Vendor: microsoft

Windows Projected File System Elevation of Privilege Vulnerability

2026-03-10 CVE-2026-24290

Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

2026-03-10 CVE-2026-23673

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

2026-03-10 CVE-2026-25172

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

2026-03-10 CVE-2026-25173

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

2026-03-10 CVE-2026-26111

Windows Shell Link Processing Spoofing Vulnerability

2026-03-10 CVE-2026-25185

mediumMicrosoft MSRC 2026-W11

Windows SMB Server Elevation of Privilege Vulnerability

2026-03-10 CVE-2026-24294

Windows SMB Server Elevation of Privilege Vulnerability

2026-03-10 CVE-2026-26128

Windows System Image Manager Assessment and Deployment Kit (ADK) Remote Code Execution Vulnerability

2026-03-10 CVE-2026-25166

Windows Telephony Service Elevation of Privilege Vulnerability

2026-03-10 CVE-2026-25188

Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

2026-03-10 CVE-2026-23672

Winlogon Elevation of Privilege Vulnerability

2026-03-10 CVE-2026-25187

wrong proxy connection reuse with credentials

2026-03-10 CVE-2026-3784

mediumMicrosoft MSRC 2026-W11

x86/efi: defer freeing of boot services memory

2026-03-10 CVE-2026-23352

xattr: switch to CLASS(fd)

2026-03-10 CVE-2024-14027

mediumMicrosoft MSRC 2026-W11

xdp: produce a warning when calculated tailroom is negative

2026-03-10 CVE-2026-23343

XML::Parser versions through 2.47 for Perl could overflow the pre-allocated buffer size cause a heap corruption (double free or corruption) and crashes

2026-03-10 CVE-2006-10002

XML::Parser versions through 2.47 for Perl has an off-by-one heap buffer overflow in st_serial_stack

2026-03-10 CVE-2006-10003

zlib <= 1.3.1.2 untgz Global Buffer Overflow in TGZfname()

2026-03-05 CVE-2026-22184

criticalMicrosoft CVE 2026-W10

Azure Bastion Elevation of Privilege Vulnerability

2026-02-26 CVE-2025-49752

criticalMicrosoft CVE 2026-W09

Azure Databricks Elevation of Privilege Vulnerability

2026-02-26 CVE-2025-53763

criticalMicrosoft CVE 2026-W09

Azure DevOps Server Elevation of Privilege Vulnerability

2026-02-26 CVE-2025-47158

criticalMicrosoft CVE 2026-W09

Azure Entra ID Elevation of Privilege Vulnerability

2026-02-26 CVE-2026-24305

criticalMicrosoft CVE 2026-W09

Azure Front Door Elevation of Privilege Vulnerability

2026-02-26 CVE-2026-24306

criticalMicrosoft CVE 2026-W09

Azure OpenAI Elevation of Privilege Vulnerability

2026-02-26 CVE-2025-53767

criticalMicrosoft CVE 2026-W09

Azure Resource Manager Elevation of Privilege Vulnerability

2026-02-26 CVE-2026-24304

criticalMicrosoft CVE 2026-W09

M365 Copilot Information Disclosure Vulnerability

2026-02-26 CVE-2026-24307

criticalMicrosoft CVE 2026-W09

Microsoft Account Spoofing Vulnerability

2026-02-26 CVE-2026-21264

criticalMicrosoft CVE 2026-W09

Microsoft SharePoint Online Elevation of Privilege Vulnerability

2026-02-26 CVE-2025-59245

criticalMicrosoft CVE 2026-W09

Windows Graphics Component Remote Code Execution Vulnerability

2026-02-26 CVE-2025-50165

criticalMicrosoft CVE 2026-W09

Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability

2026-02-17 CVE-2008-0015

highMicrosoft CVE 2026-W08

GDI+ Remote Code Execution Vulnerability

2026-02-13 CVE-2025-53766

criticalMicrosoft CVE 2026-W07

Remote Desktop Spoofing Vulnerability

2026-02-13 CVE-2025-50171

criticalMicrosoft CVE 2026-W07

SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability

2026-02-13 CVE-2025-47981

criticalMicrosoft CVE 2026-W07

Microsoft Configuration Manager SQL Injection Vulnerability

2026-02-12 CVE-2024-43468

highMicrosoft CVE 2026-W07

.NET Spoofing Vulnerability

2026-02-10 CVE-2026-21218

ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the $data option is enabled. The pattern keyword accepts runtim

2026-02-10 CVE-2025-69873

lowMicrosoft MSRC 2026-W07

ALSA: aloop: Fix racy access at PCM trigger

2026-02-10 CVE-2026-23191

ALSA: usb-audio: Prevent excessive number of frames

2026-02-10 CVE-2026-23208

Azure Arc Elevation of Privilege Vulnerability

2026-02-10 CVE-2026-24302

Azure DevOps Server Cross-Site Scripting Vulnerability

2026-02-10 CVE-2026-21512

Azure Front Door Elevation of Privilege Vulnerability

2026-02-10 CVE-2026-24300

criticalMicrosoft MSRC 2026-W07

Azure Function Information Disclosure Vulnerability

2026-02-10 CVE-2026-21532

Azure HDInsight Spoofing Vulnerability

2026-02-10 CVE-2026-21529

Azure IoT Explorer Information Disclosure Vulnerability

2026-02-10 CVE-2026-21528

Azure Local Remote Code Execution Vulnerability

2026-02-10 CVE-2026-21228

Azure SDK for Python Remote Code Execution Vulnerability

2026-02-10 CVE-2026-21531

criticalMicrosoft MSRC 2026-W07

bonding: annotate data-races around slave->last_rx

2026-02-10 CVE-2026-23212

bonding: fix use-after-free due to enslave fail after slave array update

2026-02-10 CVE-2026-23171

btrfs: do not strictly require dirty metadata threshold for metadata writepages

2026-02-10 CVE-2026-23157

btrfs: reject new transactions if the fs is fully read-only

2026-02-10 CVE-2026-23214

btrfs: send: check for inline extents in range_is_hole_in_parent()

2026-02-10 CVE-2026-23141

bus: fsl-mc: fix use-after-free in driver_override_show()

2026-02-10 CVE-2026-23221

Bytes is vulnerable to integer overflow in BytesMut::reserve

2026-02-10 CVE-2026-25541

Cloud Hypervisor: Host File Exfiltration via QCOW Backing File Abuse

2026-02-10 CVE-2026-27211

criticalMicrosoft MSRC 2026-W07

Cluster Client Failover (CCF) Elevation of Privilege Vulnerability

2026-02-10 CVE-2026-21251

crypto: iaa - Fix out-of-bounds index in find_empty_iaa_compression_mode

2026-02-10 CVE-2025-71231

crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly

2026-02-10 CVE-2026-23222

crypto: virtio - Add spinlock protection with virtqueue notification

2026-02-10 CVE-2026-23229