Source: msrc

Windows Notepad App Remote Code Execution Vulnerability

2026-02-10 CVE-2026-20841

Windows NTLM Spoofing Vulnerability

2026-02-10 CVE-2026-21249

lowMicrosoft MSRC 2026-W07

Windows Remote Access Connection Manager Denial of Service Vulnerability

2026-02-10 CVE-2026-21525

mediumMicrosoft MSRC 2026-W07

Windows Remote Desktop Services Elevation of Privilege Vulnerability

2026-02-10 CVE-2026-21533

Windows Shell Security Feature Bypass Vulnerability

2026-02-10 CVE-2026-21510

Windows Storage Elevation of Privilege Vulnerability

2026-02-10 CVE-2026-21508

Windows Subsystem for Linux Elevation of Privilege Vulnerability

2026-02-10 CVE-2026-21237

Windows Subsystem for Linux Elevation of Privilege Vulnerability

2026-02-10 CVE-2026-21242

WordPress Oxygen theme <= 6.0.8 - Server Side Request Forgery (SSRF) vulnerability

2026-02-10 CVE-2025-69299

x86/vmware: Fix hypercall clobbers

2026-02-10 CVE-2026-23215

xfs: fix UAF in xchk_btree_check_block_owner

2026-02-10 CVE-2026-23223

mediumMicrosoft MSRC 2026-W07

zlib before 1.3.2 allows CPU consumption via crc32_combine64 and crc32_combine_gen64 because x2nmodp can do right shifts within a loop that has no termination condition.

2026-02-10 CVE-2026-27171

lowMicrosoft MSRC 2026-W07

ACPICA: Avoid walking the Namespace if start_node is NULL

2026-01-13 CVE-2025-71118

ALSA: firewire-motu: add bounds check in put_user loop for DSP events

2026-01-13 CVE-2025-68753

ALSA: usb-mixer: us16x08: validate meter packet indices

2026-01-13 CVE-2025-68783

ASoC: stm32: sai: fix OF node leak on probe

2026-01-13 CVE-2025-71081

Avahi has a reachable assertion in avahi_wide_area_scan_cache

2026-01-13 CVE-2025-68276

Avahi has a reachable assertion in lookup_multicast_callback

2026-01-13 CVE-2025-68468

Avahi has a reachable assertion in lookup_start

2026-01-13 CVE-2025-68471

Azure Connected Machine Agent Elevation of Privilege Vulnerability

2026-01-13 CVE-2026-21224

Azure Core shared client library for Python Remote Code Execution Vulnerability

2026-01-13 CVE-2026-21226

Azure Data Explorer Information Disclosure Vulnerability

2026-01-13 CVE-2026-21524

Azure Logic Apps Elevation of Privilege Vulnerability

2026-01-13 CVE-2026-21227

backlight: led-bl: Add devlink to supplier LEDs

2026-01-13 CVE-2025-68758

bearer token leak on cross-protocol redirect

2026-01-13 CVE-2025-14524

block: Use RCU in blk_mq_[un]quiesce_tagset() instead of set->tag_list_lock

2026-01-13 CVE-2025-68756

Bluetooth: btusb: revert use of devm_kzalloc in btusb

2026-01-13 CVE-2025-71082

broken TLS options for threaded LDAPS

2026-01-13 CVE-2025-14017

btrfs: always detect conflicting inodes when logging inode refs

2026-01-13 CVE-2025-71183

btrfs: don't log conflicting inode if it's a dir moved in the current transaction

2026-01-13 CVE-2025-68778

btrfs: fix NULL dereference on root when tracing inode eviction

2026-01-13 CVE-2025-71184

caif: fix integer underflow in cffrml_receive()

2026-01-13 CVE-2025-68799

Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability

2026-01-13 CVE-2026-20815

Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability

2026-01-13 CVE-2026-20830

Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability

2026-01-13 CVE-2026-21221

Capability Access Management Service (camsvc) Information Disclosure Vulnerability

2026-01-13 CVE-2026-20835

Capability Access Management Service (camsvc) Information Disclosure Vulnerability

2026-01-13 CVE-2026-20851

char: applicom: fix NULL pointer dereference in ac_ioctl

2026-01-13 CVE-2025-68797

clk: samsung: exynos-clkout: Assign .num before accessing .hws

2026-01-13 CVE-2025-71143

Copilot Studio Information Disclosure Vulnerability

2026-01-13 CVE-2026-21520

CoreDNS gRPC/HTTPS/HTTP3 servers lack resource limits, enabling DoS via unbounded connections and oversized messages

2026-01-13 CVE-2025-68151

Crypt::Sodium::XS module versions prior to 0.000042, for Perl, include a vulnerable version of libsodium

2026-01-13 CVE-2025-15444

crypto: af_alg - zero initialize memory allocated via sock_kmalloc

2026-01-13 CVE-2025-71113

crypto: seqiv - Do not use req->iv after crypto_aead_encrypt

2026-01-13 CVE-2025-71131

crypto: starfive - Correctly handle return of sg_nents_for_len

2026-01-13 CVE-2025-68763

CVE-2025-13151

2026-01-13 CVE-2025-13151

lowMicrosoft MSRC 2026-W03

Denial of Service in Keras via Excessive Memory Allocation in HDF5 Metadata

2026-01-13 CVE-2026-0897

Desktop Window Manager Elevation of Privilege Vulnerability

2026-01-13 CVE-2026-20871

Desktop Window Manager Information Disclosure Vulnerability

2026-01-13 CVE-2026-20805

DirectX Graphics Kernel Elevation of Privilege Vulnerability

2026-01-13 CVE-2026-20814

DirectX Graphics Kernel Elevation of Privilege Vulnerability

2026-01-13 CVE-2026-20836

dm-verity: disable recursive forward error correction

2026-01-13 CVE-2025-71161

dmaengine: idxd: fix device leaks on compat bind and unbind

2026-01-13 CVE-2025-71163

dmaengine: tegra-adma: Fix use-after-free

2026-01-13 CVE-2025-71162

drm/i915/gem: Zero-initialize the eb.vma array in i915_gem_do_execbuffer

2026-01-13 CVE-2025-71130

drm/msm/dpu: Add missing NULL pointer check for pingpong interface

2026-01-13 CVE-2025-71138

drm/ttm: Avoid NULL pointer deref for evicted BOs

2026-01-13 CVE-2025-71083

drm/vgem-fence: Fix potential deadlock on release

2026-01-13 CVE-2025-68757

dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list()

2026-01-13 CVE-2026-23004