Vendor: microsoft

f2fs: fix to do sanity check on node footer in {read,write}_end_io

2026-03-10 CVE-2026-23265

fbdev: rivafb: fix divide error in nv3_arb()

2026-03-10 CVE-2026-23266

fbdev: smscufx: properly copy ioctl memory to kernelspace

2026-03-10 CVE-2026-23236

FileInfo can escape from a Root in os

2026-03-10 CVE-2026-27139

FRRouting FRR EVPN Type-2 Route bgp_evpn.c process_type2_route access control

2026-03-10 CVE-2026-5107

fs: ntfs3: check return value of indx_find to avoid infinite loop

2026-03-10 CVE-2025-71266

fs: ntfs3: fix infinite loop in attr_load_runs_range on inconsistent metadata

2026-03-10 CVE-2025-71265

fs: ntfs3: fix infinite loop triggered by zero-sized ATTR_LIST

2026-03-10 CVE-2025-71267

GDI+ Information Disclosure Vulnerability

2026-03-10 CVE-2026-25181

gethostbyaddr and gethostbyaddr_r may incorrectly handle DNS response

2026-03-10 CVE-2026-4437

gethostbyaddr and gethostbyaddr_r return invalid DNS hostnames

2026-03-10 CVE-2026-4438

Git for Windows leaks NTLM hash when cloning from an attacker-controlled server

2026-03-10 CVE-2025-66413

GitHub: CVE-2026-26030 Microsoft Semantic Kernel InMemoryVectorStore filter functionality vulnerable

2026-03-10 CVE-2026-26030

criticalMicrosoft MSRC 2026-W11

GitHub: Zero Shot SCFoundation Remote Code Execution Vulnerability

2026-03-10 CVE-2026-23654

Github.com/antchfx/xpath: xpath: denial of service via crafted boolean xpath expressions

2026-03-10 CVE-2026-4645

GNU Binutils thru 2.46 readelf contains a double free vulnerability when processing a crafted ELF binary with malformed relocation data. During GOT relocation handling, dump_reloca

2026-03-10 CVE-2025-69650

GNU Binutils thru 2.46 readelf contains a null pointer dereference vulnerability when processing a crafted ELF binary with malformed header fields. During relocation processing, an

2026-03-10 CVE-2025-69649

GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an abort (SIGABRT) when processing a crafted ELF binary with malformed DWARF abbrev or debug information. Due

2026-03-10 CVE-2025-69652

GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an invalid pointer free when processing a crafted ELF binary with malformed relocation or symbol data. If dump

2026-03-10 CVE-2025-69651

Handlebars.js has Denial of Service via Malformed Decorator Syntax in Template Compilation

2026-03-10 CVE-2026-33939

Handlebars.js has JavaScript Injection via AST Type Confusion

2026-03-10 CVE-2026-33937

criticalMicrosoft MSRC 2026-W11

Handlebars.js has JavaScript Injection via AST Type Confusion by tampering @partial-block

2026-03-10 CVE-2026-33938

HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them

2026-03-10 CVE-2026-23382

Hybrid Worker Extension (Arc‑enabled Windows VMs) Elevation of Privilege Vulnerability

2026-03-10 CVE-2026-26141

i40e: Fix preempt count leak in napi poll tracepoint

2026-03-10 CVE-2026-23313

ice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz

2026-03-10 CVE-2026-23377

ice: Fix memory leak in ice_set_ringparam()

2026-03-10 CVE-2026-23389

icmp: fix NULL pointer dereference in icmp_tag_validation()

2026-03-10 CVE-2026-23398

iconv crash due to assertion failure with untrusted input

2026-03-10 CVE-2026-4046

In multiple functions of mem_protect.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional exec

2026-03-10 CVE-2026-0031

In multiple functions of mem_protect.c, there is a possible out-of-bounds write due to a logic error in the code. This could lead to local escalation of privilege with no additiona

2026-03-10 CVE-2026-0032

In multiple functions of mem_protect.c, there is a possible way to execute arbitrary code due to a logic error in the code. This could lead to local escalation of privilege with no

2026-03-10 CVE-2026-0038

Incorrect enforcement of email constraints in crypto/x509

2026-03-10 CVE-2026-27137

Incorrect parsing of IPv6 host literals in net/url

2026-03-10 CVE-2026-25679

io_uring/rw: free potentially allocated iovec on cache put failure

2026-03-10 CVE-2026-23259

Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive

2026-03-10 CVE-2026-4111

Libarchive: libarchive: denial of service via malformed iso file processing

2026-03-10 CVE-2026-4426

LIBPNG has ARM NEON Palette Expansion Out-of-Bounds Read on AArch64

2026-03-10 CVE-2026-33636

Libsoup: libsoup: header and http request injection via crlf injection

2026-03-10 CVE-2026-3633

Libsoup: libsoup: http header injection and response splitting via crlf injection in content-type header

2026-03-10 CVE-2026-3634

Libsoup: libsoup: http smuggling and server-side request forgery via malformed hostnames

2026-03-10 CVE-2026-3632

Libsoup: libsoup: information disclosure via cleartext transmission of cookies during https tunnel establishment

2026-03-10 CVE-2026-5119

libssh SFTP Extension Name sftp.c sftp_extensions_get_data out-of-bounds

2026-03-10 CVE-2026-3731

Libssh: libssh: denial of service via improper configuration file handling

2026-03-10 CVE-2026-0965

Linux Azure Diagnostic extension (LAD) Elevation of Privilege Vulnerability

2026-03-10 CVE-2026-23665

M365 Copilot Information Disclosure Vulnerability

2026-03-10 CVE-2026-24299

M365 Copilot Information Disclosure Vulnerability

2026-03-10 CVE-2026-26133

MapUrlToZone Security Feature Bypass Vulnerability

2026-03-10 CVE-2026-23674

MariaDB Server Audit Plugin Comment Handling Bypass

2026-03-10 CVE-2026-3494

Mariner

2026-03-10 CVE-2025-67030

Mariner

2026-03-10 CVE-2025-69647

Mariner

2026-03-10 CVE-2025-69648

Mariner

2026-03-10 CVE-2025-70873

Mariner

2026-03-10 CVE-2025-70888

Mariner

2026-03-10 CVE-2026-21712

Mariner

2026-03-10 CVE-2026-21714

Mariner

2026-03-10 CVE-2026-21715

Mariner

2026-03-10 CVE-2026-21717

Mariner

2026-03-10 CVE-2026-23868