HIGH 7.4 Microsoft

CVE-2026-85091

zlib 1.3.1.2 through 1.3.2 Heap Buffer Overflow via gz_vacate

Microsoft Security Update 2026-Sep: zlib 1.3.1.2 through 1.3.2 Heap Buffer Overflow via gz_vacate

Affected Products

References

Published: 2026-09-08 · Source: Microsoft · Feed updated: 2026-10-18
This high severity vulnerability with a CVSS score of 7.4 was published on 2026-09-08 via Microsoft. Affected: azl3 kata-containers 4.1.0.kata0-1 on Azure Linux 3.0, azl3 zlib 1.3.2-1 on Azure Linux 3.0, azl3 cloud-hypervisor 52.0.152-1 on Azure Linux 3.0 and 2 more.
vulnfeed aggregates 17229 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.