Security Warnings — Source: msrc

Denial of Service in Keras via Excessive Memory Allocation in HDF5 Metadata

2026-01-13 CVE-2026-0897

highMicrosoft MSRC 2026-W03

Desktop Window Manager Elevation of Privilege Vulnerability

2026-01-13 CVE-2026-20871

highMicrosoft MSRC 2026-W03

Desktop Window Manager Information Disclosure Vulnerability

2026-01-13 CVE-2026-20805

mediumMicrosoft MSRC 2026-W03

DirectX Graphics Kernel Elevation of Privilege Vulnerability

2026-01-13 CVE-2026-20814

highMicrosoft MSRC 2026-W03

DirectX Graphics Kernel Elevation of Privilege Vulnerability

2026-01-13 CVE-2026-20836

highMicrosoft MSRC 2026-W03

dm-verity: disable recursive forward error correction

2026-01-13 CVE-2025-71161

mediumMicrosoft MSRC 2026-W03

dmaengine: idxd: fix device leaks on compat bind and unbind

2026-01-13 CVE-2025-71163

mediumMicrosoft MSRC 2026-W03

dmaengine: tegra-adma: Fix use-after-free

2026-01-13 CVE-2025-71162

highMicrosoft MSRC 2026-W03

drm/i915/gem: Zero-initialize the eb.vma array in i915_gem_do_execbuffer

2026-01-13 CVE-2025-71130

highMicrosoft MSRC 2026-W03

drm/msm/dpu: Add missing NULL pointer check for pingpong interface

2026-01-13 CVE-2025-71138

mediumMicrosoft MSRC 2026-W03

drm/ttm: Avoid NULL pointer deref for evicted BOs

2026-01-13 CVE-2025-71083

mediumMicrosoft MSRC 2026-W03

drm/vgem-fence: Fix potential deadlock on release

2026-01-13 CVE-2025-68757

mediumMicrosoft MSRC 2026-W03

dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list()

2026-01-13 CVE-2026-23004

mediumMicrosoft MSRC 2026-W03

Dynamic Root of Trust for Measurement (DRTM) Information Disclosure Vulnerability

2026-01-13 CVE-2026-20962

mediumMicrosoft MSRC 2026-W03

e1000: fix OOB in e1000_tbi_should_accept()

2026-01-13 CVE-2025-71093

highMicrosoft MSRC 2026-W03

ethtool: Avoid overflowing userspace buffer on stats query

2026-01-13 CVE-2025-68795

highMicrosoft MSRC 2026-W03

f2fs: ensure node page reads complete before f2fs_put_super() finishes

2026-01-13 CVE-2025-71107

mediumMicrosoft MSRC 2026-W03

f2fs: fix return value of f2fs_recover_fsync_data()

2026-01-13 CVE-2025-68769

mediumMicrosoft MSRC 2026-W03

f2fs: fix to avoid potential deadlock

2026-01-13 CVE-2025-71065

mediumMicrosoft MSRC 2026-W03

f2fs: fix to avoid updating compression context during writeback

2026-01-13 CVE-2025-68772

mediumMicrosoft MSRC 2026-W03

f2fs: fix to avoid updating zero-sized extent in extent cache

2026-01-13 CVE-2025-68796

mediumMicrosoft MSRC 2026-W03

f2fs: invalidate dentry cache on failed whiteout creation

2026-01-13 CVE-2025-71069

mediumMicrosoft MSRC 2026-W03

f2fs: use global inline_xattr_slab instead of per-sb slab cache

2026-01-13 CVE-2025-71105

highMicrosoft MSRC 2026-W03

filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock

2026-01-13 CVE-2026-22701

mediumMicrosoft MSRC 2026-W03

fsnotify: do not generate ACCESS/MODIFY events on child for special files

2026-01-13 CVE-2025-68788

mediumMicrosoft MSRC 2026-W03

getnetbyaddr and getnetbyaddr_r leak stack contents to DNS resovler

2026-01-13 CVE-2026-0915

lowMicrosoft MSRC 2026-W03

hfsplus: fix missing hfs_bnode_get() in __hfs_bnode_create

2026-01-13 CVE-2025-68774

mediumMicrosoft MSRC 2026-W03

hfsplus: Verify inode mode when loading from disk

2026-01-13 CVE-2025-68767

mediumMicrosoft MSRC 2026-W03

Host Process for Windows Tasks Elevation of Privilege Vulnerability

2026-01-13 CVE-2026-20941

highMicrosoft MSRC 2026-W03

hwmon: (w83791d) Convert macros to functions to avoid TOCTOU

2026-01-13 CVE-2025-71111

mediumMicrosoft MSRC 2026-W03

iavf: fix off-by-one issues in iavf_config_rss_reg()

2026-01-13 CVE-2025-71087

highMicrosoft MSRC 2026-W03

In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer overflow for a large update size to resize() in kdb_log.c. An authenticated attacker ca

2026-01-13 CVE-2025-24528

highMicrosoft MSRC 2026-W03

In the eap-mschapv2 plugin (client-side) in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integer underflow

2026-01-13 CVE-2025-62291

highMicrosoft MSRC 2026-W03

Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability

2026-01-13 CVE-2026-21219

highMicrosoft MSRC 2026-W03

inet: frags: flush pending skbs in fqdir_pre_exit()

2026-01-13 CVE-2025-68768

mediumMicrosoft MSRC 2026-W03

Input: alps - fix use-after-free bugs caused by dev3_register_work

2026-01-13 CVE-2025-68822

criticalMicrosoft MSRC 2026-W03

Input: ti_am335x_tsc - fix off-by-one error in wire_order validation

2026-01-13 CVE-2025-68777

mediumMicrosoft MSRC 2026-W03

Integer overflow in memalign leads to heap corruption

2026-01-13 CVE-2026-0861

highMicrosoft MSRC 2026-W03

iomap: adjust read range correctly for non-block-aligned positions

2026-01-13 CVE-2025-68794

mediumMicrosoft MSRC 2026-W03

iommu: disable SVA when CONFIG_X86 is set

2026-01-13 CVE-2025-71089

highMicrosoft MSRC 2026-W03

iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED

2026-01-13 CVE-2025-71122

highMicrosoft MSRC 2026-W03

ipv4: Fix reference count leak when using error routes with nexthop objects

2026-01-13 CVE-2025-71097

mediumMicrosoft MSRC 2026-W03

irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc()

2026-01-13 CVE-2025-68766

highMicrosoft MSRC 2026-W03

KEYS: trusted: Fix a memory leak in tpm2_load_cmd

2026-01-13 CVE-2025-71147

mediumMicrosoft MSRC 2026-W03

ksmbd: fix buffer validation by including null terminator size in EA length

2026-01-13 CVE-2025-68806

mediumMicrosoft MSRC 2026-W03

ksmbd: Fix refcount leak when invalid session is found on session lookup

2026-01-13 CVE-2025-71150

mediumMicrosoft MSRC 2026-W03

ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency

2026-01-13 CVE-2025-68817

highMicrosoft MSRC 2026-W03

ksmbd: skip lock-range check on equal size to avoid size==0 underflow

2026-01-13 CVE-2025-68786

highMicrosoft MSRC 2026-W03

ksmbd: vfs: fix race on m_flags in vfs_cache

2026-01-13 CVE-2025-68809

mediumMicrosoft MSRC 2026-W03

LDAP Tampering Vulnerability

2026-01-13 CVE-2026-20812

mediumMicrosoft MSRC 2026-W03

libceph: make decode_pool() more resilient against corrupted osdmaps

2026-01-13 CVE-2025-71116

mediumMicrosoft MSRC 2026-W03

libceph: make free_choose_arg_map() resilient to partial allocation

2026-01-13 CVE-2026-22991

mediumMicrosoft MSRC 2026-W03

libceph: prevent potential out-of-bounds reads in handle_auth_done()

2026-01-13 CVE-2026-22984

highMicrosoft MSRC 2026-W03

libceph: replace overzealous BUG_ON in osdmap_apply_incremental()

2026-01-13 CVE-2026-22990

mediumMicrosoft MSRC 2026-W03

libceph: return the handler error from mon_handle_auth_done()

2026-01-13 CVE-2026-22992

mediumMicrosoft MSRC 2026-W03

LIBPNG has a heap buffer over-read in png_image_read_direct_scaled (regression from CVE-2025-65018 fix)

2026-01-13 CVE-2026-22695

mediumMicrosoft MSRC 2026-W03

LIBPNG has an integer truncation causing heap buffer over-read in png_image_write_*

2026-01-13 CVE-2026-22801

mediumMicrosoft MSRC 2026-W03

Libsndfile <=1.2.2 contains a memory leak vulnerability in the mpeg_l3_encoder_init() function within the mpeg_l3_encode.c file.

2026-01-13 CVE-2025-56226

mediumMicrosoft MSRC 2026-W03

Libsoup: out-of-bounds read in libsoup websocket frame processing

2026-01-13 CVE-2026-0716

mediumMicrosoft MSRC 2026-W03

Libsoup: signed to unsigned conversion error leading to stack-based buffer overflow in libsoup ntlm authentication

2026-01-13 CVE-2026-0719

highMicrosoft MSRC 2026-W03