Source: msrc

Windows Management Services Elevation of Privilege Vulnerability

2026-01-13 CVE-2026-20873

Windows Management Services Elevation of Privilege Vulnerability

2026-01-13 CVE-2026-20874

Windows Management Services Elevation of Privilege Vulnerability

2026-01-13 CVE-2026-20877

Windows Management Services Elevation of Privilege Vulnerability

2026-01-13 CVE-2026-20918

Windows Management Services Elevation of Privilege Vulnerability

2026-01-13 CVE-2026-20923

Windows Management Services Elevation of Privilege Vulnerability

2026-01-13 CVE-2026-20924

Windows Management Services Information Disclosure Vulnerability

2026-01-13 CVE-2026-20862

Windows Media Remote Code Execution Vulnerability

2026-01-13 CVE-2026-20837

Windows Motorola Soft Modem Driver Elevation of Privilege Vulnerability

2026-01-13 CVE-2024-55414

Windows NDIS Information Disclosure Vulnerability

2026-01-13 CVE-2026-20936

Windows NTFS Remote Code Execution Vulnerability

2026-01-13 CVE-2026-20840

Windows NTFS Remote Code Execution Vulnerability

2026-01-13 CVE-2026-20922

Windows Remote Assistance Security Feature Bypass Vulnerability

2026-01-13 CVE-2026-20824

Windows Remote Procedure Call Interface Definition Language (IDL) Elevation of Privilege Vulnerability

2026-01-13 CVE-2026-20832

Windows rndismp6.sys Information Disclosure Vulnerability

2026-01-13 CVE-2026-20828

Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability

2026-01-13 CVE-2026-20843

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

2026-01-13 CVE-2026-20868

Windows Server Update Service (WSUS) Remote Code Execution Vulnerability

2026-01-13 CVE-2026-20856

Windows SMB Server Denial of Service Vulnerability

2026-01-13 CVE-2026-20927

Windows SMB Server Elevation of Privilege Vulnerability

2026-01-13 CVE-2026-20848

Windows SMB Server Elevation of Privilege Vulnerability

2026-01-13 CVE-2026-20919

Windows SMB Server Elevation of Privilege Vulnerability

2026-01-13 CVE-2026-20921

Windows SMB Server Elevation of Privilege Vulnerability

2026-01-13 CVE-2026-20926

Windows SMB Server Elevation of Privilege Vulnerability

2026-01-13 CVE-2026-20934

Windows Spoofing Vulnerability

2026-01-13 CVE-2026-20834

Windows Telephony Service Elevation of Privilege Vulnerability

2026-01-13 CVE-2026-20931

Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

2026-01-13 CVE-2026-20876

Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

2026-01-13 CVE-2026-20938

Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability

2026-01-13 CVE-2026-20819

Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability

2026-01-13 CVE-2026-20935

Windows WalletService Elevation of Privilege Vulnerability

2026-01-13 CVE-2026-20853

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

2026-01-13 CVE-2026-20870

Word Copilot Information Disclosure Vulnerability

2026-01-13 CVE-2026-21521

wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory

2026-01-13 CVE-2025-15281

9p/trans_fd: p9_fd_request: kick rx thread if EPOLLIN

2025-12-09 CVE-2025-40305

A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer() to log a single-line payload larger than 64KB without newline characters.

2025-12-09 CVE-2025-65637

accel/habanalabs: support mapping cb with vmalloc-backed coherent memory

2025-12-09 CVE-2025-40311

af_unix: Fix null-ptr-deref in unix_stream_sendpage().

2025-12-09 CVE-2023-54082

af_unix: Fix null-ptr-deref in unix_stream_sendpage().

2025-12-09 CVE-2023-54161

ALSA: dice: fix buffer overflow in detect_stream_formats()

2025-12-09 CVE-2025-68346

ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events

2025-12-09 CVE-2025-68347

ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi()

2025-12-09 CVE-2025-68345

ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd

2025-12-09 CVE-2025-40275

ALSA: usb-audio: Fix potential overflow of PCM transfer buffer

2025-12-09 CVE-2025-40269

ALSA: wavefront: Fix integer overflow in sample size validation

2025-12-09 CVE-2025-68344

amd/amdkfd: enhance kfd process check in switch partition

2025-12-09 CVE-2025-68174

amd/amdkfd: resolve a race in amdgpu_amdkfd_device_fini_sw

2025-12-09 CVE-2025-40310

Apache HTTP Server: CGI environment variable override

2025-12-09 CVE-2025-65082

Apache HTTP Server: mod_md (ACME), unintended retry intervals

2025-12-09 CVE-2025-55753

Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo

2025-12-09 CVE-2025-66200

Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF

2025-12-09 CVE-2025-59775

Apache HTTP Server: Server Side Includes adds query string to #exec cmd=...

2025-12-09 CVE-2025-58098

Application Information Service Elevation of Privilege Vulnerability

2025-12-09 CVE-2025-62572

arm64: mte: Do not warn if the page is already tagged in copy_highpage()

2025-12-09 CVE-2025-40353

arrayLimit bypass in bracket notation allows DoS via memory exhaustion

2025-12-09 CVE-2025-15284

ASoC: Intel: avs: Do not share the name pointer between components

2025-12-09 CVE-2025-40338

ASoC: SDCA: bug fix while parsing mipi-sdca-control-cn-list

2025-12-09 CVE-2025-68281

atm/fore200e: Fix possible data race in fore200e_open()

2025-12-09 CVE-2025-68339