Microsoft MSRC
CVE-2026-42013 Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name
Information published.
vulnerability
Archive
Page 14 of 20 — 1151 stories total
Microsoft MSRC
CVE-2026-42790 nameConstraints DNS bypass via subject CommonName fallback in public_key hostname verification
Information published.
vulnerability
Microsoft MSRC
CVE-2026-42789 Non-CA certificate accepted as intermediate issuer in public_key path validation
Information published.
vulnerability
Microsoft MSRC
CVE-2026-46242 eventpoll: fix ep_remove struct eventpoll / struct file UAF
Information published.
vulnerability
Microsoft MSRC
CVE-2026-40510 OpenSC < 0.27.0-rc1 Stack Buffer Overflow via piv_process_history() in card-piv.c
Information published.
vulnerability
Microsoft MSRC
CVE-2026-40528 OpenSC < 0.27.0 Buffer Overrun in do_key_value() via profile.c
Information published.
vulnerability
Microsoft MSRC
CVE-2026-41184 ServiceAccount token disclosure via install-cni container logs
Information published.
vulnerability
Microsoft MSRC
CVE-2026-24293 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only.
vulnerabilitymicrosoft
Microsoft MSRC
CVE-2026-46178 RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq()
Information published.
vulnerability
Microsoft MSRC
CVE-2026-46181 RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()
Information published.
vulnerability
Microsoft MSRC
CVE-2026-46174 x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache
Information published.
vulnerability
Microsoft MSRC
CVE-2026-46193 xfrm: ah: account for ESN high bits in async callbacks
Information published.
vulnerability
Microsoft MSRC
CVE-2026-46184 sound: ua101: fix division by zero at probe
Information published.
vulnerability
Microsoft MSRC
CVE-2026-46106 eventfs: Hold eventfs_mutex and SRCU when remount walks events
Information published.
vulnerability
Microsoft MSRC
CVE-2026-46121 mm/damon/sysfs-schemes: protect memcg_path kfree() with damon_sysfs_lock
Information published.
vulnerability
Microsoft MSRC
CVE-2026-46124 isofs: validate block number from NFS file handle in isofs_export_iget
Information published.
vulnerability
Microsoft MSRC
CVE-2026-46142 net: libwx: fix VF illegal register access
Information published.
vulnerability
Microsoft MSRC
CVE-2026-46151 usb: usblp: fix heap leak in IEEE 1284 device ID via short response
Information published.
vulnerability
Microsoft MSRC
CVE-2026-46199 drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg
Information published.
vulnerability
Microsoft MSRC
CVE-2026-46130 dm-verity-fec: fix reading parity bytes split across blocks (take 3)
Information published.
vulnerability
Microsoft MSRC
CVE-2026-46169 hfsplus: fix uninit-value by validating catalog record size
Information published.
vulnerability
Microsoft MSRC
CVE-2026-46206 batman-adv: reject new tp_meter sessions during teardown
Information published.
vulnerability
Microsoft MSRC
CVE-2026-46144 RDMA/mana: Fix error unwind in mana_ib_create_qp_rss()
Information published.
vulnerability
Microsoft MSRC
CVE-2026-46135 nvmet-tcp: fix race between ICReq handling and queue teardown
Information published.
vulnerability
Microsoft MSRC
CVE-2026-46119 libceph: Fix slab-out-of-bounds access in auth message processing
Information published.
vulnerability
Microsoft MSRC
CVE-2026-9538 Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header
Information published.
vulnerability
Microsoft MSRC
CVE-2026-46113 KVM: x86: Fix shadow paging use-after-free due to unexpected GFN
Information published.
vulnerability
Microsoft MSRC
CVE-2026-42497 Archive::Tar versions before 3.08 for Perl extract hardlinks to attacker controlled paths outside the extraction directory
Information published.
vulnerability
Microsoft MSRC
CVE-2026-46189 RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path
Information published.
vulnerability
Microsoft MSRC
CVE-2026-42496 Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory
Information published.
vulnerability
Microsoft MSRC
CVE-2026-46167 usb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl
Information published.
vulnerability
Microsoft MSRC
CVE-2026-46138 Bluetooth: hci_event: Fix OOB read and infinite loop in hci_le_create_big_complete_evt
Information published.
vulnerability
Microsoft MSRC
CVE-2026-46147 KVM: arm64: Fix pin leak and publication ordering in __pkvm_init_vcpu()
Information published.
vulnerability
Microsoft MSRC
CVE-2026-46150 fanotify: fix false positive on permission events
Information published.
vulnerability
Microsoft MSRC
CVE-2026-46187 wifi: rsi: fix kthread lifetime race between self-exit and external-stop
Information published.
vulnerability
Microsoft MSRC
CVE-2026-46241 spi: mpc52xx: fix use-after-free on registration failure
Information published.
vulnerability
Microsoft MSRC
CVE-2026-46153 8021q: delete cleared egress QoS mappings
Information published.
vulnerability
Microsoft MSRC
CVE-2026-46156 LoongArch: Fix potential ADE in loongson_gpu_fixup_dma_hang()
Information published.
vulnerability
Microsoft MSRC
CVE-2026-46227 sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL
Information published.
vulnerability
Microsoft MSRC
CVE-2026-46112 RDMA/hns: Fix unlocked call to hns_roce_qp_remove()
Information published.
vulnerability
Microsoft MSRC
CVE-2026-46122 wifi: b43: enforce bounds check on firmware key index in b43_rx()
Information published.
vulnerability
Microsoft MSRC
CVE-2026-46114 RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads
Information published.
vulnerability
Microsoft MSRC
CVE-2026-46233 batman-adv: bla: only purge non-released claims
Information published.
vulnerability
Microsoft MSRC
CVE-2026-46125 wifi: mac80211: remove station if connection prep fails
Information published.
vulnerability
Microsoft MSRC
CVE-2026-46146 ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3()
Information published.
vulnerability
Microsoft MSRC
CVE-2026-46204 drm/amdgpu/vcn4: Prevent OOB reads when parsing IB
Information published.
vulnerability
Microsoft MSRC
CVE-2026-46120 ip6_gre: Use cached t->net in ip6erspan_changelink().
Information published.
vulnerability
Microsoft MSRC
CVE-2026-46152 wifi: mac80211: drop stray 'static' from fast-RX rx_result
Information published.
vulnerability
Microsoft MSRC
CVE-2026-46238 batman-adv: stop caching unowned originator pointers in BAT IV
Information published.
vulnerability
Microsoft MSRC
CVE-2026-46133 RDMA/rxe: Reject unknown opcodes before ICRC processing
Information published.
vulnerability
Microsoft MSRC
CVE-2026-46218 drm/amdgpu: Add bounds checking to ib_{get,set}_value
Information published.
vulnerability
Microsoft MSRC
CVE-2026-46108 ipmi:si: Return state to normal if message allocation fails
Information published.
vulnerability
Microsoft MSRC
CVE-2026-46123 Bluetooth: virtio_bt: clamp rx length before skb_put
Information published.
vulnerability
Microsoft MSRC
CVE-2026-46143 ASoC: qcom: q6apm-lpass-dai: Fix multiple graph opens
Information published.
vulnerability
Microsoft MSRC
CVE-2026-46145 RDMA/mana: Validate rx_hash_key_len
Information published.
vulnerability
Microsoft MSRC
CVE-2026-46230 drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg
Information published.
vulnerability
Microsoft MSRC
CVE-2026-46190 mtd: spi-nor: debugfs: fix out-of-bounds read in spi_nor_params_show()
Information published.
vulnerability
Microsoft MSRC
CVE-2026-46170 mptcp: pm: ADD_ADDR rtx: free sk if last
Information published.
vulnerability
Microsoft MSRC
CVE-2026-46175 f2fs: fix fsck inconsistency caused by FGGC of node block
Information published.
vulnerability
Microsoft MSRC
CVE-2026-46129 btrfs: fix double free in create_space_info() error path
Information published.
vulnerability