Azure Linux 3.0

8.3 30-Dec-24

Added samba to Azure Linux 3.0

8.4 31-Dec-24

Added samba to Azure Linux 3.0

8.5 01-Jan-25

Added samba to Azure Linux 3.0

8.6 02-Jan-25

Added samba to Azure Linux 3.0

8.7 03-Jan-25

Added samba to Azure Linux 3.0

8.8 04-Jan-25

Added samba to Azure Linux 3.0

8.9 05-Jan-25

Added samba to Azure Linux 3.0

9.0 06-Jan-25

Added samba to Azure Linux 3.0

9.1 07-Jan-25

Added samba to Azure Linux 3.0

9.2 08-Jan-25

Added samba to Azure Linux 3.0

9.3 09-Jan-25

Added samba to Azure Linux 3.0

9.4 10-Jan-25

Added samba to Azure Linux 3.0

9.5 11-Jan-25

Added samba to Azure Linux 3.0

9.6 12-Jan-25

Added samba to Azure Linux 3.0

9.7 13-Jan-25

Added samba to Azure Linux 3.0

9.8 15-Jan-25

Added samba to Azure Linux 3.0

9.9 16-Jan-25

Added samba to Azure Linux 3.0

10.0 17-Jan-25

Added samba to Azure Linux 3.0

10.1 18-Jan-25

Added samba to Azure Linux 3.0

10.2 19-Jan-25

Added samba to Azure Linux 3.0

10.3 20-Jan-25

Added samba to Azure Linux 3.0

10.4 21-Jan-25

Added samba to Azure Linux 3.0

10.5 22-Jan-25

Added samba to Azure Linux 3.0

10.6 23-Jan-25

Added samba to Azure Linux 3.0

10.7 24-Jan-25

Added samba to Azure Linux 3.0

10.8 25-Jan-25

Added samba to Azure Linux 3.0

10.9 27-Jan-25

Added samba to Azure Linux 3.0

11.0 28-Jan-25

Added samba to Azure Linux 3.0

11.1 29-Jan-25

Added samba to Azure Linux 3.0

11.2 30-Jan-25

Added samba to Azure Linux 3.0

11.3 01-Feb-25

Added samba to Azure Linux 3.0

11.4 02-Feb-25

Added samba to Azure Linux 3.0

11.5 03-Feb-25

Added samba to Azure Linux 3.0

11.6 04-Feb-25

Added samba to Azure Linux 3.0

11.7 05-Feb-25

Added samba to Azure Linux 3.0

11.8 07-Feb-25

Added samba to Azure Linux 3.0

11.9 08-Feb-25

Added samba to Azure Linux 3.0

12.0 09-Feb-25

Added samba to Azure Linux 3.0

12.1 10-Feb-25

Added samba to Azure Linux 3.0

12.2 11-Feb-25

Added samba to Azure Linux 3.0

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2020-27840
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Linux 3.0 ARM	samba (CBL-Mariner)	Unknown	Unknown	None	Base: 7.5 Temporal: 7.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	4.18.3-1	Unknown	None
Azure Linux 3.0 x64	samba (CBL-Mariner)	Unknown	Unknown	None	Base: 7.5 Temporal: 7.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	4.18.3-1	Unknown	None

CVE ID	Acknowledgements
CVE-2020-27840	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2024-37535
MITRE
NVD

Issuing CNA: cve@mitre.org

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:4.4/TemporalScore:4.4

Base score metrics
Attack Vector	Local
Attack Complexity	Low
Privileges Required	High
User Interaction	None
Scope	Unchanged
Confidentiality	None
Integrity	None
Availability	High

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
1.0 30-Jun-24

Information published.

1.1 12-Jul-24

Information published.

1.2 20-Sep-24

Information published.

1.3 21-Sep-24

Information published.

1.4 22-Sep-24

Information published.

1.5 23-Sep-24

Information published.

1.6 24-Sep-24

Information published.

1.7 25-Sep-24

Information published.

1.8 26-Sep-24

Information published.

1.9 27-Sep-24

Information published.

2.0 28-Sep-24

Information published.

2.1 29-Sep-24

Information published.

2.2 30-Sep-24

Information published.

2.3 01-Oct-24

Information published.

2.4 02-Oct-24

Information published.

2.5 03-Oct-24

Information published.

2.6 04-Oct-24

Information published.

2.7 05-Oct-24

Information published.

2.8 06-Oct-24

Information published.

2.9 07-Oct-24

Information published.

3.0 08-Oct-24

Information published.

3.1 09-Oct-24

Information published.

3.2 10-Oct-24

Information published.

3.3 11-Oct-24

Information published.

3.4 12-Oct-24

Information published.

3.5 13-Oct-24

Information published.

3.6 14-Oct-24

Information published.

3.7 15-Oct-24

Added vte291 to CBL-Mariner 2.0

3.8 16-Oct-24

Added vte291 to CBL-Mariner 2.0

3.9 17-Oct-24

Added vte291 to CBL-Mariner 2.0

4.0 18-Oct-24

Added vte291 to CBL-Mariner 2.0

4.1 19-Oct-24

Added vte291 to CBL-Mariner 2.0

4.2 20-Oct-24

Added vte291 to CBL-Mariner 2.0

4.3 21-Oct-24

Added vte291 to CBL-Mariner 2.0

4.4 22-Oct-24

Added vte291 to CBL-Mariner 2.0

4.5 23-Oct-24

Added vte291 to CBL-Mariner 2.0

4.6 24-Oct-24

Added vte291 to CBL-Mariner 2.0

4.7 25-Oct-24

Added vte291 to CBL-Mariner 2.0

4.8 26-Oct-24

Added vte291 to CBL-Mariner 2.0

4.9 27-Oct-24

Added vte291 to CBL-Mariner 2.0

5.0 28-Oct-24

Added vte291 to CBL-Mariner 2.0

5.1 29-Oct-24

Added vte291 to CBL-Mariner 2.0

5.2 30-Oct-24

Added vte291 to CBL-Mariner 2.0

5.3 31-Oct-24

Added vte291 to CBL-Mariner 2.0

5.4 01-Nov-24

Added vte291 to CBL-Mariner 2.0

5.5 02-Nov-24

Added vte291 to CBL-Mariner 2.0

5.6 04-Nov-24

Added vte291 to CBL-Mariner 2.0

5.7 05-Nov-24

Added vte291 to CBL-Mariner 2.0

5.8 06-Nov-24

Added vte291 to CBL-Mariner 2.0

5.9 07-Nov-24

Added vte291 to CBL-Mariner 2.0

6.0 08-Nov-24

Added vte291 to CBL-Mariner 2.0

6.1 09-Nov-24

Added vte291 to CBL-Mariner 2.0

6.2 10-Nov-24

Added vte291 to CBL-Mariner 2.0

6.3 11-Nov-24

Added vte291 to CBL-Mariner 2.0

6.4 12-Nov-24

Added vte291 to CBL-Mariner 2.0

6.5 13-Nov-24

Added vte291 to CBL-Mariner 2.0

6.6 14-Nov-24

Added vte291 to CBL-Mariner 2.0

6.7 15-Nov-24

Added vte291 to CBL-Mariner 2.0

6.8 16-Nov-24

Added vte291 to CBL-Mariner 2.0

6.9 17-Nov-24

Added vte291 to CBL-Mariner 2.0

7.0 18-Nov-24

Added vte291 to CBL-Mariner 2.0

7.1 19-Nov-24

Added vte291 to CBL-Mariner 2.0

7.2 20-Nov-24

Added vte291 to CBL-Mariner 2.0

7.3 21-Nov-24

Added vte291 to CBL-Mariner 2.0

7.4 23-Nov-24

Added vte291 to CBL-Mariner 2.0

7.5 24-Nov-24

Added vte291 to CBL-Mariner 2.0

7.6 25-Nov-24

Added vte291 to CBL-Mariner 2.0

7.7 26-Nov-24

Added vte291 to CBL-Mariner 2.0

7.8 27-Nov-24

Added vte291 to CBL-Mariner 2.0

7.9 28-Nov-24

Added vte291 to CBL-Mariner 2.0

8.0 29-Nov-24

Added vte291 to CBL-Mariner 2.0

8.1 30-Nov-24

Added vte291 to CBL-Mariner 2.0

8.2 01-Dec-24

Added vte291 to CBL-Mariner 2.0

8.3 02-Dec-24

Added vte291 to CBL-Mariner 2.0

8.4 03-Dec-24

Added vte291 to CBL-Mariner 2.0

8.5 04-Dec-24

Added vte291 to CBL-Mariner 2.0

8.6 05-Dec-24

Added vte291 to CBL-Mariner 2.0

8.7 07-Dec-24

Added vte291 to CBL-Mariner 2.0

8.8 08-Dec-24

Added vte291 to CBL-Mariner 2.0

8.9 09-Dec-24

Added vte291 to CBL-Mariner 2.0

9.0 10-Dec-24

Added vte291 to CBL-Mariner 2.0

9.1 11-Dec-24

Added vte291 to CBL-Mariner 2.0

9.2 12-Dec-24

Added vte291 to CBL-Mariner 2.0

9.3 13-Dec-24

Added vte291 to CBL-Mariner 2.0

9.4 14-Dec-24

Added vte291 to CBL-Mariner 2.0

9.5 15-Dec-24

Added vte291 to CBL-Mariner 2.0

9.6 16-Dec-24

Added vte291 to CBL-Mariner 2.0

9.7 17-Dec-24

Added vte291 to CBL-Mariner 2.0

9.8 18-Dec-24

Added vte291 to CBL-Mariner 2.0

9.9 19-Dec-24

Added vte291 to CBL-Mariner 2.0

10.0 20-Dec-24

Added vte291 to CBL-Mariner 2.0

10.1 21-Dec-24

Added vte291 to CBL-Mariner 2.0

10.2 22-Dec-24

Added vte291 to CBL-Mariner 2.0

10.3 23-Dec-24

Added vte291 to CBL-Mariner 2.0

10.4 24-Dec-24

Added vte291 to CBL-Mariner 2.0

10.5 25-Dec-24

Added vte291 to CBL-Mariner 2.0

10.6 26-Dec-24

Added vte291 to CBL-Mariner 2.0

10.7 27-Dec-24

Added vte291 to CBL-Mariner 2.0

10.8 28-Dec-24

Added vte291 to CBL-Mariner 2.0

10.9 29-Dec-24

Added vte291 to CBL-Mariner 2.0

11.0 30-Dec-24

Added vte291 to CBL-Mariner 2.0

11.1 31-Dec-24

Added vte291 to CBL-Mariner 2.0

11.2 01-Jan-25

Added vte291 to CBL-Mariner 2.0

11.3 02-Jan-25

Added vte291 to CBL-Mariner 2.0

11.4 03-Jan-25

Added vte291 to CBL-Mariner 2.0

11.5 04-Jan-25

Added vte291 to CBL-Mariner 2.0

11.6 05-Jan-25

Added vte291 to CBL-Mariner 2.0

11.7 06-Jan-25

Added vte291 to CBL-Mariner 2.0

11.8 07-Jan-25

Added vte291 to CBL-Mariner 2.0

11.9 08-Jan-25

Added vte291 to CBL-Mariner 2.0

12.0 09-Jan-25

Added vte291 to CBL-Mariner 2.0

12.1 10-Jan-25

Added vte291 to CBL-Mariner 2.0

12.2 11-Jan-25

Added vte291 to CBL-Mariner 2.0

12.3 12-Jan-25

Added vte291 to CBL-Mariner 2.0

12.4 13-Jan-25

Added vte291 to CBL-Mariner 2.0

12.5 15-Jan-25

Added vte291 to CBL-Mariner 2.0

12.6 16-Jan-25

Added vte291 to CBL-Mariner 2.0

12.7 17-Jan-25

Added vte291 to CBL-Mariner 2.0

12.8 18-Jan-25

Added vte291 to CBL-Mariner 2.0

12.9 19-Jan-25

Added vte291 to CBL-Mariner 2.0

13.0 20-Jan-25

Added vte291 to CBL-Mariner 2.0

13.1 21-Jan-25

Added vte291 to CBL-Mariner 2.0

13.2 22-Jan-25

Added vte291 to CBL-Mariner 2.0

13.3 23-Jan-25

Added vte291 to CBL-Mariner 2.0

13.4 24-Jan-25

Added vte291 to CBL-Mariner 2.0

13.5 25-Jan-25

Added vte291 to CBL-Mariner 2.0

13.6 27-Jan-25

Added vte291 to CBL-Mariner 2.0

13.7 28-Jan-25

Added vte291 to CBL-Mariner 2.0

13.8 29-Jan-25

Added vte291 to CBL-Mariner 2.0

13.9 30-Jan-25

Added vte291 to CBL-Mariner 2.0

14.0 01-Feb-25

Added vte291 to CBL-Mariner 2.0

14.1 02-Feb-25

Added vte291 to CBL-Mariner 2.0

14.2 03-Feb-25

Added vte291 to CBL-Mariner 2.0

14.3 04-Feb-25

Added vte291 to CBL-Mariner 2.0

14.4 05-Feb-25

Added vte291 to CBL-Mariner 2.0

14.5 07-Feb-25

Added vte291 to CBL-Mariner 2.0

14.6 08-Feb-25

Added vte291 to CBL-Mariner 2.0

14.7 09-Feb-25

Added vte291 to CBL-Mariner 2.0

14.8 10-Feb-25

Added vte291 to CBL-Mariner 2.0

14.9 11-Feb-25

Added vte291 to CBL-Mariner 2.0

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2024-37535
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Linux 3.0 ARM		Unknown	Unknown	None	Base: 4.4 Temporal: 4.4 Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H	Unknown	Unknown	None
Azure Linux 3.0 x64		Unknown	Unknown	None	Base: 4.4 Temporal: 4.4 Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H	Unknown	Unknown	None
CBL Mariner 2.0 ARM	vte291 (CBL-Mariner)	Unknown	Unknown	None	Base: 4.4 Temporal: 4.4 Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H	0.66.2-3	Unknown	None
CBL Mariner 2.0 x64	vte291 (CBL-Mariner)	Unknown	Unknown	None	Base: 4.4 Temporal: 4.4 Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H	0.66.2-3	Unknown	None

CVE ID	Acknowledgements
CVE-2024-37535	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2023-1393
MITRE
NVD

Issuing CNA: secalert@redhat.com

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:7.8/TemporalScore:7.8

Base score metrics
Attack Vector	Local
Attack Complexity	Low
Privileges Required	Low
User Interaction	None
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
1.0 03-Apr-23

Information published.

1.1 30-Jun-24

Information published.

1.2 11-Sep-24

Information published.

1.3 12-Sep-24

Information published.

1.4 13-Sep-24

Information published.

1.5 14-Sep-24

Information published.

1.6 15-Sep-24

Information published.

1.7 16-Sep-24

Information published.

1.8 17-Sep-24

Information published.

1.9 18-Sep-24

Information published.

2.0 19-Sep-24

Information published.

2.1 20-Sep-24

Information published.

2.2 21-Sep-24

Information published.

2.3 22-Sep-24

Information published.

2.4 23-Sep-24

Information published.

2.5 24-Sep-24

Information published.

2.6 25-Sep-24

Information published.

2.7 26-Sep-24

Information published.

2.8 27-Sep-24

Information published.

2.9 28-Sep-24

Information published.

3.0 29-Sep-24

Information published.

3.1 30-Sep-24

Information published.

3.2 01-Oct-24

Information published.

3.3 02-Oct-24

Information published.

3.4 03-Oct-24

Information published.

3.5 04-Oct-24

Information published.

3.6 05-Oct-24

Information published.

3.7 06-Oct-24

Information published.

3.8 07-Oct-24

Information published.

3.9 09-Oct-24

Information published.

4.0 10-Oct-24

Information published.

4.1 11-Oct-24

Information published.

4.2 12-Oct-24

Information published.

4.3 13-Oct-24

Information published.

4.4 14-Oct-24

Information published.

4.5 15-Oct-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

4.6 16-Oct-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

4.7 17-Oct-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

4.8 18-Oct-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

4.9 19-Oct-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

5.0 20-Oct-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

5.1 21-Oct-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

5.2 22-Oct-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

5.3 23-Oct-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

5.4 24-Oct-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

5.5 25-Oct-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

5.6 26-Oct-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

5.7 27-Oct-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

5.8 28-Oct-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

5.9 29-Oct-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

6.0 30-Oct-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

6.1 31-Oct-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

6.2 01-Nov-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

6.3 02-Nov-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

6.4 04-Nov-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

6.5 05-Nov-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

6.6 06-Nov-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

6.7 07-Nov-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

6.8 08-Nov-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

6.9 09-Nov-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

7.0 10-Nov-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

7.1 11-Nov-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

7.2 12-Nov-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

7.3 13-Nov-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

7.4 14-Nov-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

7.5 15-Nov-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

7.6 16-Nov-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

7.7 17-Nov-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

7.8 18-Nov-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

7.9 19-Nov-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

8.0 20-Nov-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

8.1 21-Nov-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

8.2 23-Nov-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

8.3 24-Nov-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

8.4 25-Nov-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

8.5 26-Nov-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

8.6 27-Nov-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

8.7 28-Nov-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

8.8 29-Nov-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

8.9 30-Nov-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

9.0 01-Dec-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

9.1 02-Dec-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

9.2 03-Dec-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

9.3 04-Dec-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

9.4 05-Dec-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

9.5 07-Dec-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

9.6 08-Dec-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

9.7 09-Dec-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

9.8 10-Dec-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

9.9 11-Dec-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

10.0 12-Dec-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

10.1 13-Dec-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

10.2 14-Dec-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

10.3 15-Dec-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

10.4 16-Dec-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

10.5 17-Dec-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

10.6 18-Dec-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

10.7 19-Dec-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

10.8 20-Dec-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

10.9 21-Dec-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

11.0 22-Dec-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

11.1 23-Dec-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

11.2 24-Dec-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

11.3 25-Dec-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

11.4 26-Dec-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

11.5 27-Dec-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

11.6 28-Dec-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

11.7 29-Dec-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

11.8 30-Dec-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

11.9 31-Dec-24

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

12.0 01-Jan-25

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

12.1 02-Jan-25

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

12.2 03-Jan-25

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

12.3 04-Jan-25

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

12.4 05-Jan-25

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

12.5 06-Jan-25

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

12.6 07-Jan-25

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

12.7 08-Jan-25

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

12.8 09-Jan-25

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

12.9 10-Jan-25

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

13.0 11-Jan-25

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

13.1 12-Jan-25

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

13.2 13-Jan-25

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

13.3 15-Jan-25

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

13.4 16-Jan-25

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

13.5 17-Jan-25

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

13.6 18-Jan-25

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

13.7 19-Jan-25

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

13.8 20-Jan-25

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

13.9 21-Jan-25

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

14.0 22-Jan-25

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

14.1 23-Jan-25

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

14.2 24-Jan-25

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

14.3 25-Jan-25

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

14.4 27-Jan-25

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

14.5 28-Jan-25

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

14.6 29-Jan-25

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

14.7 30-Jan-25

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

14.8 01-Feb-25

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

14.9 02-Feb-25

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

15.0 03-Feb-25

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

15.1 04-Feb-25

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

15.2 05-Feb-25

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

15.3 07-Feb-25

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

15.4 08-Feb-25

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

15.5 09-Feb-25

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

15.6 10-Feb-25

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

15.7 11-Feb-25

Added xorg-x11-server to Azure Linux 3.0 Added xorg-x11-server to CBL-Mariner 2.0

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2023-1393
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Linux 3.0 ARM	xorg-x11-server (CBL-Mariner)	Unknown	Unknown	None	Base: 7.8 Temporal: 7.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	1.20.10-6	Unknown	None
Azure Linux 3.0 x64	xorg-x11-server (CBL-Mariner)	Unknown	Unknown	None	Base: 7.8 Temporal: 7.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	1.20.10-6	Unknown	None
CBL Mariner 2.0 ARM	xorg-x11-server (CBL-Mariner)	Unknown	Unknown	None	Base: 7.8 Temporal: 7.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	1.20.10-4	Unknown	None
CBL Mariner 2.0 x64	xorg-x11-server (CBL-Mariner)	Unknown	Unknown	None	Base: 7.8 Temporal: 7.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	1.20.10-4	Unknown	None

CVE ID	Acknowledgements
CVE-2023-1393	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2021-20277
MITRE
NVD

Issuing CNA: secalert@redhat.com

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:7.5/TemporalScore:7.5

Base score metrics
Attack Vector	Network
Attack Complexity	Low
Privileges Required	None
User Interaction	None
Scope	Unchanged
Confidentiality	None
Integrity	None
Availability	High

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
1.0 15-Oct-24

Information published.

1.1 16-Oct-24

Added samba to Azure Linux 3.0

1.2 17-Oct-24

Added samba to Azure Linux 3.0

1.3 18-Oct-24

Added samba to Azure Linux 3.0

1.4 19-Oct-24

Added samba to Azure Linux 3.0

1.5 20-Oct-24

Added samba to Azure Linux 3.0

1.6 21-Oct-24

Added samba to Azure Linux 3.0

1.7 22-Oct-24

Added samba to Azure Linux 3.0

1.8 23-Oct-24

Added samba to Azure Linux 3.0

1.9 24-Oct-24

Added samba to Azure Linux 3.0

2.0 25-Oct-24

Added samba to Azure Linux 3.0

2.1 26-Oct-24

Added samba to Azure Linux 3.0

2.2 27-Oct-24

Added samba to Azure Linux 3.0

2.3 28-Oct-24

Added samba to Azure Linux 3.0

2.4 29-Oct-24

Added samba to Azure Linux 3.0

2.5 30-Oct-24

Added samba to Azure Linux 3.0

2.6 31-Oct-24

Added samba to Azure Linux 3.0

2.7 01-Nov-24

Added samba to Azure Linux 3.0

2.8 02-Nov-24

Added samba to Azure Linux 3.0

2.9 04-Nov-24

Added samba to Azure Linux 3.0

3.0 05-Nov-24

Added samba to Azure Linux 3.0

3.1 06-Nov-24

Added samba to Azure Linux 3.0

3.2 07-Nov-24

Added samba to Azure Linux 3.0

3.3 08-Nov-24

Added samba to Azure Linux 3.0

3.4 09-Nov-24

Added samba to Azure Linux 3.0

3.5 10-Nov-24

Added samba to Azure Linux 3.0

3.6 11-Nov-24

Added samba to Azure Linux 3.0

3.7 12-Nov-24

Added samba to Azure Linux 3.0

3.8 13-Nov-24

Added samba to Azure Linux 3.0

3.9 14-Nov-24

Added samba to Azure Linux 3.0

4.0 15-Nov-24

Added samba to Azure Linux 3.0

4.1 16-Nov-24

Added samba to Azure Linux 3.0

4.2 17-Nov-24

Added samba to Azure Linux 3.0

4.3 18-Nov-24

Added samba to Azure Linux 3.0

4.4 19-Nov-24

Added samba to Azure Linux 3.0

4.5 20-Nov-24

Added samba to Azure Linux 3.0

4.6 21-Nov-24

Added samba to Azure Linux 3.0

4.7 23-Nov-24

Added samba to Azure Linux 3.0

4.8 24-Nov-24

Added samba to Azure Linux 3.0

4.9 25-Nov-24

Added samba to Azure Linux 3.0

5.0 26-Nov-24

Added samba to Azure Linux 3.0

5.1 27-Nov-24

Added samba to Azure Linux 3.0

5.2 28-Nov-24

Added samba to Azure Linux 3.0

5.3 29-Nov-24

Added samba to Azure Linux 3.0

5.4 30-Nov-24

Added samba to Azure Linux 3.0

5.5 01-Dec-24

Added samba to Azure Linux 3.0

5.6 02-Dec-24

Added samba to Azure Linux 3.0

5.7 03-Dec-24

Added samba to Azure Linux 3.0

5.8 04-Dec-24

Added samba to Azure Linux 3.0

5.9 05-Dec-24

Added samba to Azure Linux 3.0

6.0 07-Dec-24

Added samba to Azure Linux 3.0

6.1 08-Dec-24

Added samba to Azure Linux 3.0

6.2 09-Dec-24

Added samba to Azure Linux 3.0

6.3 10-Dec-24

Added samba to Azure Linux 3.0

6.4 11-Dec-24

Added samba to Azure Linux 3.0

6.5 12-Dec-24

Added samba to Azure Linux 3.0

6.6 13-Dec-24

Added samba to Azure Linux 3.0

6.7 14-Dec-24

Added samba to Azure Linux 3.0

6.8 15-Dec-24

Added samba to Azure Linux 3.0

6.9 16-Dec-24

Added samba to Azure Linux 3.0

7.0 17-Dec-24

Added samba to Azure Linux 3.0

7.1 18-Dec-24

Added samba to Azure Linux 3.0

7.2 19-Dec-24

Added samba to Azure Linux 3.0

7.3 20-Dec-24

Added samba to Azure Linux 3.0

7.4 21-Dec-24

Added samba to Azure Linux 3.0

7.5 22-Dec-24

Added samba to Azure Linux 3.0

7.6 23-Dec-24

Added samba to Azure Linux 3.0

7.7 24-Dec-24

Added samba to Azure Linux 3.0

7.8 25-Dec-24

Added samba to Azure Linux 3.0

7.9 26-Dec-24

Added samba to Azure Linux 3.0

8.0 27-Dec-24

Added samba to Azure Linux 3.0

8.1 28-Dec-24

Added samba to Azure Linux 3.0

8.2 29-Dec-24

Added samba to Azure Linux 3.0

8.3 30-Dec-24

Added samba to Azure Linux 3.0

8.4 31-Dec-24

Added samba to Azure Linux 3.0

8.5 01-Jan-25

Added samba to Azure Linux 3.0

8.6 02-Jan-25

Added samba to Azure Linux 3.0

8.7 03-Jan-25

Added samba to Azure Linux 3.0

8.8 04-Jan-25

Added samba to Azure Linux 3.0

8.9 05-Jan-25

Added samba to Azure Linux 3.0

9.0 06-Jan-25

Added samba to Azure Linux 3.0

9.1 07-Jan-25

Added samba to Azure Linux 3.0

9.2 08-Jan-25

Added samba to Azure Linux 3.0

9.3 09-Jan-25

Added samba to Azure Linux 3.0

9.4 10-Jan-25

Added samba to Azure Linux 3.0

9.5 11-Jan-25

Added samba to Azure Linux 3.0

9.6 12-Jan-25

Added samba to Azure Linux 3.0

9.7 13-Jan-25

Added samba to Azure Linux 3.0

9.8 15-Jan-25

Added samba to Azure Linux 3.0

9.9 16-Jan-25

Added samba to Azure Linux 3.0

10.0 17-Jan-25

Added samba to Azure Linux 3.0

10.1 18-Jan-25

Added samba to Azure Linux 3.0

10.2 19-Jan-25

Added samba to Azure Linux 3.0

10.3 20-Jan-25

Added samba to Azure Linux 3.0

10.4 21-Jan-25

Added samba to Azure Linux 3.0

10.5 22-Jan-25

Added samba to Azure Linux 3.0

10.6 23-Jan-25

Added samba to Azure Linux 3.0

10.7 24-Jan-25

Added samba to Azure Linux 3.0

10.8 25-Jan-25

Added samba to Azure Linux 3.0

10.9 27-Jan-25

Added samba to Azure Linux 3.0

11.0 28-Jan-25

Added samba to Azure Linux 3.0

11.1 29-Jan-25

Added samba to Azure Linux 3.0

11.2 30-Jan-25

Added samba to Azure Linux 3.0

11.3 01-Feb-25

Added samba to Azure Linux 3.0

11.4 02-Feb-25

Added samba to Azure Linux 3.0

11.5 03-Feb-25

Added samba to Azure Linux 3.0

11.6 04-Feb-25

Added samba to Azure Linux 3.0

11.7 05-Feb-25

Added samba to Azure Linux 3.0

11.8 07-Feb-25

Added samba to Azure Linux 3.0

11.9 08-Feb-25

Added samba to Azure Linux 3.0

12.0 09-Feb-25

Added samba to Azure Linux 3.0

12.1 10-Feb-25

Added samba to Azure Linux 3.0

12.2 11-Feb-25

Added samba to Azure Linux 3.0

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2021-20277
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Linux 3.0 ARM	samba (CBL-Mariner)	Unknown	Unknown	None	Base: 7.5 Temporal: 7.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	4.18.3-1	Unknown	None
Azure Linux 3.0 x64	samba (CBL-Mariner)	Unknown	Unknown	None	Base: 7.5 Temporal: 7.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	4.18.3-1	Unknown	None

CVE ID	Acknowledgements
CVE-2021-20277	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2019-3833
MITRE
NVD

Issuing CNA: secalert@redhat.com

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:7.5/TemporalScore:7.5

Base score metrics
Attack Vector	Network
Attack Complexity	Low
Privileges Required	None
User Interaction	None
Scope	Unchanged
Confidentiality	None
Integrity	None
Availability	High

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
1.0 02-Apr-24

Information published.

1.6 30-Jun-24

Information published.

1.7 08-Jul-24

Information published.

1.8 09-Jul-24

Information published.

1.9 10-Jul-24

Information published.

2.0 12-Jul-24

Information published.

2.1 13-Jul-24

Information published.

2.2 14-Jul-24

Information published.

2.3 15-Jul-24

Information published.

2.4 16-Jul-24

Information published.

2.5 17-Jul-24

Information published.

2.6 19-Jul-24

Information published.

2.7 20-Jul-24

Information published.

2.8 21-Jul-24

Information published.

2.9 22-Jul-24

Information published.

3.0 23-Jul-24

Information published.

3.1 24-Jul-24

Information published.

3.2 25-Jul-24

Information published.

3.3 26-Jul-24

Information published.

3.4 27-Jul-24

Information published.

3.5 28-Jul-24

Information published.

3.6 29-Jul-24

Information published.

3.7 02-Aug-24

Information published.

3.8 03-Aug-24

Information published.

3.9 04-Aug-24

Information published.

4.0 05-Aug-24

Information published.

4.1 06-Aug-24

Information published.

4.2 07-Aug-24

Information published.

4.3 08-Aug-24

Information published.

4.4 09-Aug-24

Information published.

4.5 10-Aug-24

Information published.

4.6 11-Aug-24

Information published.

4.7 12-Aug-24

Information published.

4.8 16-Aug-24

Information published.

4.9 17-Aug-24

Information published.

5.0 18-Aug-24

Information published.

5.1 19-Aug-24

Information published.

5.2 20-Aug-24

Information published.

5.3 21-Aug-24

Information published.

5.4 22-Aug-24

Information published.

5.5 23-Aug-24

Information published.

5.6 24-Aug-24

Information published.

5.7 25-Aug-24

Information published.

5.8 26-Aug-24

Information published.

5.9 27-Aug-24

Information published.

6.0 28-Aug-24

Information published.

6.1 29-Aug-24

Information published.

6.2 30-Aug-24

Information published.

6.3 31-Aug-24

Information published.

6.4 01-Sep-24

Information published.

6.5 02-Sep-24

Information published.

6.6 03-Sep-24

Information published.

6.7 05-Sep-24

Information published.

6.8 06-Sep-24

Information published.

6.9 07-Sep-24

Information published.

7.0 08-Sep-24

Information published.

7.1 11-Sep-24

Information published.

7.2 12-Sep-24

Information published.

7.3 13-Sep-24

Information published.

7.4 14-Sep-24

Information published.

7.5 15-Sep-24

Information published.

7.6 16-Sep-24

Information published.

7.7 17-Sep-24

Information published.

7.8 18-Sep-24

Information published.

7.9 19-Sep-24

Information published.

8.0 20-Sep-24

Information published.

8.1 21-Sep-24

Information published.

8.2 22-Sep-24

Information published.

8.3 23-Sep-24

Information published.

8.4 24-Sep-24

Information published.

8.5 25-Sep-24

Information published.

8.6 26-Sep-24

Information published.

8.7 27-Sep-24

Information published.

8.8 28-Sep-24

Information published.

8.9 29-Sep-24

Information published.

9.0 30-Sep-24

Information published.

9.1 01-Oct-24

Information published.

9.2 02-Oct-24

Information published.

9.3 03-Oct-24

Information published.

9.4 04-Oct-24

Information published.

9.5 05-Oct-24

Information published.

9.6 06-Oct-24

Information published.

9.7 07-Oct-24

Information published.

9.8 09-Oct-24

Information published.

9.9 10-Oct-24

Information published.

10.0 11-Oct-24

Information published.

10.1 12-Oct-24

Information published.

10.2 13-Oct-24

Information published.

10.3 14-Oct-24

Information published.

10.4 15-Oct-24

Added openwsman to CBL-Mariner 2.0

10.5 16-Oct-24

Added openwsman to CBL-Mariner 2.0

10.6 17-Oct-24

Added openwsman to CBL-Mariner 2.0

10.7 18-Oct-24

Added openwsman to CBL-Mariner 2.0

10.8 19-Oct-24

Added openwsman to CBL-Mariner 2.0

10.9 20-Oct-24

Added openwsman to CBL-Mariner 2.0

11.0 21-Oct-24

Added openwsman to CBL-Mariner 2.0

11.1 22-Oct-24

Added openwsman to CBL-Mariner 2.0

11.2 23-Oct-24

Added openwsman to CBL-Mariner 2.0

11.3 24-Oct-24

Added openwsman to CBL-Mariner 2.0

11.4 25-Oct-24

Added openwsman to CBL-Mariner 2.0

11.5 26-Oct-24

Added openwsman to CBL-Mariner 2.0

11.6 27-Oct-24

Added openwsman to CBL-Mariner 2.0

11.7 28-Oct-24

Added openwsman to CBL-Mariner 2.0

11.8 29-Oct-24

Added openwsman to CBL-Mariner 2.0

11.9 30-Oct-24

Added openwsman to CBL-Mariner 2.0

12.0 31-Oct-24

Added openwsman to CBL-Mariner 2.0

12.1 01-Nov-24

Added openwsman to CBL-Mariner 2.0

12.2 02-Nov-24

Added openwsman to CBL-Mariner 2.0

12.3 04-Nov-24

Added openwsman to CBL-Mariner 2.0

12.4 05-Nov-24

Added openwsman to CBL-Mariner 2.0

12.5 06-Nov-24

Added openwsman to CBL-Mariner 2.0

12.6 07-Nov-24

Added openwsman to CBL-Mariner 2.0

12.7 08-Nov-24

Added openwsman to CBL-Mariner 2.0

12.8 09-Nov-24

Added openwsman to CBL-Mariner 2.0

12.9 10-Nov-24

Added openwsman to CBL-Mariner 2.0

13.0 11-Nov-24

Added openwsman to CBL-Mariner 2.0

13.1 12-Nov-24

Added openwsman to CBL-Mariner 2.0

13.2 13-Nov-24

Added openwsman to CBL-Mariner 2.0

13.3 14-Nov-24

Added openwsman to CBL-Mariner 2.0

13.4 15-Nov-24

Added openwsman to CBL-Mariner 2.0

13.5 16-Nov-24

Added openwsman to CBL-Mariner 2.0

13.6 17-Nov-24

Added openwsman to CBL-Mariner 2.0

13.7 18-Nov-24

Added openwsman to CBL-Mariner 2.0

13.8 19-Nov-24

Added openwsman to CBL-Mariner 2.0

13.9 20-Nov-24

Added openwsman to CBL-Mariner 2.0

14.0 21-Nov-24

Added openwsman to CBL-Mariner 2.0

14.1 23-Nov-24

Added openwsman to CBL-Mariner 2.0

14.2 24-Nov-24

Added openwsman to CBL-Mariner 2.0

14.3 25-Nov-24

Added openwsman to CBL-Mariner 2.0

14.4 26-Nov-24

Added openwsman to CBL-Mariner 2.0

14.5 27-Nov-24

Added openwsman to CBL-Mariner 2.0

14.6 28-Nov-24

Added openwsman to CBL-Mariner 2.0

14.7 29-Nov-24

Added openwsman to CBL-Mariner 2.0

14.8 30-Nov-24

Added openwsman to CBL-Mariner 2.0

14.9 01-Dec-24

Added openwsman to CBL-Mariner 2.0

15.0 02-Dec-24

Added openwsman to CBL-Mariner 2.0

15.1 03-Dec-24

Added openwsman to CBL-Mariner 2.0

15.2 04-Dec-24

Added openwsman to CBL-Mariner 2.0

15.3 05-Dec-24

Added openwsman to CBL-Mariner 2.0

15.4 07-Dec-24

Added openwsman to CBL-Mariner 2.0

15.5 08-Dec-24

Added openwsman to CBL-Mariner 2.0

15.6 09-Dec-24

Added openwsman to CBL-Mariner 2.0

15.7 10-Dec-24

Added openwsman to CBL-Mariner 2.0

15.8 11-Dec-24

Added openwsman to CBL-Mariner 2.0

15.9 12-Dec-24

Added openwsman to CBL-Mariner 2.0

16.0 13-Dec-24

Added openwsman to CBL-Mariner 2.0

16.1 14-Dec-24

Added openwsman to CBL-Mariner 2.0

16.2 15-Dec-24

Added openwsman to CBL-Mariner 2.0

16.3 16-Dec-24

Added openwsman to CBL-Mariner 2.0

16.4 17-Dec-24

Added openwsman to CBL-Mariner 2.0

16.5 18-Dec-24

Added openwsman to CBL-Mariner 2.0

16.6 19-Dec-24

Added openwsman to CBL-Mariner 2.0

16.7 20-Dec-24

Added openwsman to CBL-Mariner 2.0

16.8 21-Dec-24

Added openwsman to CBL-Mariner 2.0

16.9 22-Dec-24

Added openwsman to CBL-Mariner 2.0

17.0 23-Dec-24

Added openwsman to CBL-Mariner 2.0

17.1 24-Dec-24

Added openwsman to CBL-Mariner 2.0

17.2 25-Dec-24

Added openwsman to CBL-Mariner 2.0

17.3 26-Dec-24

Added openwsman to CBL-Mariner 2.0

17.4 27-Dec-24

Added openwsman to CBL-Mariner 2.0

17.5 28-Dec-24

Added openwsman to CBL-Mariner 2.0

17.6 29-Dec-24

Added openwsman to CBL-Mariner 2.0

17.7 30-Dec-24

Added openwsman to CBL-Mariner 2.0

17.8 31-Dec-24

Added openwsman to CBL-Mariner 2.0

17.9 01-Jan-25

Added openwsman to CBL-Mariner 2.0

18.0 02-Jan-25

Added openwsman to CBL-Mariner 2.0

18.1 03-Jan-25

Added openwsman to CBL-Mariner 2.0

18.2 04-Jan-25

Added openwsman to CBL-Mariner 2.0

18.3 05-Jan-25

Added openwsman to CBL-Mariner 2.0

18.4 06-Jan-25

Added openwsman to CBL-Mariner 2.0

18.5 07-Jan-25

Added openwsman to CBL-Mariner 2.0

18.6 08-Jan-25

Added openwsman to CBL-Mariner 2.0

18.7 09-Jan-25

Added openwsman to CBL-Mariner 2.0

18.8 10-Jan-25

Added openwsman to CBL-Mariner 2.0

18.9 11-Jan-25

Added openwsman to CBL-Mariner 2.0

19.0 12-Jan-25

Added openwsman to CBL-Mariner 2.0

19.1 13-Jan-25

Added openwsman to CBL-Mariner 2.0

19.2 15-Jan-25

Added openwsman to CBL-Mariner 2.0

19.3 16-Jan-25

Added openwsman to CBL-Mariner 2.0

19.4 17-Jan-25

Added openwsman to CBL-Mariner 2.0

19.5 18-Jan-25

Added openwsman to CBL-Mariner 2.0

19.6 19-Jan-25

Added openwsman to CBL-Mariner 2.0

19.7 20-Jan-25

Added openwsman to CBL-Mariner 2.0

19.8 21-Jan-25

Added openwsman to CBL-Mariner 2.0

19.9 22-Jan-25

Added openwsman to CBL-Mariner 2.0

20.0 23-Jan-25

Added openwsman to CBL-Mariner 2.0

20.1 24-Jan-25

Added openwsman to CBL-Mariner 2.0

20.2 25-Jan-25

Added openwsman to CBL-Mariner 2.0

20.3 27-Jan-25

Added openwsman to CBL-Mariner 2.0

20.4 28-Jan-25

Added openwsman to CBL-Mariner 2.0

20.5 29-Jan-25

Added openwsman to CBL-Mariner 2.0

20.6 30-Jan-25

Added openwsman to CBL-Mariner 2.0

20.7 01-Feb-25

Added openwsman to CBL-Mariner 2.0

20.8 02-Feb-25

Added openwsman to CBL-Mariner 2.0

20.9 03-Feb-25

Added openwsman to CBL-Mariner 2.0

21.0 04-Feb-25

Added openwsman to CBL-Mariner 2.0

21.1 05-Feb-25

Added openwsman to CBL-Mariner 2.0

21.2 07-Feb-25

Added openwsman to CBL-Mariner 2.0

21.3 08-Feb-25

Added openwsman to CBL-Mariner 2.0

21.4 09-Feb-25

Added openwsman to CBL-Mariner 2.0

21.5 10-Feb-25

Added openwsman to CBL-Mariner 2.0

21.6 11-Feb-25

Added openwsman to CBL-Mariner 2.0

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2019-3833
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Linux 3.0 ARM		Unknown	Unknown	None	Base: 7.5 Temporal: 7.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	Unknown	Unknown	None
Azure Linux 3.0 x64		Unknown	Unknown	None	Base: 7.5 Temporal: 7.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	Unknown	Unknown	None
CBL Mariner 2.0 ARM	openwsman (CBL-Mariner)	Unknown	Unknown	None	Base: 7.5 Temporal: 7.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	2.6.8-13	Unknown	None
CBL Mariner 2.0 x64	openwsman (CBL-Mariner)	Unknown	Unknown	None	Base: 7.5 Temporal: 7.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	2.6.8-13	Unknown	None

CVE ID	Acknowledgements
CVE-2019-3833	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2023-27043
MITRE
NVD

Issuing CNA: cve@mitre.org

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:5.3/TemporalScore:5.3

Base score metrics
Attack Vector	Network
Attack Complexity	Low
Privileges Required	None
User Interaction	None
Scope	Unchanged
Confidentiality	None
Integrity	Low
Availability	None

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
0.1 01-Feb-25

Information published.

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2023-27043
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Linux 3.0 ARM	python3 (CBL-Mariner)	Unknown	Unknown	None	Base: 5.3 Temporal: 5.3 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N	3.12.0-1	Unknown	None
Azure Linux 3.0 x64	python3 (CBL-Mariner)	Unknown	Unknown	None	Base: 5.3 Temporal: 5.3 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N	3.12.0-1	Unknown	None

CVE ID	Acknowledgements
CVE-2023-27043	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2019-3816
MITRE
NVD

Issuing CNA: secalert@redhat.com

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:7.5/TemporalScore:7.5

Base score metrics
Attack Vector	Network
Attack Complexity	Low
Privileges Required	None
User Interaction	None
Scope	Unchanged
Confidentiality	High
Integrity	None
Availability	None

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
1.0 02-Apr-24

Information published.

1.6 30-Jun-24

Information published.

1.1 02-Jul-24

Information published.

1.2 03-Jul-24

Information published.

1.3 04-Jul-24

Information published.

1.4 05-Jul-24

Information published.

1.5 06-Jul-24

Information published.

1.7 08-Jul-24

Information published.

1.8 09-Jul-24

Information published.

1.9 10-Jul-24

Information published.

2.0 12-Jul-24

Information published.

2.1 13-Jul-24

Information published.

2.2 14-Jul-24

Information published.

2.3 15-Jul-24

Information published.

2.4 16-Jul-24

Information published.

2.5 17-Jul-24

Information published.

2.6 19-Jul-24

Information published.

2.7 20-Jul-24

Information published.

2.8 21-Jul-24

Information published.

2.9 22-Jul-24

Information published.

3.0 23-Jul-24

Information published.

3.1 24-Jul-24

Information published.

3.2 25-Jul-24

Information published.

3.3 26-Jul-24

Information published.

3.4 27-Jul-24

Information published.

3.5 28-Jul-24

Information published.

3.6 29-Jul-24

Information published.

3.7 02-Aug-24

Information published.

3.8 03-Aug-24

Information published.

3.9 04-Aug-24

Information published.

4.0 05-Aug-24

Information published.

4.1 06-Aug-24

Information published.

4.2 07-Aug-24

Information published.

4.3 08-Aug-24

Information published.

4.4 09-Aug-24

Information published.

4.5 10-Aug-24

Information published.

4.6 11-Aug-24

Information published.

4.7 12-Aug-24

Information published.

4.8 16-Aug-24

Information published.

4.9 17-Aug-24

Information published.

5.0 18-Aug-24

Information published.

5.1 19-Aug-24

Information published.

5.2 20-Aug-24

Information published.

5.3 21-Aug-24

Information published.

5.4 22-Aug-24

Information published.

5.5 23-Aug-24

Information published.

5.6 24-Aug-24

Information published.

5.7 25-Aug-24

Information published.

5.8 26-Aug-24

Information published.

5.9 27-Aug-24

Information published.

6.0 28-Aug-24

Information published.

6.1 29-Aug-24

Information published.

6.2 30-Aug-24

Information published.

6.3 31-Aug-24

Information published.

6.4 01-Sep-24

Information published.

6.5 02-Sep-24

Information published.

6.6 03-Sep-24

Information published.

6.7 05-Sep-24

Information published.

6.8 06-Sep-24

Information published.

6.9 07-Sep-24

Information published.

7.0 08-Sep-24

Information published.

7.1 11-Sep-24

Information published.

7.2 12-Sep-24

Information published.

7.3 13-Sep-24

Information published.

7.4 14-Sep-24

Information published.

7.5 15-Sep-24

Information published.

7.6 16-Sep-24

Information published.

7.7 17-Sep-24

Information published.

7.8 18-Sep-24

Information published.

7.9 19-Sep-24

Information published.

8.0 20-Sep-24

Information published.

8.1 21-Sep-24

Information published.

8.2 22-Sep-24

Information published.

8.3 23-Sep-24

Information published.

8.4 24-Sep-24

Information published.

8.5 25-Sep-24

Information published.

8.6 26-Sep-24

Information published.

8.7 27-Sep-24

Information published.

8.8 28-Sep-24

Information published.

8.9 29-Sep-24

Information published.

9.0 30-Sep-24

Information published.

9.1 01-Oct-24

Information published.

9.2 02-Oct-24

Information published.

9.3 03-Oct-24

Information published.

9.4 04-Oct-24

Information published.

9.5 05-Oct-24

Information published.

9.6 06-Oct-24

Information published.

9.7 07-Oct-24

Information published.

9.8 08-Oct-24

Information published.

9.9 09-Oct-24

Information published.

10.0 10-Oct-24

Information published.

10.1 11-Oct-24

Information published.

10.2 12-Oct-24

Information published.

10.3 13-Oct-24

Information published.

10.4 14-Oct-24

Information published.

10.5 15-Oct-24

Added openwsman to CBL-Mariner 2.0

10.6 16-Oct-24

Added openwsman to CBL-Mariner 2.0

10.7 17-Oct-24

Added openwsman to CBL-Mariner 2.0

10.8 18-Oct-24

Added openwsman to CBL-Mariner 2.0

10.9 19-Oct-24

Added openwsman to CBL-Mariner 2.0

11.0 20-Oct-24

Added openwsman to CBL-Mariner 2.0

11.1 21-Oct-24

Added openwsman to CBL-Mariner 2.0

11.2 22-Oct-24

Added openwsman to CBL-Mariner 2.0

11.3 23-Oct-24

Added openwsman to CBL-Mariner 2.0

11.4 24-Oct-24

Added openwsman to CBL-Mariner 2.0

11.5 25-Oct-24

Added openwsman to CBL-Mariner 2.0

11.6 26-Oct-24

Added openwsman to CBL-Mariner 2.0

11.7 27-Oct-24

Added openwsman to CBL-Mariner 2.0

11.8 28-Oct-24

Added openwsman to CBL-Mariner 2.0

11.9 29-Oct-24

Added openwsman to CBL-Mariner 2.0

12.0 30-Oct-24

Added openwsman to CBL-Mariner 2.0

12.1 31-Oct-24

Added openwsman to CBL-Mariner 2.0

12.2 01-Nov-24

Added openwsman to CBL-Mariner 2.0

12.3 02-Nov-24

Added openwsman to CBL-Mariner 2.0

12.4 04-Nov-24

Added openwsman to CBL-Mariner 2.0

12.5 05-Nov-24

Added openwsman to CBL-Mariner 2.0

12.6 06-Nov-24

Added openwsman to CBL-Mariner 2.0

12.7 07-Nov-24

Added openwsman to CBL-Mariner 2.0

12.8 08-Nov-24

Added openwsman to CBL-Mariner 2.0

12.9 09-Nov-24

Added openwsman to CBL-Mariner 2.0

13.0 10-Nov-24

Added openwsman to CBL-Mariner 2.0

13.1 11-Nov-24

Added openwsman to CBL-Mariner 2.0

13.2 12-Nov-24

Added openwsman to CBL-Mariner 2.0

13.3 13-Nov-24

Added openwsman to CBL-Mariner 2.0

13.4 14-Nov-24

Added openwsman to CBL-Mariner 2.0

13.5 15-Nov-24

Added openwsman to CBL-Mariner 2.0

13.6 16-Nov-24

Added openwsman to CBL-Mariner 2.0

13.7 17-Nov-24

Added openwsman to CBL-Mariner 2.0

13.8 18-Nov-24

Added openwsman to CBL-Mariner 2.0

13.9 19-Nov-24

Added openwsman to CBL-Mariner 2.0

14.0 20-Nov-24

Added openwsman to CBL-Mariner 2.0

14.1 21-Nov-24

Added openwsman to CBL-Mariner 2.0

14.2 23-Nov-24

Added openwsman to CBL-Mariner 2.0

14.3 24-Nov-24

Added openwsman to CBL-Mariner 2.0

14.4 25-Nov-24

Added openwsman to CBL-Mariner 2.0

14.5 26-Nov-24

Added openwsman to CBL-Mariner 2.0

14.6 27-Nov-24

Added openwsman to CBL-Mariner 2.0

14.7 28-Nov-24

Added openwsman to CBL-Mariner 2.0

14.8 29-Nov-24

Added openwsman to CBL-Mariner 2.0

14.9 30-Nov-24

Added openwsman to CBL-Mariner 2.0

15.0 01-Dec-24

Added openwsman to CBL-Mariner 2.0

15.1 02-Dec-24

Added openwsman to CBL-Mariner 2.0

15.2 03-Dec-24

Added openwsman to CBL-Mariner 2.0

15.3 04-Dec-24

Added openwsman to CBL-Mariner 2.0

15.4 05-Dec-24

Added openwsman to CBL-Mariner 2.0

15.5 07-Dec-24

Added openwsman to CBL-Mariner 2.0

15.6 08-Dec-24

Added openwsman to CBL-Mariner 2.0

15.7 09-Dec-24

Added openwsman to CBL-Mariner 2.0

15.8 10-Dec-24

Added openwsman to CBL-Mariner 2.0

15.9 11-Dec-24

Added openwsman to CBL-Mariner 2.0

16.0 12-Dec-24

Added openwsman to CBL-Mariner 2.0

16.1 13-Dec-24

Added openwsman to CBL-Mariner 2.0

16.2 14-Dec-24

Added openwsman to CBL-Mariner 2.0

16.3 15-Dec-24

Added openwsman to CBL-Mariner 2.0

16.4 16-Dec-24

Added openwsman to CBL-Mariner 2.0

16.5 17-Dec-24

Added openwsman to CBL-Mariner 2.0

16.6 18-Dec-24

Added openwsman to CBL-Mariner 2.0

16.7 19-Dec-24

Added openwsman to CBL-Mariner 2.0

16.8 20-Dec-24

Added openwsman to CBL-Mariner 2.0

16.9 21-Dec-24

Added openwsman to CBL-Mariner 2.0

17.0 22-Dec-24

Added openwsman to CBL-Mariner 2.0

17.1 23-Dec-24

Added openwsman to CBL-Mariner 2.0

17.2 24-Dec-24

Added openwsman to CBL-Mariner 2.0

17.3 25-Dec-24

Added openwsman to CBL-Mariner 2.0

17.4 26-Dec-24

Added openwsman to CBL-Mariner 2.0

17.5 27-Dec-24

Added openwsman to CBL-Mariner 2.0

17.6 28-Dec-24

Added openwsman to CBL-Mariner 2.0

17.7 29-Dec-24

Added openwsman to CBL-Mariner 2.0

17.8 30-Dec-24

Added openwsman to CBL-Mariner 2.0

17.9 31-Dec-24

Added openwsman to CBL-Mariner 2.0

18.0 01-Jan-25

Added openwsman to CBL-Mariner 2.0

18.1 02-Jan-25

Added openwsman to CBL-Mariner 2.0

18.2 03-Jan-25

Added openwsman to CBL-Mariner 2.0

18.3 04-Jan-25

Added openwsman to CBL-Mariner 2.0

18.4 05-Jan-25

Added openwsman to CBL-Mariner 2.0

18.5 06-Jan-25

Added openwsman to CBL-Mariner 2.0

18.6 07-Jan-25

Added openwsman to CBL-Mariner 2.0

18.7 08-Jan-25

Added openwsman to CBL-Mariner 2.0

18.8 09-Jan-25

Added openwsman to CBL-Mariner 2.0

18.9 10-Jan-25

Added openwsman to CBL-Mariner 2.0

19.0 11-Jan-25

Added openwsman to CBL-Mariner 2.0

19.1 12-Jan-25

Added openwsman to CBL-Mariner 2.0

19.2 13-Jan-25

Added openwsman to CBL-Mariner 2.0

19.3 15-Jan-25

Added openwsman to CBL-Mariner 2.0

19.4 16-Jan-25

Added openwsman to CBL-Mariner 2.0

19.5 17-Jan-25

Added openwsman to CBL-Mariner 2.0

19.6 18-Jan-25

Added openwsman to CBL-Mariner 2.0

19.7 19-Jan-25

Added openwsman to CBL-Mariner 2.0

19.8 20-Jan-25

Added openwsman to CBL-Mariner 2.0

19.9 21-Jan-25

Added openwsman to CBL-Mariner 2.0

20.0 22-Jan-25

Added openwsman to CBL-Mariner 2.0

20.1 23-Jan-25

Added openwsman to CBL-Mariner 2.0

20.2 24-Jan-25

Added openwsman to CBL-Mariner 2.0

20.3 25-Jan-25

Added openwsman to CBL-Mariner 2.0

20.4 27-Jan-25

Added openwsman to CBL-Mariner 2.0

20.5 28-Jan-25

Added openwsman to CBL-Mariner 2.0

20.6 29-Jan-25

Added openwsman to CBL-Mariner 2.0

20.7 30-Jan-25

Added openwsman to CBL-Mariner 2.0

20.8 01-Feb-25

Added openwsman to CBL-Mariner 2.0

20.9 02-Feb-25

Added openwsman to CBL-Mariner 2.0

21.0 03-Feb-25

Added openwsman to CBL-Mariner 2.0

21.1 04-Feb-25

Added openwsman to CBL-Mariner 2.0

21.2 05-Feb-25

Added openwsman to CBL-Mariner 2.0

21.3 07-Feb-25

Added openwsman to CBL-Mariner 2.0

21.4 08-Feb-25

Added openwsman to CBL-Mariner 2.0

21.5 09-Feb-25

Added openwsman to CBL-Mariner 2.0

21.6 10-Feb-25

Added openwsman to CBL-Mariner 2.0

21.7 11-Feb-25

Added openwsman to CBL-Mariner 2.0

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2019-3816
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Linux 3.0 ARM		Unknown	Unknown	None	Base: 7.5 Temporal: 7.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	Unknown	Unknown	None
Azure Linux 3.0 x64		Unknown	Unknown	None	Base: 7.5 Temporal: 7.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	Unknown	Unknown	None
CBL Mariner 2.0 ARM	openwsman (CBL-Mariner)	Unknown	Unknown	None	Base: 7.5 Temporal: 7.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	2.6.8-13	Unknown	None
CBL Mariner 2.0 x64	openwsman (CBL-Mariner)	Unknown	Unknown	None	Base: 7.5 Temporal: 7.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	2.6.8-13	Unknown	None

CVE ID	Acknowledgements
CVE-2019-3816	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2019-9674
MITRE
NVD

Issuing CNA: cve@mitre.org

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:7.5/TemporalScore:7.5

Base score metrics
Attack Vector	Network
Attack Complexity	Low
Privileges Required	None
User Interaction	None
Scope	Unchanged
Confidentiality	None
Integrity	None
Availability	High

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
1.0 18-Aug-20

Information published.

1.6 30-Jun-24

Information published.

1.7 08-Jul-24

Information published.

1.8 09-Jul-24

Information published.

1.9 10-Jul-24

Information published.

2.0 12-Jul-24

Information published.

2.1 13-Jul-24

Information published.

2.2 14-Jul-24

Information published.

2.3 15-Jul-24

Information published.

2.4 16-Jul-24

Information published.

2.5 17-Jul-24

Information published.

2.6 19-Jul-24

Information published.

2.7 20-Jul-24

Information published.

2.8 21-Jul-24

Information published.

2.9 22-Jul-24

Information published.

3.0 23-Jul-24

Information published.

3.1 24-Jul-24

Information published.

3.2 25-Jul-24

Information published.

3.3 26-Jul-24

Information published.

3.4 27-Jul-24

Information published.

3.5 28-Jul-24

Information published.

3.6 29-Jul-24

Information published.

3.7 02-Aug-24

Information published.

3.8 03-Aug-24

Information published.

3.9 04-Aug-24

Information published.

4.0 05-Aug-24

Information published.

4.1 06-Aug-24

Information published.

4.2 07-Aug-24

Information published.

4.3 08-Aug-24

Information published.

4.4 09-Aug-24

Information published.

4.5 10-Aug-24

Information published.

4.6 11-Aug-24

Information published.

4.7 12-Aug-24

Information published.

4.8 15-Aug-24

Information published.

4.9 16-Aug-24

Information published.

5.0 17-Aug-24

Information published.

5.1 18-Aug-24

Information published.

5.2 19-Aug-24

Information published.

5.3 20-Aug-24

Information published.

5.4 21-Aug-24

Information published.

5.5 22-Aug-24

Information published.

5.6 23-Aug-24

Information published.

5.7 24-Aug-24

Information published.

5.8 25-Aug-24

Information published.

5.9 26-Aug-24

Information published.

6.0 27-Aug-24

Information published.

6.1 28-Aug-24

Information published.

6.2 29-Aug-24

Information published.

6.3 30-Aug-24

Information published.

6.4 31-Aug-24

Information published.

6.5 01-Sep-24

Information published.

6.6 02-Sep-24

Information published.

6.7 03-Sep-24

Information published.

6.8 05-Sep-24

Information published.

6.9 06-Sep-24

Information published.

7.0 07-Sep-24

Information published.

7.1 08-Sep-24

Information published.

7.2 11-Sep-24

Information published.

7.3 12-Sep-24

Information published.

7.4 13-Sep-24

Information published.

7.5 14-Sep-24

Information published.

7.6 15-Sep-24

Information published.

7.7 16-Sep-24

Information published.

7.8 17-Sep-24

Information published.

7.9 18-Sep-24

Information published.

8.0 19-Sep-24

Information published.

8.1 20-Sep-24

Information published.

8.2 21-Sep-24

Information published.

8.3 22-Sep-24

Information published.

8.4 23-Sep-24

Information published.

8.5 24-Sep-24

Information published.

8.6 25-Sep-24

Information published.

8.7 26-Sep-24

Information published.

8.8 27-Sep-24

Information published.

8.9 28-Sep-24

Information published.

9.0 29-Sep-24

Information published.

9.1 30-Sep-24

Information published.

9.2 01-Oct-24

Information published.

9.3 02-Oct-24

Information published.

9.4 03-Oct-24

Information published.

9.5 04-Oct-24

Information published.

9.6 05-Oct-24

Information published.

9.7 06-Oct-24

Information published.

9.8 07-Oct-24

Information published.

9.9 08-Oct-24

Information published.

10.0 09-Oct-24

Information published.

10.1 10-Oct-24

Information published.

10.2 11-Oct-24

Information published.

10.3 12-Oct-24

Information published.

10.4 13-Oct-24

Information published.

10.5 14-Oct-24

Information published.

10.6 15-Oct-24

Added python2 to CBL-Mariner 1.0

10.7 16-Oct-24

Added python2 to CBL-Mariner 1.0

10.8 17-Oct-24

Added python2 to CBL-Mariner 1.0

10.9 18-Oct-24

Added python2 to CBL-Mariner 1.0

11.0 19-Oct-24

Added python2 to CBL-Mariner 1.0

11.1 20-Oct-24

Added python2 to CBL-Mariner 1.0

11.2 21-Oct-24

Added python2 to CBL-Mariner 1.0

11.3 22-Oct-24

Added python2 to CBL-Mariner 1.0

11.4 23-Oct-24

Added python2 to CBL-Mariner 1.0

11.5 24-Oct-24

Added python2 to CBL-Mariner 1.0

11.6 25-Oct-24

Added python2 to CBL-Mariner 1.0

11.7 26-Oct-24

Added python2 to CBL-Mariner 1.0

11.8 27-Oct-24

Added python2 to CBL-Mariner 1.0

11.9 28-Oct-24

Added python2 to CBL-Mariner 1.0

12.0 29-Oct-24

Added python2 to CBL-Mariner 1.0

12.1 30-Oct-24

Added python2 to CBL-Mariner 1.0

12.2 31-Oct-24

Added python2 to CBL-Mariner 1.0

12.3 01-Nov-24

Added python2 to CBL-Mariner 1.0

12.4 02-Nov-24

Added python2 to CBL-Mariner 1.0

12.5 04-Nov-24

Added python2 to CBL-Mariner 1.0

12.6 05-Nov-24

Added python2 to CBL-Mariner 1.0

12.7 06-Nov-24

Added python2 to CBL-Mariner 1.0

12.8 07-Nov-24

Added python2 to CBL-Mariner 1.0

12.9 08-Nov-24

Added python2 to CBL-Mariner 1.0

13.0 09-Nov-24

Added python2 to CBL-Mariner 1.0

13.1 10-Nov-24

Added python2 to CBL-Mariner 1.0

13.2 11-Nov-24

Added python2 to CBL-Mariner 1.0

13.3 12-Nov-24

Added python2 to CBL-Mariner 1.0

13.4 13-Nov-24

Added python2 to CBL-Mariner 1.0

13.5 14-Nov-24

Added python2 to CBL-Mariner 1.0

13.6 15-Nov-24

Added python2 to CBL-Mariner 1.0

13.7 16-Nov-24

Added python2 to CBL-Mariner 1.0

13.8 17-Nov-24

Added python2 to CBL-Mariner 1.0

13.9 18-Nov-24

Added python2 to CBL-Mariner 1.0

14.0 19-Nov-24

Added python2 to CBL-Mariner 1.0

14.1 20-Nov-24

Added python2 to CBL-Mariner 1.0

14.2 21-Nov-24

Added python2 to CBL-Mariner 1.0

14.3 23-Nov-24

Added python2 to CBL-Mariner 1.0

14.4 24-Nov-24

Added python2 to CBL-Mariner 1.0

14.5 25-Nov-24

Added python2 to CBL-Mariner 1.0

14.6 26-Nov-24

Added python2 to CBL-Mariner 1.0

14.7 27-Nov-24

Added python2 to CBL-Mariner 1.0

14.8 28-Nov-24

Added python2 to CBL-Mariner 1.0

14.9 29-Nov-24

Added python2 to CBL-Mariner 1.0

15.0 30-Nov-24

Added python2 to CBL-Mariner 1.0

15.1 01-Dec-24

Added python2 to CBL-Mariner 1.0

15.2 02-Dec-24

Added python2 to CBL-Mariner 1.0

15.3 03-Dec-24

Added python2 to CBL-Mariner 1.0

15.4 04-Dec-24

Added python2 to CBL-Mariner 1.0

15.5 05-Dec-24

Added python2 to CBL-Mariner 1.0

15.6 07-Dec-24

Added python2 to CBL-Mariner 1.0

15.7 08-Dec-24

Added python2 to CBL-Mariner 1.0

15.8 09-Dec-24

Added python2 to CBL-Mariner 1.0

15.9 10-Dec-24

Added python2 to CBL-Mariner 1.0

16.0 11-Dec-24

Added python2 to CBL-Mariner 1.0

16.1 12-Dec-24

Added python2 to CBL-Mariner 1.0

16.2 13-Dec-24

Added python2 to CBL-Mariner 1.0

16.3 14-Dec-24

Added python2 to CBL-Mariner 1.0

16.4 15-Dec-24

Added python2 to CBL-Mariner 1.0

16.5 16-Dec-24

Added python2 to CBL-Mariner 1.0

16.6 17-Dec-24

Added python2 to CBL-Mariner 1.0

16.7 18-Dec-24

Added python2 to CBL-Mariner 1.0

16.8 19-Dec-24

Added python2 to CBL-Mariner 1.0

16.9 20-Dec-24

Added python2 to CBL-Mariner 1.0

17.0 21-Dec-24

Added python2 to CBL-Mariner 1.0

17.1 22-Dec-24

Added python2 to CBL-Mariner 1.0

17.2 23-Dec-24

Added python2 to CBL-Mariner 1.0

17.3 24-Dec-24

Added python2 to CBL-Mariner 1.0

17.4 25-Dec-24

Added python2 to CBL-Mariner 1.0

17.5 26-Dec-24

Added python2 to CBL-Mariner 1.0

17.6 27-Dec-24

Added python2 to CBL-Mariner 1.0

17.7 28-Dec-24

Added python2 to CBL-Mariner 1.0

17.8 29-Dec-24

Added python2 to CBL-Mariner 1.0

17.9 30-Dec-24

Added python2 to CBL-Mariner 1.0

18.0 31-Dec-24

Added python2 to CBL-Mariner 1.0

18.1 01-Jan-25

Added python2 to CBL-Mariner 1.0

18.2 02-Jan-25

Added python2 to CBL-Mariner 1.0

18.3 03-Jan-25

Added python2 to CBL-Mariner 1.0

18.4 04-Jan-25

Added python2 to CBL-Mariner 1.0

18.5 05-Jan-25

Added python2 to CBL-Mariner 1.0

18.6 06-Jan-25

Added python2 to CBL-Mariner 1.0

18.7 07-Jan-25

Added python2 to CBL-Mariner 1.0

18.8 08-Jan-25

Added python2 to CBL-Mariner 1.0

18.9 09-Jan-25

Added python2 to CBL-Mariner 1.0

19.0 10-Jan-25

Added python2 to CBL-Mariner 1.0

19.1 11-Jan-25

Added python2 to CBL-Mariner 1.0

19.2 12-Jan-25

Added python2 to CBL-Mariner 1.0

19.3 13-Jan-25

Added python2 to CBL-Mariner 1.0

19.4 15-Jan-25

Added python2 to CBL-Mariner 1.0

19.5 16-Jan-25

Added python2 to CBL-Mariner 1.0

19.6 17-Jan-25

Added python2 to CBL-Mariner 1.0

19.7 18-Jan-25

Added python2 to CBL-Mariner 1.0

19.8 19-Jan-25

Added python2 to CBL-Mariner 1.0

19.9 20-Jan-25

Added python2 to CBL-Mariner 1.0

20.0 21-Jan-25

Added python2 to CBL-Mariner 1.0

20.1 22-Jan-25

Added python2 to CBL-Mariner 1.0

20.2 23-Jan-25

Added python2 to CBL-Mariner 1.0

20.3 24-Jan-25

Added python2 to CBL-Mariner 1.0

20.4 25-Jan-25

Added python2 to CBL-Mariner 1.0

20.5 27-Jan-25

Added python2 to CBL-Mariner 1.0

20.6 28-Jan-25

Added python2 to CBL-Mariner 1.0

20.7 29-Jan-25

Added python2 to CBL-Mariner 1.0

20.8 30-Jan-25

Added python2 to CBL-Mariner 1.0

20.9 01-Feb-25

Added python2 to CBL-Mariner 1.0

21.0 02-Feb-25

Added python2 to CBL-Mariner 1.0

21.1 03-Feb-25

Added python2 to CBL-Mariner 1.0

21.2 04-Feb-25

Added python2 to CBL-Mariner 1.0

21.3 05-Feb-25

Added python2 to CBL-Mariner 1.0

21.4 07-Feb-25

Added python2 to CBL-Mariner 1.0

21.5 08-Feb-25

Added python2 to CBL-Mariner 1.0

21.6 09-Feb-25

Added python2 to CBL-Mariner 1.0

21.7 10-Feb-25

Added python2 to CBL-Mariner 1.0

21.8 11-Feb-25

Added python2 to CBL-Mariner 1.0

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2019-9674
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
CBL Mariner 1.0 ARM	python2 (CBL-Mariner)	Unknown	Unknown	None	Base: 7.5 Temporal: 7.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	2.7.18-5	Unknown	None
CBL Mariner 1.0 x64	python2 (CBL-Mariner)	Unknown	Unknown	None	Base: 7.5 Temporal: 7.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	2.7.18-5	Unknown	None
CBL Mariner 2.0 ARM		Unknown	Unknown	None	Base: 7.5 Temporal: 7.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	Unknown	Unknown	None
CBL Mariner 2.0 x64		Unknown	Unknown	None	Base: 7.5 Temporal: 7.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	Unknown	Unknown	None

CVE ID	Acknowledgements
CVE-2019-9674	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2012-6708
MITRE
NVD

Issuing CNA: cve@mitre.org

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:6.1/TemporalScore:6.1

Base score metrics
Attack Vector	Network
Attack Complexity	Low
Privileges Required	None
User Interaction	Required
Scope	Changed
Confidentiality	Low
Integrity	Low
Availability	None

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Sep-24

Information published.

1.1 03-Feb-25

Added slf4j to Azure Linux 3.0

1.2 04-Feb-25

Added slf4j to Azure Linux 3.0

1.3 05-Feb-25

Added slf4j to Azure Linux 3.0

1.4 07-Feb-25

Added slf4j to Azure Linux 3.0

1.5 08-Feb-25

Added slf4j to Azure Linux 3.0

1.6 09-Feb-25

Added slf4j to Azure Linux 3.0

1.7 10-Feb-25

Added slf4j to Azure Linux 3.0

1.8 11-Feb-25

Added slf4j to Azure Linux 3.0

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2012-6708
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Linux 3.0 ARM	slf4j (CBL-Mariner)	Unknown	Unknown	None	Base: 6.1 Temporal: 6.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	2.0.7-1	Unknown	None
Azure Linux 3.0 x64	slf4j (CBL-Mariner)	Unknown	Unknown	None	Base: 6.1 Temporal: 6.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	2.0.7-1	Unknown	None

CVE ID	Acknowledgements
CVE-2012-6708	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2015-9251
MITRE
NVD

Issuing CNA: cve@mitre.org

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:6.1/TemporalScore:6.1

Base score metrics
Attack Vector	Network
Attack Complexity	Low
Privileges Required	None
User Interaction	Required
Scope	Changed
Confidentiality	Low
Integrity	Low
Availability	None

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Sep-24

Information published.

1.1 03-Feb-25

Added slf4j to Azure Linux 3.0

1.2 04-Feb-25

Added slf4j to Azure Linux 3.0

1.3 05-Feb-25

Added slf4j to Azure Linux 3.0

1.4 07-Feb-25

Added slf4j to Azure Linux 3.0

1.5 08-Feb-25

Added slf4j to Azure Linux 3.0

1.6 09-Feb-25

Added slf4j to Azure Linux 3.0

1.7 10-Feb-25

Added slf4j to Azure Linux 3.0

1.8 11-Feb-25

Added slf4j to Azure Linux 3.0

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2015-9251
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Linux 3.0 ARM	slf4j (CBL-Mariner)	Unknown	Unknown	None	Base: 6.1 Temporal: 6.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	2.0.7-1	Unknown	None
Azure Linux 3.0 x64	slf4j (CBL-Mariner)	Unknown	Unknown	None	Base: 6.1 Temporal: 6.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	2.0.7-1	Unknown	None

CVE ID	Acknowledgements
CVE-2015-9251	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2024-35827
MITRE
NVD

Issuing CNA: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:5.5/TemporalScore:5.5

Base score metrics
Attack Vector	Local
Attack Complexity	Low
Privileges Required	Low
User Interaction	None
Scope	Unchanged
Confidentiality	None
Integrity	None
Availability	High

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Sep-24

Information published.

1.1 04-Feb-25

Added hyperv-daemons to Azure Linux 3.0

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2024-35827
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Linux 3.0 ARM	hyperv-daemons (CBL-Mariner)	Unknown	Unknown	None	Base: 5.5 Temporal: 5.5 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	6.6.35.1-1	Unknown	None
Azure Linux 3.0 x64	hyperv-daemons (CBL-Mariner)	Unknown	Unknown	None	Base: 5.5 Temporal: 5.5 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	6.6.35.1-1	Unknown	None

CVE ID	Acknowledgements
CVE-2024-35827	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2013-2094
MITRE
NVD

Issuing CNA: secalert@redhat.com

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:8.4/TemporalScore:8.4

Base score metrics
Attack Vector	Local
Attack Complexity	Low
Privileges Required	None
User Interaction	None
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
1.0 16-Feb-24

Information published.

1.1 30-Jun-24

Information published.

1.2 05-Feb-25

Added kernel to CBL-Mariner 2.0 Added kernel to Azure Linux 3.0

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2013-2094
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Linux 3.0 ARM	kernel (CBL-Mariner)	Unknown	Unknown	None	Base: 8.4 Temporal: 8.4 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	6.6.22.1-2	Unknown	None
Azure Linux 3.0 x64	kernel (CBL-Mariner)	Unknown	Unknown	None	Base: 8.4 Temporal: 8.4 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	6.6.22.1-2	Unknown	None
CBL Mariner 2.0 ARM	kernel (CBL-Mariner)	Unknown	Unknown	None	Base: 8.4 Temporal: 8.4 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	5.15.153.1-1	Unknown	None
CBL Mariner 2.0 x64	kernel (CBL-Mariner)	Unknown	Unknown	None	Base: 8.4 Temporal: 8.4 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	5.15.153.1-1	Unknown	None

CVE ID	Acknowledgements
CVE-2013-2094	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-22134
MITRE
NVD

Issuing CNA: security-advisories@github.com

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:4.2/TemporalScore:4.2

Base score metrics
Attack Vector	Local
Attack Complexity	High
Privileges Required	Low
User Interaction	Required
Scope	Unchanged
Confidentiality	Low
Integrity	Low
Availability	Low

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
0.1 18-Jan-25

Information published.

0.2 22-Jan-25

Information published.

0.3 05-Feb-25

Information published.

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2025-22134
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Linux 3.0 ARM	vim (CBL-Mariner)	Unknown	Unknown	None	Base: 4.2 Temporal: 4.2 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L	9.1.0791-2	Unknown	None
Azure Linux 3.0 x64	vim (CBL-Mariner)	Unknown	Unknown	None	Base: 4.2 Temporal: 4.2 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L	9.1.0791-2	Unknown	None
CBL Mariner 2.0 ARM	vim (CBL-Mariner)	Unknown	Unknown	None	Base: 4.2 Temporal: 4.2 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L	9.1.0791-3	Unknown	None
CBL Mariner 2.0 x64	vim (CBL-Mariner)	Unknown	Unknown	None	Base: 4.2 Temporal: 4.2 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L	9.1.0791-3	Unknown	None

CVE ID	Acknowledgements
CVE-2025-22134	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2024-51744
MITRE
NVD

Issuing CNA: security-advisories@github.com

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:3.1/TemporalScore:3.1

Base score metrics
Attack Vector	Network
Attack Complexity	High
Privileges Required	None
User Interaction	Required
Scope	Unchanged
Confidentiality	Low
Integrity	None
Availability	None

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
0.1 30-Jan-25

Information published.

0.2 11-Feb-25

Information published.

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2024-51744
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Linux 3.0 ARM	application-gateway-kubernetes-ingress (CBL-Mariner) cert-manager (CBL-Mariner) etcd (CBL-Mariner)	Unknown	Unknown		Base: 3.1 Temporal: 3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N	1.7.7-1 1.12.15-1 3.5.18-1		None
Azure Linux 3.0 x64	application-gateway-kubernetes-ingress (CBL-Mariner) cert-manager (CBL-Mariner) etcd (CBL-Mariner)	Unknown	Unknown		Base: 3.1 Temporal: 3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N	1.7.7-1 1.12.15-1 3.5.18-1		None

CVE ID	Acknowledgements
CVE-2024-51744	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2023-3978
MITRE
NVD

Issuing CNA: security@golang.org

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:6.1/TemporalScore:6.1

Base score metrics
Attack Vector	Network
Attack Complexity	Low
Privileges Required	None
User Interaction	Required
Scope	Changed
Confidentiality	Low
Integrity	Low
Availability	None

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
1.0 08-Aug-23

Information published.

1.1 18-Jan-24

Added packer to CBL-Mariner 2.0

1.2 30-Jun-24

Information published.

1.3 10-Jul-24

Information published.

1.4 25-Aug-24

Information published.

1.5 26-Aug-24

Information published.

1.6 27-Aug-24

Information published.

1.7 28-Aug-24

Information published.

1.8 29-Aug-24

Information published.

1.9 30-Aug-24

Information published.

2.0 31-Aug-24

Information published.

2.1 01-Sep-24

Information published.

2.2 02-Sep-24

Information published.

2.3 03-Sep-24

Information published.

2.4 05-Sep-24

Information published.

2.5 06-Sep-24

Information published.

2.6 07-Sep-24

Information published.

2.7 08-Sep-24

Information published.

2.8 11-Sep-24

Information published.

2.9 13-Sep-24

Information published.

3.0 12-Oct-24

Information published.

3.1 15-Oct-24

Added multus to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added vitess to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added kubevirt to Azure Linux 3.0 Added cert-manager to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added packer to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0

3.2 01-Nov-24

Added cni-plugins to CBL-Mariner 2.0 Added cert-manager to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added packer to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added multus to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added vitess to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added kubevirt to Azure Linux 3.0

3.3 03-Dec-24

Added cert-manager to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added cni-plugins to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added packer to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0 Added multus to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added vitess to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added kubevirt to Azure Linux 3.0

3.4 11-Feb-25

Added application-gateway-kubernetes-ingress to Azure Linux 3.0 Added multus to Azure Linux 3.0 Added cert-manager to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added vitess to Azure Linux 3.0 Added telegraf to Azure Linux 3.0 Added kubevirt to Azure Linux 3.0 Added cert-manager to CBL-Mariner 2.0 Added multus to CBL-Mariner 2.0 Added cni-plugins to CBL-Mariner 2.0 Added vitess to CBL-Mariner 2.0 Added packer to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2023-3978
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Linux 3.0 ARM	application-gateway-kubernetes-ingress (CBL-Mariner) cert-manager (CBL-Mariner) kubevirt (CBL-Mariner) multus (CBL-Mariner)	Unknown	Unknown		Base: 6.1 Temporal: 6.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	1.7.7-1 1.12.12-1 1.2.0-1 4.0.2-2		None
Azure Linux 3.0 x64	application-gateway-kubernetes-ingress (CBL-Mariner) cert-manager (CBL-Mariner) kubevirt (CBL-Mariner) multus (CBL-Mariner)	Unknown	Unknown		Base: 6.1 Temporal: 6.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	1.7.7-1 1.12.12-1 1.2.0-1 4.0.2-2		None
CBL Mariner 2.0 ARM	cert-manager (CBL-Mariner) cni-plugins (CBL-Mariner) multus (CBL-Mariner) packer (CBL-Mariner)	Unknown	Unknown		Base: 6.1 Temporal: 6.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	1.11.2-14 1.3.0-6 4.0.2-5 1.10.1-1		None
CBL Mariner 2.0 x64	cert-manager (CBL-Mariner) cni-plugins (CBL-Mariner) multus (CBL-Mariner) packer (CBL-Mariner)	Unknown	Unknown		Base: 6.1 Temporal: 6.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	1.11.2-14 1.3.0-6 4.0.2-5 1.10.1-1		None

CVE ID	Acknowledgements
CVE-2023-3978	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2022-41723
MITRE
NVD

Issuing CNA: security@golang.org

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:7.5/TemporalScore:7.5

Base score metrics
Attack Vector	Network
Attack Complexity	Low
Privileges Required	None
User Interaction	None
Scope	Unchanged
Confidentiality	None
Integrity	None
Availability	High

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
1.2 10-Mar-23

Information published.

1.0 05-Apr-23

Information published.

1.1 17-May-23

Added kubevirt to CBL-Mariner 2.0

1.3 30-Jun-24

Information published.

1.4 11-Feb-25

Added application-gateway-kubernetes-ingress to Azure Linux 3.0 Added kubevirt to Azure Linux 3.0 Added golang to CBL-Mariner 2.0 Added kubevirt to CBL-Mariner 2.0 Added skopeo to CBL-Mariner 2.0 Added telegraf to CBL-Mariner 2.0

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2022-41723
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Linux 3.0 ARM	application-gateway-kubernetes-ingress (CBL-Mariner) kubevirt (CBL-Mariner)	Unknown	Unknown		Base: 7.5 Temporal: 7.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	1.7.7-1 1.2.0-1		None
Azure Linux 3.0 x64	application-gateway-kubernetes-ingress (CBL-Mariner) kubevirt (CBL-Mariner)	Unknown	Unknown		Base: 7.5 Temporal: 7.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	1.7.7-1 1.2.0-1		None
CBL Mariner 2.0 ARM	golang (CBL-Mariner) kubevirt (CBL-Mariner) skopeo (CBL-Mariner) telegraf (CBL-Mariner)	Unknown	Unknown		Base: 7.5 Temporal: 7.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	1.21.6-1 0.59.0-15 1.12.0-3 1.26.0-2		None
CBL Mariner 2.0 x64	golang (CBL-Mariner) kubevirt (CBL-Mariner) skopeo (CBL-Mariner) telegraf (CBL-Mariner)	Unknown	Unknown		Base: 7.5 Temporal: 7.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	1.21.6-1 0.59.0-15 1.12.0-3 1.26.0-2		None

CVE ID	Acknowledgements
CVE-2022-41723	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2024-53899
MITRE
NVD

Issuing CNA: cve@mitre.org

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:7.8/TemporalScore:7.8

Base score metrics
Attack Vector	Local
Attack Complexity	Low
Privileges Required	Low
User Interaction	None
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
0.1 20-Dec-24

Information published.

0.2 11-Feb-25

Information published.

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2024-53899
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Linux 3.0 ARM	python-virtualenv (CBL-Mariner)	Unknown	Unknown	None	Base: 7.8 Temporal: 7.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	20.25.0-3	Unknown	None
Azure Linux 3.0 x64	python-virtualenv (CBL-Mariner)	Unknown	Unknown	None	Base: 7.8 Temporal: 7.8 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	20.25.0-3	Unknown	None

CVE ID	Acknowledgements
CVE-2024-53899	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2024-43806
MITRE
NVD

Issuing CNA: security-advisories@github.com

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:6.5/TemporalScore:6.5

Base score metrics
Attack Vector	Network
Attack Complexity	Low
Privileges Required	Low
User Interaction	None
Scope	Unchanged
Confidentiality	None
Integrity	None
Availability	High

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
0.1 21-Dec-24

Information published.

0.2 11-Feb-25

Information published.

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2024-43806
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Linux 3.0 ARM	kata-containers (CBL-Mariner) kata-containers-cc (CBL-Mariner)	Unknown	Unknown		Base: 6.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	3.2.0.azl4-1		None
Azure Linux 3.0 x64	kata-containers (CBL-Mariner) kata-containers-cc (CBL-Mariner)	Unknown	Unknown		Base: 6.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	3.2.0.azl4-1		None
CBL Mariner 2.0 ARM	rust (CBL-Mariner)	Unknown	Unknown	None	Base: 6.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	1.72.0-9	Unknown	None
CBL Mariner 2.0 x64	rust (CBL-Mariner)	Unknown	Unknown	None	Base: 6.5 Temporal: 6.5 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	1.72.0-9	Unknown	None

CVE ID	Acknowledgements
CVE-2024-43806	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2024-45339
MITRE
NVD

Issuing CNA: security@golang.org

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:7.1/TemporalScore:7.1

Base score metrics
Attack Vector	Local
Attack Complexity	Low
Privileges Required	Low
User Interaction	None
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	None

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
0.1 11-Feb-25

Information published.

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2024-45339
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Linux 3.0 ARM	sriov-network-device-plugin (CBL-Mariner) vitess (CBL-Mariner)	Unknown	Unknown		Base: 7.1 Temporal: 7.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N	3.7.0-3 19.0.4-4		None
Azure Linux 3.0 x64	sriov-network-device-plugin (CBL-Mariner) vitess (CBL-Mariner)	Unknown	Unknown		Base: 7.1 Temporal: 7.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N	3.7.0-3 19.0.4-4		None

CVE ID	Acknowledgements
CVE-2024-45339	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2012-6655
MITRE
NVD

Issuing CNA: cve@mitre.org

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:3.3/TemporalScore:3.3

Base score metrics
Attack Vector	Local
Attack Complexity	Low
Privileges Required	Low
User Interaction	None
Scope	Unchanged
Confidentiality	Low
Integrity	None
Availability	None

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
0.1 11-Feb-25

Information published.

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2012-6655
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Linux 3.0 ARM	accountsservice (CBL-Mariner)	Unknown	Unknown	None	Base: 3.3 Temporal: 3.3 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N	23.13.9-1	Unknown	None
Azure Linux 3.0 x64	accountsservice (CBL-Mariner)	Unknown	Unknown	None	Base: 3.3 Temporal: 3.3 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N	23.13.9-1	Unknown	None

CVE ID	Acknowledgements
CVE-2012-6655	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2024-40897
MITRE
NVD

Issuing CNA: vultures@jpcert.or.jp

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:6.7/TemporalScore:6.7

Base score metrics
Attack Vector	Local
Attack Complexity	High
Privileges Required	Low
User Interaction	Required
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
0.1 11-Feb-25

Information published.

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2024-40897
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Linux 3.0 ARM	orc (CBL-Mariner)	Unknown	Unknown	None	Base: 6.7 Temporal: 6.7 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H	0.4.39-2	Unknown	None
Azure Linux 3.0 x64	orc (CBL-Mariner)	Unknown	Unknown	None	Base: 6.7 Temporal: 6.7 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H	0.4.39-2	Unknown	None

CVE ID	Acknowledgements
CVE-2024-40897	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2022-4055
MITRE
NVD

Issuing CNA: secalert@redhat.com

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:7.4/TemporalScore:7.4

Base score metrics
Attack Vector	Network
Attack Complexity	Low
Privileges Required	None
User Interaction	Required
Scope	Changed
Confidentiality	None
Integrity	High
Availability	None

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
0.1 11-Feb-25

Information published.

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2022-4055
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Linux 3.0 ARM	xdg-utils (CBL-Mariner)	Unknown	Unknown	None	Base: 7.4 Temporal: 7.4 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N	1.2.1-3	Unknown	None
Azure Linux 3.0 x64	xdg-utils (CBL-Mariner)	Unknown	Unknown	None	Base: 7.4 Temporal: 7.4 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N	1.2.1-3	Unknown	None

CVE ID	Acknowledgements
CVE-2022-4055	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2019-11358
MITRE
NVD

Issuing CNA: cve@mitre.org

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:6.1/TemporalScore:6.1

Base score metrics
Attack Vector	Network
Attack Complexity	Low
Privileges Required	None
User Interaction	Required
Scope	Changed
Confidentiality	Low
Integrity	Low
Availability	None

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Sep-24

Information published.

1.1 11-Feb-25

Added m2crypto to Azure Linux 3.0 Added python-pygments to Azure Linux 3.0

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2019-11358
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Linux 3.0 ARM	python-pygments (CBL-Mariner) m2crypto (CBL-Mariner)	Unknown	Unknown		Base: 6.1 Temporal: 6.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	2.7.4-1 0.38.0-4		None
Azure Linux 3.0 x64	m2crypto (CBL-Mariner) python-pygments (CBL-Mariner)	Unknown	Unknown		Base: 6.1 Temporal: 6.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	0.38.0-4 2.7.4-1		None

CVE ID	Acknowledgements
CVE-2019-11358	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2023-47108
MITRE
NVD

Issuing CNA: security-advisories@github.com

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:7.5/TemporalScore:7.5

Base score metrics
Attack Vector	Network
Attack Complexity	Low
Privileges Required	None
User Interaction	None
Scope	Unchanged
Confidentiality	None
Integrity	None
Availability	High

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
1.0 14-Nov-23

Information published.

1.1 30-Jun-24

Information published.

1.2 29-Aug-24

Information published.

1.3 30-Aug-24

Information published.

1.4 31-Aug-24

Information published.

1.5 01-Sep-24

Information published.

1.6 02-Sep-24

Information published.

1.7 03-Sep-24

Information published.

1.8 05-Sep-24

Information published.

1.9 06-Sep-24

Information published.

2.0 07-Sep-24

Information published.

2.1 08-Sep-24

Information published.

2.2 11-Sep-24

Information published.

2.3 11-Feb-25

Added cri-tools to Azure Linux 3.0 Added containerd to Azure Linux 3.0 Added ig to Azure Linux 3.0 Added kube-vip-cloud-provider to Azure Linux 3.0 Added prometheus-adapter to Azure Linux 3.0 Added docker-buildx to Azure Linux 3.0 Added moby-containerd-cc to Azure Linux 3.0 Added docker-compose to Azure Linux 3.0 Added moby-containerd-cc to CBL-Mariner 2.0

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2023-47108
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Linux 3.0 ARM	containerd (CBL-Mariner) cri-tools (CBL-Mariner) docker-buildx (CBL-Mariner) docker-compose (CBL-Mariner)	Unknown	Unknown		Base: 7.5 Temporal: 7.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	1.7.13-3 1.32.0-1 0.14.0-1 2.27.0-1		None
Azure Linux 3.0 x64	containerd (CBL-Mariner) cri-tools (CBL-Mariner) docker-buildx (CBL-Mariner) docker-compose (CBL-Mariner)	Unknown	Unknown		Base: 7.5 Temporal: 7.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	1.7.13-3 1.32.0-1 0.14.0-1 2.27.0-1		None
CBL Mariner 2.0 ARM	moby-containerd-cc (CBL-Mariner)	Unknown	Unknown	None	Base: 7.5 Temporal: 7.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	1.7.2-3	Unknown	None
CBL Mariner 2.0 x64	moby-containerd-cc (CBL-Mariner)	Unknown	Unknown	None	Base: 7.5 Temporal: 7.5 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	1.7.2-3	Unknown	None

CVE ID	Acknowledgements
CVE-2023-47108	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2022-23901
MITRE
NVD

Issuing CNA: cve@mitre.org

CVE Title: Unknown
CVSS:

CVSS:3.1 Highest BaseScore:9.8/TemporalScore:9.8

Base score metrics
Attack Vector	Network
Attack Complexity	Low
Privileges Required	None
User Interaction	None
Scope	Unchanged
Confidentiality	High
Integrity	High
Availability	High

Temporal score metrics

Executive Summary:
None
FAQ:
None
Mitigations:
None
Workarounds:
None
Revision:
0.1 11-Feb-25

Information published.

Unknown

Exploitability Assessment	Publicly Disclosed	Exploited
Not Found	Not Found	Not Found

The following tables list the affected software details for the vulnerability.

CVE-2022-23901
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Azure Linux 3.0 ARM	re2c (CBL-Mariner)	Unknown	Unknown	None	Base: 9.8 Temporal: 9.8 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.1-4	Unknown	None
Azure Linux 3.0 x64	re2c (CBL-Mariner)	Unknown	Unknown	None	Base: 9.8 Temporal: 9.8 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.1-4	Unknown	None

CVE ID	Acknowledgements
CVE-2022-23901	None

(top)

CVE ID

Vulnerability Description

Maximum Severity Rating

Vulnerability Impact

CVE-2025-21198
MITRE
NVD

Issuing CNA: Microsoft

CVE Title: Microsoft High Performance Compute (HPC) Pack Remote Code Execution Vulnerability
CVSS:

CVSS:3.1 Highest BaseScore:9.0/TemporalScore:7.8

Base score metrics
Attack Vector	Adjacent
Attack Complexity	Low
Privileges Required	Low
User Interaction	None
Scope	Changed
Confidentiality	High
Integrity	High
Availability	High

Executive Summary:
None
FAQ:

According to the CVSS metric, the attack vector is adjacent (AV:A) and privileges required are low (PR:L). What does that mean for this vulnerability?

Multiple networking topologies are available to connect High Performance Compute (HPC) resources which are reliant upon intra-nets or private networks and do not expose HPC resources to the public internet regardless of implementation. An attacker must have access to the network connecting the targeted clusters and nodes (PR:L) and must send a specially crafted HTTPS request to the head node (AV:A) to successfully exploit this vulnerability.

For more information on how HPC resources can be connected, please reference this documentation regarding Understanding HPC Cluster Network Topologies.

According to the CVSS metric, the scope is changed (S:C). What does that mean for this vulnerability?

An attacker could exploit this vulnerability by sending a specially crafted HTTPS request to the targeted head node or Linux compute node granting them the ability to perform RCE on other clusters or nodes connected to the targeted head node.

Mitigations:
None
Workarounds:
None
Revision:
1.0 11-Feb-25

Information published.

Important

Remote Code Execution

Exploitability Assessment	Publicly Disclosed	Exploited
Exploitation Less Likely	No	No

The following tables list the affected software details for the vulnerability.

CVE-2025-21198
Product	KB Article	Severity	Impact	Supercedence	CVSS Score Set	Fixed Build	Restart Required	Known Issue
Microsoft HPC Pack 2016	Release Notes (Security Update)	Important	Remote Code Execution	None	Base: 9.0 Temporal: 7.8 Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C	2016.3	Maybe	None
Microsoft HPC Pack 2019	Release Notes (Security Update)	Important	Remote Code Execution	None	Base: 9.0 Temporal: 7.8 Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C	6.3.8328.0	Maybe	None

Temporal score metrics

Exploit Code Maturity

Unproven

Remediation Level

Official Fix

Report Confidence

Confirmed

CVE ID	Acknowledgements
CVE-2025-21198	Anonymous