← Back to feed Search feed

Microsoft vulnerabilities

7002 entries matching microsoft — updated 2026-08-04 · vulnfeed

CVE / IDTitleSeverityCVSSEPSSSourceDate
CVE-2026-62870Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.HIGH8.854%ileNVD2026-08-04
CVE-2026-66318Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over HIGH8.130%ileNVD2026-08-04
CVE-2026-66310External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose informatHIGH7.733%ileNVD2026-08-04
CVE-2026-66315Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.HIGH7.546%ileNVD2026-08-04
CVE-2026-65802External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose informatHIGH7.458%ileNVD2026-08-04
CVE-2026-66321Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized HIGH7.458%ileNVD2026-08-04
CVE-2026-66322Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a neHIGH7.118%ileNVD2026-08-04
CVE-2026-66313Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering locally.MEDIUM6.815%ileNVD2026-08-04
CVE-2026-66312Buffer over-read in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.MEDIUM6.559%ileNVD2026-08-04
CVE-2026-66314Time-of-check time-of-use (toctou) race condition in Microsoft Edge (Chromium-based) allows an unauthorized attacker to MEDIUM6.550%ileNVD2026-08-04
CVE-2026-66326Missing authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.MEDIUM6.548%ileNVD2026-08-04
CVE-2026-66311Missing authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering locally.MEDIUM6.234%ileNVD2026-08-04
CVE-2026-65804Improper control of generation of code ('code injection') in Microsoft Edge (Chromium-based) allows an unauthorized attaMEDIUM6.135%ileNVD2026-08-04
CVE-2026-66325Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofinMEDIUM6.133%ileNVD2026-08-04
CVE-2026-66316Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a neMEDIUM5.412%ileNVD2026-08-04
CVE-2026-66317Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering over a nMEDIUM5.412%ileNVD2026-08-04
CVE-2026-18215Keycloak provides a way to let users log in using Microsoft accounts while restricting access to a specific organizationMEDIUM6.89%ileNVD2026-07-31
CVE-2026-17691Out of bounds write in ANGLE in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to potentiallyCRITICAL9.630%ileNVD2026-07-30
CVE-2026-17692Use after free in DataTransfer in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who had compCRITICAL9.630%ileNVD2026-07-30
CVE-2026-17862Use after free in Tracing in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to perform OS-leveHIGH7.82%ileNVD2026-07-30
CVE-2026-17863Inappropriate implementation in Browser in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to pHIGH7.81%ileNVD2026-07-30
CVE-2026-17811Use after free in ANGLE in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to potentially perfHIGH7.16%ileNVD2026-07-30
CVE-2026-15929Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in LG Electronics SmaHIGH7.17%ileNVD2026-07-30
CVE-2026-17707Uninitialized Use in Media in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who had compromiMEDIUM6.531%ileNVD2026-07-30
CVE-2026-17846Inappropriate implementation in Media in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who hMEDIUM6.59%ileNVD2026-07-30
CVE-2026-17992Uninitialized Use in Skia in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to obtain potentiMEDIUM6.518%ileNVD2026-07-30
CVE-2026-17908Insufficient validation of untrusted input in Printing in Google Chrome on Windows prior to 151.0.7922.72 allowed a remoMEDIUM5.86%ileNVD2026-07-30
CVE-2026-17932Use after free in DataTransfer in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to obtain potMEDIUM5.51%ileNVD2026-07-30
CVE-2026-17790Uninitialized Use in ANGLE in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to obtain potentMEDIUM4.318%ileNVD2026-07-30
CVE-2026-17858Uninitialized Use in WebNN in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to leak cross-orMEDIUM4.314%ileNVD2026-07-30
CVE-2026-17900Inappropriate implementation in Enterprise in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker MEDIUM4.35%ileNVD2026-07-30
CVE-2026-18018Inappropriate implementation in Updater in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to pMEDIUM4.00%ileNVD2026-07-30
CVE-2026-32203Microsoft Security Advisory CVE-2026-32203 – .NET and Visual Studio Denial of Service VulnerabilityHIGH7.578%ileGitHub2026-07-28
CVE-2026-56163Microsoft Azure Kubernetes Service Elevation of Privilege VulnerabilityCRITICAL10.056%ileMicrosoft2026-07-14
CVE-2026-56191Microsoft Exchange Online Tampering VulnerabilityCRITICAL10.048%ileMicrosoft2026-07-14
CVE-2026-57106Data Quality Elevation of Privilege VulnerabilityCRITICAL10.056%ileMicrosoft2026-07-14
CVE-2026-62825Azure Key Vault Elevation of Privilege VulnerabilityCRITICAL10.050%ileMicrosoft2026-07-14
CVE-2026-58630Azure App Service on Azure Stack Hub Elevation of Privilege VulnerabilityCRITICAL10.054%ileMicrosoft2026-07-14
CVE-2026-58275Azure DNS Elevation of Privilege VulnerabilityCRITICAL10.049%ileMicrosoft2026-07-14
CVE-2026-45499Azure OpenAI Elevation of Privilege VulnerabilityCRITICAL9.946%ileMicrosoft2026-07-14
CVE-2026-57100Microsoft Entra Provisioning Service Elevation of Privilege VulnerabilityCRITICAL9.948%ileMicrosoft2026-07-14
CVE-2026-54120Microsoft Surface Remote Code Execution VulnerabilityCRITICAL9.950%ileMicrosoft2026-07-14
CVE-2026-57092Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityCRITICAL9.965%ileMicrosoft2026-07-14
CVE-2026-50517Microsoft M365 Copilot Remote Code Execution VulnerabilityCRITICAL9.966%ileMicrosoft2026-07-14
CVE-2026-56165Microsoft Account Remote Code Execution VulnerabilityCRITICAL9.850%ileMicrosoft2026-07-14
CVE-2026-42990SQL Server ODBC driver Elevation of Privilege VulnerabilityCRITICAL9.849%ileMicrosoft2026-07-14
CVE-2026-49172Windows FTP Service Remote Code Execution VulnerabilityCRITICAL9.849%ileMicrosoft2026-07-14
CVE-2026-54990Remote Desktop Client Remote Code Execution VulnerabilityCRITICAL9.843%ileMicrosoft2026-07-14
CVE-2026-50522Microsoft SharePoint Remote Code Execution VulnerabilityCRITICAL9.8100%ileMicrosoft2026-07-14
CVE-2026-58644Microsoft SharePoint Remote Code Execution VulnerabilityCRITICAL9.893%ileMicrosoft2026-07-14
CVE-2026-50447Windows Message Queuing Service (MSMQ) Remote Code Execution VulnerabilityCRITICAL9.856%ileMicrosoft2026-07-14
CVE-2026-50518Windows DHCP Server Remote Code Execution VulnerabilityCRITICAL9.896%ileMicrosoft2026-07-14
CVE-2026-55010Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityCRITICAL9.851%ileMicrosoft2026-07-14
CVE-2026-55944Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution VulnerabilityCRITICAL9.867%ileMicrosoft2026-07-14
CVE-2026-56159DHCP Server Service Remote Code Execution VulnerabilityCRITICAL9.859%ileMicrosoft2026-07-14
CVE-2026-56190Remote Desktop Protocol Remote Code Execution VulnerabilityCRITICAL9.862%ileMicrosoft2026-07-14
CVE-2026-56188Windows Server Network driver Remote Code Execution VulnerabilityCRITICAL9.857%ileMicrosoft2026-07-14
CVE-2026-38968ntopng through 6.6 is vulnerable to Predictable Session Identifier which can lead to Session Hijacking. HTTP session ideCRITICAL9.831%ileMicrosoft2026-07-14
CVE-2026-53386iio: adc: ti-ads1298: add bounds check to pga_settings indexCRITICAL9.83%ileMicrosoft2026-07-14
CVE-2026-53374drm/amdgpu: zero-initialize GART table on allocationCRITICAL9.82%ileMicrosoft2026-07-14
CVE-2026-53376drm/amdkfd: Add upper bound check for num_of_nodesCRITICAL9.83%ileMicrosoft2026-07-14
CVE-2026-63833ntfs3: reject direct userspace writes to reserved $LX* xattrsCRITICAL9.83%ileMicrosoft2026-07-14
CVE-2026-63822wifi: ath11k: fix warning when unbindingCRITICAL9.87%ileMicrosoft2026-07-14
CVE-2026-63828apparmor: mediate the implicit connect of TCP fast open sendmsgCRITICAL9.83%ileMicrosoft2026-07-14
CVE-2026-63882drm/amdkfd: fix NULL pointer bug in svm_range_set_attrCRITICAL9.811%ileMicrosoft2026-07-14
CVE-2026-64017blk-mq: pop cached request if it is usableCRITICAL9.82%ileMicrosoft2026-07-14
CVE-2026-57433Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX_HOOK recordCRITICAL9.828%ileMicrosoft2026-07-14
CVE-2026-15043DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted <= and >= SQL operators on textCRITICAL9.831%ileMicrosoft2026-07-14
CVE-2026-63816f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inodeCRITICAL9.82%ileMicrosoft2026-07-14
CVE-2026-53403fbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_varCRITICAL9.83%ileMicrosoft2026-07-14
CVE-2026-63818f2fs: validate orphan inode entry countCRITICAL9.83%ileMicrosoft2026-07-14
CVE-2026-53387iio: light: veml6075: add bounds check to veml6075_it_ms indexCRITICAL9.83%ileMicrosoft2026-07-14
CVE-2026-53384serial: 8250_dw: unregister 8250 port if clk_notifier_register() failsCRITICAL9.839%ileMicrosoft2026-07-14
CVE-2026-63824KEYS: fix overflow in keyctl_pkey_params_get_2()CRITICAL9.83%ileMicrosoft2026-07-14
CVE-2026-63800pNFS: Fix use-after-free in pnfs_update_layout()CRITICAL9.840%ileMicrosoft2026-07-14
CVE-2026-63797rpmsg: char: Fix use-after-free on probe error pathCRITICAL9.84%ileMicrosoft2026-07-14
CVE-2026-63814f2fs: validate ACL entry sizes in f2fs_acl_from_disk()CRITICAL9.83%ileMicrosoft2026-07-14
CVE-2026-63827apparmor: fix use-after-free in rawdata dedup loopCRITICAL9.82%ileMicrosoft2026-07-14
CVE-2026-64079netfilter: x_tables: allocate hook ops while under mutexCRITICAL9.85%ileMicrosoft2026-07-14
CVE-2026-64138ksmbd: validate SID in parent security descriptor during ACL inheritanceCRITICAL9.834%ileMicrosoft2026-07-14
CVE-2026-63959usb: typec: tcpm/tcpci_maxim: validate header NDO against RX_BYTE_CNTCRITICAL9.810%ileMicrosoft2026-07-14
CVE-2026-64070powerpc/hv-gpci: fix preempt count leak in sysfs show pathsCRITICAL9.85%ileMicrosoft2026-07-14
CVE-2026-63958usb: typec: ucsi: validate connector number in ucsi_connector_change()CRITICAL9.811%ileMicrosoft2026-07-14
CVE-2026-64078netfilter: x_tables: add and use xtables_unregister_table_exitCRITICAL9.83%ileMicrosoft2026-07-14
CVE-2026-63983net/sched: fix packet loop on netem when duplicate is onCRITICAL9.86%ileMicrosoft2026-07-14
CVE-2026-63881drm/amdkfd: fix a vulnerability of integer overflow in kfd debuggerCRITICAL9.87%ileMicrosoft2026-07-14
CVE-2026-64111lsm: hold cred_guard_mutex for lsm_set_self_attr()CRITICAL9.83%ileMicrosoft2026-07-14
CVE-2026-64076netfilter: bridge: eb_tables: close module init raceCRITICAL9.83%ileMicrosoft2026-07-14
CVE-2026-63979net/handshake: hand off the pinned file reference to accept_doitCRITICAL9.841%ileMicrosoft2026-07-14
CVE-2026-63999ethtool: rss: fix indir_table and hkey leak on get_rxfh failureCRITICAL9.86%ileMicrosoft2026-07-14
CVE-2026-63974Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device closeCRITICAL9.824%ileMicrosoft2026-07-14
CVE-2026-55008Microsoft Exchange Server Spoofing VulnerabilityCRITICAL9.655%ileMicrosoft2026-07-14
CVE-2026-50380Windows GDI+ Remote Code Execution VulnerabilityCRITICAL9.646%ileMicrosoft2026-07-14
CVE-2026-41106Microsoft 365 Copilot Elevation of Privilege VulnerabilityCRITICAL9.342%ileMicrosoft2026-07-14
CVE-2026-49798Windows Kernel Elevation of Privilege VulnerabilityCRITICAL9.382%ileMicrosoft2026-07-14
CVE-2026-62835Azure Portal Information Disclosure VulnerabilityCRITICAL9.359%ileMicrosoft2026-07-14
CVE-2026-55040Microsoft SharePoint Server Security Feature Bypass VulnerabilityCRITICAL9.174%ileMicrosoft2026-07-14
CVE-2026-9547SSH improper host validationCRITICAL9.125%ileMicrosoft2026-07-14
CVE-2026-8924trailing dot domain super cookieCRITICAL9.143%ileMicrosoft2026-07-14
CVE-2026-8926password leak with netrc and user in URLCRITICAL9.130%ileMicrosoft2026-07-14
CVE-2026-14740DBI versions before 1.650 for Perl read one byte out-of-bounds in preparse when deleting an initial SQL commentCRITICAL9.131%ileMicrosoft2026-07-14
CVE-2026-60082DBI versions before 1.651 for Perl do not enforce statement handle consistency with the rowCRITICAL9.131%ileMicrosoft2026-07-14
CVE-2026-64319nvmet-auth: validate reply message payload bounds against transfer lengthCRITICAL9.142%ileMicrosoft2026-07-14
CVE-2026-58289Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityCRITICAL9.040%ileMicrosoft2026-07-14
CVE-2026-54998Microsoft Exchange Online Elevation of Privilege VulnerabilityHIGH8.848%ileMicrosoft2026-07-14
CVE-2026-47300ASP.NET Core Elevation of Privilege VulnerabilityHIGH8.842%ileMicrosoft2026-07-14
CVE-2026-47303ASP.NET Core Elevation of Privilege VulnerabilityHIGH8.851%ileMicrosoft2026-07-14
CVE-2026-50663Game: Age of Empires II: Definitive Edition Remote Code Execution VulnerabilityHIGH8.849%ileMicrosoft2026-07-14
CVE-2026-54107Windows Win32k Elevation of Privilege VulnerabilityHIGH8.85%ileMicrosoft2026-07-14
CVE-2026-54982Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution VulnerabilityHIGH8.831%ileMicrosoft2026-07-14
CVE-2026-54999Windows TCP/IP Remote Code Execution VulnerabilityHIGH8.821%ileMicrosoft2026-07-14
CVE-2026-55005Microsoft Exchange Server Remote Code Execution VulnerabilityHIGH8.848%ileMicrosoft2026-07-14
CVE-2026-54117Microsoft SQL Server Remote Code Execution VulnerabilityHIGH8.867%ileMicrosoft2026-07-14
CVE-2026-54118Microsoft SQL Server Remote Code Execution VulnerabilityHIGH8.867%ileMicrosoft2026-07-14
CVE-2026-55002Microsoft SQL Server Elevation of Privilege VulnerabilityHIGH8.846%ileMicrosoft2026-07-14
CVE-2026-57969Azure CycleCloud Elevation of Privilege VulnerabilityHIGH8.842%ileMicrosoft2026-07-14
CVE-2026-57981Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityHIGH8.844%ileMicrosoft2026-07-14
CVE-2026-56645Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityHIGH8.843%ileMicrosoft2026-07-14
CVE-2026-58608Windows Print Spooler Remote Code Execution VulnerabilityHIGH8.835%ileMicrosoft2026-07-14
CVE-2026-47301Configuration Manager Elevation of Privilege VulnerabilityHIGH8.842%ileMicrosoft2026-07-14
CVE-2026-47632Azure Monitor Agent Metrics Extension Elevation of Privilege VulnerabilityHIGH8.824%ileMicrosoft2026-07-14
CVE-2026-48564DHCP Server Service Remote Code Execution VulnerabilityHIGH8.852%ileMicrosoft2026-07-14
CVE-2026-49178Windows Active Directory Domain Services Remote Code Execution VulnerabilityHIGH8.846%ileMicrosoft2026-07-14
CVE-2026-49795Windows Kernel Elevation of Privilege VulnerabilityHIGH8.878%ileMicrosoft2026-07-14
CVE-2026-50342Windows MIDI Service Module Elevation of Privileges VulnerabilityHIGH8.812%ileMicrosoft2026-07-14
CVE-2026-50360Windows SMB Server Elevation of Privilege VulnerabilityHIGH8.842%ileMicrosoft2026-07-14
CVE-2026-50370DHCP Server Service Remote Code Execution VulnerabilityHIGH8.840%ileMicrosoft2026-07-14
CVE-2026-50398Windows Media Elevation of Privilege VulnerabilityHIGH8.832%ileMicrosoft2026-07-14
CVE-2026-50382DirectX Graphics Kernel Remote Code Execution VulnerabilityHIGH8.819%ileMicrosoft2026-07-14
CVE-2026-50369Windows Remote Desktop Services Elevation of Privilege VulnerabilityHIGH8.849%ileMicrosoft2026-07-14
CVE-2026-50385Windows Runtime Elevation of Privilege VulnerabilityHIGH8.88%ileMicrosoft2026-07-14
CVE-2026-50413Windows Runtime Elevation of Privilege VulnerabilityHIGH8.816%ileMicrosoft2026-07-14
CVE-2026-50438Microsoft PC Manager Elevation of Privilege VulnerabilityHIGH8.820%ileMicrosoft2026-07-14
CVE-2026-50474Remote Desktop Client Remote Code Execution VulnerabilityHIGH8.846%ileMicrosoft2026-07-14
CVE-2026-50444Windows Server Update Service (WSUS) Elevation of Privilege VulnerabilityHIGH8.846%ileMicrosoft2026-07-14
CVE-2026-50477Windows Kernel Elevation of Privilege VulnerabilityHIGH8.824%ileMicrosoft2026-07-14
CVE-2026-50489Win32k Elevation of Privilege VulnerabilityHIGH8.829%ileMicrosoft2026-07-14
CVE-2026-47295Microsoft SQL Server Elevation of Privilege VulnerabilityHIGH8.857%ileMicrosoft2026-07-14
CVE-2026-50666Windows Remote Access Elevation of Privilege VulnerabilityHIGH8.846%ileMicrosoft2026-07-14
CVE-2026-50670Windows Win32k Elevation of Privilege VulnerabilityHIGH8.815%ileMicrosoft2026-07-14
CVE-2026-54121Active Directory Certificate Services Elevation of Privilege VulnerabilityHIGH8.861%ileMicrosoft2026-07-14
CVE-2026-50687Windows Win32k Elevation of Privilege VulnerabilityHIGH8.824%ileMicrosoft2026-07-14
CVE-2026-50692Desktop Window Manager Elevation of Privilege VulnerabilityHIGH8.824%ileMicrosoft2026-07-14
CVE-2026-55052Microsoft SharePoint Elevation of Privilege VulnerabilityHIGH8.848%ileMicrosoft2026-07-14
CVE-2026-41109GitHub Copilot and Visual Studio Code Security Feature Bypass VulnerabilityHIGH8.855%ileMicrosoft2026-07-14
CVE-2026-56196Windows Admin Center (WAC) Remote Code Execution VulnerabilityHIGH8.858%ileMicrosoft2026-07-14
CVE-2026-56197Windows Admin Center (WAC) Remote Code Execution VulnerabilityHIGH8.857%ileMicrosoft2026-07-14
CVE-2026-56642Microsoft Fabric Data Warehouse Remote Code Execution VulnerabilityHIGH8.855%ileMicrosoft2026-07-14
CVE-2026-56194Windows NFS Server Elevation of Privilege VulnerabilityHIGH8.855%ileMicrosoft2026-07-14
CVE-2026-56647Windows Remote Access Service Infrastructure Elevation of Privilege VulnerabilityHIGH8.855%ileMicrosoft2026-07-14
CVE-2026-57090Microsoft Windows Media Foundation Remote Code Execution VulnerabilityHIGH8.854%ileMicrosoft2026-07-14
CVE-2026-57094Microsoft Windows Media Foundation Remote Code Execution VulnerabilityHIGH8.854%ileMicrosoft2026-07-14
CVE-2026-57087Microsoft Windows Media Foundation Remote Code Execution VulnerabilityHIGH8.853%ileMicrosoft2026-07-14
CVE-2026-57102Visual Studio Code Security Feature Bypass VulnerabilityHIGH8.852%ileMicrosoft2026-07-14
CVE-2026-57974Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityHIGH8.844%ileMicrosoft2026-07-14
CVE-2026-58277Microsoft SharePoint Elevation of Privilege VulnerabilityHIGH8.856%ileMicrosoft2026-07-14
CVE-2026-58534Windows Input Method Editor (IME) Elevation of Privilege VulnerabilityHIGH8.824%ileMicrosoft2026-07-14
CVE-2026-58594Remote Desktop Client Remote Code Execution VulnerabilityHIGH8.852%ileMicrosoft2026-07-14
CVE-2026-58626Windows Remote Desktop Services Remote Code Execution VulnerabilityHIGH8.855%ileMicrosoft2026-07-14
CVE-2026-14380DBI versions before 1.650 for Perl are vulnerable to code injection via caller-influenced ProfileHIGH8.839%ileMicrosoft2026-07-14
CVE-2026-58253NATS Server: Route API Auth BypassHIGH8.813%ileMicrosoft2026-07-14
CVE-2026-66032libssh2 Double-Free Heap Corruption via sftp_open()HIGH8.821%ileMicrosoft2026-07-14
CVE-2026-64475vfio/pci: Release the VGA arbiter client on register_device() failureHIGH8.84%ileMicrosoft2026-07-14
CVE-2026-63807KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping levelHIGH8.83%ileMicrosoft2026-07-14
CVE-2026-57983Microsoft Edge (Chromium-based) Security Feature Bypass VulnerabilityHIGH8.738%ileMicrosoft2026-07-14
CVE-2026-14739DBI versions before 1.650 for Perl have a heap overflow when preparsing SQL statements with an extreme number of placehoHIGH8.632%ileMicrosoft2026-07-14
CVE-2026-13321DNSSEC Validation Bypass via Out-of-Zone NSEC Next FieldHIGH8.612%ileMicrosoft2026-07-14
CVE-2026-56167Azure AI Search Elevation of Privilege VulnerabilityHIGH8.533%ileMicrosoft2026-07-14
CVE-2026-50340Windows Runtime Elevation of Privilege VulnerabilityHIGH8.540%ileMicrosoft2026-07-14
CVE-2026-56002libXfont2 PCF Font Parsing Heap Buffer OverflowHIGH8.535%ileMicrosoft2026-07-14
CVE-2026-53366ipv4: account for fraggap on the paged allocation pathHIGH8.57%ileMicrosoft2026-07-14
CVE-2026-56001libXfont2 BitmapScaleBitmaps Integer Overflow Heap Buffer OverflowHIGH8.531%ileMicrosoft2026-07-14
CVE-2026-56003libXfont2 computeProps Property Buffer Heap Buffer OverflowHIGH8.530%ileMicrosoft2026-07-14
CVE-2026-55999xorg-server / xwayland glamor font atlas Heap Buffer OverflowHIGH8.519%ileMicrosoft2026-07-14
CVE-2026-54992Microsoft Message Queuing Queue Manager Remote Code Execution VulnerabilityHIGH8.438%ileMicrosoft2026-07-14
CVE-2026-54122Windows GDI+ Remote Code Execution VulnerabilityHIGH8.421%ileMicrosoft2026-07-14
CVE-2026-50520Visual Studio Code Remote Code Execution VulnerabilityHIGH8.417%ileMicrosoft2026-07-14
CVE-2026-49184Windows NTFS Remote Code Execution VulnerabilityHIGH8.418%ileMicrosoft2026-07-14
CVE-2026-54128Windows DHCP Client Remote Code Execution VulnerabilityHIGH8.422%ileMicrosoft2026-07-14
CVE-2026-55045Microsoft Office Remote Code Execution VulnerabilityHIGH8.429%ileMicrosoft2026-07-14
CVE-2026-63803hdlc_ppp: sync per-proto timers before freeing hdlc stateHIGH8.43%ileMicrosoft2026-07-14
CVE-2026-64254NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and CONFIG share BARHIGH8.46%ileMicrosoft2026-07-14
CVE-2026-64252MIPS: DEC: Prevent initial console buffer from landing in XKPHYSHIGH8.46%ileMicrosoft2026-07-14
CVE-2026-64456hwrng: virtio: clamp device-reported used.len at copy_data()HIGH8.44%ileMicrosoft2026-07-14
CVE-2026-64513KVM: x86: Unconditionally recompute CR8 intercept on PPR updateHIGH8.47%ileMicrosoft2026-07-14
CVE-2026-63823keys: Pin request_key_auth payload in instantiate pathsHIGH8.42%ileMicrosoft2026-07-14
CVE-2026-64249fpga: region: fix use-after-free in child_regions_with_firmware()HIGH8.46%ileMicrosoft2026-07-14
CVE-2026-64246power: reset: linkstation-poweroff: fix use-after-free in the linkstation_poweroff_init()HIGH8.46%ileMicrosoft2026-07-14
CVE-2026-64320nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log PageHIGH8.451%ileMicrosoft2026-07-14
CVE-2026-58281Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityHIGH8.350%ileMicrosoft2026-07-14
CVE-2026-58284Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityHIGH8.335%ileMicrosoft2026-07-14
CVE-2026-58285Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityHIGH8.337%ileMicrosoft2026-07-14
CVE-2026-58287Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityHIGH8.337%ileMicrosoft2026-07-14
CVE-2026-58288Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityHIGH8.336%ileMicrosoft2026-07-14
CVE-2026-58295Microsoft Edge (Chromium-based) Security Feature Bypass VulnerabilityHIGH8.330%ileMicrosoft2026-07-14
CVE-2026-58596Microsoft Edge (Chromium-based) Elevation of Privilege VulnerabilityHIGH8.339%ileMicrosoft2026-07-14
CVE-2026-56181Windows Network Address Translation (NAT) Spoofing VulnerabilityHIGH8.315%ileMicrosoft2026-07-14
CVE-2026-50338Azure Spring Apps Elevation of Privilege VulnerabilityHIGH8.238%ileMicrosoft2026-07-14
CVE-2026-50429Windows Kernel Information Disclosure VulnerabilityHIGH8.252%ileMicrosoft2026-07-14
CVE-2026-50528.NET Security Feature Bypass VulnerabilityHIGH8.243%ileMicrosoft2026-07-14
CVE-2026-50680Windows Hyper-V Elevation of Privilege VulnerabilityHIGH8.227%ileMicrosoft2026-07-14
CVE-2026-58525Microsoft Edge (Chromium-based) Security Feature Bypass VulnerabilityHIGH8.230%ileMicrosoft2026-07-14
CVE-2026-63829net: ip_gre: require CAP_NET_ADMIN in the device netns for changelinkHIGH8.22%ileMicrosoft2026-07-14
CVE-2026-60005NGINX ngx_http_slice_module vulnerabilityHIGH8.250%ileMicrosoft2026-07-14
CVE-2026-64380smb: client: harden POSIX SID length parsingHIGH8.236%ileMicrosoft2026-07-14
CVE-2026-42900Microsoft Windows App Store Elevation of Privilege VulnerabilityHIGH8.132%ileMicrosoft2026-07-14
CVE-2026-49164Windows Active Directory Domain Services Remote Code Execution VulnerabilityHIGH8.148%ileMicrosoft2026-07-14
CVE-2026-54995Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution VulnerabilityHIGH8.145%ileMicrosoft2026-07-14
CVE-2026-56169Windows Admin Center Elevation of Privilege VulnerabilityHIGH8.140%ileMicrosoft2026-07-14
CVE-2026-50694Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution VulnerabilityHIGH8.148%ileMicrosoft2026-07-14
CVE-2026-58595Microsoft Bing App for IOS Spoofing VulnerabilityHIGH8.138%ileMicrosoft2026-07-14
CVE-2026-47304.NET Security Feature Bypass VulnerabilityHIGH8.112%ileMicrosoft2026-07-14
CVE-2026-50460Windows Runtime Elevation of Privilege VulnerabilityHIGH8.140%ileMicrosoft2026-07-14
CVE-2026-50439Microsoft Message Queuing Queue Manager Remote Code Execution VulnerabilityHIGH8.142%ileMicrosoft2026-07-14
CVE-2026-50487Windows DNS Client Elevation of Privilege VulnerabilityHIGH8.151%ileMicrosoft2026-07-14
CVE-2026-50686Windows OLE Remote Code Execution VulnerabilityHIGH8.148%ileMicrosoft2026-07-14
CVE-2026-56186Windows Secure Channel Information Disclosure VulnerabilityHIGH8.161%ileMicrosoft2026-07-14
CVE-2026-58282Microsoft Edge (Chromium-based) Spoofing VulnerabilityHIGH8.125%ileMicrosoft2026-07-14
CVE-2026-58283Microsoft Edge (Chromium-based) Spoofing VulnerabilityHIGH8.127%ileMicrosoft2026-07-14
CVE-2026-58286Microsoft Edge (Chromium-based) Spoofing VulnerabilityHIGH8.125%ileMicrosoft2026-07-14
CVE-2026-58293Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityHIGH8.136%ileMicrosoft2026-07-14
CVE-2026-58617M365 Copilot for iOS Elevation of Privilege VulnerabilityHIGH8.151%ileMicrosoft2026-07-14
CVE-2026-50721IKEv1 Denial of Service via RSA-SHA1 (PKCS#1 Version 1.5 Encrypted) authentication payloadHIGH8.131%ileMicrosoft2026-07-14
CVE-2026-50722IKEv2 Denial of Service via RSA-SHA1 (PKCS#1 RSASSA-PKCS1-v1_5) authentication payloadHIGH8.127%ileMicrosoft2026-07-14
CVE-2026-8286wrong STARTTLS connection reuseHIGH8.123%ileMicrosoft2026-07-14
CVE-2026-42533NGINX Map directive and Regex matching vulnerabilityHIGH8.188%ileMicrosoft2026-07-14
CVE-2026-53381virtiofs: fix UAF on submount umountHIGH8.14%ileMicrosoft2026-07-14
CVE-2026-64442staging: rtl8723bs: fix OOB reads in IE loops in issue_assocreq() and join_cmd_hdl()HIGH8.121%ileMicrosoft2026-07-14
CVE-2026-64448smb: client: restrict implied bcc[0] exemption to responses without data areaHIGH8.138%ileMicrosoft2026-07-14
CVE-2026-42975Windows Bluetooth Port Driver Remote Code ExecutionHIGH8.026%ileMicrosoft2026-07-14
CVE-2026-49169Windows DNS Server Remote Code Execution VulnerabilityHIGH8.041%ileMicrosoft2026-07-14
CVE-2026-58647Microsoft PowerBI Report Server Spoofing VulnerabilityHIGH8.028%ileMicrosoft2026-07-14
CVE-2026-40400Windows PowerShell Remote Code Execution VulnerabilityHIGH8.050%ileMicrosoft2026-07-14
CVE-2026-50365Remote Access Management service/API (RPC server) Elevation of Privilege VulnerabilityHIGH8.038%ileMicrosoft2026-07-14
CVE-2026-50502Windows Event Logging Service Remote Code Execution VulnerabilityHIGH8.045%ileMicrosoft2026-07-14
CVE-2026-50683Windows DHCP Client Elevation of Privilege VulnerabilityHIGH8.039%ileMicrosoft2026-07-14
CVE-2026-35425Azure API Management (APIM) Remote Code Execution VulnerabilityHIGH8.039%ileMicrosoft2026-07-14
CVE-2026-64600xfs: resample the data fork mapping after cycling ILOCKHIGH7.840%ileMicrosoft2026-07-14
CVE-2026-42982Windows Secure Kernel Mode Elevation of Privilege VulnerabilityHIGH7.819%ileMicrosoft2026-07-14
CVE-2026-49166Windows Print Configuration Elevation of Privilege VulnerabilityHIGH7.815%ileMicrosoft2026-07-14
CVE-2026-49170Windows StateRepository API Server file Elevation of Privilege VulnerabilityHIGH7.885%ileMicrosoft2026-07-14
CVE-2026-49176Windows WalletService Elevation of Privilege VulnerabilityHIGH7.838%ileMicrosoft2026-07-14
CVE-2026-49175Windows DNS Client Elevation of Privilege VulnerabilityHIGH7.815%ileMicrosoft2026-07-14
CVE-2026-49173Windows Kernel Elevation of Privilege VulnerabilityHIGH7.815%ileMicrosoft2026-07-14
CVE-2026-54987Windows Overlay Filter Elevation of Privilege VulnerabilityHIGH7.815%ileMicrosoft2026-07-14
CVE-2026-50697Windows Common Log File System Driver Elevation of Privilege VulnerabilityHIGH7.821%ileMicrosoft2026-07-14
CVE-2026-54991Windows USB Print Driver Elevation of Privilege VulnerabilityHIGH7.85%ileMicrosoft2026-07-14
CVE-2026-54986Windows Win32k Elevation of Privilege VulnerabilityHIGH7.878%ileMicrosoft2026-07-14
CVE-2026-54993Microsoft Windows Media Foundation Remote Code Execution VulnerabilityHIGH7.826%ileMicrosoft2026-07-14
CVE-2026-55001Active Directory Domain Services Elevation of Privilege VulnerabilityHIGH7.812%ileMicrosoft2026-07-14
CVE-2026-54112Windows Win32k Elevation of Privilege VulnerabilityHIGH7.85%ileMicrosoft2026-07-14
CVE-2026-55004Windows Print Configuration Elevation of Privilege VulnerabilityHIGH7.815%ileMicrosoft2026-07-14
CVE-2026-54109Windows Resilient File System (ReFS) Remote Code Execution VulnerabilityHIGH7.815%ileMicrosoft2026-07-14
CVE-2026-54114Windows Win32k Elevation of Privilege VulnerabilityHIGH7.878%ileMicrosoft2026-07-14
CVE-2026-55006Microsoft Exchange Server Elevation of Privilege VulnerabilityHIGH7.812%ileMicrosoft2026-07-14
CVE-2026-55009Microsoft Exchange Server Elevation of Privilege VulnerabilityHIGH7.874%ileMicrosoft2026-07-14
CVE-2026-55011Microsoft Defender Remote Code Execution VulnerabilityHIGH7.830%ileMicrosoft2026-07-14
CVE-2026-55012Microsoft Defender Remote Code Execution VulnerabilityHIGH7.830%ileMicrosoft2026-07-14
CVE-2026-50675Microsoft Excel Remote Code Execution VulnerabilityHIGH7.825%ileMicrosoft2026-07-14
CVE-2026-55899Microsoft Excel Remote Code Execution VulnerabilityHIGH7.823%ileMicrosoft2026-07-14
CVE-2026-55948Microsoft Excel Remote Code Execution VulnerabilityHIGH7.823%ileMicrosoft2026-07-14
CVE-2026-56155Active Directory Federation Services Elevation of Privilege VulnerabilityHIGH7.882%ileMicrosoft2026-07-14
CVE-2026-57107Windows Admin Center Elevation of Privilege VulnerabilityHIGH7.812%ileMicrosoft2026-07-14
CVE-2026-55014Windows Remote Help Defense Elevation of Privilege VulnerabilityHIGH7.812%ileMicrosoft2026-07-14
CVE-2026-58601Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege VulernabilityHIGH7.813%ileMicrosoft2026-07-14
CVE-2026-58602Windows Kernel-Mode Driver Elevation of Privilege VulnerabilityHIGH7.813%ileMicrosoft2026-07-14
CVE-2026-58609Windows Graphics Component Remote Code Execution VulnerabilityHIGH7.824%ileMicrosoft2026-07-14
CVE-2026-58610Microsoft Windows Media Foundation Remote Code Execution VulnerabilityHIGH7.824%ileMicrosoft2026-07-14
CVE-2026-58618Microsoft Excel Remote Code Execution VulnerabilityHIGH7.820%ileMicrosoft2026-07-14
CVE-2026-58631Windows Admin Center (WAC) Remote Code Execution VulnerabilityHIGH7.821%ileMicrosoft2026-07-14
CVE-2026-58635Windows Narrator Braille Elevation of Privilege VulnerabilityHIGH7.831%ileMicrosoft2026-07-14
CVE-2026-58636Microsoft PC Manager Elevation of Privilege VulnerabilityHIGH7.819%ileMicrosoft2026-07-14
CVE-2026-44800Windows Push Notifications Elevation of Privilege VulnerabilityHIGH7.85%ileMicrosoft2026-07-14
CVE-2026-48581Surface Broker SDMA Elevation of Privilege VulnerabilityHIGH7.812%ileMicrosoft2026-07-14
CVE-2026-49783Secure Boot Security Feature Bypass VulnerabilityHIGH7.817%ileMicrosoft2026-07-14
CVE-2026-49792Windows Resilient File System (ReFS) Remote Code Execution VulnerabilityHIGH7.817%ileMicrosoft2026-07-14
CVE-2026-49793Windows Resilient File System (ReFS) Remote Code Execution VulnerabilityHIGH7.817%ileMicrosoft2026-07-14
CVE-2026-49796Windows GDI+ Remote Code Execution VulnerabilityHIGH7.832%ileMicrosoft2026-07-14
CVE-2026-49797Windows NTFS Remote Code Execution VulnerabilityHIGH7.829%ileMicrosoft2026-07-14
CVE-2026-49800Windows Web Proxy Auto-Discovery Protocol (WPAD) Elevation of Privilege VulnerabilityHIGH7.880%ileMicrosoft2026-07-14
CVE-2026-50308Windows NTFS Remote Code Execution VulnerabilityHIGH7.829%ileMicrosoft2026-07-14
CVE-2026-50311Windows Server Elevation of Privilege VulnerabilityHIGH7.815%ileMicrosoft2026-07-14
CVE-2026-50333Windows Spaceport.sys Elevation of Privilege VulnerabilityHIGH7.812%ileMicrosoft2026-07-14
CVE-2026-50318Windows Resilient File System (ReFS) Elevation of Privilege VulnerabilityHIGH7.817%ileMicrosoft2026-07-14
CVE-2026-50351Windows Audio Compression Manager (ACM) Elevation of Privilege VulnerabilityHIGH7.885%ileMicrosoft2026-07-14
CVE-2026-49808Windows Kernel Elevation of Privilege VulnerabilityHIGH7.85%ileMicrosoft2026-07-14
CVE-2026-50293Windows Internal Task Bar Elevation of Privilege VulnerabilityHIGH7.817%ileMicrosoft2026-07-14
CVE-2026-50332Windows Kernel Elevation of Privilege VulnerabilityHIGH7.827%ileMicrosoft2026-07-14
CVE-2026-50305Microsoft Brokering File System Elevation of Privilege VulnerabilityHIGH7.88%ileMicrosoft2026-07-14
CVE-2026-50329Microsoft DWM Core Library Elevation of Privilege VulnerabilityHIGH7.878%ileMicrosoft2026-07-14
CVE-2026-50363Windows Push Notifications Elevation of Privilege VulnerabilityHIGH7.823%ileMicrosoft2026-07-14
CVE-2026-50306Windows TCP/IP Elevation of Privilege VulnerabilityHIGH7.815%ileMicrosoft2026-07-14
CVE-2026-50412Windows NTFS Elevation of Privilege VulnerabilityHIGH7.823%ileMicrosoft2026-07-14
CVE-2026-50337Windows Notification Elevation of Privilege VulnerabilityHIGH7.823%ileMicrosoft2026-07-14
CVE-2026-50386Windows NTFS Remote Code Execution VulnerabilityHIGH7.826%ileMicrosoft2026-07-14
CVE-2026-50400Windows App Package Installer Elevation of Privilege VulnerabilityHIGH7.815%ileMicrosoft2026-07-14
CVE-2026-50309Windows NTFS Remote Code Execution VulnerabilityHIGH7.815%ileMicrosoft2026-07-14
CVE-2026-50326Windows Unified Consent System Elevation of Privilege VulnerabilityHIGH7.823%ileMicrosoft2026-07-14
CVE-2026-50313Windows NTFS Remote Code Execution VulnerabilityHIGH7.836%ileMicrosoft2026-07-14
CVE-2026-50440Windows Audio Service Elevation of Privilege VulnerabilityHIGH7.85%ileMicrosoft2026-07-14
CVE-2026-50327Windows Media Remote Code Execution VulnerabilityHIGH7.827%ileMicrosoft2026-07-14
CVE-2026-50407Windows Resilient File System (ReFS) Elevation of Privilege VulnerabilityHIGH7.823%ileMicrosoft2026-07-14
CVE-2026-50331Windows Application Model Core API Elevation of Privilege VulnerabilityHIGH7.815%ileMicrosoft2026-07-14
CVE-2026-50343Microsoft Install Service Elevation of Privilege VulnerabilityHIGH7.888%ileMicrosoft2026-07-14
CVE-2026-50347Windows Data.dll Remote Code Execution VulnerabilityHIGH7.836%ileMicrosoft2026-07-14
CVE-2026-50321Windows USB Driver Elevation of Privilege VulnerabilityHIGH7.85%ileMicrosoft2026-07-14
CVE-2026-50425Windows Internal System User Profile Elevation of Privilege VulnerabilityHIGH7.815%ileMicrosoft2026-07-14
CVE-2026-50315Windows Image Acquisition Elevation of Privilege VulnerabilityHIGH7.823%ileMicrosoft2026-07-14
CVE-2026-50357Windows Resilient File System (ReFS) Elevation of Privilege VulnerabilityHIGH7.823%ileMicrosoft2026-07-14
CVE-2026-50335Windows Operating Systems Elevation of Privilege VulnerabilityHIGH7.820%ileMicrosoft2026-07-14
CVE-2026-50361Microsoft Brokering File System Elevation of Privilege VulnerabilityHIGH7.88%ileMicrosoft2026-07-14
CVE-2026-50317Windows Operating Systems Elevation of Privilege VulnerabilityHIGH7.810%ileMicrosoft2026-07-14
CVE-2026-50373Windows Search Service Elevation of Privilege VulnerabilityHIGH7.820%ileMicrosoft2026-07-14
CVE-2026-50353DirectX Graphics Kernel Elevation of Privilege VulnerabilityHIGH7.823%ileMicrosoft2026-07-14
CVE-2026-50388Windows NTFS Remote Code Execution VulnerabilityHIGH7.836%ileMicrosoft2026-07-14
CVE-2026-50336Windows Media Elevation of Privilege VulnerabilityHIGH7.823%ileMicrosoft2026-07-14
CVE-2026-50433Windows Media Elevation of Privilege VulnerabilityHIGH7.878%ileMicrosoft2026-07-14
CVE-2026-50391Windows Group Policy Elevation of Privilege VulnerabilityHIGH7.820%ileMicrosoft2026-07-14
CVE-2026-50423Windows Kernel Elevation of Privilege VulnerabilityHIGH7.884%ileMicrosoft2026-07-14
CVE-2026-50378Windows Key Guard Elevation of Privilege VulnerabilityHIGH7.810%ileMicrosoft2026-07-14
CVE-2026-50346Netlogon RPC Elevation of Privilege VulnerabilityHIGH7.820%ileMicrosoft2026-07-14
CVE-2026-50405Windows Filtering Platform Elevation of Privilege VulnerabilityHIGH7.812%ileMicrosoft2026-07-14
CVE-2026-50448Windows NTFS Remote Code Execution VulnerabilityHIGH7.826%ileMicrosoft2026-07-14
CVE-2026-50387Windows GDI Elevation of Privilege VulnerabilityHIGH7.878%ileMicrosoft2026-07-14
CVE-2026-50344Windows OLE Elevation of Privilege VulnerabilityHIGH7.820%ileMicrosoft2026-07-14
CVE-2026-50436Windows Kernel Elevation of Privilege VulnerabilityHIGH7.876%ileMicrosoft2026-07-14
CVE-2026-50471Windows NTFS Remote Code Execution VulnerabilityHIGH7.823%ileMicrosoft2026-07-14
CVE-2026-50469Windows Projected File System Elevation of Privilege VulnerabilityHIGH7.819%ileMicrosoft2026-07-14
CVE-2026-50454Windows User Interface Core Elevation of Privilege VulnerabilityHIGH7.836%ileMicrosoft2026-07-14
CVE-2026-50427Content Delivery Manager Elevation of Privilege VulnerabilityHIGH7.88%ileMicrosoft2026-07-14
CVE-2026-50422Windows NTFS Elevation of Privilege VulnerabilityHIGH7.823%ileMicrosoft2026-07-14
CVE-2026-50421Windows Connected User Experiences and Telemetry Elevation of Privilege VulnerabilityHIGH7.823%ileMicrosoft2026-07-14
CVE-2026-50367Windows Sensor Data Service Elevation of Privilege VulnerabilityHIGH7.815%ileMicrosoft2026-07-14
CVE-2026-50466Microsoft Brokering File System Elevation of Privilege VulnerabilityHIGH7.815%ileMicrosoft2026-07-14
CVE-2026-50402NTFS Elevation of Privilege VulnerabilityHIGH7.828%ileMicrosoft2026-07-14
CVE-2026-50435Windows Overlay Filter Elevation of Privilege VulnerabilityHIGH7.815%ileMicrosoft2026-07-14
CVE-2026-50441Windows Resilient File System (ReFS) Elevation of Privilege VulnerabilityHIGH7.815%ileMicrosoft2026-07-14
CVE-2026-50462Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityHIGH7.832%ileMicrosoft2026-07-14
CVE-2026-50457Windows Runtime Elevation of Privilege VulnerabilityHIGH7.88%ileMicrosoft2026-07-14
CVE-2026-50399Windows Kernel Elevation of Privilege VulnerabilityHIGH7.815%ileMicrosoft2026-07-14
CVE-2026-50461Windows NTFS Remote Code Execution VulnerabilityHIGH7.826%ileMicrosoft2026-07-14
CVE-2026-50417Windows NTFS Remote Code Execution VulnerabilityHIGH7.823%ileMicrosoft2026-07-14
CVE-2026-50362Windows Resilient File System (ReFS) Remote Code Execution VulnerabilityHIGH7.826%ileMicrosoft2026-07-14
CVE-2026-50458Microsoft Brokering File System Elevation of Privilege VulnerabilityHIGH7.89%ileMicrosoft2026-07-14
CVE-2026-50476Windows Network Connections Service Elevation of Privilege VulnerabilityHIGH7.874%ileMicrosoft2026-07-14
CVE-2026-50450Windows Network Connections Service Elevation of Privilege VulnerabilityHIGH7.85%ileMicrosoft2026-07-14
CVE-2026-50478Windows Kernel Elevation of Privilege VulnerabilityHIGH7.824%ileMicrosoft2026-07-14
CVE-2026-50479Windows USB Hub Driver Elevation of Privilege VulnerabilityHIGH7.823%ileMicrosoft2026-07-14
CVE-2026-50480Windows Web Proxy Auto-Discovery Protocol (WPAD) Elevation of Privilege VulnerabilityHIGH7.815%ileMicrosoft2026-07-14
CVE-2026-50484Windows Kernel Elevation of Privilege VulnerabilityHIGH7.824%ileMicrosoft2026-07-14
CVE-2026-50486Windows Runtime Elevation of Privilege VulnerabilityHIGH7.815%ileMicrosoft2026-07-14
CVE-2026-50488Clipboard User Service Elevation of Privilege VulnerabilityHIGH7.814%ileMicrosoft2026-07-14
CVE-2026-50499Windows Print Spooler Elevation of Privilege VulnerabilityHIGH7.815%ileMicrosoft2026-07-14
CVE-2026-50494Windows NTFS Remote Code Execution VulnerabilityHIGH7.823%ileMicrosoft2026-07-14
CVE-2026-50498Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege VulnerabilityHIGH7.818%ileMicrosoft2026-07-14
CVE-2026-50501Windows Resilient File System (ReFS) Remote Code Execution VulnerabilityHIGH7.826%ileMicrosoft2026-07-14
CVE-2026-50509Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege VulnerabilityHIGH7.887%ileMicrosoft2026-07-14
CVE-2026-50510GitHub Copilot Remote Code Execution VulnerabilityHIGH7.814%ileMicrosoft2026-07-14
CVE-2026-50646.NET Framework Remote Code Execution VulnerabilityHIGH7.858%ileMicrosoft2026-07-14
CVE-2026-50649.NET Remote Code Execution VulnerabilityHIGH7.857%ileMicrosoft2026-07-14
CVE-2026-50650.NET Framework Elevation of Privilege VulnerabilityHIGH7.821%ileMicrosoft2026-07-14
CVE-2026-50655Microsoft Windows Media Foundation Remote Code Execution VulnerabilityHIGH7.840%ileMicrosoft2026-07-14
CVE-2026-50667Windows Common Log File System Driver Elevation of Privilege VulnerabilityHIGH7.879%ileMicrosoft2026-07-14
CVE-2026-50673Windows Kernel Elevation of Privilege VulnerabilityHIGH7.810%ileMicrosoft2026-07-14
CVE-2026-50676Windows Media Elevation of Privilege VulnerabilityHIGH7.810%ileMicrosoft2026-07-14
CVE-2026-50677Windows Media Elevation of Privilege VulnerabilityHIGH7.815%ileMicrosoft2026-07-14
CVE-2026-54115Windows Message Queuing (MSMQ) Elevation of Privilege VulnerabilityHIGH7.823%ileMicrosoft2026-07-14
CVE-2026-50679Windows Search Service Elevation of Privilege VulnerabilityHIGH7.823%ileMicrosoft2026-07-14
CVE-2026-50688Windows Win32k Elevation of Privilege VulnerabilityHIGH7.875%ileMicrosoft2026-07-14
CVE-2026-50689Windows Clipboard Server Elevation of Privilege VulnerabilityHIGH7.815%ileMicrosoft2026-07-14
CVE-2026-54125Windows Runtime Elevation of Privilege VulnerabilityHIGH7.88%ileMicrosoft2026-07-14
CVE-2026-47290Microsoft Office Remote Code Execution VulnerabilityHIGH7.833%ileMicrosoft2026-07-14
CVE-2026-47642Microsoft Excel Remote Code Execution VulnerabilityHIGH7.833%ileMicrosoft2026-07-14
CVE-2026-50301Microsoft Office Remote Code Execution VulnerabilityHIGH7.823%ileMicrosoft2026-07-14
CVE-2026-50314Microsoft Office Remote Code Execution VulnerabilityHIGH7.836%ileMicrosoft2026-07-14
CVE-2026-50467Microsoft Office Remote Code Execution VulnerabilityHIGH7.827%ileMicrosoft2026-07-14
CVE-2026-55017Microsoft Office Remote Code Execution VulnerabilityHIGH7.823%ileMicrosoft2026-07-14
CVE-2026-55024Microsoft Excel Remote Code Execution VulnerabilityHIGH7.832%ileMicrosoft2026-07-14
CVE-2026-55018Microsoft Office Remote Code Execution VulnerabilityHIGH7.827%ileMicrosoft2026-07-14
CVE-2026-55022Microsoft Office Remote Code Execution VulnerabilityHIGH7.830%ileMicrosoft2026-07-14
CVE-2026-55025Microsoft Excel Remote Code Execution VulnerabilityHIGH7.823%ileMicrosoft2026-07-14
CVE-2026-55125Microsoft Office Remote Code Execution VulnerabilityHIGH7.830%ileMicrosoft2026-07-14
CVE-2026-55031Microsoft Excel Remote Code Execution VulnerabilityHIGH7.832%ileMicrosoft2026-07-14
CVE-2026-55048Microsoft Excel Remote Code Execution VulnerabilityHIGH7.823%ileMicrosoft2026-07-14
CVE-2026-55029Microsoft Excel Remote Code Execution VulnerabilityHIGH7.823%ileMicrosoft2026-07-14
CVE-2026-55039Microsoft Excel Remote Code Execution VulnerabilityHIGH7.823%ileMicrosoft2026-07-14
CVE-2026-55049Microsoft Office Remote Code Execution VulnerabilityHIGH7.827%ileMicrosoft2026-07-14
CVE-2026-55032Microsoft Word Remote Code Execution VulnerabilityHIGH7.830%ileMicrosoft2026-07-14
CVE-2026-55033Microsoft Word Remote Code Execution VulnerabilityHIGH7.844%ileMicrosoft2026-07-14
CVE-2026-55041Microsoft Excel Remote Code Execution VulnerabilityHIGH7.823%ileMicrosoft2026-07-14
CVE-2026-55127Microsoft Word Remote Code Execution VulnerabilityHIGH7.834%ileMicrosoft2026-07-14
CVE-2026-55136Microsoft Excel Remote Code Execution VulnerabilityHIGH7.823%ileMicrosoft2026-07-14
CVE-2026-55141Microsoft Excel Remote Code Execution VulnerabilityHIGH7.823%ileMicrosoft2026-07-14
CVE-2026-55129Microsoft Office Remote Code Execution VulnerabilityHIGH7.827%ileMicrosoft2026-07-14
CVE-2026-55036Microsoft Excel Remote Code Execution VulnerabilityHIGH7.823%ileMicrosoft2026-07-14
CVE-2026-55044Microsoft Excel Remote Code Execution VulnerabilityHIGH7.823%ileMicrosoft2026-07-14
CVE-2026-55055Microsoft Word Remote Code Execution VulnerabilityHIGH7.830%ileMicrosoft2026-07-14
CVE-2026-55037Microsoft Excel Remote Code Execution VulnerabilityHIGH7.823%ileMicrosoft2026-07-14
CVE-2026-55058Microsoft Excel Remote Code Execution VulnerabilityHIGH7.823%ileMicrosoft2026-07-14
CVE-2026-55038Microsoft Word Remote Code Execution VulnerabilityHIGH7.840%ileMicrosoft2026-07-14
CVE-2026-55132Microsoft Word Remote Code Execution VulnerabilityHIGH7.838%ileMicrosoft2026-07-14
CVE-2026-55137Microsoft Excel Remote Code Execution VulnerabilityHIGH7.823%ileMicrosoft2026-07-14
CVE-2026-55053Microsoft Excel Remote Code Execution VulnerabilityHIGH7.823%ileMicrosoft2026-07-14
CVE-2026-55131Microsoft Excel Remote Code Execution VulnerabilityHIGH7.823%ileMicrosoft2026-07-14
CVE-2026-55134Microsoft Word Remote Code Execution VulnerabilityHIGH7.830%ileMicrosoft2026-07-14
CVE-2026-55056Microsoft Office Remote Code Execution VulnerabilityHIGH7.827%ileMicrosoft2026-07-14
CVE-2026-55140Microsoft Office Remote Code Execution VulnerabilityHIGH7.827%ileMicrosoft2026-07-14
CVE-2026-55128Microsoft Word Remote Code Execution VulnerabilityHIGH7.830%ileMicrosoft2026-07-14
CVE-2026-55130Microsoft Word Remote Code Execution VulnerabilityHIGH7.830%ileMicrosoft2026-07-14
CVE-2026-55043Microsoft PowerPoint Remote Code Execution VulnerabilityHIGH7.827%ileMicrosoft2026-07-14
CVE-2026-55133Microsoft OneNote Remote Code Execution VulnerabilityHIGH7.823%ileMicrosoft2026-07-14
CVE-2026-55123Microsoft PowerPoint Remote Code Execution VulnerabilityHIGH7.827%ileMicrosoft2026-07-14
CVE-2026-55120Microsoft PowerPoint Remote Code Execution VulnerabilityHIGH7.827%ileMicrosoft2026-07-14
CVE-2026-54131Microsoft Excel Remote Code Execution VulnerabilityHIGH7.823%ileMicrosoft2026-07-14
CVE-2026-55947Microsoft Excel Remote Code Execution VulnerabilityHIGH7.823%ileMicrosoft2026-07-14
CVE-2026-55949Microsoft Excel Remote Code Execution VulnerabilityHIGH7.823%ileMicrosoft2026-07-14
CVE-2026-56156Microsoft Excel Remote Code Execution VulnerabilityHIGH7.826%ileMicrosoft2026-07-14
CVE-2026-56176Windows Win32k Elevation of Privilege VulnerabilityHIGH7.815%ileMicrosoft2026-07-14
CVE-2026-56175Windows NTFS Elevation of Privilege VulnerabilityHIGH7.823%ileMicrosoft2026-07-14
CVE-2026-56182Windows NTFS Elevation of Privilege VulnerabilityHIGH7.815%ileMicrosoft2026-07-14
CVE-2026-56189Microsoft Windows Media Foundation Remote Code Execution VulnerabilityHIGH7.832%ileMicrosoft2026-07-14
CVE-2026-50665Microsoft Office Information Disclosure VulnerabilityHIGH7.828%ileMicrosoft2026-07-14
CVE-2026-56643DirectX Graphics Kernel Elevation of Privilege VulnerabilityHIGH7.823%ileMicrosoft2026-07-14
CVE-2026-56644DirectX Graphics Kernel Elevation of Privilege VulnerabilityHIGH7.823%ileMicrosoft2026-07-14
CVE-2026-54124Windows Terminal Remote Code Execution VulnerabilityHIGH7.836%ileMicrosoft2026-07-14
CVE-2026-56650Windows Network File System Elevation of Privilege VulnerabilityHIGH7.823%ileMicrosoft2026-07-14
CVE-2026-57091Windows File History Service Elevation of Privilege VulnerabilityHIGH7.829%ileMicrosoft2026-07-14
CVE-2026-57088Extensible Storage Engine (ESENT) Elevation of Privilege VulnerabilityHIGH7.820%ileMicrosoft2026-07-14
CVE-2026-57096Windows Routing and Remote Access Service (RRAS) Elevation of Privilege VulnerabilityHIGH7.823%ileMicrosoft2026-07-14
CVE-2026-57968Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege VulnerabilityHIGH7.824%ileMicrosoft2026-07-14
CVE-2026-58527Windows Runtime Elevation of Privilege VulnerabilityHIGH7.810%ileMicrosoft2026-07-14
CVE-2026-58530Windows Resilient File System (ReFS) Remote Code Execution VulnerabilityHIGH7.826%ileMicrosoft2026-07-14
CVE-2026-58538Windows Bluetooth Service Elevation of Privilege VulnerabilityHIGH7.823%ileMicrosoft2026-07-14
CVE-2026-58540Windows Installer Elevation of Privilege VulnerabilityHIGH7.820%ileMicrosoft2026-07-14
CVE-2026-58532Windows Kernel Elevation of Privilege VulnerabilityHIGH7.824%ileMicrosoft2026-07-14
CVE-2026-58537Microsoft NAT Helper Components (ipnathlp.dll) Elevation of Privilege VulnerabilityHIGH7.823%ileMicrosoft2026-07-14
CVE-2026-58536Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityHIGH7.878%ileMicrosoft2026-07-14
CVE-2026-58542Windows Media Remote Code Execution VulnerabilityHIGH7.827%ileMicrosoft2026-07-14
CVE-2026-58541Microsoft DWM Core Library Elevation of Privilege VulnerabilityHIGH7.821%ileMicrosoft2026-07-14
CVE-2026-47305Visual Studio Remote Code Execution VulnerabilityHIGH7.826%ileMicrosoft2026-07-14
CVE-2026-58613Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityHIGH7.837%ileMicrosoft2026-07-14
CVE-2026-58628Windows Wireless Network Manager Elevation of Privilege VulnerabilityHIGH7.88%ileMicrosoft2026-07-14
CVE-2026-58632Windows Win32 Kernel Subsystem Elevation of Privilege VulnerabilityHIGH7.821%ileMicrosoft2026-07-14
CVE-2026-58633Desktop Window Manager Elevation of Privilege VulnerabilityHIGH7.824%ileMicrosoft2026-07-14
CVE-2026-58634Desktop Window Manager Elevation of Privilege VulnerabilityHIGH7.821%ileMicrosoft2026-07-14
CVE-2026-59856Vim: Arbitrary Code Execution via PHP Omni-CompletionHIGH7.812%ileMicrosoft2026-07-14
CVE-2026-39822Root escape via symlink plus trailing slash in osHIGH7.814%ileMicrosoft2026-07-14
CVE-2026-3842Qemu-kvm: hyperv/syndbg: missing mapped-length guard after cpu_physical_memory_map causes host oob writeHIGH7.82%ileMicrosoft2026-07-14
CVE-2026-64192bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitializedHIGH7.86%ileMicrosoft2026-07-14
CVE-2026-16493Ansible-core: argument injection in ansible-galaxy collection install via git clone (incomplete fix for cve-2026-11332)HIGH7.824%ileMicrosoft2026-07-14
CVE-2026-64402coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer()HIGH7.83%ileMicrosoft2026-07-14
CVE-2026-64313crypto: ecc - Fix carry overflow in vli multiplicationHIGH7.827%ileMicrosoft2026-07-14
CVE-2026-64455USB: chaoskey: Fix slab-use-after-free in chaoskey_release()HIGH7.88%ileMicrosoft2026-07-14
CVE-2026-64382smb: client: fix double-free in SMB2_open() replayHIGH7.828%ileMicrosoft2026-07-14
CVE-2026-64298NFSv4: include MAY_WRITE in open permission mask for O_TRUNCHIGH7.86%ileMicrosoft2026-07-14
CVE-2026-64463usb: typec: tcpci_rt1711h: unregister TCPCI port with devresHIGH7.84%ileMicrosoft2026-07-14
CVE-2026-64423ipv4: igmp: remove multicast group from hash table on device destructionHIGH7.83%ileMicrosoft2026-07-14
CVE-2026-64340USB: legousbtower: fix use-after-free on disconnect raceHIGH7.87%ileMicrosoft2026-07-14
CVE-2026-64358media: mtk-jpeg: cancel workqueue on release for supported platforms onlyHIGH7.86%ileMicrosoft2026-07-14
CVE-2026-64341USB: iowarrior: fix use-after-free on disconnect raceHIGH7.86%ileMicrosoft2026-07-14
CVE-2026-64446staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie()HIGH7.89%ileMicrosoft2026-07-14
CVE-2026-64504iio: accel: bmc150: clamp the device-reported FIFO frame countHIGH7.86%ileMicrosoft2026-07-14
CVE-2026-64304crypto: qat - validate RSA CRT component lengthsHIGH7.86%ileMicrosoft2026-07-14
CVE-2026-64483ALSA: firewire: isight: bound the sample count to the packet payloadHIGH7.88%ileMicrosoft2026-07-14
CVE-2026-64449staging: vme_user: bound slave read/write to the kern_buf sizeHIGH7.84%ileMicrosoft2026-07-14
CVE-2026-64508bpf: Support for hardening against JIT sprayingHIGH7.85%ileMicrosoft2026-07-14
CVE-2026-64391ksmbd: use opener credentials for ADS I/OHIGH7.837%ileMicrosoft2026-07-14
CVE-2026-64481ALSA: hda/cs35l41: Fix firmware load work teardownHIGH7.84%ileMicrosoft2026-07-14
CVE-2026-14191WinRAR / UnRAR RAR5 recovery-volume (.rev) out-of-bounds heap write in RecVolumes5::ReadHeaderHIGH7.856%ileMicrosoft2026-07-14
CVE-2026-63853drm/amdgpu/vcn: set no_user_fence for VCN v4.0 enc ringHIGH7.82%ileMicrosoft2026-07-14
CVE-2026-63858netfilter: nf_tables: add hook transactions for device deletionsHIGH7.82%ileMicrosoft2026-07-14
CVE-2026-63832wifi: mt76: add wcid publish check in mt76_sta_addHIGH7.813%ileMicrosoft2026-07-14
CVE-2026-53388fuse: re-lock request before replacing page cache folioHIGH7.83%ileMicrosoft2026-07-14
CVE-2026-63794KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT pathHIGH7.84%ileMicrosoft2026-07-14
CVE-2026-63804gfs2: fix use-after-free in gfs2_qd_deallocHIGH7.84%ileMicrosoft2026-07-14
CVE-2026-63831mac802154: llsec: add skb_cow_data() before in-place cryptoHIGH7.816%ileMicrosoft2026-07-14
CVE-2026-63802blk-cgroup: fix UAF in __blkcg_rstat_flush()HIGH7.83%ileMicrosoft2026-07-14
CVE-2026-64191i2c: stub: Reject I2C block transfers with invalid lengthHIGH7.83%ileMicrosoft2026-07-14
CVE-2026-64344USB: idmouse: fix use-after-free on disconnect raceHIGH7.87%ileMicrosoft2026-07-14
CVE-2026-64266fuse: re-lock request before returning from fuse_ref_folio()HIGH7.86%ileMicrosoft2026-07-14
CVE-2026-64305crypto: qat - protect service table iterations with service_lockHIGH7.86%ileMicrosoft2026-07-14
CVE-2026-64343USB: ldusb: fix use-after-free on disconnect raceHIGH7.87%ileMicrosoft2026-07-14
CVE-2026-64437ksmbd: fix use-after-free of a deferred file_lock on SMB2_CLOSE then SMB2_CANCELHIGH7.836%ileMicrosoft2026-07-14
CVE-2026-64389ksmbd: validate NTLMv2 response before updating session keyHIGH7.837%ileMicrosoft2026-07-14
CVE-2026-64342USB: iowarrior: fix use-after-free on disconnectHIGH7.87%ileMicrosoft2026-07-14
CVE-2026-64393ksmbd: run set info with opener credentialsHIGH7.839%ileMicrosoft2026-07-14
CVE-2026-64322udf: validate sparing table length as an entry count, not a byte countHIGH7.86%ileMicrosoft2026-07-14
CVE-2026-64274Input: goodix - clamp the device-reported contact countHIGH7.811%ileMicrosoft2026-07-14
CVE-2026-50493DirectX Graphics Kernel Elevation of Privilege VulnerabilityHIGH7.823%ileMicrosoft2026-07-14
CVE-2026-60002ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This HIGH7.722%ileMicrosoft2026-07-14
CVE-2026-58207NATS Server: Remote crash via integer overflow in Connz paginationHIGH7.732%ileMicrosoft2026-07-14
CVE-2026-63940KVM: SEV: Ignore Port I/O requests of length '0'HIGH7.78%ileMicrosoft2026-07-14
CVE-2026-15392DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted locationHIGH7.76%ileMicrosoft2026-07-14
CVE-2026-57985Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityHIGH7.639%ileMicrosoft2026-07-14
CVE-2026-47296Microsoft SQL Server Elevation of Privilege VulnerabilityHIGH7.540%ileMicrosoft2026-07-14
CVE-2026-59117Windows Terminal Remote Code Execution VulnerabilityHIGH7.536%ileMicrosoft2026-07-14
CVE-2026-47302.NET Denial of Service VulnerabilityHIGH7.560%ileMicrosoft2026-07-14
CVE-2026-49171Windows Speech Runtime Elevation of Privilege VulnerabilityHIGH7.512%ileMicrosoft2026-07-14
CVE-2026-50506OData for ASP.NET and ASP.NET Core Denial of Service VulnerabilityHIGH7.552%ileMicrosoft2026-07-14
CVE-2026-54983Windows Active Directory Federation Services Denial of Service VulnerabilityHIGH7.552%ileMicrosoft2026-07-14
CVE-2026-50695Windows Active Directory Federation Services Denial of Service VulnerabilityHIGH7.553%ileMicrosoft2026-07-14
CVE-2026-50696Internet Key Exchange (IKE) Protocol Denial of Service VulnerabilityHIGH7.554%ileMicrosoft2026-07-14
CVE-2026-54119Windows Active Directory Denial of Service VulnerabilityHIGH7.554%ileMicrosoft2026-07-14
CVE-2026-50524.NET Framework Denial of Service VulnerabilityHIGH7.547%ileMicrosoft2026-07-14
CVE-2026-56170ASP.NET Core Denial of Service VulnerabilityHIGH7.560%ileMicrosoft2026-07-14
CVE-2026-57984Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityHIGH7.535%ileMicrosoft2026-07-14
CVE-2026-57986Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityHIGH7.535%ileMicrosoft2026-07-14
CVE-2026-57992Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityHIGH7.546%ileMicrosoft2026-07-14
CVE-2026-58276Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityHIGH7.535%ileMicrosoft2026-07-14
CVE-2026-50652Azure Active Directory Denial of Service VulnerabilityHIGH7.564%ileMicrosoft2026-07-14
CVE-2026-50653Azure Active Directory Denial of Service VulnerabilityHIGH7.552%ileMicrosoft2026-07-14
CVE-2026-40378Windows Local Security Authority Subsystem Service (LSASS) Denial of Service VulnerabilityHIGH7.554%ileMicrosoft2026-07-14
CVE-2026-45646OData for ASP.NET and ASP.NET Core Denial of Service VulnerabilityHIGH7.552%ileMicrosoft2026-07-14
CVE-2026-49181Windows DHCP Client Elevation of Privilege VulnerabilityHIGH7.553%ileMicrosoft2026-07-14
CVE-2026-49787HTTP.sys Denial of Service VulnerabilityHIGH7.554%ileMicrosoft2026-07-14
CVE-2026-49788HTTP/2 Denial of Service VulnerabilityHIGH7.552%ileMicrosoft2026-07-14
CVE-2026-50304Windows Active Directory Federation Services Denial of Service VulnerabilityHIGH7.562%ileMicrosoft2026-07-14
CVE-2026-50328Windows Server Update Service (WSUS) Tampering VulnerabilityHIGH7.565%ileMicrosoft2026-07-14
CVE-2026-50368Windows Active Directory Federation Services Denial of Service VulnerabilityHIGH7.552%ileMicrosoft2026-07-14
CVE-2026-50330Windows Remote Desktop Client Elevation of Privilege VulnerabilityHIGH7.563%ileMicrosoft2026-07-14
CVE-2026-50355Windows Active Directory Federation Services Denial of Service VulnerabilityHIGH7.562%ileMicrosoft2026-07-14
CVE-2026-50414Windows Media Elevation of Privilege VulnerabilityHIGH7.542%ileMicrosoft2026-07-14
CVE-2026-50379Windows Media Elevation of Privilege VulnerabilityHIGH7.529%ileMicrosoft2026-07-14
CVE-2026-50463Windows Kernel Information Disclosure VulnerabilityHIGH7.551%ileMicrosoft2026-07-14
CVE-2026-50411Windows Active Directory Federation Services Denial of Service VulnerabilityHIGH7.552%ileMicrosoft2026-07-14
CVE-2026-50424Windows Domain Controller Denial of Service VulnerabilityHIGH7.554%ileMicrosoft2026-07-14
CVE-2026-50470Windows Network Policy Server SNMP Information Disclosure VulnerabilityHIGH7.551%ileMicrosoft2026-07-14
CVE-2026-50500Windows Netlogon Elevation of Privilege VulnerabilityHIGH7.549%ileMicrosoft2026-07-14
CVE-2026-50505Windows Message Queuing Service (MSMQ) Remote Code Execution VulnerabilityHIGH7.540%ileMicrosoft2026-07-14
CVE-2026-50496Windows Network Policy Server SNMP Information Disclosure VulnerabilityHIGH7.563%ileMicrosoft2026-07-14
CVE-2026-50525.NET Denial of Service VulnerabilityHIGH7.546%ileMicrosoft2026-07-14
CVE-2026-50527.NET Framework Denial of Service VulnerabilityHIGH7.554%ileMicrosoft2026-07-14
CVE-2026-50647Active Directory Federation Server Denial of Service VulnerabilityHIGH7.562%ileMicrosoft2026-07-14
CVE-2026-50648.NET Framework Denial of Service VulnerabilityHIGH7.554%ileMicrosoft2026-07-14
CVE-2026-50651.NET Denial of Service VulnerabilityHIGH7.554%ileMicrosoft2026-07-14
CVE-2026-50685Windows DHCP Server Remote Code Execution VulnerabilityHIGH7.546%ileMicrosoft2026-07-14
CVE-2026-56648Windows NFS Server Elevation of Privilege VulnerabilityHIGH7.538%ileMicrosoft2026-07-14
CVE-2026-57089Windows SMB Server Network Transport Driver (srvnet.sys) Remote Code Execution VulnerabilityHIGH7.546%ileMicrosoft2026-07-14
CVE-2026-57108.NET Denial of Service VulnerabilityHIGH7.563%ileMicrosoft2026-07-14
CVE-2026-57975Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityHIGH7.537%ileMicrosoft2026-07-14
CVE-2026-58290Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityHIGH7.516%ileMicrosoft2026-07-14
CVE-2026-58292Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityHIGH7.520%ileMicrosoft2026-07-14
CVE-2026-58294Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityHIGH7.527%ileMicrosoft2026-07-14
CVE-2026-58299Microsoft Edge for Android Remote Code Execution VulnerabilityHIGH7.519%ileMicrosoft2026-07-14
CVE-2026-58531Windows SMB Elevation of Privilege VulnerabilityHIGH7.545%ileMicrosoft2026-07-14
CVE-2026-58627Windows DHCP Server Denial of Service VulnerabilityHIGH7.555%ileMicrosoft2026-07-14
CVE-2026-9545exposing HTTP/3 early dataHIGH7.519%ileMicrosoft2026-07-14
CVE-2026-12413IKEv2 Denial of Service via malformed fragmentationHIGH7.545%ileMicrosoft2026-07-14
CVE-2026-8932incomplete mTLS config matching in conn reuseHIGH7.532%ileMicrosoft2026-07-14
CVE-2026-38969ruby webrick through v1.9.2 WEBrick reparses trailer Content-Length into canonical request state, enabling request smuggHIGH7.5—Microsoft2026-07-14
CVE-2026-20214ClamAV FSG File Format Processing Out-of-Bounds Memory Corruption VulnerabilityHIGH7.544%ileMicrosoft2026-07-14
CVE-2026-20215ClamAV 7Zip File Format Processing Out-of-Bounds Memory Corruption VulnerabilityHIGH7.540%ileMicrosoft2026-07-14
CVE-2026-20216ClamAV InstallShield File Format Processing Resource Exhaustion VulnerabilityHIGH7.540%ileMicrosoft2026-07-14
CVE-2026-20217ClamAV PESpin File Format Processing Out-of-Bounds Memory Corruption VulnerabilityHIGH7.540%ileMicrosoft2026-07-14
CVE-2026-20244ClamAV DMG File Processing Denial of Service VulnerabilityHIGH7.540%ileMicrosoft2026-07-14
CVE-2026-59925inline_parser: quadratic-time parsing on long runs of `**x**` and `***x***` emphasis pairsHIGH7.534%ileMicrosoft2026-07-14
CVE-2026-57432Perl versions through 5.43.10 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in packHIGH7.511%ileMicrosoft2026-07-14
CVE-2026-57219RabbitMQ: Unauthenticated disclosure of OAuth client credentials via an HTTP API endpoint with certain less common OAuthHIGH7.552%ileMicrosoft2026-07-14
CVE-2026-48863Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of serviceHIGH7.538%ileMicrosoft2026-07-14
CVE-2026-60081DBI::ProfileData versions before 1.651 for Perl do not limit the path indexHIGH7.531%ileMicrosoft2026-07-14
CVE-2026-59884pyasn1 BER/CER/DER decoder denial of service via unbounded long-form tag IDsHIGH7.528%ileMicrosoft2026-07-14
CVE-2026-59886pyasn1: Uncontrolled resource consumption when converting decoded REAL valuesHIGH7.526%ileMicrosoft2026-07-14
CVE-2026-62309CoreDNS: proxyproto plugin panics on PPv2 datagram with non-UDP transport — single 28-byte packet remote DoSHIGH7.530%ileMicrosoft2026-07-14
CVE-2026-38754A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of ServHIGH7.515%ileMicrosoft2026-07-14
CVE-2026-53375drm/amdgpu/vce: Prevent partial address patchesHIGH7.52%ileMicrosoft2026-07-14
CVE-2026-63836batman-adv: tp_meter: avoid divide-by-zero for dec_cwndHIGH7.57%ileMicrosoft2026-07-14
CVE-2026-55973'dns-error-reporting: yes' leads to stack buffer overflowHIGH7.521%ileMicrosoft2026-07-14
CVE-2026-40691Packet of death for DNSCrypt over TCPHIGH7.522%ileMicrosoft2026-07-14
CVE-2026-32665Remote DNS-over-QUIC denial of service due to `quic-size` budget bypassHIGH7.521%ileMicrosoft2026-07-14
CVE-2026-56852Infinite loop on invalid input in golang.org/x/textHIGH7.537%ileMicrosoft2026-07-14
CVE-2026-13204Unexpected exit in certain situations with NSEC and NSEC3 both presentHIGH7.541%ileMicrosoft2026-07-14
CVE-2026-11605Unnecessary validation of DNSSEC signed recordsHIGH7.542%ileMicrosoft2026-07-14
CVE-2026-11331Potential wildcard CNAME RPZ policy bypassHIGH7.534%ileMicrosoft2026-07-14
CVE-2026-11721Cache poisoning possible with label count discrepancy, RRSIG, and wildcardsHIGH7.531%ileMicrosoft2026-07-14
CVE-2026-12617Record ordering based unexpected exit with CNAME or DNAMEHIGH7.539%ileMicrosoft2026-07-14
CVE-2026-46600Parsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessageHIGH7.526%ileMicrosoft2026-07-14
CVE-2026-66034libssh2 Heap Out-of-Bounds Read via publickey subsystemHIGH7.517%ileMicrosoft2026-07-14
CVE-2026-64383smb: client: fix double-free in SMB2_flush() replayHIGH7.537%ileMicrosoft2026-07-14
CVE-2026-12064proto-default skips SSH verificationHIGH7.526%ileMicrosoft2026-07-14
CVE-2026-20213ClamAV PE File Format Processing Out-of-Bounds Memory Corruption VulnerabilityHIGH7.544%ileMicrosoft2026-07-14
CVE-2026-20243ClamAV ALZ Archive Processing Denial of Service VulnerabilityHIGH7.540%ileMicrosoft2026-07-14
CVE-2026-59928Mistune block_parser: quadratic-time parsing on long lists of repeated reference-link definitionsHIGH7.534%ileMicrosoft2026-07-14
CVE-2026-59922Mistune plugins/formatting: quadratic-time parsing on long runs of `~~x~~`, `==x==`, and `^^x^^` markers (strikethrough HIGH7.534%ileMicrosoft2026-07-14
CVE-2026-59869js-yaml: YAML merge-key chains can force quadratic CPU consumptionHIGH7.535%ileMicrosoft2026-07-14
CVE-2026-58250NATS Server: Pre-auth server crash via double INFO in leafnode handshakeHIGH7.540%ileMicrosoft2026-07-14
CVE-2026-15308Incremental HTMLParser feed() allows CPU-exhaustion DoS via repeated unterminated markup declarationsHIGH7.543%ileMicrosoft2026-07-14
CVE-2026-59873node-tar: Decompression/parse DoS via unlimited inputHIGH7.535%ileMicrosoft2026-07-14
CVE-2026-59874node-tar: Negative tar entry size causes infinite loop in archive replaceHIGH7.534%ileMicrosoft2026-07-14
CVE-2026-57220RabbitMQ: Stream listener does not enforce configured frame-size limit during authentication, permitting unauth'd mem-exHIGH7.543%ileMicrosoft2026-07-14
CVE-2026-15711Libsoup: soupwebsocketconnection: libsoup: websocket remote denial of service via oversized control frame protocol violaHIGH7.535%ileMicrosoft2026-07-14
CVE-2026-15709Soupwebsocketextensiondeflate: libsoup: libsoup: websocket permessage-deflate unbounded decompression remote denial of sHIGH7.543%ileMicrosoft2026-07-14
CVE-2026-59885pyasn1: Quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows denial of serviceHIGH7.526%ileMicrosoft2026-07-14
CVE-2026-38755A heap overflow in the evalcommand() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of SerHIGH7.511%ileMicrosoft2026-07-14
CVE-2026-62389ws < 8.21.1 Default maxFragments Allows Memory Exhaustion DoSHIGH7.5—Microsoft2026-07-14
CVE-2026-63793ntfs: serialize volume label accessesHIGH7.52%ileMicrosoft2026-07-14
CVE-2026-53400i2c: core: fix adapter registration raceHIGH7.51%ileMicrosoft2026-07-14
CVE-2026-63872esp: fix page frag reference leak on skb_to_sgvec failureHIGH7.520%ileMicrosoft2026-07-14
CVE-2026-44690Cross-zone wildcard cache poisoning via RRSIG.labels manipulationHIGH7.54%ileMicrosoft2026-07-14
CVE-2026-11622Potential memory usage beyond configured limitsHIGH7.541%ileMicrosoft2026-07-14
CVE-2026-47063Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SEHIGH7.517%ileMicrosoft2026-07-14
CVE-2026-66035libssh2 Heap Buffer Overflow via ETM Cipher NegotiationHIGH7.524%ileMicrosoft2026-07-14
CVE-2026-66033libssh2 Integer Underflow DoS via AES-GCM Cipher NegotiationHIGH7.530%ileMicrosoft2026-07-14
CVE-2026-66373Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code executioHIGH7.538%ileMicrosoft2026-07-14
CVE-2026-54127Windows Hyper-V Elevation of Privilege VulnerabilityHIGH7.415%ileMicrosoft2026-07-14
CVE-2026-57991Microsoft Edge (Chromium-based) Information Disclosure VulnerabilityHIGH7.451%ileMicrosoft2026-07-14
CVE-2026-57990Microsoft Edge (Chromium-based) Information Disclosure VulnerabilityHIGH7.457%ileMicrosoft2026-07-14
CVE-2026-57993Microsoft Edge (Chromium-based) Spoofing VulnerabilityHIGH7.447%ileMicrosoft2026-07-14
CVE-2026-57989Microsoft Edge (Chromium-based) Information Disclosure VulnerabilityHIGH7.435%ileMicrosoft2026-07-14
CVE-2026-64112rbd: eliminate a race in lock_dwork draining on unmapHIGH7.43%ileMicrosoft2026-07-14
CVE-2026-58640Windows NTFS Remote Code Execution VulnerabilityHIGH7.315%ileMicrosoft2026-07-14
CVE-2026-49789Windows NTFS Elevation of Privilege VulnerabilityHIGH7.320%ileMicrosoft2026-07-14
CVE-2026-49790Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege VulnerabilityHIGH7.317%ileMicrosoft2026-07-14
CVE-2026-50364Windows Backup Service Elevation of Privilege VulnerabilityHIGH7.327%ileMicrosoft2026-07-14
CVE-2026-50482Windows NTFS Remote Code Execution VulnerabilityHIGH7.317%ileMicrosoft2026-07-14
CVE-2026-55021Microsoft SharePoint Server Spoofing VulnerabilityHIGH7.348%ileMicrosoft2026-07-14
CVE-2026-55034Microsoft SharePoint Server Spoofing VulnerabilityHIGH7.355%ileMicrosoft2026-07-14
CVE-2026-55126Microsoft SharePoint Server Spoofing VulnerabilityHIGH7.342%ileMicrosoft2026-07-14
CVE-2026-53362ipv6: account for fraggap on the paged allocation pathHIGH7.318%ileMicrosoft2026-07-14
CVE-2026-63806KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned()HIGH7.34%ileMicrosoft2026-07-14
CVE-2026-12080Qemu-kvm: qemu-guest-agent: local privilege escalation via symlink attack in guest-ssh-add-authorized-keysHIGH7.34%ileMicrosoft2026-07-14
CVE-2026-58298Microsoft Edge (Chromium-based) Spoofing VulnerabilityHIGH7.215%ileMicrosoft2026-07-14
CVE-2026-49165Microsoft Windows App Store Information Disclosure VulnerabilityHIGH7.116%ileMicrosoft2026-07-14
CVE-2026-55144Windows Cryptography API: Next Generation (CNG) Tampering VulnerabilityHIGH7.16%ileMicrosoft2026-07-14
CVE-2026-56193Microsoft Office Information Disclosure VulnerabilityHIGH7.129%ileMicrosoft2026-07-14
CVE-2026-57988Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityHIGH7.142%ileMicrosoft2026-07-14
CVE-2026-49791Windows Routing and Remote Access Service (RRAS) Elevation of Privilege VulnerabilityHIGH7.120%ileMicrosoft2026-07-14
CVE-2026-50354Windows Kernel Elevation of Privilege VulnerabilityHIGH7.115%ileMicrosoft2026-07-14
CVE-2026-50428Windows Container Isolation FS Filter Driver (unionfs.sys) Information Disclosure VulnerabilityHIGH7.123%ileMicrosoft2026-07-14
CVE-2026-50451Windows Routing and Remote Access Service (RRAS) Elevation of Privilege VulnerabilityHIGH7.113%ileMicrosoft2026-07-14
CVE-2026-50465Windows DNS Client Tampering VulnerabilityHIGH7.112%ileMicrosoft2026-07-14
CVE-2026-50682Active Directory Denial of Service VulnerabilityHIGH7.156%ileMicrosoft2026-07-14
CVE-2026-55122Microsoft Excel Information Disclosure VulnerabilityHIGH7.126%ileMicrosoft2026-07-14
CVE-2026-57101Visual Studio Code Security Feature Bypass VulnerabilityHIGH7.136%ileMicrosoft2026-07-14
CVE-2026-57977Microsoft Edge (Chromium-based) Spoofing VulnerabilityHIGH7.134%ileMicrosoft2026-07-14
CVE-2026-58296Microsoft Edge for Android Information Disclosure VulnerabilityHIGH7.123%ileMicrosoft2026-07-14
CVE-2026-58297Microsoft Edge for Android Information Disclosure VulnerabilityHIGH7.123%ileMicrosoft2026-07-14
CVE-2026-58529Windows Active Directory Federation Services (ADFS) Information Disclosure VulnerabilityHIGH7.158%ileMicrosoft2026-07-14
CVE-2026-56171Windows Remote Desktop Protocol (RDP) Information Disclosure VulnerabilityHIGH7.139%ileMicrosoft2026-07-14
CVE-2026-53343ARM: 9475/1: entry: use byte load for KASAN VMAP stack shadowHIGH7.12%ileMicrosoft2026-07-14
CVE-2026-53329drm/amd/display: Use krealloc_array() in dal_vector_reserve()HIGH7.13%ileMicrosoft2026-07-14
CVE-2026-63810block: Avoid mounting the bdev pseudo-filesystem in userspaceHIGH7.17%ileMicrosoft2026-07-14
CVE-2026-63826fbdev: fix use-after-free in store_modes()HIGH7.15%ileMicrosoft2026-07-14
CVE-2026-63796ocfs2: reject oversized group bitmap descriptorsHIGH7.137%ileMicrosoft2026-07-14
CVE-2026-63801tipc: fix slab-use-after-free Read in tipc_aead_decrypt_doneHIGH7.139%ileMicrosoft2026-07-14
CVE-2026-63808exfat: fix potential use-after-free in exfat_find_dir_entry()HIGH7.140%ileMicrosoft2026-07-14
CVE-2026-64133ALSA: asihpi: Fix potential OOB array access at reading cacheHIGH7.13%ileMicrosoft2026-07-14
CVE-2026-63879drm/amdgpu: fix amdgpu_hmm_range_get_pagesHIGH7.16%ileMicrosoft2026-07-14
CVE-2026-64146erofs: fix metabuf leak in inode xattr initializationHIGH7.16%ileMicrosoft2026-07-14
CVE-2026-64189netfilter: ipset: fix race between dump and ip_set_list resizeHIGH7.12%ileMicrosoft2026-07-14
CVE-2026-64219drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_asyncHIGH7.13%ileMicrosoft2026-07-14
CVE-2026-64294mm: do file ownership checks with the proper mount idmapHIGH7.110%ileMicrosoft2026-07-14
CVE-2026-64379smb: client: mask server-provided mode to 07777 in modefromsidHIGH7.123%ileMicrosoft2026-07-14
CVE-2026-64210net/mlx5e: xsk: Fix unlocked writing to ICOSQHIGH7.127%ileMicrosoft2026-07-14
CVE-2026-64212wifi: iwlwifi: mld: don't dereference a pointer before NULL checking itHIGH7.16%ileMicrosoft2026-07-14
CVE-2026-64334USB: serial: digi_acceleport: fix hard lockup on disconnectHIGH7.17%ileMicrosoft2026-07-14
CVE-2026-64227ACPI: driver: Check ACPI_COMPANION() against NULL during probeHIGH7.16%ileMicrosoft2026-07-14
CVE-2026-64245fbdev: modedb: fix a possible UAF in fb_find_mode()HIGH7.16%ileMicrosoft2026-07-14
CVE-2026-64286KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPUHIGH7.17%ileMicrosoft2026-07-14
CVE-2026-64312crypto: pcrypt - restore callback for non-parallel fallbackHIGH7.140%ileMicrosoft2026-07-14
CVE-2026-64510ACPI: NFIT: core: Fix acpi_nfit_init() error cleanupHIGH7.12%ileMicrosoft2026-07-14
CVE-2026-64470Bluetooth: btusb: fix use-after-free on marvell probe failureHIGH7.18%ileMicrosoft2026-07-14
CVE-2026-64355bpf: Reject fragmented frames in devmapHIGH7.140%ileMicrosoft2026-07-14
CVE-2026-64496iio: event: Fix event FIFO reset raceHIGH7.13%ileMicrosoft2026-07-14
CVE-2026-64301regulator: scmi: fix of_node refcount leak in scmi_regulator_probe()HIGH7.111%ileMicrosoft2026-07-14
CVE-2026-64471Bluetooth: btusb: fix use-after-free on registration failureHIGH7.18%ileMicrosoft2026-07-14
CVE-2026-64469binder: fix UAF in binder_thread_release()HIGH7.13%ileMicrosoft2026-07-14
CVE-2026-64405Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn()HIGH7.17%ileMicrosoft2026-07-14
CVE-2026-64411netfilter: ebtables: terminate table name before find_table_lock()HIGH7.13%ileMicrosoft2026-07-14
CVE-2026-64273Input: iforce - bound the device-reported force-feedback effect indexHIGH7.111%ileMicrosoft2026-07-14
CVE-2026-64333USB: serial: digi_acceleport: fix write buffer corruptionHIGH7.16%ileMicrosoft2026-07-14
CVE-2026-64268RDMA/siw: bound Read Response placement to the RREAD lengthHIGH7.149%ileMicrosoft2026-07-14
CVE-2026-64316crypto: caam - use print_hex_dump_devel to guard key hex dumpsHIGH7.17%ileMicrosoft2026-07-14
CVE-2026-64386smb: client: fix query_info() replay double-freeHIGH7.137%ileMicrosoft2026-07-14
CVE-2026-64505usb: gadget: function: rndis: add length check for headerHIGH7.112%ileMicrosoft2026-07-14
CVE-2026-64399ksmbd: add permission checks for FSCTL_DUPLICATE_EXTENTS_TO_FILEHIGH7.140%ileMicrosoft2026-07-14
CVE-2026-64361hfs/hfsplus: fix u32 overflow in check_and_correct_requested_lengthHIGH7.13%ileMicrosoft2026-07-14
CVE-2026-64419mm/shrinker: do not hold RCU lock in shrinker_debugfs_count_show()HIGH7.17%ileMicrosoft2026-07-14
CVE-2026-64445staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth()HIGH7.124%ileMicrosoft2026-07-14
CVE-2026-64503iio: accel: kxsd9: fix runtime PM imbalance on write_raw() errorHIGH7.17%ileMicrosoft2026-07-14
CVE-2026-64392ksmbd: use opener credentials for delete-on-closeHIGH7.138%ileMicrosoft2026-07-14
CVE-2026-64440staging: rtl8723bs: fix OOB write in HT_caps_handler()HIGH7.118%ileMicrosoft2026-07-14
CVE-2026-64435audit: Fix data races of skb_queue_len() readers on audit_queueHIGH7.135%ileMicrosoft2026-07-14
CVE-2026-64296exfat: bound uniname advance in exfat_find_dir_entry()HIGH7.16%ileMicrosoft2026-07-14
CVE-2026-64329usb: typec: ucsi: ccg: Fix use-after-free of ucsi on removeHIGH7.17%ileMicrosoft2026-07-14
CVE-2026-64479ALSA: seq: Fix uninitialised heap leak in snd_seq_event_dup()HIGH7.18%ileMicrosoft2026-07-14
CVE-2026-64436net: af_key: initialize alg_key_len for IPComp statesHIGH7.12%ileMicrosoft2026-07-14
CVE-2026-64385smb: client: fix double-free in SMB2_ioctl() replayHIGH7.137%ileMicrosoft2026-07-14
CVE-2026-64514userfaultfd: gate must_wait writability check on pte_present()HIGH7.18%ileMicrosoft2026-07-14
CVE-2026-64421media: nxp: imx8-isi: Fix use-after-free on removeHIGH7.16%ileMicrosoft2026-07-14
CVE-2026-64401smb: client: resolve SWN tcon from live registrationsHIGH7.13%ileMicrosoft2026-07-14
CVE-2026-64315crypto: caam - use print_hex_dump_devel to guard key hex dumpsHIGH7.14%ileMicrosoft2026-07-14
CVE-2026-64497iio: chemical: scd30: Cleanup initializations and fix sign-extension bugHIGH7.18%ileMicrosoft2026-07-14
CVE-2026-64335USB: serial: digi_acceleport: fix broken rx after throttleHIGH7.17%ileMicrosoft2026-07-14
CVE-2026-64384smb: client: fix change notify replay double-freeHIGH7.137%ileMicrosoft2026-07-14
CVE-2026-64375proc: protect ptrace_may_access() with exec_update_lock (FD links)HIGH7.13%ileMicrosoft2026-07-14
CVE-2026-53354arm64: errata: Mitigate TLBI errata on various Arm CPUsHIGH7.12%ileMicrosoft2026-07-14
CVE-2026-53356drm/i915/gem: Fix phys BO pread/pwrite with offsetHIGH7.12%ileMicrosoft2026-07-14
CVE-2026-63805crypto: nx - fix nx_crypto_ctx_exit argumentHIGH7.13%ileMicrosoft2026-07-14
CVE-2026-53402fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font()HIGH7.13%ileMicrosoft2026-07-14
CVE-2026-53368f2fs: fix fsck inconsistency caused by incorrect nat_entry flag usageHIGH7.12%ileMicrosoft2026-07-14
CVE-2026-63817f2fs: validate compress cache inode only when enabledHIGH7.13%ileMicrosoft2026-07-14
CVE-2026-53390ksmbd: fix out-of-bounds read in smb_check_perm_dacl()HIGH7.138%ileMicrosoft2026-07-14
CVE-2026-53383ksmbd: reject non-VALID session in compound request branchHIGH7.149%ileMicrosoft2026-07-14
CVE-2026-64015security/keys: fix missed RCU read section on lookupHIGH7.13%ileMicrosoft2026-07-14
CVE-2026-64117wifi: mac80211: capture fast-RX rate before mesh reuses skb->cbHIGH7.114%ileMicrosoft2026-07-14
CVE-2026-63961usb: typec: altmodes/displayport: validate count before reading Status Update VDOHIGH7.111%ileMicrosoft2026-07-14
CVE-2026-63963usb: typec: tcpm: validate VDO count in Discover Identity ACK handlersHIGH7.110%ileMicrosoft2026-07-14
CVE-2026-64154drm/msm/adreno: Fix a reference leak in a6xx_gpu_init()HIGH7.16%ileMicrosoft2026-07-14
CVE-2026-63978net/handshake: Drain pending requests at net namespace exitHIGH7.145%ileMicrosoft2026-07-14
CVE-2026-39879SQL injection in syslog-ng SQL destionation driverHIGH7.17%ileMicrosoft2026-07-14
CVE-2026-64303spi: fsl-lpspi: terminate the RX channel on TX prepare failure pathHIGH7.149%ileMicrosoft2026-07-14
CVE-2026-64213hwmon: (lm90) Add lock protection to lm90_alertHIGH7.16%ileMicrosoft2026-07-14
CVE-2026-64255wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlersHIGH7.113%ileMicrosoft2026-07-14
CVE-2026-64330usb: typec: tcpm: Validate SVID index in svdm_consume_modes()HIGH7.17%ileMicrosoft2026-07-14
CVE-2026-64403Bluetooth: L2CAP: validate option length before reading conf opt valueHIGH7.118%ileMicrosoft2026-07-14
CVE-2026-64454usb: dwc3: run gadget disconnect from sleepable suspend contextHIGH7.18%ileMicrosoft2026-07-14
CVE-2026-64407Bluetooth: btnxpuart: Fix out-of-bounds firmware read in nxp_recv_fw_req_v3()HIGH7.16%ileMicrosoft2026-07-14
CVE-2026-64336USB: serial: keyspan_pda: fix information leakHIGH7.17%ileMicrosoft2026-07-14
CVE-2026-64495iio: gyro: bmg160: bail out when bandwidth/filter is not in tableHIGH7.19%ileMicrosoft2026-07-14
CVE-2026-64362HID: lg-g15: cancel pending work on remove to fix a use-after-freeHIGH7.17%ileMicrosoft2026-07-14
CVE-2026-64395ksmbd: require source read access for duplicate extentsHIGH7.133%ileMicrosoft2026-07-14
CVE-2026-64476vfio/pci: Latch disable_idle_d3 per deviceHIGH7.18%ileMicrosoft2026-07-14
CVE-2026-64376firmware_loader: fix device reference leak in firmware_upload_register()HIGH7.17%ileMicrosoft2026-07-14
CVE-2026-64337usb: mtu3: unmap request DMA on queue failureHIGH7.111%ileMicrosoft2026-07-14
CVE-2026-64359nilfs2: reject CLEAN_SEGMENTS ioctl with out-of-range segment numbersHIGH7.17%ileMicrosoft2026-07-14
CVE-2026-64365HID: letsketch: fix UAF on inrange_timer at driver unbindHIGH7.17%ileMicrosoft2026-07-14
CVE-2026-64280fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region()HIGH7.16%ileMicrosoft2026-07-14
CVE-2026-64347usb: gadget: composite: fix dead empty check in the USB_DT_OTG handlerHIGH7.17%ileMicrosoft2026-07-14
CVE-2026-64270Input: mms114 - reject an oversized device packet sizeHIGH7.110%ileMicrosoft2026-07-14
CVE-2026-64372cpufreq: pcc: fix use-after-free and double free in _OSC evaluationHIGH7.13%ileMicrosoft2026-07-14
CVE-2026-64428gpio: sch: use raw_spinlock_t in the irq startup pathHIGH7.17%ileMicrosoft2026-07-14
CVE-2026-64494iio: light: gp2ap002: fix runtime PM leak on read errorHIGH7.17%ileMicrosoft2026-07-14
CVE-2026-64472vfio/mlx5: Fix racy bitfields and tighten struct layoutHIGH7.18%ileMicrosoft2026-07-14
CVE-2026-48572Windows App Package Installer Elevation of Privilege VulnerabilityHIGH7.06%ileMicrosoft2026-07-14
CVE-2026-48571Windows App Package Installer Elevation of Privilege VulnerabilityHIGH7.012%ileMicrosoft2026-07-14
CVE-2026-49162Microsoft Brokering File System Elevation of Privilege VulnerabilityHIGH7.010%ileMicrosoft2026-07-14
CVE-2026-49784Microsoft Windows App Store Elevation of Privilege VulnerabilityHIGH7.05%ileMicrosoft2026-07-14
CVE-2026-54129Windows Hyper-V Elevation of Privilege VulnerabilityHIGH7.012%ileMicrosoft2026-07-14
CVE-2026-54989Quality Windows Audio/Video Experience (QWAVE) Elevation of Privilege VulnerabilityHIGH7.010%ileMicrosoft2026-07-14
CVE-2026-54111Universal Print Management Service Elevation of Privilege VulnerabilityHIGH7.05%ileMicrosoft2026-07-14
CVE-2026-54996Windows USB Print Driver Elevation of Privilege VulnerabilityHIGH7.05%ileMicrosoft2026-07-14
CVE-2026-58526Windows Storage Elevation of Privilege VulnerabilityHIGH7.04%ileMicrosoft2026-07-14
CVE-2026-58598Windows Backup Service Elevation of Privilege VulnerabilityHIGH7.09%ileMicrosoft2026-07-14
CVE-2026-49183Windows Clipboard Server Elevation of Privilege VulnerabilityHIGH7.05%ileMicrosoft2026-07-14
CVE-2026-49802Windows USB Print Driver Elevation of Privilege VulnerabilityHIGH7.05%ileMicrosoft2026-07-14
CVE-2026-49806Windows USB Print Driver Elevation of Privilege VulnerabilityHIGH7.05%ileMicrosoft2026-07-14
CVE-2026-49805Win32k Elevation of Privilege VulnerabilityHIGH7.087%ileMicrosoft2026-07-14
CVE-2026-49803Windows AppX Deployment Extensions Elevation of Privilege VulnerabilityHIGH7.05%ileMicrosoft2026-07-14
CVE-2026-50323Windows Runtime Elevation of Privilege VulnerabilityHIGH7.012%ileMicrosoft2026-07-14
CVE-2026-50296DirectX Graphics Kernel Elevation of Privilege VulnerabilityHIGH7.010%ileMicrosoft2026-07-14
CVE-2026-50297Win32k Elevation of Privilege VulnerabilityHIGH7.012%ileMicrosoft2026-07-14
CVE-2026-50325Win32k Elevation of Privilege VulnerabilityHIGH7.012%ileMicrosoft2026-07-14
CVE-2026-50356Microsoft Windows App Store Elevation of Privilege VulnerabilityHIGH7.05%ileMicrosoft2026-07-14
CVE-2026-50384Windows Clip Service Elevation of Privilege VulnerabilityHIGH7.05%ileMicrosoft2026-07-14
CVE-2026-50372Windows Redirected Drive Buffering System Elevation of Privilege VulnerabilityHIGH7.016%ileMicrosoft2026-07-14
CVE-2026-50392Windows Secure Kernel Mode Elevation of Privilege VulnerabilityHIGH7.012%ileMicrosoft2026-07-14
CVE-2026-50393Windows Kernel-Mode Driver Elevation of Privilege VulnerabilityHIGH7.010%ileMicrosoft2026-07-14
CVE-2026-50307Windows TCP/IP Elevation of Privilege VulnerabilityHIGH7.010%ileMicrosoft2026-07-14
CVE-2026-50396Windows Kernel-Mode Driver Elevation of Privilege VulnerabilityHIGH7.010%ileMicrosoft2026-07-14
CVE-2026-50390Windows Kernel Elevation of Privilege VulnerabilityHIGH7.022%ileMicrosoft2026-07-14
CVE-2026-50452Windows Runtime Elevation of Privilege VulnerabilityHIGH7.018%ileMicrosoft2026-07-14
CVE-2026-50348Windows Runtime Elevation of Privilege VulnerabilityHIGH7.026%ileMicrosoft2026-07-14
CVE-2026-50345Windows Runtime Elevation of Privilege VulnerabilityHIGH7.09%ileMicrosoft2026-07-14
CVE-2026-50322Windows Runtime Elevation of Privilege VulnerabilityHIGH7.09%ileMicrosoft2026-07-14
CVE-2026-50404Windows Media Elevation of Privilege VulnerabilityHIGH7.05%ileMicrosoft2026-07-14
CVE-2026-50358Windows Media Elevation of Privilege VulnerabilityHIGH7.018%ileMicrosoft2026-07-14
CVE-2026-50410Windows Runtime Elevation of Privilege VulnerabilityHIGH7.010%ileMicrosoft2026-07-14
CVE-2026-50449Windows Runtime Elevation of Privilege VulnerabilityHIGH7.010%ileMicrosoft2026-07-14
CVE-2026-50371Windows LUA File Virtualization Filter Driver Elevation of Privilege VulnerabilityHIGH7.09%ileMicrosoft2026-07-14
CVE-2026-50403Windows Runtime Elevation of Privilege VulnerabilityHIGH7.05%ileMicrosoft2026-07-14
CVE-2026-50397Windows Kernel Elevation of Privilege VulnerabilityHIGH7.010%ileMicrosoft2026-07-14
CVE-2026-50406Windows Backup Engine Elevation of Privilege VulnerabilityHIGH7.018%ileMicrosoft2026-07-14
CVE-2026-50459Windows Kernel Elevation of Privilege VulnerabilityHIGH7.010%ileMicrosoft2026-07-14
CVE-2026-50490Windows Installer Elevation of Privilege VulnerabilityHIGH7.018%ileMicrosoft2026-07-14
CVE-2026-50491Code Integrity DLL (ci.dll) Elevation of Privilege VulnerabilityHIGH7.018%ileMicrosoft2026-07-14
CVE-2026-50503Windows Runtime Elevation of Privilege VulnerabilityHIGH7.09%ileMicrosoft2026-07-14
CVE-2026-50526.NET Tampering VulnerabilityHIGH7.015%ileMicrosoft2026-07-14
CVE-2026-50658Microsoft Defender for Endpoint for Mac Elevation of Privilege VulnerabilityHIGH7.09%ileMicrosoft2026-07-14
CVE-2026-50669Windows Telephony Server Elevation of Privilege VulnerabilityHIGH7.05%ileMicrosoft2026-07-14
CVE-2026-50672Windows NTFS Elevation of Privilege VulnerabilityHIGH7.05%ileMicrosoft2026-07-14
CVE-2026-50674Windows USB Print Driver Elevation of Privilege VulnerabilityHIGH7.018%ileMicrosoft2026-07-14
CVE-2026-50359Microsoft XML Core Services Elevation of Privilege VulnerabilityHIGH7.018%ileMicrosoft2026-07-14
CVE-2026-56173Windows WebView Elevation of Privilege VulnerabilityHIGH7.016%ileMicrosoft2026-07-14
CVE-2026-56183Windows MIDI Service Module Elevation of Privileges VulnerabilityHIGH7.016%ileMicrosoft2026-07-14
CVE-2026-56187Windows MIDI Service Module Elevation of Privileges VulnerabilityHIGH7.018%ileMicrosoft2026-07-14
CVE-2026-57093Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityHIGH7.018%ileMicrosoft2026-07-14
CVE-2026-58544Windows Management Services Elevation of Privilege VulnerabilityHIGH7.014%ileMicrosoft2026-07-14
CVE-2026-58619Windows Sensor Data Service Elevation of Privilege VulnerabilityHIGH7.014%ileMicrosoft2026-07-14
CVE-2026-58629DirectX Graphics Kernel Elevation of Privilege VulnerabilityHIGH7.014%ileMicrosoft2026-07-14
CVE-2026-58637Windows Client-Side Caching Elevation of Privilege VulnerabilityHIGH7.014%ileMicrosoft2026-07-14
CVE-2026-53359KVM: x86: Fix shadow paging use-after-free due to unexpected roleHIGH7.056%ileMicrosoft2026-07-14
CVE-2026-64530net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handleHIGH7.041%ileMicrosoft2026-07-14
CVE-2026-53401fbdev: omap2: fix use-after-free in omapfb_mmapHIGH7.03%ileMicrosoft2026-07-14
CVE-2026-64377cpufreq: qcom-cpufreq-hw: Fix possible double freeHIGH7.06%ileMicrosoft2026-07-14
CVE-2026-49168Storage Spaces Direct Elevation of Privilege VulnerabilityMEDIUM6.823%ileMicrosoft2026-07-14
CVE-2026-54132Windows Kernel Elevation of Privilege VulnerabilityMEDIUM6.823%ileMicrosoft2026-07-14
CVE-2026-50299Windows Storage Spaces Direct Remote Code Execution VulnerabilityMEDIUM6.825%ileMicrosoft2026-07-14
CVE-2026-50298Windows Spaceport.sys Elevation of Privilege VulnerabilityMEDIUM6.825%ileMicrosoft2026-07-14
CVE-2026-50426Windows DNS Server Remote Code Execution VulnerabilityMEDIUM6.829%ileMicrosoft2026-07-14
CVE-2026-50492Windows Resilient File System (ReFS) Remote Code Execution VulnerabilityMEDIUM6.834%ileMicrosoft2026-07-14
CVE-2026-50668Windows Resilient File System (ReFS) Elevation of Privilege VulnerabilityMEDIUM6.823%ileMicrosoft2026-07-14
CVE-2026-58522Microsoft Edge for Android Information Disclosure VulnerabilityMEDIUM6.825%ileMicrosoft2026-07-14
CVE-2026-58528Windows USB Audio Class Driver Information Disclosure VulnerabilityMEDIUM6.839%ileMicrosoft2026-07-14
CVE-2026-58208NATS Server: MQTT-over-WebSocket Path Can Crash WebSocket-Only JetStream Servers Before MQTT Is EnabledMEDIUM6.826%ileMicrosoft2026-07-14
CVE-2026-10723Incorrect acceptance of NSEC3 recordsMEDIUM6.818%ileMicrosoft2026-07-14
CVE-2026-16615Librest: weak random number generation in pkce implementationMEDIUM6.817%ileMicrosoft2026-07-14
CVE-2026-57216RabbitMQ: AMQP 1.0, AMQP 0-9-1, Stream Protocol loopback enforcement can lead to remote guest sessions due to listener-aMEDIUM6.840%ileMicrosoft2026-07-14
CVE-2026-6390Nano: gnu nano: arbitrary memory writes, information disclosure, or denial of service via format string vulnerability inMEDIUM6.81%ileMicrosoft2026-07-14
CVE-2026-53397nfsd: fix posix_acl leak on SETACL decode failureMEDIUM6.742%ileMicrosoft2026-07-14
CVE-2026-50678Microsoft Excel Information Disclosure VulnerabilityMEDIUM6.624%ileMicrosoft2026-07-14
CVE-2026-49804Windows USB Video Driver Elevation of Privilege VulnerabilityMEDIUM6.629%ileMicrosoft2026-07-14
CVE-2026-45489Microsoft Edge (Chromium-based) Spoofing VulnerabilityMEDIUM6.539%ileMicrosoft2026-07-14
CVE-2026-47282GitHub Copilot and Visual Studio Code Information Disclosure VulnerabilityMEDIUM6.546%ileMicrosoft2026-07-14
CVE-2026-55003Windows Remote Desktop Protocol (RDP) Information Disclosure VulnerabilityMEDIUM6.548%ileMicrosoft2026-07-14
CVE-2026-54108Microsoft SharePoint Server Spoofing VulnerabilityMEDIUM6.552%ileMicrosoft2026-07-14
CVE-2026-56185Windows Admin Center Information Disclosure VulnerabilityMEDIUM6.546%ileMicrosoft2026-07-14
CVE-2026-57976Windows Active Directory Domain Services Denial of Service VulnerabilityMEDIUM6.552%ileMicrosoft2026-07-14
CVE-2026-57979Windows Remote Desktop Protocol (RDP) Information Disclosure VulnerabilityMEDIUM6.548%ileMicrosoft2026-07-14
CVE-2026-57987Microsoft Edge (Chromium-based) Spoofing VulnerabilityMEDIUM6.546%ileMicrosoft2026-07-14
CVE-2026-58279Azure CycleCloud Elevation of Privilege VulnerabilityMEDIUM6.529%ileMicrosoft2026-07-14
CVE-2026-56646Microsoft Edge (Chromium-based) Spoofing VulnerabilityMEDIUM6.548%ileMicrosoft2026-07-14
CVE-2026-34348Windows Event Logging Service Information Disclosure VulnerabilityMEDIUM6.550%ileMicrosoft2026-07-14
CVE-2026-49799Windows Local Security Authority Subsystem Service (LSASS) Denial of Service VulnerabilityMEDIUM6.553%ileMicrosoft2026-07-14
CVE-2026-50366Windows Active Directory Domain Services Denial of Service VulnerabilityMEDIUM6.552%ileMicrosoft2026-07-14
CVE-2026-50376Windows Remote Desktop Client Information Disclosure VulnerabilityMEDIUM6.555%ileMicrosoft2026-07-14
CVE-2026-50445Windows Remote Desktop Protocol (RDP) Information Disclosure VulnerabilityMEDIUM6.548%ileMicrosoft2026-07-14
CVE-2026-50497Windows Remote Desktop Protocol (RDP) Information Disclosure VulnerabilityMEDIUM6.555%ileMicrosoft2026-07-14
CVE-2026-50504Windows Remote Desktop Client Information Disclosure VulnerabilityMEDIUM6.546%ileMicrosoft2026-07-14
CVE-2026-50659.NET Spoofing VulnerabilityMEDIUM6.543%ileMicrosoft2026-07-14
CVE-2026-54126Windows Remote Desktop Protocol (RDP) Information Disclosure VulnerabilityMEDIUM6.548%ileMicrosoft2026-07-14
CVE-2026-55054Microsoft Excel Information Disclosure VulnerabilityMEDIUM6.546%ileMicrosoft2026-07-14
CVE-2026-55051Microsoft SharePoint Server Information Disclosure VulnerabilityMEDIUM6.547%ileMicrosoft2026-07-14
CVE-2026-50468Microsoft SQL Server Information Disclosure VulnerabilityMEDIUM6.550%ileMicrosoft2026-07-14
CVE-2026-54116Microsoft SQL Server Information Disclosure VulnerabilityMEDIUM6.558%ileMicrosoft2026-07-14
CVE-2026-56168Windows SMB Server Denial of Service VulnerabilityMEDIUM6.553%ileMicrosoft2026-07-14
CVE-2026-57982Windows Remote Desktop Protocol (RDP) Information Disclosure VulnerabilityMEDIUM6.558%ileMicrosoft2026-07-14
CVE-2026-58523Microsoft Edge for Android Security Feature Bypass VulnerabilityMEDIUM6.539%ileMicrosoft2026-07-14
CVE-2026-58533Windows Remote Desktop Client Information Disclosure VulnerabilityMEDIUM6.555%ileMicrosoft2026-07-14
CVE-2026-58535Windows Remote Desktop Client Information Disclosure VulnerabilityMEDIUM6.555%ileMicrosoft2026-07-14
CVE-2026-58546Windows Remote Desktop Client Information Disclosure VulnerabilityMEDIUM6.540%ileMicrosoft2026-07-14
CVE-2026-58539Windows Remote Desktop Client Information Disclosure VulnerabilityMEDIUM6.555%ileMicrosoft2026-07-14
CVE-2026-49159Microsoft Graph Information Disclosure VulnerabilityMEDIUM6.543%ileMicrosoft2026-07-14
CVE-2026-14258Dhcpcd: dhcpcd infinite loop and out-of-bounds read via zero-length ipv6 nd option in router advertisement handlingMEDIUM6.517%ileMicrosoft2026-07-14
CVE-2026-8458wrong reuse for different servicesMEDIUM6.524%ileMicrosoft2026-07-14
CVE-2026-60001sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay.MEDIUM6.521%ileMicrosoft2026-07-14
CVE-2026-58251NATS Server: Queue Subscribe Authz BypassMEDIUM6.527%ileMicrosoft2026-07-14
CVE-2026-58252NATS Server: Subscribe Authz Bypass via Wildcard-OverlapMEDIUM6.527%ileMicrosoft2026-07-14
CVE-2026-15714Libsoup: soupmultipartinputstream: libsoup: out-of-bounds read in soup_multipart_input_stream_read_headers via an oversiMEDIUM6.532%ileMicrosoft2026-07-14
CVE-2026-47729Squid: Memory disclosure in FTP gatewayMEDIUM6.572%ileMicrosoft2026-07-14
CVE-2026-56434NGINX ngx_http_ssi_module vulnerabilityMEDIUM6.537%ileMicrosoft2026-07-14
CVE-2026-56145Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of ServiceMEDIUM6.521%ileMicrosoft2026-07-14
CVE-2026-63140Reachable Assertion in Elasticsearch Leading to Denial of ServiceMEDIUM6.514%ileMicrosoft2026-07-14
CVE-2026-63136Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of ServiceMEDIUM6.514%ileMicrosoft2026-07-14
CVE-2026-50248BOGUS configured primary hostname accepted for XFR in auth/rpz zonesMEDIUM6.53%ileMicrosoft2026-07-14
CVE-2026-16277Rpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbaddrlist()MEDIUM6.520%ileMicrosoft2026-07-14
CVE-2026-10822Key Record using PRIVATEDNS algorithm may lead to unexpected exitMEDIUM6.530%ileMicrosoft2026-07-14
CVE-2026-59843Libssh: libssh: denial of service via zero advertised channel packet sizeMEDIUM6.540%ileMicrosoft2026-07-14
CVE-2026-60147Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SEMEDIUM6.519%ileMicrosoft2026-07-14
CVE-2026-53345KVM: Don't WARN if memory is dirtied without a vCPU when the VM is dyingMEDIUM6.52%ileMicrosoft2026-07-14
CVE-2026-49090Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of ServiceMEDIUM6.516%ileMicrosoft2026-07-14
CVE-2026-59818etcd: gRPC client listener does not enforce `--client-crl-file` certificate revocationMEDIUM6.524%ileMicrosoft2026-07-14
CVE-2026-57217RabbitMQ: Topic authorization can lead to cross-tenant routing-key bypassMEDIUM6.528%ileMicrosoft2026-07-14
CVE-2026-57211RabbitMQ: UNC SSRF affecting the management UI on WindowsMEDIUM6.535%ileMicrosoft2026-07-14
CVE-2026-54171Excon: redact additional sensitive/risky headers when following redirectsMEDIUM6.523%ileMicrosoft2026-07-14
CVE-2026-63263Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of ServiceMEDIUM6.515%ileMicrosoft2026-07-14
CVE-2026-59844Libssh: libssh: denial of service via oversized sftp read lengthMEDIUM6.540%ileMicrosoft2026-07-14
CVE-2026-16461Rpcbind: rpcbind: stack buffer overflow in rpcinfo rpcbdump() short-mode version-list formattingMEDIUM6.514%ileMicrosoft2026-07-14
CVE-2026-64381smb: client: Fix next buffer leak in receive_encrypted_standard()MEDIUM6.57%ileMicrosoft2026-07-14
CVE-2026-55000Windows USB Print Driver Elevation of Privilege VulnerabilityMEDIUM6.416%ileMicrosoft2026-07-14
CVE-2026-57097Microsoft XML Security Feature Bypass VulnerabilityMEDIUM6.425%ileMicrosoft2026-07-14
CVE-2026-44510Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-43620. Reason: This candidate is a MEDIUM6.4—Microsoft2026-07-14
CVE-2026-50375DirectX Graphics Kernel Elevation of Privilege VulnerabilityMEDIUM6.376%ileMicrosoft2026-07-14
CVE-2026-50374Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityMEDIUM6.325%ileMicrosoft2026-07-14
CVE-2026-55145Outlook Copilot Tampering VulnerabilityMEDIUM6.330%ileMicrosoft2026-07-14
CVE-2026-57973Windows Subsystem for Linux (WSL2) Kernel Tampering VulnerabilityMEDIUM6.36%ileMicrosoft2026-07-14
CVE-2026-58543Universal Print Management Service Elevation of Privilege VulnerabilityMEDIUM6.37%ileMicrosoft2026-07-14
CVE-2026-64434Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn refMEDIUM6.316%ileMicrosoft2026-07-14
CVE-2026-63871Bluetooth: ISO: Fix data-race on iso_pi fields in hci_get_route callsMEDIUM6.35%ileMicrosoft2026-07-14
CVE-2026-50294Windows Kernel Information Disclosure VulnerabilityMEDIUM6.230%ileMicrosoft2026-07-14
CVE-2026-49807Windows DirectX Information Disclosure VulnerabilityMEDIUM6.230%ileMicrosoft2026-07-14
CVE-2026-50420HTTP.sys Information Disclosure VulnerabilityMEDIUM6.231%ileMicrosoft2026-07-14
CVE-2026-55026Microsoft Office Information Disclosure VulnerabilityMEDIUM6.234%ileMicrosoft2026-07-14
CVE-2026-57095Win32k Elevation of Privilege VulnerabilityMEDIUM6.237%ileMicrosoft2026-07-14
CVE-2026-58300Microsoft Edge for Android Information Disclosure VulnerabilityMEDIUM6.226%ileMicrosoft2026-07-14
CVE-2026-64271Input: touchwin - reset the packet index on every complete packetMEDIUM6.211%ileMicrosoft2026-07-14
CVE-2026-49174DNS Client Tampering VulnerabilityMEDIUM6.110%ileMicrosoft2026-07-14
CVE-2026-54988Microsoft Excel Information Disclosure VulnerabilityMEDIUM6.123%ileMicrosoft2026-07-14
CVE-2026-50383Windows Print Spooler Information Disclosure VulnerabilityMEDIUM6.122%ileMicrosoft2026-07-14
CVE-2026-50453Windows USB Audio Class Driver Information Disclosure VulnerabilityMEDIUM6.129%ileMicrosoft2026-07-14
CVE-2026-50495DNS Client Tampering VulnerabilityMEDIUM6.120%ileMicrosoft2026-07-14
CVE-2026-50661Windows BitLocker Security Feature Bypass VulnerabilityMEDIUM6.150%ileMicrosoft2026-07-14
CVE-2026-55898Microsoft Excel Information Disclosure VulnerabilityMEDIUM6.122%ileMicrosoft2026-07-14
CVE-2026-58291Microsoft Edge (Chromium-based) Information Disclosure VulnerabilityMEDIUM6.145%ileMicrosoft2026-07-14
CVE-2026-59926Mistune: XSS via unescaped class option in Admonition directiveMEDIUM6.19%ileMicrosoft2026-07-14
CVE-2026-59890setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) on macOS APFS/HFS+MEDIUM6.133%ileMicrosoft2026-07-14
CVE-2026-64450tipc: fix out-of-bounds read in broadcast Gap ACK blocksMEDIUM6.142%ileMicrosoft2026-07-14
CVE-2026-64287KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPUMEDIUM6.17%ileMicrosoft2026-07-14
CVE-2026-64001ALSA: pcm: oss: Fix setup list UAF on proc write errorMEDIUM6.16%ileMicrosoft2026-07-14
CVE-2026-58638Windows Boot Loader Security Feature Bypass VulnerabilityMEDIUM6.014%ileMicrosoft2026-07-14
CVE-2026-50324Windows Active Directory Federation Services Denial of Service VulnerabilityMEDIUM5.952%ileMicrosoft2026-07-14
CVE-2026-56649Windows Network File System Remote Code Execution VulnerabilityMEDIUM5.948%ileMicrosoft2026-07-14
CVE-2026-8925SASL double-freeMEDIUM5.945%ileMicrosoft2026-07-14
CVE-2026-59999In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over PermitTunnel=yes, but did notMEDIUM5.96%ileMicrosoft2026-07-14
CVE-2026-15713Libsoup: soupcache: libsoup: http/2 frame window exhaustion remote denial of service via memory leakMEDIUM5.928%ileMicrosoft2026-07-14
CVE-2026-15712Soupclientmessageiohttp2: libsoup3: libsoup: http/2 goaway frame parsing heap buffer over-read via invalid nul-terminatiMEDIUM5.940%ileMicrosoft2026-07-14
CVE-2026-53393nfsd: reset write verifier on deferred writeback errorsMEDIUM5.93%ileMicrosoft2026-07-14
CVE-2026-44621Libunbound applications configured with 'unwanted-reply-threshold' could eventually be abruptly terminatedMEDIUM5.916%ileMicrosoft2026-07-14
CVE-2026-55717'serve-expired-client-timeout' and 'response-ip' CNAME redirect could lead to a crashMEDIUM5.915%ileMicrosoft2026-07-14
CVE-2026-50046Possible heap use-after-free in an error path when a DoT forwarded query is jostled outMEDIUM5.915%ileMicrosoft2026-07-14
CVE-2026-55990Packet of death for a DNSCrypt misconfigured UnboundMEDIUM5.917%ileMicrosoft2026-07-14
CVE-2026-55991Remote DNS-over-QUIC (DoQ) flow-control assertion failure in libngtcp2MEDIUM5.915%ileMicrosoft2026-07-14
CVE-2026-59847Libssh: libssh: integrity downgrade via openssl aes-gcm tag verificationMEDIUM5.923%ileMicrosoft2026-07-14
CVE-2026-53357Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del()MEDIUM5.917%ileMicrosoft2026-07-14
CVE-2026-52863Memory corruption could lead to crash and denial of serviceMEDIUM5.915%ileMicrosoft2026-07-14
CVE-2026-56444Degradation of resolution service when 'discard-timeout' and 'serve-expired-client-timeout' are combined in unusual confMEDIUM5.915%ileMicrosoft2026-07-14
CVE-2026-14586Assertion in libngtcp2 when under pressure in high concurrency DNS-over-QUIC environmentsMEDIUM5.919%ileMicrosoft2026-07-14
CVE-2026-64160netfs: Fix potential for tearing in ->remote_i_size and ->zero_pointMEDIUM5.834%ileMicrosoft2026-07-14
CVE-2026-64269RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sgMEDIUM5.749%ileMicrosoft2026-07-14
CVE-2026-14355ext/openssl: Memory corruption in openssl_encrypt with AES-WRAP-PADMEDIUM5.620%ileMicrosoft2026-07-14
CVE-2026-34349Windows Media Information Disclosure VulnerabilityMEDIUM5.528%ileMicrosoft2026-07-14
CVE-2026-34346Windows Ancillary Function Driver for WinSock Information Disclosure VulnerabilityMEDIUM5.510%ileMicrosoft2026-07-14
CVE-2026-49177Windows TCP/IP Information Disclosure VulnerabilityMEDIUM5.522%ileMicrosoft2026-07-14
CVE-2026-45496Visual Studio Code Security Feature Bypass VulnerabilityMEDIUM5.528%ileMicrosoft2026-07-14
CVE-2026-54997Windows SMB Information Disclosure VulnerabilityMEDIUM5.522%ileMicrosoft2026-07-14
CVE-2026-58614Windows Kernel Security Feature Bypass VulnerabilityMEDIUM5.520%ileMicrosoft2026-07-14
CVE-2026-33842Windows File Explorer Information Disclosure VulnerabilityMEDIUM5.528%ileMicrosoft2026-07-14
CVE-2026-34328Windows Audio Service Information Disclosure VulnerabilityMEDIUM5.528%ileMicrosoft2026-07-14
CVE-2026-40422Windows File Explorer Information Disclosure VulnerabilityMEDIUM5.522%ileMicrosoft2026-07-14
CVE-2026-41087Windows File Explorer Information Disclosure VulnerabilityMEDIUM5.528%ileMicrosoft2026-07-14
CVE-2026-49180Universal Plug and Play (upnp.dll) Information Disclosure VulnerabilityMEDIUM5.525%ileMicrosoft2026-07-14
CVE-2026-49801Windows SMB Information Disclosure VulnerabilityMEDIUM5.522%ileMicrosoft2026-07-14
CVE-2026-50316Windows Kernel Information Disclosure VulnerabilityMEDIUM5.528%ileMicrosoft2026-07-14
CVE-2026-50295Windows Zero Trust DNS Security Feature Bypass VulnerabilityMEDIUM5.512%ileMicrosoft2026-07-14
CVE-2026-50350Windows Trusted Runtime Interface Driver Information Disclosure VulnerabilityMEDIUM5.528%ileMicrosoft2026-07-14
CVE-2026-50381Composite Image File System driver (cimfs.sys) Information Disclosure VulnerabilityMEDIUM5.521%ileMicrosoft2026-07-14
CVE-2026-50300Windows DWM Core Library Information Disclosure VulnerabilityMEDIUM5.522%ileMicrosoft2026-07-14
CVE-2026-50303Windows Key Guard Security Feature Bypass VulnerabilityMEDIUM5.510%ileMicrosoft2026-07-14
CVE-2026-50434Windows Push Notification Information Disclosure VulnerabilityMEDIUM5.528%ileMicrosoft2026-07-14
CVE-2026-50339Windows Push Notification Information Disclosure VulnerabilityMEDIUM5.528%ileMicrosoft2026-07-14
CVE-2026-50430Windows Push Notification Information Disclosure VulnerabilityMEDIUM5.528%ileMicrosoft2026-07-14
CVE-2026-50377Windows Kernel Elevation of Privilege VulnerabilityMEDIUM5.531%ileMicrosoft2026-07-14
CVE-2026-50401Windows Cloud Files Mini Filter Driver Information Disclosure VulnerabilityMEDIUM5.522%ileMicrosoft2026-07-14
CVE-2026-50334Windows Push Notification Information Disclosure VulnerabilityMEDIUM5.528%ileMicrosoft2026-07-14
CVE-2026-50352Windows Cryptographic Services Information Disclosure VulnerabilityMEDIUM5.538%ileMicrosoft2026-07-14
CVE-2026-50437Windows DWM Core Library Information Disclosure VulnerabilityMEDIUM5.522%ileMicrosoft2026-07-14
CVE-2026-50455Universal Plug and Play (upnp.dll) Information Disclosure VulnerabilityMEDIUM5.522%ileMicrosoft2026-07-14
CVE-2026-50409Windows Overlay Filter Information Disclosure VulnerabilityMEDIUM5.528%ileMicrosoft2026-07-14
CVE-2026-50473Windows File Explorer Information Disclosure VulnerabilityMEDIUM5.528%ileMicrosoft2026-07-14
CVE-2026-50442Windows File Explorer Information Disclosure VulnerabilityMEDIUM5.528%ileMicrosoft2026-07-14
CVE-2026-50389Windows File Explorer Information Disclosure VulnerabilityMEDIUM5.538%ileMicrosoft2026-07-14
CVE-2026-50456Windows File Explorer Information Disclosure VulnerabilityMEDIUM5.528%ileMicrosoft2026-07-14
CVE-2026-50431Windows Quality of Service (QoS) Packet Scheduler Information Disclosure VulnerabilityMEDIUM5.538%ileMicrosoft2026-07-14
CVE-2026-50394Windows Media Information Disclosure VulnerabilityMEDIUM5.528%ileMicrosoft2026-07-14
CVE-2026-50475Windows Kernel Information Disclosure VulnerabilityMEDIUM5.542%ileMicrosoft2026-07-14
CVE-2026-50483Windows Graphics Component Information Disclosure VulnerabilityMEDIUM5.526%ileMicrosoft2026-07-14
CVE-2026-50681Windows Secure Channel Information Disclosure VulnerabilityMEDIUM5.538%ileMicrosoft2026-07-14
CVE-2026-50690Windows SMB Information Disclosure VulnerabilityMEDIUM5.532%ileMicrosoft2026-07-14
CVE-2026-48580Microsoft Excel Information Disclosure VulnerabilityMEDIUM5.538%ileMicrosoft2026-07-14
CVE-2026-50408Microsoft Excel Information Disclosure VulnerabilityMEDIUM5.527%ileMicrosoft2026-07-14
CVE-2026-55046Microsoft Excel Information Disclosure VulnerabilityMEDIUM5.538%ileMicrosoft2026-07-14
CVE-2026-55023Microsoft Office Information Disclosure VulnerabilityMEDIUM5.543%ileMicrosoft2026-07-14
CVE-2026-55027Microsoft Office Information Disclosure VulnerabilityMEDIUM5.543%ileMicrosoft2026-07-14
CVE-2026-55028Microsoft Office Information Disclosure VulnerabilityMEDIUM5.535%ileMicrosoft2026-07-14
CVE-2026-55047Microsoft Office Information Disclosure VulnerabilityMEDIUM5.542%ileMicrosoft2026-07-14
CVE-2026-55050Microsoft Word Information Disclosure VulnerabilityMEDIUM5.535%ileMicrosoft2026-07-14
CVE-2026-55138Microsoft Excel Information Disclosure VulnerabilityMEDIUM5.527%ileMicrosoft2026-07-14
CVE-2026-55124Microsoft Word Information Disclosure VulnerabilityMEDIUM5.535%ileMicrosoft2026-07-14
CVE-2026-55035Microsoft Office Information Disclosure VulnerabilityMEDIUM5.542%ileMicrosoft2026-07-14
CVE-2026-55057Microsoft Office Information Disclosure VulnerabilityMEDIUM5.531%ileMicrosoft2026-07-14
CVE-2026-55142Microsoft Word Information Disclosure VulnerabilityMEDIUM5.535%ileMicrosoft2026-07-14
CVE-2026-55042Microsoft Office Information Disclosure VulnerabilityMEDIUM5.531%ileMicrosoft2026-07-14
CVE-2026-55139Microsoft Office Information Disclosure VulnerabilityMEDIUM5.527%ileMicrosoft2026-07-14
CVE-2026-56184Win32k Information Disclosure VulnerabilityMEDIUM5.538%ileMicrosoft2026-07-14
CVE-2026-56192Microsoft Office Information Disclosure VulnerabilityMEDIUM5.535%ileMicrosoft2026-07-14
CVE-2026-56195Microsoft Office Information Disclosure VulnerabilityMEDIUM5.531%ileMicrosoft2026-07-14
CVE-2026-56178Microsoft Defender for Endpoint for Mac Elevation of Privilege VulnerabilityMEDIUM5.56%ileMicrosoft2026-07-14
CVE-2026-57083Windows Media Photo Codec Information Disclosure VulnerabilityMEDIUM5.540%ileMicrosoft2026-07-14
CVE-2026-57084Windows File Explorer Information Disclosure VulnerabilityMEDIUM5.541%ileMicrosoft2026-07-14
CVE-2026-57085Windows Print Spooler Information Disclosure VulnerabilityMEDIUM5.520%ileMicrosoft2026-07-14
CVE-2026-58547Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege VulnerabilityMEDIUM5.528%ileMicrosoft2026-07-14
CVE-2026-58545Windows Kernel Security Feature Bypass VulnerabilityMEDIUM5.515%ileMicrosoft2026-07-14
CVE-2026-55121Microsoft Office Information Disclosure VulnerabilityMEDIUM5.529%ileMicrosoft2026-07-14
CVE-2026-53355net: rds: clear i_sends on setup unwindMEDIUM5.533%ileMicrosoft2026-07-14
CVE-2026-53347drm/virtio: Fix driver removal with disabled KMSMEDIUM5.52%ileMicrosoft2026-07-14
CVE-2026-53352signal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads()MEDIUM5.50%ileMicrosoft2026-07-14
CVE-2026-53349netfilter: nf_conntrack: destroy stale expectfn expectations on unregisterMEDIUM5.52%ileMicrosoft2026-07-14
CVE-2026-10536HTTP/2 stream-dependency tree UAFMEDIUM5.540%ileMicrosoft2026-07-14
CVE-2026-12480Arbitrary HDF5 File Read via Virtual Dataset Bypass in keras-team/kerasMEDIUM5.53%ileMicrosoft2026-07-14
CVE-2026-53392NFSv4/flexfiles: reject zero filehandle version countMEDIUM5.540%ileMicrosoft2026-07-14
CVE-2026-63809bpf: use kvfree() for replaced sysctl write bufferMEDIUM5.55%ileMicrosoft2026-07-14
CVE-2026-63834batman-adv: tp_meter: restrict number of unacked list entriesMEDIUM5.57%ileMicrosoft2026-07-14
CVE-2026-53391NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addrMEDIUM5.541%ileMicrosoft2026-07-14
CVE-2026-63812f2fs: fix incorrect FI_NO_EXTENT handling in __destroy_extent_node()MEDIUM5.52%ileMicrosoft2026-07-14
CVE-2026-53382media: vidtv: fix NULL pointer dereference in vidtv_mux_push_siMEDIUM5.53%ileMicrosoft2026-07-14
CVE-2026-637959p: avoid putting oldfid in p9_client_walk() error pathMEDIUM5.539%ileMicrosoft2026-07-14
CVE-2026-64097drm/amd/display: Validate GPIO pin LUT table size before iteratingMEDIUM5.53%ileMicrosoft2026-07-14
CVE-2026-64077netfilter: ebtables: move to two-stage removal schemeMEDIUM5.53%ileMicrosoft2026-07-14
CVE-2026-64188net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink()MEDIUM5.52%ileMicrosoft2026-07-14
CVE-2026-64237Input: elan_i2c - validate firmware size before useMEDIUM5.56%ileMicrosoft2026-07-14
CVE-2026-64480ALSA: ice1712: check snd_ctl_new1() return valueMEDIUM5.58%ileMicrosoft2026-07-14
CVE-2026-64244drivers/base/memory: set mem->altmap after successful device registrationMEDIUM5.56%ileMicrosoft2026-07-14
CVE-2026-64248MIPS: smp: report dying CPU to RCU in stop_this_cpu()MEDIUM5.56%ileMicrosoft2026-07-14
CVE-2026-64441staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr()MEDIUM5.517%ileMicrosoft2026-07-14
CVE-2026-64429gpio: eic-sprd: use raw_spinlock_t in the irq startup pathMEDIUM5.57%ileMicrosoft2026-07-14
CVE-2026-64351net: usb: kalmia: bound RX frame length in kalmia_rx_fixup()MEDIUM5.58%ileMicrosoft2026-07-14
CVE-2026-64430NTB: epf: Avoid calling pci_irq_vector() from hardirq contextMEDIUM5.540%ileMicrosoft2026-07-14
CVE-2026-64299tracing: Prevent out-of-bounds read in glob matchingMEDIUM5.56%ileMicrosoft2026-07-14
CVE-2026-64323udf: validate VAT header length against the VAT inode sizeMEDIUM5.56%ileMicrosoft2026-07-14
CVE-2026-64317isofs: bound Rock Ridge symlink components to the SL recordMEDIUM5.56%ileMicrosoft2026-07-14
CVE-2026-64318partitions: aix: bound the pp_count scan to the ppe arrayMEDIUM5.56%ileMicrosoft2026-07-14
CVE-2026-64523net/handshake: Take a long-lived file reference at submitMEDIUM5.527%ileMicrosoft2026-07-14
CVE-2026-64500iio: adc: lpc32xx: Initialize completion before requesting IRQMEDIUM5.56%ileMicrosoft2026-07-14
CVE-2026-64400ksmbd: prevent path traversal bypass by restricting caseless retryMEDIUM5.528%ileMicrosoft2026-07-14
CVE-2026-64277Input: synaptics-rmi4 - bound the F3A keymap to the GPIO countMEDIUM5.56%ileMicrosoft2026-07-14
CVE-2026-64408Bluetooth: bnep: pin L2CAP connection during netdev registrationMEDIUM5.518%ileMicrosoft2026-07-14
CVE-2026-64360hfs/hfsplus: zero-initialize buffer in hfs_bnode_readMEDIUM5.57%ileMicrosoft2026-07-14
CVE-2026-64348usb: free iso schedules on failed submitMEDIUM5.57%ileMicrosoft2026-07-14
CVE-2026-64462PCI: altera: Fix resource leaks on probe failureMEDIUM5.58%ileMicrosoft2026-07-14
CVE-2026-64374sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RTMEDIUM5.540%ileMicrosoft2026-07-14
CVE-2026-64425io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work itemMEDIUM5.57%ileMicrosoft2026-07-14
CVE-2026-64525xfrm: move policy_bydst RCU sync from per-netns .exit to .pre_exitMEDIUM5.55%ileMicrosoft2026-07-14
CVE-2026-64387smb: client: fix query directory replay double-freeMEDIUM5.537%ileMicrosoft2026-07-14
CVE-2026-64397ksmbd: serialize QUERY_DIRECTORY requests per fileMEDIUM5.539%ileMicrosoft2026-07-14
CVE-2026-64409Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()MEDIUM5.57%ileMicrosoft2026-07-14
CVE-2026-64412netfilter: ebtables: module names must be null-terminatedMEDIUM5.53%ileMicrosoft2026-07-14
CVE-2026-64345usb: gadget: f_printer: take kref only for successful openMEDIUM5.57%ileMicrosoft2026-07-14
CVE-2026-64390ksmbd: track the connection owning a byte-range lockMEDIUM5.538%ileMicrosoft2026-07-14
CVE-2026-64406Bluetooth: fix UAF in bt_accept_dequeue()MEDIUM5.520%ileMicrosoft2026-07-14
CVE-2026-64487ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parserMEDIUM5.58%ileMicrosoft2026-07-14
CVE-2026-64364HID: multitouch: fix out-of-bounds bit access on mt_io_flagsMEDIUM5.527%ileMicrosoft2026-07-14
CVE-2026-64511ACPI: NFIT: core: Fix possible NULL pointer dereferenceMEDIUM5.55%ileMicrosoft2026-07-14
CVE-2026-64458mm/damon/ops-common: handle extreme intervals in damon_hot_score()MEDIUM5.58%ileMicrosoft2026-07-14
CVE-2026-64422net: ipv4: bound TCP reordering sysctl writes and MTU probe sizesMEDIUM5.53%ileMicrosoft2026-07-14
CVE-2026-64465usb: xhci: Fix sleep in atomic context in xhci_free_streams()MEDIUM5.58%ileMicrosoft2026-07-14
CVE-2026-64468binder: fix UAF in binder_free_transaction()MEDIUM5.53%ileMicrosoft2026-07-14
CVE-2026-64331usbip: vudc: fix NULL deref in vep_dequeue()MEDIUM5.57%ileMicrosoft2026-07-14
CVE-2026-64413netfilter: ebtables: zero chainstack arrayMEDIUM5.52%ileMicrosoft2026-07-14
CVE-2026-64493iio: pressure: mpl115: fix runtime PM leak on read errorMEDIUM5.56%ileMicrosoft2026-07-14
CVE-2026-644526lowpan: fix NHC entry use-after-free on error pathMEDIUM5.512%ileMicrosoft2026-07-14
CVE-2026-64486ALSA: cmipci: check snd_ctl_new1() return valueMEDIUM5.58%ileMicrosoft2026-07-14
CVE-2024-14040net: nexthop: Increase weight to u16MEDIUM5.52%ileMicrosoft2026-07-14
CVE-2026-53332slimbus: qcom-ngd-ctrl: Register callbacks after creating the ngdMEDIUM5.52%ileMicrosoft2026-07-14
CVE-2026-53336nvmem: layouts: onie-tlv: fix hang on unknown typesMEDIUM5.52%ileMicrosoft2026-07-14
CVE-2026-53327debugobjects: Do not fill_pool() if pi_blocked_onMEDIUM5.53%ileMicrosoft2026-07-14
CVE-2026-53337net: bonding: fix NULL pointer dereference in bond_do_ioctl()MEDIUM5.52%ileMicrosoft2026-07-14
CVE-2026-53353hsr: Remove WARN_ONCE() in hsr_addr_is_self().MEDIUM5.52%ileMicrosoft2026-07-14
CVE-2026-53339i2c: qcom-cci: Fix NULL pointer dereference in cci_remove()MEDIUM5.52%ileMicrosoft2026-07-14
CVE-2026-50012Squid: Memory corruption in cache_digest reply handlingMEDIUM5.569%ileMicrosoft2026-07-14
CVE-2026-63825gcov: use atomic counter updates to fix concurrent access crashesMEDIUM5.534%ileMicrosoft2026-07-14
CVE-2026-63811f2fs: read COW data with the original inode during atomic writeMEDIUM5.51%ileMicrosoft2026-07-14
CVE-2026-53377drm/msm: always recover the gpuMEDIUM5.52%ileMicrosoft2026-07-14
CVE-2026-53399nfsd: release layout stid on setlease failureMEDIUM5.541%ileMicrosoft2026-07-14
CVE-2026-63821wifi: rtw88: usb: fix memory leaks on USB write failuresMEDIUM5.55%ileMicrosoft2026-07-14
CVE-2026-63798irqchip/imgpdc: Fix resource leak, add missing chained handler cleanup on removeMEDIUM5.53%ileMicrosoft2026-07-14
CVE-2026-53385vc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vcs_writeMEDIUM5.53%ileMicrosoft2026-07-14
CVE-2026-53398NFSD: Fix SECINFO_NO_NAME decode error cleanupMEDIUM5.541%ileMicrosoft2026-07-14
CVE-2026-64038hwmon: (lm90) Stop work before releasing hwmon deviceMEDIUM5.56%ileMicrosoft2026-07-14
CVE-2026-64036cgroup/rstat: validate cpu before css_rstat_cpu() accessMEDIUM5.53%ileMicrosoft2026-07-14
CVE-2026-63962usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes()MEDIUM5.510%ileMicrosoft2026-07-14
CVE-2026-63954hpfs: fix a crash if hpfs_map_dnode_bitmap failsMEDIUM5.56%ileMicrosoft2026-07-14
CVE-2026-63964usb: typec: ucsi: ccg: reject firmware images without a ':' record headerMEDIUM5.511%ileMicrosoft2026-07-14
CVE-2026-63960usb: typec: wcove: don't write past struct pd_message in wcove_read_rx_buffer()MEDIUM5.511%ileMicrosoft2026-07-14
CVE-2026-64060netfs: Fix leak of request in netfs_write_begin() error handlingMEDIUM5.56%ileMicrosoft2026-07-14
CVE-2026-64187xfs: fail recovery on a committed log item with no regionsMEDIUM5.56%ileMicrosoft2026-07-14
CVE-2026-64205i2c: i801: fix hardware state machine corruption in error pathMEDIUM5.57%ileMicrosoft2026-07-14
CVE-2026-64190net: team: fix NULL pointer dereference in team_xmit during mode changeMEDIUM5.55%ileMicrosoft2026-07-14
CVE-2026-64206Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lockMEDIUM5.518%ileMicrosoft2026-07-14
CVE-2026-64529crypto: qat - remove unused character device and IOCTLsMEDIUM5.53%ileMicrosoft2026-07-14
CVE-2026-64433Bluetooth: MGMT: Fix UAF of hci_conn_params in add_device_completeMEDIUM5.56%ileMicrosoft2026-07-14
CVE-2026-64396ksmbd: fix UAF of struct file_lock in SMB2_LOCK deferred-lock cancellationMEDIUM5.536%ileMicrosoft2026-07-14
CVE-2026-64241gpio: rockchip: teardown bugs and resource leaksMEDIUM5.55%ileMicrosoft2026-07-14
CVE-2026-64250LoongArch: Report dying CPU to RCU in stop_this_cpu()MEDIUM5.56%ileMicrosoft2026-07-14
CVE-2026-64272Input: mms114 - fix touch indexing for MMS134S and MMS136MEDIUM5.510%ileMicrosoft2026-07-14
CVE-2026-64488ALSA: aoa: check snd_ctl_new1() return valueMEDIUM5.58%ileMicrosoft2026-07-14
CVE-2026-64444staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loopMEDIUM5.520%ileMicrosoft2026-07-14
CVE-2026-64484ALSA: es1938: check snd_ctl_new1() return valueMEDIUM5.58%ileMicrosoft2026-07-14
CVE-2026-64398ksmbd: add a permission check for FSCTL_SET_ZERO_DATAMEDIUM5.538%ileMicrosoft2026-07-14
CVE-2026-64346usb: gadget: udc: Fix use-after-free in gadget_match_driverMEDIUM5.511%ileMicrosoft2026-07-14
CVE-2026-64350usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info()MEDIUM5.57%ileMicrosoft2026-07-14
CVE-2026-64482ALSA: gus: check snd_ctl_new1() return valueMEDIUM5.58%ileMicrosoft2026-07-14
CVE-2026-64324udf: validate free block extents against the partition lengthMEDIUM5.55%ileMicrosoft2026-07-14
CVE-2026-64326block: skip sync_blockdev() on surprise removal in bdev_mark_dead()MEDIUM5.510%ileMicrosoft2026-07-14
CVE-2026-64474vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arcMEDIUM5.57%ileMicrosoft2026-07-14
CVE-2026-64368mm/slab: do not limit zeroing to orig_size when only red zoning is enabledMEDIUM5.534%ileMicrosoft2026-07-14
CVE-2026-64489ALSA: ymfpci: check snd_ctl_new1() return valueMEDIUM5.58%ileMicrosoft2026-07-14
CVE-2026-64507x86/bugs: Enable IBPB flush on BPF JIT allocationMEDIUM5.55%ileMicrosoft2026-07-14
CVE-2026-64338USB: misc: uss720: unregister parport on probe failureMEDIUM5.57%ileMicrosoft2026-07-14
CVE-2026-64306crypto: drbg - Fix returning success on failure in CTR_DRBGMEDIUM5.511%ileMicrosoft2026-07-14
CVE-2026-64363HID: appleir: fix UAF on pending key_up_timer in remove()MEDIUM5.511%ileMicrosoft2026-07-14
CVE-2026-64370posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error pathMEDIUM5.57%ileMicrosoft2026-07-14
CVE-2026-64332USB: ulpi: fix memory leak on registration failureMEDIUM5.57%ileMicrosoft2026-07-14
CVE-2026-64275Input: elan_i2c - prevent division by zero and arithmetic underflowMEDIUM5.511%ileMicrosoft2026-07-14
CVE-2026-64438crypto: qat - fix VF2PF work teardown race in adf_disable_sriov()MEDIUM5.53%ileMicrosoft2026-07-14
CVE-2026-64443staging: rtl8723bs: fix OOB read in update_beacon_info() IE loopMEDIUM5.520%ileMicrosoft2026-07-14
CVE-2026-64352bpf: Allow LPM map access from sleepable BPF programsMEDIUM5.57%ileMicrosoft2026-07-14
CVE-2026-64276Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED countMEDIUM5.56%ileMicrosoft2026-07-14
CVE-2026-64297module: decompress: check return value of module_extend_max_pages()MEDIUM5.511%ileMicrosoft2026-07-14
CVE-2026-50341Windows NTFS Information Disclosure VulnerabilityMEDIUM5.522%ileMicrosoft2026-07-14
CVE-2026-45488Microsoft Edge (Chromium-based) Spoofing VulnerabilityMEDIUM5.416%ileMicrosoft2026-07-14
CVE-2026-58278Microsoft Edge (Chromium-based) Spoofing VulnerabilityMEDIUM5.420%ileMicrosoft2026-07-14
CVE-2026-57980Microsoft Edge (Chromium-based) Tampering VulnerabilityMEDIUM5.413%ileMicrosoft2026-07-14
CVE-2026-57978Microsoft Edge (Chromium-based) Spoofing VulnerabilityMEDIUM5.412%ileMicrosoft2026-07-14
CVE-2026-56157Microsoft SharePoint Server Spoofing VulnerabilityMEDIUM5.428%ileMicrosoft2026-07-14
CVE-2026-58524Microsoft Edge (Chromium-based) Spoofing VulnerabilityMEDIUM5.415%ileMicrosoft2026-07-14
CVE-2026-62828Microsoft Edge for Android (Chromium-based) Tampering VulnerabilityMEDIUM5.415%ileMicrosoft2026-07-14
CVE-2026-56164Microsoft SharePoint Server Elevation of Privilege VulnerabilityMEDIUM5.398%ileMicrosoft2026-07-14
CVE-2026-44806Windows Secure Channel Denial of Service VulnerabilityMEDIUM5.354%ileMicrosoft2026-07-14
CVE-2026-50432Window Virtual Filtering Platform (VFP) Denial of Service VulnerabilityMEDIUM5.348%ileMicrosoft2026-07-14
CVE-2026-50415Windows Media Information Disclosure VulnerabilityMEDIUM5.346%ileMicrosoft2026-07-14
CVE-2026-11856cross-origin Digest auth state leakMEDIUM5.346%ileMicrosoft2026-07-14
CVE-2026-42505Invoking Encrypted Client Hello privacy leak in crypto/tlsMEDIUM5.317%ileMicrosoft2026-07-14
CVE-2026-62299CoreDNS: rewrite-plugin EDNS0 response-revert nil-pointer panic (remote DoS) when a downstream plugin returns a responseMEDIUM5.324%ileMicrosoft2026-07-14
CVE-2026-50251Attacker supplied '0.0.0.0'/'::' glue triggers defensive full-cache flushMEDIUM5.317%ileMicrosoft2026-07-14
CVE-2026-15588Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line bufferingMEDIUM5.39%ileMicrosoft2026-07-14
CVE-2026-44508Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-43618. Reason: This candidate is a MEDIUM5.3—Microsoft2026-07-14
CVE-2026-59848Libssh: libssh: denial of service via sftp responses with unknown request idsMEDIUM5.322%ileMicrosoft2026-07-14
CVE-2026-59845Libssh: libssh: denial of service via unchecked proxycommand fork() failureMEDIUM5.31%ileMicrosoft2026-07-14
CVE-2026-16768Gdk-pixbuf: out-of-bounds read in ico parserMEDIUM5.315%ileMicrosoft2026-07-14
CVE-2026-8927env-set cross-proxy Digest auth state leakMEDIUM5.336%ileMicrosoft2026-07-14
CVE-2026-59871node-tar: Process crash via PAX numeric path type confusionMEDIUM5.334%ileMicrosoft2026-07-14
CVE-2026-59875node-tar: Uncaught Exception DoS via NUL byte in PAX path/linkpath recordsMEDIUM5.321%ileMicrosoft2026-07-14
CVE-2026-64082riscv: Fix register corruption from uninitialized cregs on errorMEDIUM5.32%ileMicrosoft2026-07-14
CVE-2026-50045'max-global-quota' reset by DNSSEC validation restartsMEDIUM5.320%ileMicrosoft2026-07-14
CVE-2026-46917Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SEMEDIUM5.321%ileMicrosoft2026-07-14
CVE-2026-64478ALSA: usb-audio: avoid kobject path lookup in DualSense matchMEDIUM5.28%ileMicrosoft2026-07-14
CVE-2026-50418Windows System Secure Feature Bypass VulnerabilityMEDIUM5.110%ileMicrosoft2026-07-14
CVE-2026-47143Capstone has a NULL Pointer Dereference with 3DNow! opcodesMEDIUM5.133%ileMicrosoft2026-07-14
CVE-2026-63815f2fs: bound i_inline_xattr_size for non-inline-xattr inodesMEDIUM5.03%ileMicrosoft2026-07-14
CVE-2026-63819f2fs: fix to do sanity check on f2fs_get_node_folio_ra()MEDIUM5.02%ileMicrosoft2026-07-14
CVE-2026-56149Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of ServiceMEDIUM4.925%ileMicrosoft2026-07-14
CVE-2026-38753A use-after-free in the awk_sub() function (editors/awk.c) of Busybox v1.38.0 allows attackers to cause a Denial of ServMEDIUM4.94%ileMicrosoft2026-07-14
CVE-2026-26145Microsoft Azure Synapse Elevation of Privilege VulnerabilityMEDIUM4.829%ileMicrosoft2026-07-14
CVE-2026-50684Active Directory Federation Server Spoofing VulnerabilityMEDIUM4.830%ileMicrosoft2026-07-14
CVE-2026-59998sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has no value if thMEDIUM4.88%ileMicrosoft2026-07-14
CVE-2026-26081HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEW_TOKEN format. HAProxy EnterpriseMEDIUM4.829%ileMicrosoft2026-07-14
CVE-2026-57213RabbitMQ: Stored XSS federation management plugin via unsanitized consumer_tag renderingMEDIUM4.817%ileMicrosoft2026-07-14
CVE-2026-56416Possible heap buffer overflow when validator canonicalizes RDATA that contains domain nameMEDIUM4.82%ileMicrosoft2026-07-14
CVE-2026-49167Windows Kernel Elevation of Privilege VulnerabilityMEDIUM4.717%ileMicrosoft2026-07-14
CVE-2026-50310Windows Human Interface Device Information Disclosure VulnerabilityMEDIUM4.722%ileMicrosoft2026-07-14
CVE-2026-50312Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityMEDIUM4.725%ileMicrosoft2026-07-14
CVE-2026-50657Microsoft Defender for Endpoint for Mac Information Disclosure VulnerabilityMEDIUM4.736%ileMicrosoft2026-07-14
CVE-2026-64378writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs()MEDIUM4.73%ileMicrosoft2026-07-14
CVE-2026-64279i2c: core: fix adapter deregistration raceMEDIUM4.76%ileMicrosoft2026-07-14
CVE-2026-64373cpufreq: Fix hotplug-suspend race during rebootMEDIUM4.77%ileMicrosoft2026-07-14
CVE-2026-64371proc: protect ptrace_may_access() with exec_update_lock (part 1)MEDIUM4.77%ileMicrosoft2026-07-14
CVE-2026-49794Windows USB Audio Class Driver Information Disclosure VulnerabilityMEDIUM4.627%ileMicrosoft2026-07-14
CVE-2026-55016Microsoft SharePoint Server Spoofing VulnerabilityMEDIUM4.634%ileMicrosoft2026-07-14
CVE-2026-55019Microsoft SharePoint Server Spoofing VulnerabilityMEDIUM4.643%ileMicrosoft2026-07-14
CVE-2026-55020Microsoft SharePoint Server Spoofing VulnerabilityMEDIUM4.634%ileMicrosoft2026-07-14
CVE-2026-55030Microsoft SharePoint Server Spoofing VulnerabilityMEDIUM4.643%ileMicrosoft2026-07-14
CVE-2026-55135Microsoft SharePoint Server Spoofing VulnerabilityMEDIUM4.634%ileMicrosoft2026-07-14
CVE-2026-62826Microsoft SharePoint Server Spoofing VulnerabilityMEDIUM4.626%ileMicrosoft2026-07-14
CVE-2026-50485Windows Hyper-V Denial of Service VulnerabilityMEDIUM4.535%ileMicrosoft2026-07-14
CVE-2026-53361af_unix: Set gc_in_progress to true in unix_gc().MEDIUM4.52%ileMicrosoft2026-07-14
CVE-2026-59831GitHub CLI `gh codespace jupyter` could allow remote code execution when connecting to a malicious CodespaceMEDIUM4.418%ileMicrosoft2026-07-14
CVE-2026-63835batman-adv: v: prevent OGM aggregation on disabled hardifMEDIUM4.47%ileMicrosoft2026-07-14
CVE-2026-63830net: skmsg: preserve sg.copy across SG transformsMEDIUM4.428%ileMicrosoft2026-07-14
CVE-2026-64388smb/client: fix chown/chgrp with SMB3 POSIX ExtensionsMEDIUM4.42%ileMicrosoft2026-07-14
CVE-2026-58597Microsoft Edge (Chromium-based) Spoofing VulnerabilityMEDIUM4.333%ileMicrosoft2026-07-14
CVE-2026-14647onnx onnxruntime old.cc convPoolShapeInference_opset19 out-of-boundsMEDIUM4.317%ileMicrosoft2026-07-14
CVE-2026-59930Mistune toc / TableOfContents directive: heading IDs use predictable `toc_N` numbering with no slugification, allowing cMEDIUM4.34%ileMicrosoft2026-07-14
CVE-2026-58209NATS Server: MQTT retained and QoS replay bypass subscribe deny filtersMEDIUM4.316%ileMicrosoft2026-07-14
CVE-2026-63308Helm Files.Lines Denial of Service via Empty Chart FilesMEDIUM4.320%ileMicrosoft2026-07-14
CVE-2026-59850Libssh: libssh: use-after-free via data callbacks on closed channelsMEDIUM4.323%ileMicrosoft2026-07-14
CVE-2026-55945Microsoft Edge (Chromium-based) Information Disclosure VulnerabilityMEDIUM4.24%ileMicrosoft2026-07-14
CVE-2026-50302Windows Cryptographic Services Security Feature Bypass VulnerabilityMEDIUM4.215%ileMicrosoft2026-07-14
CVE-2026-59997internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can be important MEDIUM4.27%ileMicrosoft2026-07-14
CVE-2026-59996scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when the copy occurs betweeMEDIUM4.216%ileMicrosoft2026-07-14
CVE-2026-59995sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when "sftp server:/path ." is uMEDIUM4.216%ileMicrosoft2026-07-14
CVE-2026-64424netpoll: fix a use-after-free on shutdown pathMEDIUM4.16%ileMicrosoft2026-07-14
CVE-2026-13221Perl versions through 5.43.9 produce silently incorrect regular expression matches when an alternation of more than 6553MEDIUM4.036%ileMicrosoft2026-07-14
CVE-2026-15028Libarchive: heap overflow oob read while parsing a tar archive contains a pax extended headerLOW3.910%ileMicrosoft2026-07-14
CVE-2026-59846Libssh: libssh: information disclosure via proxycommand %r username expansionLOW3.92%ileMicrosoft2026-07-14
CVE-2026-9080UAF after pause in socket callbackLOW3.722%ileMicrosoft2026-07-14
CVE-2026-60000sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption from excessive auLOW3.736%ileMicrosoft2026-07-14
CVE-2026-44687Off-by-one error in 'harden-below-nxdomain' logic can shadow a stub/forward zone by a legitimate parent's NXDOMAINLOW3.712%ileMicrosoft2026-07-14
CVE-2026-46582A wildcard replay, as another piece of data, triggers poisoning in the serve expired reply pathLOW3.78%ileMicrosoft2026-07-14
CVE-2026-42955Extra fix for CVE-2026-40622 to also clamp the TTL of A/AAAA records disallowing a one-time 'ghost domain' delegation reLOW3.710%ileMicrosoft2026-07-14
CVE-2026-26080HAProxy Community Edition 3.2.x through 3.3.x before 3.3.3 can enter a loop or crash because varint is mishandled. HAProLOW3.734%ileMicrosoft2026-07-14
CVE-2026-47059Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SELOW3.723%ileMicrosoft2026-07-14
CVE-2026-62994CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` pluginLOW3.722%ileMicrosoft2026-07-14
CVE-2026-54478DNS Cookie bypass when combined with proxy-protocol useLOW3.78%ileMicrosoft2026-07-14
CVE-2026-41637Degradation of resolution service from improperly accounted client-terminated DNS-over-QUIC queriesLOW3.718%ileMicrosoft2026-07-14
CVE-2026-12547Libsoup: information disclosure in libsoup via soupauthmanager proxy credential leak on proxy switchLOW3.414%ileMicrosoft2026-07-14
CVE-2026-50419Windows Kernel Information Disclosure VulnerabilityLOW3.326%ileMicrosoft2026-07-14
CVE-2026-41579runc: Malicious image with /dev symlink can trigger limited host filesystem integrity violationsLOW3.38%ileMicrosoft2026-07-14
CVE-2026-50416Win32k Information Disclosure VulnerabilityLOW3.339%ileMicrosoft2026-07-14
CVE-2026-55708Privacy/configuration issue when adding local data in views through 'unbound-control'LOW3.15%ileMicrosoft2026-07-14
CVE-2026-16517Libarchive: libarchive: signed integer overflow in archive_write_zip_headerLOW2.90%ileMicrosoft2026-07-14
CVE-2026-38752A stack overflow in the evaluate() function (editors/awk.c) of BusyBox commit 371fe9 allows attackers to cause a Denial LOW2.911%ileMicrosoft2026-07-14
CVE-2026-64512ACPI: CPPC: Suppress UBSAN warning caused by field misuseLOW1.97%ileMicrosoft2026-07-14
CVE-2026-48561Microsoft Edge Copilot Remote Code Execution VulnerabilityUNKNOWN—52%ileMicrosoft2026-07-14
CVE-2026-56160Azure Red Hat OpenShift (ARO) Elevation of Privilege VulnerabilityUNKNOWN—48%ileMicrosoft2026-07-14
CVE-2026-16419Chromium: CVE-2026-16419 Out of bounds read and write in ANGLEUNKNOWN—10%ileMicrosoft2026-07-14
CVE-2026-16415Chromium: CVE-2026-16415 Insufficient validation of untrusted input in ExtensionsUNKNOWN—6%ileMicrosoft2026-07-14
CVE-2026-16418Chromium: CVE-2026-16418 Stack buffer overflow in V8UNKNOWN—19%ileMicrosoft2026-07-14
CVE-2026-16417Chromium: CVE-2026-16417 Uninitialized Use in SkiaUNKNOWN—6%ileMicrosoft2026-07-14
CVE-2026-16413Chromium: CVE-2026-16413 Out of bounds write in ANGLEUNKNOWN—10%ileMicrosoft2026-07-14
CVE-2026-16414Chromium: CVE-2026-16414 Insufficient validation of untrusted input in ChromecastUNKNOWN—0%ileMicrosoft2026-07-14
CVE-2026-16416Chromium: CVE-2026-16416 Integer overflow in ChromecastUNKNOWN—1%ileMicrosoft2026-07-14
CVE-2026-16424Chromium: CVE-2026-16424 Use after free in GPUUNKNOWN—13%ileMicrosoft2026-07-14
CVE-2026-16421Chromium: CVE-2026-16421 Inappropriate implementation in WebAudioUNKNOWN—27%ileMicrosoft2026-07-14
CVE-2026-16422Chromium: CVE-2026-16422 Insufficient validation of untrusted input in CertificateUNKNOWN—3%ileMicrosoft2026-07-14
CVE-2026-16423Chromium: CVE-2026-16423 Use after free in UIUNKNOWN—10%ileMicrosoft2026-07-14
CVE-2026-16804Chromium: CVE-2026-16804 Use after free in InputUNKNOWN—16%ileMicrosoft2026-07-14
CVE-2026-16805Chromium: CVE-2026-16805 Use after free in BlinkUNKNOWN—24%ileMicrosoft2026-07-14
CVE-2026-16806Chromium: CVE-2026-16806 Use after free in WebMCPUNKNOWN—33%ileMicrosoft2026-07-14
CVE-2026-15767Chromium: CVE-2026-15767 Heap buffer overflow in libyuvUNKNOWN—27%ileMicrosoft2026-07-14
CVE-2026-13775Chromium: CVE-2026-13775 Use after free in GPUUNKNOWN—25%ileMicrosoft2026-07-14
CVE-2026-13776Chromium: CVE-2026-13776 Type Confusion in DawnUNKNOWN—28%ileMicrosoft2026-07-14
CVE-2026-13779Chromium: CVE-2026-13779 Use after free in ChromotingUNKNOWN—33%ileMicrosoft2026-07-14
CVE-2026-13780Chromium: CVE-2026-13780 Insufficient validation of untrusted input in ANGLEUNKNOWN—25%ileMicrosoft2026-07-14
CVE-2026-13781Chromium: CVE-2026-13781 Insufficient validation of untrusted input in SkiaUNKNOWN—25%ileMicrosoft2026-07-14
CVE-2026-13782Chromium: CVE-2026-13782 Use after free in BrowserUNKNOWN—22%ileMicrosoft2026-07-14
CVE-2026-13783Chromium: CVE-2026-13783 Use after free in ViewsUNKNOWN—25%ileMicrosoft2026-07-14
CVE-2026-13784Chromium: CVE-2026-13784 Use after free in ViewsUNKNOWN—25%ileMicrosoft2026-07-14
CVE-2026-13786Chromium: CVE-2026-13786 Use after free in OzoneUNKNOWN—32%ileMicrosoft2026-07-14
CVE-2026-13787Chromium: CVE-2026-13787 Use after free in ChromotingUNKNOWN—35%ileMicrosoft2026-07-14
CVE-2026-13790Chromium: CVE-2026-13790 Side-channel information leakage in ScrollUNKNOWN—23%ileMicrosoft2026-07-14
CVE-2026-13793Chromium: CVE-2026-13793 Insufficient policy enforcement in SVGUNKNOWN—15%ileMicrosoft2026-07-14
CVE-2026-13794Chromium: CVE-2026-13794 Insufficient validation of untrusted input in WebAppInstallsUNKNOWN—38%ileMicrosoft2026-07-14
CVE-2026-13797Chromium: CVE-2026-13797 Insufficient validation of untrusted input in ChromecastUNKNOWN—22%ileMicrosoft2026-07-14
CVE-2026-13798Chromium: CVE-2026-13798 Heap buffer overflow in ChromecastUNKNOWN—28%ileMicrosoft2026-07-14
CVE-2026-13801Chromium: CVE-2026-13801 Integer overflow in ChromecastUNKNOWN—22%ileMicrosoft2026-07-14
CVE-2026-13802Chromium: CVE-2026-13802 Use after free in ViewsUNKNOWN—28%ileMicrosoft2026-07-14
CVE-2026-13803Chromium: CVE-2026-13803 Type Confusion in Chrome TabsUNKNOWN—25%ileMicrosoft2026-07-14
CVE-2026-13804Chromium: CVE-2026-13804 Use after free in ChromecastUNKNOWN—22%ileMicrosoft2026-07-14
CVE-2026-13848Chromium: CVE-2026-13848 Use after free in FormsUNKNOWN—29%ileMicrosoft2026-07-14
CVE-2026-13849Chromium: CVE-2026-13849 Insufficient validation of untrusted input in ChromotingUNKNOWN—4%ileMicrosoft2026-07-14
CVE-2026-13853Chromium: CVE-2026-13853 Use after free in JourneysUNKNOWN—21%ileMicrosoft2026-07-14
CVE-2026-13855Chromium: CVE-2026-13855 Use after free in OzoneUNKNOWN—25%ileMicrosoft2026-07-14
CVE-2026-13857Chromium: CVE-2026-13857 Inappropriate implementation in GeometryUNKNOWN—12%ileMicrosoft2026-07-14
CVE-2026-13858Chromium: CVE-2026-13858 Out of bounds read in FFmpegUNKNOWN—21%ileMicrosoft2026-07-14
CVE-2026-13859Chromium: CVE-2026-13859 Inappropriate implementation in ANGLEUNKNOWN—21%ileMicrosoft2026-07-14
CVE-2026-13854Chromium: CVE-2026-13854 Use after free in OzoneUNKNOWN—21%ileMicrosoft2026-07-14
CVE-2026-13860Chromium: CVE-2026-13860 Incorrect security UI in AutofillUNKNOWN—12%ileMicrosoft2026-07-14
CVE-2026-13864Chromium: CVE-2026-13864 Insufficient policy enforcement in WebHIDUNKNOWN—22%ileMicrosoft2026-07-14
CVE-2026-13861Chromium: CVE-2026-13861 Use after free in CoreUNKNOWN—21%ileMicrosoft2026-07-14
CVE-2026-13865Chromium: CVE-2026-13865 Insufficient validation of untrusted input in EnterpriseUNKNOWN—15%ileMicrosoft2026-07-14
CVE-2026-13867Chromium: CVE-2026-13867 Inappropriate implementation in GeolocationUNKNOWN—15%ileMicrosoft2026-07-14
CVE-2026-13869Chromium: CVE-2026-13869 Use after free in DeviceUNKNOWN—25%ileMicrosoft2026-07-14
CVE-2026-13871Chromium: CVE-2026-13871 Insufficient data validation in GuestViewUNKNOWN—20%ileMicrosoft2026-07-14
CVE-2026-13873Chromium: CVE-2026-13873 Out of bounds memory access in LayoutUNKNOWN—22%ileMicrosoft2026-07-14
CVE-2026-13874Chromium: CVE-2026-13874 Inappropriate implementation in DataTransferUNKNOWN—11%ileMicrosoft2026-07-14
CVE-2026-13876Chromium: CVE-2026-13876 Inappropriate implementation in NetworkUNKNOWN—14%ileMicrosoft2026-07-14
CVE-2026-13877Chromium: CVE-2026-13877 Insufficient validation of untrusted input in ANGLEUNKNOWN—20%ileMicrosoft2026-07-14
CVE-2026-13875Chromium: CVE-2026-13875 Insufficient validation of untrusted input in GPUUNKNOWN—21%ileMicrosoft2026-07-14
CVE-2026-13879Chromium: CVE-2026-13879 Use after free in BluetoothUNKNOWN—13%ileMicrosoft2026-07-14
CVE-2026-13882Chromium: CVE-2026-13882 Inappropriate implementation in USBUNKNOWN—14%ileMicrosoft2026-07-14
CVE-2026-13881Chromium: CVE-2026-13881 Insufficient data validation in WebAppInstallsUNKNOWN—12%ileMicrosoft2026-07-14
CVE-2026-13883Chromium: CVE-2026-13883 Type Confusion in ANGLEUNKNOWN—24%ileMicrosoft2026-07-14
CVE-2026-13886Chromium: CVE-2026-13886 Policy bypass in Isolated Web AppsUNKNOWN—16%ileMicrosoft2026-07-14
CVE-2026-13888Chromium: CVE-2026-13888 Use after free in ExtensionsUNKNOWN—29%ileMicrosoft2026-07-14
CVE-2026-13884Chromium: CVE-2026-13884 Heap buffer overflow in ChromecastUNKNOWN—21%ileMicrosoft2026-07-14
CVE-2026-13890Chromium: CVE-2026-13890 Out of bounds read in ChromecastUNKNOWN—19%ileMicrosoft2026-07-14
CVE-2026-13891Chromium: CVE-2026-13891 Insufficient validation of untrusted input in ExtensionsUNKNOWN—24%ileMicrosoft2026-07-14
CVE-2026-13893Chromium: CVE-2026-13893 Insufficient validation of untrusted input in WebUIUNKNOWN—22%ileMicrosoft2026-07-14
CVE-2026-13894Chromium: CVE-2026-13894 Insufficient policy enforcement in NetworkUNKNOWN—12%ileMicrosoft2026-07-14
CVE-2026-13895Chromium: CVE-2026-13895 Inappropriate implementation in AutofillUNKNOWN—12%ileMicrosoft2026-07-14
CVE-2026-13896Chromium: CVE-2026-13896 Insufficient policy enforcement in GlicUNKNOWN—16%ileMicrosoft2026-07-14
CVE-2026-13897Chromium: CVE-2026-13897 Insufficient policy enforcement in ChromecastUNKNOWN—24%ileMicrosoft2026-07-14
CVE-2026-13898Chromium: CVE-2026-13898 Use after free in Cast ReceiverUNKNOWN—34%ileMicrosoft2026-07-14
CVE-2026-13901Chromium: CVE-2026-13901 Insufficient validation of untrusted input in SerialUNKNOWN—27%ileMicrosoft2026-07-14
CVE-2026-13900Chromium: CVE-2026-13900 Insufficient validation of untrusted input in ChromecastUNKNOWN—22%ileMicrosoft2026-07-14
CVE-2026-13899Chromium: CVE-2026-13899 Use after free in HTMLUNKNOWN—34%ileMicrosoft2026-07-14
CVE-2026-13903Chromium: CVE-2026-13903 Insufficient policy enforcement in BluetoothUNKNOWN—27%ileMicrosoft2026-07-14
CVE-2026-13906Chromium: CVE-2026-13906 Out of bounds read in CodecsUNKNOWN—24%ileMicrosoft2026-07-14
CVE-2026-13909Chromium: CVE-2026-13909 Insufficient policy enforcement in DevToolsUNKNOWN—25%ileMicrosoft2026-07-14
CVE-2026-13911Chromium: CVE-2026-13911 Insufficient data validation in SpellcheckUNKNOWN—22%ileMicrosoft2026-07-14
CVE-2026-13921Chromium: CVE-2026-13921 Insufficient validation of untrusted input in DeviceBoundSessionCredentialsUNKNOWN—25%ileMicrosoft2026-07-14
CVE-2026-13922Chromium: CVE-2026-13922 Side-channel information leakage in PaintUNKNOWN—23%ileMicrosoft2026-07-14
CVE-2026-13920Chromium: CVE-2026-13920 Insufficient validation of untrusted input in MediaUNKNOWN—25%ileMicrosoft2026-07-14
CVE-2026-13919Chromium: CVE-2026-13919 Insufficient data validation in ExtensionsUNKNOWN—25%ileMicrosoft2026-07-14
CVE-2026-13925Chromium: CVE-2026-13925 Inappropriate implementation in DownloadsUNKNOWN—30%ileMicrosoft2026-07-14
CVE-2026-13928Chromium: CVE-2026-13928 Insufficient validation of untrusted input in EnterpriseUNKNOWN—25%ileMicrosoft2026-07-14
CVE-2026-13931Chromium: CVE-2026-13931 Inappropriate implementation in MediaUNKNOWN—18%ileMicrosoft2026-07-14
CVE-2026-13934Chromium: CVE-2026-13934 Insufficient validation of untrusted input in DawnUNKNOWN—25%ileMicrosoft2026-07-14
CVE-2026-13933Chromium: CVE-2026-13933 Insufficient policy enforcement in PasswordsUNKNOWN—19%ileMicrosoft2026-07-14
CVE-2026-13930Chromium: CVE-2026-13930 Insufficient policy enforcement in ActorUNKNOWN—25%ileMicrosoft2026-07-14
CVE-2026-13935Chromium: CVE-2026-13935 Side-channel information leakage in ComputePressureUNKNOWN—23%ileMicrosoft2026-07-14
CVE-2026-13937Chromium: CVE-2026-13937 Insufficient policy enforcement in PasswordsUNKNOWN—22%ileMicrosoft2026-07-14
CVE-2026-13938Chromium: CVE-2026-13938 Integer overflow in FontsUNKNOWN—25%ileMicrosoft2026-07-14
CVE-2026-13940Chromium: CVE-2026-13940 Uninitialized Use in CastUNKNOWN—12%ileMicrosoft2026-07-14
CVE-2026-13942Chromium: CVE-2026-13942 Insufficient validation of untrusted input in Video CaptureUNKNOWN—6%ileMicrosoft2026-07-14
CVE-2026-13941Chromium: CVE-2026-13941 Inappropriate implementation in SiteSettingsUNKNOWN—15%ileMicrosoft2026-07-14
CVE-2026-13945Chromium: CVE-2026-13945 Insufficient policy enforcement in ExtensionsUNKNOWN—6%ileMicrosoft2026-07-14
CVE-2026-13947Chromium: CVE-2026-13947 Uninitialized Use in XRUNKNOWN—23%ileMicrosoft2026-07-14
CVE-2026-13948Chromium: CVE-2026-13948 Insufficient policy enforcement in ExtensionsUNKNOWN—6%ileMicrosoft2026-07-14
CVE-2026-13950Chromium: CVE-2026-13950 Uninitialized Use in GPUUNKNOWN—23%ileMicrosoft2026-07-14
CVE-2026-13951Chromium: CVE-2026-13951 Policy bypass in USBUNKNOWN—22%ileMicrosoft2026-07-14
CVE-2026-13952Chromium: CVE-2026-13952 Inappropriate implementation in PerformanceAPIsUNKNOWN—13%ileMicrosoft2026-07-14
CVE-2026-13953Chromium: CVE-2026-13953 Inappropriate implementation in SplitViewUNKNOWN—19%ileMicrosoft2026-07-14
CVE-2026-13956Chromium: CVE-2026-13956 Incorrect security UI in PageInfoUNKNOWN—12%ileMicrosoft2026-07-14
CVE-2026-13958Chromium: CVE-2026-13958 Uninitialized Use in CodecsUNKNOWN—24%ileMicrosoft2026-07-14
CVE-2026-13957Chromium: CVE-2026-13957 Incorrect security UI in ExtensionsUNKNOWN—7%ileMicrosoft2026-07-14
CVE-2026-13959Chromium: CVE-2026-13959 Insufficient validation of untrusted input in BlinkUNKNOWN—16%ileMicrosoft2026-07-14
CVE-2026-13960Chromium: CVE-2026-13960 Inappropriate implementation in PasswordsUNKNOWN—15%ileMicrosoft2026-07-14
CVE-2026-13962Chromium: CVE-2026-13962 Insufficient data validation in PDFUNKNOWN—20%ileMicrosoft2026-07-14
CVE-2026-13963Chromium: CVE-2026-13963 Inappropriate implementation in DevToolsUNKNOWN—10%ileMicrosoft2026-07-14
CVE-2026-13965Chromium: CVE-2026-13965 Use after free in OilpanUNKNOWN—30%ileMicrosoft2026-07-14
CVE-2026-13967Chromium: CVE-2026-13967 Type Confusion in V8UNKNOWN—38%ileMicrosoft2026-07-14
CVE-2026-13966Chromium: CVE-2026-13966 Inappropriate implementation in HistoryUNKNOWN—15%ileMicrosoft2026-07-14
CVE-2026-13968Chromium: CVE-2026-13968 Insufficient validation of untrusted input in DevToolsUNKNOWN—26%ileMicrosoft2026-07-14
CVE-2026-13970Chromium: CVE-2026-13970 Uninitialized Use in MediaUNKNOWN—21%ileMicrosoft2026-07-14
CVE-2026-13972Chromium: CVE-2026-13972 Inappropriate implementation in PaintUNKNOWN—13%ileMicrosoft2026-07-14
CVE-2026-13971Chromium: CVE-2026-13971 Uninitialized Use in SkiaUNKNOWN—21%ileMicrosoft2026-07-14
CVE-2026-13973Chromium: CVE-2026-13973 Inappropriate implementation in UIUNKNOWN—9%ileMicrosoft2026-07-14
CVE-2026-13976Chromium: CVE-2026-13976 Heap buffer overflow in StorageUNKNOWN—8%ileMicrosoft2026-07-14
CVE-2026-13977Chromium: CVE-2026-13977 Inappropriate implementation in HTMLParserUNKNOWN—7%ileMicrosoft2026-07-14
CVE-2026-13978Chromium: CVE-2026-13978 Insufficient policy enforcement in PageInfoUNKNOWN—14%ileMicrosoft2026-07-14
CVE-2026-13979Chromium: CVE-2026-13979 Inappropriate implementation in PaintUNKNOWN—14%ileMicrosoft2026-07-14
CVE-2026-13982Chromium: CVE-2026-13982 Incorrect security UI in PasswordsUNKNOWN—11%ileMicrosoft2026-07-14
CVE-2026-13984Chromium: CVE-2026-13984 Incorrect security UI in TabStripUNKNOWN—8%ileMicrosoft2026-07-14
CVE-2026-13985Chromium: CVE-2026-13985 Inappropriate implementation in MediaCaptureUNKNOWN—17%ileMicrosoft2026-07-14
CVE-2026-13986Chromium: CVE-2026-13986 Inappropriate implementation in Media UIUNKNOWN—11%ileMicrosoft2026-07-14
CVE-2026-13989Chromium: CVE-2026-13989 Insufficient policy enforcement in PageInfoUNKNOWN—11%ileMicrosoft2026-07-14
CVE-2026-13988Chromium: CVE-2026-13988 Inappropriate implementation in PaintUNKNOWN—12%ileMicrosoft2026-07-14
CVE-2026-13993Chromium: CVE-2026-13993 Incorrect security UI in WebAppInstallsUNKNOWN—5%ileMicrosoft2026-07-14
CVE-2026-13990Chromium: CVE-2026-13990 Insufficient validation of untrusted input in DataTransferUNKNOWN—9%ileMicrosoft2026-07-14
CVE-2026-13996Chromium: CVE-2026-13996 Incorrect security UI in PermissionsUNKNOWN—12%ileMicrosoft2026-07-14
CVE-2026-13999Chromium: CVE-2026-13999 Inappropriate implementation in ExtensionsUNKNOWN—7%ileMicrosoft2026-07-14
CVE-2026-14000Chromium: CVE-2026-14000 Inappropriate implementation in XMLUNKNOWN—7%ileMicrosoft2026-07-14
CVE-2026-14001Chromium: CVE-2026-14001 Inappropriate implementation in NetworkUNKNOWN—7%ileMicrosoft2026-07-14
CVE-2026-14002Chromium: CVE-2026-14002 Inappropriate implementation in GeolocationUNKNOWN—12%ileMicrosoft2026-07-14
CVE-2026-14003Chromium: CVE-2026-14003 Insufficient policy enforcement in ExtensionsUNKNOWN—4%ileMicrosoft2026-07-14
CVE-2026-14004Chromium: CVE-2026-14004 Inappropriate implementation in CSSUNKNOWN—22%ileMicrosoft2026-07-14
CVE-2026-14006Chromium: CVE-2026-14006 Use after free in NavigationUNKNOWN—21%ileMicrosoft2026-07-14
CVE-2026-14007Chromium: CVE-2026-14007 Insufficient policy enforcement in PermissionsPolicyUNKNOWN—18%ileMicrosoft2026-07-14
CVE-2026-14008Chromium: CVE-2026-14008 Uninitialized Use in WebXRUNKNOWN—16%ileMicrosoft2026-07-14
CVE-2026-14009Chromium: CVE-2026-14009 Insufficient data validation in PasswordsUNKNOWN—17%ileMicrosoft2026-07-14
CVE-2026-14010Chromium: CVE-2026-14010 Uninitialized Use in CodecsUNKNOWN—24%ileMicrosoft2026-07-14
CVE-2026-14011Chromium: CVE-2026-14011 Out of bounds read in SurfaceCaptureUNKNOWN—16%ileMicrosoft2026-07-14
CVE-2026-14012Chromium: CVE-2026-14012 Side-channel information leakage in CSSUNKNOWN—11%ileMicrosoft2026-07-14
CVE-2026-14013Chromium: CVE-2026-14013 Inappropriate implementation in SVGUNKNOWN—9%ileMicrosoft2026-07-14
CVE-2026-14014Chromium: CVE-2026-14014 Inappropriate implementation in PaintUNKNOWN—14%ileMicrosoft2026-07-14
CVE-2026-14015Chromium: CVE-2026-14015 Inappropriate implementation in WebRTCUNKNOWN—11%ileMicrosoft2026-07-14
CVE-2026-14018Chromium: CVE-2026-14018 Use after free in UpdaterUNKNOWN—1%ileMicrosoft2026-07-14
CVE-2026-14016Chromium: CVE-2026-14016 Insufficient policy enforcement in SVGUNKNOWN—10%ileMicrosoft2026-07-14
CVE-2026-14017Chromium: CVE-2026-14017 Inappropriate implementation in NavigationUNKNOWN—18%ileMicrosoft2026-07-14
CVE-2026-14019Chromium: CVE-2026-14019 Inappropriate implementation in PasswordsUNKNOWN—16%ileMicrosoft2026-07-14
CVE-2026-14020Chromium: CVE-2026-14020 Insufficient validation of untrusted input in WebXRUNKNOWN—10%ileMicrosoft2026-07-14
CVE-2026-14021Chromium: CVE-2026-14021 Insufficient validation of untrusted input in StorageAccessAPIUNKNOWN—17%ileMicrosoft2026-07-14
CVE-2026-14022Chromium: CVE-2026-14022 Insufficient validation of untrusted input in NetworkUNKNOWN—22%ileMicrosoft2026-07-14
CVE-2026-14023Chromium: CVE-2026-14023 Insufficient validation of untrusted input in SanitizerAPIUNKNOWN—24%ileMicrosoft2026-07-14
CVE-2026-14025Chromium: CVE-2026-14025 Use after free in ViewsUNKNOWN—24%ileMicrosoft2026-07-14
CVE-2026-14024Chromium: CVE-2026-14024 Use after free in OzoneUNKNOWN—24%ileMicrosoft2026-07-14
CVE-2026-14027Chromium: CVE-2026-14027 Use after free in SignInUNKNOWN—18%ileMicrosoft2026-07-14
CVE-2026-14031Chromium: CVE-2026-14031 Incorrect security UI in File InputUNKNOWN—7%ileMicrosoft2026-07-14
CVE-2026-14032Chromium: CVE-2026-14032 Use after free in BluetoothUNKNOWN—19%ileMicrosoft2026-07-14
CVE-2026-14030Chromium: CVE-2026-14030 Incorrect security UI in SplitViewUNKNOWN—6%ileMicrosoft2026-07-14
CVE-2026-14034Chromium: CVE-2026-14034 Inappropriate implementation in WebXRUNKNOWN—14%ileMicrosoft2026-07-14
CVE-2026-14033Chromium: CVE-2026-14033 Insufficient policy enforcement in MediaUNKNOWN—20%ileMicrosoft2026-07-14
CVE-2026-14035Chromium: CVE-2026-14035 Insufficient policy enforcement in BluetoothUNKNOWN—14%ileMicrosoft2026-07-14
CVE-2026-14036Chromium: CVE-2026-14036 Insufficient policy enforcement in BluetoothUNKNOWN—18%ileMicrosoft2026-07-14
CVE-2026-14038Chromium: CVE-2026-14038 Insufficient validation of untrusted input in New Tab PageUNKNOWN—17%ileMicrosoft2026-07-14
CVE-2026-14039Chromium: CVE-2026-14039 Insufficient policy enforcement in GetUserMediaUNKNOWN—6%ileMicrosoft2026-07-14
CVE-2026-14037Chromium: CVE-2026-14037 Insufficient policy enforcement in GPUUNKNOWN—17%ileMicrosoft2026-07-14
CVE-2026-14040Chromium: CVE-2026-14040 Use after free in BrowserTagUNKNOWN—12%ileMicrosoft2026-07-14
CVE-2026-14042Chromium: CVE-2026-14042 Inappropriate implementation in Isolated Web AppsUNKNOWN—10%ileMicrosoft2026-07-14
CVE-2026-14041Chromium: CVE-2026-14041 Insufficient policy enforcement in SerialUNKNOWN—18%ileMicrosoft2026-07-14
CVE-2026-14043Chromium: CVE-2026-14043 Use after free in GetUserMediaUNKNOWN—18%ileMicrosoft2026-07-14
CVE-2026-14044Chromium: CVE-2026-14044 Use after free in ANGLEUNKNOWN—18%ileMicrosoft2026-07-14
CVE-2026-14045Chromium: CVE-2026-14045 Insufficient validation of untrusted input in NetworkUNKNOWN—10%ileMicrosoft2026-07-14
CVE-2026-14046Chromium: CVE-2026-14046 Inappropriate implementation in CustomTabsUNKNOWN—8%ileMicrosoft2026-07-14
CVE-2026-14047Chromium: CVE-2026-14047 Insufficient policy enforcement in ExtensionsUNKNOWN—8%ileMicrosoft2026-07-14
CVE-2026-14048Chromium: CVE-2026-14048 Use after free in ChromecastUNKNOWN—2%ileMicrosoft2026-07-14
CVE-2026-14049Chromium: CVE-2026-14049 Inappropriate implementation in GPUUNKNOWN—12%ileMicrosoft2026-07-14
CVE-2026-14050Chromium: CVE-2026-14050 Insufficient policy enforcement in PasswordsUNKNOWN—17%ileMicrosoft2026-07-14
CVE-2026-14051Chromium: CVE-2026-14051 Uninitialized Use in GamepadAPIUNKNOWN—18%ileMicrosoft2026-07-14
CVE-2026-14052Chromium: CVE-2026-14052 Insufficient policy enforcement in FileSystemUNKNOWN—14%ileMicrosoft2026-07-14
CVE-2026-14055Chromium: CVE-2026-14055 Insufficient validation of untrusted input in Device TrustUNKNOWN—18%ileMicrosoft2026-07-14
CVE-2026-14053Chromium: CVE-2026-14053 Insufficient policy enforcement in ExtensionsUNKNOWN—7%ileMicrosoft2026-07-14
CVE-2026-14056Chromium: CVE-2026-14056 Insufficient validation of untrusted input in MediaUNKNOWN—15%ileMicrosoft2026-07-14
CVE-2026-14054Chromium: CVE-2026-14054 Insufficient policy enforcement in NetworkUNKNOWN—14%ileMicrosoft2026-07-14
CVE-2026-14057Chromium: CVE-2026-14057 Insufficient policy enforcement in FedCMUNKNOWN—9%ileMicrosoft2026-07-14
CVE-2026-14058Chromium: CVE-2026-14058 Policy bypass in ParserUNKNOWN—15%ileMicrosoft2026-07-14
CVE-2026-14060Chromium: CVE-2026-14060 Insufficient validation of untrusted input in ChromotingUNKNOWN—3%ileMicrosoft2026-07-14
CVE-2026-14062Chromium: CVE-2026-14062 Inappropriate implementation in ViewsUNKNOWN—15%ileMicrosoft2026-07-14
CVE-2026-14059Chromium: CVE-2026-14059 Insufficient policy enforcement in Related-Website-SetsUNKNOWN—17%ileMicrosoft2026-07-14
CVE-2026-14061Chromium: CVE-2026-14061 Inappropriate implementation in DawnUNKNOWN—14%ileMicrosoft2026-07-14
CVE-2026-14063Chromium: CVE-2026-14063 Out of bounds memory access in ChromecastUNKNOWN—4%ileMicrosoft2026-07-14
CVE-2026-14064Chromium: CVE-2026-14064 Use after free in PageInfoUNKNOWN—20%ileMicrosoft2026-07-14
CVE-2026-14065Chromium: CVE-2026-14065 Insufficient validation of untrusted input in PageInfoUNKNOWN—24%ileMicrosoft2026-07-14
CVE-2026-14068Chromium: CVE-2026-14068 Inappropriate implementation in OmniboxUNKNOWN—9%ileMicrosoft2026-07-14
CVE-2026-14026Chromium: CVE-2026-14026 Incorrect security UI in SplitViewUNKNOWN—6%ileMicrosoft2026-07-14
CVE-2026-14069Chromium: CVE-2026-14069 Integer overflow in WebNNUNKNOWN—15%ileMicrosoft2026-07-14
CVE-2026-14070Chromium: CVE-2026-14070 Uninitialized Use in WebNNUNKNOWN—18%ileMicrosoft2026-07-14
CVE-2026-14072Chromium: CVE-2026-14072 Incorrect security UI in SplitViewUNKNOWN—10%ileMicrosoft2026-07-14
CVE-2026-14071Chromium: CVE-2026-14071 Side-channel information leakage in WebAudioUNKNOWN—15%ileMicrosoft2026-07-14
CVE-2026-14073Chromium: CVE-2026-14073 Insufficient policy enforcement in WebXRUNKNOWN—9%ileMicrosoft2026-07-14
CVE-2026-14076Chromium: CVE-2026-14076 Policy bypass in NetworkUNKNOWN—9%ileMicrosoft2026-07-14
CVE-2026-14077Chromium: CVE-2026-14077 Incorrect security UI in SelectUNKNOWN—7%ileMicrosoft2026-07-14
CVE-2026-14078Chromium: CVE-2026-14078 Policy bypass in WebRTCUNKNOWN—18%ileMicrosoft2026-07-14
CVE-2026-14079Chromium: CVE-2026-14079 Policy bypass in NetworkUNKNOWN—9%ileMicrosoft2026-07-14
CVE-2026-14081Chromium: CVE-2026-14081 Insufficient policy enforcement in DevToolsUNKNOWN—8%ileMicrosoft2026-07-14
CVE-2026-14080Chromium: CVE-2026-14080 Insufficient validation of untrusted input in TabSwitcherUNKNOWN—9%ileMicrosoft2026-07-14
CVE-2026-14082Chromium: CVE-2026-14082 Race in StorageUNKNOWN—12%ileMicrosoft2026-07-14
CVE-2026-14074Chromium: CVE-2026-14074 Side-channel information leakage in WebAuthenticationUNKNOWN—21%ileMicrosoft2026-07-14
CVE-2026-14083Chromium: CVE-2026-14083 Insufficient validation of untrusted input in HTMLUNKNOWN—9%ileMicrosoft2026-07-14
CVE-2026-14084Chromium: CVE-2026-14084 Insufficient validation of untrusted input in ChromotingUNKNOWN—16%ileMicrosoft2026-07-14
CVE-2026-14085Chromium: CVE-2026-14085 Side-channel information leakage in CSSUNKNOWN—17%ileMicrosoft2026-07-14
CVE-2026-14086Chromium: CVE-2026-14086 Insufficient policy enforcement in HIDUNKNOWN—24%ileMicrosoft2026-07-14
CVE-2026-14087Chromium: CVE-2026-14087 Insufficient validation of untrusted input in WebNNUNKNOWN—21%ileMicrosoft2026-07-14
CVE-2026-14089Chromium: CVE-2026-14089 Insufficient validation of untrusted input in PopupBlockerUNKNOWN—10%ileMicrosoft2026-07-14
CVE-2026-14088Chromium: CVE-2026-14088 Uninitialized Use in CanvasUNKNOWN—18%ileMicrosoft2026-07-14
CVE-2026-14090Chromium: CVE-2026-14090 Out of bounds read in CameraCaptureUNKNOWN—18%ileMicrosoft2026-07-14
CVE-2026-14092Chromium: CVE-2026-14092 Insufficient policy enforcement in PrivacyUNKNOWN—4%ileMicrosoft2026-07-14
CVE-2026-14095Chromium: CVE-2026-14095 Insufficient validation of untrusted input in BrowserUNKNOWN—16%ileMicrosoft2026-07-14
CVE-2026-14093Chromium: CVE-2026-14093 Use after free in CastUNKNOWN—16%ileMicrosoft2026-07-14
CVE-2026-14094Chromium: CVE-2026-14094 Use after free in InstallerUNKNOWN—1%ileMicrosoft2026-07-14
CVE-2026-14097Chromium: CVE-2026-14097 Inappropriate implementation in WebAppInstallsUNKNOWN—16%ileMicrosoft2026-07-14
CVE-2026-14100Chromium: CVE-2026-14100 Insufficient data validation in NetworkCacheUNKNOWN—15%ileMicrosoft2026-07-14
CVE-2026-14102Chromium: CVE-2026-14102 Use after free in PasswordsUNKNOWN—17%ileMicrosoft2026-07-14
CVE-2026-14104Chromium: CVE-2026-14104 Insufficient validation of untrusted input in WebAppInstallsUNKNOWN—33%ileMicrosoft2026-07-14
CVE-2026-14103Chromium: CVE-2026-14103 Use after free in SSLUNKNOWN—17%ileMicrosoft2026-07-14
CVE-2026-14098Chromium: CVE-2026-14098 Inappropriate implementation in CSSUNKNOWN—15%ileMicrosoft2026-07-14
CVE-2026-14105Chromium: CVE-2026-14105 Insufficient policy enforcement in SpeechUNKNOWN—7%ileMicrosoft2026-07-14
CVE-2026-14106Chromium: CVE-2026-14106 Insufficient validation of untrusted input in TextUNKNOWN—18%ileMicrosoft2026-07-14
CVE-2026-14091Chromium: CVE-2026-14091 Use after free in DevToolsUNKNOWN—21%ileMicrosoft2026-07-14
CVE-2026-14107Chromium: CVE-2026-14107 Use after free in SchedulingUNKNOWN—21%ileMicrosoft2026-07-14
CVE-2026-14108Chromium: CVE-2026-14108 Use after free in PDFiumUNKNOWN—19%ileMicrosoft2026-07-14
CVE-2026-14109Chromium: CVE-2026-14109 Insufficient policy enforcement in MojoUNKNOWN—18%ileMicrosoft2026-07-14
CVE-2026-14110Chromium: CVE-2026-14110 Inappropriate implementation in DarkModeUNKNOWN—9%ileMicrosoft2026-07-14
CVE-2026-14111Chromium: CVE-2026-14111 Use after free in WebProtectUNKNOWN—24%ileMicrosoft2026-07-14
CVE-2026-14113Chromium: CVE-2026-14113 Use after free in UpdaterUNKNOWN—17%ileMicrosoft2026-07-14
CVE-2026-14115Chromium: CVE-2026-14115 Insufficient validation of untrusted input in CastUNKNOWN—15%ileMicrosoft2026-07-14
CVE-2026-14112Chromium: CVE-2026-14112 Inappropriate implementation in EnterpriseUNKNOWN—13%ileMicrosoft2026-07-14
CVE-2026-14117Chromium: CVE-2026-14117 Insufficient validation of untrusted input in DevToolsUNKNOWN—14%ileMicrosoft2026-07-14
CVE-2026-14118Chromium: CVE-2026-14118 Insufficient data validation in DevToolsUNKNOWN—16%ileMicrosoft2026-07-14
CVE-2026-14119Chromium: CVE-2026-14119 Type Confusion in BluetoothUNKNOWN—2%ileMicrosoft2026-07-14
CVE-2026-14120Chromium: CVE-2026-14120 Inappropriate implementation in DevToolsUNKNOWN—18%ileMicrosoft2026-07-14
CVE-2026-14116Chromium: CVE-2026-14116 Insufficient validation of untrusted input in DevToolsUNKNOWN—11%ileMicrosoft2026-07-14
CVE-2026-14121Chromium: CVE-2026-14121 Use after free in ChromotingUNKNOWN—26%ileMicrosoft2026-07-14
CVE-2026-14124Chromium: CVE-2026-14124 Inappropriate implementation in CredentialProviderUNKNOWN—1%ileMicrosoft2026-07-14
CVE-2026-14125Chromium: CVE-2026-14125 Uninitialized Use in ANGLEUNKNOWN—18%ileMicrosoft2026-07-14
CVE-2026-14122Chromium: CVE-2026-14122 Insufficient validation of untrusted input in WebAppInstallsUNKNOWN—15%ileMicrosoft2026-07-14
CVE-2026-14127Chromium: CVE-2026-14127 Inappropriate implementation in PrintingUNKNOWN—10%ileMicrosoft2026-07-14
CVE-2026-14129Chromium: CVE-2026-14129 Incorrect security UI in PreviewTabUNKNOWN—5%ileMicrosoft2026-07-14
CVE-2026-14130Chromium: CVE-2026-14130 Incorrect security UI in OmniboxUNKNOWN—10%ileMicrosoft2026-07-14
CVE-2026-14133Chromium: CVE-2026-14133 Race in History EmbeddingsUNKNOWN—5%ileMicrosoft2026-07-14
CVE-2026-14131Chromium: CVE-2026-14131 Insufficient validation of untrusted input in WebAppInstallsUNKNOWN—8%ileMicrosoft2026-07-14
CVE-2026-14132Chromium: CVE-2026-14132 Inappropriate implementation in WebXRUNKNOWN—8%ileMicrosoft2026-07-14
CVE-2026-14134Chromium: CVE-2026-14134 Inappropriate implementation in AutofillUNKNOWN—8%ileMicrosoft2026-07-14
CVE-2026-14139Chromium: CVE-2026-14139 Inappropriate implementation in TabStripUNKNOWN—6%ileMicrosoft2026-07-14
CVE-2026-14140Chromium: CVE-2026-14140 Insufficient validation of untrusted input in InputUNKNOWN—10%ileMicrosoft2026-07-14
CVE-2026-14141Chromium: CVE-2026-14141 Incorrect security UI in Document Picture-in-PictureUNKNOWN—10%ileMicrosoft2026-07-14
CVE-2026-14142Chromium: CVE-2026-14142 Inappropriate implementation in ExtensionsUNKNOWN—7%ileMicrosoft2026-07-14
CVE-2026-14135Chromium: CVE-2026-14135 Insufficient validation of untrusted input in NetworkUNKNOWN—7%ileMicrosoft2026-07-14
CVE-2026-14138Chromium: CVE-2026-14138 Inappropriate implementation in WebAppInstallsUNKNOWN—6%ileMicrosoft2026-07-14
CVE-2026-14144Chromium: CVE-2026-14144 Incorrect security UI in ViewsUNKNOWN—4%ileMicrosoft2026-07-14
CVE-2026-14143Chromium: CVE-2026-14143 Incorrect security UI in PasswordsUNKNOWN—8%ileMicrosoft2026-07-14
CVE-2026-14145Chromium: CVE-2026-14145 Inappropriate implementation in CSSUNKNOWN—4%ileMicrosoft2026-07-14
CVE-2026-14146Chromium: CVE-2026-14146 Inappropriate implementation in CSSUNKNOWN—17%ileMicrosoft2026-07-14
CVE-2026-14148Chromium: CVE-2026-14148 Type Confusion in CSSUNKNOWN—13%ileMicrosoft2026-07-14
CVE-2026-14147Chromium: CVE-2026-14147 Inappropriate implementation in CSSUNKNOWN—4%ileMicrosoft2026-07-14
CVE-2026-14152Chromium: CVE-2026-14152 Out of bounds write in ANGLEUNKNOWN—14%ileMicrosoft2026-07-14
CVE-2026-14150Chromium: CVE-2026-14150 Insufficient validation of untrusted input in SpeechUNKNOWN—5%ileMicrosoft2026-07-14
CVE-2026-14149Chromium: CVE-2026-14149 Use after free in AudioUNKNOWN—25%ileMicrosoft2026-07-14
CVE-2026-14151Chromium: CVE-2026-14151 Inappropriate implementation in AIUNKNOWN—13%ileMicrosoft2026-07-14
CVE-2026-14155Chromium: CVE-2026-14155 Insufficient policy enforcement in StorageAccessAPIUNKNOWN—11%ileMicrosoft2026-07-14
CVE-2026-14153Chromium: CVE-2026-14153 Inappropriate implementation in GlicUNKNOWN—8%ileMicrosoft2026-07-14
CVE-2026-14154Chromium: CVE-2026-14154 Inappropriate implementation in DevToolsUNKNOWN—3%ileMicrosoft2026-07-14
CVE-2026-14156Chromium: CVE-2026-14156 Policy bypass in StorageAccessAPIUNKNOWN—10%ileMicrosoft2026-07-14
CVE-2026-13961Chromium: CVE-2026-13961 Insufficient validation of untrusted input in DevToolsUNKNOWN—20%ileMicrosoft2026-07-14
CVE-2026-13774Chromium: CVE-2026-13774 Use after free in ExtensionsUNKNOWN—29%ileMicrosoft2026-07-14
CVE-2026-13777Chromium: CVE-2026-13777 Insufficient validation of untrusted input in iOSWebUNKNOWN—22%ileMicrosoft2026-07-14
CVE-2026-13778Chromium: CVE-2026-13778 Use after free in WebUSBUNKNOWN—10%ileMicrosoft2026-07-14
CVE-2026-13788Chromium: CVE-2026-13788 Use after free in FullscreenUNKNOWN—34%ileMicrosoft2026-07-14
CVE-2026-13791Chromium: CVE-2026-13791 Insufficient validation of untrusted input in DownloadsUNKNOWN—28%ileMicrosoft2026-07-14
CVE-2026-13795Chromium: CVE-2026-13795 Insufficient policy enforcement in Chrome for iOSUNKNOWN—18%ileMicrosoft2026-07-14
CVE-2026-13785Chromium: CVE-2026-13785 Use after free in BluetoothUNKNOWN—25%ileMicrosoft2026-07-14
CVE-2026-13805Chromium: CVE-2026-13805 Use after free in GFXUNKNOWN—29%ileMicrosoft2026-07-14
CVE-2026-13807Chromium: CVE-2026-13807 Use after free in ImportUNKNOWN—23%ileMicrosoft2026-07-14
CVE-2026-13812Chromium: CVE-2026-13812 Insufficient validation of untrusted input in Chrome for iOSUNKNOWN—11%ileMicrosoft2026-07-14
CVE-2026-13809Chromium: CVE-2026-13809 Side-channel information leakage in Safe BrowsingUNKNOWN—21%ileMicrosoft2026-07-14
CVE-2026-13808Chromium: CVE-2026-13808 Insufficient data validation in Chrome for iOSUNKNOWN—9%ileMicrosoft2026-07-14
CVE-2026-13816Chromium: CVE-2026-13816 Insufficient validation of untrusted input in File InputUNKNOWN—22%ileMicrosoft2026-07-14
CVE-2026-13813Chromium: CVE-2026-13813 Insufficient validation of untrusted input in Chrome for iOSUNKNOWN—22%ileMicrosoft2026-07-14
CVE-2026-13825Chromium: CVE-2026-13825 Uninitialized Use in DawnUNKNOWN—24%ileMicrosoft2026-07-14
CVE-2026-13819Chromium: CVE-2026-13819 Out of bounds read in ANGLEUNKNOWN—24%ileMicrosoft2026-07-14
CVE-2026-13822Chromium: CVE-2026-13822 Inappropriate implementation in ExtensionsUNKNOWN—6%ileMicrosoft2026-07-14
CVE-2026-13826Chromium: CVE-2026-13826 Inappropriate implementation in AutofillUNKNOWN—14%ileMicrosoft2026-07-14
CVE-2026-13827Chromium: CVE-2026-13827 Use after free in UpdaterUNKNOWN—4%ileMicrosoft2026-07-14
CVE-2026-13833Chromium: CVE-2026-13833 Uninitialized Use in ANGLEUNKNOWN—22%ileMicrosoft2026-07-14
CVE-2026-13843Chromium: CVE-2026-13843 Insufficient validation of untrusted input in Chrome for iOSUNKNOWN—25%ileMicrosoft2026-07-14
CVE-2026-13842Chromium: CVE-2026-13842 Incorrect security UI in Chrome for iOSUNKNOWN—14%ileMicrosoft2026-07-14
CVE-2026-13846Chromium: CVE-2026-13846 Use after free in USBUNKNOWN—25%ileMicrosoft2026-07-14
CVE-2026-13847Chromium: CVE-2026-13847 Insufficient validation of untrusted input in Chrome for iOSUNKNOWN—23%ileMicrosoft2026-07-14
CVE-2026-13792Chromium: CVE-2026-13792 Use after free in TouchbarUNKNOWN—25%ileMicrosoft2026-07-14
CVE-2026-13851Chromium: CVE-2026-13851 Insufficient validation of untrusted input in WebAppInstallsUNKNOWN—21%ileMicrosoft2026-07-14
CVE-2026-13852Chromium: CVE-2026-13852 Insufficient validation of untrusted input in WebAppInstallsUNKNOWN—21%ileMicrosoft2026-07-14
CVE-2026-13850Chromium: CVE-2026-13850 Insufficient validation of untrusted input in Chrome for iOSUNKNOWN—20%ileMicrosoft2026-07-14
CVE-2026-13856Chromium: CVE-2026-13856 Insufficient validation of untrusted input in SpeechUNKNOWN—22%ileMicrosoft2026-07-14
CVE-2026-13862CVE-2026-13862UNKNOWN—17%ileMicrosoft2026-07-14
CVE-2026-13863Chromium: CVE-2026-13863 Insufficient validation of untrusted input in CustomTabsUNKNOWN—6%ileMicrosoft2026-07-14
CVE-2026-13866Chromium: CVE-2026-13866 Insufficient validation of untrusted input in InputUNKNOWN—19%ileMicrosoft2026-07-14
CVE-2026-13868Chromium: CVE-2026-13868 Inappropriate implementation in NetworkUNKNOWN—12%ileMicrosoft2026-07-14
CVE-2026-13870Chromium: CVE-2026-13870 Use after free in WebViewUNKNOWN—38%ileMicrosoft2026-07-14
CVE-2026-13878Chromium: CVE-2026-13878 Use after free in BluetoothUNKNOWN—21%ileMicrosoft2026-07-14
CVE-2026-13872Chromium: CVE-2026-13872 Insufficient validation of untrusted input in WebAppInstallsUNKNOWN—19%ileMicrosoft2026-07-14
CVE-2026-13880Chromium: CVE-2026-13880 Use after free in USBUNKNOWN—21%ileMicrosoft2026-07-14
CVE-2026-13885Chromium: CVE-2026-13885 Use after free in SkiaUNKNOWN—30%ileMicrosoft2026-07-14
CVE-2026-13887Chromium: CVE-2026-13887 Insufficient policy enforcement in NFCUNKNOWN—14%ileMicrosoft2026-07-14
CVE-2026-13889Chromium: CVE-2026-13889 Insufficient validation of untrusted input in WebAuthenticationUNKNOWN—23%ileMicrosoft2026-07-14
CVE-2026-13904Chromium: CVE-2026-13904 Incorrect security UI in Safe BrowsingUNKNOWN—18%ileMicrosoft2026-07-14
CVE-2026-13892Chromium: CVE-2026-13892 Inappropriate implementation in Chrome for iOSUNKNOWN—20%ileMicrosoft2026-07-14
CVE-2026-13902Chromium: CVE-2026-13902 Inappropriate implementation in Chrome for iOSUNKNOWN—15%ileMicrosoft2026-07-14
CVE-2026-13905Chromium: CVE-2026-13905 Incorrect security UI in Chrome for iOSUNKNOWN—4%ileMicrosoft2026-07-14
CVE-2026-13914Chromium: CVE-2026-13914 Inappropriate implementation in PasswordsUNKNOWN—6%ileMicrosoft2026-07-14
CVE-2026-13907Chromium: CVE-2026-13907 Inappropriate implementation in iOSWebUNKNOWN—12%ileMicrosoft2026-07-14
CVE-2026-13912Chromium: CVE-2026-13912 Incorrect security UI in Safe BrowsingUNKNOWN—15%ileMicrosoft2026-07-14
CVE-2026-13910Chromium: CVE-2026-13910 Insufficient policy enforcement in WebXRUNKNOWN—22%ileMicrosoft2026-07-14
CVE-2026-13913Chromium: CVE-2026-13913 Insufficient policy enforcement in AutofillUNKNOWN—15%ileMicrosoft2026-07-14
CVE-2026-13908Chromium: CVE-2026-13908 Insufficient validation of untrusted input in OmniboxUNKNOWN—14%ileMicrosoft2026-07-14
CVE-2026-13916Chromium: CVE-2026-13916 Inappropriate implementation in Chrome for iOSUNKNOWN—15%ileMicrosoft2026-07-14
CVE-2026-13915Chromium: CVE-2026-13915 Use after free in Chrome for iOSUNKNOWN—25%ileMicrosoft2026-07-14
CVE-2026-13917Chromium: CVE-2026-13917 Insufficient validation of untrusted input in Chrome for iOSUNKNOWN—16%ileMicrosoft2026-07-14
CVE-2026-13923Chromium: CVE-2026-13923 Uninitialized Use in GPUUNKNOWN—25%ileMicrosoft2026-07-14
CVE-2026-13926Chromium: CVE-2026-13926 Insufficient validation of untrusted input in NetworkUNKNOWN—24%ileMicrosoft2026-07-14
CVE-2026-13918Chromium: CVE-2026-13918 Use after free in Chrome for iOSUNKNOWN—25%ileMicrosoft2026-07-14
CVE-2026-13924Chromium: CVE-2026-13924 Insufficient validation of untrusted input in WebViewUNKNOWN—24%ileMicrosoft2026-07-14
CVE-2026-13929Chromium: CVE-2026-13929 Insufficient validation of untrusted input in DevToolsUNKNOWN—8%ileMicrosoft2026-07-14
CVE-2026-13932Chromium: CVE-2026-13932 Inappropriate implementation in SharingUNKNOWN—21%ileMicrosoft2026-07-14
CVE-2026-13936Chromium: CVE-2026-13936 Inappropriate implementation in PasswordsUNKNOWN—21%ileMicrosoft2026-07-14
CVE-2026-13943Chromium: CVE-2026-13943 Uninitialized Use in CSSUNKNOWN—25%ileMicrosoft2026-07-14
CVE-2026-13939Chromium: CVE-2026-13939 Insufficient validation of untrusted input in WebShareUNKNOWN—13%ileMicrosoft2026-07-14
CVE-2026-13944Chromium: CVE-2026-13944 Inappropriate implementation in DataTransferUNKNOWN—10%ileMicrosoft2026-07-14
CVE-2026-13946Chromium: CVE-2026-13946 Inappropriate implementation in ScriptInjectionsUNKNOWN—13%ileMicrosoft2026-07-14
CVE-2026-13949Chromium: CVE-2026-13949 Insufficient policy enforcement in PaymentsUNKNOWN—14%ileMicrosoft2026-07-14
CVE-2026-13955Chromium: CVE-2026-13955 Insufficient validation of untrusted input in CustomTabsUNKNOWN—5%ileMicrosoft2026-07-14
CVE-2026-13927Chromium: CVE-2026-13927 Insufficient validation of untrusted input in UIUNKNOWN—6%ileMicrosoft2026-07-14
CVE-2026-13964Chromium: CVE-2026-13964 Insufficient policy enforcement in WebViewUNKNOWN—20%ileMicrosoft2026-07-14
CVE-2026-13969Chromium: CVE-2026-13969 Uninitialized Use in UIUNKNOWN—21%ileMicrosoft2026-07-14
CVE-2026-13975Chromium: CVE-2026-13975 Out of bounds read in ANGLEUNKNOWN—16%ileMicrosoft2026-07-14
CVE-2026-13974Chromium: CVE-2026-13974 Integer overflow in Safe BrowsingUNKNOWN—19%ileMicrosoft2026-07-14
CVE-2026-13981Chromium: CVE-2026-13981 Inappropriate implementation in Chrome for iOSUNKNOWN—14%ileMicrosoft2026-07-14
CVE-2026-13980Chromium: CVE-2026-13980 Incorrect security UI in Chrome for iOSUNKNOWN—14%ileMicrosoft2026-07-14
CVE-2026-13987Chromium: CVE-2026-13987 Incorrect security UI in MobileUNKNOWN—8%ileMicrosoft2026-07-14
CVE-2026-13991Chromium: CVE-2026-13991 Insufficient validation of untrusted input in Chrome for iOSUNKNOWN—6%ileMicrosoft2026-07-14
CVE-2026-13992Chromium: CVE-2026-13992 Inappropriate implementation in UIUNKNOWN—9%ileMicrosoft2026-07-14
CVE-2026-13994Chromium: CVE-2026-13994 Inappropriate implementation in Credential ManagementUNKNOWN—8%ileMicrosoft2026-07-14
CVE-2026-13995Chromium: CVE-2026-13995 Insufficient validation of untrusted input in AutofillUNKNOWN—13%ileMicrosoft2026-07-14
CVE-2026-13983Chromium: CVE-2026-13983 Incorrect security UI in Chrome for iOSUNKNOWN—5%ileMicrosoft2026-07-14
CVE-2026-13997Chromium: CVE-2026-13997 Incorrect security UI in ExtensionsUNKNOWN—5%ileMicrosoft2026-07-14
CVE-2026-13998Chromium: CVE-2026-13998 Incorrect security UI in File InputUNKNOWN—5%ileMicrosoft2026-07-14
CVE-2026-14005Chromium: CVE-2026-14005 Use after free in OmniboxUNKNOWN—16%ileMicrosoft2026-07-14
CVE-2026-14028Chromium: CVE-2026-14028 Incorrect security UI in Chrome for iOSUNKNOWN—6%ileMicrosoft2026-07-14
CVE-2026-14066Chromium: CVE-2026-14066 Insufficient validation of untrusted input in Chrome for iOSUNKNOWN—14%ileMicrosoft2026-07-14
CVE-2026-14067Chromium: CVE-2026-14067 Use after free in Chrome for iOSUNKNOWN—32%ileMicrosoft2026-07-14
CVE-2026-14075Chromium: CVE-2026-14075 Policy bypass in Chrome for iOSUNKNOWN—10%ileMicrosoft2026-07-14
CVE-2026-14096Chromium: CVE-2026-14096 Object lifecycle issue in InputUNKNOWN—14%ileMicrosoft2026-07-14
CVE-2026-14099Chromium: CVE-2026-14099 Use after free in Chrome for iOSUNKNOWN—17%ileMicrosoft2026-07-14
CVE-2026-14101Chromium: CVE-2026-14101 Insufficient policy enforcement in SandboxUNKNOWN—14%ileMicrosoft2026-07-14
CVE-2026-14114Chromium: CVE-2026-14114 Inappropriate implementation in WebAppInstallsUNKNOWN—7%ileMicrosoft2026-07-14
CVE-2026-14123Chromium: CVE-2026-14123 Incorrect security UI in Chrome for iOSUNKNOWN—8%ileMicrosoft2026-07-14
CVE-2026-14126Chromium: CVE-2026-14126 Incorrect security UI in UIUNKNOWN—8%ileMicrosoft2026-07-14
CVE-2026-14128Chromium: CVE-2026-14128 Insufficient data validation in Chrome for iOSUNKNOWN—8%ileMicrosoft2026-07-14
CVE-2026-14136Chromium: CVE-2026-14136 Incorrect security UI in Chrome for iOSUNKNOWN—8%ileMicrosoft2026-07-14
CVE-2026-14385Chromium: CVE-2026-14385 Heap buffer overflow in ANGLEUNKNOWN—25%ileMicrosoft2026-07-14
CVE-2026-14137Chromium: CVE-2026-14137 Insufficient validation of untrusted input in Chrome for iOSUNKNOWN—8%ileMicrosoft2026-07-14
CVE-2026-14382Chromium: CVE-2026-14382 Insufficient validation of untrusted input in ANGLEUNKNOWN—18%ileMicrosoft2026-07-14
CVE-2026-14386Chromium: CVE-2026-14386 Out of bounds read in ANGLEUNKNOWN—18%ileMicrosoft2026-07-14
CVE-2026-14388Chromium: CVE-2026-14388 Out of bounds read in ANGLEUNKNOWN—18%ileMicrosoft2026-07-14
CVE-2026-14390Chromium: CVE-2026-14390 Use after free in ANGLEUNKNOWN—14%ileMicrosoft2026-07-14
CVE-2026-14392Chromium: CVE-2026-14392 Out of bounds write in TintUNKNOWN—20%ileMicrosoft2026-07-14
CVE-2026-14393Chromium: CVE-2026-14393 Use after free in V8UNKNOWN—20%ileMicrosoft2026-07-14
CVE-2026-14391Chromium: CVE-2026-14391 Integer overflow in ANGLEUNKNOWN—14%ileMicrosoft2026-07-14
CVE-2026-14395Chromium: CVE-2026-14395 Out of bounds write in V8UNKNOWN—18%ileMicrosoft2026-07-14
CVE-2026-14396Chromium: CVE-2026-14396 Out of bounds read in ANGLEUNKNOWN—15%ileMicrosoft2026-07-14
CVE-2026-14394Chromium: CVE-2026-14394 Use after free in V8UNKNOWN—14%ileMicrosoft2026-07-14
CVE-2026-14398Chromium: CVE-2026-14398 Use after free in ANGLEUNKNOWN—12%ileMicrosoft2026-07-14
CVE-2026-14397Chromium: CVE-2026-14397 Out of bounds write in ANGLEUNKNOWN—16%ileMicrosoft2026-07-14
CVE-2026-14399Chromium: CVE-2026-14399 Uninitialized Use in DawnUNKNOWN—13%ileMicrosoft2026-07-14
CVE-2026-14401Chromium: CVE-2026-14401 Insufficient validation of untrusted input in ANGLEUNKNOWN—15%ileMicrosoft2026-07-14
CVE-2026-14400Chromium: CVE-2026-14400 Out of bounds write in ANGLEUNKNOWN—13%ileMicrosoft2026-07-14
CVE-2026-14403Chromium: CVE-2026-14403 Use after free in V8UNKNOWN—17%ileMicrosoft2026-07-14
CVE-2026-14406Chromium: CVE-2026-14406 Out of bounds read in V8UNKNOWN—9%ileMicrosoft2026-07-14
CVE-2026-14404Chromium: CVE-2026-14404 Inappropriate implementation in PDFiumUNKNOWN—10%ileMicrosoft2026-07-14
CVE-2026-14402Chromium: CVE-2026-14402 Uninitialized Use in ANGLEUNKNOWN—13%ileMicrosoft2026-07-14
CVE-2026-14405Chromium: CVE-2026-14405 Uninitialized Use in V8UNKNOWN—23%ileMicrosoft2026-07-14
CVE-2026-14407Chromium: CVE-2026-14407 Inappropriate implementation in V8UNKNOWN—24%ileMicrosoft2026-07-14
CVE-2026-14409Chromium: CVE-2026-14409 Inappropriate implementation in V8UNKNOWN—18%ileMicrosoft2026-07-14
CVE-2026-14408Chromium: CVE-2026-14408 Uninitialized Use in DawnUNKNOWN—13%ileMicrosoft2026-07-14
CVE-2026-14411Chromium: CVE-2026-14411 Insufficient validation of untrusted input in ANGLEUNKNOWN—17%ileMicrosoft2026-07-14
CVE-2026-14410Chromium: CVE-2026-14410 Inappropriate implementation in SkiaUNKNOWN—9%ileMicrosoft2026-07-14
CVE-2026-14412Chromium: CVE-2026-14412 Insufficient validation of untrusted input in ANGLEUNKNOWN—15%ileMicrosoft2026-07-14
CVE-2026-14413Chromium: CVE-2026-14413 Uninitialized Use in ANGLEUNKNOWN—10%ileMicrosoft2026-07-14
CVE-2026-14414Chromium: CVE-2026-14414 Insufficient validation of untrusted input in SkiaUNKNOWN—14%ileMicrosoft2026-07-14
CVE-2026-14415Chromium: CVE-2026-14415 Inappropriate implementation in V8UNKNOWN—17%ileMicrosoft2026-07-14
CVE-2026-14416Chromium: CVE-2026-14416 Out of bounds read in DawnUNKNOWN—16%ileMicrosoft2026-07-14
CVE-2026-14417Chromium: CVE-2026-14417 Use after free in DawnUNKNOWN—11%ileMicrosoft2026-07-14
CVE-2026-14420Chromium: CVE-2026-14420 Out of bounds read and write in DawnUNKNOWN—17%ileMicrosoft2026-07-14
CVE-2026-14418Chromium: CVE-2026-14418 Uninitialized Use in ANGLEUNKNOWN—8%ileMicrosoft2026-07-14
CVE-2026-14419Chromium: CVE-2026-14419 Use after free in SkiaUNKNOWN—12%ileMicrosoft2026-07-14
CVE-2026-14422Chromium: CVE-2026-14422 Out of bounds read and write in TintUNKNOWN—19%ileMicrosoft2026-07-14
CVE-2026-14423Chromium: CVE-2026-14423 Type Confusion in TintUNKNOWN—13%ileMicrosoft2026-07-14
CVE-2026-14421Chromium: CVE-2026-14421 Uninitialized Use in DawnUNKNOWN—12%ileMicrosoft2026-07-14
CVE-2026-14424Chromium: CVE-2026-14424 Use after free in DawnUNKNOWN—12%ileMicrosoft2026-07-14
CVE-2026-14425Chromium: CVE-2026-14425 Use after free in ANGLEUNKNOWN—12%ileMicrosoft2026-07-14
CVE-2026-14426Chromium: CVE-2026-14426 Use after free in V8UNKNOWN—12%ileMicrosoft2026-07-14
CVE-2026-14427Chromium: CVE-2026-14427 Heap buffer overflow in SkiaUNKNOWN—16%ileMicrosoft2026-07-14
CVE-2026-14428Chromium: CVE-2026-14428 Insufficient validation of untrusted input in DawnUNKNOWN—16%ileMicrosoft2026-07-14
CVE-2026-14429Chromium: CVE-2026-14429 Insufficient validation of untrusted input in SkiaUNKNOWN—14%ileMicrosoft2026-07-14
CVE-2026-14430Chromium: CVE-2026-14430 Integer overflow in V8UNKNOWN—21%ileMicrosoft2026-07-14
CVE-2026-14432Chromium: CVE-2026-14432 Use after free in V8UNKNOWN—16%ileMicrosoft2026-07-14
CVE-2026-14431Chromium: CVE-2026-14431 Type Confusion in V8UNKNOWN—18%ileMicrosoft2026-07-14
CVE-2026-58643Windows Admin Center Spoofing VulnerabilityUNKNOWN—14%ileMicrosoft2026-07-14
CVE-2026-15904Chromium: CVE-2026-15904 Use after free in OzoneUNKNOWN—15%ileMicrosoft2026-07-14
CVE-2026-15903Chromium: CVE-2026-15903 Out of bounds read and write in V8UNKNOWN—24%ileMicrosoft2026-07-14
CVE-2026-15899Chromium: CVE-2026-15899 Use after free in CameraCaptureUNKNOWN—15%ileMicrosoft2026-07-14
CVE-2026-15778Chromium: CVE-2026-15778 Insufficient validation of untrusted input in NavigationUNKNOWN—17%ileMicrosoft2026-07-14
CVE-2026-15776Chromium: CVE-2026-15776 Type Confusion in V8UNKNOWN—28%ileMicrosoft2026-07-14
CVE-2026-15775Chromium: CVE-2026-15775 Insufficient policy enforcement in V8UNKNOWN—13%ileMicrosoft2026-07-14
CVE-2026-15774Chromium: CVE-2026-15774 Use after free in SkiaUNKNOWN—12%ileMicrosoft2026-07-14
CVE-2026-15773Chromium: CVE-2026-15773 Use after free in CoreUNKNOWN—22%ileMicrosoft2026-07-14
CVE-2026-15770Chromium: CVE-2026-15770 Uninitialized Use in V8UNKNOWN—23%ileMicrosoft2026-07-14
CVE-2026-15900Chromium: CVE-2026-15900 Use after free in GPUUNKNOWN—15%ileMicrosoft2026-07-14
CVE-2026-15901Chromium: CVE-2026-15901 Use after free in NetworkUNKNOWN—18%ileMicrosoft2026-07-14
CVE-2026-15765Chromium: CVE-2026-15765 Use after free in OzoneUNKNOWN—39%ileMicrosoft2026-07-14
CVE-2026-15107Chromium: CVE-2026-15107 Use after free in IndexedDBUNKNOWN—16%ileMicrosoft2026-07-14
CVE-2026-15108Chromium: CVE-2026-15108 Integer overflow in Extensions APIUNKNOWN—3%ileMicrosoft2026-07-14
CVE-2026-15109Chromium: CVE-2026-15109 Uninitialized Use in ANGLEUNKNOWN—12%ileMicrosoft2026-07-14
CVE-2026-15115Chromium: CVE-2026-15115 Insufficient validation of untrusted input in WebAppInstallsUNKNOWN—0%ileMicrosoft2026-07-14
CVE-2026-15113Chromium: CVE-2026-15113 Use after free in AutofillUNKNOWN—10%ileMicrosoft2026-07-14
CVE-2026-15119Chromium: CVE-2026-15119 Inappropriate implementation in GetUserMediaUNKNOWN—5%ileMicrosoft2026-07-14
CVE-2026-15118Chromium: CVE-2026-15118 Use after free in InputUNKNOWN—16%ileMicrosoft2026-07-14
CVE-2026-15117Chromium: CVE-2026-15117 Use after free in PaymentsUNKNOWN—8%ileMicrosoft2026-07-14
CVE-2026-15116Chromium: CVE-2026-15116 Use after free in ActorUNKNOWN—16%ileMicrosoft2026-07-14
CVE-2026-15114Chromium: CVE-2026-15114 Out of bounds read and write in CodecsUNKNOWN—8%ileMicrosoft2026-07-14
CVE-2026-15112Chromium: CVE-2026-15112 Use after free in OzoneUNKNOWN—25%ileMicrosoft2026-07-14
CVE-2026-15111Chromium: CVE-2026-15111 Use after free in ViewsUNKNOWN—8%ileMicrosoft2026-07-14
CVE-2026-15129Chromium: CVE-2026-15129 Use after free in ViewsUNKNOWN—22%ileMicrosoft2026-07-14
CVE-2026-15128Chromium: CVE-2026-15128 Inappropriate implementation in FormsUNKNOWN—4%ileMicrosoft2026-07-14
CVE-2026-15127Chromium: CVE-2026-15127 Inappropriate implementation in WebGLUNKNOWN—4%ileMicrosoft2026-07-14
CVE-2026-15110Chromium: CVE-2026-15110 Use after free in ExtensionsUNKNOWN—5%ileMicrosoft2026-07-14
CVE-2026-15126Chromium: CVE-2026-15126 Use after free in FormsUNKNOWN—16%ileMicrosoft2026-07-14
CVE-2026-15124Chromium: CVE-2026-15124 Insufficient policy enforcement in PasswordsUNKNOWN—6%ileMicrosoft2026-07-14
CVE-2026-15123Chromium: CVE-2026-15123 Insufficient data validation in DOMUNKNOWN—10%ileMicrosoft2026-07-14
CVE-2026-15121Chromium: CVE-2026-15121 Use after free in WebRTCUNKNOWN—23%ileMicrosoft2026-07-14
CVE-2026-15125Chromium: CVE-2026-15125 Inappropriate implementation in FormsUNKNOWN—14%ileMicrosoft2026-07-14
CVE-2026-15122Chromium: CVE-2026-15122 Insufficient validation of untrusted input in CodecsUNKNOWN—10%ileMicrosoft2026-07-14
CVE-2026-15120Chromium: CVE-2026-15120 Use after free in CoreUNKNOWN—8%ileMicrosoft2026-07-14
CVE-2026-15133Chromium: CVE-2026-15133 Use after free in InterestGroupsUNKNOWN—16%ileMicrosoft2026-07-14
CVE-2026-15132Chromium: CVE-2026-15132 Uninitialized Use in V8UNKNOWN—19%ileMicrosoft2026-07-14
CVE-2026-15130Chromium: CVE-2026-15130 Insufficient policy enforcement in NavigationUNKNOWN—7%ileMicrosoft2026-07-14
CVE-2026-15131Chromium: CVE-2026-15131 Insufficient data validation in NavigationUNKNOWN—7%ileMicrosoft2026-07-14
CVE-2026-13954Chromium: CVE-2026-13954 Insufficient policy enforcement in XMLUNKNOWN—22%ileMicrosoft2026-07-14
CVE-2026-13796Chromium: CVE-2026-13796 Integer overflow in ChromecastUNKNOWN—22%ileMicrosoft2026-07-14
CVE-2026-13799Chromium: CVE-2026-13799 Use after free in QUICUNKNOWN—25%ileMicrosoft2026-07-14
CVE-2026-13800Chromium: CVE-2026-13800 Inappropriate implementation in UpdaterUNKNOWN—6%ileMicrosoft2026-07-14
CVE-2026-13806Chromium: CVE-2026-13806 Insufficient validation of untrusted input in AccessibilityUNKNOWN—23%ileMicrosoft2026-07-14
CVE-2026-13810Chromium: CVE-2026-13810 Inappropriate implementation in InputUNKNOWN—23%ileMicrosoft2026-07-14
CVE-2026-13811Chromium: CVE-2026-13811 Use after free in IMEUNKNOWN—29%ileMicrosoft2026-07-14
CVE-2026-13815Chromium: CVE-2026-13815 Use after free in BlinkUNKNOWN—32%ileMicrosoft2026-07-14
CVE-2026-13818Chromium: CVE-2026-13818 Inappropriate implementation in PasswordsUNKNOWN—19%ileMicrosoft2026-07-14
CVE-2026-13814Chromium: CVE-2026-13814 Use after free in ViewsUNKNOWN—22%ileMicrosoft2026-07-14
CVE-2026-13817Chromium: CVE-2026-13817 Insufficient validation of untrusted input in GlicUNKNOWN—25%ileMicrosoft2026-07-14
CVE-2026-13821Chromium: CVE-2026-13821 Use after free in CanvasUNKNOWN—29%ileMicrosoft2026-07-14
CVE-2026-13820Chromium: CVE-2026-13820 Out of bounds read in SkiaUNKNOWN—19%ileMicrosoft2026-07-14
CVE-2026-13823Chromium: CVE-2026-13823 Use after free in GlicUNKNOWN—22%ileMicrosoft2026-07-14
CVE-2026-13824Chromium: CVE-2026-13824 Insufficient validation of untrusted input in ExtensionsUNKNOWN—22%ileMicrosoft2026-07-14
CVE-2026-13828Chromium: CVE-2026-13828 Inappropriate implementation in EnterpriseUNKNOWN—20%ileMicrosoft2026-07-14
CVE-2026-13829Chromium: CVE-2026-13829 Insufficient validation of untrusted input in SettingsUNKNOWN—24%ileMicrosoft2026-07-14
CVE-2026-13830Chromium: CVE-2026-13830 Use after free in ChromotingUNKNOWN—26%ileMicrosoft2026-07-14
CVE-2026-13831Chromium: CVE-2026-13831 Use after free in GPUUNKNOWN—25%ileMicrosoft2026-07-14
CVE-2026-13834Chromium: CVE-2026-13834 Insufficient validation of untrusted input in ANGLEUNKNOWN—24%ileMicrosoft2026-07-14
CVE-2026-13832Chromium: CVE-2026-13832 Use after free in HeadlessUNKNOWN—22%ileMicrosoft2026-07-14
CVE-2026-13836Chromium: CVE-2026-13836 Inappropriate implementation in CSSUNKNOWN—14%ileMicrosoft2026-07-14
CVE-2026-13835Chromium: CVE-2026-13835 Inappropriate implementation in XMLUNKNOWN—25%ileMicrosoft2026-07-14
CVE-2026-13837Chromium: CVE-2026-13837 Inappropriate implementation in CSSUNKNOWN—15%ileMicrosoft2026-07-14
CVE-2026-13838Chromium: CVE-2026-13838 Inappropriate implementation in CSSUNKNOWN—13%ileMicrosoft2026-07-14
CVE-2026-13839Chromium: CVE-2026-13839 Inappropriate implementation in CSSUNKNOWN—13%ileMicrosoft2026-07-14
CVE-2026-13840Chromium: CVE-2026-13840 Insufficient policy enforcement in CanvasUNKNOWN—15%ileMicrosoft2026-07-14
CVE-2026-13841Chromium: CVE-2026-13841 Integer overflow in SkiaUNKNOWN—22%ileMicrosoft2026-07-14
CVE-2026-13844Chromium: CVE-2026-13844 Use after free in UpdaterUNKNOWN—4%ileMicrosoft2026-07-14
CVE-2026-13845Chromium: CVE-2026-13845 Use after free in DOMUNKNOWN—29%ileMicrosoft2026-07-14
CVE-2026-15777Chromium: CVE-2026-15777 Use after free in UIUNKNOWN—17%ileMicrosoft2026-07-14
CVE-2026-15772Chromium: CVE-2026-15772 Use after free in GPUUNKNOWN—12%ileMicrosoft2026-07-14
CVE-2026-15771Chromium: CVE-2026-15771 Insufficient validation of untrusted input in MediaUNKNOWN—20%ileMicrosoft2026-07-14
CVE-2026-15902Chromium: CVE-2026-15902 Use after free in CastUNKNOWN—21%ileMicrosoft2026-07-14
CVE-2026-15769Chromium: CVE-2026-15769 Insufficient validation of untrusted input in Linux Toolkit ThemingUNKNOWN—14%ileMicrosoft2026-07-14
CVE-2026-15768Chromium: CVE-2026-15768 Insufficient policy enforcement in HTML-in-CanvasUNKNOWN—13%ileMicrosoft2026-07-14
CVE-2026-15766Chromium: CVE-2026-15766 Uninitialized Use in SkiaUNKNOWN—23%ileMicrosoft2026-07-14
CVE-2026-15764Chromium: CVE-2026-15764 Use after free in OzoneUNKNOWN—39%ileMicrosoft2026-07-14
CVE-2026-13283Chromium: CVE-2026-13282: Use after free in PaymentsUNKNOWN—14%ileMicrosoft2026-07-14
CVE-2026-13282Chromium: CVE-2026-13282 Use after free in AdFilterUNKNOWN—6%ileMicrosoft2026-07-14
CVE-2026-15905Chromium: CVE-2026-15905 Use after free in AuraUNKNOWN—1%ileMicrosoft2026-07-14
CVE-2026-16420Chromium: CVE-2026-16420 Type Confusion in WebAudioUNKNOWN—30%ileMicrosoft2026-07-14
CVE-2026-16807Chromium: CVE-2026-16807 Out of bounds write in CodecsUNKNOWN—18%ileMicrosoft2026-07-14
CVE-2026-55952TLS 1.3 server denial of service via malformed ClientHello pre-shared key extensionUNKNOWN—39%ileMicrosoft2026-07-14
CVE-2026-54886SSH SFTP server denial of service via extended channel data infinite loopUNKNOWN—26%ileMicrosoft2026-07-14
CVE-2026-56000xorg-x11-server / xwayland GLX contextTags Use-After-Free in CommonMakeCurrent()UNKNOWN—13%ileMicrosoft2026-07-14
CVE-2026-56288NULL Pointer Dereference in GNU patchUNKNOWN—2%ileMicrosoft2026-07-14
CVE-2026-40468Heap buffer overflow in gawkUNKNOWN—10%ileMicrosoft2026-07-14
CVE-2026-26197Array full size, element count, and element size are not checked to make sure they match in H5Odtype.cUNKNOWN—19%ileMicrosoft2026-07-14
CVE-2026-53910Heap-based Buffer Overflow in GNU diffutilsUNKNOWN—17%ileMicrosoft2026-07-14
CVE-2026-50252Possible cache poisoning attack by mapping source port population per threadUNKNOWN—4%ileMicrosoft2026-07-14
CVE-2026-50243'response-ip'/'rpz' can rewrite BOGUS answers instead of returning SERVFAILUNKNOWN—1%ileMicrosoft2026-07-14
CVE-2026-15788WCOW cache mount source selector resolves NTFS junctions outside of cache rootUNKNOWN—4%ileMicrosoft2026-07-14
CVE-2026-44509Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-43619. Reason: This candidate is a UNKNOWN——Microsoft2026-07-14
CVE-2026-59676Local File Deletion Attack Vector in rm_rf() in seunshareUNKNOWN—0%ileMicrosoft2026-07-14
CVE-2026-59677Process Kill Attack Vector in killall() in seunshareUNKNOWN—1%ileMicrosoft2026-07-14
CVE-2026-44210Kata Containers have VM Escape via virtiofsd Argument Injection through Default-Enabled Pod AnnotationsUNKNOWN—24%ileMicrosoft2026-07-14
CVE-2026-9079stale proxy password leakUNKNOWN—45%ileMicrosoft2026-07-14
CVE-2026-54891Plaintext APPLICATION_DATA injected during TLS handshake delivered to client application post-handshake in sslUNKNOWN—3%ileMicrosoft2026-07-14
CVE-2026-56289Loop with Unreachable Exit Condition in GNU patchUNKNOWN—2%ileMicrosoft2026-07-14
CVE-2026-14461Out-of-bound read in mtrUNKNOWN—23%ileMicrosoft2026-07-14
CVE-2026-40553Stack-based buffer overflow in gawkUNKNOWN—21%ileMicrosoft2026-07-14
CVE-2026-40469Heap buffer overflow in gawkUNKNOWN—12%ileMicrosoft2026-07-14
CVE-2026-40467Use after free in gawkUNKNOWN—12%ileMicrosoft2026-07-14
CVE-2026-57215RabbitMQ: Direct-reply-to binding persistence can lead to unauthorized reply-channel injection and persistent phantomUNKNOWN—31%ileMicrosoft2026-07-14
CVE-2026-45784rust-openssl: Potential out-of-bounds write in `CipherCtxRef::cipher_update_inplace` for AES-KW-PAD ciphersUNKNOWN—3%ileMicrosoft2026-07-14
CVE-2026-26199Buffer underflow in `H5Iget_name `/`H5G_get_name` if size is zeroUNKNOWN—17%ileMicrosoft2026-07-14
CVE-2026-56392Heap-based Buffer Overflow in GNU coreutilsUNKNOWN—5%ileMicrosoft2026-07-14
CVE-2026-64247KVM: x86: hyper-v: Bound the bank index when querying sparse banksUNKNOWN—2%ileMicrosoft2026-07-14
CVE-2026-45480Azure Active Directory Elevation of Privilege VulnerabilityCRITICAL10.044%ileMicrosoft2026-06-09
CVE-2026-48567Azure HorizonDB Elevation of Privilege VulnerabilityCRITICAL10.060%ileMicrosoft2026-06-09
CVE-2026-47647Dynamics 365 Elevation of Privilege VulnerabilityCRITICAL9.952%ileMicrosoft2026-06-09
CVE-2026-48584Microsoft Azure Synapse Elevation of Privilege VulnerabilityCRITICAL9.940%ileMicrosoft2026-06-09
CVE-2026-54130M365 Copilot Information Disclosure VulnerabilityCRITICAL9.844%ileMicrosoft2026-06-09
CVE-2026-45657Windows Kernel Remote Code Execution VulnerabilityCRITICAL9.896%ileMicrosoft2026-06-09
CVE-2026-47291HTTP.sys Remote Code Execution VulnerabilityCRITICAL9.898%ileMicrosoft2026-06-09
CVE-2026-26142Nuance PowerScribe Remote Code Execution VulnerabilityCRITICAL9.878%ileMicrosoft2026-06-09
CVE-2026-47643Azure Stack Edge Remote Code Execution VulnerabilityCRITICAL9.852%ileMicrosoft2026-06-09
CVE-2026-44815DHCP Client Service Remote Code Execution VulnerabilityCRITICAL9.862%ileMicrosoft2026-06-09
CVE-2026-52931batman-adv: tp_meter: avoid use of uninit sender varsCRITICAL9.833%ileMicrosoft2026-06-09
CVE-2026-54906concurrent-ruby: ReadWriteLock allows wrong-thread write release and stray read-release counter corruptionCRITICAL9.86%ileMicrosoft2026-06-09
CVE-2026-52934batman-adv: tvlv: reject oversized TVLV packetsCRITICAL9.816%ileMicrosoft2026-06-09
CVE-2026-52947net: qrtr: fix refcount saturation and potential UAF in qrtr_port_removeCRITICAL9.83%ileMicrosoft2026-06-09
CVE-2026-52919batman-adv: fix tp_meter counter underflow during shutdownCRITICAL9.82%ileMicrosoft2026-06-09
CVE-2026-52922batman-adv: dat: handle forward allocation errorCRITICAL9.832%ileMicrosoft2026-06-09
CVE-2026-47281Visual Studio Code Elevation of Privilege VulnerabilityCRITICAL9.652%ileMicrosoft2026-06-09
CVE-2026-42904Windows TCP/IP Elevation of Privilege VulnerabilityCRITICAL9.636%ileMicrosoft2026-06-09
CVE-2026-48582Microsoft Exchange Online Elevation of Privilege VulnerabilityCRITICAL9.649%ileMicrosoft2026-06-09
CVE-2026-44631Apache HTTP Server: Heap Underflow in `ap_regname` via Signed Char OverflowCRITICAL9.440%ileMicrosoft2026-06-09
CVE-2025-10263ARM: CVE-2025-10263 Completion of affected memory accesses might not be guaranteed by completion of a TLBI [kernel]CRITICAL9.344%ileMicrosoft2026-06-09
CVE-2026-47646Dynamics 365 Customer Voice Spoofing VulnerabilityCRITICAL9.320%ileMicrosoft2026-06-09
CVE-2026-45602Windows Dynamic Host Configuration Protocol (DHCP) Tampering VulnerabilityCRITICAL9.129%ileMicrosoft2026-06-09
CVE-2026-48579Microsoft Exchange Online Information Disclosure VulnerabilityCRITICAL9.160%ileMicrosoft2026-06-09
CVE-2026-12087Socket versions before 2.041 for Perl have an out-of-bounds heap readCRITICAL9.130%ileMicrosoft2026-06-09
CVE-2026-34182CMS AuthEnvelopedData Processing May Accept Forged MessagesCRITICAL9.128%ileMicrosoft2026-06-09
CVE-2026-53176IB/isert: Reject login PDUs shorter than ISER_HEADERS_LENCRITICAL9.151%ileMicrosoft2026-06-09
CVE-2026-32208Microsoft Entra ID Spoofing VulnerabilityHIGH8.842%ileMicrosoft2026-06-09
CVE-2026-45504Microsoft Exchange Server Elevation of Privilege VulnerabilityHIGH8.854%ileMicrosoft2026-06-09
CVE-2026-45648Windows Active Directory Domain Services Remote Code Execution VulnerabilityHIGH8.863%ileMicrosoft2026-06-09
CVE-2026-47289Remote Desktop Client Remote Code Execution VulnerabilityHIGH8.858%ileMicrosoft2026-06-09
CVE-2026-32193Azure Kubernetes Service (AKS) Remote Code Execution VulnerabilityHIGH8.826%ileMicrosoft2026-06-09
CVE-2026-47653Remote Desktop Client Remote Code Execution VulnerabilityHIGH8.845%ileMicrosoft2026-06-09
CVE-2026-40371Microsoft Dynamics 365 (on-premises) Elevation of Privilege VulnerabilityHIGH8.847%ileMicrosoft2026-06-09
CVE-2026-45484Microsoft SharePoint Elevation of Privilege VulnerabilityHIGH8.898%ileMicrosoft2026-06-09
CVE-2026-42985Remote Desktop Client Remote Code Execution VulnerabilityHIGH8.867%ileMicrosoft2026-06-09
CVE-2026-47645Microsoft 365 Copilot's Business Chat Elevation of Privilege VulnerabilityHIGH8.852%ileMicrosoft2026-06-09
CVE-2026-48715radvdump's Route Information Option Parser has a Stack Buffer OverflowHIGH8.810%ileMicrosoft2026-06-09
CVE-2026-6893Dracut: dracut: root code execution via dhcp options command injectionHIGH8.862%ileMicrosoft2026-06-09
CVE-2026-9698DBI versions before 1.648 for Perl saved errors in a limited-sized bufferHIGH8.837%ileMicrosoft2026-06-09
CVE-2026-10879DBI versions before 1.648 for Perl have a heap overflow when preparsing SQL statements with more than 9 bindersHIGH8.639%ileMicrosoft2026-06-09
CVE-2026-29167Apache HTTP Server: mod_ldap per-dir use-after-freeHIGH8.649%ileMicrosoft2026-06-09
CVE-2026-45472Microsoft Office Remote Code Execution VulnerabilityHIGH8.429%ileMicrosoft2026-06-09
CVE-2026-45474Microsoft Office Remote Code Execution VulnerabilityHIGH8.429%ileMicrosoft2026-06-09
CVE-2026-45456Microsoft Outlook and Word Remote Code Execution VulnerabilityHIGH8.436%ileMicrosoft2026-06-09
CVE-2026-45458Microsoft Outlook and Word Remote Code Execution VulnerabilityHIGH8.436%ileMicrosoft2026-06-09
CVE-2026-45461Microsoft Office Remote Code Execution VulnerabilityHIGH8.432%ileMicrosoft2026-06-09
CVE-2026-45607Windows Hyper-V Remote Code Execution VulnerabilityHIGH8.428%ileMicrosoft2026-06-09
CVE-2026-45641Windows Hyper-V Remote Code Execution VulnerabilityHIGH8.423%ileMicrosoft2026-06-09
CVE-2026-41098Azure Stack Edge Spoofing VulnerabilityHIGH8.454%ileMicrosoft2026-06-09
CVE-2026-47635Microsoft Outlook and Word Remote Code Execution VulnerabilityHIGH8.426%ileMicrosoft2026-06-09
CVE-2026-45463Microsoft Office Remote Code Execution VulnerabilityHIGH8.429%ileMicrosoft2026-06-09
CVE-2026-45482Microsoft Visual Studio Code CoPilot Chat Security Feature Bypass VulnerabilityHIGH8.427%ileMicrosoft2026-06-09
CVE-2026-44810Microsoft Cryptographic Services Elevation of Privilege VulnerabilityHIGH8.418%ileMicrosoft2026-06-09
CVE-2026-50521Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityHIGH8.337%ileMicrosoft2026-06-09
CVE-2026-47652Windows Hyper-V Remote Code Execution VulnerabilityHIGH8.227%ileMicrosoft2026-06-09
CVE-2026-44822Microsoft Excel Information Disclosure VulnerabilityHIGH8.241%ileMicrosoft2026-06-09
CVE-2026-45476Microsoft Azure Network Adapter Elevation of Privilege VulnerabilityHIGH8.225%ileMicrosoft2026-06-09
CVE-2026-49759Stack buffer overflow in SCTP error cause parsing in inet_drv allows remote VM crashHIGH8.240%ileMicrosoft2026-06-09
CVE-2026-57236Nokogiri: Possible Use-After-Free when `Nokogiri::XML::Document#encoding=` raises an exceptionHIGH8.227%ileMicrosoft2026-06-09
CVE-2026-57235Nokogiri: Possible Out-of-Bounds Read in `Nokogiri::XML::NodeSet#[]`HIGH8.227%ileMicrosoft2026-06-09
CVE-2026-45503Microsoft Exchange Server Information Disclosure VulnerabilityHIGH8.137%ileMicrosoft2026-06-09
CVE-2026-47631Microsoft Exchange Server Spoofing VulnerabilityHIGH8.128%ileMicrosoft2026-06-09
CVE-2026-42835Microsoft Teams for Android Information Disclosure VulnerabilityHIGH8.167%ileMicrosoft2026-06-09
CVE-2026-45599Windows UPnP Device Host Remote Code Execution VulnerabilityHIGH8.141%ileMicrosoft2026-06-09
CVE-2026-45635Windows UPnP Device Host Remote Code Execution VulnerabilityHIGH8.141%ileMicrosoft2026-06-09
CVE-2026-42981Windows Performance Monitor Remote Code Execution VulnerabilityHIGH8.147%ileMicrosoft2026-06-09
CVE-2026-42974Windows Performance Monitor Remote Code Execution VulnerabilityHIGH8.147%ileMicrosoft2026-06-09
CVE-2026-42987Windows Deployment Services (WDS) Remote Code ExecutionHIGH8.145%ileMicrosoft2026-06-09
CVE-2026-56123socat 1.8.0.0 - 1.8.1.1 Heap Buffer Overflow via SOCKS5 Reply ParserHIGH8.123%ileMicrosoft2026-06-09
CVE-2026-7383Possible Heap Buffer Overflow in ASN.1 Multibyte String ConversionHIGH8.147%ileMicrosoft2026-06-09
CVE-2026-11816Path Traversal in keras-team/kerasHIGH8.144%ileMicrosoft2026-06-09
CVE-2026-47298Microsoft SharePoint Server Remote Code Execution VulnerabilityHIGH8.048%ileMicrosoft2026-06-09
CVE-2026-45644Microsoft Live Share Canvas SDK Elevation of Privilege VulnerabilityHIGH8.043%ileMicrosoft2026-06-09
CVE-2026-45588Secure Boot Security Feature Bypass VulnerabilityHIGH7.923%ileMicrosoft2026-06-09
CVE-2026-48568Secure Boot Security Feature Bypass VulnerabilityHIGH7.923%ileMicrosoft2026-06-09
CVE-2026-48570Secure Boot Security Feature Bypass VulnerabilityHIGH7.923%ileMicrosoft2026-06-09
CVE-2026-48573Secure Boot Security Feature Bypass VulnerabilityHIGH7.960%ileMicrosoft2026-06-09
CVE-2026-48575Secure Boot Security Feature Bypass VulnerabilityHIGH7.923%ileMicrosoft2026-06-09
CVE-2026-48576Secure Boot Security Feature Bypass VulnerabilityHIGH7.960%ileMicrosoft2026-06-09
CVE-2026-48578Secure Boot Security Feature Bypass VulnerabilityHIGH7.919%ileMicrosoft2026-06-09
CVE-2026-45654Secure Boot Security Feature Bypass VulnerabilityHIGH7.923%ileMicrosoft2026-06-09
CVE-2026-47656Windows Boot Manager Security Feature Bypass VulnerabilityHIGH7.923%ileMicrosoft2026-06-09
CVE-2026-45469Microsoft Excel Remote Code Execution VulnerabilityHIGH7.830%ileMicrosoft2026-06-09
CVE-2026-45475Microsoft Office Remote Code Execution VulnerabilityHIGH7.837%ileMicrosoft2026-06-09
CVE-2026-45471Microsoft Word Remote Code Execution VulnerabilityHIGH7.837%ileMicrosoft2026-06-09
CVE-2026-45486Microsoft Word Remote Code Execution VulnerabilityHIGH7.830%ileMicrosoft2026-06-09
CVE-2026-40409Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege VulnerabilityHIGH7.822%ileMicrosoft2026-06-09
CVE-2026-40404Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege VulnerabilityHIGH7.826%ileMicrosoft2026-06-09
CVE-2026-33828Windows Device Health Attestation (DHA) Elevation of Privilege VulnerabilityHIGH7.823%ileMicrosoft2026-06-09
CVE-2026-42902Microsoft PowerToys Elevation of Privilege VulnerabilityHIGH7.821%ileMicrosoft2026-06-09
CVE-2026-44817Microsoft Excel Remote Code Execution VulnerabilityHIGH7.830%ileMicrosoft2026-06-09
CVE-2026-44819Microsoft Office Remote Code Execution VulnerabilityHIGH7.837%ileMicrosoft2026-06-09
CVE-2026-44820Microsoft Excel Remote Code Execution VulnerabilityHIGH7.830%ileMicrosoft2026-06-09
CVE-2026-44823Microsoft Excel Remote Code Execution VulnerabilityHIGH7.830%ileMicrosoft2026-06-09
CVE-2026-44824Microsoft Office Remote Code Execution VulnerabilityHIGH7.837%ileMicrosoft2026-06-09
CVE-2026-45487Windows Program Compatibility Assistant Service Elevation of Privilege VulnerabilityHIGH7.88%ileMicrosoft2026-06-09
CVE-2026-45490.NET SDK Elevation of Privilege VulnerabilityHIGH7.831%ileMicrosoft2026-06-09
CVE-2026-45605Windows Bluetooth Service Elevation of Privilege VulnerabilityHIGH7.821%ileMicrosoft2026-06-09
CVE-2026-45643Microsoft Word Remote Code Execution VulnerabilityHIGH7.830%ileMicrosoft2026-06-09
CVE-2026-45645Microsoft Office Remote Code Execution VulnerabilityHIGH7.830%ileMicrosoft2026-06-09
CVE-2026-45656UEFI Secure Boot Security Feature Bypass VulnerabilityHIGH7.823%ileMicrosoft2026-06-09
CVE-2026-47292Visual Studio Code MSSQL Extension Remote Code Execution VulnerabilityHIGH7.836%ileMicrosoft2026-06-09
CVE-2026-41092Microsoft Kinect Elevation of Privilege VulnerabilityHIGH7.821%ileMicrosoft2026-06-09
CVE-2026-8863UEFI Secure Boot Security Feature Bypass VulnerabilityHIGH7.82%ileMicrosoft2026-06-09
CVE-2026-48583Windows Kernel Elevation of Privilege VulnerabilityHIGH7.819%ileMicrosoft2026-06-09
CVE-2026-49161Microsoft PC Manager Security Feature Bypass VulnerabilityHIGH7.815%ileMicrosoft2026-06-09
CVE-2026-50656Microsoft Defender Elevation of Privilege VulnerabilityHIGH7.895%ileMicrosoft2026-06-09
CVE-2026-42828Windows Projected File System Elevation of Privilege VulnerabilityHIGH7.825%ileMicrosoft2026-06-09
CVE-2026-42829Windows Administrator Protection Secure Feature Bypass VulnerabilityHIGH7.821%ileMicrosoft2026-06-09
CVE-2026-45457Microsoft Word Remote Code Execution VulnerabilityHIGH7.830%ileMicrosoft2026-06-09
CVE-2026-45586Windows Collaborative Translation Framework (CTFMON) Elevation of Privilege VulnerabilityHIGH7.888%ileMicrosoft2026-06-09
CVE-2026-45592Windows Internet (wininet.dll) Elevation of Privilege VulnerabilityHIGH7.821%ileMicrosoft2026-06-09
CVE-2026-45593Windows SDK Elevation of Privilege VulnerabilityHIGH7.821%ileMicrosoft2026-06-09
CVE-2026-45636Windows NTFS Remote Code Execution VulnerabilityHIGH7.834%ileMicrosoft2026-06-09
CVE-2026-45600Windows Kernel-Mode Driver Elevation of Privilege VulnerabilityHIGH7.821%ileMicrosoft2026-06-09
CVE-2026-45638Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityHIGH7.821%ileMicrosoft2026-06-09
CVE-2026-45637Microsoft DWM Core Library Elevation of Privilege VulnerabilityHIGH7.821%ileMicrosoft2026-06-09
CVE-2026-45658Windows BitLocker Security Feature Bypass VulnerabilityHIGH7.828%ileMicrosoft2026-06-09
CVE-2026-42910Windows Hotpatch Monitoring Service Elevation of Privilege VulnerabilityHIGH7.821%ileMicrosoft2026-06-09
CVE-2026-48565Windows Narrator Braille Elevation of Privilege VulnerabilityHIGH7.836%ileMicrosoft2026-06-09
CVE-2026-48574Windows Media Remote Code Execution VulnerabilityHIGH7.837%ileMicrosoft2026-06-09
CVE-2026-50511Microsoft PC Manager Elevation of Privilege VulnerabilityHIGH7.825%ileMicrosoft2026-06-09
CVE-2026-50512Microsoft PC Manager Elevation of Privilege VulnerabilityHIGH7.817%ileMicrosoft2026-06-09
CVE-2026-42837Windows Projected File System Elevation of Privilege VulnerabilityHIGH7.825%ileMicrosoft2026-06-09
CVE-2026-42905Windows DWM Core Library Elevation of Privilege VulnerabilityHIGH7.879%ileMicrosoft2026-06-09
CVE-2026-42980NT OS Kernel Elevation of Privilege VulnerabilityHIGH7.894%ileMicrosoft2026-06-09
CVE-2026-42916NT OS Kernel Elevation of Privilege VulnerabilityHIGH7.825%ileMicrosoft2026-06-09
CVE-2026-42986Microsoft Graphics Component Elevation of Privilege VulnerabilityHIGH7.879%ileMicrosoft2026-06-09
CVE-2026-42978Windows Push Notifications Elevation of Privilege VulnerabilityHIGH7.816%ileMicrosoft2026-06-09
CVE-2026-42977Windows Push Notifications Elevation of Privilege VulnerabilityHIGH7.88%ileMicrosoft2026-06-09
CVE-2026-42979Windows Push Notifications Elevation of Privilege VulnerabilityHIGH7.88%ileMicrosoft2026-06-09
CVE-2026-42991Windows Push Notifications Elevation of Privilege VulnerabilityHIGH7.87%ileMicrosoft2026-06-09
CVE-2026-42989Winlogon Elevation of Privilege VulnerabilityHIGH7.881%ileMicrosoft2026-06-09
CVE-2026-44809Windows Common Log File System Driver Elevation of Privilege VulnerabilityHIGH7.819%ileMicrosoft2026-06-09
CVE-2026-44811Windows DWM Core Library Elevation of Privilege VulnerabilityHIGH7.819%ileMicrosoft2026-06-09
CVE-2026-44808Windows DWM Core Library Elevation of Privilege VulnerabilityHIGH7.819%ileMicrosoft2026-06-09
CVE-2026-44807Windows DWM Core Library Elevation of Privilege VulnerabilityHIGH7.819%ileMicrosoft2026-06-09
CVE-2026-42983Windows DWM Core Library Elevation of Privilege VulnerabilityHIGH7.821%ileMicrosoft2026-06-09
CVE-2026-44802Windows DWM Core Library Elevation of Privilege VulnerabilityHIGH7.819%ileMicrosoft2026-06-09
CVE-2026-44803Windows Graphics Component Remote Code Execution VulnerabilityHIGH7.841%ileMicrosoft2026-06-09
CVE-2026-44812Windows Graphics Component Remote Code Execution VulnerabilityHIGH7.841%ileMicrosoft2026-06-09
CVE-2026-44813Windows DWM Core Library Elevation of Privilege VulnerabilityHIGH7.819%ileMicrosoft2026-06-09
CVE-2026-44804Windows DWM Core Library Elevation of Privilege VulnerabilityHIGH7.819%ileMicrosoft2026-06-09
CVE-2026-43958Rrdtool: rrdtool: stack buffer overflow allows local code execution or denial of serviceHIGH7.83%ileMicrosoft2026-06-09
CVE-2026-50256Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libxfoHIGH7.85%ileMicrosoft2026-06-09
CVE-2026-50258Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb key types due to unchecked shifHIGH7.86%ileMicrosoft2026-06-09
CVE-2026-46301spi: topcliff-pch: fix use-after-free on unbindHIGH7.82%ileMicrosoft2026-06-09
CVE-2026-11822SQLite before 3.53.2 Memory Corruption in FTS5 ExtensionHIGH7.87%ileMicrosoft2026-06-09
CVE-2026-12505Cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcallHIGH7.85%ileMicrosoft2026-06-09
CVE-2026-52912netfilter: nf_queue: hold bridge skb->dev while queuedHIGH7.84%ileMicrosoft2026-06-09
CVE-2026-52943net: skbuff: fix missing zerocopy reference in pskb_carve helpersHIGH7.815%ileMicrosoft2026-06-09
CVE-2026-52926batman-adv: clear current gateway during teardownHIGH7.82%ileMicrosoft2026-06-09
CVE-2026-55895Vim: Vimscript Code Injection in netrw NetrwLocalRmFile() via crafted filenameHIGH7.85%ileMicrosoft2026-06-09
CVE-2026-55693Vim: Out-of-bounds Write in Spell File Word CountHIGH7.82%ileMicrosoft2026-06-09
CVE-2026-57455Vim: Stack out-of-bounds write in `spell_soundfold_sofo()` via an over-length `soundfold()` argumentHIGH7.82%ileMicrosoft2026-06-09
CVE-2026-57456Vim: Arbitrary Code Execution via Python Omni-Completion DocstringsHIGH7.84%ileMicrosoft2026-06-09
CVE-2026-46243smb: client: reject userspace cifs.spnego descriptionsHIGH7.830%ileMicrosoft2026-06-09
CVE-2026-11332Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code executionHIGH7.810%ileMicrosoft2026-06-09
CVE-2026-50261Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in syncchangecounter()HIGH7.85%ileMicrosoft2026-06-09
CVE-2026-50259Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb setmap request via mapwidths inHIGH7.86%ileMicrosoft2026-06-09
CVE-2026-46274io-wq: check that the predecessor is hashed in io_wq_remove_pending()HIGH7.84%ileMicrosoft2026-06-09
CVE-2026-11824SQLite before 3.53.2 Heap Buffer Overflow via FTS5 fts5ChunkIterateHIGH7.87%ileMicrosoft2026-06-09
CVE-2026-52923ipc: limit next_id allocation to the valid ID rangeHIGH7.83%ileMicrosoft2026-06-09
CVE-2026-53143drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11HIGH7.84%ileMicrosoft2026-06-09
CVE-2026-32174Azure Bot Service Elevation of Privilege VulnerabilityHIGH7.734%ileMicrosoft2026-06-09
CVE-2026-45497Microsoft M365 Copilot Remote Code Execution VulnerabilityHIGH7.737%ileMicrosoft2026-06-09
CVE-2026-47633Microsoft Cost Management Information Disclosure VulnerabilityHIGH7.544%ileMicrosoft2026-06-09
CVE-2026-45583Microsoft Exchange Server Remote Code Execution VulnerabilityHIGH7.539%ileMicrosoft2026-06-09
CVE-2026-45639Windows Remote Desktop Protocol (RDP) Information Disclosure VulnerabilityHIGH7.555%ileMicrosoft2026-06-09
CVE-2026-47654Remote Desktop Client Remote Code Execution VulnerabilityHIGH7.543%ileMicrosoft2026-06-09
CVE-2026-48563Remote Desktop Client Remote Code Execution VulnerabilityHIGH7.543%ileMicrosoft2026-06-09
CVE-2026-40376Visual Studio Code Elevation of Privilege VulnerabilityHIGH7.548%ileMicrosoft2026-06-09
CVE-2026-45591ASP.NET Core Denial of Service VulnerabilityHIGH7.583%ileMicrosoft2026-06-09
CVE-2026-49160HTTP.sys Denial of Service VulnerabilityHIGH7.599%ileMicrosoft2026-06-09
CVE-2026-42908Windows Remote Desktop Protocol (RDP) Information Disclosure VulnerabilityHIGH7.555%ileMicrosoft2026-06-09
CVE-2026-42909Remote Desktop Client Remote Code Execution VulnerabilityHIGH7.532%ileMicrosoft2026-06-09
CVE-2026-42913Remote Desktop Client Remote Code Execution VulnerabilityHIGH7.538%ileMicrosoft2026-06-09
CVE-2026-42992Remote Desktop Client Remote Code Execution VulnerabilityHIGH7.538%ileMicrosoft2026-06-09
CVE-2026-44799Remote Desktop Client Remote Code Execution VulnerabilityHIGH7.538%ileMicrosoft2026-06-09
CVE-2026-44801Remote Desktop Client Remote Code Execution VulnerabilityHIGH7.538%ileMicrosoft2026-06-09
CVE-2026-42993Remote Desktop Client Remote Code Execution VulnerabilityHIGH7.536%ileMicrosoft2026-06-09
CVE-2026-49975Apache HTTP Server: mod_http2 denial of serviceHIGH7.598%ileMicrosoft2026-06-09
CVE-2026-42536Apache HTTP Server: mod_xml2enc heap overflowHIGH7.559%ileMicrosoft2026-06-09
CVE-2026-45445AES-OCB IV Ignored on EVP_Cipher() PathHIGH7.546%ileMicrosoft2026-06-09
CVE-2026-42764NULL Pointer Dereference in QUIC Server Initial Packet HandlingHIGH7.564%ileMicrosoft2026-06-09
CVE-2026-9675undici WebSocket client vulnerable to denial of service via cumulative fragment bypassHIGH7.535%ileMicrosoft2026-06-09
CVE-2026-57435Nokogiri: Possible Use-After-Free when setting an attribute value via `Nokogiri::XML::Attr#value=` or `#content=`HIGH7.530%ileMicrosoft2026-06-09
CVE-2026-50031ipmi-oem in FreeIPMI before 1.6.18 has exploitable buffer overflows on response messages. The Intelligent Platform ManagHIGH7.532%ileMicrosoft2026-06-09
CVE-2026-37460Missing input validation in the rfapiRibBi2Ri() function (rfapi_rib.c) of FRRouting (FRR) stable/10.0 to stable/10.6 allHIGH7.526%ileMicrosoft2026-06-09
CVE-2026-8829HTML::Entities versions before 3.84 for Perl read freed heap memory in _decode_entitiesHIGH7.534%ileMicrosoft2026-06-09
CVE-2026-42535Apache HTTP Server: mod_dav_fs protected directory accessHIGH7.542%ileMicrosoft2026-06-09
CVE-2026-34356Apache HTTP Server: ProxyPassReverseCookieMap buffer overflowHIGH7.550%ileMicrosoft2026-06-09
CVE-2026-34355Apache HTTP Server: mod_proxy_html buffer overflowHIGH7.563%ileMicrosoft2026-06-09
CVE-2026-34183Unbounded Memory Growth in the QUIC PATH_CHALLENGE HandlerHIGH7.561%ileMicrosoft2026-06-09
CVE-2026-9076Out-of-Bounds Read in CMS Password-Based DecryptionHIGH7.545%ileMicrosoft2026-06-09
CVE-2026-34180Heap Buffer Over-read in ASN.1 Content ParsingHIGH7.560%ileMicrosoft2026-06-09
CVE-2026-12143form-data does not escape CR/LF/quote in multipart field names and filenames (CRLF injection)HIGH7.542%ileMicrosoft2026-06-09
CVE-2026-57434Nokogiri: Null Pointer Dereference calling methods on uninitialized wrapper classesHIGH7.528%ileMicrosoft2026-06-09
CVE-2026-34181PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC KeysHIGH7.415%ileMicrosoft2026-06-09
CVE-2026-9697undici vulnerable to TLS certificate validation bypass via dropped requestTls in SOCKS5 ProxyAgentHIGH7.438%ileMicrosoft2026-06-09
CVE-2026-50292In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev propertiHIGH7.424%ileMicrosoft2026-06-09
CVE-2026-47634Microsoft SharePoint Server Spoofing VulnerabilityHIGH7.343%ileMicrosoft2026-06-09
CVE-2026-45481Microsoft SharePoint Server Spoofing VulnerabilityHIGH7.349%ileMicrosoft2026-06-09
CVE-2026-11463USCiLab Cereal Shared Pointer type confusionHIGH7.324%ileMicrosoft2026-06-09
CVE-2026-48913Apache HTTP Server: mod_http2 memory corruption when file handles exhaustedHIGH7.339%ileMicrosoft2026-06-09
CVE-2026-44185Apache HTTP Server: Stack Buffer Over-Read in mod_ssl OCSP `send_request`HIGH7.350%ileMicrosoft2026-06-09
CVE-2026-45649Office for Android Spoofing VulnerabilityHIGH7.134%ileMicrosoft2026-06-09
CVE-2026-47288Windows Kerberos Key Distribution Center (KDC) Remote Code ExecutionHIGH7.140%ileMicrosoft2026-06-09
CVE-2026-48569Visual Studio Code Security Feature Bypass VulnerabilityHIGH7.128%ileMicrosoft2026-06-09
CVE-2026-46285mtd: docg3: fix use-after-free in docg3_release()HIGH7.13%ileMicrosoft2026-06-09
CVE-2026-46320tap: free page on error paths in tap_get_user_xdp()HIGH7.115%ileMicrosoft2026-06-09
CVE-2026-53689CVE-2026-53689HIGH7.112%ileMicrosoft2026-06-09
CVE-2026-53212netfilter: nft_tunnel: fix use-after-free on object destroyHIGH7.13%ileMicrosoft2026-06-09
CVE-2026-53137drm/amd/display: Clamp HDMI HDCP2 rx_id_list read to buffer sizeHIGH7.14%ileMicrosoft2026-06-09
CVE-2026-53230net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_listHIGH7.13%ileMicrosoft2026-06-09
CVE-2026-52918Bluetooth: serialize accept_q accessHIGH7.118%ileMicrosoft2026-06-09
CVE-2026-52942netfilter: nf_log: validate MAC header was set before dumping itHIGH7.13%ileMicrosoft2026-06-09
CVE-2026-53186RDMA/srp: bound SRP_RSP sense copy by the received lengthHIGH7.141%ileMicrosoft2026-06-09
CVE-2026-53268netfilter: conntrack_irc: fix possible out-of-bounds readHIGH7.127%ileMicrosoft2026-06-09
CVE-2026-53253Bluetooth: bnep: reject short frames before parsingHIGH7.118%ileMicrosoft2026-06-09
CVE-2026-46293clk: microchip: mpfs-ccc: fix out of bounds access during output registrationHIGH7.13%ileMicrosoft2026-06-09
CVE-2026-53270ipvs: clear the svc scheduler ptr early on editHIGH7.12%ileMicrosoft2026-06-09
CVE-2026-52917sctp: diag: reject stale associations in dump_one pathHIGH7.13%ileMicrosoft2026-06-09
CVE-2026-53265dm cache policy smq: check allocation under invalidate lockHIGH7.12%ileMicrosoft2026-06-09
CVE-2026-41108Windows DNS Client Elevation of Privilege VulnerabilityHIGH7.020%ileMicrosoft2026-06-09
CVE-2026-34335Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityHIGH7.014%ileMicrosoft2026-06-09
CVE-2026-44818Microsoft Excel Remote Code Execution VulnerabilityHIGH7.018%ileMicrosoft2026-06-09
CVE-2026-45640Windows Bluetooth Port Driver Elevation of Privilege VulnerabilityHIGH7.014%ileMicrosoft2026-06-09
CVE-2026-47648Windows Storage Elevation of Privilege VulnerabilityHIGH7.012%ileMicrosoft2026-06-09
CVE-2026-45597Windows UI Automation Manager (uiamanager.dll) Elevation of Privilege VulnerabilityHIGH7.08%ileMicrosoft2026-06-09
CVE-2026-45601Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityHIGH7.08%ileMicrosoft2026-06-09
CVE-2026-45598Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityHIGH7.08%ileMicrosoft2026-06-09
CVE-2026-45596Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityHIGH7.08%ileMicrosoft2026-06-09
CVE-2026-45603Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityHIGH7.08%ileMicrosoft2026-06-09
CVE-2026-45653Windows Kernel Elevation of Privilege VulnerabilityHIGH7.016%ileMicrosoft2026-06-09
CVE-2026-47293Microsoft Office Click-To-Run Elevation of Privilege VulnerabilityHIGH7.014%ileMicrosoft2026-06-09
CVE-2026-42836Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege VulnerabilityHIGH7.010%ileMicrosoft2026-06-09
CVE-2026-42911Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityHIGH7.014%ileMicrosoft2026-06-09
CVE-2026-42912Windows Telephony Service Elevation of Privilege VulnerabilityHIGH7.011%ileMicrosoft2026-06-09
CVE-2026-42984Windows Kernel Elevation of Privilege VulnerabilityHIGH7.016%ileMicrosoft2026-06-09
CVE-2026-46244netfilter: nft_inner: Fix IPv6 inner_thoff desyncHIGH7.025%ileMicrosoft2026-06-09
CVE-2026-46275Bluetooth: hci_uart: fix UAFs and race conditions in close and init pathsHIGH7.08%ileMicrosoft2026-06-09
CVE-2026-46319net/sched: act_ct: Only release RCU read lock after ct_ftHIGH7.03%ileMicrosoft2026-06-09
CVE-2026-53239xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx()HIGH7.03%ileMicrosoft2026-06-09
CVE-2026-53254Bluetooth: RFCOMM: validate skb length in MCC handlersHIGH7.019%ileMicrosoft2026-06-09
CVE-2026-53267netfilter: nft_ct: bail out on template ct in get evalHIGH7.02%ileMicrosoft2026-06-09
CVE-2026-53249ipv4: restrict IPOPT_SSRR and IPOPT_LSRR optionsHIGH7.02%ileMicrosoft2026-06-09
CVE-2026-53218netfilter: nft_exthdr: fix register tracking for F_PRESENT flagHIGH7.02%ileMicrosoft2026-06-09
CVE-2026-53228ipv6: sit: reload inner IPv6 header after GSO offloadsHIGH7.041%ileMicrosoft2026-06-09
CVE-2026-46306flow_dissector: do not dissect PPPoE PFC framesHIGH7.032%ileMicrosoft2026-06-09
CVE-2026-53242ALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on linked streamsHIGH7.03%ileMicrosoft2026-06-09
CVE-2026-53236tcp: restrict SO_ATTACH_FILTER to priv usersHIGH7.02%ileMicrosoft2026-06-09
CVE-2026-53264net/sched: act_api: use RCU with deferred freeing for action lifecycleHIGH7.011%ileMicrosoft2026-06-09
CVE-2026-53182wifi: nl80211: reject oversized EMA RNR listsHIGH7.03%ileMicrosoft2026-06-09
CVE-2026-52924sctp: purge outqueue on stale COOKIE-ECHO handlingHIGH7.026%ileMicrosoft2026-06-09
CVE-2026-53150thunderbolt: Reject zero-length property entries in validatorHIGH7.02%ileMicrosoft2026-06-09
CVE-2026-53209Bluetooth: hci_sync: reject oversized Broadcast Announcement prependHIGH7.03%ileMicrosoft2026-06-09
CVE-2026-53275ipv6: mcast: Fix use-after-free when processing MLD queriesHIGH7.014%ileMicrosoft2026-06-09
CVE-2026-53133RDMA/umem: Fix truncation for block sizes >= 4GHIGH7.03%ileMicrosoft2026-06-09
CVE-2026-53148thunderbolt: Clamp XDomain response data copy to allocation sizeHIGH7.03%ileMicrosoft2026-06-09
CVE-2026-53168fuse: reject fuse_notify() pagecache ops on directoriesHIGH7.02%ileMicrosoft2026-06-09
CVE-2026-56411xmlwf in libexpat before 2.8.2 has an integer overflow in endDoctypeDecl via NOTATION declarations.MEDIUM6.94%ileMicrosoft2026-06-09
CVE-2026-56410xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId.MEDIUM6.94%ileMicrosoft2026-06-09
CVE-2026-45608Windows DHCP Client Information Disclosure VulnerabilityMEDIUM6.826%ileMicrosoft2026-06-09
CVE-2026-50507Windows BitLocker Security Feature Bypass VulnerabilityMEDIUM6.891%ileMicrosoft2026-06-09
CVE-2026-53266netfilter: bridge: make ebt_snat ARP rewrite writableMEDIUM6.82%ileMicrosoft2026-06-09
CVE-2026-50260Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in freecounter()MEDIUM6.65%ileMicrosoft2026-06-09
CVE-2026-50257Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in misyncdestroyfence()MEDIUM6.64%ileMicrosoft2026-06-09
CVE-2026-46323net: gro: don't merge zcopy skbsMEDIUM6.64%ileMicrosoft2026-06-09
CVE-2026-42014Gnutls: fix use-after-free in gnutls_pkcs11_token_set_pinMEDIUM6.65%ileMicrosoft2026-06-09
CVE-2026-57438Nokogiri: Possible Use-After-Free in XInclude ProcessingMEDIUM6.61%ileMicrosoft2026-06-09
CVE-2026-47644Copilot Chat (Microsoft Edge) Information Disclosure VulnerabilityMEDIUM6.551%ileMicrosoft2026-06-09
CVE-2026-47655Microsoft Graph Information Disclosure VulnerabilityMEDIUM6.552%ileMicrosoft2026-06-09
CVE-2026-42895Microsoft Copilot Tampering VulnerabilityMEDIUM6.533%ileMicrosoft2026-06-09
CVE-2026-45501Microsoft Exchange Server Spoofing VulnerabilityMEDIUM6.523%ileMicrosoft2026-06-09
CVE-2026-47287Visual Studio Code Tampering VulnerabilityMEDIUM6.553%ileMicrosoft2026-06-09
CVE-2026-50508Windows NTLM Spoofing VulnerabilityMEDIUM6.595%ileMicrosoft2026-06-09
CVE-2026-50519Microsoft Visual Studio Code CoPilot Chat Security Feature Bypass VulnerabilityMEDIUM6.541%ileMicrosoft2026-06-09
CVE-2026-45454Microsoft SharePoint Remote Code Execution VulnerabilityMEDIUM6.574%ileMicrosoft2026-06-09
CVE-2026-47284Visual Studio Code Information Disclosure VulnerabilityMEDIUM6.557%ileMicrosoft2026-06-09
CVE-2026-42903Windows Kerberos Denial of Service VulnerabilityMEDIUM6.556%ileMicrosoft2026-06-09
CVE-2026-42907Windows Shell Information Disclosure VulnerabilityMEDIUM6.554%ileMicrosoft2026-06-09
CVE-2026-42824M365 Copilot Information Disclosure VulnerabilityMEDIUM6.594%ileMicrosoft2026-06-09
CVE-2026-56409xmlwf in libexpat before 2.8.2 has an integer overflow for the output filename when -d outputDir is used.MEDIUM6.53%ileMicrosoft2026-06-09
CVE-2026-9539libslirp TCP URG OOB Read Information LeakMEDIUM6.51%ileMicrosoft2026-06-09
CVE-2026-57453Vim: PowerShell Command Injection via Unescaped Filename in zip.vim ExtractionMEDIUM6.54%ileMicrosoft2026-06-09
CVE-2026-27145Inefficient candidate hostname parsing in crypto/x509MEDIUM6.545%ileMicrosoft2026-06-09
CVE-2026-46433lldpd: Heap OOB Read in VLAN Decapsulation memmoveMEDIUM6.513%ileMicrosoft2026-06-09
CVE-2026-43951Apache HTTP Server: OOB Read in `merge_response_headers` can cause crashMEDIUM6.543%ileMicrosoft2026-06-09
CVE-2026-44186Apache HTTP Server: Loop in `proxy_ftp_handler` in mod_proxy_ftpMEDIUM6.545%ileMicrosoft2026-06-09
CVE-2026-48858ftp client PASV response IP not validated against control peer, enabling SSRF and FTP bounce attacksMEDIUM6.514%ileMicrosoft2026-06-09
CVE-2026-48856httpc leaks Authorization header to cross-origin redirect targetsMEDIUM6.526%ileMicrosoft2026-06-09
CVE-2026-48860Distribution-over-TLS LAN allowlist silently bypassed due to sockname/peername confusion in inet_tls_distMEDIUM6.59%ileMicrosoft2026-06-09
CVE-2026-48855SFTP READLINK Leaks Absolute Backend Filesystem Path When Root Is ConfiguredMEDIUM6.520%ileMicrosoft2026-06-09
CVE-2026-53146thunderbolt: Limit XDomain response copy to actual frame sizeMEDIUM6.515%ileMicrosoft2026-06-09
CVE-2026-13201Kubevirt: virt-handler-rhel9: kubevirt: safepath symlink following in virt-handler enables notify socket hijacking and nMEDIUM6.32%ileMicrosoft2026-06-09
CVE-2026-45491.NET Tampering VulnerabilityMEDIUM6.232%ileMicrosoft2026-06-09
CVE-2026-45500Microsoft Exchange Server Spoofing VulnerabilityMEDIUM6.130%ileMicrosoft2026-06-09
CVE-2026-57454Vim: Out-of-bounds Read with Text PropertiesMEDIUM6.12%ileMicrosoft2026-06-09
CVE-2026-46322tun: free page on build_skb failure in tun_xdp_one()MEDIUM6.13%ileMicrosoft2026-06-09
CVE-2026-29170Apache HTTP Server: mod_proxy_ftp XSSMEDIUM6.142%ileMicrosoft2026-06-09
CVE-2026-44889WebOb: Location header normalization during redirect leads to open redirectMEDIUM6.16%ileMicrosoft2026-06-09
CVE-2026-42766Possible NULL Dereference in Password-Based CMS DecryptionMEDIUM5.959%ileMicrosoft2026-06-09
CVE-2026-42767NULL Pointer Dereference in CRMF EncryptedValue DecryptionMEDIUM5.943%ileMicrosoft2026-06-09
CVE-2026-54411Linux-PAM through 1.7.2 contains an observable timing discrepancy (CWE-208) in the pam_userdb module's plaintext-passworMEDIUM5.926%ileMicrosoft2026-06-09
CVE-2026-12725Dnsmasq: dnsmasq: heap buffer overflow in log_query() when logging unsupported ds/dnskey repliesMEDIUM5.933%ileMicrosoft2026-06-09
CVE-2026-44821Microsoft Office Information Disclosure VulnerabilityMEDIUM5.538%ileMicrosoft2026-06-09
CVE-2026-45606Microsoft UxTheme Library (uxtheme.dll) Denial of Service VulnerabilityMEDIUM5.531%ileMicrosoft2026-06-09
CVE-2026-45634Windows DHCP Client Information Disclosure VulnerabilityMEDIUM5.529%ileMicrosoft2026-06-09
CVE-2026-48566Windows DWM Core Library Information Disclosure VulnerabilityMEDIUM5.532%ileMicrosoft2026-06-09
CVE-2026-45594Windows Application Identity (AppID) Information Disclosure VulnerabilityMEDIUM5.533%ileMicrosoft2026-06-09
CVE-2026-45604Windows Managed Installer Information Disclosure VulnerabilityMEDIUM5.527%ileMicrosoft2026-06-09
CVE-2026-45647Microsoft Defender for Endpoint for Mac Elevation of Privilege VulnerabilityMEDIUM5.512%ileMicrosoft2026-06-09
CVE-2026-42906Windows Shell Information Disclosure VulnerabilityMEDIUM5.533%ileMicrosoft2026-06-09
CVE-2026-42915Microsoft Windows VMSwitch Denial of Service VulnerabilityMEDIUM5.531%ileMicrosoft2026-06-09
CVE-2026-42968Windows Telephony Server Information Disclosure VulnerabilityMEDIUM5.532%ileMicrosoft2026-06-09
CVE-2026-42972Windows Hyper-V Information Disclosure VulnerabilityMEDIUM5.538%ileMicrosoft2026-06-09
CVE-2026-42969Windows Push Notification Information Disclosure VulnerabilityMEDIUM5.532%ileMicrosoft2026-06-09
CVE-2026-42971Windows Push Notification Information Disclosure VulnerabilityMEDIUM5.538%ileMicrosoft2026-06-09
CVE-2026-42970Windows Push Notification Information Disclosure VulnerabilityMEDIUM5.533%ileMicrosoft2026-06-09
CVE-2026-42973Windows Push Notification Information Disclosure VulnerabilityMEDIUM5.533%ileMicrosoft2026-06-09
CVE-2026-44805Windows Network Controller (NC) Host Agent Denial of Service VulnerabilityMEDIUM5.528%ileMicrosoft2026-06-09
CVE-2026-44814Windows DWM Core Library Information Disclosure VulnerabilityMEDIUM5.524%ileMicrosoft2026-06-09
CVE-2026-50262Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds read/write in glx changedrawableattributesMEDIUM5.53%ileMicrosoft2026-06-09
CVE-2026-50263Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free information disclosure in createsaverwindow()MEDIUM5.54%ileMicrosoft2026-06-09
CVE-2026-46280lib: test_hmm: evict device pages on file close to avoid use-after-freeMEDIUM5.53%ileMicrosoft2026-06-09
CVE-2026-46312media: videobuf2: Set vma_flags in vb2_dma_sg_mmapMEDIUM5.52%ileMicrosoft2026-06-09
CVE-2026-46296spi: s3c64xx: fix NULL-deref on driver unbindMEDIUM5.52%ileMicrosoft2026-06-09
CVE-2026-46287net: txgbe: fix RTNL assertion warning when remove moduleMEDIUM5.52%ileMicrosoft2026-06-09
CVE-2026-46299hfsplus: fix held lock freed on hfsplus_fill_super()MEDIUM5.51%ileMicrosoft2026-06-09
CVE-2026-46321tun: free page on short-frame rejection in tun_xdp_one()MEDIUM5.53%ileMicrosoft2026-06-09
CVE-2026-53213drm/vc4: fix krealloc() memory leakMEDIUM5.52%ileMicrosoft2026-06-09
CVE-2026-53147thunderbolt: Validate XDomain request packet size before type castMEDIUM5.519%ileMicrosoft2026-06-09
CVE-2026-53274net/smc: fix sleep-inside-lock in __smc_setsockopt() causing local DoSMEDIUM5.52%ileMicrosoft2026-06-09
CVE-2026-52915netfilter: ip6t_hbh: reject oversized option listsMEDIUM5.53%ileMicrosoft2026-06-09
CVE-2026-52916batman-adv: frag: disallow unicast fragment in fragmentMEDIUM5.52%ileMicrosoft2026-06-09
CVE-2026-54905concurrent-ruby: `ReentrantReadWriteLock` read-count overflow grants a write lock without exclusivityMEDIUM5.51%ileMicrosoft2026-06-09
CVE-2026-53177bnxt_en: Fix NULL pointer dereferenceMEDIUM5.52%ileMicrosoft2026-06-09
CVE-2026-53214ipv6: Fix a potential NPD in cleanup_prefix_route()MEDIUM5.52%ileMicrosoft2026-06-09
CVE-2026-52929sctp: stream: fully roll back denied add-stream stateMEDIUM5.532%ileMicrosoft2026-06-09
CVE-2026-53190drm/virtio: fix dma_fence refcount leak on error in virtio_gpu_dma_fence_wait()MEDIUM5.52%ileMicrosoft2026-06-09
CVE-2026-52927netfilter: ebtables: fix OOB read in compat_mtw_from_userMEDIUM5.52%ileMicrosoft2026-06-09
CVE-2026-53219netfilter: x_tables: avoid leaking percpu counter pointersMEDIUM5.52%ileMicrosoft2026-06-09
CVE-2026-57452Vim: Out-of-bounds Read with libsodium-encrypted FilesMEDIUM5.52%ileMicrosoft2026-06-09
CVE-2026-53221ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup()MEDIUM5.541%ileMicrosoft2026-06-09
CVE-2026-55892Vim: Out-of-bounds Write in Spell File Prefix DumpMEDIUM5.52%ileMicrosoft2026-06-09
CVE-2026-53154mm/hugetlb: restore reservation on error in hugetlb folio copy pathsMEDIUM5.52%ileMicrosoft2026-06-09
CVE-2026-52941net/smc: avoid NULL deref of conn->lnk in smc_msg_event tracepointMEDIUM5.52%ileMicrosoft2026-06-09
CVE-2026-532636lowpan: fix off-by-one in multicast context address compressionMEDIUM5.52%ileMicrosoft2026-06-09
CVE-2026-46273ibmveth: Disable GSO for packets with small MSSMEDIUM5.532%ileMicrosoft2026-06-09
CVE-2026-46289lib/scatterlist: fix length calculations in extract_kvec_to_sgMEDIUM5.537%ileMicrosoft2026-06-09
CVE-2026-46307wifi: ath5k: do not access array OOBMEDIUM5.513%ileMicrosoft2026-06-09
CVE-2026-46292pmdomain: core: Fix detach procedure for virtual devices in genpdMEDIUM5.52%ileMicrosoft2026-06-09
CVE-2026-46291crypto: caam - guard HMAC key hex dumps in hash_digest_keyMEDIUM5.52%ileMicrosoft2026-06-09
CVE-2026-46304nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_freeMEDIUM5.532%ileMicrosoft2026-06-09
CVE-2026-46303isofs: validate Rock Ridge CE continuation extent against volume sizeMEDIUM5.520%ileMicrosoft2026-06-09
CVE-2026-44119Apache HTTP Server: escalation of privilege through expressions in .htaccess in multiple modulesMEDIUM5.58%ileMicrosoft2026-06-09
CVE-2026-49760Stack Buffer Overflow in ei_s_print_term at Very Large IntegerMEDIUM5.54%ileMicrosoft2026-06-09
CVE-2026-4367Libxpm: libxpm: denial of service via out-of-bounds read in xpm file parsingMEDIUM5.53%ileMicrosoft2026-06-09
CVE-2026-53227net: openvswitch: fix possible kfree_skb of ERR_PTRMEDIUM5.53%ileMicrosoft2026-06-09
CVE-2026-53207mm/memory-failure: fix hugetlb_lock AA deadlock in get_huge_page_for_hwpoisonMEDIUM5.51%ileMicrosoft2026-06-09
CVE-2026-52921netfilter: ipset: stop hash:* range iteration at endMEDIUM5.52%ileMicrosoft2026-06-09
CVE-2026-53149thunderbolt: Bound root directory content to block sizeMEDIUM5.53%ileMicrosoft2026-06-09
CVE-2026-53181vsock/vmci: fix sk_ack_backlog leak on failed handshakeMEDIUM5.52%ileMicrosoft2026-06-09
CVE-2026-53184udp: clear skb->dev before running a sockmap verdictMEDIUM5.539%ileMicrosoft2026-06-09
CVE-2026-52960ceph: put folios not suitable for writebackMEDIUM5.529%ileMicrosoft2026-06-09
CVE-2026-53255Bluetooth: MGMT: validate advertising TLV before type checksMEDIUM5.52%ileMicrosoft2026-06-09
CVE-2026-53237gpio: mvebu: fix NULL pointer dereference in suspend/resumeMEDIUM5.52%ileMicrosoft2026-06-09
CVE-2026-53225sctp: fix uninit-value in __sctp_rcv_asconf_lookup()MEDIUM5.541%ileMicrosoft2026-06-09
CVE-2026-53245net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattrMEDIUM5.52%ileMicrosoft2026-06-09
CVE-2026-53199hv_netvsc: use kmap_local_page in netvsc_copy_to_send_bufMEDIUM5.540%ileMicrosoft2026-06-09
CVE-2026-53183mptcp: allow subflow rcv wnd to shrinkMEDIUM5.539%ileMicrosoft2026-06-09
CVE-2026-52930ipc/shm: serialize orphan cleanup with shm_nattch updatesMEDIUM5.52%ileMicrosoft2026-06-09
CVE-2026-53135drm/amd/display: Fix NULL deref and buffer over-read in SDP debugfsMEDIUM5.52%ileMicrosoft2026-06-09
CVE-2026-53080net/sched: cls_fw: fix NULL dereference of "old" filters before change()MEDIUM5.52%ileMicrosoft2026-06-09
CVE-2026-53252Bluetooth: fix memory leak in error path of hci_alloc_dev()MEDIUM5.53%ileMicrosoft2026-06-09
CVE-2026-53655node-tar applies PAX size override to intermediary GNU long-name/long-link headers, causing tar parser interpretation diMEDIUM5.54%ileMicrosoft2026-06-09
CVE-2026-45453Microsoft SharePoint Server Spoofing VulnerabilityMEDIUM5.441%ileMicrosoft2026-06-09
CVE-2026-47636Microsoft SharePoint Server Spoofing VulnerabilityMEDIUM5.441%ileMicrosoft2026-06-09
CVE-2026-47639Microsoft SharePoint Server Spoofing VulnerabilityMEDIUM5.441%ileMicrosoft2026-06-09
CVE-2026-33113Microsoft SharePoint Server Spoofing VulnerabilityMEDIUM5.441%ileMicrosoft2026-06-09
CVE-2026-45464Microsoft SharePoint Server Spoofing VulnerabilityMEDIUM5.441%ileMicrosoft2026-06-09
CVE-2026-45465Microsoft SharePoint Server Spoofing VulnerabilityMEDIUM5.441%ileMicrosoft2026-06-09
CVE-2026-45595Windows Mark of the Web Security Feature Bypass VulnerabilityMEDIUM5.435%ileMicrosoft2026-06-09
CVE-2026-48560Microsoft SharePoint Server Spoofing VulnerabilityMEDIUM5.457%ileMicrosoft2026-06-09
CVE-2026-40930LIBPNG: Chunk smuggling in push-mode APNG parser via unconsumed chunk bodyMEDIUM5.410%ileMicrosoft2026-06-09
CVE-2026-45655Windows BitLocker Security Feature Bypass VulnerabilityMEDIUM5.334%ileMicrosoft2026-06-09
CVE-2026-42914Windows Kerberos Denial of Service VulnerabilityMEDIUM5.353%ileMicrosoft2026-06-09
CVE-2026-57436Nokogiri: Possible Use-After-Free when setting `Document#root=` to an invalid node typeMEDIUM5.325%ileMicrosoft2026-06-09
CVE-2026-42507Arbitrary inputs are included in errors without any escaping in net/textprotoMEDIUM5.330%ileMicrosoft2026-06-09
CVE-2026-50265Rejected reason: This CVE ID was assigned as a duplicate of CVE-2026-50292MEDIUM5.3—Microsoft2026-06-09
CVE-2026-12969Dnsmasq: dnsmasq: out-of-bounds read in find_soa() due to missing extrabytes validationMEDIUM5.315%ileMicrosoft2026-06-09
CVE-2026-57437Nokogiri: Possible Use-After-Free when directly using `NokogirI::XML::XPathContext` beyond document lifetimeMEDIUM5.325%ileMicrosoft2026-06-09
CVE-2026-57451Vim: Out-of-bounds Read in Text Property CountMEDIUM5.32%ileMicrosoft2026-06-09
CVE-2026-45502Microsoft Exchange Server Information Disclosure VulnerabilityMEDIUM5.097%ileMicrosoft2026-06-09
CVE-2026-55655Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client veMEDIUM5.00%ileMicrosoft2026-06-09
CVE-2026-10275OpenSC pkcs11-tool Key Generation pkcs11-tool.c test_kpgen_certwrite buffer overflowMEDIUM5.022%ileMicrosoft2026-06-09
CVE-2026-50219libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_GetBuffer, XML_Parse, XML_ParseBuffer, XML_ParsMEDIUM4.921%ileMicrosoft2026-06-09
CVE-2026-45446Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modesMEDIUM4.829%ileMicrosoft2026-06-09
CVE-2026-45460Microsoft Office Information Disclosure VulnerabilityMEDIUM4.728%ileMicrosoft2026-06-09
CVE-2026-45467Microsoft SharePoint Server Spoofing VulnerabilityMEDIUM4.640%ileMicrosoft2026-06-09
CVE-2026-45468Microsoft SharePoint Server Spoofing VulnerabilityMEDIUM4.640%ileMicrosoft2026-06-09
CVE-2026-45479Microsoft SharePoint Server Spoofing VulnerabilityMEDIUM4.640%ileMicrosoft2026-06-09
CVE-2026-45483Microsoft Office Project Server Spoofing VulnerabilityMEDIUM4.640%ileMicrosoft2026-06-09
CVE-2026-47637Microsoft SharePoint Server Spoofing VulnerabilityMEDIUM4.640%ileMicrosoft2026-06-09
CVE-2026-47638Microsoft SharePoint Server Spoofing VulnerabilityMEDIUM4.640%ileMicrosoft2026-06-09
CVE-2026-47641Microsoft SharePoint Server Spoofing VulnerabilityMEDIUM4.640%ileMicrosoft2026-06-09
CVE-2026-45462Microsoft SharePoint Server Spoofing VulnerabilityMEDIUM4.640%ileMicrosoft2026-06-09
CVE-2026-47640Microsoft SharePoint Server Spoofing VulnerabilityMEDIUM4.640%ileMicrosoft2026-06-09
CVE-2026-48562Microsoft SharePoint Server Spoofing VulnerabilityMEDIUM4.640%ileMicrosoft2026-06-09
CVE-2026-46250MIPS: Work around LLVM bug when gp is used as global register variableMEDIUM4.43%ileMicrosoft2026-06-09
CVE-2026-45650Microsoft Bing Search Spoofing VulnerabilityMEDIUM4.346%ileMicrosoft2026-06-09
CVE-2026-55653Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validatiMEDIUM4.321%ileMicrosoft2026-06-09
CVE-2026-53238netlabel: validate unlabeled address and mask attribute lengthsMEDIUM4.32%ileMicrosoft2026-06-09
CVE-2026-11526GD versions before 2.86 for Perl allow OS command injection and file overwrite via a 2-arg open() of filename arguments MEDIUM4.269%ileMicrosoft2026-06-09
CVE-2026-45642Microsoft Azure Attestation service and Device Health Attestation Service Spoofing VulnerabilityLOW3.924%ileMicrosoft2026-06-09
CVE-2026-46272coresight: tmc-etr: Fix race condition between sysfs and perf modeLOW3.90%ileMicrosoft2026-06-09
CVE-2026-5419Guntls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removalLOW3.731%ileMicrosoft2026-06-09
CVE-2026-42768Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()LOW3.744%ileMicrosoft2026-06-09
CVE-2026-45485Microsoft Office Information Disclosure VulnerabilityLOW3.336%ileMicrosoft2026-06-09
CVE-2026-45466Microsoft Word Information Disclosure VulnerabilityLOW3.330%ileMicrosoft2026-06-09
CVE-2026-45455Microsoft Excel Information Disclosure VulnerabilityLOW3.347%ileMicrosoft2026-06-09
CVE-2026-45459Microsoft Excel Security Feature Bypass VulnerabilityLOW3.330%ileMicrosoft2026-06-09
CVE-2026-10722cilium ebpf LoadCollectionSpec/LoadCollectionSpecFromReader btf.go loadRawSpec integer overflowLOW3.38%ileMicrosoft2026-06-09
CVE-2026-49356Babel: Arbitrary File Read via sourceMappingURL Comment in @babel/coreLOW3.23%ileMicrosoft2026-06-09
CVE-2026-57234Nokogiri: XML::Schema on JRuby allows network requests when NONET is set, bypassing CVE-2020-26247LOW2.66%ileMicrosoft2026-06-09
CVE-2026-10984Chromium: CVE-2026-10984 Inappropriate implementation in AccessibilityUNKNOWN—14%ileMicrosoft2026-06-09
CVE-2026-11291Chromium: CVE-2026-11291 Policy bypass in Android AutofillUNKNOWN—6%ileMicrosoft2026-06-09
CVE-2026-11178Chromium: CVE-2026-11178 Policy bypass in WebViewUNKNOWN—5%ileMicrosoft2026-06-09
CVE-2026-12012Chromium: CVE-2026-12012 Use after free  NetworkUNKNOWN—13%ileMicrosoft2026-06-09
CVE-2026-12008Chromium: CVE-2026-12008 Use after free  DigitalCredentialsUNKNOWN—16%ileMicrosoft2026-06-09
CVE-2026-10881Chromium: CVE-2026-10881 Out of bounds read and write in ANGLEUNKNOWN—32%ileMicrosoft2026-06-09
CVE-2026-10884Chromium: CVE-2026-10884 Use after free in ChromecastUNKNOWN—21%ileMicrosoft2026-06-09
CVE-2026-10887Chromium: CVE-2026-10887 Use after free in ChromotingUNKNOWN—33%ileMicrosoft2026-06-09
CVE-2026-10888Chromium: CVE-2026-10888 Use after free in Cast StreamingUNKNOWN—9%ileMicrosoft2026-06-09
CVE-2026-10889Chromium: CVE-2026-10889 Out of bounds read in ANGLEUNKNOWN—21%ileMicrosoft2026-06-09
CVE-2026-10890Chromium: CVE-2026-10890 Use after free in CastUNKNOWN—8%ileMicrosoft2026-06-09
CVE-2026-10895Chromium: CVE-2026-10895 Use after free in OzoneUNKNOWN—32%ileMicrosoft2026-06-09
CVE-2026-10897Chromium: CVE-2026-10897 Out of bounds write in GPUUNKNOWN—25%ileMicrosoft2026-06-09
CVE-2026-10898Chromium: CVE-2026-10898 Stack buffer overflow in GPUUNKNOWN—26%ileMicrosoft2026-06-09
CVE-2026-10899Chromium: CVE-2026-10899 Use after free in OzoneUNKNOWN—21%ileMicrosoft2026-06-09
CVE-2026-10900Chromium: CVE-2026-10900 Use after free in PasswordsUNKNOWN—21%ileMicrosoft2026-06-09
CVE-2026-10903Chromium: CVE-2026-10903 Use after free in WebRTCUNKNOWN—40%ileMicrosoft2026-06-09
CVE-2026-10908Chromium: CVE-2026-10908 Use after free in FullScreenUNKNOWN—21%ileMicrosoft2026-06-09
CVE-2026-10909Chromium: CVE-2026-10909 Use after free in DawnUNKNOWN—21%ileMicrosoft2026-06-09
CVE-2026-10910Chromium: CVE-2026-10910 Type Confusion in V8UNKNOWN—35%ileMicrosoft2026-06-09
CVE-2026-10911Chromium: CVE-2026-10911 Insufficient validation of untrusted input in MediaUNKNOWN—23%ileMicrosoft2026-06-09
CVE-2026-10912Chromium: CVE-2026-10912 Insufficient validation of untrusted input in ExtensionsUNKNOWN—20%ileMicrosoft2026-06-09
CVE-2026-10914Chromium: CVE-2026-10914 Use after free in ANGLEUNKNOWN—32%ileMicrosoft2026-06-09
CVE-2026-10916Chromium: CVE-2026-10916 Insufficient validation of untrusted input in DevToolsUNKNOWN—12%ileMicrosoft2026-06-09
CVE-2026-10918Chromium: CVE-2026-10918 Use after free in VizUNKNOWN—21%ileMicrosoft2026-06-09
CVE-2026-10919Chromium: CVE-2026-10919 Use after free in ANGLEUNKNOWN—21%ileMicrosoft2026-06-09
CVE-2026-10921Chromium: CVE-2026-10921 Integer overflow in DawnUNKNOWN—21%ileMicrosoft2026-06-09
CVE-2026-10922Chromium: CVE-2026-10922 Insufficient validation of untrusted input in DevToolsUNKNOWN—23%ileMicrosoft2026-06-09
CVE-2026-10924Chromium: CVE-2026-10924 Integer overflow in ChromecastUNKNOWN—21%ileMicrosoft2026-06-09
CVE-2026-10925Chromium: CVE-2026-10925 Out of bounds write in SkiaUNKNOWN—21%ileMicrosoft2026-06-09
CVE-2026-10927Chromium: CVE-2026-10927 Out of bounds read in DawnUNKNOWN—21%ileMicrosoft2026-06-09
CVE-2026-10928Chromium: CVE-2026-10928 Script injection in HeadlessUNKNOWN—34%ileMicrosoft2026-06-09
CVE-2026-10931Chromium: CVE-2026-10931 Use after free in FileSystemUNKNOWN—25%ileMicrosoft2026-06-09
CVE-2026-10932Chromium: CVE-2026-10932 Use after free in UIUNKNOWN—22%ileMicrosoft2026-06-09
CVE-2026-10933Chromium: CVE-2026-10933 Use after free in AudioUNKNOWN—19%ileMicrosoft2026-06-09
CVE-2026-10935Chromium: CVE-2026-10935 Inappropriate implementation in V8UNKNOWN—32%ileMicrosoft2026-06-09
CVE-2026-10936Chromium: CVE-2026-10936 Type Confusion in V8UNKNOWN—32%ileMicrosoft2026-06-09
CVE-2026-10939Chromium: CVE-2026-10939 Use after free in WebRTCUNKNOWN—37%ileMicrosoft2026-06-09
CVE-2026-10940Chromium: CVE-2026-10940 Race in CodecsUNKNOWN—14%ileMicrosoft2026-06-09
CVE-2026-10941Chromium: CVE-2026-10941 Out of bounds memory access in SkiaUNKNOWN—34%ileMicrosoft2026-06-09
CVE-2026-10942Chromium: CVE-2026-10942 Insufficient validation of untrusted input in UIUNKNOWN—2%ileMicrosoft2026-06-09
CVE-2026-10943Chromium: CVE-2026-10943 Use after free in WebRTCUNKNOWN—40%ileMicrosoft2026-06-09
CVE-2026-10946Chromium: CVE-2026-10946 Heap buffer overflow in MediaUNKNOWN—30%ileMicrosoft2026-06-09
CVE-2026-10947Chromium: CVE-2026-10947 Use after free in WebRTCUNKNOWN—40%ileMicrosoft2026-06-09
CVE-2026-10949Chromium: CVE-2026-10949 Heap buffer overflow in VideoUNKNOWN—23%ileMicrosoft2026-06-09
CVE-2026-10954Chromium: CVE-2026-10954 Use after free in ActorUNKNOWN—32%ileMicrosoft2026-06-09
CVE-2026-10956Chromium: CVE-2026-10956 Use after free in MimeHandlerViewUNKNOWN—32%ileMicrosoft2026-06-09
CVE-2026-10957Chromium: CVE-2026-10957 Use after free in GlicUNKNOWN—29%ileMicrosoft2026-06-09
CVE-2026-10960Chromium: CVE-2026-10960 Uninitialized Use in CodecsUNKNOWN—21%ileMicrosoft2026-06-09
CVE-2026-10962Chromium: CVE-2026-10962 Type Confusion in MediaUNKNOWN—32%ileMicrosoft2026-06-09
CVE-2026-10964Chromium: CVE-2026-10964 Integer overflow in V8UNKNOWN—29%ileMicrosoft2026-06-09
CVE-2026-10965Chromium: CVE-2026-10965 Integer overflow in DevToolsUNKNOWN—29%ileMicrosoft2026-06-09
CVE-2026-10966Chromium: CVE-2026-10966 Insufficient validation of untrusted input in CodecsUNKNOWN—22%ileMicrosoft2026-06-09
CVE-2026-10969Chromium: CVE-2026-10969 Insufficient validation of untrusted input in ExtensionsUNKNOWN—21%ileMicrosoft2026-06-09
CVE-2026-10970Chromium: CVE-2026-10970 Insufficient validation of untrusted input in InterestGroupsUNKNOWN—21%ileMicrosoft2026-06-09
CVE-2026-10971Chromium: CVE-2026-10971 Insufficient validation of untrusted input in PrintingUNKNOWN—25%ileMicrosoft2026-06-09
CVE-2026-10972Chromium: CVE-2026-10972 Use after free in OzoneUNKNOWN—25%ileMicrosoft2026-06-09
CVE-2026-10973Chromium: CVE-2026-10973 Uninitialized Use in DawnUNKNOWN—59%ileMicrosoft2026-06-09
CVE-2026-10974Chromium: CVE-2026-10974 Insufficient validation of untrusted input in ANGLEUNKNOWN—25%ileMicrosoft2026-06-09
CVE-2026-10975Chromium: CVE-2026-10975 Use after free in WebRTCUNKNOWN—37%ileMicrosoft2026-06-09
CVE-2026-10976Chromium: CVE-2026-10976 Uninitialized Use in DawnUNKNOWN—26%ileMicrosoft2026-06-09
CVE-2026-10977Chromium: CVE-2026-10977 Uninitialized Use in SkiaUNKNOWN—26%ileMicrosoft2026-06-09
CVE-2026-10978Chromium: CVE-2026-10978 Use after free in ChromotingUNKNOWN—26%ileMicrosoft2026-06-09
CVE-2026-10981Chromium: CVE-2026-10981 Insufficient validation of untrusted input in CodecsUNKNOWN—21%ileMicrosoft2026-06-09
CVE-2026-10982Chromium: CVE-2026-10982 Use after free in WebXRUNKNOWN—37%ileMicrosoft2026-06-09
CVE-2026-10983Chromium: CVE-2026-10983 Insufficient validation of untrusted input in DawnUNKNOWN—25%ileMicrosoft2026-06-09
CVE-2026-10989Chromium: CVE-2026-10989 Inappropriate implementation in V8UNKNOWN—25%ileMicrosoft2026-06-09
CVE-2026-10990Chromium: CVE-2026-10990 Use after free in GlicUNKNOWN—23%ileMicrosoft2026-06-09
CVE-2026-10991Chromium: CVE-2026-10991 Use after free in V8UNKNOWN—29%ileMicrosoft2026-06-09
CVE-2026-10992Chromium: CVE-2026-10992 Insufficient data validation in AnimationUNKNOWN—23%ileMicrosoft2026-06-09
CVE-2026-10993Chromium: CVE-2026-10993 Heap buffer overflow in SkiaUNKNOWN—26%ileMicrosoft2026-06-09
CVE-2026-10994Chromium: CVE-2026-10994 Uninitialized Use in ANGLEUNKNOWN—26%ileMicrosoft2026-06-09
CVE-2026-10995Chromium: CVE-2026-10995 Heap buffer overflow in TabStripUNKNOWN—28%ileMicrosoft2026-06-09
CVE-2026-10996Chromium: CVE-2026-10996 Inappropriate implementation in WorkersUNKNOWN—18%ileMicrosoft2026-06-09
CVE-2026-10997Chromium: CVE-2026-10997 Insufficient policy enforcement in ExtensionsUNKNOWN—15%ileMicrosoft2026-06-09
CVE-2026-10998Chromium: CVE-2026-10998 Out of bounds read in MediaUNKNOWN—1%ileMicrosoft2026-06-09
CVE-2026-11000Chromium: CVE-2026-11000 Use after free in FontsUNKNOWN—29%ileMicrosoft2026-06-09
CVE-2026-11006Chromium: CVE-2026-11006 Out of bounds read in DawnUNKNOWN—23%ileMicrosoft2026-06-09
CVE-2026-11008Chromium: CVE-2026-11008 Insufficient validation of untrusted input in WebAppInstallsUNKNOWN—23%ileMicrosoft2026-06-09
CVE-2026-11009Chromium: CVE-2026-11009 Use after free in USBUNKNOWN—25%ileMicrosoft2026-06-09
CVE-2026-11013Chromium: CVE-2026-11013 Insufficient validation of untrusted input in NetworkUNKNOWN—23%ileMicrosoft2026-06-09
CVE-2026-11015Chromium: CVE-2026-11015 Out of bounds read in WebGPUUNKNOWN—24%ileMicrosoft2026-06-09
CVE-2026-11016Chromium: CVE-2026-11016 Insufficient validation of untrusted input in NetworkUNKNOWN—20%ileMicrosoft2026-06-09
CVE-2026-11020Chromium: CVE-2026-11020 Inappropriate implementation in ExtensionsUNKNOWN—13%ileMicrosoft2026-06-09
CVE-2026-11021Chromium: CVE-2026-11021 Insufficient validation of untrusted input in GPUUNKNOWN—25%ileMicrosoft2026-06-09
CVE-2026-11022Chromium: CVE-2026-11022 Insufficient validation of untrusted input in DevToolsUNKNOWN—20%ileMicrosoft2026-06-09
CVE-2026-11024Chromium: CVE-2026-11024 Stack buffer overflow in SkiaUNKNOWN—28%ileMicrosoft2026-06-09
CVE-2026-11028Chromium: CVE-2026-11028 Use after free in MediaUNKNOWN—29%ileMicrosoft2026-06-09
CVE-2026-11033Chromium: CVE-2026-11033 Uninitialized Use in WebMLUNKNOWN—16%ileMicrosoft2026-06-09
CVE-2026-11036Chromium: CVE-2026-11036 Inappropriate implementation in DOMUNKNOWN—6%ileMicrosoft2026-06-09
CVE-2026-11037Chromium: CVE-2026-11037 Out of bounds write in CodecsUNKNOWN—20%ileMicrosoft2026-06-09
CVE-2026-11038Chromium: CVE-2026-11038 Insufficient validation of untrusted input in Subresource IntegrityUNKNOWN—9%ileMicrosoft2026-06-09
CVE-2026-11040Chromium: CVE-2026-11040 Use after free in ANGLEUNKNOWN—13%ileMicrosoft2026-06-09
CVE-2026-11041Chromium: CVE-2026-11041 Insufficient validation of untrusted input in MediaUNKNOWN—14%ileMicrosoft2026-06-09
CVE-2026-11044Chromium: CVE-2026-11044 Integer overflow in ANGLEUNKNOWN—21%ileMicrosoft2026-06-09
CVE-2026-11046Chromium: CVE-2026-11046 Insufficient validation of untrusted input in MediaUNKNOWN—29%ileMicrosoft2026-06-09
CVE-2026-11047Chromium: CVE-2026-11047 Insufficient validation of untrusted input in BaseUNKNOWN—22%ileMicrosoft2026-06-09
CVE-2026-11048Chromium: CVE-2026-11048 Inappropriate implementation in ExtensionsUNKNOWN—6%ileMicrosoft2026-06-09
CVE-2026-11049Chromium: CVE-2026-11049 Use after free in Password ManagerUNKNOWN—20%ileMicrosoft2026-06-09
CVE-2026-11050Chromium: CVE-2026-11050 Use after free in V8UNKNOWN—20%ileMicrosoft2026-06-09
CVE-2026-11051Chromium: CVE-2026-11051 Out of bounds read in ANGLEUNKNOWN—14%ileMicrosoft2026-06-09
CVE-2026-11052Chromium: CVE-2026-11052 Type Confusion in GPUUNKNOWN—17%ileMicrosoft2026-06-09
CVE-2026-11053Chromium: CVE-2026-11053 VULNERABILITY in WebRTCUNKNOWN——Microsoft2026-06-09
CVE-2026-11055Chromium: CVE-2026-11055 Use after free in ANGLEUNKNOWN—20%ileMicrosoft2026-06-09
CVE-2026-11056Chromium: CVE-2026-11056 Insufficient validation of untrusted input in SiteIsolationUNKNOWN—14%ileMicrosoft2026-06-09
CVE-2026-11057Chromium: CVE-2026-11057 Uninitialized Use in SkiaUNKNOWN—16%ileMicrosoft2026-06-09
CVE-2026-11058Chromium: CVE-2026-11058 Integer overflow in CredentialProviderUNKNOWN—11%ileMicrosoft2026-06-09
CVE-2026-11059Chromium: CVE-2026-11059 Use after free in BlinkUNKNOWN—20%ileMicrosoft2026-06-09
CVE-2026-11060Chromium: CVE-2026-11060 Use after free in MediaUNKNOWN—20%ileMicrosoft2026-06-09
CVE-2026-11061Chromium: CVE-2026-11061 Out of bounds read in ANGLEUNKNOWN—17%ileMicrosoft2026-06-09
CVE-2026-11067Chromium: CVE-2026-11067 Uninitialized Use in DawnUNKNOWN—16%ileMicrosoft2026-06-09
CVE-2026-11069Chromium: CVE-2026-11069 Insufficient validation of untrusted input in CastUNKNOWN—11%ileMicrosoft2026-06-09
CVE-2026-11074Chromium: CVE-2026-11074 Use after free in WebRTCUNKNOWN—28%ileMicrosoft2026-06-09
CVE-2026-11075Chromium: CVE-2026-11075 Out of bounds read in V8UNKNOWN—14%ileMicrosoft2026-06-09
CVE-2026-11076Chromium: CVE-2026-11076 Type Confusion in CSSUNKNOWN—24%ileMicrosoft2026-06-09
CVE-2026-11078Chromium: CVE-2026-11078 Insufficient validation of untrusted input in FileSystemUNKNOWN—10%ileMicrosoft2026-06-09
CVE-2026-11079Chromium: CVE-2026-11079 Insufficient validation of untrusted input in CodecsUNKNOWN—12%ileMicrosoft2026-06-09
CVE-2026-11081Chromium: CVE-2026-11081 Policy bypass in CanvasUNKNOWN—6%ileMicrosoft2026-06-09
CVE-2026-11084Chromium: CVE-2026-11084 Inappropriate implementation in Password ManagerUNKNOWN—7%ileMicrosoft2026-06-09
CVE-2026-11086Chromium: CVE-2026-11086 Insufficient validation of untrusted input in DawnUNKNOWN—20%ileMicrosoft2026-06-09
CVE-2026-11087Chromium: CVE-2026-11087 Uninitialized Use in ANGLEUNKNOWN—16%ileMicrosoft2026-06-09
CVE-2026-11088Chromium: CVE-2026-11088 Integer overflow in ANGLEUNKNOWN—24%ileMicrosoft2026-06-09
CVE-2026-11089Chromium: CVE-2026-11089 Uninitialized Use in MediaUNKNOWN—16%ileMicrosoft2026-06-09
CVE-2026-11090Chromium: CVE-2026-11090 Uninitialized Use in ANGLEUNKNOWN—16%ileMicrosoft2026-06-09
CVE-2026-11093Chromium: CVE-2026-11093 Insufficient validation of untrusted input in PrintingUNKNOWN—14%ileMicrosoft2026-06-09
CVE-2026-11095Chromium: CVE-2026-11095 Insufficient validation of untrusted input in CodecsUNKNOWN—20%ileMicrosoft2026-06-09
CVE-2026-11096Chromium: CVE-2026-11096 Out of bounds read in WebRTCUNKNOWN—16%ileMicrosoft2026-06-09
CVE-2026-11098Chromium: CVE-2026-11098 Insufficient validation of untrusted input in GPUUNKNOWN—14%ileMicrosoft2026-06-09
CVE-2026-11099Chromium: CVE-2026-11099 Vulnerability in SkiaUNKNOWN——Microsoft2026-06-09
CVE-2026-11100Chromium: CVE-2026-11100 Use after free in File InputUNKNOWN—17%ileMicrosoft2026-06-09
CVE-2026-11101Chromium: CVE-2026-11101 Uninitialized Use in DawnUNKNOWN—16%ileMicrosoft2026-06-09
CVE-2026-11102Chromium: CVE-2026-11102 Inappropriate implementation in Isolated Web AppsUNKNOWN—31%ileMicrosoft2026-06-09
CVE-2026-11103Chromium: CVE-2026-11103 Inappropriate implementation in InstallerUNKNOWN—0%ileMicrosoft2026-06-09
CVE-2026-11105Chromium: CVE-2026-11105 Insufficient validation of untrusted input in WebUIUNKNOWN—16%ileMicrosoft2026-06-09
CVE-2026-11106Chromium: CVE-2026-11106 Inappropriate implementation in MediaUNKNOWN—8%ileMicrosoft2026-06-09
CVE-2026-11107Chromium: CVE-2026-11107 Inappropriate implementation in DownloadsUNKNOWN—14%ileMicrosoft2026-06-09
CVE-2026-11109Chromium: CVE-2026-11109 Uninitialized Use in ANGLEUNKNOWN—16%ileMicrosoft2026-06-09
CVE-2026-11111Chromium: CVE-2026-11111 Out of bounds read in ANGLEUNKNOWN—14%ileMicrosoft2026-06-09
CVE-2026-11113Chromium: CVE-2026-11113 Insufficient validation of untrusted input in ANGLEUNKNOWN—20%ileMicrosoft2026-06-09
CVE-2026-11114Chromium: CVE-2026-11114 Use after free in Device TrustUNKNOWN—14%ileMicrosoft2026-06-09
CVE-2026-11122Chromium: CVE-2026-11122 Inappropriate implementation in KeyboardUNKNOWN—6%ileMicrosoft2026-06-09
CVE-2026-11123Chromium: CVE-2026-11123 Uninitialized Use in ANGLEUNKNOWN—16%ileMicrosoft2026-06-09
CVE-2026-11125Chromium: CVE-2026-11125 Use after free in CompositingUNKNOWN—20%ileMicrosoft2026-06-09
CVE-2026-11126Chromium: CVE-2026-11126 Insufficient validation of untrusted input in DevToolsUNKNOWN—4%ileMicrosoft2026-06-09
CVE-2026-11128Chromium: CVE-2026-11128 Insufficient validation of untrusted input in Web ShareUNKNOWN—14%ileMicrosoft2026-06-09
CVE-2026-11129Chromium: CVE-2026-11129 Inappropriate implementation in ExtensionsUNKNOWN—7%ileMicrosoft2026-06-09
CVE-2026-11133Chromium: CVE-2026-11133 Insufficient policy enforcement in PaintUNKNOWN—10%ileMicrosoft2026-06-09
CVE-2026-11132Chromium: CVE-2026-11132 Policy bypass in PaintUNKNOWN—10%ileMicrosoft2026-06-09
CVE-2026-11130Chromium: CVE-2026-11130 Use after free in MediaUNKNOWN—20%ileMicrosoft2026-06-09
CVE-2026-11134Chromium: CVE-2026-11134 Insufficient data validation in MediaUNKNOWN—7%ileMicrosoft2026-06-09
CVE-2026-11135Chromium: CVE-2026-11135 Insufficient policy enforcement in AutofillUNKNOWN—10%ileMicrosoft2026-06-09
CVE-2026-11136Chromium: CVE-2026-11136 Use after free in CanvasUNKNOWN—20%ileMicrosoft2026-06-09
CVE-2026-11137Chromium: CVE-2026-11137 Uninitialized Use in ANGLEUNKNOWN—16%ileMicrosoft2026-06-09
CVE-2026-11140Chromium: CVE-2026-11140 Insufficient validation of untrusted input in ChromecastUNKNOWN—14%ileMicrosoft2026-06-09
CVE-2026-11139Chromium: CVE-2026-11139 Policy bypass in PaintUNKNOWN—7%ileMicrosoft2026-06-09
CVE-2026-11138Chromium: CVE-2026-11138 Uninitialized Use in ANGLEUNKNOWN—16%ileMicrosoft2026-06-09
CVE-2026-11146Chromium: CVE-2026-11146 Insufficient validation of untrusted input in ChromotingUNKNOWN—14%ileMicrosoft2026-06-09
CVE-2026-11147Chromium: CVE-2026-11147 Use after free in WebMLUNKNOWN—28%ileMicrosoft2026-06-09
CVE-2026-11141Chromium: CVE-2026-11141 Uninitialized Use in AudioUNKNOWN—16%ileMicrosoft2026-06-09
CVE-2026-11143Chromium: CVE-2026-11143 Heap buffer overflow in ExtensionsUNKNOWN—7%ileMicrosoft2026-06-09
CVE-2026-11144Chromium: CVE-2026-11144 Use after free in MediaUNKNOWN—18%ileMicrosoft2026-06-09
CVE-2026-11142Chromium: CVE-2026-11142 Policy bypass in PaintUNKNOWN—10%ileMicrosoft2026-06-09
CVE-2026-11149Chromium: CVE-2026-11149 Insufficient validation of untrusted input in ExtensionsUNKNOWN—13%ileMicrosoft2026-06-09
CVE-2026-11150Chromium: CVE-2026-11150 Inappropriate implementation in XMLUNKNOWN—6%ileMicrosoft2026-06-09
CVE-2026-11151Chromium: CVE-2026-11151 Insufficient validation of untrusted input in Password ManagerUNKNOWN—13%ileMicrosoft2026-06-09
CVE-2026-11153Chromium: CVE-2026-11153 Side-channel information leakage in FormsUNKNOWN—18%ileMicrosoft2026-06-09
CVE-2026-11152Chromium: CVE-2026-11152 Object lifecycle issue in DawnUNKNOWN—14%ileMicrosoft2026-06-09
CVE-2026-11154Chromium: CVE-2026-11154 Use after free in DawnUNKNOWN—11%ileMicrosoft2026-06-09
CVE-2026-11155Chromium: CVE-2026-11155 Insufficient policy enforcement in CSSUNKNOWN—5%ileMicrosoft2026-06-09
CVE-2026-11156Chromium: CVE-2026-11156 Inappropriate implementation in CSSUNKNOWN—5%ileMicrosoft2026-06-09
CVE-2026-11157Chromium: CVE-2026-11157 Script injection in AccessibilityUNKNOWN—2%ileMicrosoft2026-06-09
CVE-2026-11159Chromium: CVE-2026-11159 Uninitialized Use in SkiaUNKNOWN—10%ileMicrosoft2026-06-09
CVE-2026-11160Chromium: CVE-2026-11160 Out of bounds read in InputUNKNOWN—14%ileMicrosoft2026-06-09
CVE-2026-11158Chromium: CVE-2026-11158 Insufficient validation of untrusted input in DownloadsUNKNOWN—0%ileMicrosoft2026-06-09
CVE-2026-11161Chromium: CVE-2026-11161 Insufficient data validation in DataTransferUNKNOWN—5%ileMicrosoft2026-06-09
CVE-2026-11162Chromium: CVE-2026-11162 Insufficient policy enforcement in CSSUNKNOWN—8%ileMicrosoft2026-06-09
CVE-2026-11168Chromium: CVE-2026-11168 Insufficient policy enforcement in ExtensionsUNKNOWN—14%ileMicrosoft2026-06-09
CVE-2026-11169Chromium: CVE-2026-11169 Inappropriate implementation in XMLUNKNOWN—12%ileMicrosoft2026-06-09
CVE-2026-11164Chromium: CVE-2026-11164 Use after free in BlinkUNKNOWN—20%ileMicrosoft2026-06-09
CVE-2026-11166Chromium: CVE-2026-11166 Inappropriate implementation in SVGUNKNOWN—11%ileMicrosoft2026-06-09
CVE-2026-11170Chromium: CVE-2026-11170 Inappropriate implementation in ChromotingUNKNOWN—15%ileMicrosoft2026-06-09
CVE-2026-11171Chromium: CVE-2026-11171 Integer overflow in BlinkUNKNOWN—20%ileMicrosoft2026-06-09
CVE-2026-11174Chromium: CVE-2026-11174 Insufficient policy enforcement in Site IsolationUNKNOWN—11%ileMicrosoft2026-06-09
CVE-2026-11176Chromium: CVE-2026-11176 Inappropriate implementation in MediaUNKNOWN—7%ileMicrosoft2026-06-09
CVE-2026-11173Chromium: CVE-2026-11173 Out of bounds write in V8UNKNOWN—20%ileMicrosoft2026-06-09
CVE-2026-11177Chromium: CVE-2026-11177 Use after free in OmniboxUNKNOWN—14%ileMicrosoft2026-06-09
CVE-2026-11179Chromium: CVE-2026-11179 Inappropriate implementation in ORBUNKNOWN—14%ileMicrosoft2026-06-09
CVE-2026-11180Chromium: CVE-2026-11180 Policy bypass in SVGUNKNOWN—14%ileMicrosoft2026-06-09
CVE-2026-11182Chromium: CVE-2026-11182 Inappropriate implementation in SVGUNKNOWN—16%ileMicrosoft2026-06-09
CVE-2026-11184Chromium: CVE-2026-11184 Insufficient policy enforcement in ActorUNKNOWN—5%ileMicrosoft2026-06-09
CVE-2026-11181Chromium: CVE-2026-11181 Inappropriate implementation in Media SessionUNKNOWN—4%ileMicrosoft2026-06-09
CVE-2026-11185Chromium: CVE-2026-11185 Use after free in V8UNKNOWN—10%ileMicrosoft2026-06-09
CVE-2026-11186Chromium: CVE-2026-11186 Inappropriate implementation in CSSUNKNOWN—6%ileMicrosoft2026-06-09
CVE-2026-11187Chromium: CVE-2026-11187 Insufficient policy enforcement in GlicUNKNOWN—5%ileMicrosoft2026-06-09
CVE-2026-11192Chromium: CVE-2026-11192 Insufficient validation of untrusted input in Password ManagerUNKNOWN—7%ileMicrosoft2026-06-09
CVE-2026-11189Chromium: CVE-2026-11189 Insufficient validation of untrusted input in DevToolsUNKNOWN—7%ileMicrosoft2026-06-09
CVE-2026-11191Chromium: CVE-2026-11191 Out of bounds memory access in ANGLEUNKNOWN—19%ileMicrosoft2026-06-09
CVE-2026-11190Chromium: CVE-2026-11190 Insufficient policy enforcement in ExtensionsUNKNOWN—6%ileMicrosoft2026-06-09
CVE-2026-11193Chromium: CVE-2026-11193 Insufficient policy enforcement in Password ManagerUNKNOWN—12%ileMicrosoft2026-06-09
CVE-2026-11194Chromium: CVE-2026-11194 Inappropriate implementation in NetworkUNKNOWN—8%ileMicrosoft2026-06-09
CVE-2026-11196Chromium: CVE-2026-11196 Type Confusion in XMLUNKNOWN—14%ileMicrosoft2026-06-09
CVE-2026-11195Chromium: CVE-2026-11195 Inappropriate implementation in MHTMLUNKNOWN—9%ileMicrosoft2026-06-09
CVE-2026-11197Chromium: CVE-2026-11197 Insufficient policy enforcement in WorkersUNKNOWN—10%ileMicrosoft2026-06-09
CVE-2026-11198Chromium: CVE-2026-11198 Insufficient validation of untrusted input in CodecsUNKNOWN—12%ileMicrosoft2026-06-09
CVE-2026-11199Chromium: CVE-2026-11199 Insufficient validation of untrusted input in WebRTCUNKNOWN—9%ileMicrosoft2026-06-09
CVE-2026-11201Chromium: CVE-2026-11201 Use after free in ServiceWorkerUNKNOWN—11%ileMicrosoft2026-06-09
CVE-2026-11203Chromium: CVE-2026-11203 Policy bypass in GPUUNKNOWN—14%ileMicrosoft2026-06-09
CVE-2026-11200Chromium: CVE-2026-11200 Inappropriate implementation in WebRTCUNKNOWN—7%ileMicrosoft2026-06-09
CVE-2026-11207Chromium: CVE-2026-11207 Insufficient validation of untrusted input in AutofillUNKNOWN—12%ileMicrosoft2026-06-09
CVE-2026-11206Chromium: CVE-2026-11206 Policy bypass in ServiceWorkerUNKNOWN—14%ileMicrosoft2026-06-09
CVE-2026-11208Chromium: CVE-2026-11208 Use after free in CodecsUNKNOWN—14%ileMicrosoft2026-06-09
CVE-2026-11209Chromium: CVE-2026-11209 Insufficient policy enforcement in PasswordsUNKNOWN—14%ileMicrosoft2026-06-09
CVE-2026-11210Chromium: CVE-2026-11210 Insufficient policy enforcement in Safe BrowsingUNKNOWN—8%ileMicrosoft2026-06-09
CVE-2026-11211Chromium: CVE-2026-11211 Integer overflow in V8UNKNOWN—20%ileMicrosoft2026-06-09
CVE-2026-11212Chromium: CVE-2026-11212 Insufficient policy enforcement in DevToolsUNKNOWN—4%ileMicrosoft2026-06-09
CVE-2026-11213Chromium: CVE-2026-11213 Insufficient validation of untrusted input in Reading ModeUNKNOWN—9%ileMicrosoft2026-06-09
CVE-2026-11216Chromium: CVE-2026-11216 Incorrect security UI in File InputUNKNOWN—5%ileMicrosoft2026-06-09
CVE-2026-11217Chromium: CVE-2026-11217 Insufficient policy enforcement in Fenced FramesUNKNOWN—5%ileMicrosoft2026-06-09
CVE-2026-11218Chromium: CVE-2026-11218 Inappropriate implementation in PlatformIntegrationUNKNOWN—10%ileMicrosoft2026-06-09
CVE-2026-11219Chromium: CVE-2026-11219 Insufficient data validation in NavigationUNKNOWN—5%ileMicrosoft2026-06-09
CVE-2026-11221Chromium: CVE-2026-11221 Insufficient validation of untrusted input in PointerLockUNKNOWN—5%ileMicrosoft2026-06-09
CVE-2026-11220Chromium: CVE-2026-11220 Insufficient validation of untrusted input in NavigationUNKNOWN—7%ileMicrosoft2026-06-09
CVE-2026-11222Chromium: CVE-2026-11222 Incorrect security UI in Tab StripUNKNOWN—7%ileMicrosoft2026-06-09
CVE-2026-11223Chromium: CVE-2026-11223 Insufficient validation of untrusted input in NetworkUNKNOWN—7%ileMicrosoft2026-06-09
CVE-2026-11224Chromium: CVE-2026-11224 Use after free in ChromotingUNKNOWN—16%ileMicrosoft2026-06-09
CVE-2026-11229Chromium: CVE-2026-11229 Insufficient policy enforcement in EnterpriseUNKNOWN—1%ileMicrosoft2026-06-09
CVE-2026-11230Chromium: CVE-2026-11230 Use after free in ExtensionsUNKNOWN—16%ileMicrosoft2026-06-09
CVE-2026-11231Chromium: CVE-2026-11231 Inappropriate implementation in Safe BrowsingUNKNOWN—12%ileMicrosoft2026-06-09
CVE-2026-11225Chromium: CVE-2026-11225 Incorrect security UI in WebUIUNKNOWN—5%ileMicrosoft2026-06-09
CVE-2026-11228Chromium: CVE-2026-11228 Incorrect security UI in File InputUNKNOWN—5%ileMicrosoft2026-06-09
CVE-2026-11227Chromium: CVE-2026-11227 Incorrect security UI in Tab Hover CardsUNKNOWN—5%ileMicrosoft2026-06-09
CVE-2026-11232Chromium: CVE-2026-11232 Inappropriate implementation in TabGroupsUNKNOWN—4%ileMicrosoft2026-06-09
CVE-2026-11233Chromium: CVE-2026-11233 Insufficient validation of untrusted input in FoldableAPIsUNKNOWN—7%ileMicrosoft2026-06-09
CVE-2026-11234Chromium: CVE-2026-11234 Insufficient policy enforcement in FoldableAPIsUNKNOWN—8%ileMicrosoft2026-06-09
CVE-2026-11238Chromium: CVE-2026-11238 Inappropriate implementation in DevToolsUNKNOWN—7%ileMicrosoft2026-06-09
CVE-2026-11235Chromium: CVE-2026-11235 Insufficient validation of untrusted input in CompositingUNKNOWN—16%ileMicrosoft2026-06-09
CVE-2026-11237Chromium: CVE-2026-11237 Insufficient validation of untrusted input in MediaUNKNOWN—9%ileMicrosoft2026-06-09
CVE-2026-11236Chromium: CVE-2026-11236 Insufficient policy enforcement in Web BluetoothUNKNOWN—8%ileMicrosoft2026-06-09
CVE-2026-11239Chromium: CVE-2026-11239 Insufficient validation of untrusted input in ExtensionsUNKNOWN—13%ileMicrosoft2026-06-09
CVE-2026-11240Chromium: CVE-2026-11240 Insufficient validation of untrusted input in LoaderUNKNOWN—8%ileMicrosoft2026-06-09
CVE-2026-11244Chromium: CVE-2026-11244 Insufficient validation of untrusted input in WebAuthenticationUNKNOWN—11%ileMicrosoft2026-06-09
CVE-2026-11242Chromium: CVE-2026-11242 Insufficient validation of untrusted input in PluginsUNKNOWN—18%ileMicrosoft2026-06-09
CVE-2026-11243Chromium: CVE-2026-11243 Incorrect security UI in DownloadsUNKNOWN—4%ileMicrosoft2026-06-09
CVE-2026-11241Chromium: CVE-2026-11241 Insufficient validation of untrusted input in CastUNKNOWN—2%ileMicrosoft2026-06-09
CVE-2026-11245Chromium: CVE-2026-11245 Inappropriate implementation in PaymentsUNKNOWN—7%ileMicrosoft2026-06-09
CVE-2026-11249Chromium: CVE-2026-11249 Use after free in NetworkUNKNOWN—8%ileMicrosoft2026-06-09
CVE-2026-11251Chromium: CVE-2026-11251 Insufficient validation of untrusted input in Password ManagerUNKNOWN—8%ileMicrosoft2026-06-09
CVE-2026-11250Chromium: CVE-2026-11250 Inappropriate implementation in DevToolsUNKNOWN—15%ileMicrosoft2026-06-09
CVE-2026-11248Chromium: CVE-2026-11248 Policy bypass in Google LensUNKNOWN—15%ileMicrosoft2026-06-09
CVE-2026-11252Chromium: CVE-2026-11252 Policy bypass in Content SettingsUNKNOWN—7%ileMicrosoft2026-06-09
CVE-2026-11246Chromium: CVE-2026-11246 Insufficient validation of untrusted input in IndexedDBUNKNOWN—10%ileMicrosoft2026-06-09
CVE-2026-11253Chromium: CVE-2026-11253 Race in PermissionsUNKNOWN—5%ileMicrosoft2026-06-09
CVE-2026-11254Chromium: CVE-2026-11254 Inappropriate implementation in PermissionsUNKNOWN—7%ileMicrosoft2026-06-09
CVE-2026-11255Chromium: CVE-2026-11255 Insufficient validation of untrusted input in Storage Access APIUNKNOWN—18%ileMicrosoft2026-06-09
CVE-2026-11257Chromium: CVE-2026-11257 Inappropriate implementation in BrowserUNKNOWN—9%ileMicrosoft2026-06-09
CVE-2026-11256Chromium: CVE-2026-11256 Out of bounds read in GPUUNKNOWN—12%ileMicrosoft2026-06-09
CVE-2026-11258Chromium: CVE-2026-11258 Inappropriate implementation in File System AccessUNKNOWN—10%ileMicrosoft2026-06-09
CVE-2026-11259Chromium: CVE-2026-11259 Insufficient validation of untrusted input in CastUNKNOWN—8%ileMicrosoft2026-06-09
CVE-2026-11260Chromium: CVE-2026-11260 Policy bypass in PermissionsUNKNOWN—8%ileMicrosoft2026-06-09
CVE-2026-11261Chromium: CVE-2026-11261 Insufficient validation of untrusted input in PDFUNKNOWN—7%ileMicrosoft2026-06-09
CVE-2026-11262Chromium: CVE-2026-11262 Use after free in TabStripUNKNOWN—20%ileMicrosoft2026-06-09
CVE-2026-11265Chromium: CVE-2026-11265 Insufficient data validation in AutofillUNKNOWN—10%ileMicrosoft2026-06-09
CVE-2026-11264Chromium: CVE-2026-11264 Policy bypass in Content Security PolicyUNKNOWN—8%ileMicrosoft2026-06-09
CVE-2026-11266Chromium: CVE-2026-11266 Policy bypass in SafeBrowsingUNKNOWN—6%ileMicrosoft2026-06-09
CVE-2026-11267Chromium: CVE-2026-11267 Insufficient policy enforcement in ExtensionsUNKNOWN—4%ileMicrosoft2026-06-09
CVE-2026-11268Chromium: CVE-2026-11268 Uninitialized Use in ANGLEUNKNOWN—16%ileMicrosoft2026-06-09
CVE-2026-11269Chromium: CVE-2026-11269 Inappropriate implementation in ExtensionsUNKNOWN—1%ileMicrosoft2026-06-09
CVE-2026-11271Chromium: CVE-2026-11271 Incorrect security UI in PasswordsUNKNOWN—14%ileMicrosoft2026-06-09
CVE-2026-11273Chromium: CVE-2026-11273 Insufficient validation of untrusted input in OmniboxUNKNOWN—6%ileMicrosoft2026-06-09
CVE-2026-11012Chromium: CVE-2026-11012 Use after free in SerialUNKNOWN—21%ileMicrosoft2026-06-09
CVE-2026-11029Chromium: CVE-2026-11029 Insufficient validation of untrusted input in Drag and DropUNKNOWN—14%ileMicrosoft2026-06-09
CVE-2026-11045Chromium: CVE-2026-11045 Insufficient validation of untrusted input in GPUUNKNOWN—21%ileMicrosoft2026-06-09
CVE-2026-11065Chromium: CVE-2026-11065 Use after free in ANGLEUNKNOWN—25%ileMicrosoft2026-06-09
CVE-2026-11072Chromium: CVE-2026-11072 Use after free in WebViewUNKNOWN—1%ileMicrosoft2026-06-09
CVE-2026-11080Chromium: CVE-2026-11080 Use after free in WebViewUNKNOWN—14%ileMicrosoft2026-06-09
CVE-2026-11082Chromium: CVE-2026-11082 Use after free in GPUUNKNOWN—14%ileMicrosoft2026-06-09
CVE-2026-11108Chromium: CVE-2026-11108 Inappropriate implementation in NFCUNKNOWN—13%ileMicrosoft2026-06-09
CVE-2026-11119Chromium: CVE-2026-11119 Insufficient validation of untrusted input in GPUUNKNOWN—14%ileMicrosoft2026-06-09
CVE-2026-11131Chromium: CVE-2026-11131 Use after free in AutofillUNKNOWN—14%ileMicrosoft2026-06-09
CVE-2026-11145Chromium: CVE-2026-11145 Race in GeolocationUNKNOWN—6%ileMicrosoft2026-06-09
CVE-2026-11148Chromium: CVE-2026-11148 Inappropriate implementation in PaymentsUNKNOWN—4%ileMicrosoft2026-06-09
CVE-2026-11175Chromium: CVE-2026-11175 Incorrect security UI in MessagesUNKNOWN—14%ileMicrosoft2026-06-09
CVE-2026-11188Chromium: CVE-2026-11188 Use after free in USBUNKNOWN—14%ileMicrosoft2026-06-09
CVE-2026-11226Chromium: CVE-2026-11226 Insufficient policy enforcement in PreviewTabUNKNOWN—5%ileMicrosoft2026-06-09
CVE-2026-11263Chromium: CVE-2026-11263 Insufficient policy enforcement in WebAuthenticationUNKNOWN—17%ileMicrosoft2026-06-09
CVE-2026-11287Chromium: CVE-2026-11287 Insufficient validation of untrusted input in NavigationUNKNOWN—14%ileMicrosoft2026-06-09
CVE-2026-11295Chromium: CVE-2026-11295 Inappropriate implementation in WebViewUNKNOWN—11%ileMicrosoft2026-06-09
CVE-2026-12019Chromium: CVE-2026-12019 Out of bounds write  CodecsUNKNOWN—17%ileMicrosoft2026-06-09
CVE-2026-12016Chromium: CVE-2026-12016 Insufficient validation of untrusted input  DevToolsUNKNOWN—14%ileMicrosoft2026-06-09
CVE-2026-12015Chromium: CVE-2026-12015 Use after free  AutofillUNKNOWN—14%ileMicrosoft2026-06-09
CVE-2026-11628Chromium: CVE-2026-11628 Use after free in OzoneUNKNOWN—8%ileMicrosoft2026-06-09
CVE-2026-11629Chromium: CVE-2026-11629 Use after free in OzoneUNKNOWN—19%ileMicrosoft2026-06-09
CVE-2026-11631Chromium: CVE-2026-11631 Use after free in AuraUNKNOWN—13%ileMicrosoft2026-06-09
CVE-2026-11630Chromium: CVE-2026-11630 Use after free in File InputUNKNOWN—17%ileMicrosoft2026-06-09
CVE-2026-11632Chromium: CVE-2026-11632 Use after free in TabStripUNKNOWN—18%ileMicrosoft2026-06-09
CVE-2026-11633Chromium: CVE-2026-11633 Use after free in BluetoothUNKNOWN—14%ileMicrosoft2026-06-09
CVE-2026-11634Chromium: CVE-2026-11634 Use after free in GamepadUNKNOWN—17%ileMicrosoft2026-06-09
CVE-2026-11635Chromium: CVE-2026-11635 Use after free in BluetoothUNKNOWN—13%ileMicrosoft2026-06-09
CVE-2026-11639Chromium: CVE-2026-11639 Use after free in CompositingUNKNOWN—20%ileMicrosoft2026-06-09
CVE-2026-11637Chromium: CVE-2026-11637 Use after free in ViewsUNKNOWN—18%ileMicrosoft2026-06-09
CVE-2026-11636Chromium: CVE-2026-11636 Use after free in AutofillUNKNOWN—13%ileMicrosoft2026-06-09
CVE-2026-11638Chromium: CVE-2026-11638 Use after free in PrintingUNKNOWN—17%ileMicrosoft2026-06-09
CVE-2026-11641Chromium: CVE-2026-11641 Use after free in BluetoothUNKNOWN—20%ileMicrosoft2026-06-09
CVE-2026-11640Chromium: CVE-2026-11640 Integer overflow in libyuvUNKNOWN—14%ileMicrosoft2026-06-09
CVE-2026-11642Chromium: CVE-2026-11642 Use after free in Web AppsUNKNOWN—14%ileMicrosoft2026-06-09
CVE-2026-11645Chromium: CVE-2026-11645 Out of bounds memory access in V8UNKNOWN—81%ileMicrosoft2026-06-09
CVE-2026-11643Chromium: CVE-2026-11643 Use after free in ProxyUNKNOWN—19%ileMicrosoft2026-06-09
CVE-2026-11644Chromium: CVE-2026-11644 Use after free in ViewsUNKNOWN—10%ileMicrosoft2026-06-09
CVE-2026-11646Chromium: CVE-2026-11646 Use after free in ViewTransitionsUNKNOWN—18%ileMicrosoft2026-06-09
CVE-2026-11658Chromium: CVE-2026-11657 Use after free in PaymentsUNKNOWN—13%ileMicrosoft2026-06-09
CVE-2026-11659Chromium: CVE-2026-11658 Insufficient validation of untrusted input in ExtensionsUNKNOWN—17%ileMicrosoft2026-06-09
CVE-2026-11661Chromium: CVE-2026-11660 Insufficient validation of untrusted input in New Tab PageUNKNOWN—15%ileMicrosoft2026-06-09
CVE-2026-11662Chromium: CVE-2026-11661 Use after free in ViewsUNKNOWN—29%ileMicrosoft2026-06-09
CVE-2026-11660Chromium: CVE-2026-11659 Insufficient validation of untrusted input in UIUNKNOWN—17%ileMicrosoft2026-06-09
CVE-2026-11664Chromium: CVE-2026-11663 Use after free in SkiaUNKNOWN—17%ileMicrosoft2026-06-09
CVE-2026-11663Chromium: CVE-2026-11662 Type Confusion in BindingsUNKNOWN—13%ileMicrosoft2026-06-09
CVE-2026-11665Chromium: CVE-2026-11664 Use after free in PaymentsUNKNOWN—12%ileMicrosoft2026-06-09
CVE-2026-11666Chromium: CVE-2026-11665 Out of bounds read in DawnUNKNOWN—12%ileMicrosoft2026-06-09
CVE-2026-11667Chromium: CVE-2026-11666 Insufficient validation of untrusted input in InputUNKNOWN—12%ileMicrosoft2026-06-09
CVE-2026-11669Chromium: CVE-2026-11668 Uninitialized Use in CodecsUNKNOWN—12%ileMicrosoft2026-06-09
CVE-2026-11670Chromium: CVE-2026-11669 Integer overflow in MediaUNKNOWN—13%ileMicrosoft2026-06-09
CVE-2026-11668Chromium: CVE-2026-11667 Out of bounds read in WebRTCUNKNOWN—9%ileMicrosoft2026-06-09
CVE-2026-11671Chromium: CVE-2026-11670 Use after free in PDFUNKNOWN—16%ileMicrosoft2026-06-09
CVE-2026-11672Chromium: CVE-2026-11671 Use after free in NavigationUNKNOWN—15%ileMicrosoft2026-06-09
CVE-2026-11673Chromium: CVE-2026-11672 Out of bounds write in GPUUNKNOWN—16%ileMicrosoft2026-06-09
CVE-2026-11674Chromium: CVE-2026-11673 Use after free in InterestGroupsUNKNOWN—16%ileMicrosoft2026-06-09
CVE-2026-11676Chromium: CVE-2026-11675 Insufficient validation of untrusted input in SkiaUNKNOWN—14%ileMicrosoft2026-06-09
CVE-2026-11675Chromium: CVE-2026-11674 Use after free in Guest ViewUNKNOWN—10%ileMicrosoft2026-06-09
CVE-2026-11677Chromium: CVE-2026-11676 Insufficient validation of untrusted input in DawnUNKNOWN—4%ileMicrosoft2026-06-09
CVE-2026-11678Chromium: CVE-2026-11677 Race in NetworkUNKNOWN—8%ileMicrosoft2026-06-09
CVE-2026-11679Chromium: CVE-2026-11678 Integer overflow in libyuvUNKNOWN—8%ileMicrosoft2026-06-09
CVE-2026-11680Chromium: CVE-2026-11679 Use after free in CodecsUNKNOWN—16%ileMicrosoft2026-06-09
CVE-2026-11682Chromium: CVE-2026-11681 Use after free in OzoneUNKNOWN—9%ileMicrosoft2026-06-09
CVE-2026-11683Chromium: CVE-2026-11682 Insufficient validation of untrusted input in ViewsUNKNOWN—23%ileMicrosoft2026-06-09
CVE-2026-11681Chromium: CVE-2026-11680 Use after free in MediaUNKNOWN—10%ileMicrosoft2026-06-09
CVE-2026-11684Chromium: CVE-2026-11683 Use after free in WebCodecsUNKNOWN—7%ileMicrosoft2026-06-09
CVE-2026-11685Chromium: CVE-2026-11684 Insufficient policy enforcement in NetworkUNKNOWN—7%ileMicrosoft2026-06-09
CVE-2026-11688Chromium: CVE-2026-11687 Use after free in DawnUNKNOWN—17%ileMicrosoft2026-06-09
CVE-2026-11687Chromium: CVE-2026-11686 Insufficient validation of untrusted input in DawnUNKNOWN—10%ileMicrosoft2026-06-09
CVE-2026-11689Chromium: CVE-2026-11688 Object lifecycle issue in SVGUNKNOWN—12%ileMicrosoft2026-06-09
CVE-2026-11686Chromium: CVE-2026-11685 Insufficient data validation in MediaCaptureUNKNOWN—7%ileMicrosoft2026-06-09
CVE-2026-11690Chromium: CVE-2026-11689 Insufficient validation of untrusted input in PasswordsUNKNOWN—12%ileMicrosoft2026-06-09
CVE-2026-11691Chromium: CVE-2026-11690 Out of bounds read and write in MediaUNKNOWN—7%ileMicrosoft2026-06-09
CVE-2026-11692Chromium: CVE-2026-11691 Insufficient validation of untrusted input in New Tab PageUNKNOWN—8%ileMicrosoft2026-06-09
CVE-2026-11693Chromium: CVE-2026-11692 Use after free in Read AnythingUNKNOWN—8%ileMicrosoft2026-06-09
CVE-2026-11694Chromium: CVE-2026-11693 Inappropriate implementation in PluginsUNKNOWN—12%ileMicrosoft2026-06-09
CVE-2026-11695Chromium: CVE-2026-11694 Use after free in ServiceWorkerUNKNOWN—7%ileMicrosoft2026-06-09
CVE-2026-11696Chromium: CVE-2026-11695 Inappropriate implementation in PasswordsUNKNOWN—9%ileMicrosoft2026-06-09
CVE-2026-11697Chromium: CVE-2026-11696 Uninitialized Use in VideoUNKNOWN—10%ileMicrosoft2026-06-09
CVE-2026-11698Chromium: CVE-2026-11697 Insufficient validation of untrusted input in UIUNKNOWN—10%ileMicrosoft2026-06-09
CVE-2026-11699Chromium: CVE-2026-11698 Use after free in BluetoothUNKNOWN—10%ileMicrosoft2026-06-09
CVE-2026-11700Chromium: CVE-2026-11699 Use after free in BluetoothUNKNOWN—8%ileMicrosoft2026-06-09
CVE-2026-11701Chromium: CVE-2026-11700 Use after free in TracingUNKNOWN—8%ileMicrosoft2026-06-09
CVE-2026-13027Chromium: CVE-2026-13027 Use after free in FileSystemUNKNOWN—10%ileMicrosoft2026-06-09
CVE-2026-13026Chromium: CVE-2026-13026 Use after free in Digital CredentialsUNKNOWN—10%ileMicrosoft2026-06-09
CVE-2026-13025Chromium: CVE-2026-13025 Insufficient validation of untrusted input in DevToolsUNKNOWN—8%ileMicrosoft2026-06-09
CVE-2026-13024Chromium: CVE-2026-13024 Insufficient validation of untrusted input in NavigationUNKNOWN—4%ileMicrosoft2026-06-09
CVE-2026-13023Chromium: CVE-2026-13023 Uninitialized Use in GPUUNKNOWN—8%ileMicrosoft2026-06-09
CVE-2026-13022Chromium: CVE-2026-13022 Inappropriate implementation in AutofillUNKNOWN—4%ileMicrosoft2026-06-09
CVE-2026-13021Chromium: CVE-2026-13021 Inappropriate implementation in DeviceBoundSessionCredentialsUNKNOWN—4%ileMicrosoft2026-06-09
CVE-2026-10882Chromium: CVE-2026-10882 Use after free in NetworkUNKNOWN—38%ileMicrosoft2026-06-09
CVE-2026-10886Chromium: CVE-2026-10886 Use after free in FileSystemUNKNOWN—27%ileMicrosoft2026-06-09
CVE-2026-10891Chromium: CVE-2026-10891 Use after free in GFXUNKNOWN—25%ileMicrosoft2026-06-09
CVE-2026-10893Chromium: CVE-2026-10893 Use after free in ChromotingUNKNOWN—29%ileMicrosoft2026-06-09
CVE-2026-10894Chromium: CVE-2026-10894 Use after free in PrintingUNKNOWN—21%ileMicrosoft2026-06-09
CVE-2026-10901Chromium: CVE-2026-10901 Use after free in PasswordsUNKNOWN—27%ileMicrosoft2026-06-09
CVE-2026-10902Chromium: CVE-2026-10902 Use after free in OzoneUNKNOWN—32%ileMicrosoft2026-06-09
CVE-2026-10904Chromium: CVE-2026-10904 Inappropriate implementation in V8UNKNOWN—34%ileMicrosoft2026-06-09
CVE-2026-10905Chromium: CVE-2026-10905 Use after free in NetworkUNKNOWN—21%ileMicrosoft2026-06-09
CVE-2026-10906Chromium: CVE-2026-10906 Use after free in WebAuthenticationUNKNOWN—25%ileMicrosoft2026-06-09
CVE-2026-10907Chromium: CVE-2026-10907 Out of bounds write in ANGLEUNKNOWN—25%ileMicrosoft2026-06-09
CVE-2026-10913Chromium: CVE-2026-10913 Use after free in ANGLEUNKNOWN—32%ileMicrosoft2026-06-09
CVE-2026-10917Chromium: CVE-2026-10917 Insufficient validation of untrusted input in MediaUNKNOWN—23%ileMicrosoft2026-06-09
CVE-2026-10920Chromium: CVE-2026-10920 Insufficient validation of untrusted input in WebShareUNKNOWN—23%ileMicrosoft2026-06-09
CVE-2026-10926Chromium: CVE-2026-10926 Use after free in CastUNKNOWN—9%ileMicrosoft2026-06-09
CVE-2026-10930Chromium: CVE-2026-10930 Out of bounds read in ANGLEUNKNOWN—24%ileMicrosoft2026-06-09
CVE-2026-10937Chromium: CVE-2026-10937 Inappropriate implementation in PasswordsUNKNOWN—19%ileMicrosoft2026-06-09
CVE-2026-10938Chromium: CVE-2026-10938 Insufficient validation of untrusted input in InputUNKNOWN—28%ileMicrosoft2026-06-09
CVE-2026-10945Chromium: CVE-2026-10945 Use after free in PDFUNKNOWN—29%ileMicrosoft2026-06-09
CVE-2026-10948Chromium: CVE-2026-10948 Use after free in WebRTCUNKNOWN—40%ileMicrosoft2026-06-09
CVE-2026-10955Chromium: CVE-2026-10955 Type Confusion in ANGLEUNKNOWN—31%ileMicrosoft2026-06-09
CVE-2026-10963Chromium: CVE-2026-10963 Integer overflow in V8UNKNOWN—29%ileMicrosoft2026-06-09
CVE-2026-10968Chromium: CVE-2026-10968 Insufficient validation of untrusted input in DawnUNKNOWN—23%ileMicrosoft2026-06-09
CVE-2026-10979Chromium: CVE-2026-10979 Out of bounds read in ANGLEUNKNOWN—23%ileMicrosoft2026-06-09
CVE-2026-10980Chromium: CVE-2026-10980 Insufficient validation of untrusted input in DevToolsUNKNOWN—25%ileMicrosoft2026-06-09
CVE-2026-10985Chromium: CVE-2026-10985 Out of bounds read in SkiaUNKNOWN—23%ileMicrosoft2026-06-09
CVE-2026-10986Chromium: CVE-2026-10986 Integer overflow in MediaUNKNOWN—26%ileMicrosoft2026-06-09
CVE-2026-10987Chromium: CVE-2026-10987 Integer overflow in V8UNKNOWN—29%ileMicrosoft2026-06-09
CVE-2026-10988Chromium: CVE-2026-10988 Use after free in ViewsUNKNOWN—25%ileMicrosoft2026-06-09
CVE-2026-10999Chromium: CVE-2026-10999 Out of bounds memory access in ANGLEUNKNOWN—21%ileMicrosoft2026-06-09
CVE-2026-11001Chromium: CVE-2026-11001 Incorrect security UI in PaymentsUNKNOWN—12%ileMicrosoft2026-06-09
CVE-2026-11002Chromium: CVE-2026-11002 Use after free in AutofillUNKNOWN—23%ileMicrosoft2026-06-09
CVE-2026-11003Chromium: CVE-2026-11003 Use after free in WebRTCUNKNOWN—37%ileMicrosoft2026-06-09
CVE-2026-11004Chromium: CVE-2026-11004 Out of bounds read in ANGLEUNKNOWN—20%ileMicrosoft2026-06-09
CVE-2026-11005Chromium: CVE-2026-11005 Out of bounds read in ANGLEUNKNOWN—20%ileMicrosoft2026-06-09
CVE-2026-11011Chromium: CVE-2026-11011 Insufficient policy enforcement in Password ManagerUNKNOWN—23%ileMicrosoft2026-06-09
CVE-2026-11014Chromium: CVE-2026-11014 Insufficient policy enforcement in ExtensionsUNKNOWN—12%ileMicrosoft2026-06-09
CVE-2026-11017Chromium: CVE-2026-11017 Inappropriate implementation in Link PreviewUNKNOWN—19%ileMicrosoft2026-06-09
CVE-2026-11018Chromium: CVE-2026-11018 Insufficient policy enforcement in ActorUNKNOWN—20%ileMicrosoft2026-06-09
CVE-2026-11023Chromium: CVE-2026-11023 Insufficient validation of untrusted input in WebAppInstallsUNKNOWN—13%ileMicrosoft2026-06-09
CVE-2026-11025Chromium: CVE-2026-11025 Insufficient policy enforcement in NavigationUNKNOWN—20%ileMicrosoft2026-06-09
CVE-2026-11026Chromium: CVE-2026-11026 Insufficient policy enforcement in ExtensionsUNKNOWN—6%ileMicrosoft2026-06-09
CVE-2026-11027Chromium: CVE-2026-11027 Insufficient validation of untrusted input in GlicUNKNOWN—21%ileMicrosoft2026-06-09
CVE-2026-11030Chromium: CVE-2026-11030 Use after free in NetworkUNKNOWN—20%ileMicrosoft2026-06-09
CVE-2026-11031Chromium: CVE-2026-11031 Insufficient validation of untrusted input in Password ManagerUNKNOWN—10%ileMicrosoft2026-06-09
CVE-2026-11032Chromium: CVE-2026-11032 Insufficient data validation in Password ManagerUNKNOWN—7%ileMicrosoft2026-06-09
CVE-2026-11039Chromium: CVE-2026-11039 Uninitialized Use in SkiaUNKNOWN—16%ileMicrosoft2026-06-09
CVE-2026-11042Chromium: CVE-2026-11042 Use after free in ViewsUNKNOWN—22%ileMicrosoft2026-06-09
CVE-2026-11043Chromium: CVE-2026-11043 Out of bounds write in ANGLEUNKNOWN—22%ileMicrosoft2026-06-09
CVE-2026-11054Chromium: CVE-2026-11054 Use after free in WebRTCUNKNOWN—28%ileMicrosoft2026-06-09
CVE-2026-11062Chromium: CVE-2026-11062 Insufficient policy enforcement in ExtensionsUNKNOWN—3%ileMicrosoft2026-06-09
CVE-2026-11063Chromium: CVE-2026-11063 Insufficient validation of untrusted input in WebNNUNKNOWN—14%ileMicrosoft2026-06-09
CVE-2026-11066Chromium: CVE-2026-11066 Insufficient validation of untrusted input in ANGLEUNKNOWN—17%ileMicrosoft2026-06-09
CVE-2026-11068Chromium: CVE-2026-11068 Use after free in WebSocketsUNKNOWN—28%ileMicrosoft2026-06-09
CVE-2026-11070Chromium: CVE-2026-11070 Insufficient validation of untrusted input in ChromotingUNKNOWN—12%ileMicrosoft2026-06-09
CVE-2026-11071Chromium: CVE-2026-11071 Use after free in BaseUNKNOWN—14%ileMicrosoft2026-06-09
CVE-2026-11073Chromium: CVE-2026-11073 Use after free in WebGLUNKNOWN—14%ileMicrosoft2026-06-09
CVE-2026-11083Chromium: CVE-2026-11083 Inappropriate implementation in Password ManagerUNKNOWN—7%ileMicrosoft2026-06-09
CVE-2026-11085Chromium: CVE-2026-11085 Integer overflow in GPUUNKNOWN—16%ileMicrosoft2026-06-09
CVE-2026-11091Chromium: CVE-2026-11091 Inappropriate implementation in DawnUNKNOWN—16%ileMicrosoft2026-06-09
CVE-2026-11092Chromium: CVE-2026-11092 Insufficient policy enforcement in DevToolsUNKNOWN—8%ileMicrosoft2026-06-09
CVE-2026-11094Chromium: CVE-2026-11094 Use after free in CodecsUNKNOWN—14%ileMicrosoft2026-06-09
CVE-2026-11104Chromium: CVE-2026-11104 Uninitialized Use in ANGLEUNKNOWN—16%ileMicrosoft2026-06-09
CVE-2026-11110Chromium: CVE-2026-11110 Uninitialized Use in ANGLEUNKNOWN—16%ileMicrosoft2026-06-09
CVE-2026-11112Chromium: CVE-2026-11112 Insufficient validation of untrusted input in ChromotingUNKNOWN—12%ileMicrosoft2026-06-09
CVE-2026-11115Chromium: CVE-2026-11115 Use after free in UpdaterUNKNOWN—0%ileMicrosoft2026-06-09
CVE-2026-11116Chromium: CVE-2026-11116 Use after free in ChromotingUNKNOWN—20%ileMicrosoft2026-06-09
CVE-2026-11117Chromium: CVE-2026-11117 Use after free in ViewsUNKNOWN—23%ileMicrosoft2026-06-09
CVE-2026-11118Chromium: CVE-2026-11118 Use after free in WebRTCUNKNOWN—31%ileMicrosoft2026-06-09
CVE-2026-11120Chromium: CVE-2026-11120 Insufficient validation of untrusted input in Enterprise ReportingUNKNOWN—20%ileMicrosoft2026-06-09
CVE-2026-11121Chromium: CVE-2026-11121 Insufficient validation of untrusted input in SkiaUNKNOWN—14%ileMicrosoft2026-06-09
CVE-2026-11124Chromium: CVE-2026-11124 Heap buffer overflow in SkiaUNKNOWN—14%ileMicrosoft2026-06-09
CVE-2026-11275Chromium: CVE-2026-11275 Insufficient policy enforcement in Page InfoUNKNOWN—10%ileMicrosoft2026-06-09
CVE-2026-11276Chromium: CVE-2026-11276 Inappropriate implementation in CastUNKNOWN—0%ileMicrosoft2026-06-09
CVE-2026-11283Chromium: CVE-2026-11283 Policy bypass in ShortcutsUNKNOWN—10%ileMicrosoft2026-06-09
CVE-2026-11284Chromium: CVE-2026-11284 Side-channel information leakage in PerformanceAPIsUNKNOWN—15%ileMicrosoft2026-06-09
CVE-2026-11282Chromium: CVE-2026-11282 Policy bypass in SandboxUNKNOWN—16%ileMicrosoft2026-06-09
CVE-2026-11281Chromium: CVE-2026-11281 Integer overflow in ChromotingUNKNOWN—0%ileMicrosoft2026-06-09
CVE-2026-11279Chromium: CVE-2026-11279 Out of bounds read in DevToolsUNKNOWN—21%ileMicrosoft2026-06-09
CVE-2026-11286Chromium: CVE-2026-11286 Insufficient validation of untrusted input in WalletUNKNOWN—5%ileMicrosoft2026-06-09
CVE-2026-11288Chromium: CVE-2026-11288 Policy bypass in CSSUNKNOWN—10%ileMicrosoft2026-06-09
CVE-2026-11292Chromium: CVE-2026-11292 Policy bypass in BlinkUNKNOWN—8%ileMicrosoft2026-06-09
CVE-2026-11289Chromium: CVE-2026-11289 Side-channel information leakage in PaintUNKNOWN—10%ileMicrosoft2026-06-09
CVE-2026-11294Chromium: CVE-2026-11294 Inappropriate implementation in PasswordsUNKNOWN—5%ileMicrosoft2026-06-09
CVE-2026-11293Chromium: CVE-2026-11293 Use after free in InputUNKNOWN—10%ileMicrosoft2026-06-09
CVE-2026-11296Chromium: CVE-2026-11296 Inappropriate implementation in ImageCaptureUNKNOWN—7%ileMicrosoft2026-06-09
CVE-2026-11299Chromium: CVE-2026-11299 Out of bounds read in FontsUNKNOWN—10%ileMicrosoft2026-06-09
CVE-2026-11300Chromium: CVE-2026-11300 Inappropriate implementation in PermissionsUNKNOWN—5%ileMicrosoft2026-06-09
CVE-2026-11301Chromium: CVE-2026-11301 Out of bounds read in LiveCaptionUNKNOWN—11%ileMicrosoft2026-06-09
CVE-2026-11303Chromium: CVE-2026-11303 Use after free in PDFiumUNKNOWN—15%ileMicrosoft2026-06-09
CVE-2026-11304Chromium: CVE-2026-11304 Use after free in PDFiumUNKNOWN—8%ileMicrosoft2026-06-09
CVE-2026-11305Chromium: CVE-2026-11305 Use after free in PDFiumUNKNOWN—14%ileMicrosoft2026-06-09
CVE-2026-11306Chromium: CVE-2026-11306 Use after free in PDFiumUNKNOWN—13%ileMicrosoft2026-06-09
CVE-2026-11309Chromium: CVE-2026-11309 Insufficient policy enforcement in HistoryUNKNOWN—3%ileMicrosoft2026-06-09
CVE-2026-11308Chromium: CVE-2026-11308 Inappropriate implementation in ExtensionsUNKNOWN—1%ileMicrosoft2026-06-09
CVE-2026-11307Chromium: CVE-2026-11307 Use after free in PDFiumUNKNOWN—14%ileMicrosoft2026-06-09
CVE-2026-11297Chromium: CVE-2026-11297 Insufficient validation of untrusted input in Reader ModeUNKNOWN—1%ileMicrosoft2026-06-09
CVE-2026-10883Chromium: CVE-2026-10883 Out of bounds write in ANGLEUNKNOWN—32%ileMicrosoft2026-06-09
CVE-2026-10892Chromium: CVE-2026-10892 Out of bounds write in GPUUNKNOWN—25%ileMicrosoft2026-06-09
CVE-2026-10923Chromium: CVE-2026-10923 Use after free in WebAppInstallsUNKNOWN—28%ileMicrosoft2026-06-09
CVE-2026-10929Chromium: CVE-2026-10929 Heap buffer overflow in ANGLEUNKNOWN—23%ileMicrosoft2026-06-09
CVE-2026-10934Chromium: CVE-2026-10934 Use after free in AutofillUNKNOWN—19%ileMicrosoft2026-06-09
CVE-2026-10953Chromium: CVE-2026-10953 Use after free in CoreUNKNOWN—21%ileMicrosoft2026-06-09
CVE-2026-10959Chromium: CVE-2026-10959 Use after free in InputUNKNOWN—29%ileMicrosoft2026-06-09
CVE-2026-10967Chromium: CVE-2026-10967 Use after free in SurfaceCaptureUNKNOWN—19%ileMicrosoft2026-06-09
CVE-2026-11007Chromium: CVE-2026-11007 Insufficient validation of untrusted input in WebViewUNKNOWN—23%ileMicrosoft2026-06-09
CVE-2026-11010Chromium: CVE-2026-11010 Use after free in WebShareUNKNOWN—21%ileMicrosoft2026-06-09
CVE-2026-11019Chromium: CVE-2026-11019 Inappropriate implementation in PaymentsUNKNOWN—18%ileMicrosoft2026-06-09
CVE-2026-11034Chromium: CVE-2026-11034 Insufficient validation of untrusted input in Tab Group SyncUNKNOWN—8%ileMicrosoft2026-06-09
CVE-2026-11064Chromium: CVE-2026-11064 Uninitialized Use in GPUUNKNOWN—16%ileMicrosoft2026-06-09
CVE-2026-11077Chromium: CVE-2026-11077 Out of bounds read in DawnUNKNOWN—20%ileMicrosoft2026-06-09
CVE-2026-11127Chromium: CVE-2026-11127 Inappropriate implementation in WebAPKsUNKNOWN—6%ileMicrosoft2026-06-09
CVE-2026-11163Chromium: CVE-2026-11163 Use after free in MessagesUNKNOWN—14%ileMicrosoft2026-06-09
CVE-2026-11167Chromium: CVE-2026-11167 Inappropriate implementation in WebViewUNKNOWN—14%ileMicrosoft2026-06-09
CVE-2026-11172Chromium: CVE-2026-11172 Incorrect security UI in Contact PickerUNKNOWN—14%ileMicrosoft2026-06-09
CVE-2026-11215Chromium: CVE-2026-11215 Inappropriate implementation in CronetUNKNOWN—5%ileMicrosoft2026-06-09
CVE-2026-11247Chromium: CVE-2026-11247 Insufficient policy enforcement in CustomTabsUNKNOWN—8%ileMicrosoft2026-06-09
CVE-2026-11270Chromium: CVE-2026-11270 Inappropriate implementation in UIUNKNOWN—9%ileMicrosoft2026-06-09
CVE-2026-11278Chromium: CVE-2026-11278 Inappropriate implementation in CustomTabsUNKNOWN—4%ileMicrosoft2026-06-09
CVE-2026-11290Chromium: CVE-2026-11290 Integer overflow in WebViewUNKNOWN—0%ileMicrosoft2026-06-09
CVE-2026-11035Chromium: CVE-2026-11035 Insufficient validation of untrusted input in Custom TabsUNKNOWN—0%ileMicrosoft2026-06-09
CVE-2026-11097Chromium: CVE-2026-11097 Inappropriate implementation in WebViewUNKNOWN—14%ileMicrosoft2026-06-09
CVE-2026-12018Chromium: CVE-2026-12018 Inappropriate implementation  MojoUNKNOWN—6%ileMicrosoft2026-06-09
CVE-2026-12007Chromium: CVE-2026-12007 Use after free  CoreUNKNOWN—21%ileMicrosoft2026-06-09
CVE-2026-12017Chromium: CVE-2026-12017 Insufficient validation of untrusted input  ExtensionsUNKNOWN—11%ileMicrosoft2026-06-09
CVE-2026-12014Chromium: CVE-2026-12014 Use after free  CastUNKNOWN—7%ileMicrosoft2026-06-09
CVE-2026-12013Chromium: CVE-2026-12013 Use after free  MediaUNKNOWN——Microsoft2026-06-09
CVE-2026-12010Chromium: CVE-2026-12010 Heap buffer overflow  GPUUNKNOWN—19%ileMicrosoft2026-06-09
CVE-2026-12009Chromium: CVE-2026-12009 Insufficient validation of untrusted input  AccessibilityUNKNOWN—16%ileMicrosoft2026-06-09
CVE-2026-11648Chromium: CVE-2026-11647 Use after free in PrintingUNKNOWN—18%ileMicrosoft2026-06-09
CVE-2026-11649Chromium: CVE-2026-11648 Use after free in FullScreenUNKNOWN—24%ileMicrosoft2026-06-09
CVE-2026-11652Chromium: CVE-2026-11651 Use after free in NetworkUNKNOWN—15%ileMicrosoft2026-06-09
CVE-2026-11650Chromium: CVE-2026-11649 Use after free in V8UNKNOWN—24%ileMicrosoft2026-06-09
CVE-2026-11653Chromium: CVE-2026-11652 Use after free in ExtensionsUNKNOWN—13%ileMicrosoft2026-06-09
CVE-2026-11651Chromium: CVE-2026-11650 Use after free in V8UNKNOWN—26%ileMicrosoft2026-06-09
CVE-2026-11654Chromium: CVE-2026-11653 Insufficient validation of untrusted input in ExtensionsUNKNOWN—17%ileMicrosoft2026-06-09
CVE-2026-11655Chromium: CVE-2026-11654 Use after free in CameraCaptureUNKNOWN—15%ileMicrosoft2026-06-09
CVE-2026-11657Chromium: CVE-2026-11656 Use after free in ServiceWorkerUNKNOWN—17%ileMicrosoft2026-06-09
CVE-2026-11656Chromium: CVE-2026-11655 Integer overflow in MediaUNKNOWN—7%ileMicrosoft2026-06-09
CVE-2026-12439Chromium: CVE-2026-12439 Use after free in Digital CredentialsUNKNOWN—26%ileMicrosoft2026-06-09
CVE-2026-12440Chromium: CVE-2026-12440 Use after free in DigitalCredentialsUNKNOWN—17%ileMicrosoft2026-06-09
CVE-2026-12445Chromium: CVE-2026-12445 Use after free in ExtensionsUNKNOWN—6%ileMicrosoft2026-06-09
CVE-2026-12446Chromium: CVE-2026-12446 Insufficient data validation in PasswordsUNKNOWN—9%ileMicrosoft2026-06-09
CVE-2026-12451Chromium: CVE-2026-12451 Use after free in DigitalCredentialsUNKNOWN—7%ileMicrosoft2026-06-09
CVE-2026-12441Chromium: CVE-2026-12441 Use after free in File InputUNKNOWN—22%ileMicrosoft2026-06-09
CVE-2026-12447Chromium: CVE-2026-12447 Heap buffer overflow in WebRTCUNKNOWN—35%ileMicrosoft2026-06-09
CVE-2026-12443Chromium: CVE-2026-12443 Use after free in Web AuthenticationUNKNOWN—46%ileMicrosoft2026-06-09
CVE-2026-12452Chromium: CVE-2026-12452 Use after free in DownloadsUNKNOWN—17%ileMicrosoft2026-06-09
CVE-2026-12453Chromium: CVE-2026-12453 Insufficient validation of untrusted input in InputUNKNOWN—8%ileMicrosoft2026-06-09
CVE-2026-12455Chromium: CVE-2026-12455 Use after free in Tab StripUNKNOWN—14%ileMicrosoft2026-06-09
CVE-2026-12456Chromium: CVE-2026-12456 Insufficient validation of untrusted input in ExtensionsUNKNOWN—4%ileMicrosoft2026-06-09
CVE-2026-12458Chromium: CVE-2026-12458 Incorrect security UI in PasswordsUNKNOWN—9%ileMicrosoft2026-06-09
CVE-2026-12457Chromium: CVE-2026-12457 Insufficient data validation in ExtensionsUNKNOWN—4%ileMicrosoft2026-06-09
CVE-2026-12459Chromium: CVE-2026-12459 Inappropriate implementation in SerialUNKNOWN—8%ileMicrosoft2026-06-09
CVE-2026-12460Chromium: CVE-2026-12460 Insufficient policy enforcement in File System AccessUNKNOWN—5%ileMicrosoft2026-06-09
CVE-2026-12462Chromium: CVE-2026-12462 Use after free in MediaUNKNOWN—19%ileMicrosoft2026-06-09
CVE-2026-12464Chromium: CVE-2026-12464 Use after free in BrowserUNKNOWN—13%ileMicrosoft2026-06-09
CVE-2026-12463Chromium: CVE-2026-12463 Inappropriate implementation in ViewsUNKNOWN—3%ileMicrosoft2026-06-09
CVE-2026-12465Chromium: CVE-2026-12465 Insufficient validation of untrusted input in MetricsUNKNOWN—16%ileMicrosoft2026-06-09
CVE-2026-12454Chromium: CVE-2026-12454 Race in Safe BrowsingUNKNOWN—4%ileMicrosoft2026-06-09
CVE-2026-12467Chromium: CVE-2026-12467 Use after free in ExtensionsUNKNOWN—13%ileMicrosoft2026-06-09
CVE-2026-12468Chromium: CVE-2026-12468 Inappropriate implementation in UpdaterUNKNOWN—4%ileMicrosoft2026-06-09
CVE-2026-12449Chromium: CVE-2026-12449 Use after free in ChromotingUNKNOWN—1%ileMicrosoft2026-06-09
CVE-2026-12444Chromium: CVE-2026-12444 Out of bounds read in ChromotingUNKNOWN—4%ileMicrosoft2026-06-09
CVE-2026-12437Chromium: CVE-2026-12437 Use after free in WebShareUNKNOWN—22%ileMicrosoft2026-06-09
CVE-2026-12461Chromium: CVE-2026-12461 Out of bounds read in WebRTCUNKNOWN—15%ileMicrosoft2026-06-09
CVE-2026-12466Chromium: CVE-2026-12466 Heap buffer overflow in WebRTCUNKNOWN—35%ileMicrosoft2026-06-09
CVE-2026-13036Chromium: CVE-2026-13036 Use after free in BlinkUNKNOWN—22%ileMicrosoft2026-06-09
CVE-2026-13035Chromium: CVE-2026-13035 Use after free in BluetoothUNKNOWN—12%ileMicrosoft2026-06-09
CVE-2026-13034Chromium: CVE-2026-13034 Inappropriate implementation in PasswordsUNKNOWN—4%ileMicrosoft2026-06-09
CVE-2026-13033Chromium: CVE-2026-13033 Out of bounds read in Blink>InterestGroupsUNKNOWN—27%ileMicrosoft2026-06-09
CVE-2026-13031Chromium: CVE-2026-13031 Use after free in BlinkUNKNOWN—14%ileMicrosoft2026-06-09
CVE-2026-13029Chromium: CVE-2026-13029 Use after free in Web AuthenticationUNKNOWN—6%ileMicrosoft2026-06-09
CVE-2026-12028Chromium: CVE-2026-12028 Use after free  GPUUNKNOWN—14%ileMicrosoft2026-06-09
CVE-2026-11647Chromium: CVE-2026-11647 Use after free in PrintingUNKNOWN—13%ileMicrosoft2026-06-09
CVE-2026-12030Chromium: CVE-2026-12031 Inappropriate implementation  ViewsUNKNOWN—9%ileMicrosoft2026-06-09
CVE-2026-12032Chromium: CVE-2026-12032 Inappropriate implementation  PasswordsUNKNOWN—5%ileMicrosoft2026-06-09
CVE-2026-12438Chromium: CVE-2026-12438 Inappropriate implementation in WebViewUNKNOWN—11%ileMicrosoft2026-06-09
CVE-2026-12469Chromium: CVE-2026-12469 Uninitialized Use in GPUUNKNOWN—8%ileMicrosoft2026-06-09
CVE-2026-12448Chromium: CVE-2026-12448 Inappropriate implementation in WebViewUNKNOWN—17%ileMicrosoft2026-06-09
CVE-2026-12442Chromium: CVE-2026-12442 Use after free in PasswordsUNKNOWN—32%ileMicrosoft2026-06-09
CVE-2026-12011Chromium: CVE-2026-12011 Use after free  WebMIDIUNKNOWN—16%ileMicrosoft2026-06-09
CVE-2026-13038Chromium: CVE-2026-13038 Use after free in AutofillUNKNOWN—27%ileMicrosoft2026-06-09
CVE-2026-46643Snappy: Binary path is never shell-escaped due to an inverted is_executable checkUNKNOWN—5%ileMicrosoft2026-06-09
CVE-2026-47162Vim: Vimscript Code Injection in netrw NetrwBookHistSave() via crafted directory nameUNKNOWN—12%ileMicrosoft2026-06-09
CVE-2026-48854Unbounded request body accumulation causes memory exhaustion in elixir-grpc/grpcUNKNOWN—27%ileMicrosoft2026-06-09
CVE-2026-9669bz2.BZ2Decompressor reuse after error can cause a stack buffer overflowUNKNOWN—34%ileMicrosoft2026-06-09
CVE-2026-12003CPython >3.11 Insecure Input Validation resulting in privilege escalationUNKNOWN—4%ileMicrosoft2026-06-09
CVE-2026-47242Net::IMAP: Command Injection via ID command argumentUNKNOWN—3%ileMicrosoft2026-06-09
CVE-2026-8643pip can extract console_scripts and gui_scripts outside installation directoryUNKNOWN—24%ileMicrosoft2026-06-09
CVE-2026-3276Potential DoS via quadratic complexity in unicodedata.normalize()UNKNOWN—38%ileMicrosoft2026-06-09
CVE-2026-7774tarfile.data_filter path traversal bypass allows writing outside the extraction directoryUNKNOWN—45%ileMicrosoft2026-06-09
CVE-2026-49762Unbounded integer parsing in the Version module enables CPU and memory exhaustion denial of serviceUNKNOWN—5%ileMicrosoft2026-06-09
CVE-2026-10846Insufficient verification that responses belong to a queryUNKNOWN—4%ileMicrosoft2026-06-09
CVE-2026-46683Snappy: SSRF and local file read via the xsl-style-sheet optionUNKNOWN—16%ileMicrosoft2026-06-09
CVE-2026-52860Vim: Arbitrary Code Execution via Python Omni-CompletionUNKNOWN—13%ileMicrosoft2026-06-09
CVE-2026-52859Vim: Out-of-bounds Read in Terminal Screen SnapshotUNKNOWN—23%ileMicrosoft2026-06-09
CVE-2026-47167Vim: Vimscript Code Injection in cucumber filetype plugin via crafted step-definition regexUNKNOWN—3%ileMicrosoft2026-06-09
CVE-2026-52858Vim: Arbitrary Code Execution via Python Omni-CompletionUNKNOWN—10%ileMicrosoft2026-06-09
CVE-2026-44705tmp: Path Traversal via unsanitized prefix/postfix enables directory escapeUNKNOWN—28%ileMicrosoft2026-06-09
CVE-2026-43973gun HTTP/1.1 response buffer has no size limit allowing server-controlled memory exhaustionUNKNOWN—31%ileMicrosoft2026-06-09
CVE-2026-47240Net::IMAP: Command Injection via non-synchronizing literal in "raw" argumentUNKNOWN—40%ileMicrosoft2026-06-09
CVE-2026-49851Mistune: Potential DoS via quadratic-time parsing in parse_link_textUNKNOWN—27%ileMicrosoft2026-06-09
CVE-2026-11979Stack-Based Buffer Overflow in libxml2UNKNOWN—4%ileMicrosoft2026-06-09
CVE-2026-42960Possible cache poisoning via promiscuous records for the authority sectionCRITICAL10.016%ileMicrosoft2026-05-12
CVE-2026-46595Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/sshCRITICAL10.040%ileMicrosoft2026-05-12
CVE-2026-39821Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idnaCRITICAL10.048%ileMicrosoft2026-05-12
CVE-2026-40412Azure Orbital Spatio Remote Code Execution VulnerabilityCRITICAL10.042%ileMicrosoft2026-05-12
CVE-2026-23652Microsoft Power Pages Remote Code Execution VulnerabilityCRITICAL10.044%ileMicrosoft2026-05-12
CVE-2026-47280Azure Resource Manager Elevation of Privilege VulnerabilityCRITICAL10.040%ileMicrosoft2026-05-12
CVE-2026-42822Azure Local Disconnected Operations (ALDO) Elevation of Privilege VulnerabilityCRITICAL10.040%ileMicrosoft2026-05-12
CVE-2026-42826Azure DevOps Information Disclosure VulnerabilityCRITICAL10.054%ileMicrosoft2026-05-12
CVE-2026-41104Microsoft Planetary Computer Pro Information Disclosure VulnerabilityCRITICAL10.057%ileMicrosoft2026-05-12
CVE-2026-42901Microsoft Entra ID Elevation of Privilege VulnerabilityCRITICAL10.022%ileMicrosoft2026-05-12
CVE-2026-7374Kubevirt: kubevirt virt-handler: privilege escalation and node compromise via symlink following vulnerabilityCRITICAL9.945%ileMicrosoft2026-05-12
CVE-2026-33109Azure Managed Instance for Apache Cassandra Remote Code Execution VulnerabilityCRITICAL9.950%ileMicrosoft2026-05-12
CVE-2026-40411Azure Virtual Network Gateway Remote Code Execution VulnerabilityCRITICAL9.942%ileMicrosoft2026-05-12
CVE-2026-42898Microsoft Dynamics 365 On-Premises Remote Code Execution VulnerabilityCRITICAL9.965%ileMicrosoft2026-05-12
CVE-2026-42823Azure Logic Apps Elevation of Privilege VulnerabilityCRITICAL9.945%ileMicrosoft2026-05-12
CVE-2026-31705ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignmentCRITICAL9.832%ileMicrosoft2026-05-12
CVE-2026-33278Possible arbitrary code execution during DNSSEC validationCRITICAL9.867%ileMicrosoft2026-05-12
CVE-2026-39824Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windowsCRITICAL9.82%ileMicrosoft2026-05-12
CVE-2025-71305drm/display/dp_mst: Add protection against 0 vcpiCRITICAL9.86%ileMicrosoft2026-05-12
CVE-2026-31718ksmbd: fix use-after-free in __ksmbd_close_fd() via durable scavengerCRITICAL9.828%ileMicrosoft2026-05-12
CVE-2026-45899ext4: drop extent cache when splitting extent failsCRITICAL9.86%ileMicrosoft2026-05-12
CVE-2026-41089Windows Netlogon Remote Code Execution VulnerabilityCRITICAL9.8100%ileMicrosoft2026-05-12
CVE-2026-41096Windows DNS Client Remote Code Execution VulnerabilityCRITICAL9.878%ileMicrosoft2026-05-12
CVE-2026-41615Microsoft Authenticator Information Disclosure VulnerabilityCRITICAL9.643%ileMicrosoft2026-05-12
CVE-2026-33823Microsoft Team Events Portal Information Disclosure VulnerabilityCRITICAL9.650%ileMicrosoft2026-05-12
CVE-2026-35428Azure Cloud Shell Spoofing VulnerabilityCRITICAL9.657%ileMicrosoft2026-05-12
CVE-2026-43870Apache Thrift: Node.js web_server.js multi-vulnerabilityCRITICAL9.432%ileMicrosoft2026-05-12
CVE-2026-40379Azure Entra ID Spoofing VulnerabilityCRITICAL9.356%ileMicrosoft2026-05-12
CVE-2026-41090Microsoft Copilot Tampering VulnerabilityCRITICAL9.335%ileMicrosoft2026-05-12
CVE-2026-40402Windows Hyper-V Elevation of Privilege VulnerabilityCRITICAL9.326%ileMicrosoft2026-05-12
CVE-2026-39830Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/sshCRITICAL9.146%ileMicrosoft2026-05-12
CVE-2026-39831Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/sshCRITICAL9.135%ileMicrosoft2026-05-12
CVE-2026-39834Invoking infinite loop on large channel writes in golang.org/x/crypto/sshCRITICAL9.142%ileMicrosoft2026-05-12
CVE-2026-39833Invoking key constraints not enforced in golang.org/x/crypto/ssh/agentCRITICAL9.134%ileMicrosoft2026-05-12
CVE-2026-42508Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhostsCRITICAL9.144%ileMicrosoft2026-05-12
CVE-2026-42496Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction direCRITICAL9.135%ileMicrosoft2026-05-12
CVE-2026-8450HTTP::Daemon versions before 6.17 for Perl allow OS command injection via send_file()CRITICAL9.170%ileMicrosoft2026-05-12
CVE-2026-39832Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agentCRITICAL9.145%ileMicrosoft2026-05-12
CVE-2026-33843Microsoft Azure Active Directory B2C Elevation of Privilege VulnerabilityCRITICAL9.138%ileMicrosoft2026-05-12
CVE-2026-33117Azure SDK for Java Security Feature Bypass VulnerabilityCRITICAL9.139%ileMicrosoft2026-05-12
CVE-2026-41103Microsoft SSO Plugin for Jira & Confluence Elevation of Privilege VulnerabilityCRITICAL9.192%ileMicrosoft2026-05-12
CVE-2026-42833Microsoft Dynamics 365 On-Premises Remote Code Execution VulnerabilityCRITICAL9.151%ileMicrosoft2026-05-12
CVE-2026-33844Azure Managed Instance for Apache Cassandra Remote Code Execution VulnerabilityCRITICAL9.059%ileMicrosoft2026-05-12
CVE-2026-31706ksmbd: validate num_aces and harden ACE walk in smb_inherit_dacl()HIGH8.830%ileMicrosoft2026-05-12
CVE-2026-31709smb: client: validate the whole DACL before rewriting it in cifsaclHIGH8.818%ileMicrosoft2026-05-12
CVE-2026-432499p/xen: protect xen_9pfs_front_free against concurrent callsHIGH8.815%ileMicrosoft2026-05-12
CVE-2026-6473PostgreSQL server undersizes allocations, via integer wraparoundHIGH8.860%ileMicrosoft2026-05-12
CVE-2026-6637PostgreSQL refint allows stack buffer overflow and SQL injectionHIGH8.830%ileMicrosoft2026-05-12
CVE-2026-6477PostgreSQL libpq lo_* functions let server superuser overwrite client stack memoryHIGH8.837%ileMicrosoft2026-05-12
CVE-2026-43490ksmbd: validate inherited ACE SID lengthHIGH8.834%ileMicrosoft2026-05-12
CVE-2026-43048HID: core: Mitigate potential OOB by removing bogus memset()HIGH8.815%ileMicrosoft2026-05-12
CVE-2026-23918Apache HTTP Server: http2: double free and possible RCE on early resetHIGH8.899%ileMicrosoft2026-05-12
CVE-2026-24072Apache HTTP Server: mod_rewrite elevation of privileges via ap_exprHIGH8.848%ileMicrosoft2026-05-12
CVE-2026-31717ksmbd: validate owner of durable handle on reconnectHIGH8.836%ileMicrosoft2026-05-12
CVE-2026-6475PostgreSQL pg_basebackup and pg_rewind can overwrite unrelated files of origin superuser choiceHIGH8.825%ileMicrosoft2026-05-12
CVE-2026-32207Azure Machine Learning Notebook Spoofing VulnerabilityHIGH8.844%ileMicrosoft2026-05-12
CVE-2026-35430Azure Privileged Identity Management (PIM) Elevation of Privilege VulnerabilityHIGH8.835%ileMicrosoft2026-05-12
CVE-2026-34329Microsoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityHIGH8.838%ileMicrosoft2026-05-12
CVE-2026-35439Microsoft SharePoint Server Remote Code Execution VulnerabilityHIGH8.879%ileMicrosoft2026-05-12
CVE-2026-41094Microsoft Data Formulator Remote Code Execution VulnerabilityHIGH8.854%ileMicrosoft2026-05-12
CVE-2026-33110Microsoft SharePoint Server Remote Code Execution VulnerabilityHIGH8.878%ileMicrosoft2026-05-12
CVE-2026-33112Microsoft SharePoint Server Remote Code Execution VulnerabilityHIGH8.886%ileMicrosoft2026-05-12
CVE-2026-40357Microsoft SharePoint Server Remote Code Execution VulnerabilityHIGH8.875%ileMicrosoft2026-05-12
CVE-2026-40365Microsoft SharePoint Server Remote Code Execution VulnerabilityHIGH8.858%ileMicrosoft2026-05-12
CVE-2026-40370SQL Server Remote Code Execution VulnerabilityHIGH8.843%ileMicrosoft2026-05-12
CVE-2026-40403Windows Graphics Component Remote Code Execution VulnerabilityHIGH8.835%ileMicrosoft2026-05-12
CVE-2026-35436Microsoft Office Click-To-Run Elevation of Privilege VulnerabilityHIGH8.812%ileMicrosoft2026-05-12
CVE-2026-40420Microsoft Office Click-To-Run Elevation of Privilege VulnerabilityHIGH8.812%ileMicrosoft2026-05-12
CVE-2026-41613Visual Studio Code Elevation of Privilege VulnerabilityHIGH8.841%ileMicrosoft2026-05-12
CVE-2026-45495Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityHIGH8.859%ileMicrosoft2026-05-12
CVE-2026-45659Microsoft SharePoint Remote Code Execution VulnerabilityHIGH8.895%ileMicrosoft2026-05-12
CVE-2026-41086Windows Admin Center in Azure Portal Elevation of Privilege VulnerabilityHIGH8.835%ileMicrosoft2026-05-12
CVE-2026-35435Azure AI Foundry Elevation of Privilege VulnerabilityHIGH8.664%ileMicrosoft2026-05-12
CVE-2026-43493crypto: pcrypt - Fix handling of MAY_BACKLOG requestsHIGH8.443%ileMicrosoft2026-05-12
CVE-2026-4892CVE-2026-4892HIGH8.453%ileMicrosoft2026-05-12
CVE-2026-40363Microsoft Office Remote Code Execution VulnerabilityHIGH8.431%ileMicrosoft2026-05-12
CVE-2026-40364Microsoft Word Remote Code Execution VulnerabilityHIGH8.490%ileMicrosoft2026-05-12
CVE-2026-40366Microsoft Word Remote Code Execution VulnerabilityHIGH8.431%ileMicrosoft2026-05-12
CVE-2026-40358Microsoft Office Remote Code Execution VulnerabilityHIGH8.430%ileMicrosoft2026-05-12
CVE-2026-40361Microsoft Outlook and Word Remote Code Execution VulnerabilityHIGH8.446%ileMicrosoft2026-05-12
CVE-2026-40367Microsoft Word Remote Code Execution VulnerabilityHIGH8.437%ileMicrosoft2026-05-12
CVE-2026-31712ksmbd: require minimum ACE size in smb_check_perm_dacl()HIGH8.324%ileMicrosoft2026-05-12
CVE-2026-35438Windows Admin Center Elevation of Privilege VulnerabilityHIGH8.343%ileMicrosoft2026-05-12
CVE-2026-42013Gnutls: gnutls: certificate validation bypass due to oversized subject alternative nameHIGH8.235%ileMicrosoft2026-05-12
CVE-2026-5260Gnutls: gnutls: information disclosure via heap overread in rsa key exchangeHIGH8.251%ileMicrosoft2026-05-12
CVE-2026-33833Azure Machine Learning Notebook Spoofing VulnerabilityHIGH8.240%ileMicrosoft2026-05-12
CVE-2026-34327Microsoft Partner Center Spoofing VulnerabilityHIGH8.247%ileMicrosoft2026-05-12
CVE-2026-31771Bluetooth: hci_event: move wake reason storage into validated event handlersHIGH8.111%ileMicrosoft2026-05-12
CVE-2026-43618Rsync < 3.4.3 Integer Overflow Information DisclosureHIGH8.152%ileMicrosoft2026-05-12
CVE-2026-47784In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because meHIGH8.143%ileMicrosoft2026-05-12
CVE-2026-47783In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a HIGH8.167%ileMicrosoft2026-05-12
CVE-2026-9256NGINX ngx_http_rewrite_module vulnerabilityHIGH8.195%ileMicrosoft2026-05-12
CVE-2026-31708smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO pathHIGH8.123%ileMicrosoft2026-05-12
CVE-2026-6665PgBouncer buffer overflow in SCRAMHIGH8.130%ileMicrosoft2026-05-12
CVE-2026-42945NGINX ngx_http_rewrite_module vulnerabilityHIGH8.199%ileMicrosoft2026-05-12
CVE-2026-8711NGINX JavaScript vulnerabilityHIGH8.156%ileMicrosoft2026-05-12
CVE-2026-40415Windows TCP/IP Remote Code Execution VulnerabilityHIGH8.153%ileMicrosoft2026-05-12
CVE-2026-45584Microsoft Defender Remote Code Execution VulnerabilityHIGH8.155%ileMicrosoft2026-05-12
CVE-2026-41105Azure Monitor Action Group Notification System Elevation of Privilege VulnerabilityHIGH8.154%ileMicrosoft2026-05-12
CVE-2026-42897Microsoft Exchange Server Spoofing VulnerabilityHIGH8.199%ileMicrosoft2026-05-12
CVE-2026-40368Microsoft SharePoint Server Remote Code Execution VulnerabilityHIGH8.078%ileMicrosoft2026-05-12
CVE-2026-34332Windows Kernel-Mode Driver Remote Code Execution VulnerabilityHIGH8.041%ileMicrosoft2026-05-12
CVE-2026-47294Microsoft SharePoint Server Remote Code Execution VulnerabilityHIGH8.048%ileMicrosoft2026-05-12
CVE-2026-43284xfrm: esp: avoid in-place decrypt on shared skb fragsHIGH7.8100%ileMicrosoft2026-05-12
CVE-2026-31723usb: gadget: f_subset: Fix net_device lifecycle with device_moveHIGH7.82%ileMicrosoft2026-05-12
CVE-2026-31724usb: gadget: f_eem: Fix net_device lifecycle with device_moveHIGH7.82%ileMicrosoft2026-05-12
CVE-2026-31721usb: gadget: f_hid: move list and spinlock inits from bind to allocHIGH7.82%ileMicrosoft2026-05-12
CVE-2026-31694fuse: reject oversized dirents in page cacheHIGH7.820%ileMicrosoft2026-05-12
CVE-2026-43033crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryptionHIGH7.83%ileMicrosoft2026-05-12
CVE-2026-31702f2fs: fix use-after-free of sbi in f2fs_compress_write_end_io()HIGH7.82%ileMicrosoft2026-05-12
CVE-2026-31700net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd()HIGH7.81%ileMicrosoft2026-05-12
CVE-2026-43499rtmutex: Use waiter::task instead of current in remove_waiter()HIGH7.850%ileMicrosoft2026-05-12
CVE-2026-43497fbdev: udlfb: add vm_ops to dlfb_ops_mmap to prevent use-after-freeHIGH7.82%ileMicrosoft2026-05-12
CVE-2026-41054Missing exit out of permission check in haveged could lead to root exploitHIGH7.88%ileMicrosoft2026-05-12
CVE-2026-46300net: skbuff: preserve shared-frag marker during coalescingHIGH7.894%ileMicrosoft2026-05-12
CVE-2026-46150fanotify: fix false positive on permission eventsHIGH7.84%ileMicrosoft2026-05-12
CVE-2026-46242eventpoll: fix ep_remove struct eventpoll / struct file UAFHIGH7.887%ileMicrosoft2026-05-12
CVE-2026-48864Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page dataHIGH7.814%ileMicrosoft2026-05-12
CVE-2026-40034gitoxide - Command Injection via Partial .gitmodules Override in gix-submoduleHIGH7.828%ileMicrosoft2026-05-12
CVE-2026-43059Bluetooth: MGMT: Fix list corruption and UAF in command complete handlersHIGH7.82%ileMicrosoft2026-05-12
CVE-2026-31722usb: gadget: f_rndis: Fix net_device lifecycle with device_moveHIGH7.82%ileMicrosoft2026-05-12
CVE-2026-31725usb: gadget: f_ecm: Fix net_device lifecycle with device_moveHIGH7.82%ileMicrosoft2026-05-12
CVE-2026-43019Bluetooth: hci_conn: fix potential UAF in set_cig_params_syncHIGH7.83%ileMicrosoft2026-05-12
CVE-2026-43009bpf: Fix incorrect pruning due to atomic fetch precision trackingHIGH7.83%ileMicrosoft2026-05-12
CVE-2026-43125dlm: validate length in dlm_search_rsb_treeHIGH7.835%ileMicrosoft2026-05-12
CVE-2026-43258alpha: fix user-space corruption during memory compactionHIGH7.84%ileMicrosoft2026-05-12
CVE-2026-43321bpf: Properly mark live registers for indirect jumpsHIGH7.82%ileMicrosoft2026-05-12
CVE-2026-43298drm/amdgpu: Skip vcn poison irq release on VFHIGH7.82%ileMicrosoft2026-05-12
CVE-2026-43353i3c: mipi-i3c-hci: Fix race in DMA ring dequeueHIGH7.81%ileMicrosoft2026-05-12
CVE-2026-43500rxrpc: Also unshare DATA/RESPONSE packets when paged frags are presentHIGH7.8100%ileMicrosoft2026-05-12
CVE-2026-45958drm/exynos: vidi: fix to avoid directly dereferencing user pointerHIGH7.83%ileMicrosoft2026-05-12
CVE-2026-32204Azure Monitor Agent Elevation of Privilege VulnerabilityHIGH7.821%ileMicrosoft2026-05-12
CVE-2026-33834Windows Event Logging Service Elevation of Privilege VulnerabilityHIGH7.819%ileMicrosoft2026-05-12
CVE-2026-34330Win32k Elevation of Privilege VulnerabilityHIGH7.823%ileMicrosoft2026-05-12
CVE-2026-34333Windows Win32k Elevation of Privilege VulnerabilityHIGH7.822%ileMicrosoft2026-05-12
CVE-2026-34343Windows Application Identity (AppID) Subsystem Elevation of Privilege VulnerabilityHIGH7.825%ileMicrosoft2026-05-12
CVE-2026-34344Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityHIGH7.824%ileMicrosoft2026-05-12
CVE-2026-34351Windows TCP/IP Elevation of Privilege VulnerabilityHIGH7.811%ileMicrosoft2026-05-12
CVE-2026-35415Windows Storage Spaces Controller Elevation of Privilege VulnerabilityHIGH7.826%ileMicrosoft2026-05-12
CVE-2026-35417Windows Win32k Elevation of Privilege VulnerabilityHIGH7.827%ileMicrosoft2026-05-12
CVE-2026-35418Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityHIGH7.810%ileMicrosoft2026-05-12
CVE-2026-35420Windows Kernel Elevation of Privilege VulnerabilityHIGH7.824%ileMicrosoft2026-05-12
CVE-2026-35421Windows GDI Remote Code Execution VulnerabilityHIGH7.842%ileMicrosoft2026-05-12
CVE-2026-40360Microsoft Excel Information Disclosure VulnerabilityHIGH7.834%ileMicrosoft2026-05-12
CVE-2026-40377Microsoft Cryptographic Services Elevation of Privilege VulnerabilityHIGH7.823%ileMicrosoft2026-05-12
CVE-2026-40399Windows TCP/IP Elevation of Privilege VulnerabilityHIGH7.825%ileMicrosoft2026-05-12
CVE-2026-40407Windows Common Log File System Driver Elevation of Privilege VulnerabilityHIGH7.823%ileMicrosoft2026-05-12
CVE-2026-40408Windows WAN ARP Driver Elevation of Privilege VulnerabilityHIGH7.822%ileMicrosoft2026-05-12
CVE-2026-40417Microsoft Dynamics 365 Business Central Elevation of Privilege VulnerabilityHIGH7.819%ileMicrosoft2026-05-12
CVE-2026-40419Microsoft Office Click-To-Run Elevation of Privilege VulnerabilityHIGH7.823%ileMicrosoft2026-05-12
CVE-2026-41088Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityHIGH7.824%ileMicrosoft2026-05-12
CVE-2026-41095Data Deduplication Elevation of Privilege VulnerabilityHIGH7.826%ileMicrosoft2026-05-12
CVE-2026-41611Visual Studio Code Remote Code Execution VulnerabilityHIGH7.835%ileMicrosoft2026-05-12
CVE-2026-42831Microsoft Office Remote Code Execution VulnerabilityHIGH7.836%ileMicrosoft2026-05-12
CVE-2026-42896Windows DWM Core Library Elevation of Privilege VulnerabilityHIGH7.821%ileMicrosoft2026-05-12
CVE-2026-33835Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityHIGH7.880%ileMicrosoft2026-05-12
CVE-2026-33837Windows TCP/IP Local Elevation of Privilege VulnerabilityHIGH7.877%ileMicrosoft2026-05-12
CVE-2026-33838Windows Message Queuing (MSMQ) Elevation of Privilege VulnerabilityHIGH7.833%ileMicrosoft2026-05-12
CVE-2026-34334Windows TCP/IP Elevation of Privilege VulnerabilityHIGH7.85%ileMicrosoft2026-05-12
CVE-2026-34336Windows DWM Core Library Elevation of Privilege VulnerabilityHIGH7.816%ileMicrosoft2026-05-12
CVE-2026-34337Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityHIGH7.86%ileMicrosoft2026-05-12
CVE-2026-34338Windows Telephony Service Elevation of Privilege VulnerabilityHIGH7.816%ileMicrosoft2026-05-12
CVE-2026-40359Microsoft Excel Remote Code Execution VulnerabilityHIGH7.826%ileMicrosoft2026-05-12
CVE-2026-40362Microsoft Excel Remote Code Execution VulnerabilityHIGH7.825%ileMicrosoft2026-05-12
CVE-2026-40369Windows Kernel Elevation of Privilege VulnerabilityHIGH7.891%ileMicrosoft2026-05-12
CVE-2026-40382Windows Telephony Service Elevation of Privilege VulnerabilityHIGH7.816%ileMicrosoft2026-05-12
CVE-2026-40397Windows Common Log File System Driver Elevation of Privilege VulnerabilityHIGH7.819%ileMicrosoft2026-05-12
CVE-2026-40398Windows Remote Desktop Services Elevation of Privilege VulnerabilityHIGH7.882%ileMicrosoft2026-05-12
CVE-2026-40418Microsoft Office Click-To-Run Elevation of Privilege VulnerabilityHIGH7.817%ileMicrosoft2026-05-12
CVE-2026-40381Azure Connected Machine Agent Elevation of Privilege VulnerabilityHIGH7.812%ileMicrosoft2026-05-12
CVE-2026-42834Windows Admin Center in Azure Portal Elevation of Privilege VulnerabilityHIGH7.834%ileMicrosoft2026-05-12
CVE-2026-41091Microsoft Defender Elevation of Privilege VulnerabilityHIGH7.895%ileMicrosoft2026-05-12
CVE-2026-33841Windows Kernel Elevation of Privilege VulnerabilityHIGH7.823%ileMicrosoft2026-05-12
CVE-2026-33840Win32k Elevation of Privilege VulnerabilityHIGH7.879%ileMicrosoft2026-05-12
CVE-2026-46191fbcon: Avoid OOB font access if console rotation failsHIGH7.73%ileMicrosoft2026-05-12
CVE-2026-9804Kubevirt: kubevirt: vmexport directory symlink escape enables exporter pod file readHIGH7.741%ileMicrosoft2026-05-12
CVE-2026-26147Azure Stack HCI Information Disclosure VulnerabilityHIGH7.744%ileMicrosoft2026-05-12
CVE-2026-42832Microsoft Office Spoofing VulnerabilityHIGH7.713%ileMicrosoft2026-05-12
CVE-2026-33821Microsoft Dynamics 365 Customer Insights Elevation of Privilege VulnerabilityHIGH7.748%ileMicrosoft2026-05-12
CVE-2026-31711smb: server: fix active_num_conn leak on transport allocation failureHIGH7.542%ileMicrosoft2026-05-12
CVE-2026-31704ksmbd: use check_add_overflow() to prevent u16 DACL size overflowHIGH7.52%ileMicrosoft2026-05-12
CVE-2026-37457An off-by-one out-of-bounds write vulnerability in the bgp_flowspec_op_decode() function (bgpd/bgp_flowspec_util.c) of FHIGH7.532%ileMicrosoft2026-05-12
CVE-2026-42151Prometheus Azure AD remote write OAuth client secret exposed via config APIHIGH7.528%ileMicrosoft2026-05-12
CVE-2026-42154Prometheus: remote read endpoint allows denial of service via crafted snappy payloadHIGH7.554%ileMicrosoft2026-05-12
CVE-2026-33846Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassemblyHIGH7.567%ileMicrosoft2026-05-12
CVE-2026-33814Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/netHIGH7.552%ileMicrosoft2026-05-12
CVE-2026-8177XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncHIGH7.547%ileMicrosoft2026-05-12
CVE-2026-5773wrong reuse of SMB connectionHIGH7.546%ileMicrosoft2026-05-12
CVE-2026-42304Twisted: Denial of Service (DoS) in twisted.names via Crafted DNS Compression Pointer ChainsHIGH7.536%ileMicrosoft2026-05-12
CVE-2026-4890CVE-2026-4890HIGH7.594%ileMicrosoft2026-05-12
CVE-2026-44673libyang: lyb_read_string() integer overflow → heap buffer overflowHIGH7.535%ileMicrosoft2026-05-12
CVE-2026-42959Crash during DNSSEC validation of malicious contentHIGH7.552%ileMicrosoft2026-05-12
CVE-2026-3039BIND 9 server memory exhaustion during GSS-API TKEY negotiationHIGH7.561%ileMicrosoft2026-05-12
CVE-2026-5946Invalid handling of CLASS != INHIGH7.577%ileMicrosoft2026-05-12
CVE-2026-42009Gnutls: gnutls: denial of service via dtls packet reordering vulnerabilityHIGH7.568%ileMicrosoft2026-05-12
CVE-2026-39829Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/sshHIGH7.538%ileMicrosoft2026-05-12
CVE-2026-46597Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/sshHIGH7.538%ileMicrosoft2026-05-12
CVE-2026-46054selinux: fix overlayfs mmap() and mprotect() access checksHIGH7.52%ileMicrosoft2026-05-12
CVE-2026-45850ipvs: skip ipv6 extension headers for csum checksHIGH7.56%ileMicrosoft2026-05-12
CVE-2026-46009PCI: endpoint: pci-epf-ntb: Remove duplicate resource teardownHIGH7.52%ileMicrosoft2026-05-12
CVE-2026-9538Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar headeHIGH7.537%ileMicrosoft2026-05-12
CVE-2026-42497Archive::Tar versions before 3.08 for Perl extract hardlinks to attacker controlled paths outside the extraction directoHIGH7.534%ileMicrosoft2026-05-12
CVE-2026-34059Apache HTTP Server: mod_proxy_ajp: Heap Over-Read and memory disclosure in ajp_parse_data()HIGH7.532%ileMicrosoft2026-05-12
CVE-2026-29169Apache HTTP Server: mod_dav_lock indirect lock crashHIGH7.545%ileMicrosoft2026-05-12
CVE-2026-37459An integer underflow in FRRouting (FRR) stable/10.0 to stable/10.6 allows attackers to cause a Denial of Service (DoS) vHIGH7.530%ileMicrosoft2026-05-12
CVE-2026-6664PgBouncer integer overflow in PgBouncer network packet parsingHIGH7.550%ileMicrosoft2026-05-12
CVE-2026-33811Crash when handling long CNAME response in netHIGH7.554%ileMicrosoft2026-05-12
CVE-2026-39820Quadratic string concatentation in consumeComment in net/mailHIGH7.552%ileMicrosoft2026-05-12
CVE-2026-39836Panic in Dial and LookupPort when handling NUL byte on Windows in netHIGH7.545%ileMicrosoft2026-05-12
CVE-2026-42499Quadratic string concatenation in consumePhrase in net/mailHIGH7.553%ileMicrosoft2026-05-12
CVE-2026-42501Malicious module proxy can bypass checksum database in cmd/goHIGH7.514%ileMicrosoft2026-05-12
CVE-2026-6276stale custom cookie host causes cookie leakHIGH7.522%ileMicrosoft2026-05-12
CVE-2026-6479PostgreSQL SSL/GSS init causes denial of service, via uncontrolled recursionHIGH7.538%ileMicrosoft2026-05-12
CVE-2026-41292Long list of incoming EDNS options degrades performanceHIGH7.547%ileMicrosoft2026-05-12
CVE-2026-42944Heap overflow with multiple NSID, COOKIE, PADDING EDNS optionsHIGH7.554%ileMicrosoft2026-05-12
CVE-2026-5947SIG(0) validation during query flood may lead to undefined behaviorHIGH7.570%ileMicrosoft2026-05-12
CVE-2026-48959IO::Uncompress::Unzip versions before 2.220 for Perl allow CPU exhaustion via per-byte read loop in fastForwardHIGH7.530%ileMicrosoft2026-05-12
CVE-2026-35424Internet Key Exchange (IKE) Protocol Denial of Service VulnerabilityHIGH7.565%ileMicrosoft2026-05-12
CVE-2026-40405Windows TCP/IP Denial of Service VulnerabilityHIGH7.562%ileMicrosoft2026-05-12
CVE-2026-40406Windows TCP/IP Information Disclosure VulnerabilityHIGH7.557%ileMicrosoft2026-05-12
CVE-2026-32161Windows Native WiFi Miniport Driver Remote Code Execution VulnerabilityHIGH7.522%ileMicrosoft2026-05-12
CVE-2026-42899ASP.NET Core Denial of Service VulnerabilityHIGH7.583%ileMicrosoft2026-05-12
CVE-2026-26129M365 Copilot Information Disclosure VulnerabilityHIGH7.563%ileMicrosoft2026-05-12
CVE-2026-33111Copilot Chat (Microsoft Edge) Information Disclosure VulnerabilityHIGH7.563%ileMicrosoft2026-05-12
CVE-2026-26164M365 Copilot Information Disclosure VulnerabilityHIGH7.553%ileMicrosoft2026-05-12
CVE-2026-23663Microsoft Global Secure Access (GSA) Information Disclosure VulnerabilityHIGH7.543%ileMicrosoft2026-05-12
CVE-2026-42011Gnutls: gnutls: security bypass due to incorrect name constraint handlingHIGH7.439%ileMicrosoft2026-05-12
CVE-2026-3593Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS implementationHIGH7.472%ileMicrosoft2026-05-12
CVE-2026-48526PyJWT: Public-key JWK accepted as HMAC secret enables forged HS256 tokens when mixed families are allowedHIGH7.432%ileMicrosoft2026-05-12
CVE-2026-40414Windows TCP/IP Denial of Service VulnerabilityHIGH7.442%ileMicrosoft2026-05-12
CVE-2026-41107Microsoft Edge (Chromium-based) Information Disclosure VulnerabilityHIGH7.448%ileMicrosoft2026-05-12
CVE-2026-40413Windows TCP/IP Denial of Service VulnerabilityHIGH7.433%ileMicrosoft2026-05-12
CVE-2026-42893Microsoft Outlook for iOS Tampering VulnerabilityHIGH7.433%ileMicrosoft2026-05-12
CVE-2026-2291CVE-2026-2291HIGH7.357%ileMicrosoft2026-05-12
CVE-2026-5172CVE-2026-5172HIGH7.384%ileMicrosoft2026-05-12
CVE-2026-45894iommu/vt-d: Clear Present bit before tearing down PASID entryHIGH7.34%ileMicrosoft2026-05-12
CVE-2026-45932bpf: Fix tcx/netkit detach permissions when prog fd isn't givenHIGH7.33%ileMicrosoft2026-05-12
CVE-2026-46006drm/nouveau: fix u32 overflow in pushbuf reloc bounds checkHIGH7.34%ileMicrosoft2026-05-12
CVE-2026-48962IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled ouHIGH7.321%ileMicrosoft2026-05-12
CVE-2026-7598libssh2 userauth.c userauth_password integer overflowHIGH7.338%ileMicrosoft2026-05-12
CVE-2026-29168Apache HTTP Server: mod_md unrestricted OCSP responseHIGH7.347%ileMicrosoft2026-05-12
CVE-2026-43869Apache Thrift: TSSLTransportFactory.java hostname verificationHIGH7.347%ileMicrosoft2026-05-12
CVE-2026-46033crypto: authencesn - reject short ahash digests during instance creationHIGH7.33%ileMicrosoft2026-05-12
CVE-2026-45993LoongArch: Add spectre boundry for syscall dispatch tableHIGH7.34%ileMicrosoft2026-05-12
CVE-2026-46145RDMA/mana: Validate rx_hash_key_lenHIGH7.34%ileMicrosoft2026-05-12
CVE-2026-46130dm-verity-fec: fix reading parity bytes split across blocks (take 3)HIGH7.32%ileMicrosoft2026-05-12
CVE-2026-35433.NET Elevation of Privilege VulnerabilityHIGH7.348%ileMicrosoft2026-05-12
CVE-2026-32177.NET Elevation of Privilege VulnerabilityHIGH7.343%ileMicrosoft2026-05-12
CVE-2026-31707ksmbd: validate response sizes in ipc_validate_msg()HIGH7.13%ileMicrosoft2026-05-12
CVE-2026-43042mpls: add seqcount to protect the platform_label{,s} pairHIGH7.12%ileMicrosoft2026-05-12
CVE-2026-31699crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failedHIGH7.13%ileMicrosoft2026-05-12
CVE-2026-43248vhost: move vdpa group bound check to vhost_vdpaHIGH7.13%ileMicrosoft2026-05-12
CVE-2026-43245ntfs: ->d_compare() must not blockHIGH7.136%ileMicrosoft2026-05-12
CVE-2026-43153xfs: remove xfs_attr_leaf_hasnameHIGH7.14%ileMicrosoft2026-05-12
CVE-2026-43116netfilter: ctnetlink: ensure safe access to master conntrackHIGH7.11%ileMicrosoft2026-05-12
CVE-2026-46062ntfs3: fix integer overflow in run_unpack() volume boundary checkHIGH7.14%ileMicrosoft2026-05-12
CVE-2026-46084RDMA/mana_ib: Disable RX steering on RSS QP destroyHIGH7.13%ileMicrosoft2026-05-12
CVE-2026-46080ocfs2: split transactions in dio completion to avoid credit exhaustionHIGH7.14%ileMicrosoft2026-05-12
CVE-2026-45991udf: fix partition descriptor append bookkeepingHIGH7.16%ileMicrosoft2026-05-12
CVE-2026-45839bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec()HIGH7.13%ileMicrosoft2026-05-12
CVE-2026-46047net: qrtr: ns: Fix use-after-free in driver remove()HIGH7.13%ileMicrosoft2026-05-12
CVE-2026-46069wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup()HIGH7.14%ileMicrosoft2026-05-12
CVE-2026-45861gfs2: Fix slab-use-after-free in qd_putHIGH7.16%ileMicrosoft2026-05-12
CVE-2026-46056Bluetooth: hci_event: fix potential UAF in SSP passkey handlersHIGH7.118%ileMicrosoft2026-05-12
CVE-2026-45956drm/exynos: vidi: use priv->vidi_dev for ctx lookup in vidi_connection_ioctl()HIGH7.13%ileMicrosoft2026-05-12
CVE-2026-46226spi: fsl: fix controller deregistrationHIGH7.12%ileMicrosoft2026-05-12
CVE-2026-46197drm/amdkfd: validate SVM ioctl nattr against buffer sizeHIGH7.14%ileMicrosoft2026-05-12
CVE-2026-46225spi: rspi: fix controller deregistrationHIGH7.12%ileMicrosoft2026-05-12
CVE-2026-46177ipmi: Add limits to event and receive message requestsHIGH7.140%ileMicrosoft2026-05-12
CVE-2026-46230drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msgHIGH7.12%ileMicrosoft2026-05-12
CVE-2026-46112RDMA/hns: Fix unlocked call to hns_roce_qp_remove()HIGH7.11%ileMicrosoft2026-05-12
CVE-2026-46122wifi: b43: enforce bounds check on firmware key index in b43_rx()HIGH7.13%ileMicrosoft2026-05-12
CVE-2026-46146ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3()HIGH7.13%ileMicrosoft2026-05-12
CVE-2026-46227sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALLHIGH7.11%ileMicrosoft2026-05-12
CVE-2026-42012Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sansHIGH7.128%ileMicrosoft2026-05-12
CVE-2026-31697crypto: ccp: Don't attempt to copy ID to userspace if PSP command failedHIGH7.13%ileMicrosoft2026-05-12
CVE-2026-31698crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failedHIGH7.13%ileMicrosoft2026-05-12
CVE-2026-43058media: vidtv: fix pass-by-value structs causing MSAN warningsHIGH7.12%ileMicrosoft2026-05-12
CVE-2026-43109x86: shadow stacks: proper error handling for mmap lockHIGH7.12%ileMicrosoft2026-05-12
CVE-2026-43274mailbox: mchp-ipc-sbi: fix out-of-bounds access in mchp_ipc_get_cluster_aggr_irq()HIGH7.13%ileMicrosoft2026-05-12
CVE-2025-71289fs/ntfs3: handle attr_set_size() errors when truncating filesHIGH7.117%ileMicrosoft2026-05-12
CVE-2026-43250usb: chipidea: udc: fix DMA and SG cleanup in _ep_nuke()HIGH7.13%ileMicrosoft2026-05-12
CVE-2026-43219net: cpsw_new: Fix potential unregister of netdev that has not been registered yetHIGH7.13%ileMicrosoft2026-05-12
CVE-2026-43088net: af_key: zero aligned sockaddr tail in PF_KEY exportsHIGH7.12%ileMicrosoft2026-05-12
CVE-2026-43195drm/amdgpu: validate user queue size constraintsHIGH7.13%ileMicrosoft2026-05-12
CVE-2026-43228hfs: Replace BUG_ON with error handling for CNID count checksHIGH7.12%ileMicrosoft2026-05-12
CVE-2026-43318drm/amdgpu: fix sync handling in amdgpu_dma_buf_move_notifyHIGH7.12%ileMicrosoft2026-05-12
CVE-2026-42010Gnutls: gnutls: authentication bypass via nul character in usernameHIGH7.161%ileMicrosoft2026-05-12
CVE-2026-45912ext4: don't cache extent during splitting extentHIGH7.12%ileMicrosoft2026-05-12
CVE-2026-46091media: rc: igorplugusb: heed coherency rulesHIGH7.12%ileMicrosoft2026-05-12
CVE-2026-46072ntfs3: add buffer boundary checks to run_unpack()HIGH7.12%ileMicrosoft2026-05-12
CVE-2026-46099net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnelsHIGH7.124%ileMicrosoft2026-05-12
CVE-2026-46094ext4: fix bounds check in check_xattrs() to prevent out-of-bounds accessHIGH7.13%ileMicrosoft2026-05-12
CVE-2026-46231batman-adv: bla: put backbone reference on failed claim hash insertHIGH7.12%ileMicrosoft2026-05-12
CVE-2026-46229drm/amdkfd: Clear VRAM on allocation to prevent stale data exposureHIGH7.12%ileMicrosoft2026-05-12
CVE-2026-46204drm/amdgpu/vcn4: Prevent OOB reads when parsing IBHIGH7.13%ileMicrosoft2026-05-12
CVE-2026-46233batman-adv: bla: only purge non-released claimsHIGH7.12%ileMicrosoft2026-05-12
CVE-2026-46174x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cacheHIGH7.13%ileMicrosoft2026-05-12
CVE-2026-46193xfrm: ah: account for ESN high bits in async callbacksHIGH7.13%ileMicrosoft2026-05-12
CVE-2026-46140Bluetooth: btmtk: validate WMT event SKB length before struct accessHIGH7.13%ileMicrosoft2026-05-12
CVE-2026-41101Microsoft Word for Android Spoofing VulnerabilityHIGH7.122%ileMicrosoft2026-05-12
CVE-2026-41102Microsoft PowerPoint for Android Spoofing VulnerabilityHIGH7.122%ileMicrosoft2026-05-12
CVE-2026-40401Windows TCP/IP Denial of Service VulnerabilityHIGH7.126%ileMicrosoft2026-05-12
CVE-2026-43052wifi: mac80211: check tdls flag in ieee80211_tdls_operHIGH7.02%ileMicrosoft2026-05-12
CVE-2026-43037ip6_tunnel: clear skb2->cb[] in ip4ip6_err()HIGH7.044%ileMicrosoft2026-05-12
CVE-2026-43306bpf: crypto: Use the correct destructor kfunc typeHIGH7.02%ileMicrosoft2026-05-12
CVE-2026-43303mm/page_alloc: clear page->private in free_pages_prepare()HIGH7.06%ileMicrosoft2026-05-12
CVE-2026-43501ipv6: rpl: reserve mac_len headroom when recompressed SRH growsHIGH7.045%ileMicrosoft2026-05-12
CVE-2026-43503net: skbuff: propagate shared-frag marker through frag-transfer helpersHIGH7.026%ileMicrosoft2026-05-12
CVE-2026-45840openvswitch: cap upcall PID array size and pre-size vport repliesHIGH7.03%ileMicrosoft2026-05-12
CVE-2026-46053net: rds: fix MR cleanup on copy errorHIGH7.03%ileMicrosoft2026-05-12
CVE-2026-45940net: stmmac: fix oops when split header is enabledHIGH7.05%ileMicrosoft2026-05-12
CVE-2026-46017mm: fix deferred split queue races during migrationHIGH7.01%ileMicrosoft2026-05-12
CVE-2026-46052ceph: only d_add() negative dentries when they are unhashedHIGH7.040%ileMicrosoft2026-05-12
CVE-2026-46043RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcvHIGH7.041%ileMicrosoft2026-05-12
CVE-2026-45859netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentationHIGH7.046%ileMicrosoft2026-05-12
CVE-2026-46032KVM: nSVM: Triple fault if restore host CR3 fails on nested #VMEXITHIGH7.02%ileMicrosoft2026-05-12
CVE-2026-46086net: bridge: use a stable FDB dst snapshot in RCU readersHIGH7.02%ileMicrosoft2026-05-12
CVE-2026-45998rxrpc: Fix potential UAF after skb_unshare() failureHIGH7.03%ileMicrosoft2026-05-12
CVE-2026-45892ext4: drop extent cache after doing PARTIAL_VALID1 zerooutHIGH7.05%ileMicrosoft2026-05-12
CVE-2026-46114RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloadsHIGH7.038%ileMicrosoft2026-05-12
CVE-2026-31777ALSA: ctxfi: Check the error for index mappingHIGH7.01%ileMicrosoft2026-05-12
CVE-2026-43049HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failureHIGH7.02%ileMicrosoft2026-05-12
CVE-2026-31729usb: typec: ucsi: validate connector number in ucsi_notify_common()HIGH7.03%ileMicrosoft2026-05-12
CVE-2026-43176wifi: rtw89: pci: validate release report content before using for RTL8922DEHIGH7.017%ileMicrosoft2026-05-12
CVE-2026-43198tcp: fix potential race in tcp_v6_syn_recv_sock()HIGH7.022%ileMicrosoft2026-05-12
CVE-2026-43213wifi: rtw89: pci: validate sequence number of TX release reportHIGH7.013%ileMicrosoft2026-05-12
CVE-2026-43267wifi: rtw89: fix potential zero beacon interval in beacon trackingHIGH7.02%ileMicrosoft2026-05-12
CVE-2026-43101ipv6: ioam: fix potential NULL dereferences in __ioam6_fill_trace_data()HIGH7.035%ileMicrosoft2026-05-12
CVE-2026-43199net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address queryHIGH7.036%ileMicrosoft2026-05-12
CVE-2026-43083net: ioam6: fix OOB and missing lockHIGH7.036%ileMicrosoft2026-05-12
CVE-2026-29518Rsync < 3.4.3 TOCTOU Race Condition Allows Symlink-Based Arbitrary File WriteHIGH7.05%ileMicrosoft2026-05-12
CVE-2026-45942ext4: fix e4b bitmap inconsistency reportsHIGH7.01%ileMicrosoft2026-05-12
CVE-2026-45934btrfs: fix EEXIST abort due to non-consecutive gaps in chunk allocationHIGH7.02%ileMicrosoft2026-05-12
CVE-2026-46090ALSA: aloop: Fix peer runtime UAF during format-change stopHIGH7.01%ileMicrosoft2026-05-12
CVE-2026-46076KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1HIGH7.02%ileMicrosoft2026-05-12
CVE-2026-46119libceph: Fix slab-out-of-bounds access in auth message processingHIGH7.042%ileMicrosoft2026-05-12
CVE-2026-46121mm/damon/sysfs-schemes: protect memcg_path kfree() with damon_sysfs_lockHIGH7.03%ileMicrosoft2026-05-12
CVE-2026-33839Win32k Elevation of Privilege VulnerabilityHIGH7.09%ileMicrosoft2026-05-12
CVE-2026-34331Win32k Elevation of Privilege VulnerabilityHIGH7.09%ileMicrosoft2026-05-12
CVE-2026-34342Windows Print Spooler Elevation of Privilege VulnerabilityHIGH7.021%ileMicrosoft2026-05-12
CVE-2026-34345Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityHIGH7.011%ileMicrosoft2026-05-12
CVE-2026-34347Windows Win32k Elevation of Privilege VulnerabilityHIGH7.018%ileMicrosoft2026-05-12
CVE-2026-35416Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityHIGH7.074%ileMicrosoft2026-05-12
CVE-2026-40410Windows SMB Client Elevation of Privilege VulnerabilityHIGH7.016%ileMicrosoft2026-05-12
CVE-2026-42825Windows Telephony Service Elevation of Privilege VulnerabilityHIGH7.013%ileMicrosoft2026-05-12
CVE-2026-34340Windows Projected File System Elevation of Privilege VulnerabilityHIGH7.011%ileMicrosoft2026-05-12
CVE-2026-34341Windows Link-Layer Discovery Protocol (LLDP) Elevation of Privilege VulnerabilityHIGH7.010%ileMicrosoft2026-05-12
CVE-2026-45585Windows BitLocker Security Feature Bypass VulnerabilityMEDIUM6.869%ileMicrosoft2026-05-12
CVE-2026-32170Windows Rich Text Edit Elevation of Privilege VulnerabilityMEDIUM6.724%ileMicrosoft2026-05-12
CVE-2026-41097Secure Boot Security Feature Bypass VulnerabilityMEDIUM6.770%ileMicrosoft2026-05-12
CVE-2026-21530Windows Rich Text Edit Elevation of Privilege VulnerabilityMEDIUM6.724%ileMicrosoft2026-05-12
CVE-2026-45930net: mctp: ensure our nlmsg responses are initialisedMEDIUM6.63%ileMicrosoft2026-05-12
CVE-2026-46220drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emissionMEDIUM6.62%ileMicrosoft2026-05-12
CVE-2026-45130Vim: Heap Buffer Overflow in spell file loadingMEDIUM6.616%ileMicrosoft2026-05-12
CVE-2026-46209drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs()MEDIUM6.64%ileMicrosoft2026-05-12
CVE-2026-37458Missing input validation in the MP_REACH_NLRI component of FRRouting (FRR) stable/10.0 to stable/10.6 allows authenticatMEDIUM6.516%ileMicrosoft2026-05-12
CVE-2026-5545wrong reuse of HTTP Negotiate connectionMEDIUM6.534%ileMicrosoft2026-05-12
CVE-2026-6478PostgreSQL discloses MD5-hashed passwords via covert timing channelMEDIUM6.543%ileMicrosoft2026-05-12
CVE-2026-40460NGINX ngx_quic_module vulnerabilityMEDIUM6.530%ileMicrosoft2026-05-12
CVE-2026-42946NGINX ngx_http_scgi_module and ngx_http_uwsgi_module vulnerabilityMEDIUM6.557%ileMicrosoft2026-05-12
CVE-2026-43620Rsync < 3.4.3 Out-of-Bounds Array Read via recv_files()MEDIUM6.535%ileMicrosoft2026-05-12
CVE-2026-41401libyang - Heap Use-After-Free Write in XML Metadata ParsingMEDIUM6.541%ileMicrosoft2026-05-12
CVE-2026-39827Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/sshMEDIUM6.520%ileMicrosoft2026-05-12
CVE-2026-9150Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksumsMEDIUM6.534%ileMicrosoft2026-05-12
CVE-2026-9149Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv fileMEDIUM6.524%ileMicrosoft2026-05-12
CVE-2026-33523Apache HTTP Server: multiple modules: HTTP response splitting forwarding malicious status lineMEDIUM6.536%ileMicrosoft2026-05-12
CVE-2026-44283etcd: Read access via PrevKv in etcd transactions may bypass RBAC authorization checksMEDIUM6.513%ileMicrosoft2026-05-12
CVE-2026-43495net: wwan: t7xx: validate port_count against message length in t7xx_port_enum_msg_handlerMEDIUM6.518%ileMicrosoft2026-05-12
CVE-2026-25680Invoking denial of service when parsing arbitrary HTML in golang.org/x/net/htmlMEDIUM6.525%ileMicrosoft2026-05-12
CVE-2026-42827M365 Copilot Information Disclosure VulnerabilityMEDIUM6.540%ileMicrosoft2026-05-12
CVE-2026-34350Windows Storport Miniport Driver Denial of Service VulnerabilityMEDIUM6.552%ileMicrosoft2026-05-12
CVE-2026-35422Windows TCP/IP Driver Security Feature Bypass VulnerabilityMEDIUM6.546%ileMicrosoft2026-05-12
CVE-2026-40374Microsoft Power Automate Desktop Information Disclosure VulnerabilityMEDIUM6.555%ileMicrosoft2026-05-12
CVE-2026-42891Microsoft Edge (Chromium-based) for Android Spoofing VulnerabilityMEDIUM6.521%ileMicrosoft2026-05-12
CVE-2026-42830Azure Monitor Agent Metrics Extension Elevation of Privilege VulnerabilityMEDIUM6.538%ileMicrosoft2026-05-12
CVE-2026-43619Rsync < 3.4.3 Symlink Race Condition via Path-Based SyscallsMEDIUM6.33%ileMicrosoft2026-05-12
CVE-2026-39828Invoking bypass of certificate restrictions in golang.org/x/crypto/sshMEDIUM6.330%ileMicrosoft2026-05-12
CVE-2026-41610Visual Studio Code Security Feature Bypass VulnerabilityMEDIUM6.345%ileMicrosoft2026-05-12
CVE-2026-43894jq: Wild stack write via signed-integer overflow in decNumber D2U() macroMEDIUM6.25%ileMicrosoft2026-05-12
CVE-2026-43896jq: Stack Overflow in Recursive Object MergeMEDIUM6.25%ileMicrosoft2026-05-12
CVE-2026-23679libusb < 1.0.30 NULL Pointer Dereference in parse_interface()MEDIUM6.28%ileMicrosoft2026-05-12
CVE-2026-40380Windows Volume Manager Extension Driver Remote Code Execution VulnerabilityMEDIUM6.238%ileMicrosoft2026-05-12
CVE-2026-41614M365 Copilot for Desktop Spoofing VulnerabilityMEDIUM6.229%ileMicrosoft2026-05-12
CVE-2026-39823Bypass of meta content URL escaping causes XSS in html/templateMEDIUM6.124%ileMicrosoft2026-05-12
CVE-2026-42506Invoking incorrect handling of namespaced elements in foreign content in golang.org/x/net/htmlMEDIUM6.115%ileMicrosoft2026-05-12
CVE-2026-42502Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/htmlMEDIUM6.113%ileMicrosoft2026-05-12
CVE-2026-27136Invoking duplicate attributes can cause XSS in golang.org/x/net/htmlMEDIUM6.113%ileMicrosoft2026-05-12
CVE-2026-25681Invoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/htmlMEDIUM6.113%ileMicrosoft2026-05-12
CVE-2026-44708Mistune Math Plugin XSS Escape BypassMEDIUM6.114%ileMicrosoft2026-05-12
CVE-2026-44897Mistune Heading ID Attribute Injection XSSMEDIUM6.114%ileMicrosoft2026-05-12
CVE-2026-46149scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show()MEDIUM6.14%ileMicrosoft2026-05-12
CVE-2026-46116xfrm: defensively unhash xfrm_state lists in __xfrm_state_deleteMEDIUM6.13%ileMicrosoft2026-05-12
CVE-2026-46199drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msgMEDIUM6.13%ileMicrosoft2026-05-12
CVE-2026-39826Escaper bypass leads to XSS in html/templateMEDIUM6.130%ileMicrosoft2026-05-12
CVE-2026-45989of: unittest: fix use-after-free in testdrv_probe()MEDIUM6.16%ileMicrosoft2026-05-12
CVE-2026-44898Mistune TOC Anchor Injection XSSMEDIUM6.114%ileMicrosoft2026-05-12
CVE-2026-46160btrfs: fix missing last_unlink_trans update when removing a directoryMEDIUM6.13%ileMicrosoft2026-05-12
CVE-2026-46218drm/amdgpu: Add bounds checking to ib_{get,set}_valueMEDIUM6.13%ileMicrosoft2026-05-12
CVE-2026-4873connection reuse ignores TLS requirementMEDIUM5.925%ileMicrosoft2026-05-12
CVE-2026-6253proxy credentials leak over redirect-to proxyMEDIUM5.950%ileMicrosoft2026-05-12
CVE-2026-34956Openvswitch: open vswitch: denial of service via malformed ftp epasv commandMEDIUM5.933%ileMicrosoft2026-05-12
CVE-2026-44608Use after free and crash under special conditions in RPZ codeMEDIUM5.917%ileMicrosoft2026-05-12
CVE-2026-6666PgBouncer crash in kill_pool_logins_server_errorMEDIUM5.930%ileMicrosoft2026-05-12
CVE-2026-39817Invoking "go tool pack" does not sanitize output paths in cmd/goMEDIUM5.97%ileMicrosoft2026-05-12
CVE-2026-8376Perl versions through 5.43.10 have a heap buffer overflow when compiling regular expressions with a repeated fixed strinMEDIUM5.736%ileMicrosoft2026-05-12
CVE-2026-43036net: use skb_header_pointer() for TCPv4 GSO frag_off checkMEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-43010bpf: Reject sleepable kprobe_multi programs at attach timeMEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-31696rxrpc: Fix missing validation of ticket length in non-XDR key preparsingMEDIUM5.53%ileMicrosoft2026-05-12
CVE-2026-43127ntfs3: fix circular locking dependency in run_unpack_exMEDIUM5.51%ileMicrosoft2026-05-12
CVE-2026-43161iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable modeMEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-43137ASoC: SOF: Intel: hda: Fix NULL pointer dereferenceMEDIUM5.53%ileMicrosoft2026-05-12
CVE-2026-43234team: avoid NETDEV_CHANGEMTU event when unregistering slaveMEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-43185ksmbd: fix signededness bug in smb_direct_prepare_negotiation()MEDIUM5.546%ileMicrosoft2026-05-12
CVE-2025-71273wifi: rtw88: Use devm_kmemdup() in rtw_set_supported_band()MEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-43244kcm: fix zero-frag skb in frag_list on partial sendmsg errorMEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-43191drm/amd/display: Adjust PHY FSM transition to TX_EN-to-PLL_ON for TMDS on DCN35MEDIUM5.52%ileMicrosoft2026-05-12
CVE-2025-71272most: core: fix resource leak in most_register_interface error pathsMEDIUM5.53%ileMicrosoft2026-05-12
CVE-2026-43309md raid: fix hang when stopping arrays with metadata through dm-raidMEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-43300drm/panel: Fix a possible null-pointer dereference in jdi_panel_dsi_remove()MEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-43331x86/kexec: Disable KCOV instrumentation after load_segments()MEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-43319spi: spidev: fix lock inversion between spi_lock and buf_lockMEDIUM5.51%ileMicrosoft2026-05-12
CVE-2026-43344perf/x86/intel/uncore: Fix die ID init and look up bugsMEDIUM5.51%ileMicrosoft2026-05-12
CVE-2026-43305drm/amd/display: Fix mismatched unlock for DMUB HW lock in HWSS fast pathMEDIUM5.50%ileMicrosoft2026-05-12
CVE-2026-43310media: verisilicon: Avoid G2 bus error while decoding H.264 and HEVCMEDIUM5.51%ileMicrosoft2026-05-12
CVE-2026-43292mm/vmalloc: prevent RCU stalls in kasan_release_vmalloc_nodeMEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-43311soc/tegra: pmc: Fix unsafe generic_handle_irq() callMEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-43308btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref()MEDIUM5.51%ileMicrosoft2026-05-12
CVE-2026-41256jq: Embedded NUL truncates top-level jq programs loaded with -fMEDIUM5.55%ileMicrosoft2026-05-12
CVE-2026-31767drm/i915/dsi: Don't do DSC horizontal timing adjustments in command modeMEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-43491net: qrtr: ns: Limit the maximum server registration per nodeMEDIUM5.54%ileMicrosoft2026-05-12
CVE-2026-43465net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQMEDIUM5.534%ileMicrosoft2026-05-12
CVE-2026-43502net/rds: handle zerocopy send cleanup before the message is queuedMEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-43496net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peekedMEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-43029mptcp: fix soft lockup in mptcp_recvmsg()MEDIUM5.525%ileMicrosoft2026-05-12
CVE-2026-46050md/raid10: fix deadlock with check operation and nowait requestsMEDIUM5.51%ileMicrosoft2026-05-12
CVE-2026-45877HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clientsMEDIUM5.55%ileMicrosoft2026-05-12
CVE-2026-45917ipvs: do not keep dest_dst if dev is going downMEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-45841netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULOMEDIUM5.53%ileMicrosoft2026-05-12
CVE-2026-46005xfs: fix a resource leak in xfs_alloc_buftarg()MEDIUM5.53%ileMicrosoft2026-05-12
CVE-2026-46037ipv4: icmp: validate reply type before using icmp_pointersMEDIUM5.536%ileMicrosoft2026-05-12
CVE-2026-46012rxrpc: Fix memory leaks in rxkad_verify_response()MEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-46085rxrpc: Fix rxkad crypto unalignment handlingMEDIUM5.536%ileMicrosoft2026-05-12
CVE-2026-46059KVM: nSVM: Always use NextRIP as vmcb02's NextRIP after first L2 VMRUNMEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-45901netfilter: nf_tables: revert commit_mutex usage in reset pathMEDIUM5.55%ileMicrosoft2026-05-12
CVE-2026-46027net/smc: avoid early lgr access in smc_clc_wait_msgMEDIUM5.540%ileMicrosoft2026-05-12
CVE-2026-46088ALSA: control: Validate buf_len before strnlen() in snd_ctl_elem_init_enum_names()MEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-46051md/raid5: fix soft lockup in retry_aligned_read()MEDIUM5.51%ileMicrosoft2026-05-12
CVE-2026-46018ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATESMEDIUM5.58%ileMicrosoft2026-05-12
CVE-2026-45835Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb()MEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-45834Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb()MEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-45944iommu/vt-d: Clear Present bit before tearing down context entryMEDIUM5.53%ileMicrosoft2026-05-12
CVE-2026-45836Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb()MEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-45961gfs2: fix memory leaks in gfs2_fill_super error pathMEDIUM5.54%ileMicrosoft2026-05-12
CVE-2026-45943erofs: fix inline data read failure for ztailpacking pclustersMEDIUM5.53%ileMicrosoft2026-05-12
CVE-2026-45897netfilter: nft_counter: serialize reset with spinlockMEDIUM5.55%ileMicrosoft2026-05-12
CVE-2026-45997scsi: sd: fix missing put_disk() when device_add(&disk_dev) failsMEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-46070md/raid5: validate payload size before accessing journal metadataMEDIUM5.53%ileMicrosoft2026-05-12
CVE-2026-45994ibmasm: fix OOB reads in command_file_write due to missing size checksMEDIUM5.54%ileMicrosoft2026-05-12
CVE-2026-46101netfilter: reject zero shift in nft_bitwiseMEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-46014KVM: SVM: Add missing save/restore handling of LBR MSRsMEDIUM5.51%ileMicrosoft2026-05-12
CVE-2026-45845net/sched: taprio: fix NULL pointer dereference in class dumpMEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-46065fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_infoMEDIUM5.53%ileMicrosoft2026-05-12
CVE-2026-46098net: caif: clear client service pointer on teardownMEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-46077crypto: atmel-tdes - fix DMA sync directionMEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-46063x86/shstk: Prevent deadlock during shstk sigreturnMEDIUM5.51%ileMicrosoft2026-05-12
CVE-2026-46068crypto: nx - fix bounce buffer leaks in nx842_crypto_{alloc,free}_ctxMEDIUM5.53%ileMicrosoft2026-05-12
CVE-2026-45843slip: bound decode() reads against the compressed packet lengthMEDIUM5.528%ileMicrosoft2026-05-12
CVE-2026-46024libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply()MEDIUM5.540%ileMicrosoft2026-05-12
CVE-2026-45963ASoC: nau8821: Cancel delayed work on component removeMEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-45844netfilter: arp_tables: fix IEEE1394 ARP payload parsingMEDIUM5.53%ileMicrosoft2026-05-12
CVE-2026-46022misc: ibmasm: fix OOB MMIO read in ibmasm_handle_mouse_interrupt()MEDIUM5.54%ileMicrosoft2026-05-12
CVE-2026-46102net: strparser: fix skb_head leak in strp_abort_strp()MEDIUM5.540%ileMicrosoft2026-05-12
CVE-2026-46016remoteproc: xlnx: Only access buffer information if IPI is bufferedMEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-46000rxrpc: Fix conn-level packet handling to unshare RESPONSE packetsMEDIUM5.56%ileMicrosoft2026-05-12
CVE-2026-46003net: qrtr: ns: Limit the total number of nodesMEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-46219spi: mpc52xx: fix use-after-free on unbindMEDIUM5.53%ileMicrosoft2026-05-12
CVE-2026-46214vsock/virtio: fix accept queue count leak on transport mismatchMEDIUM5.53%ileMicrosoft2026-05-12
CVE-2026-46137mptcp: pm: ADD_ADDR rtx: fix potential data-raceMEDIUM5.535%ileMicrosoft2026-05-12
CVE-2026-46186Bluetooth: virtio_bt: validate rx pkt_type header lengthMEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-46172ipv6: xfrm6: release dst on error in xfrm6_rcv_encap()MEDIUM5.53%ileMicrosoft2026-05-12
CVE-2026-46168mptcp: fix scheduling with atomic in timestamp sockoptMEDIUM5.53%ileMicrosoft2026-05-12
CVE-2026-46163wifi: b43legacy: enforce bounds check on firmware key index in RX pathMEDIUM5.53%ileMicrosoft2026-05-12
CVE-2026-46131KVM: x86: check for nEPT/nNPT in slow flush hypercallsMEDIUM5.53%ileMicrosoft2026-05-12
CVE-2026-46128ipmi: Check event message buffer response for bad dataMEDIUM5.53%ileMicrosoft2026-05-12
CVE-2026-46159btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leakMEDIUM5.51%ileMicrosoft2026-05-12
CVE-2026-46165openvswitch: vport: fix self-deadlock on release of tunnel portsMEDIUM5.51%ileMicrosoft2026-05-12
CVE-2026-46158mptcp: pm: ADD_ADDR rtx: always decrease sk refcountMEDIUM5.53%ileMicrosoft2026-05-12
CVE-2026-46107dm-thin: fix metadata refcount underflowMEDIUM5.53%ileMicrosoft2026-05-12
CVE-2026-46176RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init()MEDIUM5.54%ileMicrosoft2026-05-12
CVE-2026-46208batman-adv: stop tp_meter sessions during mesh teardownMEDIUM5.54%ileMicrosoft2026-05-12
CVE-2026-46236media: rc: xbox_remote: heed DMA restrictionsMEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-46164btrfs: fix double free in create_space_info_sub_group() error pathMEDIUM5.54%ileMicrosoft2026-05-12
CVE-2026-46235media: saa7164: add ioremap return checks and cleanupsMEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-46127RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp()MEDIUM5.53%ileMicrosoft2026-05-12
CVE-2026-46155smb/client: fix out-of-bounds read in smb2_compound_op()MEDIUM5.539%ileMicrosoft2026-05-12
CVE-2026-46157ALSA: pcm: oss: Fix data race at accessing runtime.oss.triggerMEDIUM5.51%ileMicrosoft2026-05-12
CVE-2026-46136wifi: mt76: mt7921: fix a potential clc buffer length underflowMEDIUM5.53%ileMicrosoft2026-05-12
CVE-2026-46132net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfoMEDIUM5.53%ileMicrosoft2026-05-12
CVE-2026-46170mptcp: pm: ADD_ADDR rtx: free sk if lastMEDIUM5.53%ileMicrosoft2026-05-12
CVE-2026-46190mtd: spi-nor: debugfs: fix out-of-bounds read in spi_nor_params_show()MEDIUM5.53%ileMicrosoft2026-05-12
CVE-2026-46175f2fs: fix fsck inconsistency caused by FGGC of node blockMEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-46238batman-adv: stop caching unowned originator pointers in BAT IVMEDIUM5.518%ileMicrosoft2026-05-12
CVE-2026-46120ip6_gre: Use cached t->net in ip6erspan_changelink().MEDIUM5.53%ileMicrosoft2026-05-12
CVE-2026-46108ipmi:si: Return state to normal if message allocation failsMEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-46152wifi: mac80211: drop stray 'static' from fast-RX rx_resultMEDIUM5.56%ileMicrosoft2026-05-12
CVE-2026-46125wifi: mac80211: remove station if connection prep failsMEDIUM5.523%ileMicrosoft2026-05-12
CVE-2026-461538021q: delete cleared egress QoS mappingsMEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-46241spi: mpc52xx: fix use-after-free on registration failureMEDIUM5.53%ileMicrosoft2026-05-12
CVE-2026-46147KVM: arm64: Fix pin leak and publication ordering in __pkvm_init_vcpu()MEDIUM5.53%ileMicrosoft2026-05-12
CVE-2026-46135nvmet-tcp: fix race between ICReq handling and queue teardownMEDIUM5.532%ileMicrosoft2026-05-12
CVE-2026-46189RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error pathMEDIUM5.54%ileMicrosoft2026-05-12
CVE-2026-46151usb: usblp: fix heap leak in IEEE 1284 device ID via short responseMEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-46124isofs: validate block number from NFS file handle in isofs_export_igetMEDIUM5.535%ileMicrosoft2026-05-12
CVE-2026-46106eventfs: Hold eventfs_mutex and SRCU when remount walks eventsMEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-46181RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()MEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-46178RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq()MEDIUM5.53%ileMicrosoft2026-05-12
CVE-2026-43053xfs: close crash window in attr dabtree inactivationMEDIUM5.50%ileMicrosoft2026-05-12
CVE-2026-31715f2fs: fix UAF caused by decrementing sbi->nr_pages[] in f2fs_write_end_io()MEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-43073x86-64: rename misleadingly named '__copy_user_nocache()' functionMEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-43204ASoC: qcom: q6asm: drop DSP responses for closed data streamsMEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-43131drm/amd/pm: Fix null pointer dereference issueMEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-43126ALSA: mixer: oss: Add card disconnect checkpointsMEDIUM5.53%ileMicrosoft2026-05-12
CVE-2025-71290misc: ti_fpc202: fix a potential memory leak in probe functionMEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-43115srcu: Use irq_work to start GP in tiny SRCUMEDIUM5.51%ileMicrosoft2026-05-12
CVE-2025-71293drm/amdgpu/ras: Move ras data alloc before bad page checkMEDIUM5.53%ileMicrosoft2026-05-12
CVE-2026-43172wifi: iwlwifi: fix 22000 series SMEM parsingMEDIUM5.517%ileMicrosoft2026-05-12
CVE-2025-71285net: qrtr: Drop the MHI auto_queue feature for IPCR DL channelsMEDIUM5.53%ileMicrosoft2026-05-12
CVE-2026-43197netconsole: avoid OOB reads, msg is not nul-terminatedMEDIUM5.538%ileMicrosoft2026-05-12
CVE-2026-43118btrfs: fix zero size inode with non-zero size after log replayMEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-43129ima: verify the previous kernel's IMA buffer lies in addressable RAMMEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-43107xfrm: account XFRMA_IF_ID in aevent size calculationMEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-43243drm/amd/display: Add signal type check for dcn401 get_phyd32clk_srcMEDIUM5.52%ileMicrosoft2026-05-12
CVE-2025-71294drm/amdgpu: fix NULL pointer issue buffer funcsMEDIUM5.53%ileMicrosoft2026-05-12
CVE-2026-43237drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4MEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-43201APEI/GHES: ARM processor Error: don't go past allocated memoryMEDIUM5.53%ileMicrosoft2026-05-12
CVE-2026-43165hwmon: (nct7363) Fix a resource leak in nct7363_present_pwm_faninMEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-43216net: Drop the lock in skb_may_tx_timestamp()MEDIUM5.53%ileMicrosoft2026-05-12
CVE-2026-43119Bluetooth: hci_sync: annotate data-races around hdev->req_statusMEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-43338btrfs: reserve enough transaction items for qgroup ioctlsMEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-43416powerpc, perf: Check that current->mm is alive before getting user callchainMEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-43352i3c: mipi-i3c-hci: Correct RING_CTRL_ABORT handling in DMA dequeueMEDIUM5.53%ileMicrosoft2026-05-12
CVE-2025-71299spi: cadence-quadspi: Parse DT for flashes with the rest of the DT parsingMEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-43456bonding: fix type confusion in bond_setup_by_slave()MEDIUM5.56%ileMicrosoft2026-05-12
CVE-2026-43299btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure()MEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-43294drm: renesas: rz-du: mipi_dsi: fix kernel panic when rebooting for some panelsMEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-43220iommu/amd: serialize sequence allocation under concurrent TLB invalidationsMEDIUM5.53%ileMicrosoft2026-05-12
CVE-2026-46333ptrace: slightly saner 'get_dumpable()' logicMEDIUM5.572%ileMicrosoft2026-05-12
CVE-2026-43492lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl()MEDIUM5.55%ileMicrosoft2026-05-12
CVE-2026-43464net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQMEDIUM5.533%ileMicrosoft2026-05-12
CVE-2026-43494net/rds: reset op_nents when zerocopy page pin failsMEDIUM5.522%ileMicrosoft2026-05-12
CVE-2026-43414scsi: qla2xxx: Completely fix fcport double freeMEDIUM5.531%ileMicrosoft2026-05-12
CVE-2026-46048ALSA: caiaq: fix usb_dev refcount leak on probe failureMEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-46002ext2: reject inodes with zero i_nlink and valid mode in ext2_iget()MEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-46078erofs: fix the out-of-bounds nameoff handling for trailing direntsMEDIUM5.53%ileMicrosoft2026-05-12
CVE-2026-46064ibmasm: fix heap over-read in ibmasm_send_i2o_message()MEDIUM5.54%ileMicrosoft2026-05-12
CVE-2026-46075crypto: atmel-sha204a - Fix potential UAF and memory leak in remove pathMEDIUM5.53%ileMicrosoft2026-05-12
CVE-2026-45973RDMA/mlx5: Fix UMR hang in LAG error state unloadMEDIUM5.55%ileMicrosoft2026-05-12
CVE-2026-45838bpf: fix end-of-list detection in cgroup_storage_get_next_key()MEDIUM5.53%ileMicrosoft2026-05-12
CVE-2026-46071KVM: nSVM: Avoid clearing VMCB_LBR in vmcb12MEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-46049ALSA: ctxfi: Add fallback to default RSR for S/PDIFMEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-46066ceph: fix num_ops off-by-one when crypto allocation failsMEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-45855ata: libata-scsi: avoid Non-NCQ command starvationMEDIUM5.56%ileMicrosoft2026-05-12
CVE-2026-46058media: amphion: Fix race between m2m job_abort and device_runMEDIUM5.51%ileMicrosoft2026-05-12
CVE-2026-46031net: ks8851: Reinstate disabling of BHs around IRQ handlerMEDIUM5.530%ileMicrosoft2026-05-12
CVE-2026-45999erofs: fix unsigned underflow in z_erofs_lz4_handle_overlap()MEDIUM5.53%ileMicrosoft2026-05-12
CVE-2026-45846bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst()MEDIUM5.53%ileMicrosoft2026-05-12
CVE-2026-46089zram: do not forget to endio for partial discard requestsMEDIUM5.53%ileMicrosoft2026-05-12
CVE-2026-46046ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all()MEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-46038net: qrtr: ns: Free the node during ctrl_cmd_bye()MEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-46040inotify: fix watch count leak when fsnotify_add_inode_mark_locked() failsMEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-45988rxrpc: Fix re-decryption of RESPONSE packetsMEDIUM5.537%ileMicrosoft2026-05-12
CVE-2026-45996spi: imx: fix use-after-free on unbindMEDIUM5.54%ileMicrosoft2026-05-12
CVE-2026-46019crypto: atmel-aes - Fix 3-page memory leak in atmel_aes_buff_cleanupMEDIUM5.56%ileMicrosoft2026-05-12
CVE-2026-46103can: ucan: fix devres lifetimeMEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-46092wifi: rtw88: check for PCI upstream bridge existenceMEDIUM5.54%ileMicrosoft2026-05-12
CVE-2026-45842slip: reject VJ receive packets on instances with no rstate arrayMEDIUM5.53%ileMicrosoft2026-05-12
CVE-2026-45949hwrng: core - use RCU and work_struct to fix race conditionMEDIUM5.50%ileMicrosoft2026-05-12
CVE-2026-46079rbd: fix null-ptr-deref when device_add_disk() failsMEDIUM5.54%ileMicrosoft2026-05-12
CVE-2026-46083spi: fix resource leaks on device setup failureMEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-45987KVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN of L2MEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-46015tcp: call sk_data_ready() after listener migrationMEDIUM5.53%ileMicrosoft2026-05-12
CVE-2026-45858ext4: don't zero the entire extent if EXT4_EXT_DATA_PARTIAL_VALID1MEDIUM5.56%ileMicrosoft2026-05-12
CVE-2026-46082KVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0MEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-46026net: qrtr: ns: Limit the maximum number of lookupsMEDIUM5.53%ileMicrosoft2026-05-12
CVE-2026-46200spi: mpc52xx: fix controller deregistrationMEDIUM5.53%ileMicrosoft2026-05-12
CVE-2026-46148spi: microchip-core-qspi: control built-in cs manuallyMEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-46198batman-adv: fix integer overflow on buff_posMEDIUM5.520%ileMicrosoft2026-05-12
CVE-2026-46111Bluetooth: hci_conn: fix potential UAF in create_big_syncMEDIUM5.53%ileMicrosoft2026-05-12
CVE-2026-46195smb: client: validate dacloffset before building DACL pointersMEDIUM5.549%ileMicrosoft2026-05-12
CVE-2026-46109usb: ulpi: fix memory leak on ulpi_register() error pathsMEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-46173exit: prevent preemption of oopsing TASK_DEAD taskMEDIUM5.53%ileMicrosoft2026-05-12
CVE-2026-46180wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog taskMEDIUM5.53%ileMicrosoft2026-05-12
CVE-2026-46115block: add pgmap check to biovec_phys_mergeableMEDIUM5.540%ileMicrosoft2026-05-12
CVE-2026-46185smb/client: fix out-of-bounds read in symlink_data()MEDIUM5.541%ileMicrosoft2026-05-12
CVE-2026-46161md/raid10: fix divide-by-zero in setup_geo() with zero far_copiesMEDIUM5.53%ileMicrosoft2026-05-12
CVE-2026-46212batman-adv: bla: prevent use-after-free when deleting claimsMEDIUM5.520%ileMicrosoft2026-05-12
CVE-2026-46205staging: media: atomisp: Disallow all private IOCTLsMEDIUM5.54%ileMicrosoft2026-05-12
CVE-2026-46234vsock: fix buffer size clamping orderMEDIUM5.53%ileMicrosoft2026-05-12
CVE-2026-46171riscv: kvm: fix vector context allocation leakMEDIUM5.53%ileMicrosoft2026-05-12
CVE-2026-46179ASoC: SOF: Don't allow pointer operations on unconfigured streamsMEDIUM5.52%ileMicrosoft2026-05-12
CVE-2026-46196tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func()MEDIUM5.53%ileMicrosoft2026-05-12
CVE-2026-46133RDMA/rxe: Reject unknown opcodes before ICRC processingMEDIUM5.544%ileMicrosoft2026-05-12
CVE-2026-46129btrfs: fix double free in create_space_info() error pathMEDIUM5.54%ileMicrosoft2026-05-12
CVE-2026-46156LoongArch: Fix potential ADE in loongson_gpu_fixup_dma_hang()MEDIUM5.51%ileMicrosoft2026-05-12
CVE-2026-46138Bluetooth: hci_event: Fix OOB read and infinite loop in hci_le_create_big_complete_evtMEDIUM5.520%ileMicrosoft2026-05-12
CVE-2026-46187wifi: rsi: fix kthread lifetime race between self-exit and external-stopMEDIUM5.51%ileMicrosoft2026-05-12
CVE-2026-46167usb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctlMEDIUM5.53%ileMicrosoft2026-05-12
CVE-2026-46113KVM: x86: Fix shadow paging use-after-free due to unexpected GFNMEDIUM5.55%ileMicrosoft2026-05-12
CVE-2026-46206batman-adv: reject new tp_meter sessions during teardownMEDIUM5.54%ileMicrosoft2026-05-12
CVE-2026-46142net: libwx: fix VF illegal register accessMEDIUM5.53%ileMicrosoft2026-05-12
CVE-2026-46144RDMA/mana: Fix error unwind in mana_ib_create_qp_rss()MEDIUM5.53%ileMicrosoft2026-05-12
CVE-2026-46184sound: ua101: fix division by zero at probeMEDIUM5.53%ileMicrosoft2026-05-12
CVE-2025-15649IO::Uncompress::Unzip versions before 2.215 for Perl propagate uncaught exception when parsing zip header with malformedMEDIUM5.53%ileMicrosoft2026-05-12
CVE-2026-35419Windows DWM Core Library Information Disclosure VulnerabilityMEDIUM5.530%ileMicrosoft2026-05-12
CVE-2026-35440Microsoft Word Information Disclosure VulnerabilityMEDIUM5.537%ileMicrosoft2026-05-12
CVE-2026-41612Visual Studio Code Information Disclosure VulnerabilityMEDIUM5.540%ileMicrosoft2026-05-12
CVE-2026-32185Microsoft Teams Spoofing VulnerabilityMEDIUM5.538%ileMicrosoft2026-05-12
CVE-2026-34339Windows Lightweight Directory Access Protocol (LDAP) Denial of Service VulnerabilityMEDIUM5.522%ileMicrosoft2026-05-12
CVE-2026-45571go-git: Crafted repositories may modify main and submodule .git directoriesMEDIUM5.422%ileMicrosoft2026-05-12
CVE-2026-6472PostgreSQL CREATE TYPE does not check multirange schema CREATE privilegeMEDIUM5.46%ileMicrosoft2026-05-12
CVE-2026-35423Windows 11 Telnet Client Information Disclosure VulnerabilityMEDIUM5.451%ileMicrosoft2026-05-12
CVE-2026-42838Microsoft Edge (Chromium-based) Elevation of Privilege VulnerabilityMEDIUM5.415%ileMicrosoft2026-05-12
CVE-2026-45494Microsoft Edge (Chromium-based) Spoofing VulnerabilityMEDIUM5.422%ileMicrosoft2026-05-12
CVE-2026-6429netrc credential leak with reused proxy connectionMEDIUM5.341%ileMicrosoft2026-05-12
CVE-2026-4893CVE-2026-4893MEDIUM5.384%ileMicrosoft2026-05-12
CVE-2026-32792Packet of death with DNSCryptMEDIUM5.326%ileMicrosoft2026-05-12
CVE-2026-42923Degradation of service with unbounded NSEC3 hash calculationsMEDIUM5.326%ileMicrosoft2026-05-12
CVE-2026-3592Amplification vulnerabilities via self-pointed glue recordsMEDIUM5.333%ileMicrosoft2026-05-12
CVE-2026-5950Unbounded resend loop in BIND 9 resolverMEDIUM5.348%ileMicrosoft2026-05-12
CVE-2026-8723qs.stringify crashes on null/undefined entries in comma-format arrays under encodeValuesOnlyMEDIUM5.328%ileMicrosoft2026-05-12
CVE-2026-39835Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/sshMEDIUM5.340%ileMicrosoft2026-05-12
CVE-2026-46598Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agentMEDIUM5.334%ileMicrosoft2026-05-12
CVE-2026-6402webpack-dev-server vulnerable to cross-origin source code exposure on non-HTTPS originsMEDIUM5.312%ileMicrosoft2026-05-12
CVE-2026-48525PyJWT: Unauthenticated DoS via unbounded Base64URL decoding of unused payload segment in b64=false detached JWSMEDIUM5.330%ileMicrosoft2026-05-12
CVE-2026-43868Apache Thrift: Rust implementation vulnerable to CVE-2020-13949 patternMEDIUM5.350%ileMicrosoft2026-05-12
CVE-2026-34032Apache HTTP Server: mod_proxy_ajp: Heap Buffer Over-Read Due to Missing Null-Termination Check (ajp_msg_get_string)MEDIUM5.339%ileMicrosoft2026-05-12
CVE-2026-33007Apache HTTP Server: mod_authn_socache crashMEDIUM5.341%ileMicrosoft2026-05-12
CVE-2026-33857Apache HTTP Server: Off-by-one OOB reads in AJP getter functionsMEDIUM5.332%ileMicrosoft2026-05-12
CVE-2026-39819Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/goMEDIUM5.38%ileMicrosoft2026-05-12
CVE-2026-39825ReverseProxy forwards queries with more than urlmaxqueryparams parameters in net/http/httputilMEDIUM5.332%ileMicrosoft2026-05-12
CVE-2026-7168cross-proxy Digest auth state leakMEDIUM5.338%ileMicrosoft2026-05-12
CVE-2026-4891CVE-2026-4891MEDIUM5.393%ileMicrosoft2026-05-12
CVE-2026-8368LWP::UserAgent versions before 6.83 for Perl leak Authorization and Proxy-Authorization headers on cross-origin redirectMEDIUM5.318%ileMicrosoft2026-05-12
CVE-2026-42534Jostle logic bypass degrades resolution performanceMEDIUM5.345%ileMicrosoft2026-05-12
CVE-2026-44390Unbounded name compression in certain cases causes degradation of serviceMEDIUM5.347%ileMicrosoft2026-05-12
CVE-2026-42015Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handlingMEDIUM5.351%ileMicrosoft2026-05-12
CVE-2026-42934NGINX ngx_http_charset_module vulnerabilityMEDIUM4.851%ileMicrosoft2026-05-12
CVE-2026-6324Libsoup: libsoup: http request smuggling via unsigned to signed conversion errorMEDIUM4.855%ileMicrosoft2026-05-12
CVE-2026-33006Apache HTTP Server: mod_auth_digest timing attackMEDIUM4.843%ileMicrosoft2026-05-12
CVE-2026-40701NGINX ngx_http_ssl_module vulnerabilityMEDIUM4.849%ileMicrosoft2026-05-12
CVE-2026-43617Rsync < 3.4.3 Authorization Bypass via Hostname ResolutionMEDIUM4.820%ileMicrosoft2026-05-12
CVE-2026-46011media: mtk-jpeg: fix use-after-free in release path due to uncancelled workMEDIUM4.73%ileMicrosoft2026-05-12
CVE-2026-46110net: stmmac: Prevent NULL deref when RX memory exhaustedMEDIUM4.740%ileMicrosoft2026-05-12
CVE-2026-44899Mistune Image Directive CSS Injection VulnerabilityMEDIUM4.714%ileMicrosoft2026-05-12
CVE-2026-46021thermal: core: Fix thermal zone governor cleanup issuesMEDIUM4.53%ileMicrosoft2026-05-12
CVE-2026-43895jq: Embedded NUL in jq import paths causes local redaction-policy bypass and preserves sensitive fields in published artMEDIUM4.45%ileMicrosoft2026-05-12
CVE-2026-45986crypto: ccree - fix a memory leak in cc_mac_digest()MEDIUM4.42%ileMicrosoft2026-05-12
CVE-2026-45736ws: Uninitialized memory disclosureMEDIUM4.451%ileMicrosoft2026-05-12
CVE-2026-32209Windows Filtering Platform (WFP) Security Feature Bypass VulnerabilityMEDIUM4.410%ileMicrosoft2026-05-12
CVE-2026-41100Microsoft 365 Copilot for Android Spoofing VulnerabilityMEDIUM4.416%ileMicrosoft2026-05-12
CVE-2026-10028Glib-networking: infinite loop in glib-networking gnutls backend allows remote denial of service via circular certificatMEDIUM4.38%ileMicrosoft2026-05-12
CVE-2026-6667PgBouncer missing authorization check in KILL_CLIENT admin commandMEDIUM4.321%ileMicrosoft2026-05-12
CVE-2026-6474PostgreSQL timeofday() can disclose portions of server memoryMEDIUM4.312%ileMicrosoft2026-05-12
CVE-2026-40421Microsoft Word Information Disclosure VulnerabilityMEDIUM4.346%ileMicrosoft2026-05-12
CVE-2026-32175.NET Core Tampering VulnerabilityMEDIUM4.350%ileMicrosoft2026-05-12
CVE-2026-35429Microsoft Edge (Chromium-based) for Android Spoofing VulnerabilityMEDIUM4.340%ileMicrosoft2026-05-12
CVE-2026-40416Microsoft Edge (Chromium-based) for Android Spoofing VulnerabilityMEDIUM4.328%ileMicrosoft2026-05-12
CVE-2026-48522PyJWKClient: missing scheme allowlist enables SSRF + token forgery via file://, ftp://, data: schemesMEDIUM4.213%ileMicrosoft2026-05-12
CVE-2026-46004ALSA: caiaq: Handle probe errors properlyMEDIUM4.03%ileMicrosoft2026-05-12
CVE-2026-47104libusb < 1.0.30 Out-of-Bounds Read in parse_iad_array()MEDIUM4.03%ileMicrosoft2026-05-12
CVE-2026-46232HID: playstation: Clamp num_touch_reportsMEDIUM4.017%ileMicrosoft2026-05-12
CVE-2026-46194f2fs: fix node_cnt race between extent node destroy and writebackMEDIUM4.01%ileMicrosoft2026-05-12
CVE-2026-46143ASoC: qcom: q6apm-lpass-dai: Fix multiple graph opensMEDIUM4.03%ileMicrosoft2026-05-12
CVE-2026-46169hfsplus: fix uninit-value by validating catalog record sizeMEDIUM4.03%ileMicrosoft2026-05-12
CVE-2026-45498Microsoft Defender Denial of Service VulnerabilityMEDIUM4.099%ileMicrosoft2026-05-12
CVE-2026-40528OpenSC < 0.27.0 Buffer Overrun in do_key_value() via profile.cLOW3.84%ileMicrosoft2026-05-12
CVE-2026-40510OpenSC < 0.27.0-rc1 Stack Buffer Overflow via piv_process_history() in card-piv.cLOW3.812%ileMicrosoft2026-05-12
CVE-2026-6638PostgreSQL REFRESH PUBLICATION allows SQL injection via table nameLOW3.78%ileMicrosoft2026-05-12
CVE-2026-48524PyJWT: PyJWKClient unbounded JWKS endpoint requests via attacker-controlled kid values (DoS)LOW3.726%ileMicrosoft2026-05-12
CVE-2026-43964Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and process crash vLOW3.734%ileMicrosoft2026-05-12
CVE-2026-46483Vim: Command injection in tar#Vimuntar via missing shellescape {special} flagLOW3.643%ileMicrosoft2026-05-12
CVE-2026-45803gh: GitHub Actions log output in `gh run view` allows terminal escape sequence injectionLOW3.511%ileMicrosoft2026-05-12
CVE-2026-46023dm mirror: fix integer overflow in create_dirty_log()LOW3.43%ileMicrosoft2026-05-12
CVE-2026-45893apparmor: Fix & Optimize table creation from possibly unaligned memoryLOW3.33%ileMicrosoft2026-05-12
CVE-2026-46123Bluetooth: virtio_bt: clamp rx length before skb_putLOW3.34%ileMicrosoft2026-05-12
CVE-2026-45232Rsync < 3.4.3 Off-by-One Stack Write via HTTP ProxyLOW3.126%ileMicrosoft2026-05-12
CVE-2026-45186In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service viaLOW2.936%ileMicrosoft2026-05-12
CVE-2026-46044ipmi:ssif: Clean up kthread on errorsLOW1.92%ileMicrosoft2026-05-12
CVE-2026-31769gpib: fix use-after-free in IO ioctl handlersUNKNOWN—3%ileMicrosoft2026-05-12
CVE-2026-43021Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once failsUNKNOWN—1%ileMicrosoft2026-05-12
CVE-2026-43045mshv: Fix error handling in mshv_region_pinUNKNOWN—1%ileMicrosoft2026-05-12
CVE-2026-33190CoreDNS TSIG authentication bypass on encrypted DNS transportsUNKNOWN—30%ileMicrosoft2026-05-12
CVE-2026-32936CoreDNS DoH GET path missing size validation causes CPU and memory amplificationUNKNOWN—48%ileMicrosoft2026-05-12
CVE-2026-35579CoreDNS TSIG authentication bypass on gRPC, QUIC, DoH, and DoH3 transportsUNKNOWN—41%ileMicrosoft2026-05-12
CVE-2026-41673xmldom: Denial of service via uncontrolled recursion in XML serializationUNKNOWN—47%ileMicrosoft2026-05-12
CVE-2026-43474fs: init flags_valid before calling vfs_fileattr_getUNKNOWN—2%ileMicrosoft2026-05-12
CVE-2025-71302drm/panthor: fix for dma-fence safe access rulesUNKNOWN—5%ileMicrosoft2026-05-12
CVE-2026-43320drm/amd/display: Fix dsc eDP issueUNKNOWN—2%ileMicrosoft2026-05-12
CVE-2026-43443ASoC: amd: acp-mach-common: Add missing error check for clock acquisitionUNKNOWN—1%ileMicrosoft2026-05-12
CVE-2026-43400drm/amdgpu: add upper bound check on user inputs in signal ioctlUNKNOWN—3%ileMicrosoft2026-05-12
CVE-2026-43398drm/amdgpu: add upper bound check on user inputs in wait ioctlUNKNOWN—3%ileMicrosoft2026-05-12
CVE-2026-43421usb: gadget: f_ncm: Fix net_device lifecycle with device_moveUNKNOWN—2%ileMicrosoft2026-05-12
CVE-2026-41889pgx: SQL Injection via placeholder confusion with dollar quoted string literalsUNKNOWN—28%ileMicrosoft2026-05-12
CVE-2026-42256net-imap: Denial of service via high iteration count for `SCRAM-*` authenticationUNKNOWN—22%ileMicrosoft2026-05-12
CVE-2026-42246net-imap vulnerable to STARTTLS stripping via invalid response timingUNKNOWN—24%ileMicrosoft2026-05-12
CVE-2026-7261SoapServer session-persisted object use-after-free via SOAP header faultUNKNOWN—22%ileMicrosoft2026-05-12
CVE-2026-7568Signed integer overflow in metaphone()UNKNOWN—37%ileMicrosoft2026-05-12
CVE-2026-40612jq: Stack overflow via unbounded recursion in jv_containsUNKNOWN—6%ileMicrosoft2026-05-12
CVE-2026-6210Type confusion and heap-buffer-overflow in Qt SVG marker handling causing application crashUNKNOWN—20%ileMicrosoft2026-05-12
CVE-2026-44777jq: stack overflow in module loading on mutual `include`UNKNOWN—6%ileMicrosoft2026-05-12
CVE-2026-44307Mako: Path traversal via backslash URI on Windows in TemplateLookupUNKNOWN—46%ileMicrosoft2026-05-12
CVE-2026-7210The expat and elementtree parsers use insufficient entropy for XML hash-flooding protectionUNKNOWN—53%ileMicrosoft2026-05-12
CVE-2026-43969Cookie Request Header Injection via Unvalidated Encoder in cow_cookie:cookie/1UNKNOWN—4%ileMicrosoft2026-05-12
CVE-2026-44662rust-openssl: Heap buffer overflow when encrypting with AES key-wrap-with-paddingUNKNOWN—7%ileMicrosoft2026-05-12
CVE-2026-44431urllib3: Sensitive headers forwarded across origins in proxied low-level redirectsUNKNOWN—26%ileMicrosoft2026-05-12
CVE-2026-43970Decompression Bomb in cow_spdy:inflate/2 Allows Memory Exhaustion via Crafted SPDY FrameUNKNOWN—41%ileMicrosoft2026-05-12
CVE-2025-14575Uncontrolled Search Path Element in Qt Network OpenSSL TLS backend allows rogue CA certificate loadingUNKNOWN—1%ileMicrosoft2026-05-12
CVE-2026-5222Cargo can be coerced to share credentials between registriesUNKNOWN—31%ileMicrosoft2026-05-12
CVE-2026-44844eml_parser: Recursion DoS via nested message/rfc822 attachmentsUNKNOWN—32%ileMicrosoft2026-05-12
CVE-2026-42250Off-by-One Leading to Out-of-Bounds Write in bzip2UNKNOWN—3%ileMicrosoft2026-05-12
CVE-2026-42790nameConstraints DNS bypass via subject CommonName fallback in public_key hostname verificationUNKNOWN—26%ileMicrosoft2026-05-12
CVE-2026-43022Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if existsUNKNOWN—1%ileMicrosoft2026-05-12
CVE-2026-33489CoreDNS transfer plugin subzone ACL bypass via lexicographic zone comparisonUNKNOWN—32%ileMicrosoft2026-05-12
CVE-2026-32934CoreDNS DNS-over-QUIC unbounded goroutine growth leads to denial of serviceUNKNOWN—38%ileMicrosoft2026-05-12
CVE-2026-41672xmldom: XML node injection through unvalidated comment serializationUNKNOWN—29%ileMicrosoft2026-05-12
CVE-2026-41674xmldom: XML injection through unvalidated DocumentType serializationUNKNOWN—37%ileMicrosoft2026-05-12
CVE-2026-41675xmldom: XML node injection through unvalidated processing instruction serializationUNKNOWN—34%ileMicrosoft2026-05-12
CVE-2026-25243redis-server RESTORE invalid memory access may allow remote code executionUNKNOWN—87%ileMicrosoft2026-05-12
CVE-2026-23631redis-server Lua use-after-free may allow remote code executionUNKNOWN—85%ileMicrosoft2026-05-12
CVE-2026-23479redis-server use-after-free in unblock client flow may allow remote code executionUNKNOWN—67%ileMicrosoft2026-05-12
CVE-2026-25588RedisTimeSeries RESTORE invalid memory access may allow remote code executionUNKNOWN—62%ileMicrosoft2026-05-12
CVE-2026-25589RedisBloom RESTORE invalid memory access may allow remote code executionUNKNOWN—69%ileMicrosoft2026-05-12
CVE-2026-43317most: core: fix leak on early registration failureUNKNOWN—2%ileMicrosoft2026-05-12
CVE-2026-44656Vim: OS Command Injection via 'path' completionUNKNOWN—57%ileMicrosoft2026-05-12
CVE-2026-33079Mistune ReDoS in LINK_TITLE_RE allows denial of service with crafted Markdown titlesUNKNOWN—41%ileMicrosoft2026-05-12
CVE-2026-42257net-imap: Command Injection via "raw" arguments to multiple commandsUNKNOWN—35%ileMicrosoft2026-05-12
CVE-2026-42258net-imap: Command Injection via unvalidated Symbol inputsUNKNOWN—52%ileMicrosoft2026-05-12
CVE-2026-7258Out-of-bounds read in urldecode() on NetBSDUNKNOWN—26%ileMicrosoft2026-05-12
CVE-2026-6722Use-After-Free in SOAP using Apache mapUNKNOWN—56%ileMicrosoft2026-05-12
CVE-2026-6735XSS within PHP-FPM status endpointUNKNOWN—11%ileMicrosoft2026-05-12
CVE-2026-7262NULL pointer dereference in SOAP apache:Map decoder with missing <value>UNKNOWN—52%ileMicrosoft2026-05-12
CVE-2025-14179SQL injection in pdo_firebird via NUL bytes in quoted stringsUNKNOWN—36%ileMicrosoft2026-05-12
CVE-2026-7259Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init()UNKNOWN—10%ileMicrosoft2026-05-12
CVE-2026-41257jq: Signed-int overflow in `stack_reallocate` (jq VM stack)UNKNOWN—4%ileMicrosoft2026-05-12
CVE-2026-8295Integer overflow in simdjsonUNKNOWN—20%ileMicrosoft2026-05-12
CVE-2026-7790Unbounded chunk-size hex digits in cowlib cause quadratic CPU and memory DoSUNKNOWN—35%ileMicrosoft2026-05-12
CVE-2026-43968CR Injection in SSE Encoder Enables Event Splitting via cow_sse:event/1UNKNOWN—18%ileMicrosoft2026-05-12
CVE-2026-8328FTP PASV SSRF, ftpcp() does not use actual peer address, trusts server-supplied PASV host addressUNKNOWN—37%ileMicrosoft2026-05-12
CVE-2026-40622Another 'ghost domain names' attack variantUNKNOWN—3%ileMicrosoft2026-05-12
CVE-2026-8466Unbounded buffer accumulation in multipart header parsing causes denial of service in cowboyUNKNOWN—31%ileMicrosoft2026-05-12
CVE-2026-5223Crates in third party registries can override the cached source of other cratesUNKNOWN—22%ileMicrosoft2026-05-12
CVE-2026-44896Mistune: XSS via unescaped figclass/figwidth in Figure directiveUNKNOWN—10%ileMicrosoft2026-05-12
CVE-2026-45570go-git: Improper single-quote escaping in go-git SSH transportUNKNOWN—29%ileMicrosoft2026-05-12
CVE-2026-41184ServiceAccount token disclosure via install-cni container logsUNKNOWN—40%ileMicrosoft2026-05-12
CVE-2026-42789Non-CA certificate accepted as intermediate issuer in public_key path validationUNKNOWN—26%ileMicrosoft2026-05-12
CVE-2026-44839RabbitMQ: Unsanitized vhost names allow for XSS in management UIUNKNOWN—8%ileMicrosoft2026-05-12
CVE-2026-9974Chromium: CVE-2026-9974 Out of bounds write in GPUUNKNOWN—11%ileMicrosoft2026-05-12
CVE-2026-7898Chromium: CVE-2026-7898 Use after free in ChromotingUNKNOWN—23%ileMicrosoft2026-05-12
CVE-2026-7899Chromium: CVE-2026-7899 Out of bounds read and write in V8UNKNOWN—22%ileMicrosoft2026-05-12
CVE-2026-7897Chromium: CVE-2026-7897 Use after free in MobileUNKNOWN—23%ileMicrosoft2026-05-12
CVE-2026-7896Chromium: CVE-2026-7896 Integer overflow in BlinkUNKNOWN—20%ileMicrosoft2026-05-12
CVE-2026-7998Chromium: CVE-2026-7998 Insufficient validation of untrusted input in DialogUNKNOWN—9%ileMicrosoft2026-05-12
CVE-2026-7996Chromium: CVE-2026-7996 Insufficient validation of untrusted input in SSLUNKNOWN—7%ileMicrosoft2026-05-12
CVE-2026-7994Chromium: CVE-2026-7994 Inappropriate implementation in ChromotingUNKNOWN—1%ileMicrosoft2026-05-12
CVE-2026-7997Chromium: CVE-2026-7997 Insufficient validation of untrusted input in UpdaterUNKNOWN—0%ileMicrosoft2026-05-12
CVE-2026-7995Chromium: CVE-2026-7995 Out of bounds read in AdFilterUNKNOWN—13%ileMicrosoft2026-05-12
CVE-2026-7992Chromium: CVE-2026-7992 Insufficient validation of untrusted input in UIUNKNOWN—13%ileMicrosoft2026-05-12
CVE-2026-7977Chromium: CVE-2026-7977 Inappropriate implementation in CanvasUNKNOWN—5%ileMicrosoft2026-05-12
CVE-2026-7976Chromium: CVE-2026-7976 Use after free in ViewsUNKNOWN—8%ileMicrosoft2026-05-12
CVE-2026-7975Chromium: CVE-2026-7975 Use after free in DevToolsUNKNOWN—11%ileMicrosoft2026-05-12
CVE-2026-7974Chromium: CVE-2026-7974 Use after free in BlinkUNKNOWN—19%ileMicrosoft2026-05-12
CVE-2026-7973Chromium: CVE-2026-7973 Integer overflow in DawnUNKNOWN—13%ileMicrosoft2026-05-12
CVE-2026-7971Chromium: CVE-2026-7971 Inappropriate implementation in ORBUNKNOWN—8%ileMicrosoft2026-05-12
CVE-2026-7972Chromium: CVE-2026-7972 Uninitialized Use in GPUUNKNOWN—15%ileMicrosoft2026-05-12
CVE-2026-7970Chromium: CVE-2026-7970 Use after free in TopChromeUNKNOWN—11%ileMicrosoft2026-05-12
CVE-2026-7969Chromium: CVE-2026-7969 Integer overflow in NetworkUNKNOWN—13%ileMicrosoft2026-05-12
CVE-2026-7968Chromium: CVE-2026-7968 Insufficient validation of untrusted input in CORSUNKNOWN—12%ileMicrosoft2026-05-12
CVE-2026-7967Chromium: CVE-2026-7967 Insufficient validation of untrusted input in NavigationUNKNOWN—15%ileMicrosoft2026-05-12
CVE-2026-7966Chromium: CVE-2026-7966 Insufficient validation of untrusted input in SiteIsolationUNKNOWN—12%ileMicrosoft2026-05-12
CVE-2026-7964Chromium: CVE-2026-7964 Insufficient validation of untrusted input in FileSystemUNKNOWN—7%ileMicrosoft2026-05-12
CVE-2026-7963Chromium: CVE-2026-7963 Inappropriate implementation in ServiceWorkerUNKNOWN—13%ileMicrosoft2026-05-12
CVE-2026-7993Chromium: CVE-2026-7993 Insufficient validation of untrusted input in PaymentsUNKNOWN—8%ileMicrosoft2026-05-12
CVE-2026-7962Chromium: CVE-2026-7962 Insufficient policy enforcement in DirectSocketsUNKNOWN—7%ileMicrosoft2026-05-12
CVE-2026-7991Chromium: CVE-2026-7991 Use after free in UIUNKNOWN—13%ileMicrosoft2026-05-12
CVE-2026-7960Chromium: CVE-2026-7960 Race in SpeechUNKNOWN—7%ileMicrosoft2026-05-12
CVE-2026-7961Chromium: CVE-2026-7961 Insufficient validation of untrusted input in PermissionsUNKNOWN—7%ileMicrosoft2026-05-12
CVE-2026-7959Chromium: CVE-2026-7959 Inappropriate implementation in NavigationUNKNOWN—9%ileMicrosoft2026-05-12
CVE-2026-7958Chromium: CVE-2026-7958 Inappropriate implementation in ServiceWorkerUNKNOWN—4%ileMicrosoft2026-05-12
CVE-2026-7990Chromium: CVE-2026-7990 Insufficient validation of untrusted input in UpdaterUNKNOWN—2%ileMicrosoft2026-05-12
CVE-2026-7957Chromium: CVE-2026-7957 Out of bounds write in MediaUNKNOWN—21%ileMicrosoft2026-05-12
CVE-2026-7956Chromium: CVE-2026-7956 Use after free in NavigationUNKNOWN—13%ileMicrosoft2026-05-12
CVE-2026-7955Chromium: CVE-2026-7955 Uninitialized Use in GPUUNKNOWN—15%ileMicrosoft2026-05-12
CVE-2026-7954Chromium: CVE-2026-7954 Race in Shared StorageUNKNOWN—5%ileMicrosoft2026-05-12
CVE-2026-7953Chromium: CVE-2026-7953 Insufficient validation of untrusted input in OmniboxUNKNOWN—7%ileMicrosoft2026-05-12
CVE-2026-7965Chromium: CVE-2026-7965 Insufficient validation of untrusted input in DevToolsUNKNOWN—11%ileMicrosoft2026-05-12
CVE-2026-7952Chromium: CVE-2026-7952 Insufficient policy enforcement in ExtensionsUNKNOWN—7%ileMicrosoft2026-05-12
CVE-2026-7951Chromium: CVE-2026-7951 Out of bounds write in WebRTCUNKNOWN—31%ileMicrosoft2026-05-12
CVE-2026-7949Chromium: CVE-2026-7949 Out of bounds read in SkiaUNKNOWN—8%ileMicrosoft2026-05-12
CVE-2026-7950Chromium: CVE-2026-7950 Out of bounds read and write in GFXUNKNOWN—7%ileMicrosoft2026-05-12
CVE-2026-7948Chromium: CVE-2026-7948 Race in ChromotingUNKNOWN—3%ileMicrosoft2026-05-12
CVE-2026-7999Chromium: CVE-2026-7999 Inappropriate implementation in V8UNKNOWN—6%ileMicrosoft2026-05-12
CVE-2026-7947Chromium: CVE-2026-7947 Insufficient validation of untrusted input in NetworkUNKNOWN—8%ileMicrosoft2026-05-12
CVE-2026-7946Chromium: CVE-2026-7946 Insufficient policy enforcement in WebUIUNKNOWN—10%ileMicrosoft2026-05-12
CVE-2026-7945Chromium: CVE-2026-7945 Insufficient validation of untrusted input in COOPUNKNOWN—10%ileMicrosoft2026-05-12
CVE-2026-7944Chromium: CVE-2026-7944 Insufficient validation of untrusted input in Persistent CacheUNKNOWN—10%ileMicrosoft2026-05-12
CVE-2026-7943Chromium: CVE-2026-7943 Insufficient validation of untrusted input in ANGLEUNKNOWN—6%ileMicrosoft2026-05-12
CVE-2026-7942Chromium: CVE-2026-7942 Integer overflow in ANGLEUNKNOWN—9%ileMicrosoft2026-05-12
CVE-2026-7941Chromium: CVE-2026-7941 Insufficient validation of untrusted input in MobileUNKNOWN—2%ileMicrosoft2026-05-12
CVE-2026-7940Chromium: CVE-2026-7940 Use after free in V8UNKNOWN—10%ileMicrosoft2026-05-12
CVE-2026-7939Chromium: CVE-2026-7939 Inappropriate implementation in SanitizerAPIUNKNOWN—6%ileMicrosoft2026-05-12
CVE-2026-7938Chromium: CVE-2026-7938 Use after free in CSSUNKNOWN—19%ileMicrosoft2026-05-12
CVE-2026-7986Chromium: CVE-2026-7986 Insufficient policy enforcement in AutofillUNKNOWN—5%ileMicrosoft2026-05-12
CVE-2026-7937Chromium: CVE-2026-7937 Insufficient policy enforcement in DevToolsUNKNOWN—4%ileMicrosoft2026-05-12
CVE-2026-7936Chromium: CVE-2026-7936 Object lifecycle issue in V8UNKNOWN——Microsoft2026-05-12
CVE-2026-7989Chromium: CVE-2026-7989 Insufficient data validation in DataTransferUNKNOWN—6%ileMicrosoft2026-05-12
CVE-2026-7988Chromium: CVE-2026-7988 Type Confusion in WebRTCUNKNOWN—23%ileMicrosoft2026-05-12
CVE-2026-7987Chromium: CVE-2026-7987 Use after free in WebRTCUNKNOWN—26%ileMicrosoft2026-05-12
CVE-2026-7985Chromium: CVE-2026-7985 Use after free in GPUUNKNOWN—11%ileMicrosoft2026-05-12
CVE-2026-7984Chromium: CVE-2026-7984 Use after free in ReadingModeUNKNOWN—19%ileMicrosoft2026-05-12
CVE-2026-7983Chromium: CVE-2026-7983 Out of bounds read in DawnUNKNOWN—9%ileMicrosoft2026-05-12
CVE-2026-7981Chromium: CVE-2026-7981 Out of bounds read in CodecsUNKNOWN—10%ileMicrosoft2026-05-12
CVE-2026-7980Chromium: CVE-2026-7980 Use after free in WebAudioUNKNOWN—26%ileMicrosoft2026-05-12
CVE-2026-7978Chromium: CVE-2026-7978 Inappropriate implementation in CompanionUNKNOWN—15%ileMicrosoft2026-05-12
CVE-2026-7979Chromium: CVE-2026-7979 Inappropriate implementation in MediaUNKNOWN—5%ileMicrosoft2026-05-12
CVE-2026-7982Chromium: CVE-2026-7982 Uninitialized Use in WebCodecsUNKNOWN—15%ileMicrosoft2026-05-12
CVE-2026-7934Chromium: CVE-2026-7934 Insufficient validation of untrusted input in Popup BlockerUNKNOWN—7%ileMicrosoft2026-05-12
CVE-2026-7933Chromium: CVE-2026-7933 Out of bounds read in WebCodecsUNKNOWN—8%ileMicrosoft2026-05-12
CVE-2026-7935Chromium: CVE-2026-7935 Inappropriate implementation in SpeechUNKNOWN—9%ileMicrosoft2026-05-12
CVE-2026-7932Chromium: CVE-2026-7932 Insufficient policy enforcement in DownloadsUNKNOWN—2%ileMicrosoft2026-05-12
CVE-2026-7929Chromium: CVE-2026-7929 Use after free in MediaRecordingUNKNOWN—16%ileMicrosoft2026-05-12
CVE-2026-7931Chromium: CVE-2026-7931 Insufficient validation of untrusted input in iOSUNKNOWN—9%ileMicrosoft2026-05-12
CVE-2026-7930Chromium: CVE-2026-7930 Insufficient validation of untrusted input in CookiesUNKNOWN——Microsoft2026-05-12
CVE-2026-7927Chromium: CVE-2026-7927 Type Confusion in RuntimeUNKNOWN—21%ileMicrosoft2026-05-12
CVE-2026-7928Chromium: CVE-2026-7928 Use after free in WebRTCUNKNOWN—26%ileMicrosoft2026-05-12
CVE-2026-7926Chromium: CVE-2026-7926 Use after free in PresentationAPIUNKNOWN—19%ileMicrosoft2026-05-12
CVE-2026-7925Chromium: CVE-2026-7925 Use after free in ChromotingUNKNOWN—2%ileMicrosoft2026-05-12
CVE-2026-7924Chromium: CVE-2026-7924 Uninitialized Use in DawnUNKNOWN—15%ileMicrosoft2026-05-12
CVE-2026-7923Chromium: CVE-2026-7923 Out of bounds write in SkiaUNKNOWN—11%ileMicrosoft2026-05-12
CVE-2026-7922Chromium: CVE-2026-7922 Use after free in ServiceWorkerUNKNOWN—11%ileMicrosoft2026-05-12
CVE-2026-7921Chromium: CVE-2026-7921 Use after free in PasswordsUNKNOWN—19%ileMicrosoft2026-05-12
CVE-2026-7920Chromium: CVE-2026-7920 Use after free in SkiaUNKNOWN—11%ileMicrosoft2026-05-12
CVE-2026-7918Chromium: CVE-2026-7918 Use after free in GPUUNKNOWN—11%ileMicrosoft2026-05-12
CVE-2026-7917Chromium: CVE-2026-7917 Use after free in FullscreenUNKNOWN—11%ileMicrosoft2026-05-12
CVE-2026-7919Chromium: CVE-2026-7919 Use after free in AuraUNKNOWN—11%ileMicrosoft2026-05-12
CVE-2026-7916Chromium: CVE-2026-7916 Insufficient data validation in InterestGroupsUNKNOWN—13%ileMicrosoft2026-05-12
CVE-2026-7915Chromium: CVE-2026-7915 Insufficient data validation in DevToolsUNKNOWN—16%ileMicrosoft2026-05-12
CVE-2026-7914Chromium: CVE-2026-7914 Type Confusion in AccessibilityUNKNOWN—13%ileMicrosoft2026-05-12
CVE-2026-7913Chromium: CVE-2026-7913 Insufficient policy enforcement in DevToolsUNKNOWN—2%ileMicrosoft2026-05-12
CVE-2026-7912Chromium: CVE-2026-7912 Integer overflow in GPUUNKNOWN—5%ileMicrosoft2026-05-12
CVE-2026-7911Chromium: CVE-2026-7911 Use after free in AuraUNKNOWN—11%ileMicrosoft2026-05-12
CVE-2026-7909Chromium: CVE-2026-7909 Inappropriate implementation in ServiceWorkerUNKNOWN—9%ileMicrosoft2026-05-12
CVE-2026-7910Chromium: CVE-2026-7910 Use after free in ViewsUNKNOWN—13%ileMicrosoft2026-05-12
CVE-2026-7908Chromium: CVE-2026-7908 Use after free in FullscreenUNKNOWN—13%ileMicrosoft2026-05-12
CVE-2026-7907Chromium: CVE-2026-7907 Use after free in DOMUNKNOWN—19%ileMicrosoft2026-05-12
CVE-2026-7905Chromium: CVE-2026-7905 Insufficient validation of untrusted input in MediaUNKNOWN—13%ileMicrosoft2026-05-12
CVE-2026-7906Chromium: CVE-2026-7906 Use after free in SVGUNKNOWN—19%ileMicrosoft2026-05-12
CVE-2026-7904Chromium: CVE-2026-7904 Out of bounds read in FontsUNKNOWN—9%ileMicrosoft2026-05-12
CVE-2026-7903Chromium: CVE-2026-7903 Integer overflow in ANGLEUNKNOWN—13%ileMicrosoft2026-05-12
CVE-2026-7902Chromium: CVE-2026-7902 Out of bounds memory access in V8UNKNOWN—27%ileMicrosoft2026-05-12
CVE-2026-7901Chromium: CVE-2026-7901 Use after free in ANGLEUNKNOWN—19%ileMicrosoft2026-05-12
CVE-2026-7900Chromium: CVE-2026-7900 Heap buffer overflow in ANGLEUNKNOWN—14%ileMicrosoft2026-05-12
CVE-2026-8020Chromium: CVE-2026-8020 Uninitialized Use in GPUUNKNOWN—11%ileMicrosoft2026-05-12
CVE-2026-8019Chromium: CVE-2026-8019 Insufficient policy enforcement in WebAppUNKNOWN—6%ileMicrosoft2026-05-12
CVE-2026-8018Chromium: CVE-2026-8018 Insufficient policy enforcement in DevToolsUNKNOWN—17%ileMicrosoft2026-05-12
CVE-2026-8022Chromium: CVE-2026-8022 Inappropriate implementation in MHTMLUNKNOWN—5%ileMicrosoft2026-05-12
CVE-2026-8017Chromium: CVE-2026-8017 Side-channel information leakage in MediaUNKNOWN—4%ileMicrosoft2026-05-12
CVE-2026-8021Chromium: CVE-2026-8021 Script injection in UIUNKNOWN—5%ileMicrosoft2026-05-12
CVE-2026-8014Chromium: CVE-2026-8014 Inappropriate implementation in PreloadUNKNOWN—6%ileMicrosoft2026-05-12
CVE-2026-8015Chromium: CVE-2026-8015 Inappropriate implementation in MediaUNKNOWN—6%ileMicrosoft2026-05-12
CVE-2026-8016Chromium: CVE-2026-8016 Use after free in WebRTCUNKNOWN—23%ileMicrosoft2026-05-12
CVE-2026-8012Chromium: CVE-2026-8012 Inappropriate implementation in MHTMLUNKNOWN—4%ileMicrosoft2026-05-12
CVE-2026-8011Chromium: CVE-2026-8011 Insufficient policy enforcement in SearchUNKNOWN—6%ileMicrosoft2026-05-12
CVE-2026-8013Chromium: CVE-2026-8013 Insufficient validation of untrusted input in FedCMUNKNOWN—6%ileMicrosoft2026-05-12
CVE-2026-8009Chromium: CVE-2026-8009 Inappropriate implementation in CastUNKNOWN—2%ileMicrosoft2026-05-12
CVE-2026-8010Chromium: CVE-2026-8010 Insufficient validation of untrusted input in SiteIsolationUNKNOWN—4%ileMicrosoft2026-05-12
CVE-2026-8008Chromium: CVE-2026-8008 Inappropriate implementation in DevToolsUNKNOWN—2%ileMicrosoft2026-05-12
CVE-2026-8007Chromium: CVE-2026-8007 Insufficient validation of untrusted input in CastUNKNOWN—9%ileMicrosoft2026-05-12
CVE-2026-8006Chromium: CVE-2026-8006 Insufficient policy enforcement in DevToolsUNKNOWN—2%ileMicrosoft2026-05-12
CVE-2026-8005Chromium: CVE-2026-8005 Insufficient validation of untrusted input in CastUNKNOWN—1%ileMicrosoft2026-05-12
CVE-2026-8002Chromium: CVE-2026-8002 Use after free in AudioUNKNOWN—16%ileMicrosoft2026-05-12
CVE-2026-8004Chromium: CVE-2026-8004 Insufficient policy enforcement in DevToolsUNKNOWN—3%ileMicrosoft2026-05-12
CVE-2026-8003Chromium: CVE-2026-8003 Insufficient validation of untrusted input in TabGroupsUNKNOWN—4%ileMicrosoft2026-05-12
CVE-2026-8000Chromium: CVE-2026-8000 Insufficient validation of untrusted input in ChromeDriverUNKNOWN—16%ileMicrosoft2026-05-12
CVE-2026-8001Chromium: CVE-2026-8001 Use after free in PrintingUNKNOWN—8%ileMicrosoft2026-05-12
CVE-2026-8520Chromium: CVE-2026-8520 Race in PaymentsUNKNOWN—6%ileMicrosoft2026-05-12
CVE-2026-8564Chromium: CVE-2026-8564 Incorrect security UI in DownloadsUNKNOWN—6%ileMicrosoft2026-05-12
CVE-2026-8583Chromium: CVE-2026-8583 Insufficient policy enforcement in WebXRUNKNOWN—8%ileMicrosoft2026-05-12
CVE-2026-9111Chromium: CVE-2026-9111 Use after free in WebRTCUNKNOWN—53%ileMicrosoft2026-05-12
CVE-2026-9110Chromium: CVE-2026-9110 Inappropriate implementation in UIUNKNOWN—26%ileMicrosoft2026-05-12
CVE-2026-9112Chromium: CVE-2026-9112 Use after free in GPUUNKNOWN—32%ileMicrosoft2026-05-12
CVE-2026-9113Chromium: CVE-2026-9113 Out of bounds read in GPUUNKNOWN—12%ileMicrosoft2026-05-12
CVE-2026-9115Chromium: CVE-2026-9115 Insufficient policy enforcement in Service WorkerUNKNOWN—13%ileMicrosoft2026-05-12
CVE-2026-9114Chromium: CVE-2026-9114 Use after free in QUICUNKNOWN—29%ileMicrosoft2026-05-12
CVE-2026-10011Chromium: CVE-2026-10011 Inappropriate implementation in SkiaUNKNOWN—6%ileMicrosoft2026-05-12
CVE-2026-10009Chromium: CVE-2026-10009 Integer overflow in SkiaUNKNOWN—13%ileMicrosoft2026-05-12
CVE-2026-10012Chromium: CVE-2026-10012 Use after free in SkiaUNKNOWN—7%ileMicrosoft2026-05-12
CVE-2026-10013Chromium: CVE-2026-10013 Use after free in WebCodecsUNKNOWN—24%ileMicrosoft2026-05-12
CVE-2026-10015Chromium: CVE-2026-10015 Integer overflow in WTFUNKNOWN—17%ileMicrosoft2026-05-12
CVE-2026-10016Chromium: CVE-2026-10016 Use after free in DOMUNKNOWN—17%ileMicrosoft2026-05-12
CVE-2026-10018Chromium: CVE-2026-10018 Integer overflow in ANGLEUNKNOWN—9%ileMicrosoft2026-05-12
CVE-2026-10019Chromium: CVE-2026-10019 Integer overflow in ANGLEUNKNOWN—9%ileMicrosoft2026-05-12
CVE-2026-10017Chromium: CVE-2026-10017 Out of bounds read in HeadlessUNKNOWN—8%ileMicrosoft2026-05-12
CVE-2026-10022Chromium: CVE-2026-10022 Type Confusion in V8UNKNOWN—5%ileMicrosoft2026-05-12
CVE-2026-10021Chromium: CVE-2026-10021 Insufficient validation of untrusted input in USBUNKNOWN—14%ileMicrosoft2026-05-12
CVE-2026-9884Chromium: CVE-2026-9884 Use after free in BrowserUNKNOWN—30%ileMicrosoft2026-05-12
CVE-2026-9882Chromium: CVE-2026-9882 Integer overflow in ANGLEUNKNOWN—13%ileMicrosoft2026-05-12
CVE-2026-9883Chromium: CVE-2026-9883 Use after free in BaseUNKNOWN—21%ileMicrosoft2026-05-12
CVE-2026-9886Chromium: CVE-2026-9886 Use after free in BaseUNKNOWN—16%ileMicrosoft2026-05-12
CVE-2026-9887Chromium: CVE-2026-9887 Use after free in ProxyUNKNOWN—12%ileMicrosoft2026-05-12
CVE-2026-9885Chromium: CVE-2026-9885 Insufficient validation of untrusted input in UIUNKNOWN—14%ileMicrosoft2026-05-12
CVE-2026-9890Chromium: CVE-2026-9890 Use after free in XRUNKNOWN—12%ileMicrosoft2026-05-12
CVE-2026-9891Chromium: CVE-2026-9891 Use after free in ExtensionsUNKNOWN—16%ileMicrosoft2026-05-12
CVE-2026-9892Chromium: CVE-2026-9892 Inappropriate implementation in SkiaUNKNOWN—11%ileMicrosoft2026-05-12
CVE-2026-9893Chromium: CVE-2026-9893 Use after free in SkiaUNKNOWN—19%ileMicrosoft2026-05-12
CVE-2026-9897Chromium: CVE-2026-9897 Use after free in DOMUNKNOWN—21%ileMicrosoft2026-05-12
CVE-2026-9895Chromium: CVE-2026-9895 Out of bounds read in GPUUNKNOWN—12%ileMicrosoft2026-05-12
CVE-2026-9894Chromium: CVE-2026-9894 Use after free in GPUUNKNOWN—12%ileMicrosoft2026-05-12
CVE-2026-9896Chromium: CVE-2026-9896 Out of bounds write in V8UNKNOWN—21%ileMicrosoft2026-05-12
CVE-2026-9899Chromium: CVE-2026-9899 Use after free in ANGLEUNKNOWN—12%ileMicrosoft2026-05-12
CVE-2026-9900Chromium: CVE-2026-9900 Out of bounds write in ANGLEUNKNOWN—12%ileMicrosoft2026-05-12
CVE-2026-9902Chromium: CVE-2026-9902 Use after free in AccessibilityUNKNOWN—12%ileMicrosoft2026-05-12
CVE-2026-9901Chromium: CVE-2026-9901 Use after free in ANGLEUNKNOWN—17%ileMicrosoft2026-05-12
CVE-2026-9905Chromium: CVE-2026-9905 Use after free in AccessibilityUNKNOWN—12%ileMicrosoft2026-05-12
CVE-2026-9903Chromium: CVE-2026-9903 Insufficient validation of untrusted input in Site IsolationUNKNOWN—6%ileMicrosoft2026-05-12
CVE-2026-9904Chromium: CVE-2026-9904 Use after free in ANGLEUNKNOWN—12%ileMicrosoft2026-05-12
CVE-2026-9909Chromium: CVE-2026-9909 Integer overflow in SkiaUNKNOWN—17%ileMicrosoft2026-05-12
CVE-2026-9906Chromium: CVE-2026-9906 Out of bounds write in GPUUNKNOWN—12%ileMicrosoft2026-05-12
CVE-2026-9907Chromium: CVE-2026-9907 Out of bounds read in DawnUNKNOWN—11%ileMicrosoft2026-05-12
CVE-2026-9910Chromium: CVE-2026-9910 Out of bounds memory access in ANGLEUNKNOWN—25%ileMicrosoft2026-05-12
CVE-2026-9908Chromium: CVE-2026-9908 Out of bounds read in ANGLEUNKNOWN—15%ileMicrosoft2026-05-12
CVE-2026-9941Chromium: CVE-2026-9941 Use after free in ANGLEUNKNOWN—23%ileMicrosoft2026-05-12
CVE-2026-9944Chromium: CVE-2026-9944 Uninitialized Use in ANGLEUNKNOWN—10%ileMicrosoft2026-05-12
CVE-2026-9942Chromium: CVE-2026-9942 Uninitialized Use in ANGLEUNKNOWN—10%ileMicrosoft2026-05-12
CVE-2026-9945Chromium: CVE-2026-9945 Use after free in MediaUNKNOWN—23%ileMicrosoft2026-05-12
CVE-2026-9949Chromium: CVE-2026-9949 Use after free in CoreUNKNOWN—13%ileMicrosoft2026-05-12
CVE-2026-9946Chromium: CVE-2026-9946 Use after free in ANGLEUNKNOWN—11%ileMicrosoft2026-05-12
CVE-2026-9948Chromium: CVE-2026-9948 Use after free in ViewsUNKNOWN—13%ileMicrosoft2026-05-12
CVE-2026-9954Chromium: CVE-2026-9954 Use after free in TabStripUNKNOWN—12%ileMicrosoft2026-05-12
CVE-2026-9953Chromium: CVE-2026-9953 Out of bounds read in ANGLEUNKNOWN—16%ileMicrosoft2026-05-12
CVE-2026-9951Chromium: CVE-2026-9951 Use after free in UIUNKNOWN—13%ileMicrosoft2026-05-12
CVE-2026-9952Chromium: CVE-2026-9952 Use after free in WebAudioUNKNOWN—31%ileMicrosoft2026-05-12
CVE-2026-9962Chromium: CVE-2026-9962 Use after free in WebRTCUNKNOWN—28%ileMicrosoft2026-05-12
CVE-2026-9961Chromium: CVE-2026-9961 Use after free in SurfaceCaptureUNKNOWN—16%ileMicrosoft2026-05-12
CVE-2026-9964Chromium: CVE-2026-9964 Use after free in BluetoothUNKNOWN—14%ileMicrosoft2026-05-12
CVE-2026-9965Chromium: CVE-2026-9965 Out of bounds write in ANGLEUNKNOWN—16%ileMicrosoft2026-05-12
CVE-2026-9968Chromium: CVE-2026-9968 Integer overflow in V8UNKNOWN—20%ileMicrosoft2026-05-12
CVE-2026-9970Chromium: CVE-2026-9970 Use after free in WebGLUNKNOWN—12%ileMicrosoft2026-05-12
CVE-2026-9966Chromium: CVE-2026-9966 Integer overflow in XMLUNKNOWN—12%ileMicrosoft2026-05-12
CVE-2026-9967Chromium: CVE-2026-9967 Out of bounds write in GPUUNKNOWN—16%ileMicrosoft2026-05-12
CVE-2026-9975Chromium: CVE-2026-9975 Out of bounds read and write in ANGLEUNKNOWN—12%ileMicrosoft2026-05-12
CVE-2026-9976Chromium: CVE-2026-9976 Inappropriate implementation in USBUNKNOWN—22%ileMicrosoft2026-05-12
CVE-2026-9973Chromium: CVE-2026-9973 Out of bounds write in V8UNKNOWN—20%ileMicrosoft2026-05-12
CVE-2026-9972Chromium: CVE-2026-9972 Uninitialized Use in GamepadUNKNOWN—13%ileMicrosoft2026-05-12
CVE-2026-9980Chromium: CVE-2026-9980 Insufficient validation of untrusted input in PrintingUNKNOWN—2%ileMicrosoft2026-05-12
CVE-2026-9979Chromium: CVE-2026-9979 Insufficient validation of untrusted input in InputUNKNOWN—3%ileMicrosoft2026-05-12
CVE-2026-9978Chromium: CVE-2026-9978 Use after free in GlicUNKNOWN—14%ileMicrosoft2026-05-12
CVE-2026-9983Chromium: CVE-2026-9983 Type Confusion in SkiaUNKNOWN—17%ileMicrosoft2026-05-12
CVE-2026-9981Chromium: CVE-2026-9981 Inappropriate implementation in SkiaUNKNOWN—9%ileMicrosoft2026-05-12
CVE-2026-9982Chromium: CVE-2026-9982 Insufficient validation of untrusted input in ANGLEUNKNOWN—8%ileMicrosoft2026-05-12
CVE-2026-9984Chromium: CVE-2026-9984 Use after free in UIUNKNOWN—14%ileMicrosoft2026-05-12
CVE-2026-9985Chromium: CVE-2026-9985 Insufficient validation of untrusted input in MediaUNKNOWN—8%ileMicrosoft2026-05-12
CVE-2026-9986Chromium: CVE-2026-9986 Insufficient validation of untrusted input in OptimizationGuideUNKNOWN—4%ileMicrosoft2026-05-12
CVE-2026-9989Chromium: CVE-2026-9989 Inappropriate implementation in MediaUNKNOWN—1%ileMicrosoft2026-05-12
CVE-2026-9990Chromium: CVE-2026-9990 Use after free in WebAppInstallsUNKNOWN—7%ileMicrosoft2026-05-12
CVE-2026-9988Chromium: CVE-2026-9988 Use after free in WebRTCUNKNOWN—7%ileMicrosoft2026-05-12
CVE-2026-9992Chromium: CVE-2026-9992 Use after free in NetworkUNKNOWN—14%ileMicrosoft2026-05-12
CVE-2026-9993Chromium: CVE-2026-9993 Use after free in ViewsUNKNOWN—6%ileMicrosoft2026-05-12
CVE-2026-9991Chromium: CVE-2026-9991 Inappropriate implementation in MediaUNKNOWN—4%ileMicrosoft2026-05-12
CVE-2026-9994Chromium: CVE-2026-9994 Use after free in CoreUNKNOWN—8%ileMicrosoft2026-05-12
CVE-2026-9996Chromium: CVE-2026-9996 Out of bounds read in WebRTCUNKNOWN—9%ileMicrosoft2026-05-12
CVE-2026-9995Chromium: CVE-2026-9995 Use after free in WebXRUNKNOWN—22%ileMicrosoft2026-05-12
CVE-2026-9998Chromium: CVE-2026-9998 Integer overflow in SkiaUNKNOWN—7%ileMicrosoft2026-05-12
CVE-2026-9999Chromium: CVE-2026-9999 Inappropriate implementation in ANGLEUNKNOWN—13%ileMicrosoft2026-05-12
CVE-2026-9997Chromium: CVE-2026-9997 Use after free in InputUNKNOWN—8%ileMicrosoft2026-05-12
CVE-2025-54518AMD: CVE-2025-54518 CPU OP Cache CorruptionUNKNOWN—17%ileMicrosoft2026-05-12
CVE-2026-45492Microsoft Edge (Chromium-based) Security Feature Bypass VulnerabilityUNKNOWN—22%ileMicrosoft2026-05-12
CVE-2026-8587Chromium: CVE-2026-8587 Use after free in ExtensionsUNKNOWN—7%ileMicrosoft2026-05-12
CVE-2026-8586Chromium: CVE-2026-8586 Inappropriate implementation in ChromotingUNKNOWN—1%ileMicrosoft2026-05-12
CVE-2026-8585Chromium: CVE-2026-8585 Inappropriate implementation in MediaUNKNOWN—7%ileMicrosoft2026-05-12
CVE-2026-8584Chromium: CVE-2026-8584 Inappropriate implementation in ViewsUNKNOWN—4%ileMicrosoft2026-05-12
CVE-2026-8582Chromium: CVE-2026-8582 Object lifecycle issue in DawnUNKNOWN—9%ileMicrosoft2026-05-12
CVE-2026-8581Chromium: CVE-2026-8581 Use after free in GPUUNKNOWN—18%ileMicrosoft2026-05-12
CVE-2026-8580Chromium: CVE-2026-8580 Use after free in MojoUNKNOWN—11%ileMicrosoft2026-05-12
CVE-2026-8579Chromium: CVE-2026-8579 Insufficient validation of untrusted input in SkiaUNKNOWN—3%ileMicrosoft2026-05-12
CVE-2026-8578Chromium: CVE-2026-8578 Out of bounds read in GPUUNKNOWN—5%ileMicrosoft2026-05-12
CVE-2026-8577Chromium: CVE-2026-8577 Integer overflow in FontsUNKNOWN—17%ileMicrosoft2026-05-12
CVE-2026-8576Chromium: CVE-2026-8576 Inappropriate implementation in CORSUNKNOWN—5%ileMicrosoft2026-05-12
CVE-2026-8575Chromium: CVE-2026-8575 Use after free in UIUNKNOWN—7%ileMicrosoft2026-05-12
CVE-2026-8573Chromium: CVE-2026-8573 Integer overflow in CodecsUNKNOWN—14%ileMicrosoft2026-05-12
CVE-2026-8572Chromium: CVE-2026-8572 Insufficient policy enforcement in NetworkUNKNOWN—6%ileMicrosoft2026-05-12
CVE-2026-8571Chromium: CVE-2026-8571 Insufficient policy enforcement in GPUUNKNOWN—12%ileMicrosoft2026-05-12
CVE-2026-8570Chromium: CVE-2026-8570 Type Confusion in V8UNKNOWN—16%ileMicrosoft2026-05-12
CVE-2026-8569Chromium: CVE-2026-8569 Out of bounds write in CodecsUNKNOWN—16%ileMicrosoft2026-05-12
CVE-2026-8568Chromium: CVE-2026-8568 Insufficient policy enforcement in AIUNKNOWN——Microsoft2026-05-12
CVE-2026-8567Chromium: CVE-2026-8567 Integer overflow in ANGLEUNKNOWN—8%ileMicrosoft2026-05-12
CVE-2026-8566Chromium: CVE-2026-8566 Insufficient policy enforcement in PaymentsUNKNOWN—8%ileMicrosoft2026-05-12
CVE-2026-8565Chromium: CVE-2026-8565 Inappropriate implementation in DownloadsUNKNOWN—3%ileMicrosoft2026-05-12
CVE-2026-8563Chromium: CVE-2026-8563 Insufficient policy enforcement in IFrame SandboxUNKNOWN—8%ileMicrosoft2026-05-12
CVE-2026-8562Chromium: CVE-2026-8562 Side-channel information leakage in NavigationUNKNOWN—8%ileMicrosoft2026-05-12
CVE-2026-8561Chromium: CVE-2026-8561 Incorrect security UI in FullscreenUNKNOWN—8%ileMicrosoft2026-05-12
CVE-2026-8560Chromium: CVE-2026-8560 Heap buffer overflow in SwiftShaderUNKNOWN—16%ileMicrosoft2026-05-12
CVE-2026-8559Chromium: CVE-2026-8559 Integer overflow in InternationalizationUNKNOWN—7%ileMicrosoft2026-05-12
CVE-2026-8558Chromium: CVE-2026-8558 Out of bounds write in FontsUNKNOWN—20%ileMicrosoft2026-05-12
CVE-2026-8557Chromium: CVE-2026-8557 Use after free in AccessibilityUNKNOWN—11%ileMicrosoft2026-05-12
CVE-2026-8556Chromium: CVE-2026-8556 Inappropriate implementation in ANGLEUNKNOWN—10%ileMicrosoft2026-05-12
CVE-2026-8555Chromium: CVE-2026-8555 Use after free in GTKUNKNOWN—20%ileMicrosoft2026-05-12
CVE-2026-8553Chromium: CVE-2026-8553 Use after free in GPUUNKNOWN—5%ileMicrosoft2026-05-12
CVE-2026-8554Chromium: CVE-2026-8554 Type Confusion in ANGLEUNKNOWN—7%ileMicrosoft2026-05-12
CVE-2026-8551Chromium: CVE-2026-8551 Use after free in DownloadsUNKNOWN—20%ileMicrosoft2026-05-12
CVE-2026-8552Chromium: CVE-2026-8552 Heap buffer overflow in GPUUNKNOWN—9%ileMicrosoft2026-05-12
CVE-2026-8550Chromium: CVE-2026-8550 Use after free in Google LensUNKNOWN—14%ileMicrosoft2026-05-12
CVE-2026-8549Chromium: CVE-2026-8549 Use after free in MediaUNKNOWN—20%ileMicrosoft2026-05-12
CVE-2026-8548Chromium: CVE-2026-8548 Out of bounds write in MediaUNKNOWN—11%ileMicrosoft2026-05-12
CVE-2026-8547Chromium: CVE-2026-8547 Insufficient policy enforcement in PasswordsUNKNOWN—17%ileMicrosoft2026-05-12
CVE-2026-8546Chromium: CVE-2026-8546 Out of bounds read in GPUUNKNOWN—11%ileMicrosoft2026-05-12
CVE-2026-8545Chromium: CVE-2026-8545 Object corruption in CompositingUNKNOWN—6%ileMicrosoft2026-05-12
CVE-2026-8544Chromium: CVE-2026-8544 Use after free in MediaUNKNOWN—20%ileMicrosoft2026-05-12
CVE-2026-8543Chromium: CVE-2026-8543 Out of bounds read in FileSystemUNKNOWN—17%ileMicrosoft2026-05-12
CVE-2026-8542Chromium: CVE-2026-8542 Use after free in CoreUNKNOWN—11%ileMicrosoft2026-05-12
CVE-2026-8541Chromium: CVE-2026-8541 Out of bounds read in UIUNKNOWN—11%ileMicrosoft2026-05-12
CVE-2026-8540Chromium: CVE-2026-8540 Type Confusion in V8UNKNOWN—23%ileMicrosoft2026-05-12
CVE-2026-8539Chromium: CVE-2026-8539 Script injection in SanitizerAPIUNKNOWN—6%ileMicrosoft2026-05-12
CVE-2026-8538Chromium: CVE-2026-8538 Insufficient validation of untrusted input in GPUUNKNOWN—9%ileMicrosoft2026-05-12
CVE-2026-8537Chromium: CVE-2026-8537 Insufficient policy enforcement in ViewTransitionsUNKNOWN—8%ileMicrosoft2026-05-12
CVE-2026-8536Chromium: CVE-2026-8536 Insufficient validation of untrusted input in ReadingModeUNKNOWN—8%ileMicrosoft2026-05-12
CVE-2026-8535Chromium: CVE-2026-8535 Out of bounds read in MediaUNKNOWN—9%ileMicrosoft2026-05-12
CVE-2026-8534Chromium: CVE-2026-8534 Integer overflow in GPUUNKNOWN—11%ileMicrosoft2026-05-12
CVE-2026-8533Chromium: CVE-2026-8533 Use after free in AccessibilityUNKNOWN—11%ileMicrosoft2026-05-12
CVE-2026-8532Chromium: CVE-2026-8532 Integer overflow in XMLUNKNOWN—20%ileMicrosoft2026-05-12
CVE-2026-8531Chromium: CVE-2026-8531 Heap buffer overflow in WebMLUNKNOWN—18%ileMicrosoft2026-05-12
CVE-2026-8530Chromium: CVE-2026-8530 Use after free in NetworkUNKNOWN—19%ileMicrosoft2026-05-12
CVE-2026-8529Chromium: CVE-2026-8529 Heap buffer overflow in CodecsUNKNOWN—22%ileMicrosoft2026-05-12
CVE-2026-8528Chromium: CVE-2026-8528 Insufficient validation of untrusted input in SiteIsolationUNKNOWN—10%ileMicrosoft2026-05-12
CVE-2026-8527Chromium: CVE-2026-8527 Insufficient validation of untrusted input in DownloadsUNKNOWN—21%ileMicrosoft2026-05-12
CVE-2026-8526Chromium: CVE-2026-8526 Out of bounds write in WebRTCUNKNOWN—31%ileMicrosoft2026-05-12
CVE-2026-8523Chromium: CVE-2026-8523 Use after free in MojoUNKNOWN—11%ileMicrosoft2026-05-12
CVE-2026-8519Chromium: CVE-2026-8519 Integer overflow in ANGLEUNKNOWN—14%ileMicrosoft2026-05-12
CVE-2026-8518Chromium: CVE-2026-8518 Use after free in BlinkUNKNOWN—20%ileMicrosoft2026-05-12
CVE-2026-8517Chromium: CVE-2026-8517 Object lifecycle issue in WebShareUNKNOWN—40%ileMicrosoft2026-05-12
CVE-2026-8516Chromium: CVE-2026-8516 Insufficient validation of untrusted input in DataTransferUNKNOWN—12%ileMicrosoft2026-05-12
CVE-2026-8515Chromium: CVE-2026-8515 Use after free in HIDUNKNOWN—11%ileMicrosoft2026-05-12
CVE-2026-8514Chromium: CVE-2026-8514 Use after free in AuraUNKNOWN—11%ileMicrosoft2026-05-12
CVE-2026-8513Chromium: CVE-2026-8513 Use after free in InputUNKNOWN—11%ileMicrosoft2026-05-12
CVE-2026-8512Chromium: CVE-2026-8512 Use after free in FileSystemUNKNOWN—11%ileMicrosoft2026-05-12
CVE-2026-8511Chromium: CVE-2026-8511 Use after free in UIUNKNOWN—14%ileMicrosoft2026-05-12
CVE-2026-8509Chromium: CVE-2026-8509 Heap buffer overflow in WebMLUNKNOWN—32%ileMicrosoft2026-05-12
CVE-2026-8525Chromium: CVE-2026-8525 Heap buffer overflow in ANGLEUNKNOWN—14%ileMicrosoft2026-05-12
CVE-2026-8524Chromium: CVE-2026-8524 Out of bounds write in WebAudioUNKNOWN—31%ileMicrosoft2026-05-12
CVE-2026-8521Chromium: CVE-2026-8521 Use after free in Tab GroupsUNKNOWN—5%ileMicrosoft2026-05-12
CVE-2026-8522Chromium: CVE-2026-8522 Use after free in DownloadsUNKNOWN—20%ileMicrosoft2026-05-12
CVE-2026-8574Chromium: CVE-2026-8574 Use after free in CoreUNKNOWN—8%ileMicrosoft2026-05-12
CVE-2026-9116Chromium: CVE-2026-9116 Insufficient policy enforcement in ServiceWorkerUNKNOWN—12%ileMicrosoft2026-05-12
CVE-2026-9117Chromium: CVE-2026-9117 Type Confusion in GFXUNKNOWN—18%ileMicrosoft2026-05-12
CVE-2026-9118Chromium: CVE-2026-9118 Use after free in XRUNKNOWN—32%ileMicrosoft2026-05-12
CVE-2026-9119Chromium: CVE-2026-9119 Heap buffer overflow in WebRTCUNKNOWN—42%ileMicrosoft2026-05-12
CVE-2026-9120Chromium: CVE-2026-9120 Use after free in WebRTCUNKNOWN—40%ileMicrosoft2026-05-12
CVE-2026-9122Chromium: CVE-2026-9121 Out of bounds read in GPUUNKNOWN—19%ileMicrosoft2026-05-12
CVE-2026-9124Chromium: CVE-2026-9123 Heap buffer overflow in ChromecastUNKNOWN—18%ileMicrosoft2026-05-12
CVE-2026-9123Chromium: CVE-2026-9122 Out of bounds read in GPUUNKNOWN—9%ileMicrosoft2026-05-12
CVE-2026-9121Chromium: CVE-2026-9126 Use after free in DOMUNKNOWN—26%ileMicrosoft2026-05-12
CVE-2026-9126Chromium: CVE-2026-9124 Insufficient validation of untrusted input in InputUNKNOWN—32%ileMicrosoft2026-05-12
CVE-2026-10003Chromium: CVE-2026-10003 Use after free in ViewsUNKNOWN—13%ileMicrosoft2026-05-12
CVE-2026-10002Chromium: CVE-2026-10002 Use after free in PDFiumUNKNOWN—8%ileMicrosoft2026-05-12
CVE-2026-10004Chromium: CVE-2026-10004 Insufficient validation of untrusted input in PasswordsUNKNOWN—6%ileMicrosoft2026-05-12
CVE-2026-10001Chromium: CVE-2026-10001 Use after free in PerformanceManagerUNKNOWN—7%ileMicrosoft2026-05-12
CVE-2026-10007Chromium: CVE-2026-10007 Use after free in SVGUNKNOWN—17%ileMicrosoft2026-05-12
CVE-2026-10006Chromium: CVE-2026-10006 Race in WebAudioUNKNOWN—14%ileMicrosoft2026-05-12
CVE-2026-10005Chromium: CVE-2026-10005 Use after free in WebAppInstallsUNKNOWN—18%ileMicrosoft2026-05-12
CVE-2026-9874Chromium: CVE-2026-9874 Use after free in DawnUNKNOWN—14%ileMicrosoft2026-05-12
CVE-2026-9877Chromium: CVE-2026-9877 Use after free in ANGLEUNKNOWN—13%ileMicrosoft2026-05-12
CVE-2026-9878Chromium: CVE-2026-9878 Use after free in ANGLEUNKNOWN—24%ileMicrosoft2026-05-12
CVE-2026-9873Chromium: CVE-2026-9873 Use after free in NetworkUNKNOWN—22%ileMicrosoft2026-05-12
CVE-2026-9879Chromium: CVE-2026-9879 Out of bounds write in ANGLEUNKNOWN—21%ileMicrosoft2026-05-12
CVE-2026-9881Chromium: CVE-2026-9881 Use after free in BluetoothUNKNOWN—10%ileMicrosoft2026-05-12
CVE-2026-9913Chromium: CVE-2026-9913 Inappropriate implementation in ANGLEUNKNOWN—14%ileMicrosoft2026-05-12
CVE-2026-9915Chromium: CVE-2026-9915 Heap buffer overflow in ANGLEUNKNOWN—16%ileMicrosoft2026-05-12
CVE-2026-9916Chromium: CVE-2026-9916 Out of bounds write in ANGLEUNKNOWN—13%ileMicrosoft2026-05-12
CVE-2026-9914Chromium: CVE-2026-9914 Insufficient validation of untrusted input in ANGLEUNKNOWN—15%ileMicrosoft2026-05-12
CVE-2026-9918Chromium: CVE-2026-9918 Inappropriate implementation in TintUNKNOWN—16%ileMicrosoft2026-05-12
CVE-2026-9920Chromium: CVE-2026-9920 Uninitialized Use in GPUUNKNOWN—12%ileMicrosoft2026-05-12
CVE-2026-9924Chromium: CVE-2026-9924 Heap buffer overflow in ANGLEUNKNOWN—16%ileMicrosoft2026-05-12
CVE-2026-9923Chromium: CVE-2026-9923 Use after free in SkiaUNKNOWN—17%ileMicrosoft2026-05-12
CVE-2026-9922Chromium: CVE-2026-9922 Use after free in GPUUNKNOWN—17%ileMicrosoft2026-05-12
CVE-2026-9925Chromium: CVE-2026-9925 Use after free in ANGLEUNKNOWN—13%ileMicrosoft2026-05-12
CVE-2026-9926Chromium: CVE-2026-9926 Heap buffer overflow in ANGLEUNKNOWN—16%ileMicrosoft2026-05-12
CVE-2026-9928Chromium: CVE-2026-9928 Out of bounds read in ANGLEUNKNOWN—23%ileMicrosoft2026-05-12
CVE-2026-9927Chromium: CVE-2026-9927 Use after free in ANGLEUNKNOWN—23%ileMicrosoft2026-05-12
CVE-2026-9930Chromium: CVE-2026-9930 Out of bounds write in DawnUNKNOWN—9%ileMicrosoft2026-05-12
CVE-2026-9931Chromium: CVE-2026-9931 Use after free in GPUUNKNOWN—13%ileMicrosoft2026-05-12
CVE-2026-9932Chromium: CVE-2026-9932 Use after free in ANGLEUNKNOWN—13%ileMicrosoft2026-05-12
CVE-2026-9933Chromium: CVE-2026-9933 Use after free in InputUNKNOWN—13%ileMicrosoft2026-05-12
CVE-2026-9937Chromium: CVE-2026-9937 Use after free in UIUNKNOWN—13%ileMicrosoft2026-05-12
CVE-2026-9936Chromium: CVE-2026-9936 Use after free in GFXUNKNOWN—13%ileMicrosoft2026-05-12
CVE-2026-9935Chromium: CVE-2026-9935 Uninitialized Use in ANGLEUNKNOWN—15%ileMicrosoft2026-05-12
CVE-2026-9934Chromium: CVE-2026-9934 Use after free in AuraUNKNOWN—17%ileMicrosoft2026-05-12
CVE-2026-9938Chromium: CVE-2026-9938 Inappropriate implementation in V8UNKNOWN—24%ileMicrosoft2026-05-12
CVE-2026-9939Chromium: CVE-2026-9939 Heap buffer overflow in WebCodecsUNKNOWN—34%ileMicrosoft2026-05-12
CVE-2026-9940Chromium: CVE-2026-9940 Heap buffer overflow in ANGLEUNKNOWN—18%ileMicrosoft2026-05-12
CVE-2026-9958Chromium: CVE-2026-9958 Use after free in PDFiumUNKNOWN—13%ileMicrosoft2026-05-12
CVE-2026-9957Chromium: CVE-2026-9957 Use after free in PDFUNKNOWN—20%ileMicrosoft2026-05-12
CVE-2026-9960Chromium: CVE-2026-9960 Integer overflow in PDFiumUNKNOWN—14%ileMicrosoft2026-05-12
CVE-2026-9959Chromium: CVE-2026-9959 Race in WebRTCUNKNOWN—4%ileMicrosoft2026-05-12
CVE-2026-10020Chromium: CVE-2026-10020 Insufficient validation of untrusted input in SkiaUNKNOWN—10%ileMicrosoft2026-05-12
CVE-2026-9977Chromium: CVE-2026-9977 Insufficient validation of untrusted input in WebShareUNKNOWN—8%ileMicrosoft2026-05-12
CVE-2026-9971Chromium: CVE-2026-9971 Inappropriate implementation in iOSUNKNOWN—6%ileMicrosoft2026-05-12
CVE-2026-9969Chromium: CVE-2026-9969 Insufficient validation of untrusted input in ANGLEUNKNOWN—21%ileMicrosoft2026-05-12
CVE-2026-9963Chromium: CVE-2026-9963 Uninitialized Use in iOSUNKNOWN—20%ileMicrosoft2026-05-12
CVE-2026-9956Chromium: CVE-2026-9956 Use after free in iOSUNKNOWN—17%ileMicrosoft2026-05-12
CVE-2026-9955Chromium: CVE-2026-9955 Inappropriate implementation in iOSUNKNOWN—9%ileMicrosoft2026-05-12
CVE-2026-9950Chromium: CVE-2026-9950 Insufficient validation of untrusted input in iOSUNKNOWN—10%ileMicrosoft2026-05-12
CVE-2026-9947Chromium: CVE-2026-9947 Use after free in XMLUNKNOWN—23%ileMicrosoft2026-05-12
CVE-2026-9943Chromium: CVE-2026-9943 Out of bounds read in WebGLUNKNOWN—11%ileMicrosoft2026-05-12
CVE-2026-9929Chromium: CVE-2026-9929 Inappropriate implementation in WebGLUNKNOWN—11%ileMicrosoft2026-05-12
CVE-2026-9921Chromium: CVE-2026-9921 Uninitialized Use in WebGLUNKNOWN—15%ileMicrosoft2026-05-12
CVE-2026-9919Chromium: CVE-2026-9919 Out of bounds read in WebGLUNKNOWN—12%ileMicrosoft2026-05-12
CVE-2026-9917Chromium: CVE-2026-9917 Uninitialized Use in WebGLUNKNOWN—19%ileMicrosoft2026-05-12
CVE-2026-9912Chromium: CVE-2026-9912 Inappropriate implementation in GPUUNKNOWN—16%ileMicrosoft2026-05-12
CVE-2026-9911Chromium: CVE-2026-9911 Integer overflow in ANGLEUNKNOWN—11%ileMicrosoft2026-05-12
CVE-2026-9898Chromium: CVE-2026-9898 Insufficient validation of untrusted input in GPUUNKNOWN—14%ileMicrosoft2026-05-12
CVE-2026-9889Chromium: CVE-2026-9889 Out of bounds read and write in DawnUNKNOWN—12%ileMicrosoft2026-05-12
CVE-2026-9888Chromium: CVE-2026-9888 Use after free in WebViewUNKNOWN—12%ileMicrosoft2026-05-12
CVE-2026-9880Chromium: CVE-2026-9880 Insufficient validation of untrusted input in WebGLUNKNOWN—14%ileMicrosoft2026-05-12
CVE-2026-9876Chromium: CVE-2026-9876 Use after free in WebGLUNKNOWN—16%ileMicrosoft2026-05-12
CVE-2026-9875Chromium: CVE-2026-9875 Out of bounds read in WebGLUNKNOWN—16%ileMicrosoft2026-05-12
CVE-2026-8510Chromium: CVE-2026-8510 Integer overflow in SkiaUNKNOWN—12%ileMicrosoft2026-05-12
CVE-2026-10000Chromium: CVE-2026-10000 Use after free in PasswordsUNKNOWN—8%ileMicrosoft2026-05-12
CVE-2026-33819Microsoft Bing Remote Code Execution VulnerabilityCRITICAL10.054%ileMicrosoft2026-04-14
CVE-2026-32186Microsoft Bing Elevation of Privilege VulnerabilityCRITICAL10.050%ileMicrosoft2026-04-14
CVE-2026-33107Azure Databricks Elevation of Privilege VulnerabilityCRITICAL10.050%ileMicrosoft2026-04-14
CVE-2026-35431Microsoft Entra ID Entitlement Management Spoofing VulnerabilityCRITICAL10.041%ileMicrosoft2026-04-14
CVE-2026-32213Azure AI Foundry Elevation of Privilege VulnerabilityCRITICAL10.057%ileMicrosoft2026-04-14
CVE-2026-33105Microsoft Azure Kubernetes Service Elevation of Privilege VulnerabilityCRITICAL10.050%ileMicrosoft2026-04-14
CVE-2026-40175Axios has Unrestricted Cloud Metadata Exfiltration via Header Injection ChainCRITICAL10.077%ileMicrosoft2026-04-14
CVE-2026-21515Azure IoT Central Elevation of Privilege VulnerabilityCRITICAL9.950%ileMicrosoft2026-04-14
CVE-2026-33824Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution VulnerabilityCRITICAL9.899%ileMicrosoft2026-04-14
CVE-2026-31657batman-adv: hold claim backbone gateways by referenceCRITICAL9.833%ileMicrosoft2026-04-14
CVE-2026-31669mptcp: fix slab-use-after-free in __inet_lookup_establishedCRITICAL9.838%ileMicrosoft2026-04-14
CVE-2026-31659batman-adv: reject oversized global TT response buffersCRITICAL9.833%ileMicrosoft2026-04-14
CVE-2026-27143Missing bound checks can lead to memory corruption in safe Go in cmd/compileCRITICAL9.842%ileMicrosoft2026-04-14
CVE-2026-27140Code execution vulnerability in SWIG code generation in cmd/goCRITICAL9.848%ileMicrosoft2026-04-14
CVE-2026-5450scanf %mc off-by-one heap buffer overflowCRITICAL9.840%ileMicrosoft2026-04-14
CVE-2026-31478ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len()CRITICAL9.840%ileMicrosoft2026-04-14
CVE-2026-31607usbip: validate number_of_packets in usbip_pack_ret_submit()CRITICAL9.824%ileMicrosoft2026-04-14
CVE-2026-31668seg6: separate dst_cache for input and output paths in seg6 lwtunnelCRITICAL9.836%ileMicrosoft2026-04-14
CVE-2026-24303Microsoft Partner Center Elevation of Privilege VulnerabilityCRITICAL9.632%ileMicrosoft2026-04-14
CVE-2026-26135Azure Custom Locations Resource Provider (RP) Elevation of Privilege VulnerabilityCRITICAL9.645%ileMicrosoft2026-04-14
CVE-2026-32210Microsoft Dynamics 365 (online) Spoofing VulnerabilityCRITICAL9.345%ileMicrosoft2026-04-14
CVE-2026-33102Microsoft 365 Copilot Elevation of Privilege VulnerabilityCRITICAL9.333%ileMicrosoft2026-04-14
CVE-2026-40372ASP.NET Core Elevation of Privilege VulnerabilityCRITICAL9.196%ileMicrosoft2026-04-14
CVE-2026-32211Azure MCP Server Information Disclosure VulnerabilityCRITICAL9.154%ileMicrosoft2026-04-14
CVE-2026-26149Microsoft Power Apps Desktop Client Spoofing VulnerabilityCRITICAL9.044%ileMicrosoft2026-04-14
CVE-2026-26167Windows Push Notifications Elevation of Privilege VulnerabilityHIGH8.87%ileMicrosoft2026-04-14
CVE-2026-32157Remote Desktop Client Remote Code Execution VulnerabilityHIGH8.852%ileMicrosoft2026-04-14
CVE-2026-33120Microsoft SQL Server Remote Code Execution VulnerabilityHIGH8.850%ileMicrosoft2026-04-14
CVE-2026-26178Windows Advanced Rasterization Platform Elevation of Privilege VulnerabilityHIGH8.834%ileMicrosoft2026-04-14
CVE-2026-32171Azure Logic Apps Elevation of Privilege VulnerabilityHIGH8.836%ileMicrosoft2026-04-14
CVE-2026-32225Windows Shell Security Feature Bypass VulnerabilityHIGH8.856%ileMicrosoft2026-04-14
CVE-2026-41445KissFFT Integer Overflow Heap Buffer Overflow via kiss_fftndr_alloc()HIGH8.821%ileMicrosoft2026-04-14
CVE-2026-31593KVM: SEV: Reject attempts to sync VMSA of an already-launched/encrypted vCPUHIGH8.82%ileMicrosoft2026-04-14
CVE-2026-31570can: gw: fix OOB heap access in cgw_csum_crc8_rel()HIGH8.818%ileMicrosoft2026-04-14
CVE-2026-31629nfc: llcp: add missing return after LLCP_CLOSED checksHIGH8.813%ileMicrosoft2026-04-14
CVE-2026-31622NFC: digital: Bounds check NFC-A cascade depth in SDD response handlerHIGH8.820%ileMicrosoft2026-04-14
CVE-2026-35093Libinput: libinput: unauthorized code execution and information disclosure through lua bytecode pluginsHIGH8.88%ileMicrosoft2026-04-14
CVE-2026-31588KVM: x86: Use scratch field in MMIO fragment to hold small write valuesHIGH8.83%ileMicrosoft2026-04-14
CVE-2026-27928Windows Hello Security Feature Bypass VulnerabilityHIGH8.734%ileMicrosoft2026-04-14
CVE-2026-32173Azure SRE Agent Information Disclosure VulnerabilityHIGH8.656%ileMicrosoft2026-04-14
CVE-2026-26150Microsoft Purview eDiscovery Elevation of Privilege VulnerabilityHIGH8.644%ileMicrosoft2026-04-14
CVE-2026-34445ONNX: Malicious ONNX models can crash servers by exploiting unprotected object settings.HIGH8.621%ileMicrosoft2026-04-14
CVE-2026-5435Potential buffer overflow in ns_sprintrrf TSIG handling pathHIGH8.615%ileMicrosoft2026-04-14
CVE-2026-32221Windows Graphics Component Remote Code Execution VulnerabilityHIGH8.421%ileMicrosoft2026-04-14
CVE-2026-32091Microsoft Brokering File System Elevation of Privilege VulnerabilityHIGH8.45%ileMicrosoft2026-04-14
CVE-2026-32162Windows COM Elevation of Privilege VulnerabilityHIGH8.479%ileMicrosoft2026-04-14
CVE-2026-32190Microsoft Office Remote Code Execution VulnerabilityHIGH8.425%ileMicrosoft2026-04-14
CVE-2026-33114Microsoft Word Remote Code Execution VulnerabilityHIGH8.424%ileMicrosoft2026-04-14
CVE-2026-33115Microsoft Word Remote Code Execution VulnerabilityHIGH8.424%ileMicrosoft2026-04-14
CVE-2026-23401KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTEHIGH8.48%ileMicrosoft2026-04-14
CVE-2026-40706CVE-2026-40706HIGH8.46%ileMicrosoft2026-04-14
CVE-2026-34982Vim modeline bypass via various options affects Vim < 9.2.0276HIGH8.238%ileMicrosoft2026-04-14
CVE-2026-31476ksmbd: do not expire session on binding failureHIGH8.240%ileMicrosoft2026-04-14
CVE-2026-32316jq: Integer overflow in jvp_string_append() allows Heap-based Buffer OverflowHIGH8.239%ileMicrosoft2026-04-14
CVE-2026-41604Apache Thrift: Swift Range crash in skip()HIGH8.257%ileMicrosoft2026-04-14
CVE-2026-33827Windows TCP/IP Remote Code Execution VulnerabilityHIGH8.154%ileMicrosoft2026-04-14
CVE-2026-28387Potential Use-after-free in DANE Client CodeHIGH8.153%ileMicrosoft2026-04-14
CVE-2026-40393CVE-2026-40393HIGH8.135%ileMicrosoft2026-04-14
CVE-2026-31416netfilter: nfnetlink_log: account for netlink header sizeHIGH8.12%ileMicrosoft2026-04-14
CVE-2026-31418netfilter: ipset: drop logically empty buckets in mtype_delHIGH8.12%ileMicrosoft2026-04-14
CVE-2026-35469SpdyStream: DOS on CRIHIGH8.148%ileMicrosoft2026-04-14
CVE-2026-31417net/x25: Fix overflow when accumulating packetsHIGH8.137%ileMicrosoft2026-04-14
CVE-2026-31414netfilter: nf_conntrack_expect: use expect->helperHIGH8.133%ileMicrosoft2026-04-14
CVE-2026-6100Use-after-free in lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile after re-use under memory pressureHIGH8.144%ileMicrosoft2026-04-14
CVE-2026-33826Windows Active Directory Remote Code Execution VulnerabilityHIGH8.042%ileMicrosoft2026-04-14
CVE-2026-27912Windows Kerberos Elevation of Privilege VulnerabilityHIGH8.015%ileMicrosoft2026-04-14
CVE-2026-32172Microsoft Power Apps Remote Code Execution VulnerabilityHIGH8.026%ileMicrosoft2026-04-14
CVE-2026-20930Windows Management Services Elevation of Privilege VulnerabilityHIGH7.89%ileMicrosoft2026-04-14
CVE-2026-26160Remote Desktop Licensing Service Elevation of Privilege VulnerabilityHIGH7.818%ileMicrosoft2026-04-14
CVE-2026-26161Windows Sensor Data Service Elevation of Privilege VulnerabilityHIGH7.822%ileMicrosoft2026-04-14
CVE-2026-26162Windows OLE Elevation of Privilege VulnerabilityHIGH7.822%ileMicrosoft2026-04-14
CVE-2026-26179Windows Kernel Elevation of Privilege VulnerabilityHIGH7.836%ileMicrosoft2026-04-14
CVE-2026-26180Windows Kernel Elevation of Privilege VulnerabilityHIGH7.822%ileMicrosoft2026-04-14
CVE-2026-26181Microsoft Brokering File System Elevation of Privilege VulnerabilityHIGH7.814%ileMicrosoft2026-04-14
CVE-2026-26183Remote Access Management service/API (RPC server) Elevation of Privilege VulnerabilityHIGH7.817%ileMicrosoft2026-04-14
CVE-2026-27907Windows Storage Spaces Controller Elevation of Privilege VulnerabilityHIGH7.822%ileMicrosoft2026-04-14
CVE-2026-27915Windows UPnP Device Host Elevation of Privilege VulnerabilityHIGH7.822%ileMicrosoft2026-04-14
CVE-2026-27918Windows Shell Elevation of Privilege VulnerabilityHIGH7.89%ileMicrosoft2026-04-14
CVE-2026-27919Windows UPnP Device Host Elevation of Privilege VulnerabilityHIGH7.822%ileMicrosoft2026-04-14
CVE-2026-27924Desktop Window Manager Elevation of Privilege VulnerabilityHIGH7.821%ileMicrosoft2026-04-14
CVE-2026-27927Windows Projected File System Elevation of Privilege VulnerabilityHIGH7.89%ileMicrosoft2026-04-14
CVE-2026-32089Windows Speech Brokered Api Elevation of Privilege VulnerabilityHIGH7.816%ileMicrosoft2026-04-14
CVE-2026-32090Windows Speech Brokered Api Elevation of Privilege VulnerabilityHIGH7.811%ileMicrosoft2026-04-14
CVE-2026-32152Desktop Window Manager Elevation of Privilege VulnerabilityHIGH7.838%ileMicrosoft2026-04-14
CVE-2026-32154Desktop Window Manager Elevation of Privilege VulnerabilityHIGH7.831%ileMicrosoft2026-04-14
CVE-2026-32158Windows Push Notifications Elevation of Privilege VulnerabilityHIGH7.810%ileMicrosoft2026-04-14
CVE-2026-32159Windows Push Notifications Elevation of Privilege VulnerabilityHIGH7.810%ileMicrosoft2026-04-14
CVE-2026-32160Windows Push Notifications Elevation of Privilege VulnerabilityHIGH7.810%ileMicrosoft2026-04-14
CVE-2026-32165Windows User Interface Core Elevation of Privilege VulnerabilityHIGH7.810%ileMicrosoft2026-04-14
CVE-2026-32168Azure Monitor Agent Elevation of Privilege VulnerabilityHIGH7.823%ileMicrosoft2026-04-14
CVE-2026-32184Microsoft High Performance Compute (HPC) Pack Elevation of Privilege VulnerabilityHIGH7.878%ileMicrosoft2026-04-14
CVE-2026-32189Microsoft Excel Remote Code Execution VulnerabilityHIGH7.830%ileMicrosoft2026-04-14
CVE-2026-32192Azure Monitor Agent Elevation of Privilege VulnerabilityHIGH7.878%ileMicrosoft2026-04-14
CVE-2026-32222Windows Win32k Elevation of Privilege VulnerabilityHIGH7.824%ileMicrosoft2026-04-14
CVE-2026-33095Microsoft Word Remote Code Execution VulnerabilityHIGH7.830%ileMicrosoft2026-04-14
CVE-2026-33098Windows Container Isolation FS Filter Driver Elevation of Privilege VulnerabilityHIGH7.823%ileMicrosoft2026-04-14
CVE-2026-33825Microsoft Defender Elevation of Privilege VulnerabilityHIGH7.893%ileMicrosoft2026-04-14
CVE-2026-23657Microsoft Word Remote Code Execution VulnerabilityHIGH7.834%ileMicrosoft2026-04-14
CVE-2026-26143Microsoft PowerShell Security Feature Bypass VulnerabilityHIGH7.842%ileMicrosoft2026-04-14
CVE-2026-26153Windows Encrypted File System (EFS) Elevation of Privilege VulnerabilityHIGH7.821%ileMicrosoft2026-04-14
CVE-2026-26156Windows Hyper-V Remote Code Execution VulnerabilityHIGH7.834%ileMicrosoft2026-04-14
CVE-2026-26159Remote Desktop Licensing Service Elevation of Privilege VulnerabilityHIGH7.817%ileMicrosoft2026-04-14
CVE-2026-26163Windows Kernel Elevation of Privilege VulnerabilityHIGH7.822%ileMicrosoft2026-04-14
CVE-2026-26170PowerShell Elevation of Privilege VulnerabilityHIGH7.814%ileMicrosoft2026-04-14
CVE-2026-26172Windows Push Notifications Elevation of Privilege VulnerabilityHIGH7.85%ileMicrosoft2026-04-14
CVE-2026-26176Windows Client Side Caching driver (csc.sys) Elevation of Privilege VulnerabilityHIGH7.814%ileMicrosoft2026-04-14
CVE-2026-26184Windows Projected File System Elevation of Privilege VulnerabilityHIGH7.815%ileMicrosoft2026-04-14
CVE-2026-27909Windows Search Service Elevation of Privilege VulnerabilityHIGH7.876%ileMicrosoft2026-04-14
CVE-2026-27910Windows Installer Elevation of Privilege VulnerabilityHIGH7.811%ileMicrosoft2026-04-14
CVE-2026-27911Windows User Interface Core Elevation of Privilege VulnerabilityHIGH7.85%ileMicrosoft2026-04-14
CVE-2026-27914Microsoft Management Console Elevation of Privilege VulnerabilityHIGH7.884%ileMicrosoft2026-04-14
CVE-2026-27916Windows UPnP Device Host Elevation of Privilege VulnerabilityHIGH7.815%ileMicrosoft2026-04-14
CVE-2026-27920Windows UPnP Device Host Elevation of Privilege VulnerabilityHIGH7.815%ileMicrosoft2026-04-14
CVE-2026-27923Desktop Window Manager Elevation of Privilege VulnerabilityHIGH7.814%ileMicrosoft2026-04-14
CVE-2026-32069Windows Projected File System Elevation of Privilege VulnerabilityHIGH7.817%ileMicrosoft2026-04-14
CVE-2026-32074Windows Projected File System Elevation of Privilege VulnerabilityHIGH7.817%ileMicrosoft2026-04-14
CVE-2026-32076Windows Storage Spaces Controller Elevation of Privilege VulnerabilityHIGH7.817%ileMicrosoft2026-04-14
CVE-2026-32077Windows UPnP Device Host Elevation of Privilege VulnerabilityHIGH7.825%ileMicrosoft2026-04-14
CVE-2026-32153Windows Speech Runtime Elevation of Privilege VulnerabilityHIGH7.810%ileMicrosoft2026-04-14
CVE-2026-32155Desktop Window Manager Elevation of Privilege VulnerabilityHIGH7.817%ileMicrosoft2026-04-14
CVE-2026-32163Windows User Interface Core Elevation of Privilege VulnerabilityHIGH7.86%ileMicrosoft2026-04-14
CVE-2026-32164Windows User Interface Core Elevation of Privilege VulnerabilityHIGH7.86%ileMicrosoft2026-04-14
CVE-2026-32197Microsoft Excel Remote Code Execution VulnerabilityHIGH7.821%ileMicrosoft2026-04-14
CVE-2026-32198Microsoft Excel Remote Code Execution VulnerabilityHIGH7.822%ileMicrosoft2026-04-14
CVE-2026-32199Microsoft Excel Remote Code Execution VulnerabilityHIGH7.821%ileMicrosoft2026-04-14
CVE-2026-32200Microsoft PowerPoint Remote Code Execution VulnerabilityHIGH7.825%ileMicrosoft2026-04-14
CVE-2026-33101Windows Print Spooler Elevation of Privilege VulnerabilityHIGH7.813%ileMicrosoft2026-04-14
CVE-2026-32078Windows Projected File System Elevation of Privilege VulnerabilityHIGH7.817%ileMicrosoft2026-04-14
CVE-2026-39853osslsigncode has a Stack Buffer Overflow via Unbounded Digest Copy During Signature VerificationHIGH7.86%ileMicrosoft2026-04-14
CVE-2026-31427netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdpHIGH7.82%ileMicrosoft2026-04-14
CVE-2026-31454xfs: save ailp before dropping the AIL lock in push callbacksHIGH7.83%ileMicrosoft2026-04-14
CVE-2026-31432ksmbd: fix OOB write in QUERY_INFO for compound requestsHIGH7.840%ileMicrosoft2026-04-14
CVE-2026-31502team: fix header_ops type confusion with non-Ethernet portsHIGH7.83%ileMicrosoft2026-04-14
CVE-2026-31530cxl/port: Fix use after free of parent_port in cxl_detach_ep()HIGH7.83%ileMicrosoft2026-04-14
CVE-2026-31493RDMA/efa: Fix use of completion ctx after freeHIGH7.83%ileMicrosoft2026-04-14
CVE-2026-23447net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds checkHIGH7.83%ileMicrosoft2026-04-14
CVE-2026-31617usb: gadget: f_ncm: validate minimum block_len in ncm_unwrap_ntb()HIGH7.83%ileMicrosoft2026-04-14
CVE-2026-31589mm: call ->free_folio() directly in folio_unmap_invalidate()HIGH7.836%ileMicrosoft2026-04-14
CVE-2026-23422dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handlerHIGH7.82%ileMicrosoft2026-04-14
CVE-2026-31663xfrm: hold dev ref until after transport_finish NF_HOOKHIGH7.811%ileMicrosoft2026-04-14
CVE-2026-31580bcache: fix cached_dev.sb_bio use-after-free and crashHIGH7.83%ileMicrosoft2026-04-14
CVE-2026-31630rxrpc: proc: size address buffers for %pISpc outputHIGH7.83%ileMicrosoft2026-04-14
CVE-2026-31576media: hackrf: fix to not free memory after the device is registered in hackrf_probe()HIGH7.83%ileMicrosoft2026-04-14
CVE-2026-31586mm: blk-cgroup: fix use-after-free in cgwb_release_workfn()HIGH7.83%ileMicrosoft2026-04-14
CVE-2026-31578media: as102: fix to not free memory after the device is registered in as102_usb_probe()HIGH7.83%ileMicrosoft2026-04-14
CVE-2026-31656drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeatHIGH7.82%ileMicrosoft2026-04-14
CVE-2026-31408Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_holdHIGH7.822%ileMicrosoft2026-04-14
CVE-2026-23406apparmor: fix side-effect bug in match_char() macro usageHIGH7.88%ileMicrosoft2026-04-14
CVE-2026-23407apparmor: fix missing bounds check on DEFAULT table in verify_dfa()HIGH7.88%ileMicrosoft2026-04-14
CVE-2026-23408apparmor: Fix double free of ns_name in aa_replace_profiles()HIGH7.88%ileMicrosoft2026-04-14
CVE-2026-23410apparmor: fix race on rawdata dereferenceHIGH7.84%ileMicrosoft2026-04-14
CVE-2026-23411apparmor: fix race between freeing data and fs accessing itHIGH7.84%ileMicrosoft2026-04-14
CVE-2025-14821Libssh: libssh: insecure default configuration leads to local man-in-the-middle attacks on windowsHIGH7.83%ileMicrosoft2026-04-14
CVE-2026-31430X.509: Fix out-of-bounds access when parsing extensionsHIGH7.80%ileMicrosoft2026-04-14
CVE-2026-31516xfrm: prevent policy_hthresh.work from racing with netns teardownHIGH7.81%ileMicrosoft2026-04-14
CVE-2026-31527driver core: platform: use generic driver_override infrastructureHIGH7.83%ileMicrosoft2026-04-14
CVE-2026-31506net: bcmasp: fix double free of WoL irqHIGH7.83%ileMicrosoft2026-04-14
CVE-2026-31504net: fix fanout UAF in packet_release() via NETDEV_UP raceHIGH7.83%ileMicrosoft2026-04-14
CVE-2026-31446ext4: fix use-after-free in update_super_work when racing with umountHIGH7.83%ileMicrosoft2026-04-14
CVE-2026-31433ksmbd: fix potencial OOB in get_file_all_info() for compound requestsHIGH7.845%ileMicrosoft2026-04-14
CVE-2026-31485spi: spi-fsl-lpspi: fix teardown order issue (UAF)HIGH7.83%ileMicrosoft2026-04-14
CVE-2026-31483s390/syscalls: Add spectre boundary for syscall dispatch tableHIGH7.82%ileMicrosoft2026-04-14
CVE-2026-31507net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe bufferHIGH7.83%ileMicrosoft2026-04-14
CVE-2026-31500Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lockHIGH7.83%ileMicrosoft2026-04-14
CVE-2026-31494net: macb: use the current queue number for statsHIGH7.83%ileMicrosoft2026-04-14
CVE-2026-31473media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutexHIGH7.83%ileMicrosoft2026-04-14
CVE-2026-31532can: raw: fix ro->uniq use-after-free in raw_rcv()HIGH7.82%ileMicrosoft2026-04-14
CVE-2026-23428ksmbd: fix use-after-free of share_conf in compound requestHIGH7.826%ileMicrosoft2026-04-14
CVE-2026-31583media: em28xx: fix use-after-free in em28xx_v4l2_open()HIGH7.83%ileMicrosoft2026-04-14
CVE-2026-31581ALSA: 6fire: fix use-after-free on disconnectHIGH7.83%ileMicrosoft2026-04-14
CVE-2026-31609smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush()HIGH7.837%ileMicrosoft2026-04-14
CVE-2026-31582hwmon: (powerz) Fix use-after-free on USB disconnectHIGH7.83%ileMicrosoft2026-04-14
CVE-2026-31675net/sched: sch_netem: fix out-of-bounds access in packet corruptionHIGH7.83%ileMicrosoft2026-04-14
CVE-2026-31688driver core: enforce device_lock for driver_match_device()HIGH7.8—Microsoft2026-04-14
CVE-2026-31548wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_downHIGH7.83%ileMicrosoft2026-04-14
CVE-2026-31584media: mediatek: vcodec: fix use-after-free in encoder release pathHIGH7.83%ileMicrosoft2026-04-14
CVE-2026-31648mm: filemap: fix nr_pages calculation overflow in filemap_map_pages()HIGH7.82%ileMicrosoft2026-04-14
CVE-2026-34001Xorg: xwayland: x.org x server: use-after-free vulnerability leads to server crash and potential memory corruptionHIGH7.818%ileMicrosoft2026-04-14
CVE-2026-31508net: openvswitch: Avoid releasing netdev before teardown completesHIGH7.83%ileMicrosoft2026-04-14
CVE-2026-32183Windows Snipping Tool Remote Code Execution VulnerabilityHIGH7.846%ileMicrosoft2026-04-14
CVE-2026-26168Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityHIGH7.88%ileMicrosoft2026-04-14
CVE-2026-27913Windows BitLocker Security Feature Bypass VulnerabilityHIGH7.723%ileMicrosoft2026-04-14
CVE-2026-27144Miscompilation allows memory corruption via CONVNOP-wrapped array copy in cmd/compileHIGH7.718%ileMicrosoft2026-04-14
CVE-2026-26154Windows Server Update Service (WSUS) Tampering VulnerabilityHIGH7.561%ileMicrosoft2026-04-14
CVE-2026-32071Windows Local Security Authority Subsystem Service (LSASS) Denial of Service VulnerabilityHIGH7.561%ileMicrosoft2026-04-14
CVE-2026-32178.NET Spoofing VulnerabilityHIGH7.581%ileMicrosoft2026-04-14
CVE-2026-33096HTTP.sys Denial of Service VulnerabilityHIGH7.566%ileMicrosoft2026-04-14
CVE-2026-33116.NET, .NET Framework, and Visual Studio Denial of Service VulnerabilityHIGH7.580%ileMicrosoft2026-04-14
CVE-2026-21637HackerOne: CVE-2026-21637 TLS PSK/ALPN Callback Exceptions Bypass Error HandlersHIGH7.561%ileMicrosoft2026-04-14
CVE-2026-23666.NET Framework Denial of Service VulnerabilityHIGH7.568%ileMicrosoft2026-04-14
CVE-2026-26171.NET Denial of Service VulnerabilityHIGH7.576%ileMicrosoft2026-04-14
CVE-2026-28388NULL Pointer Dereference When Processing a Delta CRLHIGH7.561%ileMicrosoft2026-04-14
CVE-2026-29181OpenTelemetry-Go multi-value `baggage` header extraction causes excessive allocations (remote dos amplification)HIGH7.544%ileMicrosoft2026-04-14
CVE-2026-40164jq: Algorithmic complexity DoS via hardcoded MurmurHash3 seedHIGH7.529%ileMicrosoft2026-04-14
CVE-2026-5928Static buffer overflow in deprecated nis_local_principalHIGH7.530%ileMicrosoft2026-04-14
CVE-2026-31477ksmbd: fix memory leaks and NULL deref in smb2_lock()HIGH7.539%ileMicrosoft2026-04-14
CVE-2026-41066lxml: Default configuration of iterparse() and ETCompatXMLParser() allows XXE to local filesHIGH7.525%ileMicrosoft2026-04-14
CVE-2026-31662tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSGHIGH7.532%ileMicrosoft2026-04-14
CVE-2026-35385CVE-2026-35385HIGH7.546%ileMicrosoft2026-04-14
CVE-2026-34601xmldom: XML injection via unsafe CDATA serialization allows attacker-controlled markup insertionHIGH7.538%ileMicrosoft2026-04-14
CVE-2026-35611Addressable has a Regular Expression Denial of Service in Addressable templatesHIGH7.529%ileMicrosoft2026-04-14
CVE-2026-28389Possible NULL Dereference When Processing CMS KeyAgreeRecipientInfoHIGH7.560%ileMicrosoft2026-04-14
CVE-2026-28390Possible NULL Dereference When Processing CMS KeyTransportRecipientInfoHIGH7.560%ileMicrosoft2026-04-14
CVE-2026-32283Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tlsHIGH7.546%ileMicrosoft2026-04-14
CVE-2026-32280Unexpected work during chain building in crypto/x509HIGH7.546%ileMicrosoft2026-04-14
CVE-2026-40890github.com/gomarkdown/markdown: Out-of-bounds Read in SmartypantsRendererHIGH7.527%ileMicrosoft2026-04-14
CVE-2026-6507Dnsmasq: dnsmasq: denial of service due to out-of-bounds write in dhcp bootreply processingHIGH7.539%ileMicrosoft2026-04-14
CVE-2026-31552wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroomHIGH7.540%ileMicrosoft2026-04-14
CVE-2026-31563net: macb: Use dev_consume_skb_any() to free TX SKBsHIGH7.540%ileMicrosoft2026-04-14
CVE-2026-41602Apache Thrift: Go TFramedTransport uint32 overflowHIGH7.564%ileMicrosoft2026-04-14
CVE-2026-32156Windows UPnP Device Host Remote Code Execution VulnerabilityHIGH7.421%ileMicrosoft2026-04-14
CVE-2026-32631GitHub: CVE-2026-32631 'git clone' from manipulated repositories can leak NTLM hashesHIGH7.424%ileMicrosoft2026-04-14
CVE-2026-35535CVE-2026-35535HIGH7.47%ileMicrosoft2026-04-14
CVE-2026-41603Apache Thrift: Java TSSLTransportFactory hostname verificationHIGH7.4—Microsoft2026-04-14
CVE-2026-41035CVE-2026-41035HIGH7.432%ileMicrosoft2026-04-14
CVE-2026-32149Windows Hyper-V Remote Code Execution VulnerabilityHIGH7.324%ileMicrosoft2026-04-14
CVE-2026-31789Heap Buffer Overflow in Hexadecimal ConversionHIGH7.316%ileMicrosoft2026-04-14
CVE-2026-31619ALSA: fireworks: bound device-supplied status before string array lookupHIGH7.33%ileMicrosoft2026-04-14
CVE-2026-41605Apache Thrift: Swift Compact Protocol integer overflowHIGH7.357%ileMicrosoft2026-04-14
CVE-2026-26151Remote Desktop Spoofing VulnerabilityHIGH7.154%ileMicrosoft2026-04-14
CVE-2026-32188Microsoft Excel Information Disclosure VulnerabilityHIGH7.134%ileMicrosoft2026-04-14
CVE-2026-31407netfilter: conntrack: add missing netlink policy validationsHIGH7.17%ileMicrosoft2026-04-14
CVE-2026-31419net: bonding: fix use-after-free in bond_xmit_broadcast()HIGH7.13%ileMicrosoft2026-04-14
CVE-2026-31464scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done()HIGH7.120%ileMicrosoft2026-04-14
CVE-2026-31512Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv()HIGH7.12%ileMicrosoft2026-04-14
CVE-2026-31624HID: core: clamp report_size in s32ton() to avoid undefined shiftHIGH7.13%ileMicrosoft2026-04-14
CVE-2026-31626staging: rtl8723bs: initialize le_tmp64 in rtw_BIP_verify()HIGH7.121%ileMicrosoft2026-04-14
CVE-2026-31537smb: server: make use of smbdirect_socket.send_io.bcreditsHIGH7.12%ileMicrosoft2026-04-14
CVE-2026-31608smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list()HIGH7.137%ileMicrosoft2026-04-14
CVE-2026-31611ksmbd: require 3 sub-authorities before reading sub_auth[2]HIGH7.129%ileMicrosoft2026-04-14
CVE-2026-31627i2c: s3c24xx: check the size of the SMBUS message before using itHIGH7.13%ileMicrosoft2026-04-14
CVE-2026-31612ksmbd: validate EaNameLength in smb2_get_ea()HIGH7.134%ileMicrosoft2026-04-14
CVE-2026-31568s390/mm: Add missing secure storage access fixups for donated memoryHIGH7.12%ileMicrosoft2026-04-14
CVE-2026-31649net: stmmac: fix integer underflow in chain modeHIGH7.138%ileMicrosoft2026-04-14
CVE-2026-31682bridge: br_nd_send: linearize skb before parsing ND optionsHIGH7.139%ileMicrosoft2026-04-14
CVE-2026-31679openvswitch: validate MPLS set/set_masked payload lengthHIGH7.12%ileMicrosoft2026-04-14
CVE-2026-31674netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check()HIGH7.12%ileMicrosoft2026-04-14
CVE-2026-31686mm/kasan: fix double free for kasan pXdsHIGH7.12%ileMicrosoft2026-04-14
CVE-2026-23444wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failureHIGH7.13%ileMicrosoft2026-04-14
CVE-2026-40024Sleuth Kit tsk_recover Path TraversalHIGH7.16%ileMicrosoft2026-04-14
CVE-2026-23409apparmor: fix differential encoding verificationHIGH7.17%ileMicrosoft2026-04-14
CVE-2026-31523nvme-pci: ensure we're polling a polled queueHIGH7.10%ileMicrosoft2026-04-14
CVE-2026-31505iavf: fix out-of-bounds writes in iavf_get_ethtool_stats()HIGH7.13%ileMicrosoft2026-04-14
CVE-2026-31469virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is falseHIGH7.13%ileMicrosoft2026-04-14
CVE-2026-31449ext4: validate p_idx bounds in ext4_ext_correct_indexesHIGH7.13%ileMicrosoft2026-04-14
CVE-2026-31482s390/entry: Scrub r12 register on kernel entryHIGH7.12%ileMicrosoft2026-04-14
CVE-2026-31518esp: fix skb leak with espintcp and async cryptoHIGH7.13%ileMicrosoft2026-04-14
CVE-2026-31519btrfs: set BTRFS_ROOT_ORPHAN_CLEANUP during subvol createHIGH7.12%ileMicrosoft2026-04-14
CVE-2026-31528perf: Make sure to use pmu_ctx->pmu for groupsHIGH7.13%ileMicrosoft2026-04-14
CVE-2026-31525bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MINHIGH7.13%ileMicrosoft2026-04-14
CVE-2026-31492RDMA/irdma: Initialize free_qp completion before using itHIGH7.12%ileMicrosoft2026-04-14
CVE-2026-31536smb: server: let send_done handle a completion without IB_SEND_SIGNALEDHIGH7.136%ileMicrosoft2026-04-14
CVE-2026-31616usb: gadget: f_phonet: fix skb frags[] overflow in pn_rx_complete()HIGH7.13%ileMicrosoft2026-04-14
CVE-2026-31658net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit()HIGH7.12%ileMicrosoft2026-04-14
CVE-2026-34003Xorg: xwayland: x.org x server: information exposure and denial of service via out-of-bounds memory accessHIGH7.116%ileMicrosoft2026-04-14
CVE-2026-25184Applocker Filter Driver (applockerfltr.sys) Elevation of Privilege VulnerabilityHIGH7.08%ileMicrosoft2026-04-14
CVE-2026-26165Windows Shell Elevation of Privilege VulnerabilityHIGH7.017%ileMicrosoft2026-04-14
CVE-2026-26166Windows Shell Elevation of Privilege VulnerabilityHIGH7.016%ileMicrosoft2026-04-14
CVE-2026-26174Windows Server Update Service (WSUS) Elevation of Privilege VulnerabilityHIGH7.08%ileMicrosoft2026-04-14
CVE-2026-27908Windows TDI Translation Driver (tdx.sys) Elevation of Privilege VulnerabilityHIGH7.073%ileMicrosoft2026-04-14
CVE-2026-27917Windows WFP NDIS Lightweight Filter Driver (wfplwfs.sys) Elevation of Privilege VulnerabilityHIGH7.016%ileMicrosoft2026-04-14
CVE-2026-27921Windows TDI Translation Driver (tdx.sys) Elevation of Privilege VulnerabilityHIGH7.065%ileMicrosoft2026-04-14
CVE-2026-27926Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityHIGH7.08%ileMicrosoft2026-04-14
CVE-2026-27929Windows LUA File Virtualization Filter Driver Elevation of Privilege VulnerabilityHIGH7.08%ileMicrosoft2026-04-14
CVE-2026-32073Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityHIGH7.028%ileMicrosoft2026-04-14
CVE-2026-32075Windows UPnP Device Host Elevation of Privilege VulnerabilityHIGH7.019%ileMicrosoft2026-04-14
CVE-2026-32082Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege VulnerabilityHIGH7.010%ileMicrosoft2026-04-14
CVE-2026-32083Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege VulnerabilityHIGH7.010%ileMicrosoft2026-04-14
CVE-2026-32087Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege VulnerabilityHIGH7.017%ileMicrosoft2026-04-14
CVE-2026-32093Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege VulnerabilityHIGH7.063%ileMicrosoft2026-04-14
CVE-2026-32195Windows Kernel Elevation of Privilege VulnerabilityHIGH7.016%ileMicrosoft2026-04-14
CVE-2026-32219Microsoft Brokering File System Elevation of Privilege VulnerabilityHIGH7.08%ileMicrosoft2026-04-14
CVE-2026-32224Windows Server Update Service (WSUS) Elevation of Privilege VulnerabilityHIGH7.016%ileMicrosoft2026-04-14
CVE-2026-26152Microsoft Cryptographic Services Elevation of Privilege VulnerabilityHIGH7.014%ileMicrosoft2026-04-14
CVE-2026-26173Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityHIGH7.06%ileMicrosoft2026-04-14
CVE-2026-26177Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityHIGH7.010%ileMicrosoft2026-04-14
CVE-2026-26182Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityHIGH7.010%ileMicrosoft2026-04-14
CVE-2026-27922Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityHIGH7.010%ileMicrosoft2026-04-14
CVE-2026-32068Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege VulnerabilityHIGH7.06%ileMicrosoft2026-04-14
CVE-2026-32070Windows Common Log File System Driver Elevation of Privilege VulnerabilityHIGH7.024%ileMicrosoft2026-04-14
CVE-2026-32080Windows WalletService Elevation of Privilege VulnerabilityHIGH7.012%ileMicrosoft2026-04-14
CVE-2026-32086Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege VulnerabilityHIGH7.05%ileMicrosoft2026-04-14
CVE-2026-32150Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege VulnerabilityHIGH7.05%ileMicrosoft2026-04-14
CVE-2026-33099Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityHIGH7.08%ileMicrosoft2026-04-14
CVE-2026-33100Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityHIGH7.08%ileMicrosoft2026-04-14
CVE-2026-33104Win32k Elevation of Privilege VulnerabilityHIGH7.011%ileMicrosoft2026-04-14
CVE-2026-31448ext4: avoid infinite loops caused by residual dataHIGH7.036%ileMicrosoft2026-04-14
CVE-2026-31480tracing: Fix potential deadlock in cpu hotplug with osnoiseHIGH7.01%ileMicrosoft2026-04-14
CVE-2026-31450ext4: publish jinode after initializationHIGH7.042%ileMicrosoft2026-04-14
CVE-2026-31521module: Fix kernel panic when a symbol st_shndx is out of boundsHIGH7.03%ileMicrosoft2026-04-14
CVE-2026-31557nvmet: move async event work off nvmet-wqHIGH7.036%ileMicrosoft2026-04-14
CVE-2026-31667Input: uinput - fix circular locking dependency with ff-coreHIGH7.01%ileMicrosoft2026-04-14
CVE-2026-31637rxrpc: reject undecryptable rxkad response ticketsHIGH7.041%ileMicrosoft2026-04-14
CVE-2026-31591KVM: SEV: Lock all vCPUs when synchronzing VMSAs for SNP launch finishHIGH7.02%ileMicrosoft2026-04-14
CVE-2026-31628x86/CPU: Fix FPDSS on Zen1HIGH7.03%ileMicrosoft2026-04-14
CVE-2026-31487spi: use generic driver_override infrastructureHIGH7.01%ileMicrosoft2026-04-14
CVE-2026-31515af_key: validate families in pfkey_send_migrate()HIGH7.03%ileMicrosoft2026-04-14
CVE-2026-31498Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loopHIGH7.02%ileMicrosoft2026-04-14
CVE-2026-31453xfs: avoid dereferencing log items after push callbacksHIGH7.03%ileMicrosoft2026-04-14
CVE-2026-31555futex: Clear stale exiting pointer in futex_lock_pi() retry pathHIGH7.03%ileMicrosoft2026-04-14
CVE-2026-31638rxrpc: Only put the call ref if one was acquiredHIGH7.036%ileMicrosoft2026-04-14
CVE-2026-31613smb: client: fix OOB reads parsing symlink error responseHIGH7.030%ileMicrosoft2026-04-14
CVE-2026-32223Windows USB Printing Stack (usbprint.sys) Elevation of Privilege VulnerabilityMEDIUM6.841%ileMicrosoft2026-04-14
CVE-2026-0390UEFI Secure Boot Security Feature Bypass VulnerabilityMEDIUM6.724%ileMicrosoft2026-04-14
CVE-2026-32167SQL Server Elevation of Privilege VulnerabilityMEDIUM6.722%ileMicrosoft2026-04-14
CVE-2026-32176SQL Server Elevation of Privilege VulnerabilityMEDIUM6.716%ileMicrosoft2026-04-14
CVE-2026-4878Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()MEDIUM6.711%ileMicrosoft2026-04-14
CVE-2026-31566drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ibMEDIUM6.63%ileMicrosoft2026-04-14
CVE-2026-41411Vim: Command injection via backtick expansion in tag filenamesMEDIUM6.640%ileMicrosoft2026-04-14
CVE-2026-31587ASoC: qcom: q6apm: move component registration to unmanaged versionMEDIUM6.63%ileMicrosoft2026-04-14
CVE-2026-31597ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRYMEDIUM6.63%ileMicrosoft2026-04-14
CVE-2026-31592KVM: SEV: Protect *all* of sev_mem_enc_register_region() with kvm->lockMEDIUM6.62%ileMicrosoft2026-04-14
CVE-2026-33999Xorg: xwayland: x.org x server: denial of service via integer underflow in xkb compatibility map handlingMEDIUM6.631%ileMicrosoft2026-04-14
CVE-2026-31596ocfs2: handle invalid dinode in ocfs2_group_extendMEDIUM6.63%ileMicrosoft2026-04-14
CVE-2026-31665netfilter: nft_ct: fix use-after-free in timeout object destroyMEDIUM6.62%ileMicrosoft2026-04-14
CVE-2026-31623net: usb: cdc-phonet: fix skb frags[] overflow in rx_complete()MEDIUM6.63%ileMicrosoft2026-04-14
CVE-2026-26155Microsoft Local Security Authority Subsystem Service Information Disclosure VulnerabilityMEDIUM6.556%ileMicrosoft2026-04-14
CVE-2026-27925Windows UPnP Device Host Information Disclosure VulnerabilityMEDIUM6.529%ileMicrosoft2026-04-14
CVE-2026-32151Windows Shell Information Disclosure VulnerabilityMEDIUM6.551%ileMicrosoft2026-04-14
CVE-2026-32201Microsoft SharePoint Server Spoofing VulnerabilityMEDIUM6.597%ileMicrosoft2026-04-14
CVE-2026-34978OpenPrinting CUPS: Path traversal in RSS notify-recipient-uri enables file write outside CacheDir/rss (and clobbering ofMEDIUM6.533%ileMicrosoft2026-04-14
CVE-2026-31410ksmbd: use volume UUID in FS_OBJECT_ID_INFORMATIONMEDIUM6.56%ileMicrosoft2026-04-14
CVE-2026-31790Incorrect Failure Handling in RSA KEM RSASVE EncapsulationMEDIUM6.565%ileMicrosoft2026-04-14
CVE-2026-23405apparmor: fix: limit the number of levels of policy namespacesMEDIUM6.58%ileMicrosoft2026-04-14
CVE-2026-34271CVE-2026-34271MEDIUM6.523%ileMicrosoft2026-04-14
CVE-2026-41607Apache Thrift: C++ JSON OOB readMEDIUM6.556%ileMicrosoft2026-04-14
CVE-2026-35549CVE-2026-35549MEDIUM6.517%ileMicrosoft2026-04-14
CVE-2026-22009CVE-2026-22009MEDIUM6.523%ileMicrosoft2026-04-14
CVE-2026-34270CVE-2026-34270MEDIUM6.523%ileMicrosoft2026-04-14
CVE-2026-22017CVE-2026-22017MEDIUM6.523%ileMicrosoft2026-04-14
CVE-2026-34303CVE-2026-34303MEDIUM6.523%ileMicrosoft2026-04-14
CVE-2026-34308CVE-2026-34308MEDIUM6.523%ileMicrosoft2026-04-14
CVE-2026-34276CVE-2026-34276MEDIUM6.523%ileMicrosoft2026-04-14
CVE-2026-6732Libxml2: libxml2: denial of service via crafted xsd-validated documentMEDIUM6.547%ileMicrosoft2026-04-14
CVE-2026-6238Buffer overread in ns_printrrf with corrupted RDATA fieldMEDIUM6.528%ileMicrosoft2026-04-14
CVE-2026-40226CVE-2026-40226MEDIUM6.40%ileMicrosoft2026-04-14
CVE-2026-40225CVE-2026-40225MEDIUM6.44%ileMicrosoft2026-04-14
CVE-2026-31488drm/amd/display: Do not skip unrelated mode changes in DSC validationMEDIUM6.34%ileMicrosoft2026-04-14
CVE-2026-32072Active Directory Spoofing VulnerabilityMEDIUM6.221%ileMicrosoft2026-04-14
CVE-2026-33947jq: Unbounded Recursion in jv_setpath(), jv_getpath() and delpaths_sorted()MEDIUM6.214%ileMicrosoft2026-04-14
CVE-2025-48431Apache Thrift: Specially crafted input can crash a c_glib Thrift server with invalid pointer error.MEDIUM6.262%ileMicrosoft2026-04-14
CVE-2026-33822Microsoft Word Information Disclosure VulnerabilityMEDIUM6.129%ileMicrosoft2026-04-14
CVE-2026-26169Windows Kernel Memory Information Disclosure VulnerabilityMEDIUM6.182%ileMicrosoft2026-04-14
CVE-2026-32088Windows Biometric Service Security Feature Bypass VulnerabilityMEDIUM6.19%ileMicrosoft2026-04-14
CVE-2026-32196Windows Admin Center Spoofing VulnerabilityMEDIUM6.122%ileMicrosoft2026-04-14
CVE-2026-39956jq: Missing runtime type checks for _strindices lead to crash and limited memory disclosureMEDIUM6.17%ileMicrosoft2026-04-14
CVE-2026-32289JsBraceDepth Context Tracking Bugs (XSS) in html/templateMEDIUM6.121%ileMicrosoft2026-04-14
CVE-2026-35199SymCrypt SymCryptXmssSign function - Heap overflow via 64->32-bit leaf-count truncationMEDIUM6.120%ileMicrosoft2026-04-14
CVE-2026-40255@adonisjs/http-server has an Open Redirect vulnerabilityMEDIUM6.116%ileMicrosoft2026-04-14
CVE-2026-5160CVE-2026-5160MEDIUM6.121%ileMicrosoft2026-04-14
CVE-2026-41305PostCSS has XSS via Unescaped </style> in its CSS Stringify OutputMEDIUM6.111%ileMicrosoft2026-04-14
CVE-2026-6861Emacs: emacs: memory corruption vulnerability when processing svg cssMEDIUM6.11%ileMicrosoft2026-04-14
CVE-2026-25250MITRE: CVE-2026-25250 Secure Boot disable Eazy FixMEDIUM6.0—Microsoft2026-04-14
CVE-2026-33810Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509MEDIUM5.927%ileMicrosoft2026-04-14
CVE-2026-32281Inefficient policy validation in crypto/x509MEDIUM5.928%ileMicrosoft2026-04-14
CVE-2026-35201Discount has an Out-of-bounds Read in rdiscountMEDIUM5.920%ileMicrosoft2026-04-14
CVE-2026-31429net: skb: fix cross-cache free of KFENCE-allocated skb headMEDIUM5.918%ileMicrosoft2026-04-14
CVE-2026-32226.NET Framework Denial of Service VulnerabilityMEDIUM5.942%ileMicrosoft2026-04-14
CVE-2026-23653GitHub Copilot and Visual Studio Code Information Disclosure VulnerabilityMEDIUM5.751%ileMicrosoft2026-04-14
CVE-2026-23670Windows Virtualization-Based Security (VBS) Security Feature Bypass VulnerabilityMEDIUM5.717%ileMicrosoft2026-04-14
CVE-2025-13763Libopensc: opensc: multiple uses of uninitialized variableMEDIUM5.77%ileMicrosoft2026-04-14
CVE-2026-31431crypto: algif_aead - Revert to operating out-of-placeMEDIUM5.5100%ileMicrosoft2026-04-14
CVE-2026-27931Windows GDI Information Disclosure VulnerabilityMEDIUM5.539%ileMicrosoft2026-04-14
CVE-2026-32081Package Catalog Information Disclosure VulnerabilityMEDIUM5.535%ileMicrosoft2026-04-14
CVE-2026-32085Remote Procedure Call Information Disclosure VulnerabilityMEDIUM5.536%ileMicrosoft2026-04-14
CVE-2026-32181Connected User Experiences and Telemetry Service Denial of Service VulnerabilityMEDIUM5.534%ileMicrosoft2026-04-14
CVE-2026-32215Windows Kernel Information Disclosure VulnerabilityMEDIUM5.535%ileMicrosoft2026-04-14
CVE-2026-32216Windows Redirected Drive Buffering System Denial of Service VulnerabilityMEDIUM5.529%ileMicrosoft2026-04-14
CVE-2026-32217Windows Kernel Information Disclosure VulnerabilityMEDIUM5.535%ileMicrosoft2026-04-14
CVE-2026-32218Windows Kernel Information Disclosure VulnerabilityMEDIUM5.536%ileMicrosoft2026-04-14
CVE-2026-32212Universal Plug and Play (upnp.dll) Information Disclosure VulnerabilityMEDIUM5.523%ileMicrosoft2026-04-14
CVE-2026-20806Windows COM Server Information Disclosure VulnerabilityMEDIUM5.527%ileMicrosoft2026-04-14
CVE-2026-27930Windows GDI Information Disclosure VulnerabilityMEDIUM5.531%ileMicrosoft2026-04-14
CVE-2026-32079Web Account Manager Information Disclosure VulnerabilityMEDIUM5.526%ileMicrosoft2026-04-14
CVE-2026-32084Windows Print Spooler Information Disclosure VulnerabilityMEDIUM5.528%ileMicrosoft2026-04-14
CVE-2026-33103Microsoft Dynamics 365 (On-Premises) Information Disclosure VulnerabilityMEDIUM5.513%ileMicrosoft2026-04-14
CVE-2026-32214Universal Plug and Play (upnp.dll) Information Disclosure VulnerabilityMEDIUM5.513%ileMicrosoft2026-04-14
CVE-2026-31394mac80211: fix crash in ieee80211_chan_bw_change for AP_VLAN stationsMEDIUM5.52%ileMicrosoft2026-04-14
CVE-2026-23468drm/amdgpu: Limit BO list entry count to prevent resource exhaustionMEDIUM5.52%ileMicrosoft2026-04-14
CVE-2026-23442ipv6: add NULL checks for idev in SRv6 pathsMEDIUM5.52%ileMicrosoft2026-04-14
CVE-2026-34933Avahi: Reachable assertion in `transport_flags_from_domain()` via conflicting publish flags crashes avahi-daemonMEDIUM5.510%ileMicrosoft2026-04-14
CVE-2026-39855osslsigncode has an Integer Underflow in PE Page Hash Calculation Can Cause Out-of-Bounds ReadMEDIUM5.54%ileMicrosoft2026-04-14
CVE-2026-39856osslsigncode has an Out-of-Bounds Read via Unvalidated Section Bounds in PE Page Hash CalculationMEDIUM5.54%ileMicrosoft2026-04-14
CVE-2026-31423net/sched: sch_hfsc: fix divide-by-zero in rtsc_min()MEDIUM5.52%ileMicrosoft2026-04-14
CVE-2026-31424netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARPMEDIUM5.52%ileMicrosoft2026-04-14
CVE-2026-31421net/sched: cls_fw: fix NULL pointer dereference on shared blocksMEDIUM5.52%ileMicrosoft2026-04-14
CVE-2026-31428netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOADMEDIUM5.53%ileMicrosoft2026-04-14
CVE-2026-31452ext4: convert inline data to extents when truncate exceeds inline sizeMEDIUM5.53%ileMicrosoft2026-04-14
CVE-2026-31455xfs: stop reclaim before pushing AIL during unmountMEDIUM5.53%ileMicrosoft2026-04-14
CVE-2026-31474can: isotp: fix tx.buf use-after-free in isotp_sendmsg()MEDIUM5.51%ileMicrosoft2026-04-14
CVE-2026-31461drm/amd/display: Fix drm_edid leak in amdgpu_dmMEDIUM5.52%ileMicrosoft2026-04-14
CVE-2026-31441dmaengine: idxd: Fix memory leak when a wq is resetMEDIUM5.52%ileMicrosoft2026-04-14
CVE-2026-31495netfilter: ctnetlink: use netlink policy range checksMEDIUM5.53%ileMicrosoft2026-04-14
CVE-2026-31439dmaengine: xilinx: xdma: Fix regmap init error handlingMEDIUM5.52%ileMicrosoft2026-04-14
CVE-2026-31531ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop()MEDIUM5.56%ileMicrosoft2026-04-14
CVE-2026-23438net: mvpp2: guard flow control update with global_tx_fc in buffer switchingMEDIUM5.53%ileMicrosoft2026-04-14
CVE-2026-23439udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=nMEDIUM5.53%ileMicrosoft2026-04-14
CVE-2026-23446net: usb: aqc111: Do not perform PM inside suspend callbackMEDIUM5.53%ileMicrosoft2026-04-14
CVE-2026-31606usb: gadget: f_hid: don't call cdev_init while cdev in useMEDIUM5.52%ileMicrosoft2026-04-14
CVE-2026-31646net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool()MEDIUM5.52%ileMicrosoft2026-04-14
CVE-2026-31590KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGIONMEDIUM5.53%ileMicrosoft2026-04-14
CVE-2026-31618fbdev: tdfxfb: avoid divide-by-zero on FBIOPUT_VSCREENINFOMEDIUM5.53%ileMicrosoft2026-04-14
CVE-2026-31660nfc: pn533: allocate rx skb before consuming bytesMEDIUM5.52%ileMicrosoft2026-04-14
CVE-2026-31605fbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFOMEDIUM5.53%ileMicrosoft2026-04-14
CVE-2026-31599media: vidtv: fix NULL pointer dereference in vidtv_channel_pmt_match_sectionsMEDIUM5.53%ileMicrosoft2026-04-14
CVE-2026-31602ALSA: ctxfi: Limit PTP to a single pageMEDIUM5.53%ileMicrosoft2026-04-14
CVE-2026-31651mmc: vub300: fix NULL-deref on disconnectMEDIUM5.52%ileMicrosoft2026-04-14
CVE-2026-23420wifi: wlcore: Fix a locking bugMEDIUM5.51%ileMicrosoft2026-04-14
CVE-2026-31672wifi: rt2x00usb: fix devres lifetimeMEDIUM5.52%ileMicrosoft2026-04-14
CVE-2026-31565RDMA/irdma: Fix deadlock during netdev reset with active connectionsMEDIUM5.51%ileMicrosoft2026-04-14
CVE-2026-31621bnge: return after auxiliary_device_uninit() in error pathMEDIUM5.52%ileMicrosoft2026-04-14
CVE-2026-31615usb: gadget: renesas_usb3: validate endpoint index in standard request handlersMEDIUM5.53%ileMicrosoft2026-04-14
CVE-2026-31610ksmbd: fix mechToken leak when SPNEGO decode fails after token allocMEDIUM5.54%ileMicrosoft2026-04-14
CVE-2026-31645net: lan966x: fix page pool leak in error pathsMEDIUM5.52%ileMicrosoft2026-04-14
CVE-2026-31598ocfs2: fix possible deadlock between unlink and dio_end_io_writeMEDIUM5.536%ileMicrosoft2026-04-14
CVE-2026-23414tls: Purge async_hold in tls_decrypt_async_wait()MEDIUM5.516%ileMicrosoft2026-04-14
CVE-2026-31603staging: sm750fb: fix division by zero in ps_to_hz()MEDIUM5.53%ileMicrosoft2026-04-14
CVE-2026-31600arm64: mm: Handle invalid large leaf mappings correctlyMEDIUM5.521%ileMicrosoft2026-04-14
CVE-2026-31671xfrm_user: fix info leak in build_report()MEDIUM5.52%ileMicrosoft2026-04-14
CVE-2026-31560spi: spi-dw-dma: fix print error log when wait finish transactionMEDIUM5.52%ileMicrosoft2026-04-14
CVE-2026-31575mm/userfaultfd: fix hugetlb fault mutex hash calculationMEDIUM5.52%ileMicrosoft2026-04-14
CVE-2026-31639rxrpc: Fix key reference count leak from call->keyMEDIUM5.52%ileMicrosoft2026-04-14
CVE-2026-31579wireguard: device: use exit_rtnl callback instead of manual rtnl_lock in pre_exitMEDIUM5.52%ileMicrosoft2026-04-14
CVE-2026-31655pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabledMEDIUM5.52%ileMicrosoft2026-04-14
CVE-2026-31685netfilter: ip6t_eui64: reject invalid MAC header for all packetsMEDIUM5.526%ileMicrosoft2026-04-14
CVE-2026-31680net: ipv6: flowlabel: defer exclusive option free until RCU teardownMEDIUM5.53%ileMicrosoft2026-04-14
CVE-2026-31678openvswitch: defer tunnel netdev_put to RCU releaseMEDIUM5.51%ileMicrosoft2026-04-14
CVE-2026-31595PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanupMEDIUM5.52%ileMicrosoft2026-04-14
CVE-2026-31681netfilter: xt_multiport: validate range encoding in checkentryMEDIUM5.52%ileMicrosoft2026-04-14
CVE-2026-31625HID: alps: fix NULL pointer dereference in alps_raw_event()MEDIUM5.53%ileMicrosoft2026-04-14
CVE-2026-31673af_unix: read UNIX_DIAG_VFS data under unix_state_lockMEDIUM5.52%ileMicrosoft2026-04-14
CVE-2026-31664xfrm: clear trailing padding in build_polexpire()MEDIUM5.52%ileMicrosoft2026-04-14
CVE-2026-31545NFC: nxp-nci: allow GPIOs to sleepMEDIUM5.52%ileMicrosoft2026-04-14
CVE-2026-31546net: bonding: fix NULL deref in bond_debug_rlb_hash_showMEDIUM5.53%ileMicrosoft2026-04-14
CVE-2026-23472serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWNMEDIUM5.52%ileMicrosoft2026-04-14
CVE-2026-23403apparmor: fix memory leak in verify_headerMEDIUM5.57%ileMicrosoft2026-04-14
CVE-2026-23404apparmor: replace recursive profile removal with iterative approachMEDIUM5.57%ileMicrosoft2026-04-14
CVE-2026-32288Unbounded allocation for old GNU sparse in archive/tarMEDIUM5.521%ileMicrosoft2026-04-14
CVE-2026-31422net/sched: cls_flow: fix NULL pointer dereference on shared blocksMEDIUM5.52%ileMicrosoft2026-04-14
CVE-2026-31426ACPI: EC: clean up handlers on probe failure in acpi_ec_setup()MEDIUM5.52%ileMicrosoft2026-04-14
CVE-2026-31420bridge: mrp: reject zero test interval to avoid OOM panicMEDIUM5.51%ileMicrosoft2026-04-14
CVE-2026-31524HID: asus: avoid memory leak in asus_report_fixup()MEDIUM5.52%ileMicrosoft2026-04-14
CVE-2026-31486hwmon: (pmbus/core) Protect regulator operations with mutexMEDIUM5.51%ileMicrosoft2026-04-14
CVE-2026-31496netfilter: nf_conntrack_expect: skip expectations in other netns via procMEDIUM5.52%ileMicrosoft2026-04-14
CVE-2026-31458mm/damon/sysfs: check contexts->nr before accessing contexts_arr[0]MEDIUM5.52%ileMicrosoft2026-04-14
CVE-2026-31462drm/amdgpu: prevent immediate PASID reuse caseMEDIUM5.52%ileMicrosoft2026-04-14
CVE-2026-31497Bluetooth: btusb: clamp SCO altsetting table indicesMEDIUM5.52%ileMicrosoft2026-04-14
CVE-2026-31440dmaengine: idxd: Fix leaking event log memoryMEDIUM5.52%ileMicrosoft2026-04-14
CVE-2026-31489spi: meson-spicc: Fix double-put in remove pathMEDIUM5.53%ileMicrosoft2026-04-14
CVE-2026-31510Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cbMEDIUM5.52%ileMicrosoft2026-04-14
CVE-2026-31520HID: apple: avoid memory leak in apple_report_fixup()MEDIUM5.52%ileMicrosoft2026-04-14
CVE-2026-31447ext4: reject mount if bigalloc with s_first_data_block != 0MEDIUM5.54%ileMicrosoft2026-04-14
CVE-2026-31444ksmbd: fix use-after-free and NULL deref in smb_grant_oplock()MEDIUM5.537%ileMicrosoft2026-04-14
CVE-2026-31522HID: magicmouse: avoid memory leak in magicmouse_report_fixup()MEDIUM5.52%ileMicrosoft2026-04-14
CVE-2026-31509nfc: nci: fix circular locking dependency in nci_close_deviceMEDIUM5.51%ileMicrosoft2026-04-14
CVE-2026-31451ext4: replace BUG_ON with proper error handling in ext4_read_inline_folioMEDIUM5.52%ileMicrosoft2026-04-14
CVE-2026-31503udp: Fix wildcard bind conflict check when using hash2MEDIUM5.52%ileMicrosoft2026-04-14
CVE-2026-31467erofs: add GFP_NOIO in the bio completion if neededMEDIUM5.530%ileMicrosoft2026-04-14
CVE-2026-23434mtd: rawnand: serialize lock/unlock against other NAND operationsMEDIUM5.53%ileMicrosoft2026-04-14
CVE-2026-31574clockevents: Add missing resets of the next_event_forced flagMEDIUM5.51%ileMicrosoft2026-04-14
CVE-2026-31604wifi: rtw88: fix device leak on probe failureMEDIUM5.52%ileMicrosoft2026-04-14
CVE-2026-31585media: vidtv: fix nfeeds state corruption on start_streaming failureMEDIUM5.53%ileMicrosoft2026-04-14
CVE-2026-31577nilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_mapMEDIUM5.53%ileMicrosoft2026-04-14
CVE-2026-31670net: rfkill: prevent unlimited numbers of rfkill events from being createdMEDIUM5.52%ileMicrosoft2026-04-14
CVE-2026-31642rxrpc: Fix call removal to use RCU safe deletionMEDIUM5.52%ileMicrosoft2026-04-14
CVE-2026-31594PCI: endpoint: pci-epf-vntb: Remove duplicate resource teardownMEDIUM5.52%ileMicrosoft2026-04-14
CVE-2026-31601vfio/xe: Reorganize the init to decouple migration from resetMEDIUM5.52%ileMicrosoft2026-04-14
CVE-2026-31676rxrpc: only handle RESPONSE during service challengeMEDIUM5.532%ileMicrosoft2026-04-14
CVE-2026-31677crypto: af_alg - limit RX SG extraction by receive buffer budgetMEDIUM5.52%ileMicrosoft2026-04-14
CVE-2026-31634rxrpc: fix reference count leak in rxrpc_server_keyring()MEDIUM5.53%ileMicrosoft2026-04-14
CVE-2026-31684net: sched: act_csum: validate nested VLAN headersMEDIUM5.52%ileMicrosoft2026-04-14
CVE-2026-31689EDAC/mc: Fix error path ordering in edac_mc_alloc()MEDIUM5.52%ileMicrosoft2026-04-14
CVE-2026-31549i2c: cp2615: fix serial string NULL-deref at probeMEDIUM5.52%ileMicrosoft2026-04-14
CVE-2026-31550pmdomain: bcm: bcm2835-power: Increase ASB control timeoutMEDIUM5.52%ileMicrosoft2026-04-14
CVE-2026-31551wifi: mac80211: Fix static_branch_dec() underflow for aql_disable.MEDIUM5.52%ileMicrosoft2026-04-14
CVE-2026-31661wifi: brcmsmac: Fix dma_free_coherent() sizeMEDIUM5.52%ileMicrosoft2026-04-14
CVE-2026-31540drm/i915/gt: Check set_default_submission() before deferencingMEDIUM5.52%ileMicrosoft2026-04-14
CVE-2026-31499Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del()MEDIUM5.51%ileMicrosoft2026-04-14
CVE-2026-33119Microsoft Edge (Chromium-based) for Android Spoofing VulnerabilityMEDIUM5.424%ileMicrosoft2026-04-14
CVE-2023-20585AMD: CVE-2023-20585 IOMMU Write Buffer VulnerabilityMEDIUM5.31%ileMicrosoft2026-04-14
CVE-2026-32282TOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unixMEDIUM5.321%ileMicrosoft2026-04-14
CVE-2026-34979OpenPrinting CUPS: Heap overflow in `get_options()`MEDIUM5.331%ileMicrosoft2026-04-14
CVE-2026-39882OpenTelemetry-Go OTLP HTTP exporters read unbounded HTTP response bodiesMEDIUM5.39%ileMicrosoft2026-04-14
CVE-2026-41606Apache Thrift: c_glib dispatch stack overflowMEDIUM5.362%ileMicrosoft2026-04-14
CVE-2026-34757LIBPNG has a yse-after-free in png_set_PLTE, png_set_tRNS and png_set_hIST leading to corrupted chunk data and potentialMEDIUM5.110%ileMicrosoft2026-04-14
CVE-2026-39881Vim Ex command injection in Vims NetBeans integrationMEDIUM5.046%ileMicrosoft2026-04-14
CVE-2026-35239CVE-2026-35239MEDIUM4.916%ileMicrosoft2026-04-14
CVE-2026-35238CVE-2026-35238MEDIUM4.916%ileMicrosoft2026-04-14
CVE-2026-34267CVE-2026-34267MEDIUM4.925%ileMicrosoft2026-04-14
CVE-2026-22005CVE-2026-22005MEDIUM4.925%ileMicrosoft2026-04-14
CVE-2026-34278CVE-2026-34278MEDIUM4.925%ileMicrosoft2026-04-14
CVE-2026-21998CVE-2026-21998MEDIUM4.925%ileMicrosoft2026-04-14
CVE-2026-35237CVE-2026-35237MEDIUM4.916%ileMicrosoft2026-04-14
CVE-2026-34293CVE-2026-34293MEDIUM4.925%ileMicrosoft2026-04-14
CVE-2026-22002CVE-2026-22002MEDIUM4.925%ileMicrosoft2026-04-14
CVE-2026-34304CVE-2026-34304MEDIUM4.925%ileMicrosoft2026-04-14
CVE-2026-22004CVE-2026-22004MEDIUM4.925%ileMicrosoft2026-04-14
CVE-2026-35240CVE-2026-35240MEDIUM4.916%ileMicrosoft2026-04-14
CVE-2026-35236CVE-2026-35236MEDIUM4.916%ileMicrosoft2026-04-14
CVE-2026-27447OpenPrinting CUPS: Authorization bypass via case-insensitive group-member lookupMEDIUM4.824%ileMicrosoft2026-04-14
CVE-2026-41989CVE-2026-41989MEDIUM4.88%ileMicrosoft2026-04-14
CVE-2026-23473io_uring/poll: fix multishot recv missing EOF on wakeup raceMEDIUM4.7—Microsoft2026-04-14
CVE-2026-27456util-linux: TOCTOU Race Condition in util-linux mount(8) - Loop Device SetupMEDIUM4.72%ileMicrosoft2026-04-14
CVE-2026-34446ONNX: Arbitrary File Read via ExternalData Hardlink Bypass in ONNX loadMEDIUM4.77%ileMicrosoft2026-04-14
CVE-2026-20945Microsoft SharePoint Server Spoofing VulnerabilityMEDIUM4.698%ileMicrosoft2026-04-14
CVE-2026-26175Windows Boot Manager Security Feature Bypass VulnerabilityMEDIUM4.632%ileMicrosoft2026-04-14
CVE-2026-20928Windows Recovery Environment Security Feature Bypass VulnerabilityMEDIUM4.635%ileMicrosoft2026-04-14
CVE-2026-27906Windows Hello Security Feature Bypass VulnerabilityMEDIUM4.432%ileMicrosoft2026-04-14
CVE-2026-32220UEFI Secure Boot Security Feature Bypass VulnerabilityMEDIUM4.421%ileMicrosoft2026-04-14
CVE-2026-40026Sleuth Kit ISO9660 SUSP Extension Reference Out-of-Bounds ReadMEDIUM4.43%ileMicrosoft2026-04-14
CVE-2026-40025Sleuth Kit APFS Keybag Parser Out-of-Bounds ReadMEDIUM4.42%ileMicrosoft2026-04-14
CVE-2026-33829Windows Snipping Tool Spoofing VulnerabilityMEDIUM4.388%ileMicrosoft2026-04-14
CVE-2026-22015CVE-2026-22015MEDIUM4.316%ileMicrosoft2026-04-14
CVE-2026-41079OpenPrinting CUPS: Heap out-of-bounds read in SNMP supply-level polling leaks stack memory to authenticated usersMEDIUM4.334%ileMicrosoft2026-04-14
CVE-2026-31620ALSA: usx2y: us144mkii: fix NULL deref on missing interface 0MEDIUM4.310%ileMicrosoft2026-04-14
CVE-2026-5358Static buffer overflow in deprecated nis_local_principalMEDIUM4.3—Microsoft2026-04-14
CVE-2026-33118Microsoft Edge (Chromium-based) Spoofing VulnerabilityMEDIUM4.343%ileMicrosoft2026-04-14
CVE-2026-32202Windows Shell Spoofing VulnerabilityMEDIUM4.399%ileMicrosoft2026-04-14
CVE-2026-35414CVE-2026-35414MEDIUM4.27%ileMicrosoft2026-04-14
CVE-2026-35177Path traversal issue with zip.vim in VimMEDIUM4.13%ileMicrosoft2026-04-14
CVE-2026-39314CUPS has an integer underflow in `_ppdCreateFromIPP` causes root cupsd crash via negative `job-password-supported`MEDIUM4.05%ileMicrosoft2026-04-14
CVE-2026-40385CVE-2026-40385MEDIUM4.01%ileMicrosoft2026-04-14
CVE-2026-33555CVE-2026-33555MEDIUM4.022%ileMicrosoft2026-04-14
CVE-2026-39316CUPS has a use-after-free in `cupsdDeleteTemporaryPrinters` via dangling subscription pointerMEDIUM4.08%ileMicrosoft2026-04-14
CVE-2026-40386CVE-2026-40386MEDIUM4.04%ileMicrosoft2026-04-14
CVE-2026-41254CVE-2026-41254MEDIUM4.029%ileMicrosoft2026-04-14
CVE-2026-3184Util-linux: util-linux: access control bypass due to improper hostname canonicalizationLOW3.736%ileMicrosoft2026-04-14
CVE-2026-2708Libsoup: libsoup: http request smuggling via duplicate content-length headersLOW3.725%ileMicrosoft2026-04-14
CVE-2026-35386CVE-2026-35386LOW3.624%ileMicrosoft2026-04-14
CVE-2026-41988CVE-2026-41988LOW3.28%ileMicrosoft2026-04-14
CVE-2026-35387CVE-2026-35387LOW3.115%ileMicrosoft2026-04-14
CVE-2026-41080CVE-2026-41080LOW2.933%ileMicrosoft2026-04-14
CVE-2026-22001CVE-2026-22001LOW2.718%ileMicrosoft2026-04-14
CVE-2026-35388CVE-2026-35388LOW2.53%ileMicrosoft2026-04-14
CVE-2026-5289Chromium: CVE-2026-5289 Use after free in NavigationUNKNOWN—20%ileMicrosoft2026-04-14
CVE-2026-5286Chromium: CVE-2026-5286 Use after free in DawnUNKNOWN—24%ileMicrosoft2026-04-14
CVE-2026-5287Chromium: CVE-2026-5287 Use after free in PDFUNKNOWN—34%ileMicrosoft2026-04-14
CVE-2026-5285Chromium: CVE-2026-5285 Use after free in WebGLUNKNOWN—33%ileMicrosoft2026-04-14
CVE-2026-5284Chromium: CVE-2026-5284 Use after free in DawnUNKNOWN—20%ileMicrosoft2026-04-14
CVE-2026-5283Chromium: CVE-2026-5283 Inappropriate implementation in ANGLEUNKNOWN—10%ileMicrosoft2026-04-14
CVE-2026-5281Chromium: CVE-2026-5281 Use after free in DawnUNKNOWN—91%ileMicrosoft2026-04-14
CVE-2026-5280Chromium: CVE-2026-5280 Use after free in WebCodecsUNKNOWN—32%ileMicrosoft2026-04-14
CVE-2026-5279Chromium: CVE-2026-5279 Object corruption in V8UNKNOWN—27%ileMicrosoft2026-04-14
CVE-2026-6920Chromium: CVE-2026-6920 Out of bounds read in GPUUNKNOWN—11%ileMicrosoft2026-04-14
CVE-2026-5292Chromium: CVE-2026-5292 Out of bounds read in WebCodecsUNKNOWN—16%ileMicrosoft2026-04-14
CVE-2026-5291Chromium: CVE-2026-5291 Inappropriate implementation in WebGLUNKNOWN—9%ileMicrosoft2026-04-14
CVE-2026-5290Chromium: CVE-2026-5290 Use after free in CompositingUNKNOWN—16%ileMicrosoft2026-04-14
CVE-2026-5277Chromium: CVE-2026-5277 Integer overflow in ANGLEUNKNOWN—17%ileMicrosoft2026-04-14
CVE-2026-5276Chromium: CVE-2026-5276 Insufficient policy enforcement in WebUSBUNKNOWN—9%ileMicrosoft2026-04-14
CVE-2026-5275Chromium: CVE-2026-5275 Heap buffer overflow in ANGLEUNKNOWN—28%ileMicrosoft2026-04-14
CVE-2026-5274Chromium: CVE-2026-5274 Integer overflow in CodecsUNKNOWN—26%ileMicrosoft2026-04-14
CVE-2026-5273Chromium: CVE-2026-5273 Use after free in CSSUNKNOWN—21%ileMicrosoft2026-04-14
CVE-2026-5272Chromium: CVE-2026-5272 Heap buffer overflow in GPUUNKNOWN—37%ileMicrosoft2026-04-14
CVE-2026-5899Chromium: CVE-2026-5899 Incorrect security UI in History NavigationUNKNOWN—3%ileMicrosoft2026-04-14
CVE-2026-5896Chromium: CVE-2026-5896 Policy bypass in AudioUNKNOWN—5%ileMicrosoft2026-04-14
CVE-2026-5897Chromium: CVE-2026-5897 Incorrect security UI in DownloadsUNKNOWN—5%ileMicrosoft2026-04-14
CVE-2026-5898Chromium: CVE-2026-5898 Incorrect security UI in OmniboxUNKNOWN—5%ileMicrosoft2026-04-14
CVE-2026-5894Chromium: CVE-2026-5894 Inappropriate implementation in PDFUNKNOWN—6%ileMicrosoft2026-04-14
CVE-2026-5895Chromium: CVE-2026-5895 Incorrect security UI in OmniboxUNKNOWN—5%ileMicrosoft2026-04-14
CVE-2026-5889Chromium: CVE-2026-5889 Cryptographic Flaw in PDFiumUNKNOWN—1%ileMicrosoft2026-04-14
CVE-2026-5892Chromium: CVE-2026-5892 Insufficient policy enforcement in PWAsUNKNOWN—7%ileMicrosoft2026-04-14
CVE-2026-5890Chromium: CVE-2026-5890 Race in WebCodecsUNKNOWN—8%ileMicrosoft2026-04-14
CVE-2026-5893Chromium: CVE-2026-5893 Race in V8UNKNOWN—5%ileMicrosoft2026-04-14
CVE-2026-5884Chromium: CVE-2026-5884 Insufficient validation of untrusted input in MediaUNKNOWN—21%ileMicrosoft2026-04-14
CVE-2026-5887Chromium: CVE-2026-5887 Insufficient validation of untrusted input in DownloadsUNKNOWN—9%ileMicrosoft2026-04-14
CVE-2026-5883Chromium: CVE-2026-5883 Use after free in MediaUNKNOWN—21%ileMicrosoft2026-04-14
CVE-2026-5879Chromium: CVE-2026-5879 Insufficient validation of untrusted input in ANGLEUNKNOWN—23%ileMicrosoft2026-04-14
CVE-2026-5885Chromium: CVE-2026-5885 Insufficient validation of untrusted input in WebMLUNKNOWN—15%ileMicrosoft2026-04-14
CVE-2026-5891Chromium: CVE-2026-5891 Insufficient policy enforcement in browser UIUNKNOWN—11%ileMicrosoft2026-04-14
CVE-2026-5881Chromium: CVE-2026-5881 Policy bypass in LocalNetworkAccessUNKNOWN—12%ileMicrosoft2026-04-14
CVE-2026-5878Chromium: CVE-2026-5878 Incorrect security UI in BlinkUNKNOWN—9%ileMicrosoft2026-04-14
CVE-2026-5877Chromium: CVE-2026-5877 Use after free in NavigationUNKNOWN—23%ileMicrosoft2026-04-14
CVE-2026-5888Chromium: CVE-2026-5888 Uninitialized Use in WebCodecsUNKNOWN—17%ileMicrosoft2026-04-14
CVE-2026-5874Chromium: CVE-2026-5874 Use after free in PrivateAIUNKNOWN—17%ileMicrosoft2026-04-14
CVE-2026-5886Chromium: CVE-2026-5886 Out of bounds read in WebAudioUNKNOWN—12%ileMicrosoft2026-04-14
CVE-2026-5876Chromium: CVE-2026-5876 Side-channel information leakage in NavigationUNKNOWN—16%ileMicrosoft2026-04-14
CVE-2026-5872Chromium: CVE-2026-5872 Use after free in BlinkUNKNOWN—23%ileMicrosoft2026-04-14
CVE-2026-5875Chromium: CVE-2026-5875 Policy bypass in BlinkUNKNOWN—9%ileMicrosoft2026-04-14
CVE-2026-5873Chromium: CVE-2026-5873 Out of bounds read and write in V8UNKNOWN—31%ileMicrosoft2026-04-14
CVE-2026-5871Chromium: CVE-2026-5871 Type Confusion in V8UNKNOWN—26%ileMicrosoft2026-04-14
CVE-2026-5867Chromium: CVE-2026-5867 Heap buffer overflow in WebMLUNKNOWN—21%ileMicrosoft2026-04-14
CVE-2026-5868Chromium: CVE-2026-5868 Heap buffer overflow in ANGLEUNKNOWN—26%ileMicrosoft2026-04-14
CVE-2026-5866Chromium: CVE-2026-5866 Use after free in MediaUNKNOWN—23%ileMicrosoft2026-04-14
CVE-2026-5869Chromium: CVE-2026-5869 Heap buffer overflow in WebMLUNKNOWN—15%ileMicrosoft2026-04-14
CVE-2026-5864Chromium: CVE-2026-5864 Heap buffer overflow in WebAudioUNKNOWN—15%ileMicrosoft2026-04-14
CVE-2026-5861Chromium: CVE-2026-5861 Use after free in V8UNKNOWN—23%ileMicrosoft2026-04-14
CVE-2026-5862Chromium: CVE-2026-5862 Inappropriate implementation in V8UNKNOWN—23%ileMicrosoft2026-04-14
CVE-2026-5860Chromium: CVE-2026-5860 Use after free in WebRTCUNKNOWN—39%ileMicrosoft2026-04-14
CVE-2026-5919Chromium: CVE-2026-5919 Insufficient validation of untrusted input in WebSocketsUNKNOWN—9%ileMicrosoft2026-04-14
CVE-2026-5858Chromium: CVE-2026-5858 Heap buffer overflow in WebMLUNKNOWN—46%ileMicrosoft2026-04-14
CVE-2026-5859Chromium: CVE-2026-5859 Integer overflow in WebMLUNKNOWN—28%ileMicrosoft2026-04-14
CVE-2026-5918Chromium: CVE-2026-5918 Inappropriate implementation in NavigationUNKNOWN—5%ileMicrosoft2026-04-14
CVE-2026-5863Chromium: CVE-2026-5863 Inappropriate implementation in V8UNKNOWN—21%ileMicrosoft2026-04-14
CVE-2026-5913Chromium: CVE-2026-5913 Out of bounds read in BlinkUNKNOWN—11%ileMicrosoft2026-04-14
CVE-2026-5912Chromium: CVE-2026-5912 Integer overflow in WebRTCUNKNOWN—12%ileMicrosoft2026-04-14
CVE-2026-5914Chromium: CVE-2026-5914 Type Confusion in CSSUNKNOWN—6%ileMicrosoft2026-04-14
CVE-2026-5865Chromium: CVE-2026-5865 Type Confusion in V8UNKNOWN—40%ileMicrosoft2026-04-14
CVE-2026-5870Chromium: CVE-2026-5870 Integer overflow in SkiaUNKNOWN—23%ileMicrosoft2026-04-14
CVE-2026-5915Chromium: CVE-2026-5915 Insufficient validation of untrusted input in WebMLUNKNOWN—9%ileMicrosoft2026-04-14
CVE-2026-5908Chromium: CVE-2026-5908 Integer overflow in MediaUNKNOWN—9%ileMicrosoft2026-04-14
CVE-2026-5909Chromium: CVE-2026-5909 Integer overflow in MediaUNKNOWN—9%ileMicrosoft2026-04-14
CVE-2026-5905Chromium: CVE-2026-5905 Incorrect security UI in PermissionsUNKNOWN—8%ileMicrosoft2026-04-14
CVE-2026-5911Chromium: CVE-2026-5911 Policy bypass in ServiceWorkersUNKNOWN—6%ileMicrosoft2026-04-14
CVE-2026-5906Chromium: CVE-2026-5906 Incorrect security UI in OmniboxUNKNOWN—6%ileMicrosoft2026-04-14
CVE-2026-5907Chromium: CVE-2026-5907 Insufficient data validation in MediaUNKNOWN—9%ileMicrosoft2026-04-14
CVE-2026-5901Chromium: CVE-2026-5901 Policy bypass in DevToolsUNKNOWN—4%ileMicrosoft2026-04-14
CVE-2026-5904Chromium: CVE-2026-5904 Use after free in V8UNKNOWN——Microsoft2026-04-14
CVE-2026-5910Chromium: CVE-2026-5910 Integer overflow in MediaUNKNOWN—9%ileMicrosoft2026-04-14
CVE-2026-5900Chromium: CVE-2026-5900 Policy bypass in DownloadsUNKNOWN—6%ileMicrosoft2026-04-14
CVE-2026-5903Chromium: CVE-2026-5903 Policy bypass in IFrameSandboxUNKNOWN—18%ileMicrosoft2026-04-14
CVE-2026-5902Chromium: CVE-2026-5902 Race in MediaUNKNOWN—12%ileMicrosoft2026-04-14
CVE-2026-5882Chromium: CVE-2026-5882 Incorrect security UI in FullscreenUNKNOWN—9%ileMicrosoft2026-04-14
CVE-2026-5880Chromium: CVE-2026-5880 Incorrect security UI in browser UIUNKNOWN—9%ileMicrosoft2026-04-14
CVE-2026-6296Chromium: CVE-2026-6296 Heap buffer overflow in ANGLEUNKNOWN—26%ileMicrosoft2026-04-14
CVE-2026-6363Chromium: CVE-2026-6363 Type Confusion in V8UNKNOWN—20%ileMicrosoft2026-04-14
CVE-2026-6359Chromium: CVE-2026-6359 Use after free in VideoUNKNOWN—17%ileMicrosoft2026-04-14
CVE-2026-6364Chromium: CVE-2026-6364 Out of bounds read in SkiaUNKNOWN—14%ileMicrosoft2026-04-14
CVE-2026-6362Chromium: CVE-2026-6362 Use after free in CodecsUNKNOWN—13%ileMicrosoft2026-04-14
CVE-2026-6313Chromium: CVE-2026-6313 Insufficient policy enforcement in CORSUNKNOWN—11%ileMicrosoft2026-04-14
CVE-2026-6314Chromium: CVE-2026-6314 Out of bounds write in GPUUNKNOWN—19%ileMicrosoft2026-04-14
CVE-2026-6318Chromium: CVE-2026-6318 Use after free in CodecsUNKNOWN—26%ileMicrosoft2026-04-14
CVE-2026-6361Chromium: CVE-2026-6361 Heap buffer overflow in PDFiumUNKNOWN—23%ileMicrosoft2026-04-14
CVE-2026-6310Chromium: CVE-2026-6310 Use after free in DawnUNKNOWN—16%ileMicrosoft2026-04-14
CVE-2026-6360Chromium: CVE-2026-6360 Use after free in FileSystemUNKNOWN—17%ileMicrosoft2026-04-14
CVE-2026-6316Chromium: CVE-2026-6316 Use after free in FormsUNKNOWN—25%ileMicrosoft2026-04-14
CVE-2026-6309Chromium: CVE-2026-6309 Use after free in VizUNKNOWN—16%ileMicrosoft2026-04-14
CVE-2026-6311Chromium: CVE-2026-6311 Uninitialized Use in AccessibilityUNKNOWN—20%ileMicrosoft2026-04-14
CVE-2026-6307Chromium: CVE-2026-6307 Type Confusion in TurbofanUNKNOWN—29%ileMicrosoft2026-04-14
CVE-2026-6306Chromium: CVE-2026-6306 Heap buffer overflow in PDFiumUNKNOWN—26%ileMicrosoft2026-04-14
CVE-2026-6303Chromium: CVE-2026-6303 Use after free in CodecsUNKNOWN—30%ileMicrosoft2026-04-14
CVE-2026-6308Chromium: CVE-2026-6308 Out of bounds read in MediaUNKNOWN—22%ileMicrosoft2026-04-14
CVE-2026-6302Chromium: CVE-2026-6302 Use after free in VideoUNKNOWN—26%ileMicrosoft2026-04-14
CVE-2026-6300Chromium: CVE-2026-6300 Use after free in CSSUNKNOWN—27%ileMicrosoft2026-04-14
CVE-2026-6304Chromium: CVE-2026-6304 Use after free in GraphiteUNKNOWN—16%ileMicrosoft2026-04-14
CVE-2026-6305Chromium: CVE-2026-6305 Heap buffer overflow in PDFiumUNKNOWN—26%ileMicrosoft2026-04-14
CVE-2026-6301Chromium: CVE-2026-6301 Type Confusion in TurbofanUNKNOWN—30%ileMicrosoft2026-04-14
CVE-2026-6317Chromium: CVE-2026-6317 Use after free in CastUNKNOWN—27%ileMicrosoft2026-04-14
CVE-2026-6312Chromium: CVE-2026-6312 Insufficient policy enforcement in PasswordsUNKNOWN—13%ileMicrosoft2026-04-14
CVE-2026-6298Chromium: CVE-2026-6298 Heap buffer overflow in SkiaUNKNOWN—21%ileMicrosoft2026-04-14
CVE-2026-6297Chromium: CVE-2026-6297 Use after free in ProxyUNKNOWN—10%ileMicrosoft2026-04-14
CVE-2026-6299Chromium: CVE-2026-6299 Use after free in PrerenderUNKNOWN—27%ileMicrosoft2026-04-14
CVE-2026-6921Chromium: CVE-2026-6921 Race in GPUUNKNOWN—8%ileMicrosoft2026-04-14
CVE-2026-34743XZ Utils: Buffer overflow in lzma_index_append()UNKNOWN—37%ileMicrosoft2026-04-14
CVE-2026-34591Poetry Has Wheel Path Traversal Which Can Lead to Arbitrary File WriteUNKNOWN—38%ileMicrosoft2026-04-14
CVE-2026-28810Predictable DNS Transaction IDs Enable Cache Poisoning in Built-in ResolverUNKNOWN—19%ileMicrosoft2026-04-14
CVE-2026-35206Helm Chart extraction output directory collapse via `Chart.yaml` name dot-segmentUNKNOWN—10%ileMicrosoft2026-04-14
CVE-2026-5466wc_VerifyEccsiHash missing sanity checkUNKNOWN—4%ileMicrosoft2026-04-14
CVE-2026-5194wolfSSL ECDSA Certificate VerificationUNKNOWN—37%ileMicrosoft2026-04-14
CVE-2026-54481-2 Byte Buffer Overflow in wolfSSL_X509_notAfter/notBeforeUNKNOWN—2%ileMicrosoft2026-04-14
CVE-2026-5264DTLS 1.3 ACK heap buffer overflowUNKNOWN—37%ileMicrosoft2026-04-14
CVE-2026-5778Integer underflow leads to out-of-bounds access in sniffer ChaCha decrypt path.UNKNOWN—13%ileMicrosoft2026-04-14
CVE-2026-5460Heap Use-After-Free in PQC Hybrid KeyShare Error Cleanup in wolfSSL TLS 1.3UNKNOWN—12%ileMicrosoft2026-04-14
CVE-2026-5446wolfSSL ARIA-GCM TLS 1.2/DTLS 1.2 GCM nonce reuseUNKNOWN—18%ileMicrosoft2026-04-14
CVE-2026-33948jq: Embedded-NUL Truncation in CLI JSON Input Path Causes Prefix-Only Validation of Malformed InputUNKNOWN—17%ileMicrosoft2026-04-14
CVE-2026-27820zlib: Buffer Overflow in Zlib::GzipReader ungetc via large input leads to memory corruptionUNKNOWN—44%ileMicrosoft2026-04-14
CVE-2026-5958Race Condition in GNU SedUNKNOWN—4%ileMicrosoft2026-04-14
CVE-2026-41907uuid: Missing buffer bounds check in `v3`/`v5`/`v6` when `buf` is providedUNKNOWN—26%ileMicrosoft2026-04-14
CVE-2026-32147SFTP chroot bypass via path traversal in SSH_FXP_FSETSTATUNKNOWN—28%ileMicrosoft2026-04-14
CVE-2026-41676rust-openssl: Deriver::derive and PkeyCtxRef::derive can overflow short buffers on OpenSSL 1.1.1UNKNOWN—21%ileMicrosoft2026-04-14
CVE-2026-41678rust-openssl: Incorrect bounds assertion in aes key wrapUNKNOWN—16%ileMicrosoft2026-04-14
CVE-2026-41681rust-openssl: MdCtxRef::digest_final() writes past caller buffer with no length checkUNKNOWN—29%ileMicrosoft2026-04-14
CVE-2026-41898rust-openssl: Unchecked callback-returned length in PSK and cookie generate trampolines can cause OpenSSL to leak adjaceUNKNOWN—20%ileMicrosoft2026-04-14
CVE-2026-6357pip self-update functionality can import newly installed modules after wheel installationUNKNOWN—4%ileMicrosoft2026-04-14
CVE-2026-41636Apache Thrift: Node.js skip() recursionUNKNOWN—37%ileMicrosoft2026-04-14
CVE-2026-34980OpenPrinting CUPS: Shared PostScript queue lets anonymous Print-Job requests reach `lp` code execution over the networkUNKNOWN—40%ileMicrosoft2026-04-14
CVE-2026-34990OpenPrinting CUPS: Local print admin token disclosure using temporary printersUNKNOWN—21%ileMicrosoft2026-04-14
CVE-2026-34477Apache Log4j Core: verifyHostName attribute silently ignored in TLS configuration, allowing hostname verification bypassUNKNOWN—34%ileMicrosoft2026-04-14
CVE-2026-5393OOB Read in DoTls13CertificateVerify with WOLFSSL_DUAL_ALG_CERTSUNKNOWN—9%ileMicrosoft2026-04-14
CVE-2026-5500Improper Validation of AES-GCM Authentication Tag Length in PKCS#7 Envelope Allows Authentication BypassUNKNOWN—28%ileMicrosoft2026-04-14
CVE-2026-5504PKCS7 CBC Padding Oracle — Plaintext RecoveryUNKNOWN—2%ileMicrosoft2026-04-14
CVE-2026-5501Improper Certificate Signature Verification in X.509 Chain Validation Allows Forged Leaf CertificatesUNKNOWN—8%ileMicrosoft2026-04-14
CVE-2026-5507Session Cache Restore — Arbitrary Free via Deserialized PointerUNKNOWN—7%ileMicrosoft2026-04-14
CVE-2026-5477Prefix-substitution forgery via integer overflow in wolfCrypt CMACUNKNOWN—35%ileMicrosoft2026-04-14
CVE-2026-5479wolfSSL EVP ChaCha20-Poly1305 AEAD authentication tagUNKNOWN—5%ileMicrosoft2026-04-14
CVE-2026-5503out-of-bounds write in TLSX_EchChangeSNI via attacker-controlled publicNameUNKNOWN—32%ileMicrosoft2026-04-14
CVE-2026-5295Stack Buffer Overflow in wolfSSL PKCS7 wc_PKCS7_DecryptOri() via Oversized OIDUNKNOWN—7%ileMicrosoft2026-04-14
CVE-2026-5188Integer underflow in X.509 SAN parsing in wolfSSLUNKNOWN—3%ileMicrosoft2026-04-14
CVE-2026-5447Heap buffer overflow in CertFromX509() via AuthorityKeyIdentifierUNKNOWN—13%ileMicrosoft2026-04-14
CVE-2026-5772MatchDomainName 1-Byte Stack Buffer Over-Read in Hostname ValidationUNKNOWN—14%ileMicrosoft2026-04-14
CVE-2026-5263URI nameConstraints not enforced in ConfirmNameConstraints()UNKNOWN—7%ileMicrosoft2026-04-14
CVE-2026-5392wolfSSL heap OOB read in PKCS7 SignedData streamingUNKNOWN—6%ileMicrosoft2026-04-14
CVE-2026-1502HTTP client proxy tunnel headers not validated for CR/LFUNKNOWN—44%ileMicrosoft2026-04-14
CVE-2026-34481Apache Log4j JSON Template Layout: Improper serialization of non-finite floating-point values in JsonTemplateLayoutUNKNOWN—49%ileMicrosoft2026-04-14
CVE-2026-34479Apache Log4j 1 to Log4j 2 bridge: Silent log event loss in Log4j1XmlLayout due to unescaped XML 1.0 forbidden charactersUNKNOWN—42%ileMicrosoft2026-04-14
CVE-2026-34480Apache Log4j Core: Silent log event loss in XmlLayout due to unescaped XML 1.0 forbidden charactersUNKNOWN—55%ileMicrosoft2026-04-14
CVE-2025-62718Axios has a NO_PROXY Hostname Normalization Bypass Leads to SSRFUNKNOWN—64%ileMicrosoft2026-04-14
CVE-2026-39979jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted BuffersUNKNOWN—43%ileMicrosoft2026-04-14
CVE-2026-40179Prometheus: Stored XSS via metric names and label values in web UI tooltips and metrics explorerUNKNOWN—18%ileMicrosoft2026-04-14
CVE-2026-4786Incomplete mitigation of CVE-2026-4519, %action expansion for command injection to webbrowser.open()UNKNOWN—21%ileMicrosoft2026-04-14
CVE-2026-3219pip doesn't reject concatenated ZIP and tar archivesUNKNOWN—4%ileMicrosoft2026-04-14
CVE-2026-28808ScriptAlias CGI targets bypass directory auth in inets httpd (mod_auth vs mod_cgi path mismatch)UNKNOWN—42%ileMicrosoft2026-04-14
CVE-2026-6409Denial of Service (DoS) vulnerability exists in the Protobuf PHP library during the parsing of untrusted inputUNKNOWN—29%ileMicrosoft2026-04-14
CVE-2026-5187Heap Out-of-Bounds Write in DecodeObjectId() in wolfSSLUNKNOWN—21%ileMicrosoft2026-04-14
CVE-2026-41205Mako: Path traversal via double-slash URI prefix in TemplateLookupUNKNOWN—29%ileMicrosoft2026-04-14
CVE-2026-41140Poetry: Path traversal in tar extraction on Python 3.10.0 - 3.10.12 and 3.11.0 - 3.11.4UNKNOWN—22%ileMicrosoft2026-04-14
CVE-2026-41677rust-openssl: Out-of-bounds read in PEM password callback when user callback returns an oversized lengthUNKNOWN—22%ileMicrosoft2026-04-14
CVE-2026-3298Out-of-bounds write in Windows asyncio.ProacterEventLoop.sock_recvfrom_into() when using nbytesUNKNOWN—30%ileMicrosoft2026-04-14
CVE-2026-40556Insecure Directory Permissions in GNU nano Leading to Privilege AbuseUNKNOWN——Microsoft2026-04-14
CVE-2026-6019BaseCookie.js_output() does not neutralize embedded charactersUNKNOWN—14%ileMicrosoft2026-04-14
CVE-2026-6919Chromium: CVE-2026-6919 Use after free in DevToolsUNKNOWN—21%ileMicrosoft2026-04-14
CVE-2026-24304Azure Resource Manager Elevation of Privilege VulnerabilityCRITICAL9.946%ileMicrosoft2026-01-13
CVE-2026-20963Microsoft SharePoint Remote Code Execution VulnerabilityCRITICAL9.898%ileMicrosoft2026-01-13
CVE-2026-24306Azure Front Door Elevation of Privilege VulnerabilityCRITICAL9.852%ileMicrosoft2026-01-13
CVE-2026-22184zlib <= 1.3.1.2 untgz Global Buffer Overflow in TGZfname()CRITICAL9.831%ileMicrosoft2026-01-13
CVE-2026-24305Azure Entra ID Elevation of Privilege VulnerabilityCRITICAL9.340%ileMicrosoft2026-01-13
CVE-2026-24307M365 Copilot Information Disclosure VulnerabilityCRITICAL9.353%ileMicrosoft2026-01-13
CVE-2026-21264Microsoft Account Spoofing VulnerabilityCRITICAL9.330%ileMicrosoft2026-01-13
CVE-2026-20947Microsoft SharePoint Server Remote Code Execution VulnerabilityHIGH8.897%ileMicrosoft2026-01-13
CVE-2026-20868Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityHIGH8.868%ileMicrosoft2026-01-13
CVE-2025-69194Wget2: arbitrary file write via metalink path traversal in gnu wget2HIGH8.850%ileMicrosoft2026-01-13
CVE-2026-20944Microsoft Word Remote Code Execution VulnerabilityHIGH8.439%ileMicrosoft2026-01-13
CVE-2026-20953Microsoft Office Remote Code Execution VulnerabilityHIGH8.445%ileMicrosoft2026-01-13
CVE-2026-20952Microsoft Office Remote Code Execution VulnerabilityHIGH8.440%ileMicrosoft2026-01-13
CVE-2026-21227Azure Logic Apps Elevation of Privilege VulnerabilityHIGH8.240%ileMicrosoft2026-01-13
CVE-2026-20856Windows Server Update Service (WSUS) Remote Code Execution VulnerabilityHIGH8.162%ileMicrosoft2026-01-13
CVE-2026-20960PowerApps Desktop Client Remote Code Execution VulnerabilityHIGH8.038%ileMicrosoft2026-01-13
CVE-2026-20931Windows Telephony Service Elevation of Privilege VulnerabilityHIGH8.051%ileMicrosoft2026-01-13
CVE-2026-20809Windows Kernel Memory Elevation of Privilege VulnerabilityHIGH7.829%ileMicrosoft2026-01-13
CVE-2026-20810Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityHIGH7.839%ileMicrosoft2026-01-13
CVE-2026-20811Win32k Elevation of Privilege VulnerabilityHIGH7.839%ileMicrosoft2026-01-13
CVE-2026-20816Windows Installer Elevation of Privilege VulnerabilityHIGH7.882%ileMicrosoft2026-01-13
CVE-2026-20817Windows Error Reporting Service Elevation of Privilege VulnerabilityHIGH7.892%ileMicrosoft2026-01-13
CVE-2026-20820Windows Common Log File System Driver Elevation of Privilege VulnerabilityHIGH7.883%ileMicrosoft2026-01-13
CVE-2026-20822Windows Graphics Component Elevation of Privilege VulnerabilityHIGH7.832%ileMicrosoft2026-01-13
CVE-2026-20826Tablet Windows User Interface (TWINUI) Subsystem Information Disclosure VulnerabilityHIGH7.822%ileMicrosoft2026-01-13
CVE-2026-20831Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityHIGH7.822%ileMicrosoft2026-01-13
CVE-2026-20832Windows Remote Procedure Call Interface Definition Language (IDL) Elevation of Privilege VulnerabilityHIGH7.838%ileMicrosoft2026-01-13
CVE-2026-20837Windows Media Remote Code Execution VulnerabilityHIGH7.848%ileMicrosoft2026-01-13
CVE-2026-20840Windows NTFS Remote Code Execution VulnerabilityHIGH7.890%ileMicrosoft2026-01-13
CVE-2023-31096MITRE: CVE-2023-31096 Windows Agere Soft Modem Driver Elevation of Privilege VulnerabilityHIGH7.837%ileMicrosoft2026-01-13
CVE-2026-20857Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityHIGH7.838%ileMicrosoft2026-01-13
CVE-2026-20858Windows Management Services Elevation of Privilege VulnerabilityHIGH7.821%ileMicrosoft2026-01-13
CVE-2026-20859Windows Kernel-Mode Driver Elevation of Privilege VulnerabilityHIGH7.838%ileMicrosoft2026-01-13
CVE-2026-20860Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityHIGH7.894%ileMicrosoft2026-01-13
CVE-2026-20864Windows Connected Devices Platform Service Elevation of Privilege VulnerabilityHIGH7.842%ileMicrosoft2026-01-13
CVE-2026-20865Windows Management Services Elevation of Privilege VulnerabilityHIGH7.830%ileMicrosoft2026-01-13
CVE-2026-20877Windows Management Services Elevation of Privilege VulnerabilityHIGH7.822%ileMicrosoft2026-01-13
CVE-2026-20918Windows Management Services Elevation of Privilege VulnerabilityHIGH7.822%ileMicrosoft2026-01-13
CVE-2026-20920Win32k Elevation of Privilege VulnerabilityHIGH7.839%ileMicrosoft2026-01-13
CVE-2026-20922Windows NTFS Remote Code Execution VulnerabilityHIGH7.861%ileMicrosoft2026-01-13
CVE-2026-20923Windows Management Services Elevation of Privilege VulnerabilityHIGH7.832%ileMicrosoft2026-01-13
CVE-2026-20924Windows Management Services Elevation of Privilege VulnerabilityHIGH7.822%ileMicrosoft2026-01-13
CVE-2026-20938Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege VulnerabilityHIGH7.839%ileMicrosoft2026-01-13
CVE-2026-20940Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityHIGH7.837%ileMicrosoft2026-01-13
CVE-2026-20946Microsoft Excel Remote Code Execution VulnerabilityHIGH7.849%ileMicrosoft2026-01-13
CVE-2026-20951Microsoft SharePoint Server Remote Code Execution VulnerabilityHIGH7.852%ileMicrosoft2026-01-13
CVE-2026-20955Microsoft Excel Remote Code Execution VulnerabilityHIGH7.845%ileMicrosoft2026-01-13
CVE-2026-20956Microsoft Excel Remote Code Execution VulnerabilityHIGH7.833%ileMicrosoft2026-01-13
CVE-2026-21224Azure Connected Machine Agent Elevation of Privilege VulnerabilityHIGH7.823%ileMicrosoft2026-01-13
CVE-2026-20843Windows Routing and Remote Access Service (RRAS) Elevation of Privilege VulnerabilityHIGH7.887%ileMicrosoft2026-01-13
CVE-2026-20861Windows Management Services Elevation of Privilege VulnerabilityHIGH7.821%ileMicrosoft2026-01-13
CVE-2026-20866Windows Management Services Elevation of Privilege VulnerabilityHIGH7.821%ileMicrosoft2026-01-13
CVE-2026-20867Windows Management Services Elevation of Privilege VulnerabilityHIGH7.821%ileMicrosoft2026-01-13
CVE-2026-20870Windows Win32 Kernel Subsystem Elevation of Privilege VulnerabilityHIGH7.837%ileMicrosoft2026-01-13
CVE-2026-20871Desktop Window Manager Elevation of Privilege VulnerabilityHIGH7.890%ileMicrosoft2026-01-13
CVE-2026-20873Windows Management Services Elevation of Privilege VulnerabilityHIGH7.822%ileMicrosoft2026-01-13
CVE-2026-20874Windows Management Services Elevation of Privilege VulnerabilityHIGH7.822%ileMicrosoft2026-01-13
CVE-2024-55414Windows Motorola Soft Modem Driver Elevation of Privilege VulnerabilityHIGH7.863%ileMicrosoft2026-01-13
CVE-2026-20948Microsoft Word Remote Code Execution VulnerabilityHIGH7.842%ileMicrosoft2026-01-13
CVE-2026-20949Microsoft Excel Security Feature Bypass VulnerabilityHIGH7.833%ileMicrosoft2026-01-13
CVE-2026-20950Microsoft Excel Remote Code Execution VulnerabilityHIGH7.835%ileMicrosoft2026-01-13
CVE-2026-20957Microsoft Excel Remote Code Execution VulnerabilityHIGH7.837%ileMicrosoft2026-01-13
CVE-2026-20941Host Process for Windows Tasks Elevation of Privilege VulnerabilityHIGH7.838%ileMicrosoft2026-01-13
CVE-2026-21509Microsoft Office Security Feature Bypass VulnerabilityHIGH7.899%ileMicrosoft2026-01-13
CVE-2026-20804Windows Hello Tampering VulnerabilityHIGH7.740%ileMicrosoft2026-01-13
CVE-2026-20852Windows Hello Tampering VulnerabilityHIGH7.739%ileMicrosoft2026-01-13
CVE-2025-69195Wget2: gnu wget2: memory corruption and crash via filename sanitization logic with attacker-controlled urlsHIGH7.621%ileMicrosoft2026-01-13
CVE-2026-0386Windows Deployment Services Remote Code Execution VulnerabilityHIGH7.542%ileMicrosoft2026-01-13
CVE-2026-20965Windows Admin Center Elevation of Privilege VulnerabilityHIGH7.511%ileMicrosoft2026-01-13
CVE-2026-20875Windows Local Security Authority Subsystem Service (LSASS) Denial of Service VulnerabilityHIGH7.572%ileMicrosoft2026-01-13
CVE-2026-20919Windows SMB Server Elevation of Privilege VulnerabilityHIGH7.552%ileMicrosoft2026-01-13
CVE-2026-20921Windows SMB Server Elevation of Privilege VulnerabilityHIGH7.564%ileMicrosoft2026-01-13
CVE-2026-20926Windows SMB Server Elevation of Privilege VulnerabilityHIGH7.552%ileMicrosoft2026-01-13
CVE-2026-20934Windows SMB Server Elevation of Privilege VulnerabilityHIGH7.552%ileMicrosoft2026-01-13
CVE-2026-20848Windows SMB Server Elevation of Privilege VulnerabilityHIGH7.551%ileMicrosoft2026-01-13
CVE-2026-20849Windows Kerberos Elevation of Privilege VulnerabilityHIGH7.559%ileMicrosoft2026-01-13
CVE-2026-20854Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution VulnerabilityHIGH7.561%ileMicrosoft2026-01-13
CVE-2026-20929Windows HTTP.sys Elevation of Privilege VulnerabilityHIGH7.564%ileMicrosoft2026-01-13
CVE-2026-21226Azure Core shared client library for Python Remote Code Execution VulnerabilityHIGH7.552%ileMicrosoft2026-01-13
CVE-2026-21520Copilot Studio Information Disclosure VulnerabilityHIGH7.570%ileMicrosoft2026-01-13
CVE-2026-0719Libsoup: signed to unsigned conversion error leading to stack-based buffer overflow in libsoup ntlm authenticationHIGH7.543%ileMicrosoft2026-01-13
CVE-2026-20844Windows Clipboard Server Elevation of Privilege VulnerabilityHIGH7.424%ileMicrosoft2026-01-13
CVE-2026-20853Windows WalletService Elevation of Privilege VulnerabilityHIGH7.423%ileMicrosoft2026-01-13
CVE-2026-21524Azure Data Explorer Information Disclosure VulnerabilityHIGH7.440%ileMicrosoft2026-01-13
CVE-2026-21521Word Copilot Information Disclosure VulnerabilityHIGH7.440%ileMicrosoft2026-01-13
CVE-2026-20803Microsoft SQL Server Elevation of Privilege VulnerabilityHIGH7.266%ileMicrosoft2026-01-13
CVE-2026-21223Microsoft Edge (Chromium-based) Security Feature Bypass VulnerabilityHIGH7.116%ileMicrosoft2026-01-13
CVE-2026-20808Windows File Explorer Elevation of Privilege VulnerabilityHIGH7.022%ileMicrosoft2026-01-13
CVE-2026-20814DirectX Graphics Kernel Elevation of Privilege VulnerabilityHIGH7.022%ileMicrosoft2026-01-13
CVE-2026-20815Capability Access Management Service (camsvc) Elevation of Privilege VulnerabilityHIGH7.022%ileMicrosoft2026-01-13
CVE-2026-20836DirectX Graphics Kernel Elevation of Privilege VulnerabilityHIGH7.021%ileMicrosoft2026-01-13
CVE-2026-20842Microsoft DWM Core Library Elevation of Privilege VulnerabilityHIGH7.030%ileMicrosoft2026-01-13
CVE-2026-20869Windows Local Session Manager (LSM) Elevation of Privilege VulnerabilityHIGH7.021%ileMicrosoft2026-01-13
CVE-2026-20943Microsoft Office Click-To-Run Remote Code Execution VulnerabilityHIGH7.047%ileMicrosoft2026-01-13
CVE-2026-20830Capability Access Management Service (camsvc) Elevation of Privilege VulnerabilityHIGH7.021%ileMicrosoft2026-01-13
CVE-2026-21221Capability Access Management Service (camsvc) Elevation of Privilege VulnerabilityHIGH7.012%ileMicrosoft2026-01-13
CVE-2026-21219Inbox COM Objects (Global Memory) Remote Code Execution VulnerabilityHIGH7.027%ileMicrosoft2026-01-13
CVE-2026-20863Win32k Elevation of Privilege VulnerabilityHIGH7.030%ileMicrosoft2026-01-13
CVE-2026-20876Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege VulnerabilityMEDIUM6.740%ileMicrosoft2026-01-13
CVE-2026-20812LDAP Tampering VulnerabilityMEDIUM6.563%ileMicrosoft2026-01-13
CVE-2026-20847Microsoft Windows File Explorer Spoofing VulnerabilityMEDIUM6.568%ileMicrosoft2026-01-13
CVE-2026-20925NTLM Hash Disclosure Spoofing VulnerabilityMEDIUM6.597%ileMicrosoft2026-01-13
CVE-2026-20872NTLM Hash Disclosure Spoofing VulnerabilityMEDIUM6.597%ileMicrosoft2026-01-13
CVE-2026-21265Secure Boot Certificate Expiration Security Feature Bypass VulnerabilityMEDIUM6.458%ileMicrosoft2026-01-13
CVE-2026-20818Windows Kernel Information Disclosure VulnerabilityMEDIUM6.249%ileMicrosoft2026-01-13
CVE-2026-20821Remote Procedure Call Information Disclosure VulnerabilityMEDIUM6.249%ileMicrosoft2026-01-13
CVE-2026-20851Capability Access Management Service (camsvc) Information Disclosure VulnerabilityMEDIUM6.244%ileMicrosoft2026-01-13
CVE-2026-20935Windows Virtualization-Based Security (VBS) Information Disclosure VulnerabilityMEDIUM6.234%ileMicrosoft2026-01-13
CVE-2026-22695LIBPNG has a heap buffer over-read in png_image_read_direct_scaled (regression from CVE-2025-65018 fix)MEDIUM6.17%ileMicrosoft2026-01-13
CVE-2026-20805Desktop Window Manager Information Disclosure VulnerabilityMEDIUM5.591%ileMicrosoft2026-01-13
CVE-2026-20819Windows Virtualization-Based Security (VBS) Information Disclosure VulnerabilityMEDIUM5.543%ileMicrosoft2026-01-13
CVE-2026-20823Windows File Explorer Information Disclosure VulnerabilityMEDIUM5.548%ileMicrosoft2026-01-13
CVE-2026-20824Windows Remote Assistance Security Feature Bypass VulnerabilityMEDIUM5.556%ileMicrosoft2026-01-13
CVE-2026-20827Tablet Windows User Interface (TWINUI) Subsystem Information Disclosure VulnerabilityMEDIUM5.547%ileMicrosoft2026-01-13
CVE-2026-20829TPM Trustlet Information Disclosure VulnerabilityMEDIUM5.542%ileMicrosoft2026-01-13
CVE-2026-20833Windows Kerberos Information Disclosure VulnerabilityMEDIUM5.539%ileMicrosoft2026-01-13
CVE-2026-20835Capability Access Management Service (camsvc) Information Disclosure VulnerabilityMEDIUM5.542%ileMicrosoft2026-01-13
CVE-2026-20838Windows Kernel Information Disclosure VulnerabilityMEDIUM5.547%ileMicrosoft2026-01-13
CVE-2026-20839Windows Client-Side Caching (CSC) Service Information Disclosure VulnerabilityMEDIUM5.538%ileMicrosoft2026-01-13
CVE-2026-20932Windows File Explorer Information Disclosure VulnerabilityMEDIUM5.548%ileMicrosoft2026-01-13
CVE-2026-20862Windows Management Services Information Disclosure VulnerabilityMEDIUM5.546%ileMicrosoft2026-01-13
CVE-2026-20937Windows File Explorer Information Disclosure VulnerabilityMEDIUM5.538%ileMicrosoft2026-01-13
CVE-2026-20939Windows File Explorer Information Disclosure VulnerabilityMEDIUM5.538%ileMicrosoft2026-01-13
CVE-2026-21444libtpms returns wrong initialization vector when certain symmetric ciphers are usedMEDIUM5.50%ileMicrosoft2026-01-13
CVE-2026-20958Microsoft SharePoint Information Disclosure VulnerabilityMEDIUM5.422%ileMicrosoft2026-01-13
CVE-2026-20927Windows SMB Server Denial of Service VulnerabilityMEDIUM5.356%ileMicrosoft2026-01-13
CVE-2026-22693Null Pointer Dereference in SubtableUnicodesCache::create leading to DoSMEDIUM5.330%ileMicrosoft2026-01-13
CVE-2026-20828Windows rndismp6.sys Information Disclosure VulnerabilityMEDIUM4.646%ileMicrosoft2026-01-13
CVE-2026-20834Windows Spoofing VulnerabilityMEDIUM4.650%ileMicrosoft2026-01-13
CVE-2026-20959Microsoft SharePoint Server Spoofing VulnerabilityMEDIUM4.694%ileMicrosoft2026-01-13
CVE-2026-20962Dynamic Root of Trust for Measurement (DRTM) Information Disclosure VulnerabilityMEDIUM4.433%ileMicrosoft2026-01-13
CVE-2026-20825Windows Hyper-V Information Disclosure VulnerabilityMEDIUM4.441%ileMicrosoft2026-01-13
CVE-2026-20936Windows NDIS Information Disclosure VulnerabilityMEDIUM4.336%ileMicrosoft2026-01-13
CVE-2026-0907Chromium: CVE-2026-0907 Incorrect security UI in Split ViewUNKNOWN—94%ileMicrosoft2026-01-13
CVE-2026-0906Chromium: CVE-2026-0906 Incorrect security UIUNKNOWN—24%ileMicrosoft2026-01-13
CVE-2026-0905Chromium: CVE-2026-0905 Insufficient policy enforcement in NetworkUNKNOWN—13%ileMicrosoft2026-01-13
CVE-2026-0904Chromium: CVE-2026-0904 Incorrect security UI in Digital CredentialsUNKNOWN—6%ileMicrosoft2026-01-13
CVE-2026-0903Chromium: CVE-2026-0903 Insufficient validation of untrusted input in DownloadsUNKNOWN—8%ileMicrosoft2026-01-13
CVE-2026-0901Chromium: CVE-2026-0901 Inappropriate implementation in BlinkUNKNOWN—8%ileMicrosoft2026-01-13
CVE-2026-0899Chromium: CVE-2026-0899 Out of bounds memory access in V8UNKNOWN—31%ileMicrosoft2026-01-13
CVE-2026-1504Chromium: CVE-2026-1504 Inappropriate implementation in Background Fetch APIUNKNOWN—13%ileMicrosoft2026-01-13
CVE-2026-0628Chromium: CVE-2026-0628 Insufficient policy enforcement in WebView tagUNKNOWN—93%ileMicrosoft2026-01-13
CVE-2026-0908Chromium: CVE-2026-0908 Use after free in ANGLEUNKNOWN—24%ileMicrosoft2026-01-13
CVE-2026-0900Chromium: CVE-2026-0900 Inappropriate implementation in V8UNKNOWN—25%ileMicrosoft2026-01-13
CVE-2026-1220Chromium: CVE-2026-1220 Race in V8UNKNOWN—22%ileMicrosoft2026-01-13
CVE-2026-0902Chromium: CVE-2026-0902 Inappropriate implementation in V8UNKNOWN—17%ileMicrosoft2026-01-13
CVE-2026-21895rsa crate has potential panic on a prime being equal to 1UNKNOWN—33%ileMicrosoft2026-01-13
CVE-2026-22185OpenLDAP <= 2.6.10 LMDB mdb_load Heap Buffer Underflow in readline()UNKNOWN—3%ileMicrosoft2026-01-13
CVE-2025-55241Azure Entra ID Elevation of Privilege VulnerabilityCRITICAL10.073%ileMicrosoft2025-09-09
CVE-2025-54914Azure Networking Elevation of Privilege VulnerabilityCRITICAL10.081%ileMicrosoft2025-09-09
CVE-2025-39743jfs: truncate good inode pages when hard link is 0CRITICAL9.86%ileMicrosoft2025-09-09
CVE-2025-57052cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the decode_array_index_from_pointer function in cJSON_Utils.cCRITICAL9.851%ileMicrosoft2025-09-09
CVE-2025-55232Microsoft High Performance Compute (HPC) Pack Remote Code Execution VulnerabilityCRITICAL9.878%ileMicrosoft2025-09-09
CVE-2025-38714hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read()CRITICAL9.05%ileMicrosoft2025-09-09
CVE-2025-55244Azure Bot Service Elevation of Privilege VulnerabilityCRITICAL9.044%ileMicrosoft2025-09-09
CVE-2025-9900Libtiff: libtiff write-what-whereHIGH8.851%ileMicrosoft2025-09-09
CVE-2025-47906Unexpected paths returned from LookPath in os/execHIGH8.839%ileMicrosoft2025-09-09
CVE-2025-54106Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityHIGH8.868%ileMicrosoft2025-09-09
CVE-2025-54110Windows Kernel Elevation of Privilege VulnerabilityHIGH8.889%ileMicrosoft2025-09-09
CVE-2025-54897Microsoft SharePoint Remote Code Execution VulnerabilityHIGH8.897%ileMicrosoft2025-09-09
CVE-2025-54918Windows NTLM Elevation of Privilege VulnerabilityHIGH8.897%ileMicrosoft2025-09-09
CVE-2025-54113Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityHIGH8.854%ileMicrosoft2025-09-09
CVE-2025-55227Microsoft SQL Server Elevation of Privilege VulnerabilityHIGH8.866%ileMicrosoft2025-09-09
CVE-2025-55234Windows SMB Elevation of Privilege VulnerabilityHIGH8.897%ileMicrosoft2025-09-09
CVE-2025-55319Agentic AI and Visual Studio Code Remote Code Execution VulnerabilityHIGH8.855%ileMicrosoft2025-09-09
CVE-2025-54910Microsoft Office Remote Code Execution VulnerabilityHIGH8.442%ileMicrosoft2025-09-09
CVE-2025-59362Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asn_build_objid in lib/snmplib/asn1.c.HIGH8.229%ileMicrosoft2025-09-09
CVE-2025-9566Podman: podman kube play command may overwrite host filesHIGH8.160%ileMicrosoft2025-09-09
CVE-2025-58060cups has Authentication bypass with AuthType NegotiateHIGH8.058%ileMicrosoft2025-09-09
CVE-2025-38707fs/ntfs3: Add sanity check for file nameHIGH7.85%ileMicrosoft2025-09-09
CVE-2025-39730NFS: Fix filehandle bounds checking in nfs_fh_to_dentry()HIGH7.88%ileMicrosoft2025-09-09
CVE-2025-39788scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPEHIGH7.85%ileMicrosoft2025-09-09
CVE-2025-39751ALSA: hda/ca0132: Fix buffer overflow in add_tuning_controlHIGH7.8—Microsoft2025-09-09
CVE-2025-39757ALSA: usb-audio: Validate UAC3 cluster segment descriptorsHIGH7.86%ileMicrosoft2025-09-09
CVE-2025-39766net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limitHIGH7.86%ileMicrosoft2025-09-09
CVE-2025-39790bus: mhi: host: Detect events pointing to unexpected TREsHIGH7.84%ileMicrosoft2025-09-09
CVE-2025-39738btrfs: do not allow relocation of partially dropped subvolumesHIGH7.85%ileMicrosoft2025-09-09
CVE-2025-39776mm/debug_vm_pgtable: clear page table entries at destroy_args()HIGH7.84%ileMicrosoft2025-09-09
CVE-2025-39828atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control().HIGH7.85%ileMicrosoft2025-09-09
CVE-2025-39823KVM: x86: use array_index_nospec with indices that come from guestHIGH7.86%ileMicrosoft2025-09-09
CVE-2025-39824HID: asus: fix UAF via HID_CLAIMED_INPUT validationHIGH7.85%ileMicrosoft2025-09-09
CVE-2025-39841scsi: lpfc: Fix buffer free/clear order in deferred receive pathHIGH7.836%ileMicrosoft2025-09-09
CVE-2025-39863wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info workHIGH7.84%ileMicrosoft2025-09-09
CVE-2025-39859ptp: ocp: fix use-after-free bugs causing by ptp_ocp_watchdogHIGH7.84%ileMicrosoft2025-09-09
CVE-2025-39861Bluetooth: vhci: Prevent use-after-free by removing debugfs files earlyHIGH7.84%ileMicrosoft2025-09-09
CVE-2025-39864wifi: cfg80211: fix use-after-free in cmp_bss()HIGH7.812%ileMicrosoft2025-09-09
CVE-2025-39866fs: writeback: fix use-after-free in __mark_inode_dirty()HIGH7.821%ileMicrosoft2025-09-09
CVE-2023-53187btrfs: fix use-after-free of new block group that became unusedHIGH7.84%ileMicrosoft2025-09-09
CVE-2023-53218rxrpc: Make it so that a waiting process can be abortedHIGH7.85%ileMicrosoft2025-09-09
CVE-2022-50406iomap: iomap: fix memory corruption when recording errors during writebackHIGH7.85%ileMicrosoft2025-09-09
CVE-2025-38718sctp: linearize cloned gso packets in sctp_rcvHIGH7.85%ileMicrosoft2025-09-09
CVE-2025-38685fbdev: Fix vmalloc out-of-bounds write in fast_imageblitHIGH7.86%ileMicrosoft2025-09-09
CVE-2025-38729ALSA: usb-audio: Validate UAC3 power domain descriptors, tooHIGH7.87%ileMicrosoft2025-09-09
CVE-2025-38699scsi: bfa: Double-free fixHIGH7.86%ileMicrosoft2025-09-09
CVE-2025-38724nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()HIGH7.828%ileMicrosoft2025-09-09
CVE-2025-38702fbdev: fix potential buffer overflow in do_register_framebuffer()HIGH7.87%ileMicrosoft2025-09-09
CVE-2025-38703drm/xe: Make dma-fences compliant with the safe access rulesHIGH7.85%ileMicrosoft2025-09-09
CVE-2025-39686comedi: Make insn_rw_emulate_bits() do insn->n samplesHIGH7.87%ileMicrosoft2025-09-09
CVE-2025-39689ftrace: Also allocate and copy hash for reading of filter filesHIGH7.86%ileMicrosoft2025-09-09
CVE-2025-39691fs/buffer: fix use-after-free when call bh_read() helperHIGH7.86%ileMicrosoft2025-09-09
CVE-2025-39810bnxt_en: Fix memory corruption when FW resources change during ifdownHIGH7.85%ileMicrosoft2025-09-09
CVE-2025-39835xfs: do not propagate ENODATA disk errors into xattr codeHIGH7.85%ileMicrosoft2025-09-09
CVE-2025-39873can: xilinx_can: xcan_write_frame(): fix use-after-free of transmitted SKBHIGH7.84%ileMicrosoft2025-09-09
CVE-2025-41244VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-202HIGH7.894%ileMicrosoft2025-09-09
CVE-2025-54102Windows Connected Devices Platform Service Elevation of Privilege VulnerabilityHIGH7.834%ileMicrosoft2025-09-09
CVE-2025-54111Windows UI XAML Phone DatePickerFlyout Elevation of Privilege VulnerabilityHIGH7.828%ileMicrosoft2025-09-09
CVE-2025-54894Local Security Authority Subsystem Service Elevation of Privilege VulnerabilityHIGH7.834%ileMicrosoft2025-09-09
CVE-2025-54895SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Elevation of Privilege VulnerabilityHIGH7.818%ileMicrosoft2025-09-09
CVE-2025-54896Microsoft Excel Remote Code Execution VulnerabilityHIGH7.842%ileMicrosoft2025-09-09
CVE-2025-54898Microsoft Excel Remote Code Execution VulnerabilityHIGH7.842%ileMicrosoft2025-09-09
CVE-2025-54899Microsoft Excel Remote Code Execution VulnerabilityHIGH7.842%ileMicrosoft2025-09-09
CVE-2025-54902Microsoft Excel Remote Code Execution VulnerabilityHIGH7.842%ileMicrosoft2025-09-09
CVE-2025-54903Microsoft Excel Remote Code Execution VulnerabilityHIGH7.842%ileMicrosoft2025-09-09
CVE-2025-54904Microsoft Excel Remote Code Execution VulnerabilityHIGH7.842%ileMicrosoft2025-09-09
CVE-2025-54906Microsoft Office Remote Code Execution VulnerabilityHIGH7.849%ileMicrosoft2025-09-09
CVE-2025-54907Microsoft Office Visio Remote Code Execution VulnerabilityHIGH7.839%ileMicrosoft2025-09-09
CVE-2025-54908Microsoft PowerPoint Remote Code Execution VulnerabilityHIGH7.843%ileMicrosoft2025-09-09
CVE-2025-54913Windows UI XAML Maps MapControlSettings Elevation of Privilege VulnerabilityHIGH7.819%ileMicrosoft2025-09-09
CVE-2025-54916Windows NTFS Remote Code Execution VulnerabilityHIGH7.880%ileMicrosoft2025-09-09
CVE-2025-55228Windows Graphics Component Remote Code Execution VulnerabilityHIGH7.822%ileMicrosoft2025-09-09
CVE-2025-55245Xbox Gaming Services Elevation of Privilege VulnerabilityHIGH7.831%ileMicrosoft2025-09-09
CVE-2025-55316Azure Connected Machine Agent Elevation of Privilege VulnerabilityHIGH7.826%ileMicrosoft2025-09-09
CVE-2025-55317Microsoft AutoUpdate (MAU) Elevation of Privilege VulnerabilityHIGH7.831%ileMicrosoft2025-09-09
CVE-2025-49692Azure Connected Machine Agent Elevation of Privilege VulnerabilityHIGH7.824%ileMicrosoft2025-09-09
CVE-2025-53800Windows Graphics Component Elevation of Privilege VulnerabilityHIGH7.837%ileMicrosoft2025-09-09
CVE-2025-53801Microsoft DWM Core Library Elevation of Privilege VulnerabilityHIGH7.835%ileMicrosoft2025-09-09
CVE-2025-54091Windows Hyper-V Elevation of Privilege VulnerabilityHIGH7.834%ileMicrosoft2025-09-09
CVE-2025-54092Windows Hyper-V Elevation of Privilege VulnerabilityHIGH7.824%ileMicrosoft2025-09-09
CVE-2025-54098Windows Hyper-V Elevation of Privilege VulnerabilityHIGH7.884%ileMicrosoft2025-09-09
CVE-2025-54900Microsoft Excel Remote Code Execution VulnerabilityHIGH7.842%ileMicrosoft2025-09-09
CVE-2025-54912Windows BitLocker Elevation of Privilege VulnerabilityHIGH7.838%ileMicrosoft2025-09-09
CVE-2025-55224Windows Hyper-V Remote Code Execution VulnerabilityHIGH7.822%ileMicrosoft2025-09-09
CVE-2025-59251Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityHIGH7.638%ileMicrosoft2025-09-09
CVE-2025-58767REXML has a DoS condition when parsing malformed XML fileHIGH7.514%ileMicrosoft2025-09-09
CVE-2025-55551An issue in the component torch.linalg.lu of pytorch v2.8.0 allows attackers to cause a Denial of Service (DoS) when perHIGH7.532%ileMicrosoft2025-09-09
CVE-2025-55552pytorch v2.8.0 was discovered to display unexpected behavior when the components torch.rot90 and torch.randn_like are usHIGH7.532%ileMicrosoft2025-09-09
CVE-2025-40928JSON::XS before version 4.04 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enablHIGH7.545%ileMicrosoft2025-09-09
CVE-2025-48041SSH_FXP_OPENDIR may Lead to Exhaustion of File HandlesHIGH7.529%ileMicrosoft2025-09-09
CVE-2025-59375libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that isHIGH7.567%ileMicrosoft2025-09-09
CVE-2025-58754Axios is vulnerable to DoS attack through lack of data size checkHIGH7.561%ileMicrosoft2025-09-09
CVE-2025-11021Libsoup: out-of-bounds read in cookie date handling of libsoup http libraryHIGH7.545%ileMicrosoft2025-09-09
CVE-2025-55553A syntax error in the component proxy_tensor.py of pytorch v2.7.0 allows attackers to cause a Denial of Service (DoS).HIGH7.531%ileMicrosoft2025-09-09
CVE-2025-55557A Name Error occurs in pytorch v2.7.0 when a PyTorch model consists of torch.cummin and is compiled by Inductor, leadingHIGH7.531%ileMicrosoft2025-09-09
CVE-2025-55560An issue in pytorch v2.7.0 can lead to a Denial of Service (DoS) when a PyTorch model consists of torch.Tensor.to_sparseHIGH7.531%ileMicrosoft2025-09-09
CVE-2025-55558A buffer overflow occurs in pytorch v2.7.0 when a PyTorch model consists of torch.nn.Conv2d, torch.nn.functional.hardshrHIGH7.535%ileMicrosoft2025-09-09
CVE-2025-9230Out-of-bounds read & write in RFC 3211 KEK UnwrapHIGH7.576%ileMicrosoft2025-09-09
CVE-2025-54919Windows Graphics Component Remote Code Execution VulnerabilityHIGH7.528%ileMicrosoft2025-09-09
CVE-2025-55243Microsoft OfficePlus Spoofing VulnerabilityHIGH7.561%ileMicrosoft2025-09-09
CVE-2025-53805HTTP.sys Denial of Service VulnerabilityHIGH7.569%ileMicrosoft2025-09-09
CVE-2025-55238Dynamics 365 FastTrack Implementation Assets Information Disclosure VulnerabilityHIGH7.552%ileMicrosoft2025-09-09
CVE-2025-4953Podman: build context bind mountHIGH7.445%ileMicrosoft2025-09-09
CVE-2025-54103Windows Management Service Elevation of Privilege VulnerabilityHIGH7.431%ileMicrosoft2025-09-09
CVE-2025-9905Arbitary Code execution in Keras load_model()HIGH7.310%ileMicrosoft2025-09-09
CVE-2025-9906Arbitrary Code execution in Keras Safe ModeHIGH7.38%ileMicrosoft2025-09-09
CVE-2025-55236Graphics Kernel Remote Code Execution VulnerabilityHIGH7.332%ileMicrosoft2025-09-09
CVE-2025-54116Windows MultiPoint Services Elevation of Privilege VulnerabilityHIGH7.340%ileMicrosoft2025-09-09
CVE-2025-54911Windows BitLocker Elevation of Privilege VulnerabilityHIGH7.346%ileMicrosoft2025-09-09
CVE-2025-55322OmniParser Remote Code Execution VulnerabilityHIGH7.327%ileMicrosoft2025-09-09
CVE-2025-38728smb3: fix for slab out of bounds on mount to ksmbdHIGH7.122%ileMicrosoft2025-09-09
CVE-2025-39761wifi: ath12k: Decrement TID on RX peer frag setup error handlingHIGH7.112%ileMicrosoft2025-09-09
CVE-2025-39839batman-adv: fix OOB read/write in network-coding decodeHIGH7.115%ileMicrosoft2025-09-09
CVE-2025-39853i40e: Fix potential invalid access when MAC list is emptyHIGH7.15%ileMicrosoft2025-09-09
CVE-2025-38688iommufd: Prevent ALIGN() overflowHIGH7.15%ileMicrosoft2025-09-09
CVE-2025-38680media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format()HIGH7.16%ileMicrosoft2025-09-09
CVE-2025-38698jfs: Regular file corruption checkHIGH7.16%ileMicrosoft2025-09-09
CVE-2025-38697jfs: upper bound check of tree index in dbAllocAGHIGH7.16%ileMicrosoft2025-09-09
CVE-2025-38679media: venus: Fix OOB read due to missing payload bound checkHIGH7.15%ileMicrosoft2025-09-09
CVE-2025-39685comedi: pcl726: Prevent invalid irq numberHIGH7.15%ileMicrosoft2025-09-09
CVE-2025-39702ipv6: sr: Fix MAC comparison to be constant-timeHIGH7.132%ileMicrosoft2025-09-09
CVE-2025-39710media: venus: Add a check for packet size after reading from shared memoryHIGH7.15%ileMicrosoft2025-09-09
CVE-2025-39683tracing: Limit access to parser->buffer when trace_get_user failedHIGH7.16%ileMicrosoft2025-09-09
CVE-2025-58063CoreDNS: DNS Cache Pinning via etcd Lease ID ConfusionHIGH7.134%ileMicrosoft2025-09-09
CVE-2025-39817efivarfs: Fix slab-out-of-bounds in efivarfs_d_compareHIGH7.15%ileMicrosoft2025-09-09
CVE-2025-39860Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen()HIGH7.112%ileMicrosoft2025-09-09
CVE-2025-39883mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memoryHIGH7.14%ileMicrosoft2025-09-09
CVE-2023-53254cacheinfo: Fix shared_cpu_map to handle shared caches at different levelsHIGH7.14%ileMicrosoft2025-09-09
CVE-2025-39806HID: multitouch: fix slab out-of-bounds access in mt_report_fixup()HIGH7.112%ileMicrosoft2025-09-09
CVE-2025-54905Microsoft Word Information Disclosure VulnerabilityHIGH7.145%ileMicrosoft2025-09-09
CVE-2025-39732wifi: ath11k: fix sleeping-in-atomic in ath11k_mac_op_set_bitrate_mask()HIGH7.04%ileMicrosoft2025-09-09
CVE-2025-39749rcu: Protect ->defer_qs_iw_pending from data raceHIGH7.05%ileMicrosoft2025-09-09
CVE-2025-39750wifi: ath12k: Correct tid cleanup when tid setup failsHIGH7.012%ileMicrosoft2025-09-09
CVE-2025-39746wifi: ath10k: shutdown driver when hardware is unreliableHIGH7.04%ileMicrosoft2025-09-09
CVE-2025-39759btrfs: qgroup: fix race between quota disable and quota rescan ioctlHIGH7.01%ileMicrosoft2025-09-09
CVE-2025-39742RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask()HIGH7.06%ileMicrosoft2025-09-09
CVE-2025-39825smb: client: fix race with concurrent opens in rename(2)HIGH7.01%ileMicrosoft2025-09-09
CVE-2025-39833mISDN: hfcpci: Fix warning when deleting uninitialized timerHIGH7.02%ileMicrosoft2025-09-09
CVE-2025-39850vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objectsHIGH7.03%ileMicrosoft2025-09-09
CVE-2025-38710gfs2: Validate i_depth for exhash directoriesHIGH7.04%ileMicrosoft2025-09-09
CVE-2025-38709loop: Avoid updating block size under exclusive ownerHIGH7.04%ileMicrosoft2025-09-09
CVE-2025-38695scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structureHIGH7.06%ileMicrosoft2025-09-09
CVE-2025-38684net/sched: ets: use old 'nbands' while purging unused classesHIGH7.06%ileMicrosoft2025-09-09
CVE-2025-38692exfat: add cluster chain loop check for dirHIGH7.04%ileMicrosoft2025-09-09
CVE-2025-38701ext4: do not BUG when INLINE_DATA_FL lacks system.data xattrHIGH7.06%ileMicrosoft2025-09-09
CVE-2025-39703net, hsr: reject HSR frame if skb can't hold tagHIGH7.027%ileMicrosoft2025-09-09
CVE-2025-38735gve: prevent ethtool ops after shutdownHIGH7.05%ileMicrosoft2025-09-09
CVE-2025-39711media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() callsHIGH7.04%ileMicrosoft2025-09-09
CVE-2025-39721crypto: qat - flush misc workqueue during device shutdownHIGH7.03%ileMicrosoft2025-09-09
CVE-2025-39694s390/sclp: Fix SCCB present checkHIGH7.05%ileMicrosoft2025-09-09
CVE-2025-39677net/sched: Fix backlog accounting in qdisc_dequeue_internalHIGH7.03%ileMicrosoft2025-09-09
CVE-2025-39673ppp: fix race conditions in ppp_fill_forward_pathHIGH7.020%ileMicrosoft2025-09-09
CVE-2025-38732netfilter: nf_reject: don't leak dst refcount for loopback packetsHIGH7.06%ileMicrosoft2025-09-09
CVE-2025-39713media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt()HIGH7.03%ileMicrosoft2025-09-09
CVE-2025-39826net: rose: convert 'use' field to refcount_tHIGH7.09%ileMicrosoft2025-09-09
CVE-2025-39832net/mlx5: Fix lockdep assertion on sync reset unload eventHIGH7.01%ileMicrosoft2025-09-09
CVE-2025-39843mm: slub: avoid wake up kswapd in set_track_prepareHIGH7.01%ileMicrosoft2025-09-09
CVE-2025-39851vxlan: Fix NPD when refreshing an FDB entry with a nexthop objectHIGH7.020%ileMicrosoft2025-09-09
CVE-2025-39865tee: fix NULL pointer dereference in tee_shm_putHIGH7.05%ileMicrosoft2025-09-09
CVE-2025-39838cifs: prevent NULL pointer dereference in UTF16 conversionHIGH7.04%ileMicrosoft2025-09-09
CVE-2025-39877mm/damon/sysfs: fix use-after-free in state_show()HIGH7.04%ileMicrosoft2025-09-09
CVE-2025-49734PowerShell Direct Elevation of Privilege VulnerabilityHIGH7.022%ileMicrosoft2025-09-09
CVE-2025-54099Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityHIGH7.028%ileMicrosoft2025-09-09
CVE-2025-55223DirectX Graphics Kernel Elevation of Privilege VulnerabilityHIGH7.019%ileMicrosoft2025-09-09
CVE-2025-59215Windows Graphics Component Elevation of Privilege VulnerabilityHIGH7.022%ileMicrosoft2025-09-09
CVE-2025-53802Windows Bluetooth Service Elevation of Privilege VulnerabilityHIGH7.028%ileMicrosoft2025-09-09
CVE-2025-53807Windows Graphics Component Elevation of Privilege VulnerabilityHIGH7.018%ileMicrosoft2025-09-09
CVE-2025-54093Windows TCP/IP Driver Elevation of Privilege VulnerabilityHIGH7.028%ileMicrosoft2025-09-09
CVE-2025-54105Microsoft Brokering File System Elevation of Privilege VulnerabilityHIGH7.018%ileMicrosoft2025-09-09
CVE-2025-54108Capability Access Management Service (camsvc) Elevation of Privilege VulnerabilityHIGH7.018%ileMicrosoft2025-09-09
CVE-2025-54112Microsoft Virtual Hard Disk Elevation of Privilege VulnerabilityHIGH7.028%ileMicrosoft2025-09-09
CVE-2025-54114Windows Connected Devices Platform Service Elevation of Privilege VulnerabilityHIGH7.018%ileMicrosoft2025-09-09
CVE-2025-54115Windows Hyper-V Elevation of Privilege VulnerabilityHIGH7.031%ileMicrosoft2025-09-09
CVE-2025-59216Windows Graphics Component Elevation of Privilege VulnerabilityHIGH7.014%ileMicrosoft2025-09-09
CVE-2025-59220Windows Bluetooth Service Elevation of Privilege VulnerabilityHIGH7.014%ileMicrosoft2025-09-09
CVE-2025-55226Graphics Kernel Remote Code Execution VulnerabilityMEDIUM6.737%ileMicrosoft2025-09-09
CVE-2025-53808Windows Defender Firewall Service Elevation of Privilege VulnerabilityMEDIUM6.737%ileMicrosoft2025-09-09
CVE-2025-53810Windows Defender Firewall Service Elevation of Privilege VulnerabilityMEDIUM6.736%ileMicrosoft2025-09-09
CVE-2025-54094Windows Defender Firewall Service Elevation of Privilege VulnerabilityMEDIUM6.736%ileMicrosoft2025-09-09
CVE-2025-54104Windows Defender Firewall Service Elevation of Privilege VulnerabilityMEDIUM6.739%ileMicrosoft2025-09-09
CVE-2025-54109Windows Defender Firewall Service Elevation of Privilege VulnerabilityMEDIUM6.737%ileMicrosoft2025-09-09
CVE-2025-54915Windows Defender Firewall Service Elevation of Privilege VulnerabilityMEDIUM6.738%ileMicrosoft2025-09-09
CVE-2025-39783PCI: endpoint: Fix configfs group list head handlingMEDIUM6.65%ileMicrosoft2025-09-09
CVE-2025-40300x86/vmscape: Add conditional IBPB mitigationMEDIUM6.526%ileMicrosoft2025-09-09
CVE-2025-9231Timing side-channel in SM2 algorithm on 64 bit ARMMEDIUM6.581%ileMicrosoft2025-09-09
CVE-2025-10148predictable WebSocket maskMEDIUM6.538%ileMicrosoft2025-09-09
CVE-2025-39682tls: fix handling of zero-length records on the rx_listMEDIUM6.538%ileMicrosoft2025-09-09
CVE-2025-58364cups: Remote DoS via null dereferenceMEDIUM6.561%ileMicrosoft2025-09-09
CVE-2025-53797Windows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityMEDIUM6.562%ileMicrosoft2025-09-09
CVE-2025-53798Windows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityMEDIUM6.562%ileMicrosoft2025-09-09
CVE-2025-54095Windows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityMEDIUM6.562%ileMicrosoft2025-09-09
CVE-2025-54096Windows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityMEDIUM6.562%ileMicrosoft2025-09-09
CVE-2025-54097Windows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityMEDIUM6.562%ileMicrosoft2025-09-09
CVE-2025-55225Windows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityMEDIUM6.563%ileMicrosoft2025-09-09
CVE-2025-47997Microsoft SQL Server Information Disclosure VulnerabilityMEDIUM6.552%ileMicrosoft2025-09-09
CVE-2025-53796Windows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityMEDIUM6.562%ileMicrosoft2025-09-09
CVE-2025-53806Windows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityMEDIUM6.562%ileMicrosoft2025-09-09
CVE-2025-53809Windows Local Security Authority Subsystem Service (LSASS) Denial of Service VulnerabilityMEDIUM6.569%ileMicrosoft2025-09-09
CVE-2025-55242Xbox Certification Bug Copilot Djando Information Disclosure VulnerabilityMEDIUM6.551%ileMicrosoft2025-09-09
CVE-2025-38708drbd: add missing kref_get in handle_write_conflictsMEDIUM6.327%ileMicrosoft2025-09-09
CVE-2025-38704rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer accessMEDIUM6.35%ileMicrosoft2025-09-09
CVE-2025-39801usb: dwc3: Remove WARN_ON for device endpoint command timeoutsMEDIUM6.24%ileMicrosoft2025-09-09
CVE-2025-39794ARM: tegra: Use I/O memcpy to write to IRAMMEDIUM6.24%ileMicrosoft2025-09-09
CVE-2022-50303drm/amdkfd: Fix double release compute pasidMEDIUM6.15%ileMicrosoft2025-09-09
CVE-2025-38713hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()MEDIUM6.15%ileMicrosoft2025-09-09
CVE-2025-39797xfrm: Duplicate SPI HandlingMEDIUM6.14%ileMicrosoft2025-09-09
CVE-2022-50256drm/meson: remove drm bridges at aggregate driver unbind timeMEDIUM6.14%ileMicrosoft2025-09-09
CVE-2025-38678netfilter: nf_tables: reject duplicate device on updatesMEDIUM6.014%ileMicrosoft2025-09-09
CVE-2023-53376scsi: mpi3mr: Use number of bits to manage bitmap sizesMEDIUM6.05%ileMicrosoft2025-09-09
CVE-2025-9901Libsoup: improper handling of http vary header in libsoup cachingMEDIUM5.937%ileMicrosoft2025-09-09
CVE-2025-9232Out-of-bounds read in HTTP client no_proxy handlingMEDIUM5.981%ileMicrosoft2025-09-09
CVE-2025-39857net/smc: fix one NULL pointer dereference in smc_ib_is_sg_need_sync()MEDIUM5.821%ileMicrosoft2025-09-09
CVE-2025-39739iommu/arm-smmu-qcom: Add SM6115 MDSS compatibleMEDIUM5.64%ileMicrosoft2025-09-09
CVE-2025-39731f2fs: vm_unmap_ram() may be called from an invalid contextMEDIUM5.53%ileMicrosoft2025-09-09
CVE-2025-39745rcutorture: Fix rcutorture_one_extend_check() splat in RT kernelsMEDIUM5.54%ileMicrosoft2025-09-09
CVE-2025-39756fs: Prevent file descriptor table allocations exceeding INT_MAXMEDIUM5.56%ileMicrosoft2025-09-09
CVE-2025-39781parisc: Drop WARN_ON_ONCE() from flush_cache_vmapMEDIUM5.54%ileMicrosoft2025-09-09
CVE-2025-39760usb: core: config: Prevent OOB read in SS endpoint companion parsingMEDIUM5.56%ileMicrosoft2025-09-09
CVE-2025-39758RDMA/siw: Fix the sendmsg byte count in siw_tcp_sendpagesMEDIUM5.528%ileMicrosoft2025-09-09
CVE-2025-39764netfilter: ctnetlink: remove refcounting in expectation dumpersMEDIUM5.55%ileMicrosoft2025-09-09
CVE-2025-39753gfs2: Set .migrate_folio in gfs2_{rgrp,meta}_aopsMEDIUM5.54%ileMicrosoft2025-09-09
CVE-2025-39779btrfs: subpage: keep TOWRITE tag until folio is cleanedMEDIUM5.54%ileMicrosoft2025-09-09
CVE-2025-39736mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lockMEDIUM5.52%ileMicrosoft2025-09-09
CVE-2025-39754mm/smaps: fix race between smaps_hugetlb_range and migrationMEDIUM5.51%ileMicrosoft2025-09-09
CVE-2025-39762drm/amd/display: add null checkMEDIUM5.54%ileMicrosoft2025-09-09
CVE-2025-39773net: bridge: fix soft lockup in br_multicast_query_expired()MEDIUM5.52%ileMicrosoft2025-09-09
CVE-2025-39767LoongArch: Optimize module load time by optimizing PLT/GOT countingMEDIUM5.51%ileMicrosoft2025-09-09
CVE-2025-39747drm/msm: Add error handling for krealloc in metadata setupMEDIUM5.54%ileMicrosoft2025-09-09
CVE-2025-39789crypto: x86/aegis - Add missing error checksMEDIUM5.53%ileMicrosoft2025-09-09
CVE-2025-39748bpf: Forget ranges when refining tnum after JSETMEDIUM5.55%ileMicrosoft2025-09-09
CVE-2025-39787soc: qcom: mdt_loader: Ensure we don't read past the ELF headerMEDIUM5.55%ileMicrosoft2025-09-09
CVE-2025-39752ARM: rockchip: fix kernel hang during smp initializationMEDIUM5.56%ileMicrosoft2025-09-09
CVE-2025-39763ACPI: APEI: send SIGBUS to current task if synchronous memory error not recoveredMEDIUM5.54%ileMicrosoft2025-09-09
CVE-2025-39772drm/hisilicon/hibmc: fix the hibmc loaded failed bugMEDIUM5.53%ileMicrosoft2025-09-09
CVE-2025-39737mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup()MEDIUM5.56%ileMicrosoft2025-09-09
CVE-2025-39744rcu: Fix rcu_read_unlock() deadloop due to IRQ workMEDIUM5.55%ileMicrosoft2025-09-09
CVE-2025-39819fs/smb: Fix inconsistent refcnt updateMEDIUM5.54%ileMicrosoft2025-09-09
CVE-2025-39813ftrace: Fix potential warning in trace_printk_seq during ftrace_dumpMEDIUM5.52%ileMicrosoft2025-09-09
CVE-2025-39827net: rose: include node references in rose_neigh refcountMEDIUM5.510%ileMicrosoft2025-09-09
CVE-2025-39829trace/fgraph: Fix the warning caused by missing unregister notifierMEDIUM5.53%ileMicrosoft2025-09-09
CVE-2025-39805net: macb: fix unregister_netdev call order in macb_remove()MEDIUM5.54%ileMicrosoft2025-09-09
CVE-2025-39808HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version()MEDIUM5.56%ileMicrosoft2025-09-09
CVE-2025-39812sctp: initialize more fields in sctp_v6_from_sk()MEDIUM5.56%ileMicrosoft2025-09-09
CVE-2025-39842ocfs2: prevent release journal inode after journal shutdownMEDIUM5.55%ileMicrosoft2025-09-09
CVE-2025-39847ppp: fix memory leak in pad_compress_skbMEDIUM5.55%ileMicrosoft2025-09-09
CVE-2025-39846pcmcia: Fix a NULL pointer dereference in __iodyn_find_io_region()MEDIUM5.55%ileMicrosoft2025-09-09
CVE-2023-53149ext4: avoid deadlock in fs reclaim with page writebackMEDIUM5.51%ileMicrosoft2025-09-09
CVE-2022-50266kprobes: Fix check for probe enabled in kill_kprobe()MEDIUM5.54%ileMicrosoft2025-09-09
CVE-2023-53221bpf: Fix memleak due to fentry attach failureMEDIUM5.54%ileMicrosoft2025-09-09
CVE-2023-53240xsk: check IFF_UP earlier in Tx pathMEDIUM5.54%ileMicrosoft2025-09-09
CVE-2023-53247btrfs: set_page_extent_mapped after read_folio in btrfs_cont_expandMEDIUM5.53%ileMicrosoft2025-09-09
CVE-2023-53231erofs: Fix detection of atomic contextMEDIUM5.53%ileMicrosoft2025-09-09
CVE-2023-53323ext2/dax: Fix ext2_setsize when len is page alignedMEDIUM5.53%ileMicrosoft2025-09-09
CVE-2023-53332genirq/ipi: Fix NULL pointer deref in irq_data_get_affinity_mask()MEDIUM5.53%ileMicrosoft2025-09-09
CVE-2022-50407crypto: hisilicon/qm - increase the memory of local variablesMEDIUM5.56%ileMicrosoft2025-09-09
CVE-2023-53347net/mlx5: Handle pairing of E-switch via uplink un/load APIsMEDIUM5.59%ileMicrosoft2025-09-09
CVE-2023-53348btrfs: fix deadlock when aborting transaction during relocation with scrubMEDIUM5.54%ileMicrosoft2025-09-09
CVE-2023-53410USB: ULPI: fix memory leak with using debugfs_lookup()MEDIUM5.53%ileMicrosoft2025-09-09
CVE-2023-53355staging: pi433: fix memory leak with using debugfs_lookup()MEDIUM5.57%ileMicrosoft2025-09-09
CVE-2023-53421blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats()MEDIUM5.55%ileMicrosoft2025-09-09
CVE-2023-53429btrfs: don't check PageError in __extent_writepageMEDIUM5.53%ileMicrosoft2025-09-09
CVE-2023-53383irqchip/gicv3: Workaround for NVIDIA erratum T241-FABRIC-4MEDIUM5.53%ileMicrosoft2025-09-09
CVE-2023-53387scsi: ufs: core: Fix device management cmd timeout flowMEDIUM5.54%ileMicrosoft2025-09-09
CVE-2023-53370drm/amdgpu: fix memory leak in mes self testMEDIUM5.54%ileMicrosoft2025-09-09
CVE-2025-38693media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serparMEDIUM5.56%ileMicrosoft2025-09-09
CVE-2025-38723LoongArch: BPF: Fix jump offset calculation in tailcallMEDIUM5.55%ileMicrosoft2025-09-09
CVE-2025-38696MIPS: Don't crash in stack_top() for tasks without ABI or vDSOMEDIUM5.57%ileMicrosoft2025-09-09
CVE-2025-38691pNFS: Fix uninited ptr deref in block/scsi layoutMEDIUM5.56%ileMicrosoft2025-09-09
CVE-2025-38681mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd()MEDIUM5.52%ileMicrosoft2025-09-09
CVE-2025-38715hfs: fix slab-out-of-bounds in hfs_bnode_read()MEDIUM5.55%ileMicrosoft2025-09-09
CVE-2025-38730io_uring/net: commit partial buffers on retryMEDIUM5.55%ileMicrosoft2025-09-09
CVE-2025-38716hfs: fix general protection fault in hfs_find_init()MEDIUM5.53%ileMicrosoft2025-09-09
CVE-2025-38705drm/amd/pm: fix null pointer accessMEDIUM5.54%ileMicrosoft2025-09-09
CVE-2025-38687comedi: fix race between polling and detachingMEDIUM5.52%ileMicrosoft2025-09-09
CVE-2025-38712hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file()MEDIUM5.54%ileMicrosoft2025-09-09
CVE-2025-38721netfilter: ctnetlink: fix refcount leak on table dumpMEDIUM5.55%ileMicrosoft2025-09-09
CVE-2025-38711smb/server: avoid deadlock when linking with ReplaceIfExistsMEDIUM5.52%ileMicrosoft2025-09-09
CVE-2025-38722habanalabs: fix UAF in export_dmabuf()MEDIUM5.54%ileMicrosoft2025-09-09
CVE-2025-38717net: kcm: Fix race condition in kcm_unattach()MEDIUM5.51%ileMicrosoft2025-09-09
CVE-2025-38725net: usb: asix_devices: add phy_mask for ax88772 mdio busMEDIUM5.54%ileMicrosoft2025-09-09
CVE-2025-38700scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocatedMEDIUM5.56%ileMicrosoft2025-09-09
CVE-2025-39697NFS: Fix a race when updating an existing writeMEDIUM5.54%ileMicrosoft2025-09-09
CVE-2025-39709media: venus: protect against spurious interrupts during probeMEDIUM5.54%ileMicrosoft2025-09-09
CVE-2025-39726s390/ism: fix concurrency management in ism_cmd()MEDIUM5.512%ileMicrosoft2025-09-09
CVE-2025-39718vsock/virtio: Validate length in packet header before skb_put()MEDIUM5.54%ileMicrosoft2025-09-09
CVE-2025-39684comedi: Fix use of uninitialized memory in do_insn_ioctl() and do_insnlist_ioctl()MEDIUM5.56%ileMicrosoft2025-09-09
CVE-2025-39692smb: server: split ksmbd_rdma_stop_listening() out of ksmbd_rdma_destroy()MEDIUM5.54%ileMicrosoft2025-09-09
CVE-2025-39724serial: 8250: fix panic due to PSLVERRMEDIUM5.55%ileMicrosoft2025-09-09
CVE-2025-39720ksmbd: fix refcount leak causing resource not releasedMEDIUM5.518%ileMicrosoft2025-09-09
CVE-2025-39687iio: light: as73211: Ensure buffer holes are zeroedMEDIUM5.56%ileMicrosoft2025-09-09
CVE-2025-39693drm/amd/display: Avoid a NULL pointer dereferenceMEDIUM5.54%ileMicrosoft2025-09-09
CVE-2025-39705drm/amd/display: fix a Null pointer dereference vulnerabilityMEDIUM5.53%ileMicrosoft2025-09-09
CVE-2025-39706drm/amdkfd: Destroy KFD debugfs after destroy KFD wqMEDIUM5.53%ileMicrosoft2025-09-09
CVE-2025-39707drm/amdgpu: check if hubbub is NULL in debugfs/amdgpu_dm_capabilitiesMEDIUM5.53%ileMicrosoft2025-09-09
CVE-2025-38734net/smc: fix UAF on smcsk after smc_listen_out()MEDIUM5.535%ileMicrosoft2025-09-09
CVE-2025-39701ACPI: pfr_update: Fix the driver update version checkMEDIUM5.57%ileMicrosoft2025-09-09
CVE-2025-39715parisc: Revise gateway LWS calls to probe user read accessMEDIUM5.53%ileMicrosoft2025-09-09
CVE-2025-39675drm/amd/display: Add null pointer check in mod_hdcp_hdcp1_create_session()MEDIUM5.54%ileMicrosoft2025-09-09
CVE-2025-39716parisc: Revise __get_user() to probe user read accessMEDIUM5.53%ileMicrosoft2025-09-09
CVE-2025-39719iio: imu: bno055: fix OOB access of hw_xlate arrayMEDIUM5.54%ileMicrosoft2025-09-09
CVE-2025-39714media: usbtv: Lock resolution while streamingMEDIUM5.55%ileMicrosoft2025-09-09
CVE-2025-39679drm/nouveau/nvif: Fix potential memory leak in nvif_vmm_ctor().MEDIUM5.54%ileMicrosoft2025-09-09
CVE-2025-39676scsi: qla4xxx: Prevent a potential error pointer dereferenceMEDIUM5.56%ileMicrosoft2025-09-09
CVE-2025-38736net: usb: asix_devices: Fix PHY address mask in MDIO bus initializationMEDIUM5.55%ileMicrosoft2025-09-09
CVE-2025-39681x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helperMEDIUM5.56%ileMicrosoft2025-09-09
CVE-2025-39798NFS: Fix the setting of capabilities when automounting a new filesystemMEDIUM5.517%ileMicrosoft2025-09-09
CVE-2025-39795block: avoid possible overflow for chunk_sectors check in blk_stack_limits()MEDIUM5.55%ileMicrosoft2025-09-09
CVE-2025-39800btrfs: abort transaction on unexpected eb generation at btrfs_copy_root()MEDIUM5.54%ileMicrosoft2025-09-09
CVE-2025-39799ACPI: processor: perflib: Move problematic pr->performance checkMEDIUM5.5—Microsoft2025-09-09
CVE-2022-50380mm: /proc/pid/smaps_rollup: fix no vma's null-derefMEDIUM5.54%ileMicrosoft2025-09-09
CVE-2025-39849wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result()MEDIUM5.510%ileMicrosoft2025-09-09
CVE-2025-39845x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings()MEDIUM5.54%ileMicrosoft2025-09-09
CVE-2025-39862wifi: mt76: mt7915: fix list corruption after hardware restartMEDIUM5.57%ileMicrosoft2025-09-09
CVE-2025-39844mm: move page table sync declarations to linux/pgtable.hMEDIUM5.54%ileMicrosoft2025-09-09
CVE-2025-39848ax25: properly unshare skbs in ax25_kiss_rcv()MEDIUM5.513%ileMicrosoft2025-09-09
CVE-2025-39885ocfs2: fix recursive semaphore deadlock in fiemap callMEDIUM5.52%ileMicrosoft2025-09-09
CVE-2025-39881kernfs: Fix UAF in polling when open file is releasedMEDIUM5.54%ileMicrosoft2025-09-09
CVE-2025-39886bpf: Tell memcg to use allow_spinning=false path in bpf_timer_init()MEDIUM5.54%ileMicrosoft2025-09-09
CVE-2025-39869dmaengine: ti: edma: Fix memory allocation size for queue_priority_mapMEDIUM5.55%ileMicrosoft2025-09-09
CVE-2025-39876net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable()MEDIUM5.54%ileMicrosoft2025-09-09
CVE-2025-39880libceph: fix invalid accesses to ceph_connection_v1_infoMEDIUM5.522%ileMicrosoft2025-09-09
CVE-2025-10911Libxslt: use-after-free with key data stored cross-rvtMEDIUM5.56%ileMicrosoft2025-09-09
CVE-2025-11083GNU Binutils Linker elfcode.h elf_swap_shdr heap-based overflowMEDIUM5.514%ileMicrosoft2025-09-09
CVE-2022-50236iommu/mediatek: Fix crash on isr after kexec()MEDIUM5.54%ileMicrosoft2025-09-09
CVE-2023-53152drm/amdgpu: fix calltrace warning in amddrm_buddy_finiMEDIUM5.54%ileMicrosoft2025-09-09
CVE-2022-50260drm/msm: Make .remove and .shutdown HW shutdown consistentMEDIUM5.54%ileMicrosoft2025-09-09
CVE-2022-50350scsi: target: iscsi: Fix a race condition between login_work and the login threadMEDIUM5.516%ileMicrosoft2025-09-09
CVE-2023-53261coresight: Fix memory leak in acpi_buffer->pointerMEDIUM5.52%ileMicrosoft2025-09-09
CVE-2023-53292blk-mq: fix NULL dereference on q->elevator in blk_mq_elv_switch_noneMEDIUM5.53%ileMicrosoft2025-09-09
CVE-2022-50316orangefs: Fix kmemleak in orangefs_sysfs_init()MEDIUM5.54%ileMicrosoft2025-09-09
CVE-2023-53248drm/amdgpu: install stub fence into potential unused fence pointersMEDIUM5.53%ileMicrosoft2025-09-09
CVE-2022-50304mtd: core: fix possible resource leak in init_mtd()MEDIUM5.54%ileMicrosoft2025-09-09
CVE-2023-53209wifi: mac80211_hwsim: Fix possible NULL dereferenceMEDIUM5.54%ileMicrosoft2025-09-09
CVE-2022-50357usb: dwc3: core: fix some leaks in probeMEDIUM5.59%ileMicrosoft2025-09-09
CVE-2023-53353accel/habanalabs: postpone mem_mgr IDR destruction to hpriv_release()MEDIUM5.55%ileMicrosoft2025-09-09
CVE-2023-53424clk: mediatek: fix of_iomap memory leakMEDIUM5.54%ileMicrosoft2025-09-09
CVE-2023-53438x86/MCE: Always save CS register on AMD Zen IF Poison errorsMEDIUM5.54%ileMicrosoft2025-09-09
CVE-2023-53366block: be a bit more careful in checking for NULL bdev while pollingMEDIUM5.57%ileMicrosoft2025-09-09
CVE-2023-53367accel/habanalabs: fix mem leak in capture user mappingsMEDIUM5.55%ileMicrosoft2025-09-09
CVE-2022-50390drm/ttm: fix undefined behavior in bit shift for TTM_TT_FLAG_PRIV_POPULATEDMEDIUM5.55%ileMicrosoft2025-09-09
CVE-2022-50393drm/amdgpu: SDMA update use unlocked iteratorMEDIUM5.55%ileMicrosoft2025-09-09
CVE-2022-50418wifi: ath11k: mhi: fix potential memory leak in ath11k_mhi_register()MEDIUM5.54%ileMicrosoft2025-09-09
CVE-2023-53371net/mlx5e: fix memory leak in mlx5e_fs_tt_redirect_any_createMEDIUM5.54%ileMicrosoft2025-09-09
CVE-2024-58241Bluetooth: hci_core: Disable works on hci_unregister_devMEDIUM5.52%ileMicrosoft2025-09-09
CVE-2025-38683hv_netvsc: Fix panic during namespace deletion with VFMEDIUM5.56%ileMicrosoft2025-09-09
CVE-2025-39734Revert "fs/ntfs3: Replace inode_trylock with inode_lock"MEDIUM5.53%ileMicrosoft2025-09-09
CVE-2022-50327ACPI: processor: idle: Check acpi_fetch_acpi_dev() return valueMEDIUM5.54%ileMicrosoft2025-09-09
CVE-2025-39770net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUMMEDIUM5.526%ileMicrosoft2025-09-09
CVE-2025-39782jbd2: prevent softlockup in jbd2_log_do_checkpoint()MEDIUM5.52%ileMicrosoft2025-09-09
CVE-2025-53799Windows Imaging Component Information Disclosure VulnerabilityMEDIUM5.551%ileMicrosoft2025-09-09
CVE-2025-53803Windows Kernel Memory Information Disclosure VulnerabilityMEDIUM5.546%ileMicrosoft2025-09-09
CVE-2025-53804Windows Kernel-Mode Driver Information Disclosure VulnerabilityMEDIUM5.546%ileMicrosoft2025-09-09
CVE-2025-54901Microsoft Excel Information Disclosure VulnerabilityMEDIUM5.545%ileMicrosoft2025-09-09
CVE-2025-48040Malicious Key Exchange Messages may Lead to Excessive Resource ConsumptionMEDIUM5.333%ileMicrosoft2025-09-09
CVE-2025-46148In PyTorch through 2.6.0, when eager is used, nn.PairwiseDistance(p=2) produces incorrect results.MEDIUM5.330%ileMicrosoft2025-09-09
CVE-2025-58749WAMR runtime hangs or crashes with large memory.fill addresses in LLVM-JIT modeMEDIUM5.327%ileMicrosoft2025-09-09
CVE-2025-10824axboe fio init.c __parse_jobs_ini use after freeMEDIUM5.33%ileMicrosoft2025-09-09
CVE-2025-46152In PyTorch before 2.7.0, bitwise_right_shift produces incorrect output for certain out-of-bounds values of the "other" aMEDIUM5.335%ileMicrosoft2025-09-09
CVE-2025-11082GNU Binutils Linker elf-eh-frame.c _bfd_elf_parse_eh_frame heap-based overflowMEDIUM5.314%ileMicrosoft2025-09-09
CVE-2025-46153PyTorch before 3.7.0 has a bernoulli_p decompose function in decompositions.py even though it lacks full consistency witMEDIUM5.332%ileMicrosoft2025-09-09
CVE-2025-46149In PyTorch before 2.7.0, when inductor is used, nn.Fold has an assertion error.MEDIUM5.326%ileMicrosoft2025-09-09
CVE-2025-46150In PyTorch before 2.7.0, when torch.compile is used, FractionalMaxPool2d has inconsistent results.MEDIUM5.329%ileMicrosoft2025-09-09
CVE-2025-55554pytorch v2.8.0 was discovered to contain an integer overflow in the component torch.nan_to_num-.long().MEDIUM5.322%ileMicrosoft2025-09-09
CVE-2025-60018Glib-networking: out of bound reads on glib-networking through tls/openssl/gtlscertificate-openssl.c via "g_tls_certificMEDIUM4.821%ileMicrosoft2025-09-09
CVE-2025-54101Windows SMB Client Remote Code Execution VulnerabilityMEDIUM4.882%ileMicrosoft2025-09-09
CVE-2025-38706ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime()MEDIUM4.78%ileMicrosoft2025-09-09
CVE-2025-39867netfilter: nft_set_pipapo: fix null deref for empty setMEDIUM4.7—Microsoft2025-09-09
CVE-2023-53178mm: fix zswap writeback race conditionMEDIUM4.72%ileMicrosoft2025-09-09
CVE-2023-53401mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required()MEDIUM4.73%ileMicrosoft2025-09-09
CVE-2023-53447f2fs: don't reset unchangable mount option in f2fs_remount()MEDIUM4.70%ileMicrosoft2025-09-09
CVE-2025-47967Microsoft Edge (Chromium-based) for Android Spoofing VulnerabilityMEDIUM4.727%ileMicrosoft2025-09-09
CVE-2025-53791Microsoft Edge (Chromium-based) Security Feature Bypass VulnerabilityMEDIUM4.729%ileMicrosoft2025-09-09
CVE-2025-9086Out of bounds read for cookie pathMEDIUM4.368%ileMicrosoft2025-09-09
CVE-2025-48038Unverified File Handles can Cause Excessive Use of System ResourcesMEDIUM4.329%ileMicrosoft2025-09-09
CVE-2025-48039Unverified Paths can Cause Excessive Use of System ResourcesMEDIUM4.329%ileMicrosoft2025-09-09
CVE-2025-54107MapUrlToZone Security Feature Bypass VulnerabilityMEDIUM4.355%ileMicrosoft2025-09-09
CVE-2025-54917MapUrlToZone Security Feature Bypass VulnerabilityMEDIUM4.354%ileMicrosoft2025-09-09
CVE-2025-49728Microsoft PC Manager Security Feature Bypass VulnerabilityMEDIUM4.013%ileMicrosoft2025-09-09
CVE-2025-60019Glib-networking: uninitialized memory dereferences on glib-networking through glib-networking/tls/openssl/gtlsbio.c via LOW3.726%ileMicrosoft2025-09-09
CVE-2025-7039Glib: buffer under-read on glib through glib/gfileutils.c via get_tmp_file()LOW3.732%ileMicrosoft2025-09-09
CVE-2025-10823axboe fio options.c str_buffer_pattern_cb null pointer dereferenceLOW3.34%ileMicrosoft2025-09-09
CVE-2025-11081GNU Binutils objdump.c dump_dwarf_section out-of-boundsLOW3.39%ileMicrosoft2025-09-09
CVE-2025-8277Libssh: memory exhaustion via repeated key exchange in libsshLOW3.130%ileMicrosoft2025-09-09
CVE-2025-58354Kata Containers coco-tdx malicious host can circumvent initdata verificationUNKNOWN—24%ileMicrosoft2025-09-09
CVE-2025-8869Fallback tar extraction in pip doesn't check symbolic links point to extraction directoryUNKNOWN—36%ileMicrosoft2025-09-09
CVE-2025-59825astral-tokio-tar has a path traversal in tar extractionUNKNOWN—10%ileMicrosoft2025-09-09
CVE-2025-9648Denial of Service in CivetWebUNKNOWN—50%ileMicrosoft2025-09-09
CVE-2025-10501Chromium: CVE-2025-10501 Use after free in WebRTCUNKNOWN—19%ileMicrosoft2025-09-09
CVE-2025-10585Chromium: CVE-2025-10585 Type Confusion in V8UNKNOWN—92%ileMicrosoft2025-09-09
CVE-2025-10890Chromium: CVE-2025-10890 Side-channel information leakage in V8UNKNOWN—22%ileMicrosoft2025-09-09
CVE-2024-21907VulnCheck: CVE-2024-21907 Improper Handling of Exceptional Conditions in Newtonsoft.JsonUNKNOWN—98%ileMicrosoft2025-09-09
CVE-2025-9867Chromium: CVE-2025-9867 Inappropriate implementation in DownloadsUNKNOWN—22%ileMicrosoft2025-09-09
CVE-2025-9866Chromium: CVE-2025-9866 Inappropriate implementation in ExtensionsUNKNOWN—29%ileMicrosoft2025-09-09
CVE-2025-9865Chromium: CVE-2025-9865 Inappropriate implementation in ToolbarUNKNOWN—17%ileMicrosoft2025-09-09
CVE-2025-9864Chromium: CVE-2025-9864 Use after free in V8UNKNOWN——Microsoft2025-09-09
CVE-2025-10201Chromium: CVE-2025-10201 Inappropriate implementation in MojoUNKNOWN—17%ileMicrosoft2025-09-09
CVE-2025-10200Chromium: CVE-2025-10200 Use after free in ServiceworkerUNKNOWN—45%ileMicrosoft2025-09-09
CVE-2025-10502Chromium: CVE-2025-10502 Heap buffer overflow in ANGLEUNKNOWN—18%ileMicrosoft2025-09-09
CVE-2025-10500Chromium: CVE-2025-10500 Use after free in DawnUNKNOWN—17%ileMicrosoft2025-09-09
CVE-2025-10891Chromium: CVE-2025-10891 Integer overflow in V8UNKNOWN—93%ileMicrosoft2025-09-09
CVE-2025-10892Chromium: CVE-2025-10892 Integer overflow in V8UNKNOWN—18%ileMicrosoft2025-09-09
CVE-2025-49747Azure Machine Learning Elevation of Privilege VulnerabilityCRITICAL9.947%ileMicrosoft2025-07-08
CVE-2025-49746Azure Machine Learning Elevation of Privilege VulnerabilityCRITICAL9.949%ileMicrosoft2025-07-08
CVE-2025-38483comedi: das16m1: Fix bit shift out of boundsCRITICAL9.86%ileMicrosoft2025-07-08
CVE-2025-38482comedi: das6402: Fix bit shift out of boundsCRITICAL9.86%ileMicrosoft2025-07-08
CVE-2025-38497usb: gadget: configfs: Fix OOB read on empty string writeCRITICAL9.85%ileMicrosoft2025-07-08
CVE-2024-25176LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240626 have a stack-buffer-overflow in lj_strfmt_wfnum in lj_strfCRITICAL9.839%ileMicrosoft2025-07-08
CVE-2025-6965Integer Truncation on SQLiteCRITICAL9.8100%ileMicrosoft2025-07-08
CVE-2025-38478comedi: Fix initialization of data for instructions that write to subdeviceCRITICAL9.86%ileMicrosoft2025-07-08
CVE-2025-38490net: libwx: remove duplicate page_pool_put_full_page()CRITICAL9.822%ileMicrosoft2025-07-08
CVE-2025-47981SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution VulnerabilityCRITICAL9.898%ileMicrosoft2025-07-08
CVE-2025-53770Microsoft SharePoint Server Remote Code Execution VulnerabilityCRITICAL9.8100%ileMicrosoft2025-07-08
CVE-2024-25178LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an out-of-bounds read in the stack-overflow handler iCRITICAL9.442%ileMicrosoft2025-07-08
CVE-2024-48916Ceph is vulnerable to authentication bypass through RadosGWCRITICAL9.19%ileMicrosoft2025-07-08
CVE-2025-23048Apache HTTP Server: mod_ssl access control bypass with session resumptionCRITICAL9.158%ileMicrosoft2025-07-08
CVE-2025-7458SQLite integer overflow in key info allocation may lead to information disclosure.CRITICAL9.114%ileMicrosoft2025-07-08
CVE-2025-23266NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize the container, wherCRITICAL9.083%ileMicrosoft2025-07-08
CVE-2025-47158Azure DevOps Server Elevation of Privilege VulnerabilityCRITICAL9.049%ileMicrosoft2025-07-08
CVE-2025-51480Path Traversal vulnerability in onnx.external_data_helper.save_external_data in ONNX 1.17.0 allows attackers to overwritHIGH8.844%ileMicrosoft2025-07-08
CVE-2025-47986Universal Print Management Service Elevation of Privilege VulnerabilityHIGH8.830%ileMicrosoft2025-07-08
CVE-2025-48824Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityHIGH8.856%ileMicrosoft2025-07-08
CVE-2025-49657Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityHIGH8.857%ileMicrosoft2025-07-08
CVE-2025-49672Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityHIGH8.853%ileMicrosoft2025-07-08
CVE-2025-49674Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityHIGH8.851%ileMicrosoft2025-07-08
CVE-2025-49676Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityHIGH8.853%ileMicrosoft2025-07-08
CVE-2025-49687Windows Input Method Editor (IME) Elevation of Privilege VulnerabilityHIGH8.826%ileMicrosoft2025-07-08
CVE-2025-49688Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityHIGH8.853%ileMicrosoft2025-07-08
CVE-2025-49723Windows StateRepository API Server file Tampering VulnerabilityHIGH8.824%ileMicrosoft2025-07-08
CVE-2025-49713Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityHIGH8.849%ileMicrosoft2025-07-08
CVE-2025-49753Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityHIGH8.851%ileMicrosoft2025-07-08
CVE-2025-47998Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityHIGH8.855%ileMicrosoft2025-07-08
CVE-2025-48817Remote Desktop Client Remote Code Execution VulnerabilityHIGH8.857%ileMicrosoft2025-07-08
CVE-2025-49663Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityHIGH8.851%ileMicrosoft2025-07-08
CVE-2025-49668Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityHIGH8.851%ileMicrosoft2025-07-08
CVE-2025-49669Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityHIGH8.851%ileMicrosoft2025-07-08
CVE-2025-49673Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityHIGH8.851%ileMicrosoft2025-07-08
CVE-2025-49701Microsoft SharePoint Remote Code Execution VulnerabilityHIGH8.855%ileMicrosoft2025-07-08
CVE-2025-49704Microsoft SharePoint Remote Code Execution VulnerabilityHIGH8.8100%ileMicrosoft2025-07-08
CVE-2025-49724Windows Connected Devices Platform Service Remote Code Execution VulnerabilityHIGH8.894%ileMicrosoft2025-07-08
CVE-2025-49729Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityHIGH8.844%ileMicrosoft2025-07-08
CVE-2025-49739Visual Studio Elevation of Privilege VulnerabilityHIGH8.852%ileMicrosoft2025-07-08
CVE-2025-49740Windows SmartScreen Security Feature Bypass VulnerabilityHIGH8.851%ileMicrosoft2025-07-08
CVE-2025-53762Microsoft Purview Elevation of Privilege VulnerabilityHIGH8.751%ileMicrosoft2025-07-08
CVE-2025-4674Unexpected command execution in untrusted VCS repositories in cmd/goHIGH8.620%ileMicrosoft2025-07-08
CVE-2025-53547Helm Chart Dependency Updating With Malicious Chart.yaml Content And Symlink Can Lead To Code ExecutionHIGH8.629%ileMicrosoft2025-07-08
CVE-2025-48822Windows Hyper-V Discrete Device Assignment (DDA) Remote Code Execution VulnerabilityHIGH8.645%ileMicrosoft2025-07-08
CVE-2025-49717Microsoft SQL Server Remote Code Execution VulnerabilityHIGH8.557%ileMicrosoft2025-07-08
CVE-2025-38349eventpoll: don't decrement ep refcount while still holding the ep mutexHIGH8.45%ileMicrosoft2025-07-08
CVE-2025-49695Microsoft Office Remote Code Execution VulnerabilityHIGH8.445%ileMicrosoft2025-07-08
CVE-2025-49696Microsoft Office Remote Code Execution VulnerabilityHIGH8.443%ileMicrosoft2025-07-08
CVE-2025-49697Microsoft Office Remote Code Execution VulnerabilityHIGH8.438%ileMicrosoft2025-07-08
CVE-2025-33054Remote Desktop Spoofing VulnerabilityHIGH8.154%ileMicrosoft2025-07-08
CVE-2025-49735Windows KDC Proxy Service (KPSSVC) Remote Code Execution VulnerabilityHIGH8.161%ileMicrosoft2025-07-08
CVE-2025-47972Windows Input Method Editor (IME) Elevation of Privilege VulnerabilityHIGH8.042%ileMicrosoft2025-07-08
CVE-2025-49691Windows Miracast Wireless Display Remote Code Execution VulnerabilityHIGH8.037%ileMicrosoft2025-07-08
CVE-2025-47178Microsoft Configuration Manager Remote Code Execution VulnerabilityHIGH8.080%ileMicrosoft2025-07-08
CVE-2025-38118Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_completeHIGH7.86%ileMicrosoft2025-07-08
CVE-2025-38183net: lan743x: fix potential out-of-bounds write in lan743x_ptp_io_event_clock_get()HIGH7.86%ileMicrosoft2025-07-08
CVE-2025-38198fbcon: Make sure modelist not set on unregistered consoleHIGH7.86%ileMicrosoft2025-07-08
CVE-2025-38212ipc: fix to protect IPCS lookups using RCUHIGH7.85%ileMicrosoft2025-07-08
CVE-2025-38236af_unix: Don't leave consecutive consumed OOB skbs.HIGH7.817%ileMicrosoft2025-07-08
CVE-2025-38257s390/pkey: Prevent overflow in size calculation for memdup_user()HIGH7.85%ileMicrosoft2025-07-08
CVE-2025-38313bus: fsl-mc: fix double-free on mc_devHIGH7.86%ileMicrosoft2025-07-08
CVE-2025-38332scsi: lpfc: Use memcpy() for BIOS versionHIGH7.87%ileMicrosoft2025-07-08
CVE-2025-38428Input: ims-pcu - check record size in ims_pcu_flash_firmware()HIGH7.88%ileMicrosoft2025-07-08
CVE-2025-38466perf: Revert to requiring CAP_SYS_ADMIN for uprobesHIGH7.88%ileMicrosoft2025-07-08
CVE-2025-38437ksmbd: fix potential use-after-free in oplock/lease break ackHIGH7.829%ileMicrosoft2025-07-08
CVE-2025-38439bnxt_en: Set DMA unmap len correctly for XDP_REDIRECTHIGH7.839%ileMicrosoft2025-07-08
CVE-2025-38456ipmi:msghandler: Fix potential memory corruption in ipmi_create_user()HIGH7.85%ileMicrosoft2025-07-08
CVE-2025-38375virtio-net: ensure the received length does not exceed allocated sizeHIGH7.87%ileMicrosoft2025-07-08
CVE-2025-38401mtk-sd: Prevent memory corruption from DMA map failureHIGH7.86%ileMicrosoft2025-07-08
CVE-2025-38465netlink: Fix wraparounds of sk->sk_rmem_alloc.HIGH7.86%ileMicrosoft2025-07-08
CVE-2025-38361drm/amd/display: Check dce_hwseq before dereferencing itHIGH7.89%ileMicrosoft2025-07-08
CVE-2025-38443nbd: fix uaf in nbd_genl_connect() error pathHIGH7.85%ileMicrosoft2025-07-08
CVE-2025-52496Mbed TLS before 3.6.4 has a race condition in AESNI detection if certain compiler optimizations occur. An attacker may bHIGH7.89%ileMicrosoft2025-07-08
CVE-2025-38464tipc: Fix use-after-free in tipc_conn_close().HIGH7.86%ileMicrosoft2025-07-08
CVE-2025-38459atm: clip: Fix infinite recursive call of clip_push().HIGH7.87%ileMicrosoft2025-07-08
CVE-2025-38129page_pool: Fix use-after-free in page_pool_recycle_in_ringHIGH7.86%ileMicrosoft2025-07-08
CVE-2025-38477net/sched: sch_qfq: Fix race condition on qfq_aggregateHIGH7.83%ileMicrosoft2025-07-08
CVE-2025-38494HID: core: do not bypass hid_hw_raw_requestHIGH7.810%ileMicrosoft2025-07-08
CVE-2025-38476rpl: Fix use-after-free in rpl_do_srh_inline().HIGH7.825%ileMicrosoft2025-07-08
CVE-2025-38485iio: accel: fxls8962af: Fix use after free in fxls8962af_fifo_flushHIGH7.85%ileMicrosoft2025-07-08
CVE-2025-7425Libxslt: heap use-after-free in libxslt caused by atype corruption in xmlattrptrHIGH7.826%ileMicrosoft2025-07-08
CVE-2025-38096wifi: iwlwifi: don't warn when if there is a FW errorHIGH7.86%ileMicrosoft2025-07-08
CVE-2025-38350net/sched: Always pass notifications when child class becomes emptyHIGH7.88%ileMicrosoft2025-07-08
CVE-2025-38488smb: client: fix use-after-free in crypt_message when using async cryptoHIGH7.846%ileMicrosoft2025-07-08
CVE-2023-6175Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in WiresharkHIGH7.888%ileMicrosoft2025-07-08
CVE-2025-38091drm/amd/display: check stream id dml21 wrapper to get plane_idHIGH7.84%ileMicrosoft2025-07-08
CVE-2025-38131coresight: prevent deactivate active config while enabling the configHIGH7.87%ileMicrosoft2025-07-08
CVE-2025-38147calipso: Don't call calipso functions for AF_INET sk.HIGH7.87%ileMicrosoft2025-07-08
CVE-2025-38230jfs: validate AG parameters in dbMount() to prevent crashesHIGH7.86%ileMicrosoft2025-07-08
CVE-2025-38245atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().HIGH7.86%ileMicrosoft2025-07-08
CVE-2025-38259ASoC: codecs: wcd9335: Fix missing free of regulator suppliesHIGH7.84%ileMicrosoft2025-07-08
CVE-2025-38290wifi: ath12k: fix node corruption in ar->arvifs listHIGH7.88%ileMicrosoft2025-07-08
CVE-2025-38312fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod()HIGH7.85%ileMicrosoft2025-07-08
CVE-2025-38323net: atm: add lec_mutexHIGH7.88%ileMicrosoft2025-07-08
CVE-2025-38338fs/nfs/read: fix double-unlock bug in nfs_return_empty_folio()HIGH7.85%ileMicrosoft2025-07-08
CVE-2025-38422net: lan743x: Modify the EEPROM and OTP size for PCI1xxxx devicesHIGH7.86%ileMicrosoft2025-07-08
CVE-2025-38425i2c: tegra: check msg length in SMBUS block readHIGH7.86%ileMicrosoft2025-07-08
CVE-2025-49809mtr through 0.95, in certain privileged contexts, mishandles execution of a program specified by the MTR_PACKET environmHIGH7.84%ileMicrosoft2025-07-08
CVE-2025-38311iavf: get rid of the crit lockHIGH7.81%ileMicrosoft2025-07-08
CVE-2025-38377rose: fix dangling neighbour pointers in rose_rt_device_down()HIGH7.814%ileMicrosoft2025-07-08
CVE-2025-47159Windows Virtualization-Based Security (VBS) Elevation of Privilege VulnerabilityHIGH7.830%ileMicrosoft2025-07-08
CVE-2025-47971Microsoft Virtual Hard Disk Elevation of Privilege VulnerabilityHIGH7.838%ileMicrosoft2025-07-08
CVE-2025-47976Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege VulnerabilityHIGH7.832%ileMicrosoft2025-07-08
CVE-2025-47985Windows Event Tracing Elevation of Privilege VulnerabilityHIGH7.829%ileMicrosoft2025-07-08
CVE-2025-47987Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege VulnerabilityHIGH7.875%ileMicrosoft2025-07-08
CVE-2025-49661Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityHIGH7.829%ileMicrosoft2025-07-08
CVE-2025-49686Windows TCP/IP Driver Elevation of Privilege VulnerabilityHIGH7.830%ileMicrosoft2025-07-08
CVE-2025-49689Microsoft Virtual Hard Disk Elevation of Privilege VulnerabilityHIGH7.848%ileMicrosoft2025-07-08
CVE-2025-49694Microsoft Brokering File System Elevation of Privilege VulnerabilityHIGH7.830%ileMicrosoft2025-07-08
CVE-2025-47991Windows Input Method Editor (IME) Elevation of Privilege VulnerabilityHIGH7.823%ileMicrosoft2025-07-08
CVE-2025-47993Microsoft PC Manager Elevation of Privilege VulnerabilityHIGH7.826%ileMicrosoft2025-07-08
CVE-2025-47994Microsoft Office Elevation of Privilege VulnerabilityHIGH7.885%ileMicrosoft2025-07-08
CVE-2025-49711Microsoft Excel Remote Code Execution VulnerabilityHIGH7.837%ileMicrosoft2025-07-08
CVE-2025-49721Windows Fast FAT File System Driver Elevation of Privilege VulnerabilityHIGH7.839%ileMicrosoft2025-07-08
CVE-2025-49726Windows Notification Elevation of Privilege VulnerabilityHIGH7.826%ileMicrosoft2025-07-08
CVE-2025-47973Microsoft Virtual Hard Disk Elevation of Privilege VulnerabilityHIGH7.838%ileMicrosoft2025-07-08
CVE-2025-47982Windows Storage VSP Driver Elevation of Privilege VulnerabilityHIGH7.830%ileMicrosoft2025-07-08
CVE-2025-47996Windows MBT Transport Driver Elevation of Privilege VulnerabilityHIGH7.829%ileMicrosoft2025-07-08
CVE-2025-48000Windows Connected Devices Platform Service Elevation of Privilege VulnerabilityHIGH7.821%ileMicrosoft2025-07-08
CVE-2025-48799Windows Update Service Elevation of Privilege VulnerabilityHIGH7.861%ileMicrosoft2025-07-08
CVE-2025-48805Microsoft MPEG-2 Video Extension Remote Code Execution VulnerabilityHIGH7.829%ileMicrosoft2025-07-08
CVE-2025-48806Microsoft MPEG-2 Video Extension Remote Code Execution VulnerabilityHIGH7.829%ileMicrosoft2025-07-08
CVE-2025-48815Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege VulnerabilityHIGH7.835%ileMicrosoft2025-07-08
CVE-2025-48816HID Class Driver Elevation of Privilege VulnerabilityHIGH7.829%ileMicrosoft2025-07-08
CVE-2025-48820Windows AppX Deployment Service Elevation of Privilege VulnerabilityHIGH7.834%ileMicrosoft2025-07-08
CVE-2025-49659Windows Transport Driver Interface (TDI) Translation Driver Elevation of Privilege VulnerabilityHIGH7.830%ileMicrosoft2025-07-08
CVE-2025-49660Windows Event Tracing Elevation of Privilege VulnerabilityHIGH7.829%ileMicrosoft2025-07-08
CVE-2025-49665Workspace Broker Elevation of Privilege VulnerabilityHIGH7.820%ileMicrosoft2025-07-08
CVE-2025-49667Windows Win32 Kernel Subsystem Elevation of Privilege VulnerabilityHIGH7.840%ileMicrosoft2025-07-08
CVE-2025-49675Kernel Streaming WOW Thunk Service Driver Elevation of Privilege VulnerabilityHIGH7.829%ileMicrosoft2025-07-08
CVE-2025-49679Windows Shell Elevation of Privilege VulnerabilityHIGH7.830%ileMicrosoft2025-07-08
CVE-2025-49683Microsoft Virtual Hard Disk Remote Code Execution VulnerabilityHIGH7.878%ileMicrosoft2025-07-08
CVE-2025-49693Microsoft Brokering File System Elevation of Privilege VulnerabilityHIGH7.830%ileMicrosoft2025-07-08
CVE-2025-49698Microsoft Word Remote Code Execution VulnerabilityHIGH7.841%ileMicrosoft2025-07-08
CVE-2025-49700Microsoft Word Remote Code Execution VulnerabilityHIGH7.831%ileMicrosoft2025-07-08
CVE-2025-49702Microsoft Office Remote Code Execution VulnerabilityHIGH7.841%ileMicrosoft2025-07-08
CVE-2025-49703Microsoft Word Remote Code Execution VulnerabilityHIGH7.843%ileMicrosoft2025-07-08
CVE-2025-49705Microsoft PowerPoint Remote Code Execution VulnerabilityHIGH7.831%ileMicrosoft2025-07-08
CVE-2025-49714Visual Studio Code Python Extension Remote Code Execution VulnerabilityHIGH7.833%ileMicrosoft2025-07-08
CVE-2025-49725Windows Notification Elevation of Privilege VulnerabilityHIGH7.820%ileMicrosoft2025-07-08
CVE-2025-49730Microsoft Windows QoS Scheduler Driver Elevation of Privilege VulnerabilityHIGH7.845%ileMicrosoft2025-07-08
CVE-2025-49732Windows Graphics Component Elevation of Privilege VulnerabilityHIGH7.820%ileMicrosoft2025-07-08
CVE-2025-49733Win32k Elevation of Privilege VulnerabilityHIGH7.820%ileMicrosoft2025-07-08
CVE-2025-49738Microsoft PC Manager Elevation of Privilege VulnerabilityHIGH7.826%ileMicrosoft2025-07-08
CVE-2025-49742Windows Graphics Component Remote Code Execution VulnerabilityHIGH7.820%ileMicrosoft2025-07-08
CVE-2025-38248bridge: mcast: Fix use-after-free during router port configurationHIGH7.617%ileMicrosoft2025-07-08
CVE-2025-48367Redis DoS Vulnerability due to bad connection error handlingHIGH7.551%ileMicrosoft2025-07-08
CVE-2025-49630Apache HTTP Server: mod_proxy_http2 denial of serviceHIGH7.564%ileMicrosoft2025-07-08
CVE-2025-49812Apache HTTP Server: mod_ssl TLS upgrade attackHIGH7.541%ileMicrosoft2025-07-08
CVE-2025-8194Tarfile infinite loop during parsing with negative member offsetHIGH7.546%ileMicrosoft2025-07-08
CVE-2024-25177LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an unsinking of IR_FSTORE for NULL metatable, which lHIGH7.537%ileMicrosoft2025-07-08
CVE-2025-40777A possible assertion failure when 'stale-answer-client-timeout' is set to '0'HIGH7.556%ileMicrosoft2025-07-08
CVE-2023-50967latchset jose through version 11 allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBHIGH7.570%ileMicrosoft2025-07-08
CVE-2024-42516Apache HTTP Server: HTTP response splittingHIGH7.549%ileMicrosoft2025-07-08
CVE-2024-43204Apache HTTP Server: SSRF with mod_headers setting Content-Type headerHIGH7.552%ileMicrosoft2025-07-08
CVE-2024-47252Apache HTTP Server: mod_ssl error log variable escapingHIGH7.548%ileMicrosoft2025-07-08
CVE-2025-53020Apache HTTP Server: HTTP/2 DoS by Memory IncreaseHIGH7.591%ileMicrosoft2025-07-08
CVE-2025-7345Gdk‑pixbuf: heap‑buffer‑overflow in gdk‑pixbufHIGH7.561%ileMicrosoft2025-07-08
CVE-2025-24294The attack vector is a potential Denial of Service (DoS). The vulnerability is caused by an insufficient check on the leHIGH7.542%ileMicrosoft2025-07-08
CVE-2025-47984Windows GDI Information Disclosure VulnerabilityHIGH7.596%ileMicrosoft2025-07-08
CVE-2025-49716Windows Netlogon Denial of Service VulnerabilityHIGH7.568%ileMicrosoft2025-07-08
CVE-2025-49719Microsoft SQL Server Information Disclosure VulnerabilityHIGH7.595%ileMicrosoft2025-07-08
CVE-2025-48814Remote Desktop Licensing Service Security Feature Bypass VulnerabilityHIGH7.560%ileMicrosoft2025-07-08
CVE-2025-49718Microsoft SQL Server Information Disclosure VulnerabilityHIGH7.585%ileMicrosoft2025-07-08
CVE-2025-47988Azure Monitor Agent Remote Code Execution VulnerabilityHIGH7.554%ileMicrosoft2025-07-08
CVE-2025-38352posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()HIGH7.466%ileMicrosoft2025-07-08
CVE-2025-38471tls: always refresh the queue when reading sockHIGH7.432%ileMicrosoft2025-07-08
CVE-2025-49690Capability Access Management Service (camsvc) Elevation of Privilege VulnerabilityHIGH7.416%ileMicrosoft2025-07-08
CVE-2025-49741Microsoft Edge (Chromium-based) Information Disclosure VulnerabilityHIGH7.488%ileMicrosoft2025-07-08
CVE-2025-38461vsock: Fix transport_* TOCTOUHIGH7.32%ileMicrosoft2025-07-08
CVE-2025-38250Bluetooth: hci_core: Fix use-after-free in vhci_flush()HIGH7.34%ileMicrosoft2025-07-08
CVE-2025-7424Libxslt: type confusion in xmlnode.psvi between stylesheet and source nodesHIGH7.365%ileMicrosoft2025-07-08
CVE-2025-49680Windows Performance Recorder (WPR) Denial of Service VulnerabilityHIGH7.339%ileMicrosoft2025-07-08
CVE-2025-49682Windows Media Elevation of Privilege VulnerabilityHIGH7.338%ileMicrosoft2025-07-08
CVE-2025-49666Windows Server Setup and Boot Event Collection Remote Code Execution VulnerabilityHIGH7.264%ileMicrosoft2025-07-08
CVE-2025-38277mtd: nand: ecc-mxic: Fix use of uninitialized variable retHIGH7.16%ileMicrosoft2025-07-08
CVE-2025-38278octeontx2-pf: QOS: Refactor TC_HTB_LEAF_DEL_LAST callbackHIGH7.16%ileMicrosoft2025-07-08
CVE-2025-38285bpf: Fix WARN() in get_bpf_raw_tp_regsHIGH7.17%ileMicrosoft2025-07-08
CVE-2025-38429bus: mhi: ep: Update read pointer only after buffer is writtenHIGH7.131%ileMicrosoft2025-07-08
CVE-2025-38457net/sched: Abort __tc_modify_qdisc if parent class does not existHIGH7.16%ileMicrosoft2025-07-08
CVE-2025-38445md/raid1: Fix stack memory use after return in raid1_reshapeHIGH7.16%ileMicrosoft2025-07-08
CVE-2025-38386ACPICA: Refuse to evaluate a method if arguments are missingHIGH7.17%ileMicrosoft2025-07-08
CVE-2025-38403vsock/vmci: Clear the vmci transport packet properly when initializing itHIGH7.18%ileMicrosoft2025-07-08
CVE-2025-38463tcp: Correct signedness in skb remaining space calculationHIGH7.15%ileMicrosoft2025-07-08
CVE-2025-38438ASoC: SOF: Intel: hda: Use devm_kstrdup() to avoid memleak.HIGH7.15%ileMicrosoft2025-07-08
CVE-2025-38379smb: client: fix warning when reconnecting channelHIGH7.126%ileMicrosoft2025-07-08
CVE-2025-38237media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode()HIGH7.14%ileMicrosoft2025-07-08
CVE-2025-38264nvme-tcp: sanitize request list handlingHIGH7.120%ileMicrosoft2025-07-08
CVE-2025-38410drm/msm: Fix a fence leak in submit error pathHIGH7.15%ileMicrosoft2025-07-08
CVE-2025-38380i2c/designware: Fix an initialization issueHIGH7.1—Microsoft2025-07-08
CVE-2025-38329firmware: cs_dsp: Fix OOB memory read access in KUnit test (wmfw info)HIGH7.16%ileMicrosoft2025-07-08
CVE-2025-38330firmware: cs_dsp: Fix OOB memory read access in KUnit test (ctl cache)HIGH7.14%ileMicrosoft2025-07-08
CVE-2025-38111net/mdiobus: Fix potential out-of-bounds read/write accessHIGH7.19%ileMicrosoft2025-07-08
CVE-2025-38159wifi: rtw88: fix the 'para' buffer size to avoid reading out of boundsHIGH7.14%ileMicrosoft2025-07-08
CVE-2025-38249ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3()HIGH7.15%ileMicrosoft2025-07-08
CVE-2025-38283hisi_acc_vfio_pci: bugfix live migration function without VF device driverHIGH7.16%ileMicrosoft2025-07-08
CVE-2025-38310seg6: Fix validation of nexthop addressesHIGH7.14%ileMicrosoft2025-07-08
CVE-2025-38328jffs2: check jffs2_prealloc_raw_node_refs() result in few other placesHIGH7.18%ileMicrosoft2025-07-08
CVE-2025-38430nfsd: nfsd4_spo_must_allow() must check this is a v4 compound requestHIGH7.140%ileMicrosoft2025-07-08
CVE-2025-38409drm/msm: Fix another leak in the submit error pathHIGH7.15%ileMicrosoft2025-07-08
CVE-2025-38395regulator: gpio: Fix the out-of-bounds access to drvdata::gpiodsHIGH7.17%ileMicrosoft2025-07-08
CVE-2025-38412platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacksHIGH7.16%ileMicrosoft2025-07-08
CVE-2025-48819Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege VulnerabilityHIGH7.126%ileMicrosoft2025-07-08
CVE-2025-48821Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege VulnerabilityHIGH7.137%ileMicrosoft2025-07-08
CVE-2025-38100x86/iopl: Cure TIF_IO_BITMAP inconsistenciesHIGH7.07%ileMicrosoft2025-07-08
CVE-2025-38126net: stmmac: make sure that ptp_rate is not 0 before configuring timestampingHIGH7.06%ileMicrosoft2025-07-08
CVE-2025-38157wifi: ath9k_htc: Abort software beacon handling if disabledHIGH7.06%ileMicrosoft2025-07-08
CVE-2025-38160clk: bcm: rpi: Add NULL check in raspberrypi_clk_register()HIGH7.05%ileMicrosoft2025-07-08
CVE-2025-38184tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearerHIGH7.07%ileMicrosoft2025-07-08
CVE-2025-38193net_sched: sch_sfq: reject invalid perturb periodHIGH7.07%ileMicrosoft2025-07-08
CVE-2025-38200i40e: fix MMIO write access to an invalid page in i40e_clear_hwHIGH7.06%ileMicrosoft2025-07-08
CVE-2025-38369dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before usingHIGH7.05%ileMicrosoft2025-07-08
CVE-2025-38420wifi: carl9170: do not ping device which has failed to load firmwareHIGH7.07%ileMicrosoft2025-07-08
CVE-2025-38458atm: clip: Fix NULL pointer dereference in vcc_sendmsg()HIGH7.06%ileMicrosoft2025-07-08
CVE-2025-38399scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()HIGH7.034%ileMicrosoft2025-07-08
CVE-2025-38408genirq/irq_sim: Initialize work context pointers properlyHIGH7.06%ileMicrosoft2025-07-08
CVE-2025-38462vsock: Fix transport_{g2h,h2g} TOCTOUHIGH7.02%ileMicrosoft2025-07-08
CVE-2025-38206exfat: fix double free in delayed_freeHIGH7.06%ileMicrosoft2025-07-08
CVE-2025-38414wifi: ath12k: fix GCC_GCC_PCIE_HOT_RST definition for WCN7850HIGH7.05%ileMicrosoft2025-07-08
CVE-2025-38449drm/gem: Acquire references on GEM handles for framebuffersHIGH7.05%ileMicrosoft2025-07-08
CVE-2025-38099Bluetooth: Disable SCO support if READ_VOICE_SETTING is unsupported/brokenHIGH7.06%ileMicrosoft2025-07-08
CVE-2025-38105ALSA: usb-audio: Kill timer properly at removalHIGH7.06%ileMicrosoft2025-07-08
CVE-2025-38125net: stmmac: make sure that ptp_rate is not 0 before configuring ESTHIGH7.06%ileMicrosoft2025-07-08
CVE-2025-38495HID: core: ensure the allocated report buffer can contain the reserved report IDHIGH7.021%ileMicrosoft2025-07-08
CVE-2025-38162netfilter: nft_set_pipapo: prevent overflow in lookup table allocationHIGH7.05%ileMicrosoft2025-07-08
CVE-2025-38491mptcp: make fallback action and fallback decision atomicHIGH7.010%ileMicrosoft2025-07-08
CVE-2025-38493tracing/osnoise: Fix crash in timerlat_dump_stack()HIGH7.05%ileMicrosoft2025-07-08
CVE-2025-38204jfs: fix array-index-out-of-bounds read in add_missing_indicesHIGH7.06%ileMicrosoft2025-07-08
CVE-2025-32023Redis allows out of bounds writes in hyperloglog commands leading to RCEHIGH7.089%ileMicrosoft2025-07-08
CVE-2025-38107net_sched: ets: fix a race in ets_qdisc_change()HIGH7.03%ileMicrosoft2025-07-08
CVE-2025-38146net: openvswitch: Fix the dead loop of MPLS parseHIGH7.033%ileMicrosoft2025-07-08
CVE-2025-38149net: phy: clear phydev->devlink when the link is deletedHIGH7.04%ileMicrosoft2025-07-08
CVE-2025-38170arm64/fpsimd: Discard stale CPU state when handling SME trapsHIGH7.04%ileMicrosoft2025-07-08
CVE-2025-38180net: atm: fix /proc/net/atm/lec handlingHIGH7.07%ileMicrosoft2025-07-08
CVE-2025-38181calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().HIGH7.038%ileMicrosoft2025-07-08
CVE-2025-38182ublk: santizize the arguments from userspace when adding a deviceHIGH7.05%ileMicrosoft2025-07-08
CVE-2025-38194jffs2: check that raw node were preallocated before writing summaryHIGH7.08%ileMicrosoft2025-07-08
CVE-2025-38197platform/x86: dell_rbu: Fix list usageHIGH7.06%ileMicrosoft2025-07-08
CVE-2025-38214fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_varHIGH7.05%ileMicrosoft2025-07-08
CVE-2025-38220ext4: only dirty folios when data journaling regular filesHIGH7.04%ileMicrosoft2025-07-08
CVE-2025-38229media: cxusb: no longer judge rbuf when the write failsHIGH7.05%ileMicrosoft2025-07-08
CVE-2025-38244smb: client: fix potential deadlock when reconnecting channelsHIGH7.012%ileMicrosoft2025-07-08
CVE-2025-38363drm/tegra: Fix a possible null pointer dereferenceHIGH7.06%ileMicrosoft2025-07-08
CVE-2025-38415Squashfs: check return result of sb_min_blocksizeHIGH7.08%ileMicrosoft2025-07-08
CVE-2025-38424perf: Fix sample vs do_exit()HIGH7.08%ileMicrosoft2025-07-08
CVE-2025-38436drm/scheduler: signal scheduled fence when kill jobHIGH7.03%ileMicrosoft2025-07-08
CVE-2025-38468net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtreeHIGH7.06%ileMicrosoft2025-07-08
CVE-2025-38140dm: limit swapping tables for devices with zone write plugsHIGH7.04%ileMicrosoft2025-07-08
CVE-2025-45768pyjwt v2.10.1 was discovered to contain weak encryption. NOTE: this is disputed by the Supplier because the key length iHIGH7.06%ileMicrosoft2025-07-08
CVE-2025-49677Microsoft Brokering File System Elevation of Privilege VulnerabilityHIGH7.058%ileMicrosoft2025-07-08
CVE-2025-47975Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege VulnerabilityHIGH7.025%ileMicrosoft2025-07-08
CVE-2025-49678NTFS Elevation of Privilege VulnerabilityHIGH7.014%ileMicrosoft2025-07-08
CVE-2025-49685Windows Search Service Elevation of Privilege VulnerabilityHIGH7.025%ileMicrosoft2025-07-08
CVE-2025-49699Microsoft Office Remote Code Execution VulnerabilityHIGH7.025%ileMicrosoft2025-07-08
CVE-2025-49727Win32k Elevation of Privilege VulnerabilityHIGH7.028%ileMicrosoft2025-07-08
CVE-2025-49737Microsoft Teams Elevation of Privilege VulnerabilityHIGH7.08%ileMicrosoft2025-07-08
CVE-2025-49744Windows Graphics Component Elevation of Privilege VulnerabilityHIGH7.051%ileMicrosoft2025-07-08
CVE-2025-48001Windows BitLocker Security Feature Bypass VulnerabilityMEDIUM6.832%ileMicrosoft2025-07-08
CVE-2025-48003Windows BitLocker Security Feature Bypass VulnerabilityMEDIUM6.843%ileMicrosoft2025-07-08
CVE-2025-48800Windows BitLocker Security Feature Bypass VulnerabilityMEDIUM6.843%ileMicrosoft2025-07-08
CVE-2025-48804Windows BitLocker Security Feature Bypass VulnerabilityMEDIUM6.843%ileMicrosoft2025-07-08
CVE-2025-48818Windows BitLocker Security Feature Bypass VulnerabilityMEDIUM6.834%ileMicrosoft2025-07-08
CVE-2025-47999Windows Hyper-V Denial of Service VulnerabilityMEDIUM6.830%ileMicrosoft2025-07-08
CVE-2025-7519Polkit: xml policy file with a large number of nested elements may lead to out-of-bounds writeMEDIUM6.78%ileMicrosoft2025-07-08
CVE-2025-48803Windows Virtualization-Based Security (VBS) Elevation of Privilege VulnerabilityMEDIUM6.717%ileMicrosoft2025-07-08
CVE-2025-48811Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege VulnerabilityMEDIUM6.717%ileMicrosoft2025-07-08
CVE-2025-8197Rejected reason: Maintainers have included reasons at https://gitlab.gnome.org/GNOME/libsoup/-/issues/465MEDIUM6.6—Microsoft2025-07-08
CVE-2025-50078Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affecteMEDIUM6.542%ileMicrosoft2025-07-08
CVE-2025-48924Apache Commons Lang, Apache Commons Lang: ClassUtils.getClass(...) can throw a StackOverflowError on very long inputsMEDIUM6.580%ileMicrosoft2025-07-08
CVE-2025-48964ping in iputils before 20250602 allows a denial of service (application error in adaptive ping mode or incorrect data coMEDIUM6.525%ileMicrosoft2025-07-08
CVE-2025-40913Net::Dropbear versions through 0.16 for Perl contains a dependency that may be susceptible to an integer overflowMEDIUM6.520%ileMicrosoft2025-07-08
CVE-2023-4527Glibc: stack read overflow in getaddrinfo in no-aaaa modeMEDIUM6.572%ileMicrosoft2025-07-08
CVE-2023-5371Memory Allocation with Excessive Size Value in WiresharkMEDIUM6.539%ileMicrosoft2025-07-08
CVE-2023-6174Out-of-bounds Read in WiresharkMEDIUM6.551%ileMicrosoft2025-07-08
CVE-2025-50082Vulnerability in the MySQL Server product of Oracle MySQLMEDIUM6.542%ileMicrosoft2025-07-08
CVE-2025-32988Gnutls: vulnerability in gnutls othername san exportMEDIUM6.565%ileMicrosoft2025-07-08
CVE-2025-32990Gnutls: vulnerability in gnutls certtool template parsingMEDIUM6.550%ileMicrosoft2025-07-08
CVE-2025-38192net: clear the dst when changing skb protocolMEDIUM6.56%ileMicrosoft2025-07-08
CVE-2025-50083Vulnerability in the MySQL Server product of Oracle MySQLMEDIUM6.542%ileMicrosoft2025-07-08
CVE-2025-6395Gnutls: null pointer dereference in _gnutls_figure_common_ciphersuite()MEDIUM6.546%ileMicrosoft2025-07-08
CVE-2025-49670Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMEDIUM6.555%ileMicrosoft2025-07-08
CVE-2025-49671Windows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityMEDIUM6.559%ileMicrosoft2025-07-08
CVE-2025-53771Microsoft SharePoint Server Spoofing VulnerabilityMEDIUM6.5100%ileMicrosoft2025-07-08
CVE-2025-47978Windows Kerberos Denial of Service VulnerabilityMEDIUM6.578%ileMicrosoft2025-07-08
CVE-2025-48802Windows SMB Server Spoofing VulnerabilityMEDIUM6.552%ileMicrosoft2025-07-08
CVE-2025-49681Windows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityMEDIUM6.559%ileMicrosoft2025-07-08
CVE-2025-49706Microsoft SharePoint Server Spoofing VulnerabilityMEDIUM6.5100%ileMicrosoft2025-07-08
CVE-2025-47995Azure Machine Learning Elevation of Privilege VulnerabilityMEDIUM6.547%ileMicrosoft2025-07-08
CVE-2025-38472netfilter: nf_conntrack: fix crash due to removal of uninitialised entryMEDIUM6.334%ileMicrosoft2025-07-08
CVE-2025-38337jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()MEDIUM6.36%ileMicrosoft2025-07-08
CVE-2025-54090Apache HTTP Server: 'RewriteCond expr' always evaluates to true in 2.4.64MEDIUM6.349%ileMicrosoft2025-07-08
CVE-2025-38344ACPICA: fix acpi parse and parseext cache leaksMEDIUM6.26%ileMicrosoft2025-07-08
CVE-2025-38448usb: gadget: u_serial: Fix race condition in TTY wakeupMEDIUM6.22%ileMicrosoft2025-07-08
CVE-2025-47980Windows Imaging Component Information Disclosure VulnerabilityMEDIUM6.244%ileMicrosoft2025-07-08
CVE-2025-38340firmware: cs_dsp: Fix OOB memory read access in KUnit testMEDIUM6.04%ileMicrosoft2025-07-08
CVE-2023-53034ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_transMEDIUM6.022%ileMicrosoft2025-07-08
CVE-2025-21195Azure Service Fabric Runtime Elevation of Privilege VulnerabilityMEDIUM6.026%ileMicrosoft2025-07-08
CVE-2025-6491NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace PrefixMEDIUM5.958%ileMicrosoft2025-07-08
CVE-2025-53605The protobuf crate before 3.7.2 for Rust allows uncontrolled recursion in the protobuf::coded_input_stream::CodedInputStMEDIUM5.931%ileMicrosoft2025-07-08
CVE-2025-1735pgsql extension does not check for errors during escapingMEDIUM5.958%ileMicrosoft2025-07-08
CVE-2025-38208smb: client: add NULL check in automount_fullpathMEDIUM5.95%ileMicrosoft2025-07-08
CVE-2025-48823Windows Cryptographic Services Information Disclosure VulnerabilityMEDIUM5.943%ileMicrosoft2025-07-08
CVE-2025-38158hisi_acc_vfio_pci: fix XQE dma address errorMEDIUM5.71%ileMicrosoft2025-07-08
CVE-2025-48002Windows Hyper-V Information Disclosure VulnerabilityMEDIUM5.743%ileMicrosoft2025-07-08
CVE-2025-49722Windows Print Spooler Denial of Service VulnerabilityMEDIUM5.740%ileMicrosoft2025-07-08
CVE-2024-36357AMD: CVE-2024-36357 Transient Scheduler Attack in L1 Data QueueMEDIUM5.623%ileMicrosoft2025-07-08
CVE-2024-36350AMD: CVE-2024-36350 Transient Scheduler Attack in Store QueueMEDIUM5.636%ileMicrosoft2025-07-08
CVE-2025-38333f2fs: fix to bail out in get_new_segment()MEDIUM5.55%ileMicrosoft2025-07-08
CVE-2025-50085Vulnerability in the MySQL Server product of Oracle MySQLMEDIUM5.535%ileMicrosoft2025-07-08
CVE-2025-38102VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notifyMEDIUM5.53%ileMicrosoft2025-07-08
CVE-2025-38117Bluetooth: MGMT: Protect mgmt_pending list with its own lockMEDIUM5.55%ileMicrosoft2025-07-08
CVE-2025-38142hwmon: (asus-ec-sensors) check sensor index in read_string()MEDIUM5.56%ileMicrosoft2025-07-08
CVE-2025-38148net: phy: mscc: Fix memory leak when using one step timestampingMEDIUM5.55%ileMicrosoft2025-07-08
CVE-2025-38163f2fs: fix to do sanity check on sbi->total_valid_block_countMEDIUM5.55%ileMicrosoft2025-07-08
CVE-2025-38167fs/ntfs3: handle hdr_first_de() return valueMEDIUM5.54%ileMicrosoft2025-07-08
CVE-2025-38174thunderbolt: Do not double dequeue a configuration requestMEDIUM5.514%ileMicrosoft2025-07-08
CVE-2025-38173crypto: marvell/cesa - Handle zero-length skcipher requestsMEDIUM5.56%ileMicrosoft2025-07-08
CVE-2025-38202bpf: Check rcu_read_lock_trace_held() in bpf_map_lookup_percpu_elem()MEDIUM5.55%ileMicrosoft2025-07-08
CVE-2025-38215fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_varMEDIUM5.54%ileMicrosoft2025-07-08
CVE-2025-38218f2fs: fix to do sanity check on sit_bitmap_sizeMEDIUM5.55%ileMicrosoft2025-07-08
CVE-2025-38222ext4: inline: fix len overflow in ext4_prepare_inline_dataMEDIUM5.55%ileMicrosoft2025-07-08
CVE-2025-38226media: vivid: Change the siize of the composingMEDIUM5.56%ileMicrosoft2025-07-08
CVE-2025-38251atm: clip: prevent NULL deref in clip_push()MEDIUM5.55%ileMicrosoft2025-07-08
CVE-2025-38262tty: serial: uartlite: register uart driver in initMEDIUM5.56%ileMicrosoft2025-07-08
CVE-2025-38263bcache: fix NULL pointer in cache_set_flush()MEDIUM5.55%ileMicrosoft2025-07-08
CVE-2025-38304Bluetooth: Fix NULL pointer deference on eir_get_service_dataMEDIUM5.55%ileMicrosoft2025-07-08
CVE-2025-38305ptp: remove ptp->n_vclocks check logic in ptp_vclock_in_use()MEDIUM5.55%ileMicrosoft2025-07-08
CVE-2025-38319drm/amd/pp: Fix potential NULL pointer dereference in atomctrl_initialize_mc_reg_tableMEDIUM5.55%ileMicrosoft2025-07-08
CVE-2025-38326aoe: clean device rq_list in aoedev_downdev()MEDIUM5.58%ileMicrosoft2025-07-08
CVE-2025-38336ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330MEDIUM5.56%ileMicrosoft2025-07-08
CVE-2025-38342software node: Correct a OOB check in software_node_get_reference_args()MEDIUM5.56%ileMicrosoft2025-07-08
CVE-2025-38354drm/msm/gpu: Fix crash when throttling GPU immediately during bootMEDIUM5.55%ileMicrosoft2025-07-08
CVE-2025-38368misc: tps6594-pfsm: Add NULL pointer check in tps6594_pfsm_probe()MEDIUM5.54%ileMicrosoft2025-07-08
CVE-2025-38419remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach()MEDIUM5.55%ileMicrosoft2025-07-08
CVE-2025-38199wifi: ath12k: Fix memory leak due to multiple rx_stats allocationMEDIUM5.53%ileMicrosoft2025-07-08
CVE-2025-38393NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAINMEDIUM5.525%ileMicrosoft2025-07-08
CVE-2025-38396fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypassMEDIUM5.56%ileMicrosoft2025-07-08
CVE-2025-38203jfs: Fix null-ptr-deref in jfs_ioc_trimMEDIUM5.55%ileMicrosoft2025-07-08
CVE-2025-38234sched/rt: Fix race in push_rt_taskMEDIUM5.54%ileMicrosoft2025-07-08
CVE-2025-38426drm/amdgpu: Add basic validation for RAS headerMEDIUM5.55%ileMicrosoft2025-07-08
CVE-2025-38385net: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnectMEDIUM5.56%ileMicrosoft2025-07-08
CVE-2025-38384mtd: spinand: fix memory leak of ECC engine confMEDIUM5.55%ileMicrosoft2025-07-08
CVE-2025-38207mm: fix uprobe pte be overwritten when expanding vmaMEDIUM5.53%ileMicrosoft2025-07-08
CVE-2025-38359s390/mm: Fix in_atomic() handling in do_secure_storage_access()MEDIUM5.51%ileMicrosoft2025-07-08
CVE-2025-38364maple_tree: fix MA_STATE_PREALLOC flag in mas_preallocate()MEDIUM5.55%ileMicrosoft2025-07-08
CVE-2025-38411netfs: Fix double put of requestMEDIUM5.525%ileMicrosoft2025-07-08
CVE-2025-38246bnxt: properly flush XDP redirect listsMEDIUM5.521%ileMicrosoft2025-07-08
CVE-2025-38353drm/xe: Fix taking invalid lock on wedgeMEDIUM5.52%ileMicrosoft2025-07-08
CVE-2025-38460atm: clip: Fix potential null-ptr-deref in to_atmarpd().MEDIUM5.56%ileMicrosoft2025-07-08
CVE-2025-38406wifi: ath6kl: remove WARN on bad firmware inputMEDIUM5.57%ileMicrosoft2025-07-08
CVE-2025-38261riscv: save the SR_SUM status over switchesMEDIUM5.54%ileMicrosoft2025-07-08
CVE-2025-38480comedi: Fix use of uninitialized data in insn_rw_emulate_bits()MEDIUM5.55%ileMicrosoft2025-07-08
CVE-2025-38481comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too largeMEDIUM5.55%ileMicrosoft2025-07-08
CVE-2025-38470net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtimeMEDIUM5.57%ileMicrosoft2025-07-08
CVE-2025-38487soc: aspeed: lpc-snoop: Don't disable channels that aren't enabledMEDIUM5.55%ileMicrosoft2025-07-08
CVE-2025-38132coresight: holding cscfg_csdev_lock while removing cscfg from csdevMEDIUM5.54%ileMicrosoft2025-07-08
CVE-2025-8224GNU Binutils BFD Library elf.c bfd_elf_get_str_section null pointer dereferenceMEDIUM5.513%ileMicrosoft2025-07-08
CVE-2025-38269btrfs: exit after state insertion failure at btrfs_convert_extent_bit()MEDIUM5.55%ileMicrosoft2025-07-08
CVE-2025-38272net: dsa: b53: do not enable EEE on bcm63xxMEDIUM5.55%ileMicrosoft2025-07-08
CVE-2025-38351KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flushMEDIUM5.55%ileMicrosoft2025-07-08
CVE-2025-38189drm/v3d: Avoid NULL pointer dereference in `v3d_job_update_stats()`MEDIUM5.55%ileMicrosoft2025-07-08
CVE-2025-38164f2fs: zone: fix to avoid inconsistence in between SIT and SSAMEDIUM5.54%ileMicrosoft2025-07-08
CVE-2025-38092ksmbd: use list_first_entry_or_null for opinfo_get_list()MEDIUM5.520%ileMicrosoft2025-07-08
CVE-2025-38097espintcp: remove encap socket caching to avoid reference leakMEDIUM5.57%ileMicrosoft2025-07-08
CVE-2025-38103HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()MEDIUM5.58%ileMicrosoft2025-07-08
CVE-2025-38109net/mlx5: Fix ECVF vports unload on shutdown flowMEDIUM5.56%ileMicrosoft2025-07-08
CVE-2025-38115net_sched: sch_sfq: fix a potential crash on gso_skb handlingMEDIUM5.58%ileMicrosoft2025-07-08
CVE-2025-38119scsi: core: ufs: Fix a hang in the error handlerMEDIUM5.56%ileMicrosoft2025-07-08
CVE-2025-38122gve: add missing NULL check for gve_alloc_pending_packet() in TX DQOMEDIUM5.56%ileMicrosoft2025-07-08
CVE-2025-38123net: wwan: t7xx: Fix napi rx poll issueMEDIUM5.532%ileMicrosoft2025-07-08
CVE-2025-38135serial: Fix potential null-ptr-deref in mlb_usio_probe()MEDIUM5.57%ileMicrosoft2025-07-08
CVE-2025-38136usb: renesas_usbhs: Reorder clock handling and power management in probeMEDIUM5.57%ileMicrosoft2025-07-08
CVE-2025-38143backlight: pm8941: Add NULL check in wled_configure()MEDIUM5.57%ileMicrosoft2025-07-08
CVE-2025-38145soc: aspeed: Add NULL check in aspeed_lpc_enable_snoop()MEDIUM5.57%ileMicrosoft2025-07-08
CVE-2025-38153net: usb: aqc111: fix error handling of usbnet read callsMEDIUM5.56%ileMicrosoft2025-07-08
CVE-2025-38165bpf, sockmap: Fix panic when calling skb_linearizeMEDIUM5.522%ileMicrosoft2025-07-08
CVE-2025-38166bpf: fix ktls panic with sockmapMEDIUM5.55%ileMicrosoft2025-07-08
CVE-2025-38185atm: atmtcp: Free invalid length skb in atmtcp_c_send().MEDIUM5.56%ileMicrosoft2025-07-08
CVE-2025-38190atm: Revert atm_account_tx() if copy_from_iter_full() fails.MEDIUM5.56%ileMicrosoft2025-07-08
CVE-2025-38191ksmbd: fix null pointer dereference in destroy_previous_sessionMEDIUM5.563%ileMicrosoft2025-07-08
CVE-2025-38211RDMA/iwcm: Fix use-after-free of work objects after cm_id destructionMEDIUM5.527%ileMicrosoft2025-07-08
CVE-2025-38213Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.MEDIUM5.5—Microsoft2025-07-08
CVE-2025-38217hwmon: (ftsteutates) Fix TOCTOU race in fts_read()MEDIUM5.51%ileMicrosoft2025-07-08
CVE-2025-38219f2fs: prevent kernel warning due to negative i_nlink from corrupted imageMEDIUM5.55%ileMicrosoft2025-07-08
CVE-2025-38225media: imx-jpeg: Cleanup after an allocation errorMEDIUM5.54%ileMicrosoft2025-07-08
CVE-2025-38227media: vidtv: Terminating the subsequent process of initialization failureMEDIUM5.55%ileMicrosoft2025-07-08
CVE-2025-38258mm/damon/sysfs-schemes: free old damon_sysfs_scheme_filter->memcg_path on writeMEDIUM5.54%ileMicrosoft2025-07-08
CVE-2025-38260btrfs: handle csum tree error with rescue=ibadroots correctlyMEDIUM5.54%ileMicrosoft2025-07-08
CVE-2025-38265serial: jsm: fix NPE during jsm_uart_port_initMEDIUM5.56%ileMicrosoft2025-07-08
CVE-2025-38274fpga: fix potential null pointer deref in fpga_mgr_test_img_load_sgt()MEDIUM5.56%ileMicrosoft2025-07-08
CVE-2025-38275phy: qcom-qmp-usb: Fix an NULL vs IS_ERR() bugMEDIUM5.57%ileMicrosoft2025-07-08
CVE-2025-38280bpf: Avoid __bpf_prog_ret0_warn when jit failsMEDIUM5.58%ileMicrosoft2025-07-08
CVE-2025-38300crypto: sun8i-ce-cipher - fix error handling in sun8i_ce_cipher_prepare()MEDIUM5.55%ileMicrosoft2025-07-08
CVE-2025-38307ASoC: Intel: avs: Verify content returned by parse_int_array()MEDIUM5.54%ileMicrosoft2025-07-08
CVE-2025-38320arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()MEDIUM5.58%ileMicrosoft2025-07-08
CVE-2025-38321smb: Log an error when close_all_cached_dirs failsMEDIUM5.58%ileMicrosoft2025-07-08
CVE-2025-38331net: ethernet: cortina: Use TOE/TSO on all TCPMEDIUM5.523%ileMicrosoft2025-07-08
CVE-2025-38334x86/sgx: Prevent attempts to reclaim poisoned pagesMEDIUM5.55%ileMicrosoft2025-07-08
CVE-2025-38343wifi: mt76: mt7996: drop fragments with multicast or broadcast RAMEDIUM5.512%ileMicrosoft2025-07-08
CVE-2025-38345ACPICA: fix acpi operand cache leak in dswstate.cMEDIUM5.56%ileMicrosoft2025-07-08
CVE-2025-38346ftrace: Fix UAF when lookup kallsym after ftrace disabledMEDIUM5.57%ileMicrosoft2025-07-08
CVE-2025-38347f2fs: fix to do sanity check on ino and xnidMEDIUM5.56%ileMicrosoft2025-07-08
CVE-2025-38348wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback()MEDIUM5.57%ileMicrosoft2025-07-08
CVE-2025-38362drm/amd/display: Add null pointer check for get_first_active_display()MEDIUM5.51%ileMicrosoft2025-07-08
CVE-2025-38365btrfs: fix a race between renames and directory loggingMEDIUM5.521%ileMicrosoft2025-07-08
CVE-2025-38416NFC: nci: uart: Set tty->disc_data only in success pathMEDIUM5.58%ileMicrosoft2025-07-08
CVE-2025-38418remoteproc: core: Release rproc->clean_table after rproc_attach() failsMEDIUM5.55%ileMicrosoft2025-07-08
CVE-2025-38467drm/exynos: exynos7_drm_decon: add vblank check in IRQ handlingMEDIUM5.56%ileMicrosoft2025-07-08
CVE-2025-38098drm/amd/display: Don't treat wb connector as physical in create_validate_stream_for_sinkMEDIUM5.56%ileMicrosoft2025-07-08
CVE-2025-38335Input: gpio-keys - fix a sleep while atomic with PREEMPT_RTMEDIUM5.52%ileMicrosoft2025-07-08
CVE-2025-38474usb: net: sierra: check for no status endpointMEDIUM5.55%ileMicrosoft2025-07-08
CVE-2025-38389drm/i915/gt: Fix timeline left held on VMA alloc errorMEDIUM5.58%ileMicrosoft2025-07-08
CVE-2025-38404usb: typec: displayport: Fix potential deadlockMEDIUM5.53%ileMicrosoft2025-07-08
CVE-2025-38391usb: typec: altmodes/displayport: do not index invalid pin_assignmentsMEDIUM5.57%ileMicrosoft2025-07-08
CVE-2025-38444raid10: cleanup memleak at raid10_make_requestMEDIUM5.54%ileMicrosoft2025-07-08
CVE-2025-38376usb: chipidea: udc: disconnect/reconnect from host when do suspend/resumeMEDIUM5.54%ileMicrosoft2025-07-08
CVE-2025-38387RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insertMEDIUM5.57%ileMicrosoft2025-07-08
CVE-2025-38095dma-buf: insert memory barrier before updating num_fencesMEDIUM5.58%ileMicrosoft2025-07-08
CVE-2025-38371drm/v3d: Disable interrupts before resetting the GPUMEDIUM5.56%ileMicrosoft2025-07-08
CVE-2025-38177sch_hfsc: make hfsc_qlen_notify() idempotentMEDIUM5.56%ileMicrosoft2025-07-08
CVE-2025-38441netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto()MEDIUM5.55%ileMicrosoft2025-07-08
CVE-2025-38473Bluetooth: Fix null-ptr-deref in l2cap_sock_resume_cb()MEDIUM5.55%ileMicrosoft2025-07-08
CVE-2025-38400nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.MEDIUM5.58%ileMicrosoft2025-07-08
CVE-2025-26636Windows Kernel Information Disclosure VulnerabilityMEDIUM5.534%ileMicrosoft2025-07-08
CVE-2025-49658Windows Transport Driver Interface (TDI) Translation Driver Information Disclosure VulnerabilityMEDIUM5.537%ileMicrosoft2025-07-08
CVE-2025-48812Microsoft Excel Information Disclosure VulnerabilityMEDIUM5.541%ileMicrosoft2025-07-08
CVE-2025-48808Windows Kernel Information Disclosure VulnerabilityMEDIUM5.540%ileMicrosoft2025-07-08
CVE-2025-48809Windows Secure Kernel Mode Information Disclosure VulnerabilityMEDIUM5.536%ileMicrosoft2025-07-08
CVE-2025-48810Windows Secure Kernel Mode Information Disclosure VulnerabilityMEDIUM5.537%ileMicrosoft2025-07-08
CVE-2025-49664Windows User-Mode Driver Framework Host Information Disclosure VulnerabilityMEDIUM5.542%ileMicrosoft2025-07-08
CVE-2025-49684Windows Storage Port Driver Information Disclosure VulnerabilityMEDIUM5.536%ileMicrosoft2025-07-08
CVE-2025-32989Gnutls: vulnerability in gnutls sct extension parsingMEDIUM5.365%ileMicrosoft2025-07-08
CVE-2025-38110net/mdiobus: Fix potential out-of-bounds clause 45 read/write accessMEDIUM5.37%ileMicrosoft2025-07-08
CVE-2025-7545GNU Binutils objcopy.c copy_section heap-based overflowMEDIUM5.318%ileMicrosoft2025-07-08
CVE-2025-8177LibTIFF thumbnail.c setrow buffer overflowMEDIUM5.319%ileMicrosoft2025-07-08
CVE-2025-54126WebAssembly Micro Runtime's `--addr-pool` option allows all IPv4 addresses when subnet mask is not specifiedMEDIUM5.346%ileMicrosoft2025-07-08
CVE-2025-7546GNU Binutils elf.c bfd_elf_set_group_contents out-of-bounds writeMEDIUM5.37%ileMicrosoft2025-07-08
CVE-2025-8176LibTIFF tiffmedian.c get_histogram use after freeMEDIUM5.315%ileMicrosoft2025-07-08
CVE-2025-5987Libssh: invalid return code for chacha20 poly1305 with openssl backendMEDIUM5.071%ileMicrosoft2025-07-08
CVE-2025-5372Libssh: incorrect return code handling in ssh_kdf() in libsshMEDIUM5.034%ileMicrosoft2025-07-08
CVE-2025-50080Vulnerability in the MySQL Server product of Oracle MySQLMEDIUM4.943%ileMicrosoft2025-07-08
CVE-2025-50084Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are aMEDIUM4.941%ileMicrosoft2025-07-08
CVE-2025-50092Vulnerability in the MySQL Server product of Oracle MySQLMEDIUM4.943%ileMicrosoft2025-07-08
CVE-2025-50093Vulnerability in the MySQL Server product of Oracle MySQLMEDIUM4.943%ileMicrosoft2025-07-08
CVE-2025-50099Vulnerability in the MySQL Server product of Oracle MySQLMEDIUM4.938%ileMicrosoft2025-07-08
CVE-2025-50102Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are aMEDIUM4.938%ileMicrosoft2025-07-08
CVE-2025-50091Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are aMEDIUM4.944%ileMicrosoft2025-07-08
CVE-2023-52971MariaDB Server 10.10 through 10.11.* and 11.0 through 11.4.* crashes in JOIN::fix_all_splittings_in_plan.MEDIUM4.939%ileMicrosoft2025-07-08
CVE-2025-50077Vulnerability in the MySQL Server product of Oracle MySQLMEDIUM4.944%ileMicrosoft2025-07-08
CVE-2025-50079Vulnerability in the MySQL Server product of Oracle MySQLMEDIUM4.944%ileMicrosoft2025-07-08
CVE-2025-50086Vulnerability in the MySQL Server product of Oracle MySQLMEDIUM4.941%ileMicrosoft2025-07-08
CVE-2025-50087Vulnerability in the MySQL Server product of Oracle MySQLMEDIUM4.935%ileMicrosoft2025-07-08
CVE-2025-50094Vulnerability in the MySQL Server product of Oracle MySQLMEDIUM4.939%ileMicrosoft2025-07-08
CVE-2025-50097Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versionsMEDIUM4.938%ileMicrosoft2025-07-08
CVE-2025-50101Vulnerability in the MySQL Server product of Oracle MySQLMEDIUM4.938%ileMicrosoft2025-07-08
CVE-2025-53023Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication).MEDIUM4.939%ileMicrosoft2025-07-08
CVE-2025-38232NFSD: fix race between nfsd registration and exports_procMEDIUM4.74%ileMicrosoft2025-07-08
CVE-2025-38382btrfs: fix iteration of extrefs during log replayMEDIUM4.76%ileMicrosoft2025-07-08
CVE-2025-8114: null pointer dereference in libssh kex session id calculationMEDIUM4.712%ileMicrosoft2025-07-08
CVE-2025-38496dm-bufio: fix sched in atomic contextMEDIUM4.74%ileMicrosoft2025-07-08
CVE-2025-38112net: Fix TOCTOU issue in sk_is_readable()MEDIUM4.72%ileMicrosoft2025-07-08
CVE-2023-53159The openssl crate before 0.10.55 for Rust allows an out-of-bounds read via an empty string to X509VerifyParamRef::set_hoMEDIUM4.526%ileMicrosoft2025-07-08
CVE-2025-38155wifi: mt76: mt7915: Fix null-ptr-deref in mt7915_mmio_wed_init()MEDIUM4.44%ileMicrosoft2025-07-08
CVE-2025-38498do_change_type(): refuse to operate on unmounted/not ours mountsMEDIUM4.47%ileMicrosoft2025-07-08
CVE-2025-50096Vulnerability in the MySQL Server product of Oracle MySQLMEDIUM4.48%ileMicrosoft2025-07-08
CVE-2025-38303Bluetooth: eir: Fix possible crashes on eir_create_adv_dataMEDIUM4.45%ileMicrosoft2025-07-08
CVE-2025-38279bpf: Do not include stack ptr register in precision backtracking bookkeepingMEDIUM4.46%ileMicrosoft2025-07-08
CVE-2025-38138dmaengine: ti: Add NULL check in udma_probe()MEDIUM4.47%ileMicrosoft2025-07-08
CVE-2025-38161RDMA/mlx5: Fix error flow upon firmware failure for RQ destructionMEDIUM4.45%ileMicrosoft2025-07-08
CVE-2025-8225GNU Binutils DWARF Section dwarf.c process_debug_info memory leakMEDIUM4.413%ileMicrosoft2025-07-08
CVE-2025-54567hw/pci/pcie_sriov.c in QEMU through 10.0.3 mishandles the VF Enable bit write mask, a related issue to CVE-2024-26327.MEDIUM4.215%ileMicrosoft2025-07-08
CVE-2025-5351Libssh: double free vulnerability in libssh key export functionsMEDIUM4.240%ileMicrosoft2025-07-08
CVE-2025-54566hw/pci/pcie_sriov.c in QEMU through 10.0.3 has a migration state inconsistency, a related issue to CVE-2024-26327.MEDIUM4.215%ileMicrosoft2025-07-08
CVE-2025-38108net_sched: red: fix a race in __red_change()MEDIUM4.13%ileMicrosoft2025-07-08
CVE-2025-38113ACPI: CPPC: Fix NULL pointer dereference when nosmp is usedMEDIUM4.16%ileMicrosoft2025-07-08
CVE-2025-38127ice: fix Tx scheduler error handling in XDP callbackMEDIUM4.17%ileMicrosoft2025-07-08
CVE-2025-53906Vim has path traversal issue with zip.vim and special crafted zip archivesMEDIUM4.151%ileMicrosoft2025-07-08
CVE-2025-45582GNU Tar through 1.35 allows file overwrite via directory traversal in crafted TAR archives, with a certain two-step procMEDIUM4.136%ileMicrosoft2025-07-08
CVE-2025-38231nfsd: Initialize ssc before laundromat_work to prevent NULL dereferenceMEDIUM4.15%ileMicrosoft2025-07-08
CVE-2025-53905Vim has path traversial issue with tar.vim and special crafted tar filesMEDIUM4.115%ileMicrosoft2025-07-08
CVE-2023-53158The gix-transport crate before 0.36.1 for Rust allows command execution via the "gix clone 'ssh://-oProxyCommand=open$IFMEDIUM4.17%ileMicrosoft2025-07-08
CVE-2025-1220Null byte termination in hostnamesLOW3.741%ileMicrosoft2025-07-08
CVE-2025-4056Glib: glib crash after long command lineLOW3.736%ileMicrosoft2025-07-08
CVE-2025-4878Libssh: use of uninitialized variable in privatekey_from_file()LOW3.68%ileMicrosoft2025-07-08
CVE-2025-49760Windows Storage Spoofing VulnerabilityLOW3.567%ileMicrosoft2025-07-08
CVE-2025-7339on-headers vulnerable to http response header manipulationLOW3.47%ileMicrosoft2025-07-08
CVE-2025-38324mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().LOW3.38%ileMicrosoft2025-07-08
CVE-2025-38201netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAXLOW3.39%ileMicrosoft2025-07-08
CVE-2025-7067HDF5 H5FScache.c H5FS__sinfo_serialize_node_cb heap-based overflowLOW3.313%ileMicrosoft2025-07-08
CVE-2025-7068HDF5 H5FL.c H5FL__malloc memory leakLOW3.310%ileMicrosoft2025-07-08
CVE-2025-7207mruby nregs codegen.c scope_new heap-based overflowLOW3.312%ileMicrosoft2025-07-08
CVE-2025-38282kernfs: Relax constraint in draining guardLOW3.36%ileMicrosoft2025-07-08
CVE-2025-7069HDF5 H5FSsection.c H5FS__sect_link_size heap-based overflowLOW3.313%ileMicrosoft2025-07-08
CVE-2025-49756Office Developer Platform Security Feature Bypass VulnerabilityLOW3.38%ileMicrosoft2025-07-08
CVE-2024-58266The shlex crate before 1.2.1 for Rust allows unquoted and unescaped instances of the { and \xa0 characters, which may faLOW3.252%ileMicrosoft2025-07-08
CVE-2025-50081Vulnerability in the MySQL Server product of Oracle MySQLLOW3.116%ileMicrosoft2025-07-08
CVE-2025-49731Microsoft Teams Elevation of Privilege VulnerabilityLOW3.131%ileMicrosoft2025-07-08
CVE-2025-54314Thor before 1.4.0 can construct an unsafe shell command from library input. NOTE: this is disputed by the Supplier becauLOW2.85%ileMicrosoft2025-07-08
CVE-2025-50098Vulnerability in the MySQL Server product of Oracle MySQLLOW2.735%ileMicrosoft2025-07-08
CVE-2025-50104Vulnerability in the MySQL Server product of Oracle MySQLLOW2.735%ileMicrosoft2025-07-08
CVE-2025-50100Vulnerability in the MySQL Server product of Oracle MySQLLOW2.228%ileMicrosoft2025-07-08
CVE-2025-38239scsi: megaraid_sas: Fix invalid node indexUNKNOWN—4%ileMicrosoft2025-07-08
CVE-2025-38286pinctrl: at91: Fix possible out-of-boundary accessUNKNOWN—8%ileMicrosoft2025-07-08
CVE-2025-5994Cache poisoning via the ECS-enabled Rebirthday AttackUNKNOWN—9%ileMicrosoft2025-07-08
CVE-2025-7394In the OpenSSL compatibility layer implementation, the function RAND_poll() was not behaving as expected and leading to UNKNOWN—31%ileMicrosoft2025-07-08
CVE-2025-8058The regcomp function in the GNU C library version from 2.4 to 2.41 is subject to a double free if some previous allocatUNKNOWN—5%ileMicrosoft2025-07-08
CVE-2025-38205drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1UNKNOWN—3%ileMicrosoft2025-07-08
CVE-2025-38293wifi: ath11k: fix node corruption in ar->arvifs listUNKNOWN—18%ileMicrosoft2025-07-08
CVE-2025-50076Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affecteUNKNOWN—42%ileMicrosoft2025-07-08
CVE-2025-38292wifi: ath12k: fix invalid access to memoryUNKNOWN—12%ileMicrosoft2025-07-08
CVE-2025-7395Domain Name Validation Bypass with Apple Native Certificate ValidationUNKNOWN—13%ileMicrosoft2025-07-08
CVE-2025-7783Usage of unsafe random function in form-data for choosing boundaryUNKNOWN—75%ileMicrosoft2025-07-08
CVE-2025-27613GitHub: CVE-2025-27613 Gitk Arguments VulnerabilityUNKNOWN—21%ileMicrosoft2025-07-08
CVE-2025-27614GitHub: CVE-2025-27614 Gitk Arbitrary Code Execution VulnerabilityUNKNOWN—24%ileMicrosoft2025-07-08
CVE-2025-46334GitHub: CVE-2025-46334 Git Malicious Shell VulnerabilityUNKNOWN—18%ileMicrosoft2025-07-08
CVE-2025-46835GitHub: CVE-2025-46835 Git File Overwrite VulnerabilityUNKNOWN—22%ileMicrosoft2025-07-08
CVE-2025-48384GitHub: CVE-2025-48384 Git Symlink VulnerabilityUNKNOWN—85%ileMicrosoft2025-07-08
CVE-2025-48385GitHub: CVE-2025-48385 Git Protocol Injection VulnerabilityUNKNOWN—56%ileMicrosoft2025-07-08
CVE-2025-48386GitHub: CVE-2025-48386 Git Credential Helper VulnerabilityUNKNOWN—25%ileMicrosoft2025-07-08
CVE-2025-6554Chromium: CVE-2025-6554 Type Confusion in V8UNKNOWN—95%ileMicrosoft2025-07-08
CVE-2025-7657Chromium: CVE-2025-7657 Use after free in WebRTCUNKNOWN—40%ileMicrosoft2025-07-08
CVE-2025-6558Chromium: CVE-2025-6558 Incorrect validation of untrusted input in ANGLE and GPUUNKNOWN—95%ileMicrosoft2025-07-08
CVE-2025-7656Chromium: CVE-2025-7656 Integer overflow in V8UNKNOWN—95%ileMicrosoft2025-07-08
CVE-2025-8011Chromium: CVE-2025-8011 Type Confusion in V8UNKNOWN—16%ileMicrosoft2025-07-08
CVE-2025-8010Chromium: CVE-2025-8010 Type Confusion in V8UNKNOWN—16%ileMicrosoft2025-07-08
CVE-2025-8292Chromium: CVE-2025-8292 Use after free in Media StreamUNKNOWN—24%ileMicrosoft2025-07-08
CVE-2025-29813Azure DevOps Elevation of Privilege VulnerabilityCRITICAL10.073%ileMicrosoft2025-05-13
CVE-2025-29972Azure Storage Resource Provider Spoofing VulnerabilityCRITICAL9.985%ileMicrosoft2025-05-13
CVE-2025-29827Azure Automation Elevation of Privilege VulnerabilityCRITICAL9.969%ileMicrosoft2025-05-13
CVE-2025-30387Document Intelligence Studio On-Prem Elevation of Privilege VulnerabilityCRITICAL9.863%ileMicrosoft2025-05-13
CVE-2025-47733Microsoft Power Apps Information Disclosure VulnerabilityCRITICAL9.174%ileMicrosoft2025-05-13
CVE-2025-47273setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File WriteHIGH8.871%ileMicrosoft2025-05-13
CVE-2025-44904hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5VM_memcpyvv function.HIGH8.830%ileMicrosoft2025-05-13
CVE-2025-47181Microsoft Edge (Chromium-based) Update Elevation of Privilege VulnerabilityHIGH8.840%ileMicrosoft2025-05-13
CVE-2025-29964Windows Media Remote Code Execution VulnerabilityHIGH8.858%ileMicrosoft2025-05-13
CVE-2025-29966Remote Desktop Client Remote Code Execution VulnerabilityHIGH8.867%ileMicrosoft2025-05-13
CVE-2025-29967Remote Desktop Client Remote Code Execution VulnerabilityHIGH8.865%ileMicrosoft2025-05-13
CVE-2025-29840Windows Media Remote Code Execution VulnerabilityHIGH8.857%ileMicrosoft2025-05-13
CVE-2025-29962Windows Media Remote Code Execution VulnerabilityHIGH8.895%ileMicrosoft2025-05-13
CVE-2025-29963Windows Media Remote Code Execution VulnerabilityHIGH8.858%ileMicrosoft2025-05-13
CVE-2025-47732Microsoft Dataverse Remote Code Execution VulnerabilityHIGH8.787%ileMicrosoft2025-05-13
CVE-2025-23150ext4: fix off-by-one error in do_splitHIGH8.411%ileMicrosoft2025-05-13
CVE-2025-4802Untrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker cHIGH8.443%ileMicrosoft2025-05-13
CVE-2025-30377Microsoft Office Remote Code Execution VulnerabilityHIGH8.444%ileMicrosoft2025-05-13
CVE-2025-30386Microsoft Office Remote Code Execution VulnerabilityHIGH8.445%ileMicrosoft2025-05-13
CVE-2025-32704Microsoft Excel Remote Code Execution VulnerabilityHIGH8.431%ileMicrosoft2025-05-13
CVE-2025-33072Microsoft msagsfeedback.azurewebsites.net Information Disclosure VulnerabilityHIGH8.172%ileMicrosoft2025-05-13
CVE-2025-37943wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifiHIGH8.016%ileMicrosoft2025-05-13
CVE-2025-26646.NET, Visual Studio, and Build Tools for Visual Studio Spoofing VulnerabilityHIGH8.063%ileMicrosoft2025-05-13
CVE-2025-37789net: openvswitch: fix nested key length validation in the set() actionHIGH7.810%ileMicrosoft2025-05-13
CVE-2025-37923tracing: Fix oob write in trace_seq_to_buffer()HIGH7.89%ileMicrosoft2025-05-13
CVE-2025-37924ksmbd: fix use-after-free in kerberos authenticationHIGH7.896%ileMicrosoft2025-05-13
CVE-2025-37947ksmbd: prevent out-of-bounds stream writes by validating *posHIGH7.839%ileMicrosoft2025-05-13
CVE-2025-37926ksmbd: fix use-after-free in ksmbd_session_rpc_openHIGH7.838%ileMicrosoft2025-05-13
CVE-2025-37899ksmbd: fix use-after-free in session logoffHIGH7.857%ileMicrosoft2025-05-13
CVE-2025-37777ksmbd: fix use-after-free in __smb2_lease_break_noti()HIGH7.827%ileMicrosoft2025-05-13
CVE-2025-37882usb: xhci: Fix isochronous Ring Underrun/Overrun event handlingHIGH7.818%ileMicrosoft2025-05-13
CVE-2025-37822riscv: uprobes: Add missing fence.i after building the XOL bufferHIGH7.815%ileMicrosoft2025-05-13
CVE-2025-37786net: dsa: free routing table on probe failureHIGH7.88%ileMicrosoft2025-05-13
CVE-2025-37798codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()HIGH7.810%ileMicrosoft2025-05-13
CVE-2025-37803udmabuf: fix a buf size overflow issue during udmabuf creationHIGH7.89%ileMicrosoft2025-05-13
CVE-2025-37840mtd: rawnand: brcmnand: fix PM resume warningHIGH7.821%ileMicrosoft2025-05-13
CVE-2025-37849KVM: arm64: Tear down vGIC on failed vCPU creationHIGH7.818%ileMicrosoft2025-05-13
CVE-2025-37858fs/jfs: Prevent integer overflow in AG size calculationHIGH7.819%ileMicrosoft2025-05-13
CVE-2025-37890net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdiscHIGH7.87%ileMicrosoft2025-05-13
CVE-2025-37916pds_core: remove write-after-free of client_idHIGH7.88%ileMicrosoft2025-05-13
CVE-2025-37938tracing: Verify event formats that have "%*p.."HIGH7.87%ileMicrosoft2025-05-13
CVE-2025-37944wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_processHIGH7.816%ileMicrosoft2025-05-13
CVE-2025-37750smb: client: fix UAF in decryption with multichannelHIGH7.829%ileMicrosoft2025-05-13
CVE-2025-37928dm-bufio: don't schedule in atomic contextHIGH7.847%ileMicrosoft2025-05-13
CVE-2023-53072mptcp: use the workqueue to destroy unaccepted socketsHIGH7.89%ileMicrosoft2025-05-13
CVE-2025-29970Microsoft Brokering File System Elevation of Privilege VulnerabilityHIGH7.837%ileMicrosoft2025-05-13
CVE-2025-29975Microsoft PC Manager Elevation of Privilege VulnerabilityHIGH7.838%ileMicrosoft2025-05-13
CVE-2025-29976Microsoft SharePoint Server Elevation of Privilege VulnerabilityHIGH7.844%ileMicrosoft2025-05-13
CVE-2025-29977Microsoft Excel Remote Code Execution VulnerabilityHIGH7.845%ileMicrosoft2025-05-13
CVE-2025-29978Microsoft PowerPoint Remote Code Execution VulnerabilityHIGH7.840%ileMicrosoft2025-05-13
CVE-2025-29979Microsoft Excel Remote Code Execution VulnerabilityHIGH7.845%ileMicrosoft2025-05-13
CVE-2025-30375Microsoft Excel Remote Code Execution VulnerabilityHIGH7.842%ileMicrosoft2025-05-13
CVE-2025-30376Microsoft Excel Remote Code Execution VulnerabilityHIGH7.842%ileMicrosoft2025-05-13
CVE-2025-30379Microsoft Excel Remote Code Execution VulnerabilityHIGH7.840%ileMicrosoft2025-05-13
CVE-2025-30381Microsoft Excel Remote Code Execution VulnerabilityHIGH7.840%ileMicrosoft2025-05-13
CVE-2025-30382Microsoft SharePoint Server Remote Code Execution VulnerabilityHIGH7.882%ileMicrosoft2025-05-13
CVE-2025-30383Microsoft Excel Remote Code Execution VulnerabilityHIGH7.840%ileMicrosoft2025-05-13
CVE-2025-30393Microsoft Excel Remote Code Execution VulnerabilityHIGH7.833%ileMicrosoft2025-05-13
CVE-2025-30400Microsoft DWM Core Library Elevation of Privilege VulnerabilityHIGH7.876%ileMicrosoft2025-05-13
CVE-2025-32701Windows Common Log File System Driver Elevation of Privilege VulnerabilityHIGH7.868%ileMicrosoft2025-05-13
CVE-2025-32706Windows Common Log File System Driver Elevation of Privilege VulnerabilityHIGH7.880%ileMicrosoft2025-05-13
CVE-2025-32709Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityHIGH7.874%ileMicrosoft2025-05-13
CVE-2025-30385Windows Common Log File System Driver Elevation of Privilege VulnerabilityHIGH7.837%ileMicrosoft2025-05-13
CVE-2025-30388Windows Graphics Component Remote Code Execution VulnerabilityHIGH7.888%ileMicrosoft2025-05-13
CVE-2025-32702Visual Studio Remote Code Execution VulnerabilityHIGH7.844%ileMicrosoft2025-05-13
CVE-2025-32705Microsoft Outlook Remote Code Execution VulnerabilityHIGH7.837%ileMicrosoft2025-05-13
CVE-2025-32707NTFS Elevation of Privilege VulnerabilityHIGH7.839%ileMicrosoft2025-05-13
CVE-2025-47161Microsoft Defender for Endpoint Elevation of Privilege VulnerabilityHIGH7.850%ileMicrosoft2025-05-13
CVE-2025-24063Kernel Streaming Service Driver Elevation of Privilege VulnerabilityHIGH7.846%ileMicrosoft2025-05-13
CVE-2025-29833Microsoft Virtual Machine Bus (VMBus) Remote Code Execution VulnerabilityHIGH7.733%ileMicrosoft2025-05-13
CVE-2024-47619tranport: TLS host name wildcard matching too laxHIGH7.525%ileMicrosoft2025-05-13
CVE-2025-40775DNS message with invalid TSIG causes an assertion failureHIGH7.596%ileMicrosoft2025-05-13
CVE-2025-4948Libsoup: integer underflow in soup_multipart_new_from_message() leading to denial of service in libsoupHIGH7.549%ileMicrosoft2025-05-13
CVE-2025-23166The C++ method SignTraits::DeriveBits() may incorrectly call ThrowException() based on user-supplied inputs when executiHIGH7.552%ileMicrosoft2025-05-13
CVE-2025-47291containerd CRI plugin: Incorrect cgroup hierarchy assignment for containers running in usernamespaced Kubernetes pods.HIGH7.516%ileMicrosoft2025-05-13
CVE-2025-48060AddressSanitizer: stack-buffer-overflow in jq_fuzz_execute (jv_string_vfmt)HIGH7.537%ileMicrosoft2025-05-13
CVE-2025-29969MS-EVEN RPC Remote Code Execution VulnerabilityHIGH7.561%ileMicrosoft2025-05-13
CVE-2025-29971Web Threat Defense (WTD.sys) Denial of Service VulnerabilityHIGH7.599%ileMicrosoft2025-05-13
CVE-2025-26677Windows Remote Desktop Gateway (RD Gateway) Denial of Service VulnerabilityHIGH7.572%ileMicrosoft2025-05-13
CVE-2025-29831Windows Remote Desktop Services Remote Code Execution VulnerabilityHIGH7.557%ileMicrosoft2025-05-13
CVE-2025-29842UrlMon Security Feature Bypass VulnerabilityHIGH7.533%ileMicrosoft2025-05-13
CVE-2025-30397Scripting Engine Memory Corruption VulnerabilityHIGH7.597%ileMicrosoft2025-05-13
CVE-2025-30384Microsoft SharePoint Server Remote Code Execution VulnerabilityHIGH7.465%ileMicrosoft2025-05-13
CVE-2025-29838Windows ExecutionContext Driver Elevation of Privilege VulnerabilityHIGH7.426%ileMicrosoft2025-05-13
CVE-2025-44905hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5Z__filter_scaleoffset function.HIGH7.332%ileMicrosoft2025-05-13
CVE-2025-29826Microsoft Dataverse Elevation of Privilege VulnerabilityHIGH7.352%ileMicrosoft2025-05-13
CVE-2025-37738ext4: ignore xattrs past endHIGH7.19%ileMicrosoft2025-05-13
CVE-2025-378799p/net: fix improper handling of bogus negative read/write repliesHIGH7.149%ileMicrosoft2025-05-13
CVE-2025-21264Visual Studio Code Security Feature Bypass VulnerabilityHIGH7.150%ileMicrosoft2025-05-13
CVE-2025-37831cpufreq: apple-soc: Fix null-ptr-deref in apple_soc_cpufreq_get_rate()HIGH7.06%ileMicrosoft2025-05-13
CVE-2025-37892mtd: inftlcore: Add error check for inftl_read_oob()HIGH7.07%ileMicrosoft2025-05-13
CVE-2025-37936perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value.HIGH7.07%ileMicrosoft2025-05-13
CVE-2025-37954smb: client: Avoid race in open_cached_dir with lease breaksHIGH7.022%ileMicrosoft2025-05-13
CVE-2025-37960memblock: Accept allocated memory before use in memblock_double_array()HIGH7.05%ileMicrosoft2025-05-13
CVE-2025-37963arm64: bpf: Only mitigate cBPF programs loaded by unprivileged usersHIGH7.06%ileMicrosoft2025-05-13
CVE-2025-37997netfilter: ipset: fix region locking in hash typesHIGH7.04%ileMicrosoft2025-05-13
CVE-2025-37968iio: light: opt3001: fix deadlock due to concurrent flag accessHIGH7.03%ileMicrosoft2025-05-13
CVE-2025-37776ksmbd: fix use-after-free in smb_break_all_levII_oplock()HIGH7.025%ileMicrosoft2025-05-13
CVE-2025-37780isofs: Prevent the use of too small fidHIGH7.010%ileMicrosoft2025-05-13
CVE-2025-37797net_sched: hfsc: Fix a UAF vulnerability in class handlingHIGH7.010%ileMicrosoft2025-05-13
CVE-2025-37897wifi: plfxlc: Remove erroneous assert in plfxlc_mac_releaseHIGH7.06%ileMicrosoft2025-05-13
CVE-2025-37903drm/amd/display: Fix slab-use-after-free in hdcpHIGH7.07%ileMicrosoft2025-05-13
CVE-2025-37911bnxt_en: Fix out-of-bound memcpy() during ethtool -wHIGH7.07%ileMicrosoft2025-05-13
CVE-2025-37914net_sched: ets: Fix double list add in class with netem as child qdiscHIGH7.08%ileMicrosoft2025-05-13
CVE-2025-37921vxlan: vnifilter: Fix unlocked deletion of default FDB entryHIGH7.07%ileMicrosoft2025-05-13
CVE-2025-37940ftrace: Add cond_resched() to ftrace_graph_set_hash()HIGH7.03%ileMicrosoft2025-05-13
CVE-2025-37948arm64: bpf: Add BHB mitigation to the epilogue for cBPF programsHIGH7.06%ileMicrosoft2025-05-13
CVE-2025-37951drm/v3d: Add job to pending list if the reset was skippedHIGH7.05%ileMicrosoft2025-05-13
CVE-2025-37952ksmbd: Fix UAF in __close_file_table_idsHIGH7.023%ileMicrosoft2025-05-13
CVE-2025-37958mm/huge_memory: fix dereferencing invalid pmd migration entryHIGH7.07%ileMicrosoft2025-05-13
CVE-2025-37969iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifoHIGH7.03%ileMicrosoft2025-05-13
CVE-2025-37982wifi: wl1251: fix memory leak in wl1251_tx_workHIGH7.06%ileMicrosoft2025-05-13
CVE-2025-37987pds_core: Prevent possible adminq overflow/stuck conditionHIGH7.05%ileMicrosoft2025-05-13
CVE-2025-37988fix a couple of races in MNT_TREE_BENEATH handling by do_move_mount()HIGH7.02%ileMicrosoft2025-05-13
CVE-2025-37994usb: typec: ucsi: displayport: Fix NULL pointer accessHIGH7.07%ileMicrosoft2025-05-13
CVE-2025-37995module: ensure that kobject_put() is safe for module type kobjectsHIGH7.07%ileMicrosoft2025-05-13
CVE-2025-5222Icu: stack buffer overflow in the srbroot::addtag functionHIGH7.024%ileMicrosoft2025-05-13
CVE-2025-37807bpf: Fix kmemleak warning for percpu hashmapHIGH7.07%ileMicrosoft2025-05-13
CVE-2025-37977scsi: ufs: exynos: Disable iocc if dma-coherent property isn't setHIGH7.06%ileMicrosoft2025-05-13
CVE-2025-37976Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.HIGH7.0—Microsoft2025-05-13
CVE-2025-29973Microsoft Azure File Sync Elevation of Privilege VulnerabilityHIGH7.020%ileMicrosoft2025-05-13
CVE-2025-30378Microsoft SharePoint Server Remote Code Execution VulnerabilityHIGH7.066%ileMicrosoft2025-05-13
CVE-2025-27468Windows Kernel-Mode Driver Elevation of Privilege VulnerabilityHIGH7.013%ileMicrosoft2025-05-13
CVE-2025-29841Universal Print Management Service Elevation of Privilege VulnerabilityHIGH7.027%ileMicrosoft2025-05-13
CVE-2025-37973wifi: cfg80211: fix out-of-bounds access during multi-link element defragmentationMEDIUM6.713%ileMicrosoft2025-05-13
CVE-2025-37922book3s64/radix : Align section vmemmap start address to PAGE_SIZEMEDIUM6.76%ileMicrosoft2025-05-13
CVE-2025-26684Microsoft Defender Elevation of Privilege VulnerabilityMEDIUM6.732%ileMicrosoft2025-05-13
CVE-2025-27488Microsoft Windows Hardware Lab Kit (HLK) Elevation of Privilege VulnerabilityMEDIUM6.729%ileMicrosoft2025-05-13
CVE-2025-46836net-tools Stack-based Buffer Overflow vulnerabilityMEDIUM6.68%ileMicrosoft2025-05-13
CVE-2025-37961ipvs: fix uninit-value for saddr in do_output_route4MEDIUM6.55%ileMicrosoft2025-05-13
CVE-2025-4969Libsoup: off-by-one out-of-bounds read in find_boundary() in soup-multipart.cMEDIUM6.552%ileMicrosoft2025-05-13
CVE-2025-4575The x509 application adds trusted use instead of rejected useMEDIUM6.524%ileMicrosoft2025-05-13
CVE-2025-23167A flaw in Node.js 20's HTTP parser allows improper termination of HTTP/1 headers using `\r\n\rX` instead of the requiredMEDIUM6.538%ileMicrosoft2025-05-13
CVE-2025-47268ping in iputils before 20250602 allows a denial of serviceMEDIUM6.572%ileMicrosoft2025-05-13
CVE-2025-4947QUIC certificate check skip with wolfSSLMEDIUM6.516%ileMicrosoft2025-05-13
CVE-2025-37984crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP()MEDIUM6.55%ileMicrosoft2025-05-13
CVE-2025-4373Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unicharMEDIUM6.540%ileMicrosoft2025-05-13
CVE-2025-29825Microsoft Edge (Chromium-based) Spoofing VulnerabilityMEDIUM6.553%ileMicrosoft2025-05-13
CVE-2025-29959Windows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityMEDIUM6.568%ileMicrosoft2025-05-13
CVE-2025-29960Windows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityMEDIUM6.568%ileMicrosoft2025-05-13
CVE-2025-29968Active Directory Certificate Services (AD CS) Denial of Service VulnerabilityMEDIUM6.575%ileMicrosoft2025-05-13
CVE-2025-26685Microsoft Defender for Identity Spoofing VulnerabilityMEDIUM6.548%ileMicrosoft2025-05-13
CVE-2025-29830Windows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityMEDIUM6.563%ileMicrosoft2025-05-13
CVE-2025-29832Windows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityMEDIUM6.563%ileMicrosoft2025-05-13
CVE-2025-29835Windows Remote Access Connection Manager Information Disclosure VulnerabilityMEDIUM6.563%ileMicrosoft2025-05-13
CVE-2025-29836Windows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityMEDIUM6.564%ileMicrosoft2025-05-13
CVE-2025-29958Windows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityMEDIUM6.565%ileMicrosoft2025-05-13
CVE-2025-29961Windows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityMEDIUM6.565%ileMicrosoft2025-05-13
CVE-2025-37915net_sched: drr: Fix double list add in class with netem as child qdiscMEDIUM6.37%ileMicrosoft2025-05-13
CVE-2025-37913net_sched: qfq: Fix double list add in class with netem as child qdiscMEDIUM6.38%ileMicrosoft2025-05-13
CVE-2025-37861scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queueMEDIUM6.320%ileMicrosoft2025-05-13
CVE-2025-29955Windows Hyper-V Denial of Service VulnerabilityMEDIUM6.239%ileMicrosoft2025-05-13
CVE-2025-29957Windows Deployment Services Denial of Service VulnerabilityMEDIUM6.242%ileMicrosoft2025-05-13
CVE-2025-23141KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accessesMEDIUM6.110%ileMicrosoft2025-05-13
CVE-2025-37749net: ppp: Add bound checking for skb data on ppp_sync_txmungMEDIUM6.130%ileMicrosoft2025-05-13
CVE-2025-37757tipc: fix memory leak in tipc_link_xmitMEDIUM6.134%ileMicrosoft2025-05-13
CVE-2025-22247Insecure file handling vulnerabilityMEDIUM6.117%ileMicrosoft2025-05-13
CVE-2025-4207PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validationMEDIUM5.949%ileMicrosoft2025-05-13
CVE-2025-40909Perl threads have a working directory race condition where file operations may target unintended pathsMEDIUM5.930%ileMicrosoft2025-05-13
CVE-2025-30394Windows Remote Desktop Gateway (RD Gateway) Denial of Service VulnerabilityMEDIUM5.998%ileMicrosoft2025-05-13
CVE-2025-29954Windows Lightweight Directory Access Protocol (LDAP) Denial of Service VulnerabilityMEDIUM5.966%ileMicrosoft2025-05-13
CVE-2025-29974Windows Kernel Information Disclosure VulnerabilityMEDIUM5.746%ileMicrosoft2025-05-13
CVE-2025-37933octeon_ep: Fix host hang issue during device rebootMEDIUM5.66%ileMicrosoft2025-05-13
CVE-2025-23144backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()MEDIUM5.511%ileMicrosoft2025-05-13
CVE-2025-23145mptcp: fix NULL pointer in can_accept_new_subflowMEDIUM5.542%ileMicrosoft2025-05-13
CVE-2025-23156media: venus: hfi_parser: refactor hfi packet parsing logicMEDIUM5.511%ileMicrosoft2025-05-13
CVE-2025-23163net: vlan: don't propagate flags on openMEDIUM5.54%ileMicrosoft2025-05-13
CVE-2025-37740jfs: add sanity check for agwidth in dbMountMEDIUM5.58%ileMicrosoft2025-05-13
CVE-2025-37741jfs: Prevent copying of nlink with value 0 from disk inodeMEDIUM5.55%ileMicrosoft2025-05-13
CVE-2025-37755net: libwx: handle page_pool_dev_alloc_pages errorMEDIUM5.57%ileMicrosoft2025-05-13
CVE-2025-37765drm/nouveau: prime: fix ttm_bo_delayed_delete oopsMEDIUM5.511%ileMicrosoft2025-05-13
CVE-2025-37767drm/amd/pm: Prevent division by zeroMEDIUM5.59%ileMicrosoft2025-05-13
CVE-2025-37772RDMA/cma: Fix workqueue crash in cma_netevent_work_handlerMEDIUM5.59%ileMicrosoft2025-05-13
CVE-2025-37773virtiofs: add filesystem context source name checkMEDIUM5.58%ileMicrosoft2025-05-13
CVE-2025-37778ksmbd: Fix dangling pointer in krb_authenticateMEDIUM5.540%ileMicrosoft2025-05-13
CVE-2025-37781i2c: cros-ec-tunnel: defer probe if parent EC is not presentMEDIUM5.59%ileMicrosoft2025-05-13
CVE-2025-37787net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never registeredMEDIUM5.57%ileMicrosoft2025-05-13
CVE-2025-37794wifi: mac80211: Purge vif txq in ieee80211_do_stop()MEDIUM5.58%ileMicrosoft2025-05-13
CVE-2025-37801spi: spi-imx: Add check for spi_imx_setupxfer()MEDIUM5.59%ileMicrosoft2025-05-13
CVE-2025-37808crypto: null - Use spin lock instead of mutexMEDIUM5.58%ileMicrosoft2025-05-13
CVE-2025-37810usb: dwc3: gadget: check that event count does not exceed event buffer lengthMEDIUM5.510%ileMicrosoft2025-05-13
CVE-2025-37819irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode()MEDIUM5.58%ileMicrosoft2025-05-13
CVE-2025-37823net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() tooMEDIUM5.59%ileMicrosoft2025-05-13
CVE-2025-37830cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate()MEDIUM5.56%ileMicrosoft2025-05-13
CVE-2025-37839jbd2: remove wrong sb->s_sequence checkMEDIUM5.521%ileMicrosoft2025-05-13
CVE-2025-37841pm: cpupower: bench: Prevent NULL dereference on malloc failureMEDIUM5.517%ileMicrosoft2025-05-13
CVE-2025-37851fbdev: omapfb: Add 'plane' value checkMEDIUM5.517%ileMicrosoft2025-05-13
CVE-2025-37853drm/amdkfd: debugfs hang_hws skip GPU with MESMEDIUM5.516%ileMicrosoft2025-05-13
CVE-2025-37864net: dsa: clean up FDB, MDB, VLAN entries on unbindMEDIUM5.517%ileMicrosoft2025-05-13
CVE-2025-37862HID: pidff: Fix null pointer dereference in pidff_find_fieldsMEDIUM5.519%ileMicrosoft2025-05-13
CVE-2025-37875igc: fix PTM cycle trigger logicMEDIUM5.516%ileMicrosoft2025-05-13
CVE-2025-37884bpf: Fix deadlock between rcu_tasks_trace and event_mutex.MEDIUM5.58%ileMicrosoft2025-05-13
CVE-2025-37885KVM: x86: Reset IRTE to host control if *new* route isn't postableMEDIUM5.520%ileMicrosoft2025-05-13
CVE-2025-37909net: lan743x: Fix memleak issue when GSO enabledMEDIUM5.57%ileMicrosoft2025-05-13
CVE-2025-37956ksmbd: prevent rename with empty stringMEDIUM5.524%ileMicrosoft2025-05-13
CVE-2025-37992net_sched: Flush gso_skb list too during ->change()MEDIUM5.56%ileMicrosoft2025-05-13
CVE-2025-37942HID: pidff: Make sure to fetch pool before checking SIMULTANEOUS_MAXMEDIUM5.5—Microsoft2025-05-13
CVE-2025-37743wifi: ath12k: Avoid memory leak while enabling statisticsMEDIUM5.54%ileMicrosoft2025-05-13
CVE-2025-37834mm/vmscan: don't try to reclaim hwpoison folioMEDIUM5.56%ileMicrosoft2025-05-13
CVE-2025-37759ublk: fix handling recovery & reissue in ublk_abort_queue()MEDIUM5.57%ileMicrosoft2025-05-13
CVE-2025-37855drm/amd/display: Guard Possible Null Pointer DereferenceMEDIUM5.511%ileMicrosoft2025-05-13
CVE-2025-37870drm/amd/display: prevent hang on link training failMEDIUM5.515%ileMicrosoft2025-05-13
CVE-2025-37920xsk: Fix race condition in AF_XDP generic RX pathMEDIUM5.53%ileMicrosoft2025-05-13
CVE-2025-23155net: stmmac: Fix accessing freed irq affinity_hintMEDIUM5.510%ileMicrosoft2025-05-13
CVE-2022-49901blk-mq: Fix kmemleak in blk_mq_init_allocated_queueMEDIUM5.56%ileMicrosoft2025-05-13
CVE-2025-37877iommu: Clear iommu-dma ops on cleanupMEDIUM5.515%ileMicrosoft2025-05-13
CVE-2025-37826scsi: ufs: core: Add NULL check in ufshcd_mcq_compl_pending_transfer()MEDIUM5.56%ileMicrosoft2025-05-13
CVE-2025-37880um: work around sched_yield not yielding in time-travel modeMEDIUM5.55%ileMicrosoft2025-05-13
CVE-2025-37931btrfs: adjust subpage bit start based on sectorsizeMEDIUM5.57%ileMicrosoft2025-05-13
CVE-2025-37745PM: hibernate: Avoid deadlock in hibernate_compressor_param_set()MEDIUM5.54%ileMicrosoft2025-05-13
CVE-2025-37806fs/ntfs3: Keep write operations atomicMEDIUM5.57%ileMicrosoft2025-05-13
CVE-2025-37856btrfs: harden block_group::bg_list against list_del() racesMEDIUM5.518%ileMicrosoft2025-05-13
CVE-2025-37833net/niu: Niu requires MSIX ENTRY_DATA fields touch before entry readsMEDIUM5.56%ileMicrosoft2025-05-13
CVE-2025-37842spi: fsl-qspi: use devm function instead of driver removeMEDIUM5.516%ileMicrosoft2025-05-13
CVE-2022-49764bpf: Prevent bpf program recursion for raw tracepoint probesMEDIUM5.57%ileMicrosoft2025-05-13
CVE-2022-49803netdevsim: Fix memory leak of nsim_dev->fa_cookieMEDIUM5.59%ileMicrosoft2025-05-13
CVE-2022-49810netfs: Fix missing xas_retry() calls in xarray iterationMEDIUM5.56%ileMicrosoft2025-05-13
CVE-2023-53068net: usb: lan78xx: Limit packet length to skb->lenMEDIUM5.58%ileMicrosoft2025-05-13
CVE-2025-37945net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHYMEDIUM5.56%ileMicrosoft2025-05-13
CVE-2024-58098bpf: track changes_pkt_data property for global functionsMEDIUM5.56%ileMicrosoft2025-05-13
CVE-2024-58100bpf: check changes_pkt_data property for extension programsMEDIUM5.56%ileMicrosoft2025-05-13
CVE-2024-58237bpf: consider that tail calls invalidate packet pointersMEDIUM5.56%ileMicrosoft2025-05-13
CVE-2025-23140misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq errorMEDIUM5.511%ileMicrosoft2025-05-13
CVE-2025-23142sctp: detect and prevent references to a freed transport in sendmsgMEDIUM5.512%ileMicrosoft2025-05-13
CVE-2025-23146mfd: ene-kb3930: Fix a potential NULL pointer dereferenceMEDIUM5.510%ileMicrosoft2025-05-13
CVE-2025-23147i3c: Add NULL pointer check in i3c_master_queue_ibi()MEDIUM5.510%ileMicrosoft2025-05-13
CVE-2025-23148soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()MEDIUM5.510%ileMicrosoft2025-05-13
CVE-2025-23157media: venus: hfi_parser: add check to avoid out of bound accessMEDIUM5.511%ileMicrosoft2025-05-13
CVE-2025-23158media: venus: hfi: add check to handle incorrect queue sizeMEDIUM5.511%ileMicrosoft2025-05-13
CVE-2025-23159media: venus: hfi: add a check to handle OOB in sfr regionMEDIUM5.512%ileMicrosoft2025-05-13
CVE-2025-37739f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks()MEDIUM5.59%ileMicrosoft2025-05-13
CVE-2025-37742jfs: Fix uninit-value access of imap allocated in the diMount() functionMEDIUM5.57%ileMicrosoft2025-05-13
CVE-2025-37754drm/i915/huc: Fix fence not released on early probe errorsMEDIUM5.510%ileMicrosoft2025-05-13
CVE-2025-37766drm/amd/pm: Prevent division by zeroMEDIUM5.510%ileMicrosoft2025-05-13
CVE-2025-37768drm/amd/pm: Prevent division by zeroMEDIUM5.59%ileMicrosoft2025-05-13
CVE-2025-37769drm/amd/pm/smu11: Prevent division by zeroMEDIUM5.59%ileMicrosoft2025-05-13
CVE-2025-37770drm/amd/pm: Prevent division by zeroMEDIUM5.59%ileMicrosoft2025-05-13
CVE-2025-37771drm/amd/pm: Prevent division by zeroMEDIUM5.59%ileMicrosoft2025-05-13
CVE-2025-37775ksmbd: fix the warning from __kernel_write_iterMEDIUM5.57%ileMicrosoft2025-05-13
CVE-2025-37790net: mctp: Set SOCK_RCU_FREEMEDIUM5.57%ileMicrosoft2025-05-13
CVE-2025-37792Bluetooth: btrtl: Prevent potential NULL dereferenceMEDIUM5.58%ileMicrosoft2025-05-13
CVE-2025-37796wifi: at76c50x: fix use after free access in at76_disconnectMEDIUM5.59%ileMicrosoft2025-05-13
CVE-2025-37800driver core: fix potential NULL pointer dereference in dev_uevent()MEDIUM5.58%ileMicrosoft2025-05-13
CVE-2025-37805sound/virtio: Fix cancel_sync warnings on uninitialized work_structsMEDIUM5.58%ileMicrosoft2025-05-13
CVE-2025-37812usb: cdns3: Fix deadlock when using NCM gadgetMEDIUM5.54%ileMicrosoft2025-05-13
CVE-2025-37817mcb: fix a double free bug in chameleon_parse_gdd()MEDIUM5.59%ileMicrosoft2025-05-13
CVE-2025-37818LoongArch: Return NULL from huge_pte_offset() for invalid PMDMEDIUM5.56%ileMicrosoft2025-05-13
CVE-2025-37824tipc: fix NULL pointer dereference in tipc_mon_reinit_self()MEDIUM5.58%ileMicrosoft2025-05-13
CVE-2025-37828scsi: ufs: mcq: Add NULL check in ufshcd_mcq_abort()MEDIUM5.56%ileMicrosoft2025-05-13
CVE-2025-37829cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate()MEDIUM5.58%ileMicrosoft2025-05-13
CVE-2025-37836PCI: Fix reference leak in pci_register_host_bridge()MEDIUM5.519%ileMicrosoft2025-05-13
CVE-2025-37844cifs: avoid NULL pointer dereference in dbg callMEDIUM5.517%ileMicrosoft2025-05-13
CVE-2025-37852drm/amdgpu: handle amdgpu_cgs_create_device() errors in amd_powerplay_create()MEDIUM5.516%ileMicrosoft2025-05-13
CVE-2025-37854drm/amdkfd: Fix mode1 reset crash issueMEDIUM5.517%ileMicrosoft2025-05-13
CVE-2025-37857scsi: st: Fix array overflow in st_setup()MEDIUM5.519%ileMicrosoft2025-05-13
CVE-2025-37859page_pool: avoid infinite loop to schedule delayed workerMEDIUM5.519%ileMicrosoft2025-05-13
CVE-2025-37865net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupportedMEDIUM5.516%ileMicrosoft2025-05-13
CVE-2025-37867RDMA/core: Silence oversized kvmalloc() warningMEDIUM5.518%ileMicrosoft2025-05-13
CVE-2025-37874net: ngbe: fix memory leak in ngbe_probe() error pathMEDIUM5.520%ileMicrosoft2025-05-13
CVE-2025-37878perf/core: Fix WARN_ON(!ctx) in __free_event() for partial initMEDIUM5.515%ileMicrosoft2025-05-13
CVE-2025-37883s390/sclp: Add check for get_zeroed_page()MEDIUM5.516%ileMicrosoft2025-05-13
CVE-2025-37886pds_core: make wait_context part of q_infoMEDIUM5.518%ileMicrosoft2025-05-13
CVE-2025-37887pds_core: handle unsupported PDS_CORE_CMD_FW_CONTROL resultMEDIUM5.516%ileMicrosoft2025-05-13
CVE-2025-37891ALSA: ump: Fix buffer overflow at UMP SysEx message conversionMEDIUM5.512%ileMicrosoft2025-05-13
CVE-2025-37901irqchip/qcom-mpm: Prevent crash when trying to handle non-wake GPIOsMEDIUM5.57%ileMicrosoft2025-05-13
CVE-2025-37927iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihidMEDIUM5.511%ileMicrosoft2025-05-13
CVE-2025-37932sch_htb: make htb_qlen_notify() idempotentMEDIUM5.58%ileMicrosoft2025-05-13
CVE-2025-37957KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interceptionMEDIUM5.55%ileMicrosoft2025-05-13
CVE-2025-37967usb: typec: ucsi: displayport: Fix deadlockMEDIUM5.52%ileMicrosoft2025-05-13
CVE-2025-37972Input: mtk-pmic-keys - fix possible null pointer dereferenceMEDIUM5.55%ileMicrosoft2025-05-13
CVE-2025-37979ASoC: qcom: Fix sc7280 lpass potential buffer overflowMEDIUM5.58%ileMicrosoft2025-05-13
CVE-2025-37980block: fix resource leak in blk_register_queue() error pathMEDIUM5.55%ileMicrosoft2025-05-13
CVE-2025-37989net: phy: leds: fix memory leakMEDIUM5.56%ileMicrosoft2025-05-13
CVE-2025-37802ksmbd: fix WARNING "do not call blocking ops when !TASK_RUNNING"MEDIUM5.522%ileMicrosoft2025-05-13
CVE-2025-37744wifi: ath12k: fix memory leak in ath12k_pci_remove()MEDIUM5.54%ileMicrosoft2025-05-13
CVE-2025-37782Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.MEDIUM5.5—Microsoft2025-05-13
CVE-2025-37804Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.MEDIUM5.5—Microsoft2025-05-13
CVE-2025-23143net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod.MEDIUM5.510%ileMicrosoft2025-05-13
CVE-2025-37747perf: Fix hang while freeing sigtrap eventMEDIUM5.57%ileMicrosoft2025-05-13
CVE-2023-53064iavf: fix hang on reboot with iceMEDIUM5.59%ileMicrosoft2025-05-13
CVE-2022-49766netlink: Bounds-check struct nlmsgerr creationMEDIUM5.56%ileMicrosoft2025-05-13
CVE-2022-49829drm/scheduler: fix fence ref countingMEDIUM5.56%ileMicrosoft2025-05-13
CVE-2022-49833btrfs: zoned: clone zoned device info when cloning a deviceMEDIUM5.56%ileMicrosoft2025-05-13
CVE-2022-49858octeontx2-pf: Fix SQE threshold checkingMEDIUM5.56%ileMicrosoft2025-05-13
CVE-2023-53105net/mlx5e: Fix cleanup null-ptr deref on encap lockMEDIUM5.58%ileMicrosoft2025-05-13
CVE-2022-49932KVM: VMX: Do _all_ initialization before exposing /dev/kvm to userspaceMEDIUM5.510%ileMicrosoft2025-05-13
CVE-2023-53042drm/amd/display: Do not set DRR on pipe CommitMEDIUM5.58%ileMicrosoft2025-05-13
CVE-2023-53074drm/amdgpu: fix ttm_bo calltrace warning in psp_hw_finiMEDIUM5.58%ileMicrosoft2025-05-13
CVE-2023-53093tracing: Do not let histogram values have some modifiersMEDIUM5.58%ileMicrosoft2025-05-13
CVE-2025-37820xen-netfront: handle NULL returned by xdp_convert_buff_to_frame()MEDIUM5.527%ileMicrosoft2025-05-13
CVE-2025-37959bpf: Scrub packet on bpf_redirect_peerMEDIUM5.523%ileMicrosoft2025-05-13
CVE-2025-32703Visual Studio Information Disclosure VulnerabilityMEDIUM5.535%ileMicrosoft2025-05-13
CVE-2025-29829Windows Trusted Runtime Interface Driver Information Disclosure VulnerabilityMEDIUM5.538%ileMicrosoft2025-05-13
CVE-2025-29837Windows Installer Information Disclosure VulnerabilityMEDIUM5.544%ileMicrosoft2025-05-13
CVE-2025-29956Windows SMB Information Disclosure VulnerabilityMEDIUM5.456%ileMicrosoft2025-05-13
CVE-2025-4432Ring: some aes functions may panic when overflow checking is enabled in ringMEDIUM5.357%ileMicrosoft2025-05-13
CVE-2025-5244GNU Binutils ld elflink.c elf_gc_sweep memory corruptionMEDIUM5.316%ileMicrosoft2025-05-13
CVE-2025-5245GNU Binutils objdump debug.c debug_type_samep memory corruptionMEDIUM5.316%ileMicrosoft2025-05-13
CVE-2024-22653yasm commit 9defefae was discovered to contain a NULL pointer dereference via the yasm_section_bcs_append function at seMEDIUM4.812%ileMicrosoft2025-05-13
CVE-2025-4574Crossbeam-channel: crossbeam-channel vulnerable to double free on dropMEDIUM4.841%ileMicrosoft2025-05-13
CVE-2025-5025No QUIC certificate pinning with wolfSSLMEDIUM4.817%ileMicrosoft2025-05-13
CVE-2025-37985USB: wdm: close race between wdm_open and wdm_wwan_port_stopMEDIUM4.72%ileMicrosoft2025-05-13
CVE-2025-37983qibfs: fix _another_ leakMEDIUM4.76%ileMicrosoft2025-05-13
CVE-2025-37907accel/ivpu: Fix locking order in ivpu_job_submitMEDIUM4.72%ileMicrosoft2025-05-13
CVE-2025-4598Systemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resultMEDIUM4.751%ileMicrosoft2025-05-13
CVE-2025-27151redis-check-aof may lead to stack overflow and potential RCEMEDIUM4.754%ileMicrosoft2025-05-13
CVE-2025-37881usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev()MEDIUM4.719%ileMicrosoft2025-05-13
CVE-2025-37918Bluetooth: btusb: avoid NULL pointer dereference in skb_dequeue()MEDIUM4.714%ileMicrosoft2025-05-13
CVE-2025-37970iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_fifoMEDIUM4.73%ileMicrosoft2025-05-13
CVE-2025-37990wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage()MEDIUM4.77%ileMicrosoft2025-05-13
CVE-2025-37998openvswitch: Fix unsafe attribute parsing in output_userspace()MEDIUM4.58%ileMicrosoft2025-05-13
CVE-2025-37758ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe()MEDIUM4.48%ileMicrosoft2025-05-13
CVE-2025-37793ASoC: Intel: avs: Fix null-ptr-deref in avs_component_probe()MEDIUM4.47%ileMicrosoft2025-05-13
CVE-2024-23337jq has signed integer overflow in jv.c:jvp_array_writeMEDIUM4.330%ileMicrosoft2025-05-13
CVE-2025-4476Libsoup: null pointer dereference in libsoup may lead to denial of serviceMEDIUM4.326%ileMicrosoft2025-05-13
CVE-2023-53037scsi: mpi3mr: Bad drive in topology results kernel crashMEDIUM4.110%ileMicrosoft2025-05-13
CVE-2025-29839Windows Multiple UNC Provider Driver Information Disclosure VulnerabilityMEDIUM4.036%ileMicrosoft2025-05-13
CVE-2025-46712Erlang/OTP SSH Has Strict KEX ViolationsLOW3.739%ileMicrosoft2025-05-13
CVE-2025-23165In Node.js, the `ReadFileUtf8` internal binding leaks memory due to a corrupted pointer in `uv_fs_s.file`: a UTF-16 pathLOW3.739%ileMicrosoft2025-05-13
CVE-2025-23161PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t typeLOW3.34%ileMicrosoft2025-05-13
CVE-2025-37756net: tls: explicitly disallow disconnectLOW3.324%ileMicrosoft2025-05-13
CVE-2025-4287PyTorch nccl.py torch.cuda.nccl.reduce denial of serviceLOW3.36%ileMicrosoft2025-05-13
CVE-2025-37788cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error pathLOW3.39%ileMicrosoft2025-05-13
CVE-2025-47279undici Denial of Service attack via bad certificate dataLOW3.118%ileMicrosoft2025-05-13
CVE-2023-53154parse_string in cJSON before 1.7.18 has a heap-based buffer over-read via {"1":1, with no trailing newline if cJSON_ParsLOW2.914%ileMicrosoft2025-05-13
CVE-2025-37930drm/nouveau: Fix WARN_ON in nouveau_fence_context_kill()LOW2.57%ileMicrosoft2025-05-13
CVE-2025-37905firmware: arm_scmi: Balance device refcount when destroying devicesLOW2.36%ileMicrosoft2025-05-13
CVE-2025-37795Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.UNKNOWN——Microsoft2025-05-13
CVE-2025-4516Use-after-free in "unicode_escape" decoder with error handlerUNKNOWN—8%ileMicrosoft2025-05-13
CVE-2025-46569OPA server Data API HTTP path injection of RegoUNKNOWN—34%ileMicrosoft2025-05-13
CVE-2025-48938Prevent GitHub CLI and extensions from executing arbitrary commands from compromised GitHub Enterprise ServerUNKNOWN—38%ileMicrosoft2025-05-13
CVE-2025-4050Chromium: CVE-2025-4050 Out of bounds memory access in DevToolsUNKNOWN—38%ileMicrosoft2025-05-13
CVE-2025-4096Chromium: CVE-2025-4096 Heap buffer overflow in HTMLUNKNOWN—39%ileMicrosoft2025-05-13
CVE-2025-5066Chromium: CVE-2025-5066 Inappropriate implementation in MessagesUNKNOWN—33%ileMicrosoft2025-05-13
CVE-2025-5067Chromium: CVE-2025-5067 Inappropriate implementation in Tab StripUNKNOWN—29%ileMicrosoft2025-05-13
CVE-2025-5283Chromium: CVE-2025-5283 Use after free in libvpxUNKNOWN—41%ileMicrosoft2025-05-13
CVE-2025-5281Chromium: CVE-2025-5281 Inappropriate implementation in BFCacheUNKNOWN—9%ileMicrosoft2025-05-13
CVE-2025-5065Chromium: CVE-2025-5065 Inappropriate implementation in FileSystemAccess APIUNKNOWN—33%ileMicrosoft2025-05-13
CVE-2025-5064Chromium: CVE-2025-5064 Inappropriate implementation in Background Fetch APIUNKNOWN—25%ileMicrosoft2025-05-13
CVE-2025-5280Chromium: CVE-2025-5280 Out of bounds write in V8UNKNOWN—82%ileMicrosoft2025-05-13
CVE-2025-5063Chromium: CVE-2025-5063 Use after free in CompositingUNKNOWN—87%ileMicrosoft2025-05-13
CVE-2025-4372Chromium: CVE-2025-4372 Use after free in WebAudioUNKNOWN—39%ileMicrosoft2025-05-13
CVE-2025-4609Chromium: CVE-2025-4609 Incorrect handle provided in unspecified circumstances in MojoUNKNOWN—32%ileMicrosoft2025-05-13
CVE-2025-4664Chromium: CVE-2025-4664 Insufficient policy enforcement in LoaderUNKNOWN—92%ileMicrosoft2025-05-13
CVE-2025-4051Chromium: CVE-2025-4051 Insufficient data validation in DevToolsUNKNOWN—22%ileMicrosoft2025-05-13
CVE-2025-4052Chromium: CVE-2025-4052 Inappropriate implementation in DevToolsUNKNOWN—45%ileMicrosoft2025-05-13
CVE-2024-30080Microsoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityCRITICAL9.899%ileMicrosoft2024-06-11
CVE-2024-30078Windows Wi-Fi Driver Remote Code Execution VulnerabilityHIGH8.892%ileMicrosoft2024-06-11
CVE-2024-30064Windows Kernel Elevation of Privilege VulnerabilityHIGH8.853%ileMicrosoft2024-06-11
CVE-2024-30068Windows Kernel Elevation of Privilege VulnerabilityHIGH8.852%ileMicrosoft2024-06-11
CVE-2024-30097Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution VulnerabilityHIGH8.875%ileMicrosoft2024-06-11
CVE-2024-30103Microsoft Outlook Remote Code Execution VulnerabilityHIGH8.888%ileMicrosoft2024-06-11
CVE-2024-35249Microsoft Dynamics 365 Business Central Remote Code Execution VulnerabilityHIGH8.888%ileMicrosoft2024-06-11
CVE-2024-37325Azure Science Virtual Machine (DSVM) Elevation of Privilege VulnerabilityHIGH8.163%ileMicrosoft2024-06-11
CVE-2024-30074Windows Link Layer Topology Discovery Protocol Remote Code Execution VulnerabilityHIGH8.065%ileMicrosoft2024-06-11
CVE-2024-30075Windows Link Layer Topology Discovery Protocol Remote Code Execution VulnerabilityHIGH8.056%ileMicrosoft2024-06-11
CVE-2024-30077Windows OLE Remote Code Execution VulnerabilityHIGH8.076%ileMicrosoft2024-06-11
CVE-2024-35260Microsoft Dataverse Remote Code Execution VulnerabilityHIGH8.054%ileMicrosoft2024-06-11
CVE-2024-30072Microsoft Event Trace Log File Parsing Remote Code Execution VulnerabilityHIGH7.855%ileMicrosoft2024-06-11
CVE-2024-30082Win32k Elevation of Privilege VulnerabilityHIGH7.867%ileMicrosoft2024-06-11
CVE-2024-35250Windows Kernel-Mode Driver Elevation of Privilege VulnerabilityHIGH7.898%ileMicrosoft2024-06-11
CVE-2024-30062Windows Standards-Based Storage Management Service Remote Code Execution VulnerabilityHIGH7.860%ileMicrosoft2024-06-11
CVE-2024-30085Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityHIGH7.896%ileMicrosoft2024-06-11
CVE-2024-30086Windows Win32 Kernel Subsystem Elevation of Privilege VulnerabilityHIGH7.863%ileMicrosoft2024-06-11
CVE-2024-30087Win32k Elevation of Privilege VulnerabilityHIGH7.895%ileMicrosoft2024-06-11
CVE-2024-30089Microsoft Streaming Service Elevation of Privilege VulnerabilityHIGH7.894%ileMicrosoft2024-06-11
CVE-2024-30091Win32k Elevation of Privilege VulnerabilityHIGH7.890%ileMicrosoft2024-06-11
CVE-2024-30094Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityHIGH7.856%ileMicrosoft2024-06-11
CVE-2024-30095Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityHIGH7.860%ileMicrosoft2024-06-11
CVE-2024-30100Microsoft SharePoint Server Remote Code Execution VulnerabilityHIGH7.865%ileMicrosoft2024-06-11
CVE-2024-30104Microsoft Office Remote Code Execution VulnerabilityHIGH7.872%ileMicrosoft2024-06-11
CVE-2024-30070DHCP Server Service Denial of Service VulnerabilityHIGH7.582%ileMicrosoft2024-06-11
CVE-2023-50868MITRE: CVE-2023-50868 NSEC3 closest encloser proof can exhaust CPUHIGH7.5100%ileMicrosoft2024-06-11
CVE-2024-30083Windows Standards-Based Storage Management Service Denial of Service VulnerabilityHIGH7.583%ileMicrosoft2024-06-11
CVE-2024-30101Microsoft Office Remote Code Execution VulnerabilityHIGH7.576%ileMicrosoft2024-06-11
CVE-2024-35252Azure Storage Movement Client Library Denial of Service VulnerabilityHIGH7.583%ileMicrosoft2024-06-11
CVE-2024-29187GitHub: CVE-2024-29187 WiX Burn-based bundles are vulnerable to binary hijack when run as SYSTEMHIGH7.338%ileMicrosoft2024-06-11
CVE-2024-30093Windows Storage Elevation of Privilege VulnerabilityHIGH7.363%ileMicrosoft2024-06-11
CVE-2024-30102Microsoft Office Remote Code Execution VulnerabilityHIGH7.352%ileMicrosoft2024-06-11
CVE-2024-35248Microsoft Dynamics 365 Business Central Elevation of Privilege VulnerabilityHIGH7.358%ileMicrosoft2024-06-11
CVE-2024-35254Azure Monitor Agent Elevation of Privilege VulnerabilityHIGH7.154%ileMicrosoft2024-06-11
CVE-2024-30084Windows Kernel-Mode Driver Elevation of Privilege VulnerabilityHIGH7.092%ileMicrosoft2024-06-11
CVE-2024-30088Windows Kernel Elevation of Privilege VulnerabilityHIGH7.099%ileMicrosoft2024-06-11
CVE-2024-30090Microsoft Streaming Service Elevation of Privilege VulnerabilityHIGH7.078%ileMicrosoft2024-06-11
CVE-2024-30099Windows Kernel Elevation of Privilege VulnerabilityHIGH7.042%ileMicrosoft2024-06-11
CVE-2024-35265Windows Perception Service Elevation of Privilege VulnerabilityHIGH7.029%ileMicrosoft2024-06-11
CVE-2024-30076Windows Container Manager Service Elevation of Privilege VulnerabilityMEDIUM6.875%ileMicrosoft2024-06-11
CVE-2024-29060Visual Studio Elevation of Privilege VulnerabilityMEDIUM6.756%ileMicrosoft2024-06-11
CVE-2024-30063Windows Distributed File System (DFS) Remote Code Execution VulnerabilityMEDIUM6.760%ileMicrosoft2024-06-11
CVE-2024-35263Microsoft Dynamics 365 (On-Premises) Information Disclosure VulnerabilityMEDIUM5.774%ileMicrosoft2024-06-11
CVE-2024-35255Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege VulnerabilityMEDIUM5.554%ileMicrosoft2024-06-11
CVE-2024-30065Windows Themes Denial of Service VulnerabilityMEDIUM5.554%ileMicrosoft2024-06-11
CVE-2024-30066Winlogon Elevation of Privilege VulnerabilityMEDIUM5.547%ileMicrosoft2024-06-11
CVE-2024-30067Winlogon Elevation of Privilege VulnerabilityMEDIUM5.547%ileMicrosoft2024-06-11
CVE-2024-30096Windows Cryptographic Services Information Disclosure VulnerabilityMEDIUM5.558%ileMicrosoft2024-06-11
CVE-2024-30058Microsoft Edge (Chromium-based) Spoofing VulnerabilityMEDIUM5.432%ileMicrosoft2024-06-11
CVE-2024-30057Microsoft Edge for iOS Spoofing VulnerabilityMEDIUM5.433%ileMicrosoft2024-06-11
CVE-2024-30069Windows Remote Access Connection Manager Information Disclosure VulnerabilityMEDIUM4.744%ileMicrosoft2024-06-11
CVE-2024-38082Microsoft Edge (Chromium-based) Spoofing VulnerabilityMEDIUM4.740%ileMicrosoft2024-06-11
CVE-2024-30052Visual Studio Remote Code Execution VulnerabilityMEDIUM4.769%ileMicrosoft2024-06-11
CVE-2024-35253Microsoft Azure File Sync Elevation of Privilege VulnerabilityMEDIUM4.451%ileMicrosoft2024-06-11
CVE-2024-38093Microsoft Edge (Chromium-based) Spoofing VulnerabilityMEDIUM4.340%ileMicrosoft2024-06-11
CVE-2024-38083Microsoft Edge (Chromium-based) Spoofing VulnerabilityMEDIUM4.340%ileMicrosoft2024-06-11
CVE-2024-5841Chromium: CVE-2024-5841 Use after free in V8UNKNOWN—91%ileMicrosoft2024-06-11
CVE-2024-5835Chromium: CVE-2024-5835 Heap buffer overflow in Tab GroupsUNKNOWN—41%ileMicrosoft2024-06-11
CVE-2024-5837Chromium: CVE-2024-5837 Type Confusion in V8UNKNOWN—42%ileMicrosoft2024-06-11
CVE-2024-5844Chromium: CVE-2024-5844 Heap buffer overflow in Tab StripUNKNOWN—42%ileMicrosoft2024-06-11
CVE-2024-5833Chromium: CVE-2024-5833 Type Confusion in V8UNKNOWN—41%ileMicrosoft2024-06-11
CVE-2024-5839Chromium: CVE-2024-5839 Inappropriate Implementation in Memory AllocatorUNKNOWN—39%ileMicrosoft2024-06-11
CVE-2024-5836Chromium: CVE-2024-5836 Inappropriate Implementation in DevToolsUNKNOWN—40%ileMicrosoft2024-06-11
CVE-2024-5834Chromium: CVE-2024-5834 Inappropriate implementation in DawnUNKNOWN—44%ileMicrosoft2024-06-11
CVE-2024-5843Chromium: CVE-2024-5843 Inappropriate implementation in DownloadsUNKNOWN—38%ileMicrosoft2024-06-11
CVE-2024-5831Chromium: CVE-2024-5831 Use after free in DawnUNKNOWN—39%ileMicrosoft2024-06-11
CVE-2024-5840Chromium: CVE-2024-5840 Policy Bypass in CORSUNKNOWN—34%ileMicrosoft2024-06-11
CVE-2024-5842Chromium: CVE-2024-5842 Use after free in Browser UIUNKNOWN—39%ileMicrosoft2024-06-11
CVE-2024-5838Chromium: CVE-2024-5838 Type Confusion in V8UNKNOWN—41%ileMicrosoft2024-06-11
CVE-2024-5832Chromium: CVE-2024-5832 Use after free in DawnUNKNOWN—39%ileMicrosoft2024-06-11
CVE-2024-5830Chromium: CVE-2024-5830 Type Confusion in V8UNKNOWN—57%ileMicrosoft2024-06-11
CVE-2024-5493Chromium: CVE-2024-5493 Heap buffer overflow in WebRTCUNKNOWN—51%ileMicrosoft2024-06-11
CVE-2024-5498Chromium: CVE-2024-5498 Use after free in Presentation APIUNKNOWN—47%ileMicrosoft2024-06-11
CVE-2024-5496Chromium: CVE-2024-5496 Use after free in Media SessionUNKNOWN—54%ileMicrosoft2024-06-11
CVE-2024-5499Chromium: CVE-2024-5499 Out of bounds write in Streams APIUNKNOWN—56%ileMicrosoft2024-06-11
CVE-2024-5494Chromium: CVE-2024-5494 Use after free in DawnUNKNOWN—48%ileMicrosoft2024-06-11
CVE-2024-5497Chromium: CVE-2024-5497 Out of bounds memory access in Keyboard InputsUNKNOWN—51%ileMicrosoft2024-06-11
CVE-2024-5495Chromium: CVE-2024-5495 Use after free in DawnUNKNOWN—49%ileMicrosoft2024-06-11
CVE-2024-6103Chromium: CVE-2024-6103: Use after free in DawnUNKNOWN—47%ileMicrosoft2024-06-11
CVE-2024-6102Chromium: CVE-2024-6102: Out of bounds memory access in DawnUNKNOWN—49%ileMicrosoft2024-06-11
CVE-2024-6101Chromium: CVE-2024-6101: Inappropriate implementation in WebAssemblyUNKNOWN—53%ileMicrosoft2024-06-11
CVE-2024-6100Chromium: CVE-2024-6100 Type Confusion in V8UNKNOWN—64%ileMicrosoft2024-06-11
CVE-2024-6290Chromium: CVE-2024-6290 Use after free in DawnUNKNOWN—41%ileMicrosoft2024-06-11
CVE-2024-6293Chromium: CVE-2024-6293 Use after free in DawnUNKNOWN—41%ileMicrosoft2024-06-11
CVE-2024-6292Chromium: CVE-2024-6292 Use after free in DawnUNKNOWN—41%ileMicrosoft2024-06-11
CVE-2024-6291Chromium: CVE-2024-6291 Use after free in SwiftshaderUNKNOWN—43%ileMicrosoft2024-06-11
CVE-2024-34122Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityUNKNOWN—24%ileMicrosoft2024-06-11
CVE-2024-5846Chromium: CVE-2024-5846 Use after free in PDFiumUNKNOWN—38%ileMicrosoft2024-06-11
CVE-2024-5847Chromium: CVE-2024-5847 Use after free in PDFiumUNKNOWN—38%ileMicrosoft2024-06-11
CVE-2024-5845Chromium: CVE-2024-5845 Use after free in AudioUNKNOWN—38%ileMicrosoft2024-06-11
CVE-2022-2601-MCVE-2022-2601-MUNKNOWN——Microsoft2024-06-11
CVE-2022-3775-MCVE-2022-3775-MUNKNOWN——Microsoft2024-06-11
CVE-2024-29157HDF5 through 1.14.3 contains a heap buffer overflow in H5HG_read resulting in the corruption of the instruction pointer CRITICAL9.856%ileMicrosoft2024-05-14
CVE-2024-29159HDF5 through 1.14.3 contains a buffer overflow in H5Z__filter_scaleoffset resulting in the corruption of the instructionCRITICAL9.857%ileMicrosoft2024-05-14
CVE-2024-32615HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5Z__nbit_decompress_one_byte in H5Znbit.c caused bCRITICAL9.862%ileMicrosoft2024-05-14
CVE-2024-32621HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5HG_read in H5HG.c (called from H5VL__native_blob_CRITICAL9.857%ileMicrosoft2024-05-14
CVE-2024-33874HDF5 Library through 1.14.3 has a heap buffer overflow in H5O__mtime_new_encode in H5Omtime.c.CRITICAL9.857%ileMicrosoft2024-05-14
CVE-2024-4778Memory safety bugs present in Firefox 125. Some of these bugs showed evidence of memory corruption and we presume that wCRITICAL9.836%ileMicrosoft2024-05-14
CVE-2024-29164HDF5 through 1.14.3 contains a stack buffer overflow in H5R__decode_heap resulting in the corruption of the instruction CRITICAL9.855%ileMicrosoft2024-05-14
CVE-2024-32611HDF5 Library through 1.14.3 may use an uninitialized value in H5A__attr_release_table in H5Aint.c.CRITICAL9.858%ileMicrosoft2024-05-14
CVE-2024-4323Fluent Bit Memory Corruption VulnerabilityCRITICAL9.898%ileMicrosoft2024-05-14
CVE-2024-27053wifi: wilc1000: fix RCU usage in connect pathCRITICAL9.174%ileMicrosoft2024-05-14
CVE-2024-32622HDF5 Library through 1.14.3 contains a out-of-bounds read operation in H5FL_arr_malloc in H5FL.c (called from H5S_set_exCRITICAL9.159%ileMicrosoft2024-05-14
CVE-2024-32002GitHub: CVE-2024-32002 Recursive clones on case-insensitive filesystems that support symlinks are susceptible to RemoteCRITICAL9.098%ileMicrosoft2024-05-14
CVE-2024-29161HDF5 through 1.14.3 contains a heap buffer overflow in H5A__attr_release_table resulting in the corruption of the instruHIGH8.855%ileMicrosoft2024-05-14
CVE-2024-32617HDF5 Library through 1.14.3 contains a heap-based buffer over-read caused by the unsafe use of strdup in H5MM_xstrdup inHIGH8.854%ileMicrosoft2024-05-14
CVE-2024-32623HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5VM_array_fill in H5VM.c (called from H5S_select_eHIGH8.857%ileMicrosoft2024-05-14
CVE-2024-35854mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehashHIGH8.857%ileMicrosoft2024-05-14
CVE-2024-35955kprobes: Fix possible use-after-free issue on kprobe registrationHIGH8.864%ileMicrosoft2024-05-14
CVE-2021-47323watchdog: sc520_wdt: Fix possible use-after-free in wdt_turnoff()HIGH8.864%ileMicrosoft2024-05-14
CVE-2021-47324watchdog: Fix possible use-after-free in wdt_startup()HIGH8.864%ileMicrosoft2024-05-14
CVE-2024-4770When saving a page to PDF, certain font styles could have led to a potential use-after-free crash. This vulnerability afHIGH8.845%ileMicrosoft2024-05-14
CVE-2024-32605HDF5 Library through 1.14.3 has a heap-based buffer over-read in H5VM_memcpyvv in H5VM.c (called from H5D__compact_readvHIGH8.857%ileMicrosoft2024-05-14
CVE-2024-32614HDF5 Library through 1.14.3 has a SEGV in H5VM_memcpyvv in H5VM.c.HIGH8.857%ileMicrosoft2024-05-14
CVE-2024-33873HDF5 Library through 1.14.3 has a heap-based buffer overflow in H5D__scatter_mem in H5Dscatgath.c.HIGH8.857%ileMicrosoft2024-05-14
CVE-2024-33877HDF5 Library through 1.14.3 has a heap-based buffer overflow in H5T__conv_struct_opt in H5Tconv.c.HIGH8.857%ileMicrosoft2024-05-14
CVE-2024-2746Incomplete fix for CVE-2024-1929HIGH8.812%ileMicrosoft2024-05-14
CVE-2024-30006Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityHIGH8.875%ileMicrosoft2024-05-14
CVE-2024-30007Microsoft Brokering File System Elevation of Privilege VulnerabilityHIGH8.843%ileMicrosoft2024-05-14
CVE-2024-30009Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityHIGH8.875%ileMicrosoft2024-05-14
CVE-2024-30010Windows Hyper-V Remote Code Execution VulnerabilityHIGH8.882%ileMicrosoft2024-05-14
CVE-2024-30017Windows Hyper-V Remote Code Execution VulnerabilityHIGH8.878%ileMicrosoft2024-05-14
CVE-2024-30040Windows MSHTML Platform Security Feature Bypass VulnerabilityHIGH8.889%ileMicrosoft2024-05-14
CVE-2024-34402An issue was discovered in uriparser through 0.9.7. ComposeQueryEngine in UriQuery.c has an integer overflow via long keHIGH8.666%ileMicrosoft2024-05-14
CVE-2024-33602nscd: netgroup cache assumes NSS callback uses in-buffer stringsHIGH8.633%ileMicrosoft2024-05-14
CVE-2023-52755ksmbd: fix slab out of bounds write in smb_inherit_dacl()HIGH8.498%ileMicrosoft2024-05-14
CVE-2024-27407fs/ntfs3: Fixed overflow check in mi_enum_attr()HIGH8.420%ileMicrosoft2024-05-14
CVE-2024-35869smb: client: guarantee refcounted children from parent sessionHIGH8.417%ileMicrosoft2024-05-14
CVE-2024-26945crypto: iaa - Fix nr_cpus < nr_iaa caseHIGH8.415%ileMicrosoft2024-05-14
CVE-2024-3727Containers/image: digest type does not guarantee valid typeHIGH8.367%ileMicrosoft2024-05-14
CVE-2024-33599nscd: Stack-based buffer overflow in netgroup cacheHIGH8.168%ileMicrosoft2024-05-14
CVE-2024-36912Drivers: hv: vmbus: Track decrypted status in vmbus_gpadlHIGH8.157%ileMicrosoft2024-05-14
CVE-2024-36913Drivers: hv: vmbus: Leak pages if set_memory_encrypted() failsHIGH8.157%ileMicrosoft2024-05-14
CVE-2024-5564Libndp: buffer overflow in route information length fieldHIGH8.164%ileMicrosoft2024-05-14
CVE-2024-30020Windows Cryptographic Services Remote Code Execution VulnerabilityHIGH8.168%ileMicrosoft2024-05-14
CVE-2024-32004GitHub: CVE-2024-32004 Remote Code Execution while cloning special-crafted local repositoriesHIGH8.167%ileMicrosoft2024-05-14
CVE-2024-26929Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.HIGH7.8—Microsoft2024-05-14
CVE-2024-26930scsi: qla2xxx: Fix double free of the ha->vp_map pointerHIGH7.815%ileMicrosoft2024-05-14
CVE-2024-26983bootconfig: use memblock_free_late to free xbc memory to buddyHIGH7.814%ileMicrosoft2024-05-14
CVE-2024-27018netfilter: br_netfilter: skip conntrack input hook for promisc packetsHIGH7.817%ileMicrosoft2024-05-14
CVE-2024-27395net: openvswitch: Fix Use-After-Free in ovs_ct_exitHIGH7.816%ileMicrosoft2024-05-14
CVE-2024-35864smb: client: fix potential UAF in smb2_is_valid_lease_break()HIGH7.815%ileMicrosoft2024-05-14
CVE-2024-35861smb: client: fix potential UAF in cifs_signal_cifsd_for_reconnect()HIGH7.815%ileMicrosoft2024-05-14
CVE-2024-35863smb: client: fix potential UAF in is_valid_oplock_break()HIGH7.815%ileMicrosoft2024-05-14
CVE-2024-35862smb: client: fix potential UAF in smb2_is_network_name_deleted()HIGH7.815%ileMicrosoft2024-05-14
CVE-2023-52812drm/amd: check num of link levels when update pcie paramHIGH7.818%ileMicrosoft2024-05-14
CVE-2024-35929rcu/nocb: Fix WARN_ON_ONCE() in the rcu_nocb_bypass_lock()HIGH7.813%ileMicrosoft2024-05-14
CVE-2024-36012Bluetooth: msft: fix slab-use-after-free in msft_do_close()HIGH7.812%ileMicrosoft2024-05-14
CVE-2023-52751smb: client: fix use-after-free in smb2_query_info_compound()HIGH7.815%ileMicrosoft2024-05-14
CVE-2024-36898gpiolib: cdev: fix uninitialised kfifoHIGH7.814%ileMicrosoft2024-05-14
CVE-2024-26933USB: core: Fix deadlock in port "disable" sysfs attributeHIGH7.88%ileMicrosoft2024-05-14
CVE-2024-26934USB: core: Fix deadlock in usb_deauthorize_interface()HIGH7.89%ileMicrosoft2024-05-14
CVE-2024-26952ksmbd: fix potencial out-of-bounds when buffer offset is invalidHIGH7.854%ileMicrosoft2024-05-14
CVE-2024-26961mac802154: fix llsec key resources release in mac802154_llsec_key_delHIGH7.815%ileMicrosoft2024-05-14
CVE-2024-27022fork: defer linking file vma until vma is fully initializedHIGH7.819%ileMicrosoft2024-05-14
CVE-2024-27061crypto: sun8i-ce - Fix use after free in unprepareHIGH7.813%ileMicrosoft2024-05-14
CVE-2024-35801x86/fpu: Keep xfd_state in sync with MSR_IA32_XFDHIGH7.814%ileMicrosoft2024-05-14
CVE-2023-52649drm/vkms: Avoid reading beyond LUT arrayHIGH7.820%ileMicrosoft2024-05-14
CVE-2023-52760gfs2: Fix slab-use-after-free in gfs2_qd_deallocHIGH7.819%ileMicrosoft2024-05-14
CVE-2023-52752smb: client: fix use-after-free bug in cifs_debug_data_proc_show()HIGH7.816%ileMicrosoft2024-05-14
CVE-2022-48670peci: cpu: Fix use-after-free in adev_release()HIGH7.812%ileMicrosoft2024-05-14
CVE-2024-1929Local Root Exploit via Configuration Dictionary HIGH7.821%ileMicrosoft2024-05-14
CVE-2023-52733Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.HIGH7.8—Microsoft2024-05-14
CVE-2024-36921wifi: iwlwifi: mvm: guard against invalid STA ID on removalHIGH7.815%ileMicrosoft2024-05-14
CVE-2024-35949btrfs: make sure that WRITTEN is set on all metadata blocksHIGH7.815%ileMicrosoft2024-05-14
CVE-2024-29996Windows Common Log File System Driver Elevation of Privilege VulnerabilityHIGH7.888%ileMicrosoft2024-05-14
CVE-2024-30018Windows Kernel Elevation of Privilege VulnerabilityHIGH7.856%ileMicrosoft2024-05-14
CVE-2024-30060Azure Monitor Agent Elevation of Privilege VulnerabilityHIGH7.840%ileMicrosoft2024-05-14
CVE-2024-26238Microsoft PLUGScheduler Scheduled Task Elevation of Privilege VulnerabilityHIGH7.854%ileMicrosoft2024-05-14
CVE-2024-29994Microsoft Windows SCSI Class System File Elevation of Privilege VulnerabilityHIGH7.849%ileMicrosoft2024-05-14
CVE-2024-30025Windows Common Log File System Driver Elevation of Privilege VulnerabilityHIGH7.890%ileMicrosoft2024-05-14
CVE-2024-30027NTFS Elevation of Privilege VulnerabilityHIGH7.847%ileMicrosoft2024-05-14
CVE-2024-30028Win32k Elevation of Privilege VulnerabilityHIGH7.850%ileMicrosoft2024-05-14
CVE-2024-30030Win32k Elevation of Privilege VulnerabilityHIGH7.850%ileMicrosoft2024-05-14
CVE-2024-30031Windows CNG Key Isolation Service Elevation of Privilege VulnerabilityHIGH7.833%ileMicrosoft2024-05-14
CVE-2024-30032Windows DWM Core Library Elevation of Privilege VulnerabilityHIGH7.891%ileMicrosoft2024-05-14
CVE-2024-30035Windows DWM Core Library Elevation of Privilege VulnerabilityHIGH7.888%ileMicrosoft2024-05-14
CVE-2024-30038Win32k Elevation of Privilege VulnerabilityHIGH7.884%ileMicrosoft2024-05-14
CVE-2024-30042Microsoft Excel Remote Code Execution VulnerabilityHIGH7.880%ileMicrosoft2024-05-14
CVE-2024-30049Windows Win32 Kernel Subsystem Elevation of Privilege VulnerabilityHIGH7.850%ileMicrosoft2024-05-14
CVE-2024-30051Windows DWM Core Library Elevation of Privilege VulnerabilityHIGH7.892%ileMicrosoft2024-05-14
CVE-2024-2410Use after free in C++ protobufHIGH7.626%ileMicrosoft2024-05-14
CVE-2024-30047Dynamics 365 Customer Insights Spoofing VulnerabilityHIGH7.659%ileMicrosoft2024-05-14
CVE-2024-30048Dynamics 365 Customer Insights Spoofing VulnerabilityHIGH7.659%ileMicrosoft2024-05-14
CVE-2024-32609HDF5 Library through 1.14.3 allows stack consumption in the function H5E_printf_stack in H5Eint.c.HIGH7.553%ileMicrosoft2024-05-14
CVE-2024-33601nscd: netgroup cache may terminate daemon on memory allocation failureHIGH7.562%ileMicrosoft2024-05-14
CVE-2024-34069Werkzeug's improper usage of a pathname and improper CSRF protection results in the remote command executionHIGH7.588%ileMicrosoft2024-05-14
CVE-2024-34459An issue was discovered in xmllint (from libxml2) before 2.11.8 and 2.12.x before 2.12.7. Formatting error messages withHIGH7.582%ileMicrosoft2024-05-14
CVE-2024-4068Memory Exhaustion in bracesHIGH7.571%ileMicrosoft2024-05-14
CVE-2024-4777Memory safety bugs present in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10. Some of these bugs showed evidencHIGH7.542%ileMicrosoft2024-05-14
CVE-2024-4773When a network error occurred during page load, the prior content could have remained in view with a blank URL bar. ThisHIGH7.542%ileMicrosoft2024-05-14
CVE-2024-30251Denial of service when trying to parse malformed POST requests in aiohttpHIGH7.562%ileMicrosoft2024-05-14
CVE-2023-52696powerpc/powernv: Add a null pointer check in opal_powercap_init()HIGH7.554%ileMicrosoft2024-05-14
CVE-2023-6349Heap overflow in libvpxHIGH7.530%ileMicrosoft2024-05-14
CVE-2024-30014Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityHIGH7.572%ileMicrosoft2024-05-14
CVE-2024-30015Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityHIGH7.572%ileMicrosoft2024-05-14
CVE-2024-30022Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityHIGH7.572%ileMicrosoft2024-05-14
CVE-2024-30023Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityHIGH7.572%ileMicrosoft2024-05-14
CVE-2024-30024Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityHIGH7.572%ileMicrosoft2024-05-14
CVE-2024-30029Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityHIGH7.572%ileMicrosoft2024-05-14
CVE-2024-29165HDF5 through 1.14.3 contains a buffer overflow in H5Z__filter_fletcher32 resulting in the corruption of the instruction HIGH7.414%ileMicrosoft2024-05-14
CVE-2024-32613HDF5 Library through 1.14.3 contains a heap-based buffer over-read in the function H5HL__fl_deserialize in H5HLcache.c aHIGH7.416%ileMicrosoft2024-05-14
CVE-2024-32619HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5T_copy_reopen in H5T.c resulting in the corruptioHIGH7.415%ileMicrosoft2024-05-14
CVE-2024-29158HDF5 through 1.14.3 contains a stack buffer overflow in H5FL_arr_malloc resulting in the corruption of the instruction pHIGH7.413%ileMicrosoft2024-05-14
CVE-2024-29160HDF5 through 1.14.3 contains a heap buffer overflow in H5HG__cache_heap_deserialize resulting in the corruption of the iHIGH7.413%ileMicrosoft2024-05-14
CVE-2024-29162HDF5 through 1.13.3 and/or 1.14.2 contains a stack buffer overflow in H5HG_read resulting in denial of service or potentHIGH7.413%ileMicrosoft2024-05-14
CVE-2024-29163HDF5 through 1.14.3 contains a heap buffer overflow in H5T__bit_find resulting in the corruption of the instruction poinHIGH7.413%ileMicrosoft2024-05-14
CVE-2024-32612HDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5HL__fl_deserialize in H5HLcache.c resulting in tHIGH7.417%ileMicrosoft2024-05-14
CVE-2024-32616HDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5O__dtype_encode_helper in H5Odtype.c.HIGH7.417%ileMicrosoft2024-05-14
CVE-2024-32618HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5T__get_native_type in H5Tnative.c resulting in thHIGH7.415%ileMicrosoft2024-05-14
CVE-2024-32620HDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5F_addr_decode_len in H5Fint.c resulting in the cHIGH7.416%ileMicrosoft2024-05-14
CVE-2024-32624HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5T__ref_mem_setnull in H5Tref.c (called from H5T__HIGH7.447%ileMicrosoft2024-05-14
CVE-2024-32465Git's protections for cloning untrusted repositories can be bypassedHIGH7.356%ileMicrosoft2024-05-14
CVE-2024-30044Microsoft SharePoint Server Remote Code Execution VulnerabilityHIGH7.2100%ileMicrosoft2024-05-14
CVE-2024-36914drm/amd/display: Skip on writeback when it's not applicableHIGH7.116%ileMicrosoft2024-05-14
CVE-2024-36915nfc: llcp: fix nfc_llcp_setsockopt() unsafe copiesHIGH7.116%ileMicrosoft2024-05-14
CVE-2023-52827wifi: ath12k: fix possible out-of-bound read in ath12k_htt_pull_ppdu_stats()HIGH7.118%ileMicrosoft2024-05-14
CVE-2024-26982Squashfs: check the inode number is not the invalid value of zeroHIGH7.120%ileMicrosoft2024-05-14
CVE-2024-35849btrfs: fix information leak in btrfs_ioctl_logical_to_ino()HIGH7.117%ileMicrosoft2024-05-14
CVE-2024-35937wifi: cfg80211: check A-MSDU format more carefullyHIGH7.114%ileMicrosoft2024-05-14
CVE-2023-50230BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution VulnerabilityHIGH7.172%ileMicrosoft2024-05-14
CVE-2023-50229BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution VulnerabilityHIGH7.182%ileMicrosoft2024-05-14
CVE-2024-30056Microsoft Edge (Chromium-based) Information Disclosure VulnerabilityHIGH7.173%ileMicrosoft2024-05-14
CVE-2024-27020netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()HIGH7.012%ileMicrosoft2024-05-14
CVE-2024-36899gpiolib: cdev: Fix use after free in lineinfo_changed_notifyHIGH7.08%ileMicrosoft2024-05-14
CVE-2024-30033Windows Search Service Elevation of Privilege VulnerabilityHIGH7.058%ileMicrosoft2024-05-14
CVE-2024-36013Bluetooth: L2CAP: Fix slab-use-after-free in l2cap_connect()MEDIUM6.838%ileMicrosoft2024-05-14
CVE-2024-35843iommu/vt-d: Use device rbtree in iopf reporting pathMEDIUM6.812%ileMicrosoft2024-05-14
CVE-2024-29997Windows Mobile Broadband Driver Remote Code Execution VulnerabilityMEDIUM6.857%ileMicrosoft2024-05-14
CVE-2024-29998Windows Mobile Broadband Driver Remote Code Execution VulnerabilityMEDIUM6.857%ileMicrosoft2024-05-14
CVE-2024-29999Windows Mobile Broadband Driver Remote Code Execution VulnerabilityMEDIUM6.857%ileMicrosoft2024-05-14
CVE-2024-30000Windows Mobile Broadband Driver Remote Code Execution VulnerabilityMEDIUM6.857%ileMicrosoft2024-05-14
CVE-2024-30001Windows Mobile Broadband Driver Remote Code Execution VulnerabilityMEDIUM6.858%ileMicrosoft2024-05-14
CVE-2024-30002Windows Mobile Broadband Driver Remote Code Execution VulnerabilityMEDIUM6.857%ileMicrosoft2024-05-14
CVE-2024-30003Windows Mobile Broadband Driver Remote Code Execution VulnerabilityMEDIUM6.857%ileMicrosoft2024-05-14
CVE-2024-30004Windows Mobile Broadband Driver Remote Code Execution VulnerabilityMEDIUM6.856%ileMicrosoft2024-05-14
CVE-2024-30005Windows Mobile Broadband Driver Remote Code Execution VulnerabilityMEDIUM6.857%ileMicrosoft2024-05-14
CVE-2024-30012Windows Mobile Broadband Driver Remote Code Execution VulnerabilityMEDIUM6.855%ileMicrosoft2024-05-14
CVE-2024-30021Windows Mobile Broadband Driver Remote Code Execution VulnerabilityMEDIUM6.854%ileMicrosoft2024-05-14
CVE-2024-35887ax25: fix use-after-free bugs caused by ax25_ds_del_timerMEDIUM6.714%ileMicrosoft2024-05-14
CVE-2023-52837nbd: fix uaf in nbd_openMEDIUM6.716%ileMicrosoft2024-05-14
CVE-2024-27282An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the Ruby regex compiler it iMEDIUM6.647%ileMicrosoft2024-05-14
CVE-2024-35866smb: client: fix potential UAF in cifs_dump_full_key()MEDIUM6.614%ileMicrosoft2024-05-14
CVE-2024-35868smb: client: fix potential UAF in cifs_stats_proc_write()MEDIUM6.615%ileMicrosoft2024-05-14
CVE-2024-35867smb: client: fix potential UAF in cifs_stats_proc_show()MEDIUM6.618%ileMicrosoft2024-05-14
CVE-2023-52670rpmsg: virtio: Free driver_override when rpmsg_remove()MEDIUM6.621%ileMicrosoft2024-05-14
CVE-2024-35826block: Fix page refcounts for unaligned buffers in __bio_release_pages()MEDIUM6.611%ileMicrosoft2024-05-14
CVE-2024-26944btrfs: zoned: fix use-after-free in do_zone_finish()MEDIUM6.614%ileMicrosoft2024-05-14
CVE-2024-1930No Limit on Number of Open Sessions / Bad Session Close BehaviourMEDIUM6.522%ileMicrosoft2024-05-14
CVE-2024-27028spi: spi-mt65xx: Fix NULL pointer access in interrupt handlerMEDIUM6.564%ileMicrosoft2024-05-14
CVE-2024-27982The team has identified a critical vulnerability in the http server of the most recent version of Node where malformed hMEDIUM6.564%ileMicrosoft2024-05-14
CVE-2023-43040IBM Spectrum Fusion HCI improper access controlMEDIUM6.583%ileMicrosoft2024-05-14
CVE-2024-30011Windows Hyper-V Denial of Service VulnerabilityMEDIUM6.584%ileMicrosoft2024-05-14
CVE-2024-30019DHCP Server Service Denial of Service VulnerabilityMEDIUM6.584%ileMicrosoft2024-05-14
CVE-2024-30053Azure Migrate Cross-Site Scripting VulnerabilityMEDIUM6.558%ileMicrosoft2024-05-14
CVE-2024-30036Windows Deployment Services Information Disclosure VulnerabilityMEDIUM6.582%ileMicrosoft2024-05-14
CVE-2024-30043Microsoft SharePoint Server Information Disclosure VulnerabilityMEDIUM6.599%ileMicrosoft2024-05-14
CVE-2024-30054Microsoft Power BI Client JavaScript SDK Information Disclosure VulnerabilityMEDIUM6.576%ileMicrosoft2024-05-14
CVE-2024-35853mlxsw: spectrum_acl_tcam: Fix memory leak during rehashMEDIUM6.451%ileMicrosoft2024-05-14
CVE-2024-24787Arbitrary code execution during build on Darwin in cmd/goMEDIUM6.452%ileMicrosoft2024-05-14
CVE-2024-36039PyMySQL through 1.1.0 allows SQL injection if used with untrusted JSON input because keys are not escaped by escape_dictMEDIUM6.349%ileMicrosoft2024-05-14
CVE-2024-27032f2fs: fix to avoid potential panic during recoveryMEDIUM6.321%ileMicrosoft2024-05-14
CVE-2024-27005interconnect: Don't access req_list while it's being manipulatedMEDIUM6.37%ileMicrosoft2024-05-14
CVE-2024-30045.NET and Visual Studio Remote Code Execution VulnerabilityMEDIUM6.366%ileMicrosoft2024-05-14
CVE-2024-34250A heap buffer overflow vulnerability was discovered in Bytecode Alliance wasm-micro-runtime v2.0.0 which allows a remoteMEDIUM6.226%ileMicrosoft2024-05-14
CVE-2024-35799drm/amd/display: Prevent crash when disable streamMEDIUM6.214%ileMicrosoft2024-05-14
CVE-2024-4418Libvirt: stack use-after-free in virnetclientioeventloop()MEDIUM6.239%ileMicrosoft2024-05-14
CVE-2024-36910uio_hv_generic: Don't free decrypted memoryMEDIUM6.215%ileMicrosoft2024-05-14
CVE-2024-26954ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()MEDIUM6.116%ileMicrosoft2024-05-14
CVE-2024-35794dm-raid: really frozen sync_thread during suspendMEDIUM6.113%ileMicrosoft2024-05-14
CVE-2024-30059Microsoft Intune for Android Mobile Application Management Tampering VulnerabilityMEDIUM6.146%ileMicrosoft2024-05-14
CVE-2024-1298Integer Overflow caused by divide by zero during S3 suspensionMEDIUM6.012%ileMicrosoft2024-05-14
CVE-2024-24788Malformed DNS message can cause infinite loop in netMEDIUM5.960%ileMicrosoft2024-05-14
CVE-2024-34403An issue was discovered in uriparser through 0.9.7. ComposeQueryMallocExMm in UriQuery.c has an integer overflow via a lMEDIUM5.968%ileMicrosoft2024-05-14
CVE-2024-4772An HTTP digest authentication nonce value was generated using `rand()` which could lead to predictable values. This vulnMEDIUM5.912%ileMicrosoft2024-05-14
CVE-2024-4775An iterator stop condition was missing when handling WASM code in the built-in profiler, potentially leading to invalid MEDIUM5.912%ileMicrosoft2024-05-14
CVE-2024-33394An issue in kubevirt kubevirt v1.2.0 and before allows a local attacker to execute arbitrary code via a crafted command MEDIUM5.925%ileMicrosoft2024-05-14
CVE-2024-26306iPerf3 before 3.17 when used with OpenSSL before 3.2.0 as a server with RSA authentication allows a timing side channel MEDIUM5.962%ileMicrosoft2024-05-14
CVE-2024-33600nscd: Null pointer crashes after notfound responseMEDIUM5.966%ileMicrosoft2024-05-14
CVE-2024-30046Visual Studio Denial of Service VulnerabilityMEDIUM5.975%ileMicrosoft2024-05-14
CVE-2024-32610HDF5 Library through 1.14.3 has a SEGV in H5T_close_real in H5T.c resulting in a corrupted instruction pointer.MEDIUM5.714%ileMicrosoft2024-05-14
CVE-2024-33876HDF5 Library through 1.14.3 has a heap buffer overflow in H5S__point_deserialize in H5Spoint.c.MEDIUM5.714%ileMicrosoft2024-05-14
CVE-2024-35808md/dm-raid: don't call md_reap_sync_thread() directlyMEDIUM5.77%ileMicrosoft2024-05-14
CVE-2024-29166HDF5 through 1.14.3 contains a buffer overflow in H5O__linfo_decode resulting in the corruption of the instruction pointMEDIUM5.712%ileMicrosoft2024-05-14
CVE-2024-32607HDF5 Library through 1.14.3 has a SEGV in H5A__close in H5Aint.c resulting in the corruption of the instruction pointer.MEDIUM5.714%ileMicrosoft2024-05-14
CVE-2024-33875HDF5 Library through 1.14.3 has a heap-based buffer overflow in H5O__layout_encode in H5Olayout.c resulting in the corruMEDIUM5.714%ileMicrosoft2024-05-14
CVE-2024-35195Requests `Session` object does not verify requests after making first request with verify=FalseMEDIUM5.627%ileMicrosoft2024-05-14
CVE-2024-26949drm/amdgpu/pm: Fix NULL pointer dereference when get power limitMEDIUM5.516%ileMicrosoft2024-05-14
CVE-2024-26953net: esp: fix bad handling of pages from page_poolMEDIUM5.514%ileMicrosoft2024-05-14
CVE-2024-26969clk: qcom: gcc-ipq8074: fix terminating of frequency table arraysMEDIUM5.516%ileMicrosoft2024-05-14
CVE-2024-26977pci_iounmap(): Fix MMIO mapping leakMEDIUM5.513%ileMicrosoft2024-05-14
CVE-2024-26984nouveau: fix instmem race condition around ptr storesMEDIUM5.510%ileMicrosoft2024-05-14
CVE-2024-26990KVM: x86/mmu: Write-protect L2 SPTEs in TDP MMU when clearing dirty statusMEDIUM5.513%ileMicrosoft2024-05-14
CVE-2024-27002clk: mediatek: Do a runtime PM get on controllers during probeMEDIUM5.57%ileMicrosoft2024-05-14
CVE-2024-27063leds: trigger: netdev: Fix kernel panic on interface rename trig notifyMEDIUM5.513%ileMicrosoft2024-05-14
CVE-2024-27388SUNRPC: fix some memleaks in gssx_dec_option_arrayMEDIUM5.522%ileMicrosoft2024-05-14
CVE-2024-27418net: mctp: take ownership of skb in mctp_local_outputMEDIUM5.512%ileMicrosoft2024-05-14
CVE-2024-27435nvme: fix reconnection fail due to reserved tag allocationMEDIUM5.57%ileMicrosoft2024-05-14
CVE-2024-35917s390/bpf: Fix bpf_plt pointer arithmeticMEDIUM5.511%ileMicrosoft2024-05-14
CVE-2024-35978Bluetooth: Fix memory leak in hci_req_sync_complete()MEDIUM5.520%ileMicrosoft2024-05-14
CVE-2024-35990dma: xilinx_dpdma: Fix lockingMEDIUM5.511%ileMicrosoft2024-05-14
CVE-2024-35992phy: marvell: a3700-comphy: Fix out of bounds readMEDIUM5.512%ileMicrosoft2024-05-14
CVE-2024-36009ax25: Fix netdev refcount issueMEDIUM5.513%ileMicrosoft2024-05-14
CVE-2024-36893usb: typec: tcpm: Check for port partner validity before consuming itMEDIUM5.514%ileMicrosoft2024-05-14
CVE-2024-36901ipv6: prevent NULL dereference in ip6_output()MEDIUM5.518%ileMicrosoft2024-05-14
CVE-2024-36925swiotlb: initialise restricted pool list_head when SWIOTLB_DYNAMIC=yMEDIUM5.514%ileMicrosoft2024-05-14
CVE-2024-36930spi: fix null pointer dereference within spi_syncMEDIUM5.514%ileMicrosoft2024-05-14
CVE-2023-52648drm/vmwgfx: Unmap the surface before resetting it on a plane stateMEDIUM5.513%ileMicrosoft2024-05-14
CVE-2022-48669powerpc/pseries: Fix potential memleak in papr_get_attr()MEDIUM5.519%ileMicrosoft2024-05-14
CVE-2024-27041drm/amd/display: fix NULL checks for adev->dm.dc in amdgpu_dm_fini()MEDIUM5.519%ileMicrosoft2024-05-14
CVE-2021-47432lib/generic-radix-tree.c: Don't overflow in peek()MEDIUM5.515%ileMicrosoft2024-05-14
CVE-2024-27062nouveau: lock the client object tree.MEDIUM5.57%ileMicrosoft2024-05-14
CVE-2024-35999smb3: missing lock when picking channelMEDIUM5.56%ileMicrosoft2024-05-14
CVE-2024-26948drm/amd/display: Add a dc_state NULL check in dc_state_releaseMEDIUM5.510%ileMicrosoft2024-05-14
CVE-2024-36924scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()MEDIUM5.59%ileMicrosoft2024-05-14
CVE-2024-35784btrfs: fix deadlock with fiemap and extent lockingMEDIUM5.57%ileMicrosoft2024-05-14
CVE-2024-35931drm/amdgpu: Skip do PCI error slot reset during RAS recoveryMEDIUM5.58%ileMicrosoft2024-05-14
CVE-2023-52737btrfs: lock the inode in shared mode before starting fiemapMEDIUM5.512%ileMicrosoft2024-05-14
CVE-2024-35865smb: client: fix potential UAF in smb2_is_valid_oplock_break()MEDIUM5.514%ileMicrosoft2024-05-14
CVE-2023-52757smb: client: fix potential deadlock when releasing midsMEDIUM5.58%ileMicrosoft2024-05-14
CVE-2023-52653SUNRPC: fix a memleak in gss_import_v2_contextMEDIUM5.520%ileMicrosoft2024-05-14
CVE-2024-36917block: fix overflow in blk_ioctl_discard()MEDIUM5.513%ileMicrosoft2024-05-14
CVE-2024-26938drm/i915/bios: Tolerate devdata==NULL in intel_bios_encoder_supports_dp_dual_mode()MEDIUM5.513%ileMicrosoft2024-05-14
CVE-2024-27035f2fs: compress: fix to guarantee persisting compressed blocks by CPMEDIUM5.519%ileMicrosoft2024-05-14
CVE-2024-27389pstore: inode: Only d_invalidate() is neededMEDIUM5.513%ileMicrosoft2024-05-14
CVE-2023-52682f2fs: fix to wait on block writeback for post_read caseMEDIUM5.514%ileMicrosoft2024-05-14
CVE-2023-52700tipc: fix kernel warning when sending SYN messageMEDIUM5.512%ileMicrosoft2024-05-14
CVE-2023-52761riscv: VMAP_STACK overflow detection thread-safeMEDIUM5.519%ileMicrosoft2024-05-14
CVE-2023-52831cpu/hotplug: Don't offline the last non-isolated CPUMEDIUM5.515%ileMicrosoft2024-05-14
CVE-2024-35932drm/vc4: don't check if plane->state->fb == state->fbMEDIUM5.512%ileMicrosoft2024-05-14
CVE-2024-35956btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operationsMEDIUM5.514%ileMicrosoft2024-05-14
CVE-2024-36000mm/hugetlb: fix missing hugetlb_lock for resv unchargeMEDIUM5.513%ileMicrosoft2024-05-14
CVE-2024-35803x86/efistub: Call mixed mode boot services on the firmware's stackMEDIUM5.513%ileMicrosoft2024-05-14
CVE-2024-35904selinux: avoid dereference of garbage after mount failureMEDIUM5.513%ileMicrosoft2024-05-14
CVE-2024-35946wifi: rtw89: fix null pointer access when abort scanMEDIUM5.512%ileMicrosoft2024-05-14
CVE-2024-35968pds_core: Fix pdsc_check_pci_health function to use work threadMEDIUM5.55%ileMicrosoft2024-05-14
CVE-2024-27010net/sched: Fix mirred deadlock on device recursionMEDIUM5.57%ileMicrosoft2024-05-14
CVE-2022-48673net/smc: Fix possible access to freed memory in link clearMEDIUM5.540%ileMicrosoft2024-05-14
CVE-2024-26940drm/vmwgfx: Create debugfs ttm_resource_manager entry only if neededMEDIUM5.514%ileMicrosoft2024-05-14
CVE-2024-26943nouveau/dmem: handle kcalloc() allocation failureMEDIUM5.513%ileMicrosoft2024-05-14
CVE-2024-26947ARM: 9359/1: flush: check if the folio is reserved for no-mapping addressesMEDIUM5.514%ileMicrosoft2024-05-14
CVE-2024-26950wireguard: netlink: access device through ctx instead of peerMEDIUM5.515%ileMicrosoft2024-05-14
CVE-2024-26978serial: max310x: fix NULL pointer dereference in I2C instantiationMEDIUM5.513%ileMicrosoft2024-05-14
CVE-2024-26986drm/amdkfd: Fix memory leak in create_process failureMEDIUM5.514%ileMicrosoft2024-05-14
CVE-2024-26987mm/memory-failure: fix deadlock when hugetlb_optimize_vmemmap is enabledMEDIUM5.57%ileMicrosoft2024-05-14
CVE-2024-27012netfilter: nf_tables: restore set elements when delete set failsMEDIUM5.518%ileMicrosoft2024-05-14
CVE-2024-27013tun: limit printing rate when illegal packet received by tun devMEDIUM5.519%ileMicrosoft2024-05-14
CVE-2024-27014net/mlx5e: Prevent deadlock while disabling aRFSMEDIUM5.57%ileMicrosoft2024-05-14
CVE-2024-27015netfilter: flowtable: incorrect pppoe tupleMEDIUM5.514%ileMicrosoft2024-05-14
CVE-2024-27016netfilter: flowtable: validate pppoe headerMEDIUM5.516%ileMicrosoft2024-05-14
CVE-2024-27017netfilter: nft_set_pipapo: walk over current view on netlink dumpMEDIUM5.520%ileMicrosoft2024-05-14
CVE-2024-27037clk: zynq: Prevent null pointer dereference caused by kmalloc failureMEDIUM5.519%ileMicrosoft2024-05-14
CVE-2024-27038clk: Fix clk_core_get NULL dereferenceMEDIUM5.522%ileMicrosoft2024-05-14
CVE-2024-27050libbpf: Use OPTS_SET() macro in bpf_xdp_query()MEDIUM5.519%ileMicrosoft2024-05-14
CVE-2024-27066virtio: packed: fix unmap leak for indirect desc tableMEDIUM5.513%ileMicrosoft2024-05-14
CVE-2024-27076media: imx: csc/scaler: fix v4l2_ctrl_handler memory leakMEDIUM5.521%ileMicrosoft2024-05-14
CVE-2024-27393xen-netfront: Add missing skb_mark_for_recycleMEDIUM5.517%ileMicrosoft2024-05-14
CVE-2024-35912wifi: iwlwifi: mvm: rfi: fix potential response leaksMEDIUM5.511%ileMicrosoft2024-05-14
CVE-2024-35972bnxt_en: Fix possible memory leak in bnxt_rdma_aux_device_init()MEDIUM5.513%ileMicrosoft2024-05-14
CVE-2024-35982batman-adv: Avoid infinite loop trying to resize local TTMEDIUM5.518%ileMicrosoft2024-05-14
CVE-2024-35984i2c: smbus: fix NULL function pointer dereferenceMEDIUM5.517%ileMicrosoft2024-05-14
CVE-2024-35997HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-upMEDIUM5.57%ileMicrosoft2024-05-14
CVE-2024-36008ipv4: check for NULL idev in ip_route_use_hint()MEDIUM5.512%ileMicrosoft2024-05-14
CVE-2024-36023Julia Lawall reported this null pointer dereference this should fix it.MEDIUM5.513%ileMicrosoft2024-05-14
CVE-2024-36891maple_tree: fix mas_empty_area_rev() null pointer dereferenceMEDIUM5.514%ileMicrosoft2024-05-14
CVE-2024-36897drm/amd/display: Atom Integrated System Info v2_2 for DCN35MEDIUM5.514%ileMicrosoft2024-05-14
CVE-2024-36902ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()MEDIUM5.521%ileMicrosoft2024-05-14
CVE-2024-36926powerpc/pseries/iommu: LPAR panics during boot up with a frozen PEMEDIUM5.515%ileMicrosoft2024-05-14
CVE-2024-36938bpf skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueueMEDIUM5.516%ileMicrosoft2024-05-14
CVE-2023-52654io_uring/af_unix: disable sending io_uring over socketsMEDIUM5.556%ileMicrosoft2024-05-14
CVE-2024-27059USB: usb-storage: Prevent divide-by-0 error in isd200_ata_commandMEDIUM5.516%ileMicrosoft2024-05-14
CVE-2024-4693Qemu-kvm: virtio-pci: improper release of configure vector leads to guest triggerable crashMEDIUM5.525%ileMicrosoft2024-05-14
CVE-2024-27056wifi: iwlwifi: mvm: ensure offloading TID queue existsMEDIUM5.515%ileMicrosoft2024-05-14
CVE-2023-52660media: rkisp1: Fix IRQ handling due to shared interruptsMEDIUM5.512%ileMicrosoft2024-05-14
CVE-2023-52671drm/amd/display: Fix hang/underflow when transitioning to ODM4:1MEDIUM5.513%ileMicrosoft2024-05-14
CVE-2023-52676bpf: Guard stack limits against 32bit overflowMEDIUM5.515%ileMicrosoft2024-05-14
CVE-2023-52732ceph: blocklist the kclient when receiving corrupted snap traceMEDIUM5.541%ileMicrosoft2024-05-14
CVE-2024-35839netfilter: bridge: replace physindev with physinif in nf_bridge_infoMEDIUM5.513%ileMicrosoft2024-05-14
CVE-2024-35875x86/coco: Require seeding RNG with RDRAND on CoCo systemsMEDIUM5.515%ileMicrosoft2024-05-14
CVE-2024-35924usb: typec: ucsi: Limit read size on v1.2MEDIUM5.511%ileMicrosoft2024-05-14
CVE-2024-35939dma-direct: Leak pages on dma_set_decrypted() failureMEDIUM5.512%ileMicrosoft2024-05-14
CVE-2024-35951drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()MEDIUM5.514%ileMicrosoft2024-05-14
CVE-2024-35965Bluetooth: L2CAP: Fix not validating setsockopt user inputMEDIUM5.515%ileMicrosoft2024-05-14
CVE-2024-35971net: ks8851: Handle softirqs at the end of IRQ thread to fix hangMEDIUM5.512%ileMicrosoft2024-05-14
CVE-2024-35995ACPI: CPPC: Use access_width over bit_width for system memory accessesMEDIUM5.511%ileMicrosoft2024-05-14
CVE-2024-36021net: hns3: fix kernel crash when devlink reload during pf initializationMEDIUM5.513%ileMicrosoft2024-05-14
CVE-2024-36900net: hns3: fix kernel crash when devlink reload during initializationMEDIUM5.513%ileMicrosoft2024-05-14
CVE-2024-36909Drivers: hv: vmbus: Don't free ring buffers that couldn't be re-encryptedMEDIUM5.513%ileMicrosoft2024-05-14
CVE-2024-36911hv_netvsc: Don't free decrypted memoryMEDIUM5.513%ileMicrosoft2024-05-14
CVE-2024-36951drm/amdkfd: range check cp bad op exception interruptsMEDIUM5.513%ileMicrosoft2024-05-14
CVE-2024-27400drm/amdgpu: once more fix the call oder in amdgpu_ttm_move() v2MEDIUM5.514%ileMicrosoft2024-05-14
CVE-2024-35945net: phy: phy_device: Prevent nullptr exceptions on ISRMEDIUM5.512%ileMicrosoft2024-05-14
CVE-2024-35998smb3: fix lock ordering potential deadlock in cifs_sync_mid_resultMEDIUM5.56%ileMicrosoft2024-05-14
CVE-2024-36903ipv6: Fix potential uninit-value access in __ip6_make_skb()MEDIUM5.514%ileMicrosoft2024-05-14
CVE-2024-26962dm-raid456, md/raid456: fix a deadlock for dm-raid456 while io concurrent with reshapeMEDIUM5.57%ileMicrosoft2024-05-14
CVE-2024-27079iommu/vt-d: Fix NULL domain on device releaseMEDIUM5.516%ileMicrosoft2024-05-14
CVE-2023-52664net: atlantic: eliminate double free in error handling logicMEDIUM5.520%ileMicrosoft2024-05-14
CVE-2023-52857drm/mediatek: Fix coverity issue with unintentional integer overflowMEDIUM5.515%ileMicrosoft2024-05-14
CVE-2022-48703thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTRMEDIUM5.514%ileMicrosoft2024-05-14
CVE-2022-48706vdpa: ifcvf: Do proper cleanup if IFCVF init failsMEDIUM5.511%ileMicrosoft2024-05-14
CVE-2024-30008Windows DWM Core Library Information Disclosure VulnerabilityMEDIUM5.553%ileMicrosoft2024-05-14
CVE-2024-30016Windows Cryptographic Services Information Disclosure VulnerabilityMEDIUM5.553%ileMicrosoft2024-05-14
CVE-2024-30034Windows Cloud Files Mini Filter Driver Information Disclosure VulnerabilityMEDIUM5.593%ileMicrosoft2024-05-14
CVE-2024-30037Windows Common Log File System Driver Elevation of Privilege VulnerabilityMEDIUM5.592%ileMicrosoft2024-05-14
CVE-2024-30039Windows Remote Access Connection Manager Information Disclosure VulnerabilityMEDIUM5.551%ileMicrosoft2024-05-14
CVE-2023-4133CVE-2023-4133MEDIUM5.514%ileMicrosoft2024-05-14
CVE-2023-51592BlueZ Audio Profile AVRCP parse_media_folder Out-Of-Bounds Read Information Disclosure VulnerabilityMEDIUM5.453%ileMicrosoft2024-05-14
CVE-2024-34064Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filterMEDIUM5.459%ileMicrosoft2024-05-14
CVE-2023-51580BlueZ Audio Profile AVRCP avrcp_parse_attribute_list Out-Of-Bounds Read Information Disclosure VulnerabilityMEDIUM5.458%ileMicrosoft2024-05-14
CVE-2023-51589BlueZ Audio Profile AVRCP parse_media_element Out-Of-Bounds Read Information Disclosure VulnerabilityMEDIUM5.453%ileMicrosoft2024-05-14
CVE-2024-30050Windows Mark of the Web Security Feature Bypass VulnerabilityMEDIUM5.496%ileMicrosoft2024-05-14
CVE-2024-30055Microsoft Edge (Chromium-based) Spoofing VulnerabilityMEDIUM5.447%ileMicrosoft2024-05-14
CVE-2024-30041Microsoft Bing Search Spoofing VulnerabilityMEDIUM5.451%ileMicrosoft2024-05-14
CVE-2024-35857icmp: prevent possible NULL dereferences from icmp_build_probe()MEDIUM5.356%ileMicrosoft2024-05-14
CVE-2021-47482net: batman-adv: fix error handlingMEDIUM5.351%ileMicrosoft2024-05-14
CVE-2024-35878of: module: prevent NULL pointer dereference in vsnprintf()MEDIUM5.353%ileMicrosoft2024-05-14
CVE-2024-27436ALSA: usb-audio: Stop parsing channels bits when all channels are found.MEDIUM5.346%ileMicrosoft2024-05-14
CVE-2024-35176REXML contains a denial of service vulnerabilityMEDIUM5.380%ileMicrosoft2024-05-14
CVE-2024-35823vt: fix unicode buffer corruption when deleting charactersMEDIUM5.356%ileMicrosoft2024-05-14
CVE-2024-4603Excessive time spent checking DSA keys and parametersMEDIUM5.363%ileMicrosoft2024-05-14
CVE-2024-34397An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a GDBus-based client subsMEDIUM5.252%ileMicrosoft2024-05-14
CVE-2024-36922wifi: iwlwifi: read txq->read_ptr under lockMEDIUM5.115%ileMicrosoft2024-05-14
CVE-2024-32886Vitess vulnerable to infinite memory consumption and vtgate crashMEDIUM4.951%ileMicrosoft2024-05-14
CVE-2024-34062tqdm CLI arguments injection attackMEDIUM4.836%ileMicrosoft2024-05-14
CVE-2023-52749spi: Fix null dereference on suspendMEDIUM4.78%ileMicrosoft2024-05-14
CVE-2024-36024drm/amd/display: Disable idle reallow as part of command/gpint executionMEDIUM4.76%ileMicrosoft2024-05-14
CVE-2024-27408dmaengine: dw-edma: eDMA: Add sync read before starting the DMA transfer in remote setupMEDIUM4.78%ileMicrosoft2024-05-14
CVE-2024-36949amd/amdkfd: sync all devices to wait all processes being evictedMEDIUM4.713%ileMicrosoft2024-05-14
CVE-2024-36927ipv4: Fix uninit-value access in __ip_make_skb()MEDIUM4.76%ileMicrosoft2024-05-14
CVE-2024-27019netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()MEDIUM4.710%ileMicrosoft2024-05-14
CVE-2024-27058tmpfs: fix race on handling dquot rbtreeMEDIUM4.739%ileMicrosoft2024-05-14
CVE-2024-27281An issue was discovered in RDoc 6.3.3 through 6.6.2 as distributed in Ruby 3.x through 3.3.0. When parsing .rdoc_optionsMEDIUM4.573%ileMicrosoft2024-05-14
CVE-2024-35870smb: client: fix UAF in smb2_reconnect_server()MEDIUM4.414%ileMicrosoft2024-05-14
CVE-2024-4317PostgreSQL pg_stats_ext and pg_stats_ext_exprs lack authorization checksMEDIUM4.350%ileMicrosoft2024-05-14
CVE-2024-32020Cloning local Git repository by untrusted user allows the untrusted user to modify objects in the cloned repository at wLOW3.941%ileMicrosoft2024-05-14
CVE-2024-32021Local Git clone may hardlink arbitrary user-readable files into the new repository's "objects/" directoryLOW3.958%ileMicrosoft2024-05-14
CVE-2024-4853Mismatched Memory Management Routines in editcapLOW3.634%ileMicrosoft2024-05-14
CVE-2024-4855Use After Free in editcapLOW3.630%ileMicrosoft2024-05-14
CVE-2023-52656io_uring: drop any code related to SCM_RIGHTSLOW3.323%ileMicrosoft2024-05-14
CVE-2024-36920scsi: mpi3mr: Avoid memcpy field-spanning write WARNINGLOW3.314%ileMicrosoft2024-05-14
CVE-2024-26935scsi: core: Fix unremoved procfs host directory regressionUNKNOWN—16%ileMicrosoft2024-05-14
CVE-2024-26946kprobes/x86: Use copy_from_kernel_nofault() to read from unsafe addressUNKNOWN—15%ileMicrosoft2024-05-14
CVE-2024-26951wireguard: netlink: check for dangling peer via is_dead instead of empty listUNKNOWN—14%ileMicrosoft2024-05-14
CVE-2024-26963usb: dwc3-am62: fix module unload/reload behaviorUNKNOWN—13%ileMicrosoft2024-05-14
CVE-2024-26975powercap: intel_rapl: Fix a NULL pointer dereferenceUNKNOWN—14%ileMicrosoft2024-05-14
CVE-2024-26988init/main.c: Fix potential static_command_line memory overflowUNKNOWN—20%ileMicrosoft2024-05-14
CVE-2024-27001comedi: vmk80xx: fix incomplete endpoint checkingUNKNOWN—20%ileMicrosoft2024-05-14
CVE-2024-27009s390/cio: fix race condition during online processingUNKNOWN—7%ileMicrosoft2024-05-14
CVE-2024-27026vmxnet3: Fix missing reserved tailroomUNKNOWN—19%ileMicrosoft2024-05-14
CVE-2024-27031NFS: Fix nfs_netfs_issue_read() xarray locking for writeback interruptUNKNOWN—10%ileMicrosoft2024-05-14
CVE-2024-27045drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'UNKNOWN—23%ileMicrosoft2024-05-14
CVE-2024-27051cpufreq: brcmstb-avs-cpufreq: add check for cpufreq_cpu_get's return valueUNKNOWN—20%ileMicrosoft2024-05-14
CVE-2024-27075media: dvb-frontends: avoid stack overflow warnings with clangUNKNOWN—26%ileMicrosoft2024-05-14
CVE-2024-27077media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entityUNKNOWN—21%ileMicrosoft2024-05-14
CVE-2024-35786drm/nouveau: fix stale locked mutex in nouveau_gem_ioctl_pushbufUNKNOWN—7%ileMicrosoft2024-05-14
CVE-2024-35792crypto: rk3288 - Fix use after free in unprepareUNKNOWN—13%ileMicrosoft2024-05-14
CVE-2024-35795drm/amdgpu: fix deadlock while reading mqd from debugfsUNKNOWN—7%ileMicrosoft2024-05-14
CVE-2024-35816firewire: ohci: prevent leak of left-over IRQ on unbindUNKNOWN—13%ileMicrosoft2024-05-14
CVE-2024-35827io_uring/net: fix overflow check in io_recvmsg_mshot_prep()UNKNOWN—11%ileMicrosoft2024-05-14
CVE-2024-35852mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash workUNKNOWN—17%ileMicrosoft2024-05-14
CVE-2023-52650drm/tegra: dsi: Add missing check for of_find_device_by_nodeUNKNOWN—23%ileMicrosoft2024-05-14
CVE-2023-52659x86/mm: Ensure input to pfn_to_kaddr() is treated as a 64-bit typeUNKNOWN—12%ileMicrosoft2024-05-14
CVE-2023-52661drm/tegra: rgb: Fix missing clk_put() in the error handling paths of tegra_dc_rgb_probe()UNKNOWN—13%ileMicrosoft2024-05-14
CVE-2023-52802Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.UNKNOWN——Microsoft2024-05-14
CVE-2024-27011netfilter: nf_tables: fix memleak in map from abort pathUNKNOWN—14%ileMicrosoft2024-05-14
CVE-2024-26939drm/i915/vma: Fix UAF on destroy against retire raceUNKNOWN—15%ileMicrosoft2024-05-14
CVE-2024-26965clk: qcom: mmcc-msm8974: fix terminating of frequency table arraysUNKNOWN—17%ileMicrosoft2024-05-14
CVE-2024-26966clk: qcom: mmcc-apq8084: fix terminating of frequency table arraysUNKNOWN—17%ileMicrosoft2024-05-14
CVE-2024-26968clk: qcom: gcc-ipq9574: fix terminating of frequency table arraysUNKNOWN—13%ileMicrosoft2024-05-14
CVE-2024-26973fat: fix uninitialized field in nostale filehandlesUNKNOWN—17%ileMicrosoft2024-05-14
CVE-2024-26974crypto: qat - resolve race condition during AER recoveryUNKNOWN—9%ileMicrosoft2024-05-14
CVE-2024-26979Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.UNKNOWN——Microsoft2024-05-14
CVE-2024-26993fs: sysfs: Fix reference leak in sysfs_break_active_protection()UNKNOWN—18%ileMicrosoft2024-05-14
CVE-2024-27000serial: mxs-auart: add spinlock around changing cts stateUNKNOWN—25%ileMicrosoft2024-05-14
CVE-2024-27003clk: Get runtime PM before walking tree for clk_summaryUNKNOWN—7%ileMicrosoft2024-05-14
CVE-2024-27004clk: Get runtime PM before walking tree during disable_unusedUNKNOWN—11%ileMicrosoft2024-05-14
CVE-2024-27030octeontx2-af: Use separate handlers for interruptsUNKNOWN—10%ileMicrosoft2024-05-14
CVE-2024-27033f2fs: fix to remove unnecessary f2fs_bug_on() to avoid panicUNKNOWN—19%ileMicrosoft2024-05-14
CVE-2024-27046nfp: flower: handle acti_netdevs allocation failureUNKNOWN—22%ileMicrosoft2024-05-14
CVE-2024-27047net: phy: fix phy_get_internal_delay accessing an empty arrayUNKNOWN—20%ileMicrosoft2024-05-14
CVE-2024-27067xen/evtchn: avoid WARN() when unbinding an event channelUNKNOWN—13%ileMicrosoft2024-05-14
CVE-2024-27068thermal/drivers/mediatek/lvts_thermal: Fix a memory leak in an error handling pathUNKNOWN—13%ileMicrosoft2024-05-14
CVE-2024-27074media: go7007: fix a memleak in go7007_load_encoderUNKNOWN—21%ileMicrosoft2024-05-14
CVE-2024-27078media: v4l2-tpg: fix some memleaks in tpg_allocUNKNOWN—21%ileMicrosoft2024-05-14
CVE-2024-27391wifi: wilc1000: do not realloc workqueue everytime an interface is addedUNKNOWN—19%ileMicrosoft2024-05-14
CVE-2024-27396net: gtp: Fix Use-After-Free in gtp_dellinkUNKNOWN—16%ileMicrosoft2024-05-14
CVE-2024-27397netfilter: nf_tables: use timestamp to check for set element timeoutUNKNOWN—17%ileMicrosoft2024-05-14
CVE-2024-27432net: ethernet: mtk_eth_soc: fix PPE hanging issueUNKNOWN—13%ileMicrosoft2024-05-14
CVE-2024-27433clk: mediatek: mt7622-apmixedsys: Fix an error handling path in clk_mt8135_apmixed_probe()UNKNOWN—14%ileMicrosoft2024-05-14
CVE-2024-27434wifi: iwlwifi: mvm: don't set the MFP flag for the GTKUNKNOWN—13%ileMicrosoft2024-05-14
CVE-2024-35787md/md-bitmap: fix incorrect usage for sb_indexUNKNOWN—12%ileMicrosoft2024-05-14
CVE-2024-35790usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute groupUNKNOWN—13%ileMicrosoft2024-05-14
CVE-2024-35810drm/vmwgfx: Fix the lifetime of the bo cursor memoryUNKNOWN—13%ileMicrosoft2024-05-14
CVE-2024-35830media: tc358743: register v4l2 async device only after successful setupUNKNOWN—14%ileMicrosoft2024-05-14
CVE-2024-35848eeprom: at24: fix memory corruption race conditionUNKNOWN—9%ileMicrosoft2024-05-14
CVE-2024-35856Bluetooth: btusb: mediatek: Fix double free of skb in coredumpUNKNOWN—16%ileMicrosoft2024-05-14
CVE-2023-52647media: nxp: imx8-isi: Check whether crossbar pad is non-NULL before accessUNKNOWN—13%ileMicrosoft2024-05-14
CVE-2023-52652NTB: fix possible name leak in ntb_register_device()UNKNOWN—19%ileMicrosoft2024-05-14
CVE-2023-52662drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_nodeUNKNOWN—15%ileMicrosoft2024-05-14
CVE-2023-52663ASoC: SOF: amd: Fix memory leak in amd_sof_acp_probe()UNKNOWN—13%ileMicrosoft2024-05-14
CVE-2024-34251An out-of-bound memory read vulnerability was discovered in Bytecode Alliance wasm-micro-runtime v2.0.0 which allows a rUNKNOWN—52%ileMicrosoft2024-05-14
CVE-2024-36923Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.UNKNOWN——Microsoft2024-05-14
CVE-2024-4558Chromium: CVE-2024-4558 Use after free in ANGLEUNKNOWN—69%ileMicrosoft2024-05-14
CVE-2024-4559Chromium: CVE-2024-4559 Heap buffer overflow in WebAudioUNKNOWN—60%ileMicrosoft2024-05-14
CVE-2024-4671Chromium: CVE-2024-4671 Use after free in VisualsUNKNOWN—94%ileMicrosoft2024-05-14
CVE-2024-4947Chromium: CVE-2024-4947 Type Confusion in V8UNKNOWN—96%ileMicrosoft2024-05-14
CVE-2024-4949Chromium: CVE-2024-4949 Use after free in V8UNKNOWN—58%ileMicrosoft2024-05-14
CVE-2024-4948Chromium: CVE-2024-4948 Use after free in DawnUNKNOWN—58%ileMicrosoft2024-05-14
CVE-2024-4950Chromium: CVE-2024-4950 Inappropriate implementation in DownloadsUNKNOWN—57%ileMicrosoft2024-05-14
CVE-2024-5159Chromium: CVE-2024-5159 Heap buffer overflow in ANGLEUNKNOWN—47%ileMicrosoft2024-05-14
CVE-2024-5157Chromium: CVE-2024-5157 Use after free in SchedulingUNKNOWN—52%ileMicrosoft2024-05-14
CVE-2024-5158Chromium: CVE-2024-5158 Type Confusion in V8UNKNOWN—46%ileMicrosoft2024-05-14
CVE-2024-5274Chromium: CVE-2024-5274 Type Confusion in V8UNKNOWN—95%ileMicrosoft2024-05-14
CVE-2024-4331Chromium: CVE-2024-4331 Use after free in Picture In PictureUNKNOWN—66%ileMicrosoft2024-05-14
CVE-2024-4368Chromium: CVE-2024-4368 Use after free in DawnUNKNOWN—61%ileMicrosoft2024-05-14
CVE-2024-4761Chromium: CVE-2024-4761 Out of bounds write in V8UNKNOWN—96%ileMicrosoft2024-05-14
CVE-2024-5160Chromium: CVE-2024-5160 Heap buffer overflow in DawnUNKNOWN—46%ileMicrosoft2024-05-14
CVE-2024-4067CVE-2024-4067UNKNOWN—70%ileMicrosoft2024-05-14
CVE-2024-24576Rusts's `std::process::Command` did not properly escape arguments of batch files on WindowsCRITICAL10.097%ileMicrosoft2024-04-09
CVE-2024-3660Arbitrary code injection vulnerability in Keras framework < 2.13CRITICAL9.876%ileMicrosoft2024-04-09
CVE-2024-3566Command injection vulnerability in programing languages on Microsoft Windows operating system.CRITICAL9.893%ileMicrosoft2024-04-09
CVE-2024-3817HashiCorp go-getter Vulnerable to Argument Injection When Fetching Remote Default Git BranchesCRITICAL9.868%ileMicrosoft2024-04-09
CVE-2024-1874Command injection via array-ish $command parameter of proc_open()CRITICAL9.498%ileMicrosoft2024-04-09
CVE-2024-29990Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege VulnerabilityCRITICAL9.097%ileMicrosoft2024-04-09
CVE-2024-27322R Language Vulnerable to Arbitrary Code Execution via Malicious RDS Files (v1.4.0–<4.4.0)HIGH8.898%ileMicrosoft2024-04-09
CVE-2024-20678Remote Procedure Call Runtime Remote Code Execution VulnerabilityHIGH8.883%ileMicrosoft2024-04-09
CVE-2024-26179Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityHIGH8.876%ileMicrosoft2024-04-09
CVE-2024-26200Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityHIGH8.876%ileMicrosoft2024-04-09
CVE-2024-26205Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityHIGH8.876%ileMicrosoft2024-04-09
CVE-2024-28906Microsoft OLE DB Driver for SQL Server Remote Code Execution VulnerabilityHIGH8.882%ileMicrosoft2024-04-09
CVE-2024-28908Microsoft OLE DB Driver for SQL Server Remote Code Execution VulnerabilityHIGH8.882%ileMicrosoft2024-04-09
CVE-2024-28909Microsoft OLE DB Driver for SQL Server Remote Code Execution VulnerabilityHIGH8.882%ileMicrosoft2024-04-09
CVE-2024-28910Microsoft OLE DB Driver for SQL Server Remote Code Execution VulnerabilityHIGH8.885%ileMicrosoft2024-04-09
CVE-2024-28911Microsoft OLE DB Driver for SQL Server Remote Code Execution VulnerabilityHIGH8.881%ileMicrosoft2024-04-09
CVE-2024-28912Microsoft OLE DB Driver for SQL Server Remote Code Execution VulnerabilityHIGH8.881%ileMicrosoft2024-04-09
CVE-2024-28913Microsoft OLE DB Driver for SQL Server Remote Code Execution VulnerabilityHIGH8.882%ileMicrosoft2024-04-09
CVE-2024-28914Microsoft OLE DB Driver for SQL Server Remote Code Execution VulnerabilityHIGH8.882%ileMicrosoft2024-04-09
CVE-2024-28915Microsoft OLE DB Driver for SQL Server Remote Code Execution VulnerabilityHIGH8.881%ileMicrosoft2024-04-09
CVE-2024-28929Microsoft ODBC Driver for SQL Server Remote Code Execution VulnerabilityHIGH8.882%ileMicrosoft2024-04-09
CVE-2024-28931Microsoft ODBC Driver for SQL Server Remote Code Execution VulnerabilityHIGH8.882%ileMicrosoft2024-04-09
CVE-2024-28932Microsoft ODBC Driver for SQL Server Remote Code Execution VulnerabilityHIGH8.882%ileMicrosoft2024-04-09
CVE-2024-28936Microsoft ODBC Driver for SQL Server Remote Code Execution VulnerabilityHIGH8.882%ileMicrosoft2024-04-09
CVE-2024-28939Microsoft OLE DB Driver for SQL Server Remote Code Execution VulnerabilityHIGH8.881%ileMicrosoft2024-04-09
CVE-2024-28942Microsoft OLE DB Driver for SQL Server Remote Code Execution VulnerabilityHIGH8.882%ileMicrosoft2024-04-09
CVE-2024-28945Microsoft OLE DB Driver for SQL Server Remote Code Execution VulnerabilityHIGH8.881%ileMicrosoft2024-04-09
CVE-2024-29043Microsoft ODBC Driver for SQL Server Remote Code Execution VulnerabilityHIGH8.882%ileMicrosoft2024-04-09
CVE-2024-29047Microsoft OLE DB Driver for SQL Server Remote Code Execution VulnerabilityHIGH8.882%ileMicrosoft2024-04-09
CVE-2024-29988SmartScreen Prompt Security Feature Bypass VulnerabilityHIGH8.899%ileMicrosoft2024-04-09
CVE-2024-21323Microsoft Defender for IoT Remote Code Execution VulnerabilityHIGH8.887%ileMicrosoft2024-04-09
CVE-2024-26210Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityHIGH8.878%ileMicrosoft2024-04-09
CVE-2024-26244Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityHIGH8.878%ileMicrosoft2024-04-09
CVE-2024-26214Microsoft WDAC SQL Server ODBC Driver Remote Code Execution VulnerabilityHIGH8.879%ileMicrosoft2024-04-09
CVE-2024-28926Microsoft OLE DB Driver for SQL Server Remote Code Execution VulnerabilityHIGH8.881%ileMicrosoft2024-04-09
CVE-2024-28927Microsoft OLE DB Driver for SQL Server Remote Code Execution VulnerabilityHIGH8.882%ileMicrosoft2024-04-09
CVE-2024-28930Microsoft ODBC Driver for SQL Server Remote Code Execution VulnerabilityHIGH8.882%ileMicrosoft2024-04-09
CVE-2024-28933Microsoft ODBC Driver for SQL Server Remote Code Execution VulnerabilityHIGH8.882%ileMicrosoft2024-04-09
CVE-2024-28934Microsoft ODBC Driver for SQL Server Remote Code Execution VulnerabilityHIGH8.882%ileMicrosoft2024-04-09
CVE-2024-28935Microsoft ODBC Driver for SQL Server Remote Code Execution VulnerabilityHIGH8.882%ileMicrosoft2024-04-09
CVE-2024-28937Microsoft ODBC Driver for SQL Server Remote Code Execution VulnerabilityHIGH8.882%ileMicrosoft2024-04-09
CVE-2024-28938Microsoft ODBC Driver for SQL Server Remote Code Execution VulnerabilityHIGH8.882%ileMicrosoft2024-04-09
CVE-2024-28940Microsoft OLE DB Driver for SQL Server Remote Code Execution VulnerabilityHIGH8.882%ileMicrosoft2024-04-09
CVE-2024-28941Microsoft ODBC Driver for SQL Server Remote Code Execution VulnerabilityHIGH8.881%ileMicrosoft2024-04-09
CVE-2024-28943Microsoft ODBC Driver for SQL Server Remote Code Execution VulnerabilityHIGH8.882%ileMicrosoft2024-04-09
CVE-2024-28944Microsoft OLE DB Driver for SQL Server Remote Code Execution VulnerabilityHIGH8.882%ileMicrosoft2024-04-09
CVE-2024-29044Microsoft OLE DB Driver for SQL Server Remote Code Execution VulnerabilityHIGH8.882%ileMicrosoft2024-04-09
CVE-2024-29046Microsoft OLE DB Driver for SQL Server Remote Code Execution VulnerabilityHIGH8.882%ileMicrosoft2024-04-09
CVE-2024-29048Microsoft OLE DB Driver for SQL Server Remote Code Execution VulnerabilityHIGH8.882%ileMicrosoft2024-04-09
CVE-2024-29053Microsoft Defender for IoT Remote Code Execution VulnerabilityHIGH8.887%ileMicrosoft2024-04-09
CVE-2024-29982Microsoft OLE DB Driver for SQL Server Remote Code Execution VulnerabilityHIGH8.882%ileMicrosoft2024-04-09
CVE-2024-29983Microsoft OLE DB Driver for SQL Server Remote Code Execution VulnerabilityHIGH8.882%ileMicrosoft2024-04-09
CVE-2024-29984Microsoft OLE DB Driver for SQL Server Remote Code Execution VulnerabilityHIGH8.882%ileMicrosoft2024-04-09
CVE-2024-29985Microsoft OLE DB Driver for SQL Server Remote Code Execution VulnerabilityHIGH8.882%ileMicrosoft2024-04-09
CVE-2024-29993Azure CycleCloud Elevation of Privilege VulnerabilityHIGH8.879%ileMicrosoft2024-04-09
CVE-2024-32487less through 653 allows OS command execution via a newline character in the name of a file because quoting is mishandledHIGH8.647%ileMicrosoft2024-04-09
CVE-2024-29050Windows Cryptographic Services Remote Code Execution VulnerabilityHIGH8.466%ileMicrosoft2024-04-09
CVE-2024-29989Azure Monitor Agent Elevation of Privilege VulnerabilityHIGH8.451%ileMicrosoft2024-04-09
CVE-2024-27983An attacker can make the Node.js HTTP/2 server completely unavailable by sending a small amount of HTTP/2 frames packetsHIGH8.2100%ileMicrosoft2024-04-09
CVE-2024-3864Memory safety bug present in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9. This bug showed evidence of memory cHIGH8.154%ileMicrosoft2024-04-09
CVE-2024-3865Memory safety bugs present in Firefox 124. Some of these bugs showed evidence of memory corruption and we presume that wHIGH8.139%ileMicrosoft2024-04-09
CVE-2024-20670Outlook for Windows Spoofing VulnerabilityHIGH8.182%ileMicrosoft2024-04-09
CVE-2024-26180Secure Boot Security Feature Bypass VulnerabilityHIGH8.071%ileMicrosoft2024-04-09
CVE-2024-26189Secure Boot Security Feature Bypass VulnerabilityHIGH8.069%ileMicrosoft2024-04-09
CVE-2024-26240Secure Boot Security Feature Bypass VulnerabilityHIGH8.061%ileMicrosoft2024-04-09
CVE-2024-28925Secure Boot Security Feature Bypass VulnerabilityHIGH8.066%ileMicrosoft2024-04-09
CVE-2024-26884bpf: Fix hashtab overflow check on 32-bit archesHIGH7.816%ileMicrosoft2024-04-09
CVE-2024-26898aoe: fix the potential use-after-free problem in aoecmd_cfg_pktsHIGH7.823%ileMicrosoft2024-04-09
CVE-2024-26907RDMA/mlx5: Fix fortify source warning while accessing Eth segmentHIGH7.818%ileMicrosoft2024-04-09
CVE-2024-31083Xorg-x11-server: use-after-free in procrenderaddglyphsHIGH7.877%ileMicrosoft2024-04-09
CVE-2024-31583Pytorch before version v2.2.0 was discovered to contain a use-after-free vulnerability in torch/csrc/jit/mobile/interpreHIGH7.818%ileMicrosoft2024-04-09
CVE-2024-26928smb: client: fix potential UAF in cifs_debug_files_proc_show()HIGH7.820%ileMicrosoft2024-04-09
CVE-2024-26836platform/x86: think-lmi: Fix password opcode ordering for workstationsHIGH7.814%ileMicrosoft2024-04-09
CVE-2024-26699drm/amd/display: Fix array-index-out-of-bounds in dcn35_clkmgrHIGH7.813%ileMicrosoft2024-04-09
CVE-2024-26914drm/amd/display: fix incorrect mpc_combine array sizeHIGH7.812%ileMicrosoft2024-04-09
CVE-2024-26800tls: fix use-after-free on failed backlog decryptionHIGH7.820%ileMicrosoft2024-04-09
CVE-2024-26739net/sched: act_mirred: don't override retval if we already lost the skbHIGH7.820%ileMicrosoft2024-04-09
CVE-2024-26792btrfs: fix double free of anonymous device after snapshot creation failureHIGH7.815%ileMicrosoft2024-04-09
CVE-2024-26865rds: tcp: Fix use-after-free of net in reqsk_timer_handler().HIGH7.814%ileMicrosoft2024-04-09
CVE-2024-26882net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()HIGH7.854%ileMicrosoft2024-04-09
CVE-2024-26883bpf: Fix stackmap overflow check on 32-bit archesHIGH7.816%ileMicrosoft2024-04-09
CVE-2024-26885bpf: Fix DEVMAP_HASH overflow check on 32-bit archesHIGH7.816%ileMicrosoft2024-04-09
CVE-2024-26913drm/amd/display: Fix dcn35 8k30 Underflow/Corruption IssueHIGH7.816%ileMicrosoft2024-04-09
CVE-2024-20693Windows Kernel Elevation of Privilege VulnerabilityHIGH7.854%ileMicrosoft2024-04-09
CVE-2024-21447Windows Authentication Elevation of Privilege VulnerabilityHIGH7.869%ileMicrosoft2024-04-09
CVE-2024-26256Libarchive Remote Code Execution VulnerabilityHIGH7.8100%ileMicrosoft2024-04-09
CVE-2024-26158Microsoft Install Service Elevation of Privilege VulnerabilityHIGH7.896%ileMicrosoft2024-04-09
CVE-2024-28920Secure Boot Security Feature Bypass VulnerabilityHIGH7.850%ileMicrosoft2024-04-09
CVE-2024-28905Microsoft Brokering File System Elevation of Privilege VulnerabilityHIGH7.838%ileMicrosoft2024-04-09
CVE-2024-26175Secure Boot Security Feature Bypass VulnerabilityHIGH7.847%ileMicrosoft2024-04-09
CVE-2024-26218Windows Kernel Elevation of Privilege VulnerabilityHIGH7.896%ileMicrosoft2024-04-09
CVE-2024-26241Win32k Elevation of Privilege VulnerabilityHIGH7.851%ileMicrosoft2024-04-09
CVE-2024-26229Windows CSC Service Elevation of Privilege VulnerabilityHIGH7.895%ileMicrosoft2024-04-09
CVE-2024-26235Windows Update Stack Elevation of Privilege VulnerabilityHIGH7.844%ileMicrosoft2024-04-09
CVE-2024-26237Windows Defender Credential Guard Elevation of Privilege VulnerabilityHIGH7.849%ileMicrosoft2024-04-09
CVE-2024-26245Windows SMB Elevation of Privilege VulnerabilityHIGH7.848%ileMicrosoft2024-04-09
CVE-2024-26211Windows Remote Access Connection Manager Elevation of Privilege VulnerabilityHIGH7.890%ileMicrosoft2024-04-09
CVE-2024-26228Windows Cryptographic Services Security Feature Bypass VulnerabilityHIGH7.833%ileMicrosoft2024-04-09
CVE-2024-26230Windows Telephony Server Elevation of Privilege VulnerabilityHIGH7.898%ileMicrosoft2024-04-09
CVE-2024-26239Windows Telephony Server Elevation of Privilege VulnerabilityHIGH7.844%ileMicrosoft2024-04-09
CVE-2024-26257Microsoft Excel Remote Code Execution VulnerabilityHIGH7.859%ileMicrosoft2024-04-09
CVE-2024-28904Microsoft Brokering File System Elevation of Privilege VulnerabilityHIGH7.839%ileMicrosoft2024-04-09
CVE-2024-28907Microsoft Brokering File System Elevation of Privilege VulnerabilityHIGH7.844%ileMicrosoft2024-04-09
CVE-2024-29052Windows Storage Elevation of Privilege VulnerabilityHIGH7.844%ileMicrosoft2024-04-09
CVE-2024-29061Secure Boot Security Feature Bypass VulnerabilityHIGH7.848%ileMicrosoft2024-04-09
CVE-2024-31755cJSON v1.7.17 was discovered to contain a segmentation violation which can trigger through the second parameter of functHIGH7.648%ileMicrosoft2024-04-09
CVE-2024-27316Apache HTTP Server: HTTP/2 DoS by memory exhaustion on endless continuation framesHIGH7.5100%ileMicrosoft2024-04-09
CVE-2024-31744In Jasper 4.2.2 the jpc_streamlist_remove function in src/libjasper/jpc/jpc_dec.c:2407 has an assertion failure vulnerabHIGH7.551%ileMicrosoft2024-04-09
CVE-2024-32650Rustls vulnerable to an infinite loop in rustls::conn::ConnectionCommon::complete_io() with proper client inputHIGH7.558%ileMicrosoft2024-04-09
CVE-2023-45288HTTP/2 CONTINUATION flood in net/httpHIGH7.5100%ileMicrosoft2024-04-09
CVE-2024-21090Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Python). Supported versions that arHIGH7.550%ileMicrosoft2024-04-09
CVE-2024-3858It was possible to mutate a JavaScript object so that the JIT could crash while tracing it. This vulnerability affects FHIGH7.544%ileMicrosoft2024-04-09
CVE-2024-20380ClamAV HTML Parser Denial of Service VulnerabilityHIGH7.562%ileMicrosoft2024-04-09
CVE-2024-22189QUIC's Connection ID Mechanism vulnerable to Memory Exhaustion AttackHIGH7.563%ileMicrosoft2024-04-09
CVE-2024-2757PHP mb_encode_mimeheader runs endlessly for some inputsHIGH7.578%ileMicrosoft2024-04-09
CVE-2024-34088In FRRouting (FRR) through 9.1 it is possible for the get_edge() function in ospf_te.c in the OSPF daemon to return a NUHIGH7.549%ileMicrosoft2024-04-09
CVE-2024-31578FFmpeg version n6.1.1 was discovered to contain a heap use-after-free via the av_hwframe_ctx_init function.HIGH7.558%ileMicrosoft2024-04-09
CVE-2024-26254Microsoft Virtual Machine Bus (VMBus) Denial of Service VulnerabilityHIGH7.587%ileMicrosoft2024-04-09
CVE-2024-28896Secure Boot Security Feature Bypass VulnerabilityHIGH7.558%ileMicrosoft2024-04-09
CVE-2024-29045Microsoft OLE DB Driver for SQL Server Remote Code Execution VulnerabilityHIGH7.576%ileMicrosoft2024-04-09
CVE-2024-26219HTTP.sys Denial of Service VulnerabilityHIGH7.587%ileMicrosoft2024-04-09
CVE-2024-26248Windows Kerberos Elevation of Privilege VulnerabilityHIGH7.560%ileMicrosoft2024-04-09
CVE-2024-26212DHCP Server Service Denial of Service VulnerabilityHIGH7.599%ileMicrosoft2024-04-09
CVE-2024-26215DHCP Server Service Denial of Service VulnerabilityHIGH7.584%ileMicrosoft2024-04-09
CVE-2022-1708CVE-2022-1708HIGH7.586%ileMicrosoft2024-04-09
CVE-2022-27649CVE-2022-27649HIGH7.570%ileMicrosoft2024-04-09
CVE-2023-42821CVE-2023-42821HIGH7.561%ileMicrosoft2024-04-09
CVE-2022-38178CVE-2022-38178HIGH7.583%ileMicrosoft2024-04-09
CVE-2022-38177CVE-2022-38177HIGH7.584%ileMicrosoft2024-04-09
CVE-2022-48666scsi: core: Fix a use-after-freeHIGH7.452%ileMicrosoft2024-04-09
CVE-2024-26194Secure Boot Security Feature Bypass VulnerabilityHIGH7.428%ileMicrosoft2024-04-09
CVE-2024-31080Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedeventsHIGH7.341%ileMicrosoft2024-04-09
CVE-2023-38709Apache HTTP Server: HTTP response splittingHIGH7.389%ileMicrosoft2024-04-09
CVE-2024-31081Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdeviceHIGH7.341%ileMicrosoft2024-04-09
CVE-2024-31082Xorg-x11-server: heap buffer overread/data leakage in procappledricreatepixmapHIGH7.326%ileMicrosoft2024-04-09
CVE-2024-2961The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4HIGH7.3100%ileMicrosoft2024-04-09
CVE-2024-26232Microsoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityHIGH7.357%ileMicrosoft2024-04-09
CVE-2024-29063Azure AI Search Information Disclosure VulnerabilityHIGH7.352%ileMicrosoft2024-04-09
CVE-2024-26216Windows File Server Resource Management Service Elevation of Privilege VulnerabilityHIGH7.355%ileMicrosoft2024-04-09
CVE-2024-21409.NET, .NET Framework, and Visual Studio Remote Code Execution VulnerabilityHIGH7.383%ileMicrosoft2024-04-09
CVE-2024-3154Cri-o: arbitrary command injection via pod annotationHIGH7.270%ileMicrosoft2024-04-09
CVE-2024-29066Windows Distributed File System (DFS) Remote Code Execution VulnerabilityHIGH7.269%ileMicrosoft2024-04-09
CVE-2024-21322Microsoft Defender for IoT Remote Code Execution VulnerabilityHIGH7.286%ileMicrosoft2024-04-09
CVE-2024-21324Microsoft Defender for IoT Elevation of Privilege VulnerabilityHIGH7.282%ileMicrosoft2024-04-09
CVE-2024-26195DHCP Server Service Remote Code Execution VulnerabilityHIGH7.281%ileMicrosoft2024-04-09
CVE-2024-26202DHCP Server Service Remote Code Execution VulnerabilityHIGH7.281%ileMicrosoft2024-04-09
CVE-2024-26221Windows DNS Server Remote Code Execution VulnerabilityHIGH7.277%ileMicrosoft2024-04-09
CVE-2024-26222Windows DNS Server Remote Code Execution VulnerabilityHIGH7.276%ileMicrosoft2024-04-09
CVE-2024-26223Windows DNS Server Remote Code Execution VulnerabilityHIGH7.273%ileMicrosoft2024-04-09
CVE-2024-26224Windows DNS Server Remote Code Execution VulnerabilityHIGH7.273%ileMicrosoft2024-04-09
CVE-2024-26227Windows DNS Server Remote Code Execution VulnerabilityHIGH7.272%ileMicrosoft2024-04-09
CVE-2024-26231Windows DNS Server Remote Code Execution VulnerabilityHIGH7.272%ileMicrosoft2024-04-09
CVE-2024-26233Windows DNS Server Remote Code Execution VulnerabilityHIGH7.273%ileMicrosoft2024-04-09
CVE-2024-26208Microsoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityHIGH7.281%ileMicrosoft2024-04-09
CVE-2024-29055Microsoft Defender for IoT Elevation of Privilege VulnerabilityHIGH7.282%ileMicrosoft2024-04-09
CVE-2024-29054Microsoft Defender for IoT Elevation of Privilege VulnerabilityHIGH7.282%ileMicrosoft2024-04-09
CVE-2024-26672drm/amdgpu: Fix variable 'mca_funcs' dereferenced before NULL check in 'amdgpu_mca_smu_get_mca_entry()'HIGH7.112%ileMicrosoft2024-04-09
CVE-2024-26669net/sched: flower: Fix chain template offloadHIGH7.115%ileMicrosoft2024-04-09
CVE-2024-26789crypto: arm64/neonbs - fix out-of-bounds access on short inputHIGH7.113%ileMicrosoft2024-04-09
CVE-2024-20688Secure Boot Security Feature Bypass VulnerabilityHIGH7.167%ileMicrosoft2024-04-09
CVE-2024-20689Secure Boot Security Feature Bypass VulnerabilityHIGH7.167%ileMicrosoft2024-04-09
CVE-2024-29062Secure Boot Security Feature Bypass VulnerabilityHIGH7.151%ileMicrosoft2024-04-09
CVE-2022-2995CVE-2022-2995HIGH7.129%ileMicrosoft2024-04-09
CVE-2024-26243Windows USB Print Driver Elevation of Privilege VulnerabilityHIGH7.032%ileMicrosoft2024-04-09
CVE-2024-26236Windows Update Stack Elevation of Privilege VulnerabilityHIGH7.032%ileMicrosoft2024-04-09
CVE-2024-26242Windows Telephony Server Elevation of Privilege VulnerabilityHIGH7.027%ileMicrosoft2024-04-09
CVE-2024-26213Microsoft Brokering File System Elevation of Privilege VulnerabilityHIGH7.044%ileMicrosoft2024-04-09
CVE-2024-26252Windows rndismp6.sys Remote Code Execution VulnerabilityMEDIUM6.851%ileMicrosoft2024-04-09
CVE-2024-26253Windows rndismp6.sys Remote Code Execution VulnerabilityMEDIUM6.851%ileMicrosoft2024-04-09
CVE-2024-26168Secure Boot Security Feature Bypass VulnerabilityMEDIUM6.858%ileMicrosoft2024-04-09
CVE-2024-26251Microsoft SharePoint Server Spoofing VulnerabilityMEDIUM6.870%ileMicrosoft2024-04-09
CVE-2024-28897Secure Boot Security Feature Bypass VulnerabilityMEDIUM6.855%ileMicrosoft2024-04-09
CVE-2022-27651CVE-2022-27651MEDIUM6.866%ileMicrosoft2024-04-09
CVE-2024-26828cifs: fix underflow in parse_server_interfaces()MEDIUM6.734%ileMicrosoft2024-04-09
CVE-2024-2312GRUB2 does not call the module fini functions on exit, leading to Debian/Ubuntu's peimage GRUB2 module leaving UEFI systMEDIUM6.730%ileMicrosoft2024-04-09
CVE-2024-20669Secure Boot Security Feature Bypass VulnerabilityMEDIUM6.746%ileMicrosoft2024-04-09
CVE-2024-26250Secure Boot Security Feature Bypass VulnerabilityMEDIUM6.747%ileMicrosoft2024-04-09
CVE-2024-28921Secure Boot Security Feature Bypass VulnerabilityMEDIUM6.751%ileMicrosoft2024-04-09
CVE-2024-28919Secure Boot Security Feature Bypass VulnerabilityMEDIUM6.746%ileMicrosoft2024-04-09
CVE-2024-28903Secure Boot Security Feature Bypass VulnerabilityMEDIUM6.751%ileMicrosoft2024-04-09
CVE-2024-23593Lenovo: CVE-2024-23593 Modify Boot Manager and Escalate PrivilegesMEDIUM6.726%ileMicrosoft2024-04-09
CVE-2024-26171Secure Boot Security Feature Bypass VulnerabilityMEDIUM6.747%ileMicrosoft2024-04-09
CVE-2024-26234Proxy Driver Spoofing VulnerabilityMEDIUM6.791%ileMicrosoft2024-04-09
CVE-2024-28924Secure Boot Security Feature Bypass VulnerabilityMEDIUM6.744%ileMicrosoft2024-04-09
CVE-2022-26691CVE-2022-26691MEDIUM6.745%ileMicrosoft2024-04-09
CVE-2024-2756__Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fixMEDIUM6.598%ileMicrosoft2024-04-09
CVE-2024-31950In FRRouting (FRR) through 9.1 there can be a buffer overflow and daemon crash in ospf_te_parse_ri for OSPF LSA packets MEDIUM6.541%ileMicrosoft2024-04-09
CVE-2024-3652IKEv1 default AH/ESP responder can cause libreswan to abort and restartMEDIUM6.553%ileMicrosoft2024-04-09
CVE-2024-3096PHP function password_verify can erroneously return true when argument contains NULMEDIUM6.571%ileMicrosoft2024-04-09
CVE-2024-31951In the Opaque LSA Extended Link parser in FRRouting (FRR) through 9.1 there can be a buffer overflow and daemon crash inMEDIUM6.543%ileMicrosoft2024-04-09
CVE-2024-26886Bluetooth: af_bluetooth: Fix deadlockMEDIUM6.540%ileMicrosoft2024-04-09
CVE-2024-21424Azure Compute Gallery Elevation of Privilege VulnerabilityMEDIUM6.578%ileMicrosoft2024-04-09
CVE-2024-26183Windows Kerberos Denial of Service VulnerabilityMEDIUM6.580%ileMicrosoft2024-04-09
CVE-2024-26226Windows Distributed File System (DFS) Information Disclosure VulnerabilityMEDIUM6.576%ileMicrosoft2024-04-09
CVE-2024-29987Microsoft Edge (Chromium-based) Information Disclosure VulnerabilityMEDIUM6.565%ileMicrosoft2024-04-09
CVE-2024-26875media: pvrusb2: fix uaf in pvr2_context_set_notifyMEDIUM6.416%ileMicrosoft2024-04-09
CVE-2024-32884gix-transport indirect code execution via malicious usernameMEDIUM6.441%ileMicrosoft2024-04-09
CVE-2024-26193Azure Migrate Remote Code Execution VulnerabilityMEDIUM6.455%ileMicrosoft2024-04-09
CVE-2024-23594Lenovo: CVE-2024-23594 Stack buffer overflow in Lenovo system recovery boot managerMEDIUM6.415%ileMicrosoft2024-04-09
CVE-2024-26830i40e: Do not allow untrusted VF to remove administratively set MACMEDIUM6.314%ileMicrosoft2024-04-09
CVE-2024-24795Apache HTTP Server: HTTP Response Splitting in multiple modulesMEDIUM6.385%ileMicrosoft2024-04-09
CVE-2024-28898Secure Boot Security Feature Bypass VulnerabilityMEDIUM6.354%ileMicrosoft2024-04-09
CVE-2022-48646sfc/siena: fix null pointer dereference in efx_hard_start_xmitMEDIUM6.210%ileMicrosoft2024-04-09
CVE-2024-3860An out-of-memory condition during object initialization could result in an empty shape list. If the JIT subsequently traMEDIUM6.27%ileMicrosoft2024-04-09
CVE-2022-48635fsdax: Fix infinite loop in dax_iomap_rw()MEDIUM6.214%ileMicrosoft2024-04-09
CVE-2024-2905Rpm-ostree: world-readable /etc/shadow fileMEDIUM6.225%ileMicrosoft2024-04-09
CVE-2024-29064Windows Hyper-V Denial of Service VulnerabilityMEDIUM6.251%ileMicrosoft2024-04-09
CVE-2024-28917Azure Arc-enabled Kubernetes Extension Cluster-Scope Elevation of Privilege VulnerabilityMEDIUM6.256%ileMicrosoft2024-04-09
CVE-2024-27306aiohttp vulnerable to XSS on index pages for static file handlingMEDIUM6.148%ileMicrosoft2024-04-09
CVE-2024-20665BitLocker Security Feature Bypass VulnerabilityMEDIUM6.151%ileMicrosoft2024-04-09
CVE-2023-6237Excessive time spent checking invalid RSA public keysMEDIUM5.982%ileMicrosoft2024-04-09
CVE-2024-2511Unbounded memory growth with session handling in TLSv1.3MEDIUM5.999%ileMicrosoft2024-04-09
CVE-2024-31852LLVM before 18.1.3 generates code in which the LR register can be overwritten without data being saved to the stack and MEDIUM5.959%ileMicrosoft2024-04-09
CVE-2024-3859On 32-bit versions there were integer-overflows that led to an out-of-bounds-read that potentially could be triggered byMEDIUM5.948%ileMicrosoft2024-04-09
CVE-2024-20685Azure Private 5G Core Denial of Service VulnerabilityMEDIUM5.992%ileMicrosoft2024-04-09
CVE-2024-26901do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleakMEDIUM5.554%ileMicrosoft2024-04-09
CVE-2024-26811ksmbd: validate payload size in ipc responseMEDIUM5.518%ileMicrosoft2024-04-09
CVE-2024-26687xen/events: close evtchn after mapping cleanupMEDIUM5.514%ileMicrosoft2024-04-09
CVE-2024-3567Qemu-kvm: net: assertion failure in update_sctp_checksum()MEDIUM5.537%ileMicrosoft2024-04-09
CVE-2024-26841LoongArch: Update cpu_sibling_map when disabling nonboot CPUsMEDIUM5.513%ileMicrosoft2024-04-09
CVE-2024-26853igc: avoid returning frame twice in XDP_REDIRECTMEDIUM5.513%ileMicrosoft2024-04-09
CVE-2024-26662drm/amd/display: Fix 'panel_cntl' could be null in 'dcn21_set_backlight_level()'MEDIUM5.513%ileMicrosoft2024-04-09
CVE-2024-26757md: Don't ignore read-only array in md_check_recovery()MEDIUM5.511%ileMicrosoft2024-04-09
CVE-2024-26758md: Don't ignore suspended array in md_check_recovery()MEDIUM5.512%ileMicrosoft2024-04-09
CVE-2024-26893firmware: arm_scmi: Fix double free in SMC transport cleanup pathMEDIUM5.514%ileMicrosoft2024-04-09
CVE-2024-26866spi: lpspi: Avoid potential use-after-free in probe()MEDIUM5.512%ileMicrosoft2024-04-09
CVE-2024-26677rxrpc: Fix delayed ACKs to not set the reference serial numberMEDIUM5.515%ileMicrosoft2024-04-09
CVE-2024-26770HID: nvidia-shield: Add missing null pointer checks to LED initializationMEDIUM5.515%ileMicrosoft2024-04-09
CVE-2024-26714interconnect: qcom: sc8180x: Mark CO0 BCM keepaliveMEDIUM5.514%ileMicrosoft2024-04-09
CVE-2023-52634drm/amd/display: Fix disable_otg_wa logicMEDIUM5.59%ileMicrosoft2024-04-09
CVE-2024-26756md: Don't register sync_thread for reshape directlyMEDIUM5.511%ileMicrosoft2024-04-09
CVE-2024-26740net/sched: act_mirred: use the backlog for mirred ingressMEDIUM5.58%ileMicrosoft2024-04-09
CVE-2024-26726btrfs: don't drop extent_map for free space inode on write errorMEDIUM5.517%ileMicrosoft2024-04-09
CVE-2024-26759mm/swap: fix race when skipping swapcacheMEDIUM5.517%ileMicrosoft2024-04-09
CVE-2023-52632drm/amdkfd: Fix lock dependency warning with srcuMEDIUM5.56%ileMicrosoft2024-04-09
CVE-2024-26765LoongArch: Disable IRQ before init_fn() for nonboot CPUsMEDIUM5.515%ileMicrosoft2024-04-09
CVE-2024-26767drm/amd/display: fixed integer types and null check locationsMEDIUM5.515%ileMicrosoft2024-04-09
CVE-2024-26896wifi: wfx: fix memory leak when starting APMEDIUM5.513%ileMicrosoft2024-04-09
CVE-2024-26775aoe: avoid potential deadlock at set_capacityMEDIUM5.58%ileMicrosoft2024-04-09
CVE-2024-26881net: hns3: fix kernel crash when 1588 is received on HIP08 devicesMEDIUM5.514%ileMicrosoft2024-04-09
CVE-2024-26900md: fix kmemleak of rdev->serialMEDIUM5.521%ileMicrosoft2024-04-09
CVE-2024-26902perf: RISCV: Fix panic on pmu overflow handlerMEDIUM5.515%ileMicrosoft2024-04-09
CVE-2024-26903Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_securityMEDIUM5.520%ileMicrosoft2024-04-09
CVE-2024-26909soc: qcom: pmic_glink_altmode: fix drm bridge use-after-freeMEDIUM5.515%ileMicrosoft2024-04-09
CVE-2024-31584Pytorch before v2.2.0 has an Out-of-bounds Read vulnerability via the component torch/csrc/jit/mobile/flatbuffer_loader.MEDIUM5.531%ileMicrosoft2024-04-09
CVE-2024-27437vfio/pci: Disable auto-enable of exclusive INTx IRQMEDIUM5.515%ileMicrosoft2024-04-09
CVE-2024-26812vfio/pci: Create persistent INTx handlerMEDIUM5.515%ileMicrosoft2024-04-09
CVE-2024-26718dm-crypt, dm-verity: disable taskletsMEDIUM5.513%ileMicrosoft2024-04-09
CVE-2024-26785iommufd: Fix protection fault in iommufd_test_syz_conv_iovaMEDIUM5.514%ileMicrosoft2024-04-09
CVE-2024-26686fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children statsMEDIUM5.512%ileMicrosoft2024-04-09
CVE-2024-26656drm/amdgpu: fix use-after-free bugMEDIUM5.513%ileMicrosoft2024-04-09
CVE-2024-26661drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()'MEDIUM5.513%ileMicrosoft2024-04-09
CVE-2024-26706parisc: Fix random data corruption from exception handlerMEDIUM5.517%ileMicrosoft2024-04-09
CVE-2024-26680net: atlantic: Fix DMA mapping for PTP hwts ringMEDIUM5.514%ileMicrosoft2024-04-09
CVE-2024-26691KVM: arm64: Fix circular locking dependencyMEDIUM5.58%ileMicrosoft2024-04-09
CVE-2024-26920tracing/trigger: Fix to return error if failed to alloc snapshotMEDIUM5.517%ileMicrosoft2024-04-09
CVE-2024-26700drm/amd/display: Fix MST Null Ptr for RVMEDIUM5.514%ileMicrosoft2024-04-09
CVE-2024-26719nouveau: offload fence uevents work to workqueueMEDIUM5.57%ileMicrosoft2024-04-09
CVE-2024-26876drm/bridge: adv7511: fix crash on irq during probeMEDIUM5.513%ileMicrosoft2024-04-09
CVE-2024-26255Windows Remote Access Connection Manager Information Disclosure VulnerabilityMEDIUM5.552%ileMicrosoft2024-04-09
CVE-2024-26172Windows DWM Core Library Information Disclosure VulnerabilityMEDIUM5.550%ileMicrosoft2024-04-09
CVE-2024-28901Windows Remote Access Connection Manager Information Disclosure VulnerabilityMEDIUM5.549%ileMicrosoft2024-04-09
CVE-2024-28902Windows Remote Access Connection Manager Information Disclosure VulnerabilityMEDIUM5.552%ileMicrosoft2024-04-09
CVE-2024-26209Microsoft Local Security Authority Subsystem Service Information Disclosure VulnerabilityMEDIUM5.596%ileMicrosoft2024-04-09
CVE-2024-26207Windows Remote Access Connection Manager Information Disclosure VulnerabilityMEDIUM5.552%ileMicrosoft2024-04-09
CVE-2024-26217Windows Remote Access Connection Manager Information Disclosure VulnerabilityMEDIUM5.549%ileMicrosoft2024-04-09
CVE-2024-28900Windows Remote Access Connection Manager Information Disclosure VulnerabilityMEDIUM5.549%ileMicrosoft2024-04-09
CVE-2024-29992Azure Identity Library for .NET Information Disclosure VulnerabilityMEDIUM5.550%ileMicrosoft2024-04-09
CVE-2021-3602CVE-2021-3602MEDIUM5.525%ileMicrosoft2024-04-09
CVE-2024-29986Microsoft Edge for Android (Chromium-based) Information Disclosure VulnerabilityMEDIUM5.441%ileMicrosoft2024-04-09
CVE-2024-0874Coredns: cd bit response is cached and served laterMEDIUM5.352%ileMicrosoft2024-04-09
CVE-2024-28182Reading unbounded number of HTTP/2 CONTINUATION frames to cause excessive CPU usageMEDIUM5.3100%ileMicrosoft2024-04-09
CVE-2024-24856NULL pointer deference in acpi_db_convert_to_package of Linux acpi moduleMEDIUM5.37%ileMicrosoft2024-04-09
CVE-2022-2795CVE-2022-2795MEDIUM5.375%ileMicrosoft2024-04-09
CVE-2024-26220Windows Mobile Hotspot Information Disclosure VulnerabilityMEDIUM5.063%ileMicrosoft2024-04-09
CVE-2024-29991Microsoft Edge (Chromium-based) Security Feature Bypass VulnerabilityMEDIUM5.048%ileMicrosoft2024-04-09
CVE-2024-21096Vulnerability in the MySQL Server product of Oracle MySQL (component: Client: mysqldump). Supported versions that are aMEDIUM4.935%ileMicrosoft2024-04-09
CVE-2024-26837net: bridge: switchdev: Skip MDB replays of deferred events on offloadMEDIUM4.76%ileMicrosoft2024-04-09
CVE-2024-26869f2fs: fix to truncate meta inode pages forcelyMEDIUM4.77%ileMicrosoft2024-04-09
CVE-2023-52639KVM: s390: vsie: fix race during shadow creationMEDIUM4.77%ileMicrosoft2024-04-09
CVE-2024-26671blk-mq: fix IO hang from sbitmap wakeup raceMEDIUM4.78%ileMicrosoft2024-04-09
CVE-2022-0001Intel: CVE-2022-0001 Branch History InjectionMEDIUM4.741%ileMicrosoft2024-04-09
CVE-2021-3636CVE-2021-3636MEDIUM4.621%ileMicrosoft2024-04-09
CVE-2024-30260Undici's Proxy-Authorization header not cleared on cross-origin redirect for dispatch request stream pipelineMEDIUM4.351%ileMicrosoft2024-04-09
CVE-2024-29981Microsoft Edge (Chromium-based) Spoofing VulnerabilityMEDIUM4.350%ileMicrosoft2024-04-09
CVE-2024-29056Windows Authentication Elevation of Privilege VulnerabilityMEDIUM4.360%ileMicrosoft2024-04-09
CVE-2024-28922Secure Boot Security Feature Bypass VulnerabilityMEDIUM4.150%ileMicrosoft2024-04-09
CVE-2024-29049Microsoft Edge (Chromium-based) Webview2 Spoofing VulnerabilityMEDIUM4.148%ileMicrosoft2024-04-09
CVE-2024-31580PyTorch before v2.2.0 was discovered to contain a heap buffer overflow vulnerability in the component /runtime/vararg_fuMEDIUM4.013%ileMicrosoft2024-04-09
CVE-2024-3861If an AlignedBuffer were assigned to itself, the subsequent self-move could result in an incorrect reference count and lMEDIUM4.013%ileMicrosoft2024-04-09
CVE-2024-3302There was no limit to the number of HTTP/2 CONTINUATION frames that would be processed. A server could abuse this to creLOW3.752%ileMicrosoft2024-04-09
CVE-2024-30261Undici's fetch with integrity option is too lax when algorithm is specified but hash value is in incorrectLOW3.553%ileMicrosoft2024-04-09
CVE-2022-48667smb3: fix temporary data corruption in insert rangeLOW3.39%ileMicrosoft2024-04-09
CVE-2022-48668smb3: fix temporary data corruption in collapse rangeLOW3.39%ileMicrosoft2024-04-09
CVE-2024-3177Bypassing mountable secrets policy imposed by the ServiceAccount admission pluginLOW2.781%ileMicrosoft2024-04-09
CVE-2022-48633drm/gma500: Fix WARN_ON(lock->magic != lock) errorLOW2.39%ileMicrosoft2024-04-09
CVE-2024-26904Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.UNKNOWN——Microsoft2024-04-09
CVE-2024-26908Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.UNKNOWN——Microsoft2024-04-09
CVE-2024-26814vfio/fsl-mc: Block calling interrupt handler without triggerUNKNOWN—13%ileMicrosoft2024-04-09
CVE-2024-21506Rejected reason: Duplicate of CVE-2024-5629.UNKNOWN——Microsoft2024-04-09
CVE-2024-3156Chromium: CVE-2024-3156 Inappropriate implementation in V8UNKNOWN—96%ileMicrosoft2024-04-09
CVE-2024-3158Chromium: CVE-2024-3158 Use after free in BookmarksUNKNOWN—52%ileMicrosoft2024-04-09
CVE-2024-3159Chromium: CVE-2024-3159 Out of bounds memory access in V8UNKNOWN—73%ileMicrosoft2024-04-09
CVE-2024-3157Chromium: CVE-2024-3157 Out of bounds write in CompositingUNKNOWN—54%ileMicrosoft2024-04-09
CVE-2024-3515Chromium: CVE-2024-3515 Use after free in DawnUNKNOWN—52%ileMicrosoft2024-04-09
CVE-2024-3516Chromium: CVE-2024-3516 Heap buffer overflow in ANGLEUNKNOWN—59%ileMicrosoft2024-04-09
CVE-2024-3832Chromium: CVE-2024-3832 Object corruption in V8UNKNOWN—66%ileMicrosoft2024-04-09
CVE-2024-3914Chromium: CVE-2024-3914 Use after free in V8UNKNOWN—60%ileMicrosoft2024-04-09
CVE-2024-3833Chromium: CVE-2024-3833 Object corruption in WebAssemblyUNKNOWN—96%ileMicrosoft2024-04-09
CVE-2024-3834Chromium: CVE-2024-3834 Use after free in DownloadsUNKNOWN—60%ileMicrosoft2024-04-09
CVE-2024-3837Chromium: CVE-2024-3837 Use after free in QUICUNKNOWN—58%ileMicrosoft2024-04-09
CVE-2024-3838Chromium: CVE-2024-3838 Inappropriate implementation in AutofillUNKNOWN—29%ileMicrosoft2024-04-09
CVE-2024-3839Chromium: CVE-2024-3839 Out of bounds read in FontsUNKNOWN—49%ileMicrosoft2024-04-09
CVE-2024-3840Chromium: CVE-2024-3840 Insufficient policy enforcement in Site IsolationUNKNOWN—51%ileMicrosoft2024-04-09
CVE-2024-3844Chromium: CVE-2024-3844 Inappropriate implementation in ExtensionsUNKNOWN—48%ileMicrosoft2024-04-09
CVE-2024-3841Chromium: CVE-2024-3841 Insufficient data validation in Browser SwitcherUNKNOWN—48%ileMicrosoft2024-04-09
CVE-2024-3845Chromium: CVE-2024-3845 Inappropriate implementation in NetworkUNKNOWN—52%ileMicrosoft2024-04-09
CVE-2024-3843Chromium: CVE-2024-3843 Insufficient data validation in DownloadsUNKNOWN—44%ileMicrosoft2024-04-09
CVE-2024-3847Chromium: CVE-2024-3847 Insufficient policy enforcement in WebUIUNKNOWN—53%ileMicrosoft2024-04-09
CVE-2024-3846Chromium: CVE-2024-3846 Inappropriate implementation in PromptsUNKNOWN—50%ileMicrosoft2024-04-09
CVE-2024-4058Chromium: CVE-2024-4058 Type Confusion in ANGLEUNKNOWN—95%ileMicrosoft2024-04-09
CVE-2024-4060Chromium: CVE-2024-4060 Use after free in DawnUNKNOWN—60%ileMicrosoft2024-04-09
CVE-2024-4059Chromium: CVE-2024-4059 Out of bounds read in V8 APIUNKNOWN—56%ileMicrosoft2024-04-09
CVE-2024-28923Secure Boot Security Feature Bypass VulnerabilityUNKNOWN—39%ileMicrosoft2024-04-09
CVE-2022-24963Apache Portable Runtime (APR): out-of-bound writes in the apr_encode family of functionsCRITICAL9.871%ileMicrosoft2023-01-10
CVE-2022-4338An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.CRITICAL9.868%ileMicrosoft2023-01-10
CVE-2022-3515A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability canCRITICAL9.874%ileMicrosoft2023-01-10
CVE-2022-41903Integer overflow in `git archive` `git log --format` leading to RCE in gitCRITICAL9.899%ileMicrosoft2023-01-10
CVE-2022-4337An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch.CRITICAL9.868%ileMicrosoft2023-01-10
CVE-2022-47629CVE-2022-47629CRITICAL9.873%ileMicrosoft2023-01-10
CVE-2022-36760Apache HTTP Server: mod_proxy_ajp Possible request smugglingCRITICAL9.077%ileMicrosoft2023-01-10
CVE-2022-2196Speculative execution attacks in KVM VMXHIGH8.821%ileMicrosoft2023-01-10
CVE-2023-21549Windows SMB Witness Service Elevation of Privilege VulnerabilityHIGH8.870%ileMicrosoft2023-01-10
CVE-2023-21674Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityHIGH8.899%ileMicrosoft2023-01-10
CVE-2023-21676Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution VulnerabilityHIGH8.872%ileMicrosoft2023-01-10
CVE-2023-21681Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityHIGH8.869%ileMicrosoft2023-01-10
CVE-2023-21732Microsoft ODBC Driver Remote Code Execution VulnerabilityHIGH8.869%ileMicrosoft2023-01-10
CVE-2023-21742Microsoft SharePoint Server Remote Code Execution VulnerabilityHIGH8.899%ileMicrosoft2023-01-10
CVE-2023-21744Microsoft SharePoint Server Remote Code Execution VulnerabilityHIGH8.885%ileMicrosoft2023-01-10
CVE-2023-21796Microsoft Edge (Chromium-based) Elevation of Privilege VulnerabilityHIGH8.359%ileMicrosoft2023-01-10
CVE-2023-21775Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityHIGH8.359%ileMicrosoft2023-01-10
CVE-2023-21795Microsoft Edge (Chromium-based) Elevation of Privilege VulnerabilityHIGH8.356%ileMicrosoft2023-01-10
CVE-2023-21712Windows Point-to-Point Tunneling Protocol Remote Code Execution VulnerabilityHIGH8.159%ileMicrosoft2023-01-10
CVE-2023-21535Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution VulnerabilityHIGH8.162%ileMicrosoft2023-01-10
CVE-2023-21546Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution VulnerabilityHIGH8.162%ileMicrosoft2023-01-10
CVE-2023-21543Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution VulnerabilityHIGH8.175%ileMicrosoft2023-01-10
CVE-2023-21548Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution VulnerabilityHIGH8.162%ileMicrosoft2023-01-10
CVE-2023-21555Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution VulnerabilityHIGH8.162%ileMicrosoft2023-01-10
CVE-2023-21556Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution VulnerabilityHIGH8.171%ileMicrosoft2023-01-10
CVE-2023-21679Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution VulnerabilityHIGH8.162%ileMicrosoft2023-01-10
CVE-2022-47943CVE-2022-47943HIGH8.188%ileMicrosoft2023-01-10
CVE-2022-47940CVE-2022-47940HIGH8.170%ileMicrosoft2023-01-10
CVE-2023-21762Microsoft Exchange Server Spoofing VulnerabilityHIGH8.073%ileMicrosoft2023-01-10
CVE-2023-21745Microsoft Exchange Server Spoofing VulnerabilityHIGH8.072%ileMicrosoft2023-01-10
CVE-2023-0051Heap-based Buffer Overflow in vim/vimHIGH7.841%ileMicrosoft2023-01-10
CVE-2023-0288Heap-based Buffer Overflow in vim/vimHIGH7.838%ileMicrosoft2023-01-10
CVE-2023-0512Divide By Zero in vim/vimHIGH7.840%ileMicrosoft2023-01-10
CVE-2022-3650A privilege escalation flaw was found in Ceph. Ceph-crash.service allows a local attacker to escalate privileges to rootHIGH7.825%ileMicrosoft2023-01-10
CVE-2022-41953Git clone remote code execution vulnerability in git-for-windowsHIGH7.893%ileMicrosoft2023-01-10
CVE-2018-25078man-db before 2.8.5 on Gentoo allows local users (with access to the man user account) to gain root privileges because /HIGH7.831%ileMicrosoft2023-01-10
CVE-2022-45639OS Command injection vulnerability in sleuthkit fls tool 4.11.1 allows attackers to execute arbitrary commands via a craHIGH7.891%ileMicrosoft2023-01-10
CVE-2022-47021A null pointer dereference issue was discovered in functions op_get_data and op_open1 in opusfile.c in xiph opusfile 0.9HIGH7.832%ileMicrosoft2023-01-10
CVE-2023-0049Out-of-bounds Read in vim/vimHIGH7.838%ileMicrosoft2023-01-10
CVE-2023-0054Out-of-bounds Write in vim/vimHIGH7.838%ileMicrosoft2023-01-10
CVE-2023-0266Use after free in SNDRV_CTL_IOCTL_ELEM in Linux KernelHIGH7.889%ileMicrosoft2023-01-10
CVE-2023-0433Heap-based Buffer Overflow in vim/vimHIGH7.843%ileMicrosoft2023-01-10
CVE-2023-23559In rndis_query_oid in drivers/net/wireless/rndis_wlan.c in the Linux kernel through 6.1.5 there is an integer overflow iHIGH7.822%ileMicrosoft2023-01-10
CVE-2023-22809In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environmenHIGH7.899%ileMicrosoft2023-01-10
CVE-2022-4139An incorrect TLB flush issue was found in the Linux kernel’s GPU i915 kernel driver, potentially leading to random memorHIGH7.817%ileMicrosoft2023-01-10
CVE-2022-3715A flaw was found in the bash package, where a heap-buffer overflow can occur in valid parameter_transform. This issue maHIGH7.828%ileMicrosoft2023-01-10
CVE-2022-4378A stack overflow flaw was found in the Linux kernel's SYSCTL subsystem in how a user changes certain kernel parameters aHIGH7.836%ileMicrosoft2023-01-10
CVE-2022-4696There exists a use-after-free vulnerability in the Linux kernel through io_uring and the IORING_OP_SPLICE operation. If HIGH7.833%ileMicrosoft2023-01-10
CVE-2023-21552Windows GDI Elevation of Privilege VulnerabilityHIGH7.888%ileMicrosoft2023-01-10
CVE-2023-21524Windows Local Security Authority (LSA) Elevation of Privilege VulnerabilityHIGH7.833%ileMicrosoft2023-01-10
CVE-2023-21541Windows Task Scheduler Elevation of Privilege VulnerabilityHIGH7.844%ileMicrosoft2023-01-10
CVE-2023-21551Microsoft Cryptographic Services Elevation of Privilege VulnerabilityHIGH7.836%ileMicrosoft2023-01-10
CVE-2023-21558Windows Error Reporting Service Elevation of Privilege VulnerabilityHIGH7.838%ileMicrosoft2023-01-10
CVE-2023-21561Microsoft Cryptographic Services Elevation of Privilege VulnerabilityHIGH7.836%ileMicrosoft2023-01-10
CVE-2023-21678Windows Print Spooler Elevation of Privilege VulnerabilityHIGH7.844%ileMicrosoft2023-01-10
CVE-2023-21680Windows Win32k Elevation of Privilege VulnerabilityHIGH7.839%ileMicrosoft2023-01-10
CVE-2023-21724Microsoft DWM Core Library Elevation of Privilege VulnerabilityHIGH7.840%ileMicrosoft2023-01-10
CVE-2023-21726Windows Credential Manager User Interface Elevation of Privilege VulnerabilityHIGH7.839%ileMicrosoft2023-01-10
CVE-2023-21730Microsoft Cryptographic Services Elevation of Privilege VulnerabilityHIGH7.841%ileMicrosoft2023-01-10
CVE-2023-21734Microsoft Office Remote Code Execution VulnerabilityHIGH7.857%ileMicrosoft2023-01-10
CVE-2023-21735Microsoft Office Remote Code Execution VulnerabilityHIGH7.850%ileMicrosoft2023-01-10
CVE-2023-21736Microsoft Office Visio Remote Code Execution VulnerabilityHIGH7.850%ileMicrosoft2023-01-10
CVE-2023-21737Microsoft Office Visio Remote Code Execution VulnerabilityHIGH7.850%ileMicrosoft2023-01-10
CVE-2023-21738Microsoft Office Visio Remote Code Execution VulnerabilityHIGH7.850%ileMicrosoft2023-01-10
CVE-2023-21746Windows NTLM Elevation of Privilege VulnerabilityHIGH7.883%ileMicrosoft2023-01-10
CVE-2023-21747Windows Kernel Elevation of Privilege VulnerabilityHIGH7.854%ileMicrosoft2023-01-10
CVE-2023-21748Windows Kernel Elevation of Privilege VulnerabilityHIGH7.854%ileMicrosoft2023-01-10
CVE-2023-21749Windows Kernel Elevation of Privilege VulnerabilityHIGH7.853%ileMicrosoft2023-01-10
CVE-2023-21754Windows Kernel Elevation of Privilege VulnerabilityHIGH7.838%ileMicrosoft2023-01-10
CVE-2023-21755Windows Kernel Elevation of Privilege VulnerabilityHIGH7.840%ileMicrosoft2023-01-10
CVE-2023-21763Microsoft Exchange Server Elevation of Privilege VulnerabilityHIGH7.845%ileMicrosoft2023-01-10
CVE-2023-21764Microsoft Exchange Server Elevation of Privilege VulnerabilityHIGH7.844%ileMicrosoft2023-01-10
CVE-2023-21765Windows Print Spooler Elevation of Privilege VulnerabilityHIGH7.838%ileMicrosoft2023-01-10
CVE-2023-21767Windows Overlay Filter Elevation of Privilege VulnerabilityHIGH7.838%ileMicrosoft2023-01-10
CVE-2023-21768Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityHIGH7.899%ileMicrosoft2023-01-10
CVE-2023-21772Windows Kernel Elevation of Privilege VulnerabilityHIGH7.850%ileMicrosoft2023-01-10
CVE-2023-21773Windows Kernel Elevation of Privilege VulnerabilityHIGH7.850%ileMicrosoft2023-01-10
CVE-2023-21774Windows Kernel Elevation of Privilege VulnerabilityHIGH7.850%ileMicrosoft2023-01-10
CVE-2023-217813D Builder Remote Code Execution VulnerabilityHIGH7.857%ileMicrosoft2023-01-10
CVE-2023-217823D Builder Remote Code Execution VulnerabilityHIGH7.858%ileMicrosoft2023-01-10
CVE-2023-217843D Builder Remote Code Execution VulnerabilityHIGH7.858%ileMicrosoft2023-01-10
CVE-2023-217863D Builder Remote Code Execution VulnerabilityHIGH7.857%ileMicrosoft2023-01-10
CVE-2023-217913D Builder Remote Code Execution VulnerabilityHIGH7.857%ileMicrosoft2023-01-10
CVE-2023-217933D Builder Remote Code Execution VulnerabilityHIGH7.857%ileMicrosoft2023-01-10
CVE-2023-21537Microsoft Message Queuing (MSMQ) Elevation of Privilege VulnerabilityHIGH7.842%ileMicrosoft2023-01-10
CVE-2023-21675Windows Kernel Elevation of Privilege VulnerabilityHIGH7.854%ileMicrosoft2023-01-10
CVE-2023-21779Visual Studio Code Remote Code Execution VulnerabilityHIGH7.881%ileMicrosoft2023-01-10
CVE-2023-217833D Builder Remote Code Execution VulnerabilityHIGH7.862%ileMicrosoft2023-01-10
CVE-2023-217853D Builder Remote Code Execution VulnerabilityHIGH7.857%ileMicrosoft2023-01-10
CVE-2023-217873D Builder Remote Code Execution VulnerabilityHIGH7.857%ileMicrosoft2023-01-10
CVE-2023-217883D Builder Remote Code Execution VulnerabilityHIGH7.857%ileMicrosoft2023-01-10
CVE-2023-217893D Builder Remote Code Execution VulnerabilityHIGH7.857%ileMicrosoft2023-01-10
CVE-2023-217903D Builder Remote Code Execution VulnerabilityHIGH7.857%ileMicrosoft2023-01-10
CVE-2023-217923D Builder Remote Code Execution VulnerabilityHIGH7.858%ileMicrosoft2023-01-10
CVE-2022-25881This affects versions of the package http-cache-semantics before 4.1.1. The issue can be exploited via malicious requestHIGH7.574%ileMicrosoft2023-01-10
CVE-2022-3094An UPDATE message flood may cause named to exhaust all available memoryHIGH7.596%ileMicrosoft2023-01-10
CVE-2022-3924named configured to answer from stale cache may terminate unexpectedly at recursive-clients soft quotaHIGH7.597%ileMicrosoft2023-01-10
CVE-2022-41860In freeradius when an EAP-SIM supplicant sends an unknown SIM option the server will try to look that option up in the iHIGH7.564%ileMicrosoft2023-01-10
CVE-2022-25927Versions of the package ua-parser-js from 0.7.30 and before 0.7.33, from 0.8.1 and before 1.0.33 are vulnerable to RegulHIGH7.575%ileMicrosoft2023-01-10
CVE-2023-22895The bzip2 crate before 0.4.4 for Rust allow attackers to cause a denial of service via a large file that triggers an intHIGH7.566%ileMicrosoft2023-01-10
CVE-2022-25882Versions of the package onnx before 1.13.0 are vulnerable to Directory Traversal as the external_data field of the tensoHIGH7.574%ileMicrosoft2023-01-10
CVE-2022-3736named configured to answer from stale cache may terminate unexpectedly while processing RRSIG queriesHIGH7.599%ileMicrosoft2023-01-10
CVE-2022-38725An integer overflow in the RFC3164 parser in One Identity syslog-ng 3.0 through 3.37 allows remote attackers to cause a HIGH7.582%ileMicrosoft2023-01-10
CVE-2022-41721Request smuggling due to improper request handling in golang.org/x/net/http2/h2cHIGH7.576%ileMicrosoft2023-01-10
CVE-2022-4379A use-after-free vulnerability was found in __nfs42_ssc_open() in fs/nfs/nfs4file.c in the Linux kernel. This flaw allowHIGH7.593%ileMicrosoft2023-01-10
CVE-2023-21538.NET Denial of Service VulnerabilityHIGH7.585%ileMicrosoft2023-01-10
CVE-2023-21547Internet Key Exchange (IKE) Protocol Denial of Service VulnerabilityHIGH7.5100%ileMicrosoft2023-01-10
CVE-2023-21539Windows Authentication Remote Code Execution VulnerabilityHIGH7.564%ileMicrosoft2023-01-10
CVE-2023-21557Windows Lightweight Directory Access Protocol (LDAP) Denial of Service VulnerabilityHIGH7.579%ileMicrosoft2023-01-10
CVE-2023-21677Windows Internet Key Exchange (IKE) Extension Denial of Service VulnerabilityHIGH7.578%ileMicrosoft2023-01-10
CVE-2023-21683Windows Internet Key Exchange (IKE) Extension Denial of Service VulnerabilityHIGH7.578%ileMicrosoft2023-01-10
CVE-2023-21728Windows Netlogon Denial of Service VulnerabilityHIGH7.578%ileMicrosoft2023-01-10
CVE-2023-21757Windows Layer 2 Tunneling Protocol (L2TP) Denial of Service VulnerabilityHIGH7.579%ileMicrosoft2023-01-10
CVE-2023-21758Windows Internet Key Exchange (IKE) Extension Denial of Service VulnerabilityHIGH7.5100%ileMicrosoft2023-01-10
CVE-2023-21761Microsoft Exchange Server Information Disclosure VulnerabilityHIGH7.573%ileMicrosoft2023-01-10
CVE-2023-21527Windows iSCSI Service Denial of Service VulnerabilityHIGH7.578%ileMicrosoft2023-01-10
CVE-2022-48285loadAsync in JSZip before 3.8.0 allows Directory Traversal via a crafted ZIP archive.HIGH7.370%ileMicrosoft2023-01-10
CVE-2022-41858A flaw was found in the Linux kernel. A NULL pointer dereference may occur while a slip driver is in progress to detach HIGH7.120%ileMicrosoft2023-01-10
CVE-2023-21741Microsoft Office Visio Information Disclosure VulnerabilityHIGH7.176%ileMicrosoft2023-01-10
CVE-2023-21750Windows Kernel Elevation of Privilege VulnerabilityHIGH7.150%ileMicrosoft2023-01-10
CVE-2023-21752Windows Backup Service Elevation of Privilege VulnerabilityHIGH7.192%ileMicrosoft2023-01-10
CVE-2023-21760Windows Print Spooler Elevation of Privilege VulnerabilityHIGH7.142%ileMicrosoft2023-01-10
CVE-2023-21531Azure Service Fabric Container Elevation of Privilege VulnerabilityHIGH7.046%ileMicrosoft2023-01-10
CVE-2023-21542Windows Installer Elevation of Privilege VulnerabilityHIGH7.020%ileMicrosoft2023-01-10
CVE-2023-21733Windows Bind Filter Driver Elevation of Privilege VulnerabilityHIGH7.021%ileMicrosoft2023-01-10
CVE-2023-21739Windows Bluetooth Driver Elevation of Privilege VulnerabilityHIGH7.044%ileMicrosoft2023-01-10
CVE-2023-21771Windows Local Session Manager (LSM) Elevation of Privilege VulnerabilityHIGH7.032%ileMicrosoft2023-01-10
CVE-2023-21532Windows GDI Elevation of Privilege VulnerabilityHIGH7.037%ileMicrosoft2023-01-10
CVE-2023-21563BitLocker Security Feature Bypass VulnerabilityMEDIUM6.873%ileMicrosoft2023-01-10
CVE-2023-21560Windows Boot Manager Security Feature Bypass VulnerabilityMEDIUM6.663%ileMicrosoft2023-01-10
CVE-2022-25147Apache Portable Runtime Utility (APR-util): out-of-bounds writes in the apr_base64 family of functionsMEDIUM6.570%ileMicrosoft2023-01-10
CVE-2022-3437A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrap_des() and unwrap_des3() routines MEDIUM6.589%ileMicrosoft2023-01-10
CVE-2022-41861A flaw was found in freeradius. A malicious RADIUS client or home server can send a malformed abinary attribute which caMEDIUM6.562%ileMicrosoft2023-01-10
CVE-2022-47015MariaDB Server before 10.3.34 thru 10.9.3 is vulnerable to Denial of Service. It is possible for function spider_db_mbasMEDIUM6.572%ileMicrosoft2023-01-10
CVE-2023-21719Microsoft Edge (Chromium-based) Security Feature Bypass VulnerabilityMEDIUM6.576%ileMicrosoft2023-01-10
CVE-2023-22745Buffer Overlow in TSS2_RC_Decode in tpm2-tssMEDIUM6.441%ileMicrosoft2023-01-10
CVE-2023-21725Windows Malicious Software Removal Tool Elevation of Privilege VulnerabilityMEDIUM6.330%ileMicrosoft2023-01-10
CVE-2022-46456NASM v2.16 was discovered to contain a global buffer overflow in the component dbgdbg_typevalue at /output/outdbg.c.MEDIUM6.128%ileMicrosoft2023-01-10
CVE-2023-22742libgit2 fails to verify SSH keys by defaultMEDIUM5.944%ileMicrosoft2023-01-10
CVE-2023-21875Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versionsMEDIUM5.971%ileMicrosoft2023-01-10
CVE-2022-46176Cargo did not verify SSH host keysMEDIUM5.948%ileMicrosoft2023-01-10
CVE-2023-21877Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected areMEDIUM5.553%ileMicrosoft2023-01-10
CVE-2023-24056In pkgconf through 1.9.3 variable duplication can cause unbounded string expansion due to incorrect checks in libpkgconfMEDIUM5.541%ileMicrosoft2023-01-10
CVE-2022-4543A flaw named "EntryBleed" was found in the Linux Kernel Page Table Isolation (KPTI). This issue could allow a local attaMEDIUM5.558%ileMicrosoft2023-01-10
CVE-2022-35977Integer overflow in certain command arguments can drive Redis to OOM panicMEDIUM5.598%ileMicrosoft2023-01-10
CVE-2022-4415A vulnerability was found in systemd. This security flaw can cause a local information leak due to systemd-coredump not MEDIUM5.555%ileMicrosoft2023-01-10
CVE-2022-48303GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jumMEDIUM5.591%ileMicrosoft2023-01-10
CVE-2023-0394A NULL pointer dereference flaw was found in rawv6_push_pending_frames in net/ipv6/raw.c in the network subcomponent in MEDIUM5.560%ileMicrosoft2023-01-10
CVE-2023-0469A use-after-free flaw was found in io_uring/filetable.c in io_install_fixed_file in the io_uring subcomponent in the LinMEDIUM5.524%ileMicrosoft2023-01-10
CVE-2023-21880Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected areMEDIUM5.554%ileMicrosoft2023-01-10
CVE-2023-22458Integer overflow in multiple Redis commands can lead to denial-of-serviceMEDIUM5.599%ileMicrosoft2023-01-10
CVE-2023-23454cbq_classify in net/sched/sch_cbq.c in the Linux kernel through 6.1.4 allows attackers to cause a denial of service (slaMEDIUM5.524%ileMicrosoft2023-01-10
CVE-2023-23455atm_tc_enqueue in net/sched/sch_atm.c in the Linux kernel through 6.1.4 allows attackers to cause a denial of service beMEDIUM5.519%ileMicrosoft2023-01-10
CVE-2022-4285An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version iMEDIUM5.536%ileMicrosoft2023-01-10
CVE-2022-46457NASM v2.16 was discovered to contain a segmentation violation in the component ieee_write_file at /output/outieee.c.MEDIUM5.526%ileMicrosoft2023-01-10
CVE-2022-47929In the Linux kernel before 6.1.6 a NULL pointer dereference bug in the traffic control subsystem allows an unprivileged MEDIUM5.558%ileMicrosoft2023-01-10
CVE-2022-48281processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g. "WRITE of sizeMEDIUM5.536%ileMicrosoft2023-01-10
CVE-2023-21540Windows Cryptographic Information Disclosure VulnerabilityMEDIUM5.544%ileMicrosoft2023-01-10
CVE-2023-21550Windows Cryptographic Information Disclosure VulnerabilityMEDIUM5.544%ileMicrosoft2023-01-10
CVE-2023-21559Windows Cryptographic Information Disclosure VulnerabilityMEDIUM5.544%ileMicrosoft2023-01-10
CVE-2023-21753Event Tracing for Windows Information Disclosure VulnerabilityMEDIUM5.549%ileMicrosoft2023-01-10
CVE-2023-21776Windows Kernel Information Disclosure VulnerabilityMEDIUM5.560%ileMicrosoft2023-01-10
CVE-2021-4235CVE-2021-4235MEDIUM5.534%ileMicrosoft2023-01-10
CVE-2022-4662CVE-2022-4662MEDIUM5.524%ileMicrosoft2023-01-10
CVE-2023-22466Tokio's reject_remote_clients configuration may get dropped when creating a Windows named pipeMEDIUM5.444%ileMicrosoft2023-01-10
CVE-2023-21830Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: SerializatiMEDIUM5.361%ileMicrosoft2023-01-10
CVE-2022-37436Apache HTTP Server: mod_proxy prior to 2.4.55 allows a backend to trigger HTTP response splittingMEDIUM5.399%ileMicrosoft2023-01-10
CVE-2023-21682Windows Point-to-Point Protocol (PPP) Information Disclosure VulnerabilityMEDIUM5.369%ileMicrosoft2023-01-10
CVE-2023-21743Microsoft SharePoint Server Security Feature Bypass VulnerabilityMEDIUM5.363%ileMicrosoft2023-01-10
CVE-2023-21525Remote Procedure Call Runtime Denial of Service VulnerabilityMEDIUM5.372%ileMicrosoft2023-01-10
CVE-2022-46392CVE-2022-46392MEDIUM5.353%ileMicrosoft2023-01-10
CVE-2023-21876Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are aMEDIUM4.955%ileMicrosoft2023-01-10
CVE-2023-21879Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are aMEDIUM4.955%ileMicrosoft2023-01-10
CVE-2023-21881Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are aMEDIUM4.955%ileMicrosoft2023-01-10
CVE-2023-21878Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are aMEDIUM4.955%ileMicrosoft2023-01-10
CVE-2023-21883Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are aMEDIUM4.955%ileMicrosoft2023-01-10
CVE-2023-21887Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: GIS). Supported versions that are affecteMEDIUM4.999%ileMicrosoft2023-01-10
CVE-2023-0468A use-after-free flaw was found in io_uring/poll.c in io_poll_check_events in the io_uring subcomponent in the Linux KerMEDIUM4.720%ileMicrosoft2023-01-10
CVE-2021-36647Use of a Broken or Risky Cryptographic Algorithm in the function mbedtls_mpi_exp_mod() in lignum.c in Mbed TLS Mbed TLS MEDIUM4.76%ileMicrosoft2023-01-10
CVE-2023-21766Windows Overlay Filter Information Disclosure VulnerabilityMEDIUM4.755%ileMicrosoft2023-01-10
CVE-2023-21536Event Tracing for Windows Information Disclosure VulnerabilityMEDIUM4.732%ileMicrosoft2023-01-10
CVE-2022-4344Memory exhaustion in the Kafka protocol dissector in Wireshark 4.0.0 to 4.0.1 and 3.6.0 to 3.6.9 allows denial of servicMEDIUM4.344%ileMicrosoft2023-01-10
CVE-2018-14628An information leak vulnerability was discovered in Samba's LDAP server. Due to missing access control checks, an authenMEDIUM4.364%ileMicrosoft2023-01-10
CVE-2023-21843Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Sound). SuLOW3.769%ileMicrosoft2023-01-10
CVE-2023-21759Windows Smart Card Resource Management Server Security Feature Bypass VulnerabilityLOW3.345%ileMicrosoft2023-01-10
CVE-2023-21882Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are aLOW2.747%ileMicrosoft2023-01-10
CVE-2022-28331Apache Portable Runtime (APR): Windows out-of-bounds write in apr_socket_sendv functionUNKNOWN—73%ileMicrosoft2023-01-10
CVE-2022-4743A potential memory leak issue was discovered in SDL2 in GLES_CreateTexture() function in SDL_render_gles.c. The vulnerabUNKNOWN—67%ileMicrosoft2023-01-10
CVE-2023-0129Chromium:CVE-2023-0129: Heap buffer overflow in Network ServiceUNKNOWN—40%ileMicrosoft2023-01-10
CVE-2023-0130Chromium:CVE-2023-0130: Inappropriate implementation in Fullscreen APIUNKNOWN—44%ileMicrosoft2023-01-10
CVE-2023-0131Chromium:CVE-2023-0131: Inappropriate implementation in iframe SandboxUNKNOWN—45%ileMicrosoft2023-01-10
CVE-2023-0132Chromium:CVE-2023-0132: Inappropriate implementation in Permission promptsUNKNOWN—40%ileMicrosoft2023-01-10
CVE-2023-0133Chromium:CVE-2023-0133: Inappropriate implementation in Permission promptsUNKNOWN—44%ileMicrosoft2023-01-10
CVE-2023-0134Chromium:CVE-2023-0134: Use after free in CartUNKNOWN—37%ileMicrosoft2023-01-10
CVE-2023-0135Chromium:CVE-2023-0135: Use after free in CartUNKNOWN—37%ileMicrosoft2023-01-10
CVE-2023-0136Chromium:CVE-2023-0136: Inappropriate implementation in Fullscreen APIUNKNOWN—48%ileMicrosoft2023-01-10
CVE-2023-0138Chromium:CVE-2023-0138: Heap buffer overflow in libphonenumberUNKNOWN—50%ileMicrosoft2023-01-10
CVE-2023-0139Chromium:CVE-2023-0139: Insufficient validation of untrusted input in DownloadsUNKNOWN—45%ileMicrosoft2023-01-10
CVE-2023-0140Chromium:CVE-2023-0140: Inappropriate implementation in File System APIUNKNOWN—45%ileMicrosoft2023-01-10
CVE-2023-0141Chromium:CVE-2023-0141: Insufficient policy enforcement in CORSUNKNOWN—45%ileMicrosoft2023-01-10
CVE-2023-0471Chromium: CVE-2023-0471 Use after free in WebTransportUNKNOWN—51%ileMicrosoft2023-01-10
CVE-2023-0472Chromium: CVE-2023-0472 Use after free in WebRTCUNKNOWN—49%ileMicrosoft2023-01-10
CVE-2023-0473Chromium: CVE-2023-0473: Type Confusion in ServiceWorkerUNKNOWN—49%ileMicrosoft2023-01-10
CVE-2023-0474Chromium: CVE-2023-0474 Use after free in GuestViewUNKNOWN—40%ileMicrosoft2023-01-10