Source: msrc

Vim: Vimscript Code Injection in cucumber filetype plugin via crafted step-definition regex

2026-06-11 CVE-2026-47167

Vim: Vimscript Code Injection in netrw NetrwBookHistSave() via crafted directory name

2026-06-11 CVE-2026-47162

AES-OCB IV Ignored on EVP_Cipher() Path

2026-06-10 CVE-2026-45445

CMS AuthEnvelopedData Processing May Accept Forged Messages

2026-06-10 CVE-2026-34182

criticalMicrosoft MSRC 2026-W24

Heap Buffer Over-read in ASN.1 Content Parsing

2026-06-10 CVE-2026-34180

Heap Use-After-Free in the PKCS7_verify() Function

2026-06-10 CVE-2026-45447

Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes

2026-06-10 CVE-2026-45446

Insufficient verification that responses belong to a query

2026-06-10 CVE-2026-10846

Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()

2026-06-10 CVE-2026-42768

lowMicrosoft MSRC 2026-W24

NULL Pointer Dereference in CRMF EncryptedValue Decryption

2026-06-10 CVE-2026-42767

NULL Pointer Dereference in QUIC Server Initial Packet Handling

2026-06-10 CVE-2026-42764

Out-of-Bounds Read in CMS Password-Based Decryption

2026-06-10 CVE-2026-9076

PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys

2026-06-10 CVE-2026-34181

Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion

2026-06-10 CVE-2026-7383

Possible NULL Dereference in Password-Based CMS Decryption

2026-06-10 CVE-2026-42766

Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate

2026-06-10 CVE-2026-42769

Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler

2026-06-10 CVE-2026-34183

Microsoft Defender Elevation of Privilege Vulnerability

2026-06-09 CVE-2026-41091

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

2026-06-09 CVE-2026-45495

SQLite before 3.53.2 Heap Buffer Overflow via FTS5 fts5ChunkIterate

2026-06-09 CVE-2026-11824

SQLite before 3.53.2 Memory Corruption in FTS5 Extension

2026-06-09 CVE-2026-11822

Holes in EndpointSlice Validation Enable Host Network Hijack

2026-06-01 CVE-2021-25740

lowMicrosoft MSRC 2026-W23

Webhook redirect in kube-apiserver

2026-06-01 CVE-2020-8561

mediumMicrosoft MSRC 2026-W23

gitoxide - Command Injection via Partial .gitmodules Override in gix-submodule

2026-05-28 CVE-2026-40034

highMicrosoft MSRC 2026-W22

Cargo can be coerced to share credentials between registries

2026-05-26 CVE-2026-5222

lowMicrosoft MSRC 2026-W22

Microsoft Defender Denial of Service Vulnerability

2026-05-26 CVE-2026-45498

mediumMicrosoft MSRC 2026-W22

Microsoft Defender Remote Code Execution Vulnerability

2026-05-26 CVE-2026-45584

highMicrosoft MSRC 2026-W22

Crates in third party registries can override the cached source of other crates

2026-05-25 CVE-2026-5223

mediumMicrosoft MSRC 2026-W22

mptcp: fix soft lockup in mptcp_recvmsg()

2026-05-23 CVE-2026-43029

scsi: qla2xxx: Completely fix fcport double free

2026-05-23 CVE-2026-43414

criticalMicrosoft MSRC 2026-W21

Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html

2026-05-22 CVE-2026-42502

NGINX JavaScript vulnerability

2026-05-21 CVE-2026-8711

criticalMicrosoft MSRC 2026-W21

Amplification vulnerabilities via self-pointed glue records

2026-05-20 CVE-2026-3592

Another 'ghost domain names' attack variant

2026-05-20 CVE-2026-40622

BIND 9 server memory exhaustion during GSS-API TKEY negotiation

2026-05-20 CVE-2026-3039

Crash during DNSSEC validation of malicious content

2026-05-20 CVE-2026-42959

Degradation of service with unbounded NSEC3 hash calculations

2026-05-20 CVE-2026-42923

Heap overflow with multiple NSID, COOKIE, PADDING EDNS options

2026-05-20 CVE-2026-42944

Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS implementation

2026-05-20 CVE-2026-3593

Invalid handling of CLASS != IN

2026-05-20 CVE-2026-5946

Jostle logic bypass degrades resolution performance

2026-05-20 CVE-2026-42534

Long list of incoming EDNS options degrades performance

2026-05-20 CVE-2026-41292

Missing exit out of permission check in haveged could lead to root exploit

2026-05-20 CVE-2026-41054

Packet of death with DNSCrypt

2026-05-20 CVE-2026-32792

Possible arbitrary code execution during DNSSEC validation

2026-05-20 CVE-2026-33278

criticalMicrosoft MSRC 2026-W21

Possible cache poisoning via promiscuous records for the authority section

2026-05-20 CVE-2026-42960

Rsync < 3.4.3 Authorization Bypass via Hostname Resolution

2026-05-20 CVE-2026-43617

Rsync < 3.4.3 Integer Overflow Information Disclosure

2026-05-20 CVE-2026-43618

Rsync < 3.4.3 Symlink Race Condition via Path-Based Syscalls

2026-05-20 CVE-2026-43619

Rsync < 3.4.3 TOCTOU Race Condition Allows Symlink-Based Arbitrary File Write

2026-05-20 CVE-2026-29518

SIG(0) validation during query flood may lead to undefined behavior

2026-05-20 CVE-2026-5947

Unbounded resend loop in BIND 9 resolver

2026-05-20 CVE-2026-5950

Uncontrolled Search Path Element in Qt Network OpenSSL TLS backend allows rogue CA certificate loading

2026-05-19 CVE-2025-14575

lowMicrosoft MSRC 2026-W21

Gnutls: gnutls: denial of service via dtls packet reordering vulnerability

2026-05-18 CVE-2026-42009

ptrace: slightly saner 'get_dumpable()' logic

2026-05-18 CVE-2026-46333