Source: msrc

ksmbd: vfs: fix race on m_flags in vfs_cache

2026-01-13 CVE-2025-68809

LDAP Tampering Vulnerability

2026-01-13 CVE-2026-20812

libceph: make decode_pool() more resilient against corrupted osdmaps

2026-01-13 CVE-2025-71116

libceph: make free_choose_arg_map() resilient to partial allocation

2026-01-13 CVE-2026-22991

libceph: prevent potential out-of-bounds reads in handle_auth_done()

2026-01-13 CVE-2026-22984

libceph: replace overzealous BUG_ON in osdmap_apply_incremental()

2026-01-13 CVE-2026-22990

libceph: return the handler error from mon_handle_auth_done()

2026-01-13 CVE-2026-22992

LIBPNG has a heap buffer over-read in png_image_read_direct_scaled (regression from CVE-2025-65018 fix)

2026-01-13 CVE-2026-22695

LIBPNG has an integer truncation causing heap buffer over-read in png_image_write_*

2026-01-13 CVE-2026-22801

Libsndfile <=1.2.2 contains a memory leak vulnerability in the mpeg_l3_encoder_init() function within the mpeg_l3_encode.c file.

2026-01-13 CVE-2025-56226

Libsoup: out-of-bounds read in libsoup websocket frame processing

2026-01-13 CVE-2026-0716

Libsoup: signed to unsigned conversion error leading to stack-based buffer overflow in libsoup ntlm authentication

2026-01-13 CVE-2026-0719

libssh global known_hosts override

2026-01-13 CVE-2025-15079

libssh key passphrase bypass without agent set

2026-01-13 CVE-2025-15224

libtpms returns wrong initialization vector when certain symmetric ciphers are used

2026-01-13 CVE-2026-21444

Libxml2: libxml2: denial of service via crafted xml catalogs

2026-01-13 CVE-2026-0992

Libxml2: libxml2: denial of service via uncontrolled recursion in xml catalog processing

2026-01-13 CVE-2026-0990

Libxml2: unbounded relaxng include recursion leading to stack overflow

2026-01-13 CVE-2026-0989

LoongArch: BPF: Sign extend kfunc call arguments

2026-01-13 CVE-2025-71129

media: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status()

2026-01-13 CVE-2025-71136

media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg()

2026-01-13 CVE-2025-68819

criticalMicrosoft MSRC 2026-W03

media: vidtv: initialize local pointers upon transfer of memory ownership

2026-01-13 CVE-2025-68808

Microsoft DWM Core Library Elevation of Privilege Vulnerability

2026-01-13 CVE-2026-20842

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

2026-01-13 CVE-2026-21223

Microsoft Excel Remote Code Execution Vulnerability

2026-01-13 CVE-2026-20946

Microsoft Excel Remote Code Execution Vulnerability

2026-01-13 CVE-2026-20950

Microsoft Excel Remote Code Execution Vulnerability

2026-01-13 CVE-2026-20955

Microsoft Excel Remote Code Execution Vulnerability

2026-01-13 CVE-2026-20956

Microsoft Excel Remote Code Execution Vulnerability

2026-01-13 CVE-2026-20957

Microsoft Excel Security Feature Bypass Vulnerability

2026-01-13 CVE-2026-20949

Microsoft Office Click-To-Run Remote Code Execution Vulnerability

2026-01-13 CVE-2026-20943

Microsoft Office Remote Code Execution Vulnerability

2026-01-13 CVE-2026-20952

Microsoft Office Remote Code Execution Vulnerability

2026-01-13 CVE-2026-20953

Microsoft Office Security Feature Bypass Vulnerability

2026-01-13 CVE-2026-21509

Microsoft SharePoint Information Disclosure Vulnerability

2026-01-13 CVE-2026-20958

Microsoft SharePoint Server Remote Code Execution Vulnerability

2026-01-13 CVE-2026-20947

Microsoft SharePoint Server Remote Code Execution Vulnerability

2026-01-13 CVE-2026-20951

Microsoft SharePoint Server Spoofing Vulnerability

2026-01-13 CVE-2026-20959

Microsoft SQL Server Elevation of Privilege Vulnerability

2026-01-13 CVE-2026-20803

Microsoft Windows File Explorer Spoofing Vulnerability

2026-01-13 CVE-2026-20847

Microsoft Word Remote Code Execution Vulnerability

2026-01-13 CVE-2026-20944

Microsoft Word Remote Code Execution Vulnerability

2026-01-13 CVE-2026-20948

MIPS: ftrace: Fix memory corruption when kernel is located beyond 32 bits

2026-01-13 CVE-2025-71109

MITRE: CVE-2023-31096 Windows Agere Soft Modem Driver Elevation of Privilege Vulnerability

2026-01-13 CVE-2023-31096

mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats

2026-01-13 CVE-2025-68800

mlxsw: spectrum_router: Fix neighbour use-after-free

2026-01-13 CVE-2025-68801

mptcp: fallback earlier on simult connection

2026-01-13 CVE-2025-71088

mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add()

2026-01-13 CVE-2025-68765

net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts

2026-01-13 CVE-2026-22997

net: dsa: properly keep track of conduit reference

2026-01-13 CVE-2025-71152

net: fix memory leak in skb_segment_list for GRO packets

2026-01-13 CVE-2026-22979

net: hns3: add VLAN id validation before using

2026-01-13 CVE-2025-71112

net: hns3: using the num_tqps in the vf driver to apply for resources

2026-01-13 CVE-2025-71064

criticalMicrosoft MSRC 2026-W03

net: mscc: ocelot: Fix crash when adding interface under a lag

2026-01-13 CVE-2026-22982

net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write

2026-01-13 CVE-2025-71079

net: openvswitch: fix middle attribute validation in push_nsh() action

2026-01-13 CVE-2025-68785

net: sock: fix hardened usercopy panic in sock_recv_errqueue

2026-01-13 CVE-2026-22977

net: stmmac: fix the crash issue for zero copy XDP_TX action

2026-01-13 CVE-2025-71095

net: usb: asix: validate PHY address before use

2026-01-13 CVE-2025-71094