Security Warnings — Source: msrc

XML::Parser versions through 2.47 for Perl could overflow the pre-allocated buffer size cause a heap corruption (double free or corruption) and crashes

2026-03-10 CVE-2006-10002

highMicrosoft MSRC 2026-W11

XML::Parser versions through 2.47 for Perl has an off-by-one heap buffer overflow in st_serial_stack

2026-03-10 CVE-2006-10003

highMicrosoft MSRC 2026-W11

.NET Spoofing Vulnerability

2026-02-10 CVE-2026-21218

highMicrosoft MSRC 2026-W07

ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the $data option is enabled. The pattern keyword accepts runtim

2026-02-10 CVE-2025-69873

lowMicrosoft MSRC 2026-W07

ALSA: aloop: Fix racy access at PCM trigger

2026-02-10 CVE-2026-23191

highMicrosoft MSRC 2026-W07

ALSA: usb-audio: Prevent excessive number of frames

2026-02-10 CVE-2026-23208

highMicrosoft MSRC 2026-W07

Azure Arc Elevation of Privilege Vulnerability

2026-02-10 CVE-2026-24302

highMicrosoft MSRC 2026-W07

Azure DevOps Server Cross-Site Scripting Vulnerability

2026-02-10 CVE-2026-21512

mediumMicrosoft MSRC 2026-W07

Azure Front Door Elevation of Privilege Vulnerability

2026-02-10 CVE-2026-24300

criticalMicrosoft MSRC 2026-W07

Azure Function Information Disclosure Vulnerability

2026-02-10 CVE-2026-21532

highMicrosoft MSRC 2026-W07

Azure HDInsight Spoofing Vulnerability

2026-02-10 CVE-2026-21529

mediumMicrosoft MSRC 2026-W07

Azure IoT Explorer Information Disclosure Vulnerability

2026-02-10 CVE-2026-21528

mediumMicrosoft MSRC 2026-W07

Azure Local Remote Code Execution Vulnerability

2026-02-10 CVE-2026-21228

highMicrosoft MSRC 2026-W07

Azure SDK for Python Remote Code Execution Vulnerability

2026-02-10 CVE-2026-21531

criticalMicrosoft MSRC 2026-W07

bonding: annotate data-races around slave->last_rx

2026-02-10 CVE-2026-23212

mediumMicrosoft MSRC 2026-W07

bonding: fix use-after-free due to enslave fail after slave array update

2026-02-10 CVE-2026-23171

mediumMicrosoft MSRC 2026-W07

btrfs: do not strictly require dirty metadata threshold for metadata writepages

2026-02-10 CVE-2026-23157

mediumMicrosoft MSRC 2026-W07

btrfs: reject new transactions if the fs is fully read-only

2026-02-10 CVE-2026-23214

highMicrosoft MSRC 2026-W07

btrfs: send: check for inline extents in range_is_hole_in_parent()

2026-02-10 CVE-2026-23141

mediumMicrosoft MSRC 2026-W07

bus: fsl-mc: fix use-after-free in driver_override_show()

2026-02-10 CVE-2026-23221

highMicrosoft MSRC 2026-W07

Bytes is vulnerable to integer overflow in BytesMut::reserve

2026-02-10 CVE-2026-25541

highMicrosoft MSRC 2026-W07

Cloud Hypervisor: Host File Exfiltration via QCOW Backing File Abuse

2026-02-10 CVE-2026-27211

criticalMicrosoft MSRC 2026-W07

Cluster Client Failover (CCF) Elevation of Privilege Vulnerability

2026-02-10 CVE-2026-21251

highMicrosoft MSRC 2026-W07

crypto: iaa - Fix out-of-bounds index in find_empty_iaa_compression_mode

2026-02-10 CVE-2025-71231

highMicrosoft MSRC 2026-W07

crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly

2026-02-10 CVE-2026-23222

mediumMicrosoft MSRC 2026-W07

crypto: virtio - Add spinlock protection with virtqueue notification

2026-02-10 CVE-2026-23229

highMicrosoft MSRC 2026-W07

Desktop Window Manager Elevation of Privilege Vulnerability

2026-02-10 CVE-2026-21519

highMicrosoft MSRC 2026-W07

dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue()

2026-02-10 CVE-2025-71221

highMicrosoft MSRC 2026-W07

drm/amd/pm: Disable MMIO access during SMU Mode 1 reset

2026-02-10 CVE-2026-23213

highMicrosoft MSRC 2026-W07

drm/exynos: vidi: use ctx->lock to protect struct vidi_context member variables related to memory alloc/free

2026-02-10 CVE-2026-23227

highMicrosoft MSRC 2026-W07

erofs: fix UAF issue for file-backed mounts w/ directio option

2026-02-10 CVE-2026-23224

mediumMicrosoft MSRC 2026-W07

GDI+ Denial of Service Vulnerability

2026-02-10 CVE-2026-20846

highMicrosoft MSRC 2026-W07

GitHub Copilot and Visual Studio Code Remote Code Execution Vulnerability

2026-02-10 CVE-2026-21523

highMicrosoft MSRC 2026-W07

GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability

2026-02-10 CVE-2026-21518

highMicrosoft MSRC 2026-W07

GitHub Copilot and Visual Studio Elevation of Privilege Vulnerability

2026-02-10 CVE-2026-21257

highMicrosoft MSRC 2026-W07

GitHub Copilot and Visual Studio Remote Code Execution Vulnerability

2026-02-10 CVE-2026-21256

highMicrosoft MSRC 2026-W07

GitHub Copilot for Jetbrains Remote Code Execution Vulnerability

2026-02-10 CVE-2026-21516

highMicrosoft MSRC 2026-W07

hfs: ensure sb->s_fs_info is always cleaned up

2026-02-10 CVE-2025-71230

mediumMicrosoft MSRC 2026-W07

In OCaml before 4.14.3 and 5.x before 5.4.1, a buffer over-read in Marshal deserialization (runtime/intern.c) enables remote code execution through a multi-phase attack chain. The

2026-02-10 CVE-2026-28364

highMicrosoft MSRC 2026-W07

io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop

2026-02-10 CVE-2026-23113

mediumMicrosoft MSRC 2026-W07

iommu/sva: invalidate stale IOTLB entries for kernel address space

2026-02-10 CVE-2025-71202

mediumMicrosoft MSRC 2026-W07

Kata Container to Guest micro VM privilege escalation

2026-02-10 CVE-2026-24834

criticalMicrosoft MSRC 2026-W07

ksmbd: add chann_lock to protect ksmbd_chann_list xarray

2026-02-10 CVE-2026-23226

highMicrosoft MSRC 2026-W07

ksmbd: fix infinite loop caused by next_smb2_rcv_hdr_off reset in error paths

2026-02-10 CVE-2026-23220

mediumMicrosoft MSRC 2026-W07

Libsoup: out-of-bounds read in libsoup handle_partial_get() leading to heap information disclosure

2026-02-10 CVE-2026-2443

mediumMicrosoft MSRC 2026-W07

libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c.

2026-02-10 CVE-2025-61145

mediumMicrosoft MSRC 2026-W07

libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tif_open.c.

2026-02-10 CVE-2025-61143

mediumMicrosoft MSRC 2026-W07

libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function.

2026-02-10 CVE-2025-61144

criticalMicrosoft MSRC 2026-W07

Local Path Provisioner vulnerable to Path Traversal via parameters.pathPattern

2026-02-10 CVE-2025-62878

criticalMicrosoft MSRC 2026-W07

LoongArch: Set correct protection_map[] for VM_NONE/VM_SHARED

2026-02-10 CVE-2025-71228

highMicrosoft MSRC 2026-W07

Mailslot File System Elevation of Privilege Vulnerability

2026-02-10 CVE-2026-21253

highMicrosoft MSRC 2026-W07

Malformed Valkey Cluster bus message can lead to Remote DoS

2026-02-10 CVE-2026-21863

highMicrosoft MSRC 2026-W07

md: suspend array while updating raid_disks via sysfs

2026-02-10 CVE-2025-71225

mediumMicrosoft MSRC 2026-W07

Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability

2026-02-10 CVE-2026-21522

mediumMicrosoft MSRC 2026-W07

Microsoft ACI Confidential Containers Information Disclosure Vulnerability

2026-02-10 CVE-2026-23655

mediumMicrosoft MSRC 2026-W07

Microsoft Defender for Endpoint Linux Extension Remote Code Execution Vulnerability

2026-02-10 CVE-2026-21537

highMicrosoft MSRC 2026-W07

Microsoft Edge (Chromium-based) Defense in Depth Vulnerability

2026-02-10 CVE-2026-0102

lowMicrosoft MSRC 2026-W07

Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

2026-02-10 CVE-2026-0391

mediumMicrosoft MSRC 2026-W07

Microsoft Excel Elevation of Privilege Vulnerability

2026-02-10 CVE-2026-21259

highMicrosoft MSRC 2026-W07

Microsoft Excel Information Disclosure Vulnerability

2026-02-10 CVE-2026-21258

mediumMicrosoft MSRC 2026-W07