Source: msrc

GNU Binutils thru 2.46 readelf contains a double free vulnerability when processing a crafted ELF binary with malformed relocation data. During GOT relocation handling, dump_reloca

2026-03-10 CVE-2025-69650

GNU Binutils thru 2.46 readelf contains a null pointer dereference vulnerability when processing a crafted ELF binary with malformed header fields. During relocation processing, an

2026-03-10 CVE-2025-69649

GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an abort (SIGABRT) when processing a crafted ELF binary with malformed DWARF abbrev or debug information. Due

2026-03-10 CVE-2025-69652

GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an invalid pointer free when processing a crafted ELF binary with malformed relocation or symbol data. If dump

2026-03-10 CVE-2025-69651

Handlebars.js has Denial of Service via Malformed Decorator Syntax in Template Compilation

2026-03-10 CVE-2026-33939

Handlebars.js has JavaScript Injection via AST Type Confusion

2026-03-10 CVE-2026-33937

criticalMicrosoft MSRC 2026-W11

Handlebars.js has JavaScript Injection via AST Type Confusion by tampering @partial-block

2026-03-10 CVE-2026-33938

HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them

2026-03-10 CVE-2026-23382

Hybrid Worker Extension (Arc‑enabled Windows VMs) Elevation of Privilege Vulnerability

2026-03-10 CVE-2026-26141

i40e: Fix preempt count leak in napi poll tracepoint

2026-03-10 CVE-2026-23313

ice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz

2026-03-10 CVE-2026-23377

ice: Fix memory leak in ice_set_ringparam()

2026-03-10 CVE-2026-23389

icmp: fix NULL pointer dereference in icmp_tag_validation()

2026-03-10 CVE-2026-23398

iconv crash due to assertion failure with untrusted input

2026-03-10 CVE-2026-4046

In multiple functions of mem_protect.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional exec

2026-03-10 CVE-2026-0031

In multiple functions of mem_protect.c, there is a possible out-of-bounds write due to a logic error in the code. This could lead to local escalation of privilege with no additiona

2026-03-10 CVE-2026-0032

In multiple functions of mem_protect.c, there is a possible way to execute arbitrary code due to a logic error in the code. This could lead to local escalation of privilege with no

2026-03-10 CVE-2026-0038

Incorrect enforcement of email constraints in crypto/x509

2026-03-10 CVE-2026-27137

Incorrect parsing of IPv6 host literals in net/url

2026-03-10 CVE-2026-25679

io_uring/rw: free potentially allocated iovec on cache put failure

2026-03-10 CVE-2026-23259

Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive

2026-03-10 CVE-2026-4111

Libarchive: libarchive: denial of service via malformed iso file processing

2026-03-10 CVE-2026-4426

LIBPNG has ARM NEON Palette Expansion Out-of-Bounds Read on AArch64

2026-03-10 CVE-2026-33636

Libsoup: libsoup: header and http request injection via crlf injection

2026-03-10 CVE-2026-3633

Libsoup: libsoup: http header injection and response splitting via crlf injection in content-type header

2026-03-10 CVE-2026-3634

Libsoup: libsoup: http smuggling and server-side request forgery via malformed hostnames

2026-03-10 CVE-2026-3632

Libsoup: libsoup: information disclosure via cleartext transmission of cookies during https tunnel establishment

2026-03-10 CVE-2026-5119

libssh SFTP Extension Name sftp.c sftp_extensions_get_data out-of-bounds

2026-03-10 CVE-2026-3731

Libssh: libssh: denial of service via improper configuration file handling

2026-03-10 CVE-2026-0965

Linux Azure Diagnostic extension (LAD) Elevation of Privilege Vulnerability

2026-03-10 CVE-2026-23665

M365 Copilot Information Disclosure Vulnerability

2026-03-10 CVE-2026-24299

M365 Copilot Information Disclosure Vulnerability

2026-03-10 CVE-2026-26133

MapUrlToZone Security Feature Bypass Vulnerability

2026-03-10 CVE-2026-23674

MariaDB Server Audit Plugin Comment Handling Bypass

2026-03-10 CVE-2026-3494

Mariner

2026-03-10 CVE-2025-67030

Mariner

2026-03-10 CVE-2025-69647

Mariner

2026-03-10 CVE-2025-69648

Mariner

2026-03-10 CVE-2025-70888

Mariner

2026-03-10 CVE-2026-21712

Mariner

2026-03-10 CVE-2026-21714

Mariner

2026-03-10 CVE-2026-21715

Mariner

2026-03-10 CVE-2026-21717

Mariner

2026-03-10 CVE-2026-23868

Mariner

2026-03-10 CVE-2026-32775

Mariner

2026-03-10 CVE-2026-32776

Mariner

2026-03-10 CVE-2026-32777

Mariner

2026-03-10 CVE-2026-32778

Mariner

2026-03-10 CVE-2026-34353

Mariner

2026-03-10 CVE-2026-34714

criticalMicrosoft MSRC 2026-W11

Mariner

2026-03-10 CVE-2026-3904

media: dvb-core: fix wrong reinitialization of ringbuffer on reopen

2026-03-10 CVE-2026-23253

Memory leak in code preparing DNSSEC proofs of non-existence

2026-03-10 CVE-2026-3104

Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability

2026-03-10 CVE-2026-23651

Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability

2026-03-10 CVE-2026-26124

Microsoft ACI Confidential Containers Information Disclosure Vulnerability

2026-03-10 CVE-2026-26122

Microsoft Authenticator Information Disclosure Vulnerability

2026-03-10 CVE-2026-26123

Microsoft Azure AD SSH Login extension for Linux Elevation of Privilege Vulnerability

2026-03-10 CVE-2026-26148