Security Warnings — Vendor: microsoft

CVE-2026-42945 NGINX ngx_http_rewrite_module vulnerability

2026-05-13 CVE-2026-42945

mediumMicrosoft CVE 2026-W20

CVE-2026-42946 NGINX ngx_http_scgi_module and ngx_http_uwsgi_module vulnerability

2026-05-13 CVE-2026-42946

mediumMicrosoft CVE 2026-W20

CVE-2026-44431 urllib3: Sensitive headers forwarded across origins in proxied low-level redirects

2026-05-13 CVE-2026-44431

mediumMicrosoft CVE 2026-W20

CVE-2026-4873 connection reuse ignores TLS requirement

2026-05-13 CVE-2026-4873

mediumMicrosoft CVE 2026-W20

CVE-2026-6429 netrc credential leak with reused proxy connection

2026-05-13 CVE-2026-6429

mediumMicrosoft CVE 2026-W20

CVE-2026-8328 FTP PASV SSRF, ftpcp() does not use actual peer address, trusts server-supplied PASV host address

2026-05-13 CVE-2026-8328

mediumMicrosoft CVE 2026-W20

proxy credentials leak over redirect-to proxy

2026-05-13 CVE-2026-6253

mediumMicrosoft CVE 2026-W20

wrong reuse of HTTP Negotiate connection

2026-05-13 CVE-2026-5545

mediumMicrosoft CVE 2026-W20

wrong reuse of SMB connection

2026-05-13 CVE-2026-5773

highMicrosoft CVE 2026-W20

CVE-2026-1502 HTTP client proxy tunnel headers not validated for CR/LF

2026-05-12 CVE-2026-1502

mediumMicrosoft CVE 2026-W20

CVE-2026-3087 shutil.unpack_archive() doesn't check for Windows absolute paths in ZIPs

2026-05-12 CVE-2026-3087

mediumMicrosoft CVE 2026-W20

CVE-2026-43968 CR Injection in SSE Encoder Enables Event Splitting via cow_sse:event/1

2026-05-12 CVE-2026-43968

mediumMicrosoft CVE 2026-W20

CVE-2026-7790 Unbounded chunk-size hex digits in cowlib cause quadratic CPU and memory DoS

2026-05-12 CVE-2026-7790

highMicrosoft CVE 2026-W20

CVE-2026-8368 LWP::UserAgent versions before 6.83 for Perl leak Authorization and Proxy-Authorization headers on cross-origin redirects

2026-05-12 CVE-2026-8368

mediumMicrosoft CVE 2026-W20

9p/xen: protect xen_9pfs_front_free against concurrent calls

2026-05-11 CVE-2026-43249

highMicrosoft CVE 2026-W20

alpha: fix user-space corruption during memory compaction

2026-05-11 CVE-2026-43258

mediumMicrosoft CVE 2026-W20

ALSA: ctxfi: Check the error for index mapping

2026-05-11 CVE-2026-31777

highMicrosoft CVE 2026-W20

ALSA: mixer: oss: Add card disconnect checkpoints

2026-05-11 CVE-2026-43126

mediumMicrosoft CVE 2026-W20

APEI/GHES: ARM processor Error: don't go past allocated memory

2026-05-11 CVE-2026-43201

mediumMicrosoft CVE 2026-W20

ASoC: qcom: q6asm: drop DSP responses for closed data streams

2026-05-11 CVE-2026-43204

mediumMicrosoft CVE 2026-W20

ASoC: SOF: Intel: hda: Fix NULL pointer dereference

2026-05-11 CVE-2026-43137

mediumMicrosoft CVE 2026-W20

Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync

2026-05-11 CVE-2026-43019

highMicrosoft CVE 2026-W20

Bluetooth: hci_event: move wake reason storage into validated event handlers

2026-05-11 CVE-2026-31771

highMicrosoft CVE 2026-W20

Bluetooth: hci_sync: annotate data-races around hdev->req_status

2026-05-11 CVE-2026-43119

mediumMicrosoft CVE 2026-W20

bnxt: properly flush XDP redirect lists

2026-05-11 CVE-2025-38246

mediumMicrosoft CVE 2026-W20

bpf: crypto: Use the correct destructor kfunc type

2026-05-11 CVE-2026-43306

highMicrosoft CVE 2026-W20

bpf: Fix incorrect pruning due to atomic fetch precision tracking

2026-05-11 CVE-2026-43009

highMicrosoft CVE 2026-W20

bpf: Reject sleepable kprobe_multi programs at attach time

2026-05-11 CVE-2026-43010

mediumMicrosoft CVE 2026-W20

btrfs: fix iteration of extrefs during log replay

2026-05-11 CVE-2025-38382

mediumMicrosoft CVE 2026-W20

btrfs: fix zero size inode with non-zero size after log replay

2026-05-11 CVE-2026-43118

lowMicrosoft CVE 2026-W20

crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption

2026-05-11 CVE-2026-43033

highMicrosoft CVE 2026-W20

crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed

2026-05-11 CVE-2026-31699

highMicrosoft CVE 2026-W20

crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed

2026-05-11 CVE-2026-31697

highMicrosoft CVE 2026-W20

crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed

2026-05-11 CVE-2026-31698

highMicrosoft CVE 2026-W20

CVE-2024-53133 drm/amd/display: Handle dml allocation failure to avoid crash

2026-05-11 CVE-2024-53133

highMicrosoft CVE 2026-W20

CVE-2025-21825 bpf: Cancel the running bpf_timer through kworker for PREEMPT_RT

2026-05-11 CVE-2025-21825

mediumMicrosoft CVE 2026-W20

CVE-2025-21888 RDMA/mlx5: Fix a WARN during dereg_mr for DM type

2026-05-11 CVE-2025-21888

mediumMicrosoft CVE 2026-W20

CVE-2025-38029 kasan: avoid sleepable page allocation from atomic context

2026-05-11 CVE-2025-38029

mediumMicrosoft CVE 2026-W20

CVE-2025-38041 clk: sunxi-ng: h616: Reparent GPU clock during frequency changes

2026-05-11 CVE-2025-38041

mediumMicrosoft CVE 2026-W20

CVE-2025-38064 virtio: break and reset virtio devices on device_shutdown()

2026-05-11 CVE-2025-38064

mediumMicrosoft CVE 2026-W20

CVE-2025-38096 wifi: iwlwifi: don't warn when if there is a FW error

2026-05-11 CVE-2025-38096

mediumMicrosoft CVE 2026-W20

CVE-2025-38140 dm: limit swapping tables for devices with zone write plugs

2026-05-11 CVE-2025-38140

mediumMicrosoft CVE 2026-W20

CVE-2025-40139 smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set().

2026-05-11 CVE-2025-40139

mediumMicrosoft CVE 2026-W20

CVE-2025-40146 blk-mq: fix potential deadlock while nr_requests grown

2026-05-11 CVE-2025-40146

mediumMicrosoft CVE 2026-W20

CVE-2025-40158 ipv6: use RCU in ip6_output()

2026-05-11 CVE-2025-40158

mediumMicrosoft CVE 2026-W20

CVE-2025-40168 smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match().

2026-05-11 CVE-2025-40168

mediumMicrosoft CVE 2026-W20

CVE-2025-40170 net: use dst_dev_rcu() in sk_setup_caps()

2026-05-11 CVE-2025-40170

mediumMicrosoft CVE 2026-W20

CVE-2025-68768 inet: frags: flush pending skbs in fqdir_pre_exit()

2026-05-11 CVE-2025-68768

mediumMicrosoft CVE 2026-W20

CVE-2025-71272 most: core: fix resource leak in most_register_interface error paths

2026-05-11 CVE-2025-71272

mediumMicrosoft CVE 2026-W20

CVE-2026-2291 CVE-2026-2291

2026-05-11 CVE-2026-2291

mediumMicrosoft CVE 2026-W20

CVE-2026-31702 f2fs: fix use-after-free of sbi in f2fs_compress_write_end_io()

2026-05-11 CVE-2026-31702

mediumMicrosoft CVE 2026-W20

CVE-2026-31704 ksmbd: use check_add_overflow() to prevent u16 DACL size overflow

2026-05-11 CVE-2026-31704

mediumMicrosoft CVE 2026-W20

CVE-2026-31721 usb: gadget: f_hid: move list and spinlock inits from bind to alloc

2026-05-11 CVE-2026-31721

mediumMicrosoft CVE 2026-W20

CVE-2026-31723 usb: gadget: f_subset: Fix net_device lifecycle with device_move

2026-05-11 CVE-2026-31723

mediumMicrosoft CVE 2026-W20

CVE-2026-31724 usb: gadget: f_eem: Fix net_device lifecycle with device_move

2026-05-11 CVE-2026-31724

mediumMicrosoft CVE 2026-W20

CVE-2026-43308 btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref()

2026-05-11 CVE-2026-43308

mediumMicrosoft CVE 2026-W20

CVE-2026-7210 The expat and elementtree parsers use insufficient entropy for XML hash-flooding protection

2026-05-11 CVE-2026-7210

mediumMicrosoft CVE 2026-W20

dlm: validate length in dlm_search_rsb_tree

2026-05-11 CVE-2026-43125

highMicrosoft CVE 2026-W20

dm-bufio: fix sched in atomic context

2026-05-11 CVE-2025-38496

mediumMicrosoft CVE 2026-W20

drm/amd/display: Add signal type check for dcn401 get_phyd32clk_src

2026-05-11 CVE-2026-43243

mediumMicrosoft CVE 2026-W20