Security Warnings — Source: msrc

Azure SDK for Python Remote Code Execution Vulnerability

2026-02-10 CVE-2026-21531

criticalMicrosoft MSRC 2026-W07

bonding: annotate data-races around slave->last_rx

2026-02-10 CVE-2026-23212

mediumMicrosoft MSRC 2026-W07

bonding: fix use-after-free due to enslave fail after slave array update

2026-02-10 CVE-2026-23171

mediumMicrosoft MSRC 2026-W07

btrfs: do not strictly require dirty metadata threshold for metadata writepages

2026-02-10 CVE-2026-23157

mediumMicrosoft MSRC 2026-W07

btrfs: reject new transactions if the fs is fully read-only

2026-02-10 CVE-2026-23214

highMicrosoft MSRC 2026-W07

btrfs: send: check for inline extents in range_is_hole_in_parent()

2026-02-10 CVE-2026-23141

mediumMicrosoft MSRC 2026-W07

bus: fsl-mc: fix use-after-free in driver_override_show()

2026-02-10 CVE-2026-23221

highMicrosoft MSRC 2026-W07

Bytes is vulnerable to integer overflow in BytesMut::reserve

2026-02-10 CVE-2026-25541

highMicrosoft MSRC 2026-W07

Cloud Hypervisor: Host File Exfiltration via QCOW Backing File Abuse

2026-02-10 CVE-2026-27211

criticalMicrosoft MSRC 2026-W07

Cluster Client Failover (CCF) Elevation of Privilege Vulnerability

2026-02-10 CVE-2026-21251

highMicrosoft MSRC 2026-W07

crypto: iaa - Fix out-of-bounds index in find_empty_iaa_compression_mode

2026-02-10 CVE-2025-71231

highMicrosoft MSRC 2026-W07

crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly

2026-02-10 CVE-2026-23222

mediumMicrosoft MSRC 2026-W07

crypto: virtio - Add spinlock protection with virtqueue notification

2026-02-10 CVE-2026-23229

highMicrosoft MSRC 2026-W07

Desktop Window Manager Elevation of Privilege Vulnerability

2026-02-10 CVE-2026-21519

highMicrosoft MSRC 2026-W07

dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue()

2026-02-10 CVE-2025-71221

highMicrosoft MSRC 2026-W07

drm/amd/pm: Disable MMIO access during SMU Mode 1 reset

2026-02-10 CVE-2026-23213

highMicrosoft MSRC 2026-W07

drm/exynos: vidi: use ctx->lock to protect struct vidi_context member variables related to memory alloc/free

2026-02-10 CVE-2026-23227

highMicrosoft MSRC 2026-W07

erofs: fix UAF issue for file-backed mounts w/ directio option

2026-02-10 CVE-2026-23224

mediumMicrosoft MSRC 2026-W07

GDI+ Denial of Service Vulnerability

2026-02-10 CVE-2026-20846

highMicrosoft MSRC 2026-W07

GitHub Copilot and Visual Studio Code Remote Code Execution Vulnerability

2026-02-10 CVE-2026-21523

highMicrosoft MSRC 2026-W07

GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability

2026-02-10 CVE-2026-21518

highMicrosoft MSRC 2026-W07

GitHub Copilot and Visual Studio Elevation of Privilege Vulnerability

2026-02-10 CVE-2026-21257

highMicrosoft MSRC 2026-W07

GitHub Copilot and Visual Studio Remote Code Execution Vulnerability

2026-02-10 CVE-2026-21256

highMicrosoft MSRC 2026-W07

GitHub Copilot for Jetbrains Remote Code Execution Vulnerability

2026-02-10 CVE-2026-21516

highMicrosoft MSRC 2026-W07

hfs: ensure sb->s_fs_info is always cleaned up

2026-02-10 CVE-2025-71230

mediumMicrosoft MSRC 2026-W07

In OCaml before 4.14.3 and 5.x before 5.4.1, a buffer over-read in Marshal deserialization (runtime/intern.c) enables remote code execution through a multi-phase attack chain. The

2026-02-10 CVE-2026-28364

highMicrosoft MSRC 2026-W07

io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop

2026-02-10 CVE-2026-23113

mediumMicrosoft MSRC 2026-W07

iommu/sva: invalidate stale IOTLB entries for kernel address space

2026-02-10 CVE-2025-71202

mediumMicrosoft MSRC 2026-W07

Kata Container to Guest micro VM privilege escalation

2026-02-10 CVE-2026-24834

criticalMicrosoft MSRC 2026-W07

ksmbd: add chann_lock to protect ksmbd_chann_list xarray

2026-02-10 CVE-2026-23226

highMicrosoft MSRC 2026-W07

ksmbd: fix infinite loop caused by next_smb2_rcv_hdr_off reset in error paths

2026-02-10 CVE-2026-23220

mediumMicrosoft MSRC 2026-W07

Libsoup: out-of-bounds read in libsoup handle_partial_get() leading to heap information disclosure

2026-02-10 CVE-2026-2443

mediumMicrosoft MSRC 2026-W07

libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c.

2026-02-10 CVE-2025-61145

mediumMicrosoft MSRC 2026-W07

libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tif_open.c.

2026-02-10 CVE-2025-61143

mediumMicrosoft MSRC 2026-W07

libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function.

2026-02-10 CVE-2025-61144

criticalMicrosoft MSRC 2026-W07

Local Path Provisioner vulnerable to Path Traversal via parameters.pathPattern

2026-02-10 CVE-2025-62878

criticalMicrosoft MSRC 2026-W07

LoongArch: Set correct protection_map[] for VM_NONE/VM_SHARED

2026-02-10 CVE-2025-71228

highMicrosoft MSRC 2026-W07

Mailslot File System Elevation of Privilege Vulnerability

2026-02-10 CVE-2026-21253

highMicrosoft MSRC 2026-W07

Malformed Valkey Cluster bus message can lead to Remote DoS

2026-02-10 CVE-2026-21863

highMicrosoft MSRC 2026-W07

md: suspend array while updating raid_disks via sysfs

2026-02-10 CVE-2025-71225

mediumMicrosoft MSRC 2026-W07

Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability

2026-02-10 CVE-2026-21522

mediumMicrosoft MSRC 2026-W07

Microsoft ACI Confidential Containers Information Disclosure Vulnerability

2026-02-10 CVE-2026-23655

mediumMicrosoft MSRC 2026-W07

Microsoft Defender for Endpoint Linux Extension Remote Code Execution Vulnerability

2026-02-10 CVE-2026-21537

highMicrosoft MSRC 2026-W07

Microsoft Edge (Chromium-based) Defense in Depth Vulnerability

2026-02-10 CVE-2026-0102

lowMicrosoft MSRC 2026-W07

Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

2026-02-10 CVE-2026-0391

mediumMicrosoft MSRC 2026-W07

Microsoft Excel Elevation of Privilege Vulnerability

2026-02-10 CVE-2026-21259

highMicrosoft MSRC 2026-W07

Microsoft Excel Information Disclosure Vulnerability

2026-02-10 CVE-2026-21258

mediumMicrosoft MSRC 2026-W07

Microsoft Excel Information Disclosure Vulnerability

2026-02-10 CVE-2026-21261

mediumMicrosoft MSRC 2026-W07

Microsoft Exchange Server Spoofing Vulnerability

2026-02-10 CVE-2026-21527

mediumMicrosoft MSRC 2026-W07

Microsoft Outlook Spoofing Vulnerability

2026-02-10 CVE-2026-21260

highMicrosoft MSRC 2026-W07

Microsoft Outlook Spoofing Vulnerability

2026-02-10 CVE-2026-21511

highMicrosoft MSRC 2026-W07

Microsoft Teams Information Disclosure Vulnerability

2026-02-10 CVE-2026-21535

highMicrosoft MSRC 2026-W07

Microsoft Word Security Feature Bypass Vulnerability

2026-02-10 CVE-2026-21514

highMicrosoft MSRC 2026-W07

mm/hugetlb: fix hugetlb_pmd_shared()

2026-02-10 CVE-2026-23100

mediumMicrosoft MSRC 2026-W07

mptcp: fix race in mptcp_pm_nl_flush_addrs_doit()

2026-02-10 CVE-2026-23169

mediumMicrosoft MSRC 2026-W07

mruby JMPNOT-to-JMPIF Optimization vm.c mrb_vm_exec use after free

2026-02-10 CVE-2026-1979

mediumMicrosoft MSRC 2026-W07

MSHTML Framework Security Feature Bypass Vulnerability

2026-02-10 CVE-2026-21513

highMicrosoft MSRC 2026-W07

nats-server websockets are vulnerable to pre-auth memory DoS

2026-02-10 CVE-2026-27571

mediumMicrosoft MSRC 2026-W07

net: fix segmentation of forwarding fraglist GRO

2026-02-10 CVE-2026-23154

mediumMicrosoft MSRC 2026-W07

net/sched: cls_u32: use skb_header_pointer_careful()

2026-02-10 CVE-2026-23204

highMicrosoft MSRC 2026-W07