Vendor: microsoft

bpf: Fix stack-out-of-bounds write in devmap

2026-03-10 CVE-2026-23359

brace-expansion: Zero-step sequence causes process hang and memory exhaustion

2026-03-10 CVE-2026-33750

Broadcast DVR Elevation of Privilege Vulnerability

2026-03-10 CVE-2026-23667

btrfs: do not free data reservation in fallback from inline due to -ENOSPC

2026-03-10 CVE-2025-71269

can: ems_usb: ems_usb_read_bulk_callback(): check the proper length of a message

2026-03-10 CVE-2026-23307

can: ucan: Fix infinite loop from zero-length messages

2026-03-10 CVE-2026-23298

can: usb: etas_es58x: correctly anchor the urb in the read bulk callback

2026-03-10 CVE-2026-23324

Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib

2026-03-10 CVE-2026-3381

criticalMicrosoft MSRC 2026-W11

CoreDNS ACL Bypass

2026-03-10 CVE-2026-26017

CoreDNS Loop Detection Denial of Service Vulnerability

2026-03-10 CVE-2026-26018

cxl: Fix race of nvdimm_bus object when creating nvdimm objects

2026-03-10 CVE-2026-23348

espintcp: Fix race condition in espintcp_close()

2026-03-10 CVE-2026-23239

etcd: Nested etcd transactions bypass RBAC authorization checks

2026-03-10 CVE-2026-33343

f2fs: fix IS_CHECKPOINTED flag inconsistency issue caused by concurrent atomic commit and checkpoint writes

2026-03-10 CVE-2026-23267

f2fs: fix out-of-bounds access in sysfs attribute read/write

2026-03-10 CVE-2026-23235

f2fs: fix to avoid mapping wrong physical block for swapfile

2026-03-10 CVE-2026-23233

f2fs: fix to avoid UAF in f2fs_write_end_io()

2026-03-10 CVE-2026-23234

f2fs: fix to do sanity check on node footer in {read,write}_end_io

2026-03-10 CVE-2026-23265

fbdev: rivafb: fix divide error in nv3_arb()

2026-03-10 CVE-2026-23266

fbdev: smscufx: properly copy ioctl memory to kernelspace

2026-03-10 CVE-2026-23236

FileInfo can escape from a Root in os

2026-03-10 CVE-2026-27139

FRRouting FRR EVPN Type-2 Route bgp_evpn.c process_type2_route access control

2026-03-10 CVE-2026-5107

fs: ntfs3: check return value of indx_find to avoid infinite loop

2026-03-10 CVE-2025-71266

fs: ntfs3: fix infinite loop in attr_load_runs_range on inconsistent metadata

2026-03-10 CVE-2025-71265

fs: ntfs3: fix infinite loop triggered by zero-sized ATTR_LIST

2026-03-10 CVE-2025-71267

GDI+ Information Disclosure Vulnerability

2026-03-10 CVE-2026-25181

gethostbyaddr and gethostbyaddr_r may incorrectly handle DNS response

2026-03-10 CVE-2026-4437

gethostbyaddr and gethostbyaddr_r return invalid DNS hostnames

2026-03-10 CVE-2026-4438

Git for Windows leaks NTLM hash when cloning from an attacker-controlled server

2026-03-10 CVE-2025-66413

GitHub: CVE-2026-26030 Microsoft Semantic Kernel InMemoryVectorStore filter functionality vulnerable

2026-03-10 CVE-2026-26030

criticalMicrosoft MSRC 2026-W11

GitHub: Zero Shot SCFoundation Remote Code Execution Vulnerability

2026-03-10 CVE-2026-23654

Github.com/antchfx/xpath: xpath: denial of service via crafted boolean xpath expressions

2026-03-10 CVE-2026-4645

GNU Binutils thru 2.46 readelf contains a double free vulnerability when processing a crafted ELF binary with malformed relocation data. During GOT relocation handling, dump_reloca

2026-03-10 CVE-2025-69650

GNU Binutils thru 2.46 readelf contains a null pointer dereference vulnerability when processing a crafted ELF binary with malformed header fields. During relocation processing, an

2026-03-10 CVE-2025-69649

GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an abort (SIGABRT) when processing a crafted ELF binary with malformed DWARF abbrev or debug information. Due

2026-03-10 CVE-2025-69652

GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an invalid pointer free when processing a crafted ELF binary with malformed relocation or symbol data. If dump

2026-03-10 CVE-2025-69651

Handlebars.js has Denial of Service via Malformed Decorator Syntax in Template Compilation

2026-03-10 CVE-2026-33939

Handlebars.js has JavaScript Injection via AST Type Confusion

2026-03-10 CVE-2026-33937

criticalMicrosoft MSRC 2026-W11

Handlebars.js has JavaScript Injection via AST Type Confusion by tampering @partial-block

2026-03-10 CVE-2026-33938

HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them

2026-03-10 CVE-2026-23382

Hybrid Worker Extension (Arc‑enabled Windows VMs) Elevation of Privilege Vulnerability

2026-03-10 CVE-2026-26141

i40e: Fix preempt count leak in napi poll tracepoint

2026-03-10 CVE-2026-23313

ice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz

2026-03-10 CVE-2026-23377

ice: Fix memory leak in ice_set_ringparam()

2026-03-10 CVE-2026-23389

icmp: fix NULL pointer dereference in icmp_tag_validation()

2026-03-10 CVE-2026-23398

iconv crash due to assertion failure with untrusted input

2026-03-10 CVE-2026-4046

In multiple functions of mem_protect.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional exec

2026-03-10 CVE-2026-0031

In multiple functions of mem_protect.c, there is a possible out-of-bounds write due to a logic error in the code. This could lead to local escalation of privilege with no additiona

2026-03-10 CVE-2026-0032

In multiple functions of mem_protect.c, there is a possible way to execute arbitrary code due to a logic error in the code. This could lead to local escalation of privilege with no

2026-03-10 CVE-2026-0038

Incorrect enforcement of email constraints in crypto/x509

2026-03-10 CVE-2026-27137

Incorrect parsing of IPv6 host literals in net/url

2026-03-10 CVE-2026-25679

io_uring/rw: free potentially allocated iovec on cache put failure

2026-03-10 CVE-2026-23259

Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive

2026-03-10 CVE-2026-4111

Libarchive: libarchive: denial of service via malformed iso file processing

2026-03-10 CVE-2026-4426

LIBPNG has ARM NEON Palette Expansion Out-of-Bounds Read on AArch64

2026-03-10 CVE-2026-33636

Libsoup: libsoup: header and http request injection via crlf injection

2026-03-10 CVE-2026-3633

Libsoup: libsoup: http header injection and response splitting via crlf injection in content-type header

2026-03-10 CVE-2026-3634

Libsoup: libsoup: http smuggling and server-side request forgery via malformed hostnames

2026-03-10 CVE-2026-3632

Libsoup: libsoup: information disclosure via cleartext transmission of cookies during https tunnel establishment

2026-03-10 CVE-2026-5119