Source: msrc

Windows Graphics Component Elevation of Privilege Vulnerability

2026-02-10 CVE-2026-21246

Windows HTTP.sys Elevation of Privilege Vulnerability

2026-02-10 CVE-2026-21232

Windows HTTP.sys Elevation of Privilege Vulnerability

2026-02-10 CVE-2026-21240

Windows HTTP.sys Elevation of Privilege Vulnerability

2026-02-10 CVE-2026-21250

Windows Hyper-V Remote Code Execution Vulnerability

2026-02-10 CVE-2026-21244

Windows Hyper-V Remote Code Execution Vulnerability

2026-02-10 CVE-2026-21247

Windows Hyper-V Remote Code Execution Vulnerability

2026-02-10 CVE-2026-21248

Windows Hyper-V Security Feature Bypass Vulnerability

2026-02-10 CVE-2026-21255

Windows Kernel Elevation of Privilege Vulnerability

2026-02-10 CVE-2026-21231

Windows Kernel Elevation of Privilege Vulnerability

2026-02-10 CVE-2026-21239

Windows Kernel Elevation of Privilege Vulnerability

2026-02-10 CVE-2026-21245

Windows Kernel Information Disclosure Vulnerability

2026-02-10 CVE-2026-21222

mediumMicrosoft MSRC 2026-W07

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

2026-02-10 CVE-2026-21243

Windows Notepad App Remote Code Execution Vulnerability

2026-02-10 CVE-2026-20841

Windows NTLM Spoofing Vulnerability

2026-02-10 CVE-2026-21249

lowMicrosoft MSRC 2026-W07

Windows Remote Access Connection Manager Denial of Service Vulnerability

2026-02-10 CVE-2026-21525

mediumMicrosoft MSRC 2026-W07

Windows Remote Desktop Services Elevation of Privilege Vulnerability

2026-02-10 CVE-2026-21533

Windows Shell Security Feature Bypass Vulnerability

2026-02-10 CVE-2026-21510

Windows Storage Elevation of Privilege Vulnerability

2026-02-10 CVE-2026-21508

Windows Subsystem for Linux Elevation of Privilege Vulnerability

2026-02-10 CVE-2026-21237

Windows Subsystem for Linux Elevation of Privilege Vulnerability

2026-02-10 CVE-2026-21242

WordPress Oxygen theme <= 6.0.8 - Server Side Request Forgery (SSRF) vulnerability

2026-02-10 CVE-2025-69299

x86/vmware: Fix hypercall clobbers

2026-02-10 CVE-2026-23215

xfs: fix UAF in xchk_btree_check_block_owner

2026-02-10 CVE-2026-23223

mediumMicrosoft MSRC 2026-W07

zlib before 1.3.2 allows CPU consumption via crc32_combine64 and crc32_combine_gen64 because x2nmodp can do right shifts within a loop that has no termination condition.

2026-02-10 CVE-2026-27171

lowMicrosoft MSRC 2026-W07

ACPICA: Avoid walking the Namespace if start_node is NULL

2026-01-13 CVE-2025-71118

ALSA: firewire-motu: add bounds check in put_user loop for DSP events

2026-01-13 CVE-2025-68753

ALSA: usb-mixer: us16x08: validate meter packet indices

2026-01-13 CVE-2025-68783

ASoC: stm32: sai: fix OF node leak on probe

2026-01-13 CVE-2025-71081

Avahi has a reachable assertion in avahi_wide_area_scan_cache

2026-01-13 CVE-2025-68276

Avahi has a reachable assertion in lookup_multicast_callback

2026-01-13 CVE-2025-68468

Avahi has a reachable assertion in lookup_start

2026-01-13 CVE-2025-68471

Azure Connected Machine Agent Elevation of Privilege Vulnerability

2026-01-13 CVE-2026-21224

Azure Core shared client library for Python Remote Code Execution Vulnerability

2026-01-13 CVE-2026-21226

Azure Data Explorer Information Disclosure Vulnerability

2026-01-13 CVE-2026-21524

Azure Logic Apps Elevation of Privilege Vulnerability

2026-01-13 CVE-2026-21227

backlight: led-bl: Add devlink to supplier LEDs

2026-01-13 CVE-2025-68758

bearer token leak on cross-protocol redirect

2026-01-13 CVE-2025-14524

block: Use RCU in blk_mq_[un]quiesce_tagset() instead of set->tag_list_lock

2026-01-13 CVE-2025-68756

Bluetooth: btusb: revert use of devm_kzalloc in btusb

2026-01-13 CVE-2025-71082

broken TLS options for threaded LDAPS

2026-01-13 CVE-2025-14017

btrfs: always detect conflicting inodes when logging inode refs

2026-01-13 CVE-2025-71183

btrfs: don't log conflicting inode if it's a dir moved in the current transaction

2026-01-13 CVE-2025-68778

btrfs: fix NULL dereference on root when tracing inode eviction

2026-01-13 CVE-2025-71184

caif: fix integer underflow in cffrml_receive()

2026-01-13 CVE-2025-68799

Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability

2026-01-13 CVE-2026-20815

Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability

2026-01-13 CVE-2026-20830

Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability

2026-01-13 CVE-2026-21221

Capability Access Management Service (camsvc) Information Disclosure Vulnerability

2026-01-13 CVE-2026-20835

Capability Access Management Service (camsvc) Information Disclosure Vulnerability

2026-01-13 CVE-2026-20851

char: applicom: fix NULL pointer dereference in ac_ioctl

2026-01-13 CVE-2025-68797

clk: samsung: exynos-clkout: Assign .num before accessing .hws

2026-01-13 CVE-2025-71143

Copilot Studio Information Disclosure Vulnerability

2026-01-13 CVE-2026-21520

CoreDNS gRPC/HTTPS/HTTP3 servers lack resource limits, enabling DoS via unbounded connections and oversized messages

2026-01-13 CVE-2025-68151

Crypt::Sodium::XS module versions prior to 0.000042, for Perl, include a vulnerable version of libsodium

2026-01-13 CVE-2025-15444

crypto: af_alg - zero initialize memory allocated via sock_kmalloc

2026-01-13 CVE-2025-71113

crypto: seqiv - Do not use req->iv after crypto_aead_encrypt

2026-01-13 CVE-2025-71131

crypto: starfive - Correctly handle return of sg_nents_for_len

2026-01-13 CVE-2025-68763