Security Warnings — Source: msrc

mruby array.c sort_cmp use after free

2025-11-11 CVE-2025-13120

mediumMicrosoft MSRC 2025-W46

Multimedia Class Scheduler Service (MMCSS) Driver Elevation of Privilege Vulnerability

2025-11-11 CVE-2025-60707

highMicrosoft MSRC 2025-W46

net: use dst_dev_rcu() in sk_setup_caps()

2025-11-11 CVE-2025-40170

highMicrosoft MSRC 2025-W46

net/ip6_tunnel: Prevent perpetual tunnel growth

2025-11-11 CVE-2025-40173

mediumMicrosoft MSRC 2025-W46

net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce()

2025-11-11 CVE-2025-40187

mediumMicrosoft MSRC 2025-W46

netfilter: nft_objref: validate objref and objrefmap expressions

2025-11-11 CVE-2025-40206

mediumMicrosoft MSRC 2025-W46

Nuance PowerScribe 360 Information Disclosure Vulnerability

2025-11-11 CVE-2025-30398

highMicrosoft MSRC 2025-W46

NULL pointer dereference vulnerability exists in GNU libmicrohttpd v1.0.2 and earlier. The vulnerability was fixed in commit ff13abc on the master branch of the libmicrohttpd Git r

2025-11-11 CVE-2025-59777

highMicrosoft MSRC 2025-W46

NULL pointer dereference vulnerability exists in GNU libmicrohttpd v1.0.2 and earlier. The vulnerability was fixed in commit ff13abc on the master branch of the libmicrohttpd Git r

2025-11-11 CVE-2025-62689

highMicrosoft MSRC 2025-W46

OpenPrinting CUPS slow client can halt cupsd, leading to a possible DoS attack

2025-11-11 CVE-2025-58436

mediumMicrosoft MSRC 2025-W46

OpenPrinting CUPS vulnerable to stack based out-of-bound write

2025-11-11 CVE-2025-61915

mediumMicrosoft MSRC 2025-W46

Path Traversal Vulnerability in keras-team/keras via Tar Archive Extraction in keras.utils.get_file()

2025-11-11 CVE-2025-12638

highMicrosoft MSRC 2025-W46

pid: Add a judgment for ns null in pid_nr_ns

2025-11-11 CVE-2025-40178

mediumMicrosoft MSRC 2025-W46

PostgreSQL CREATE STATISTICS does not check for schema CREATE privilege

2025-11-11 CVE-2025-12817

lowMicrosoft MSRC 2025-W46

PostgreSQL libpq undersizes allocations, via integer wraparound

2025-11-11 CVE-2025-12818

mediumMicrosoft MSRC 2025-W46

Potential denial of service in golang.org/x/crypto/ssh/agent

2025-11-11 CVE-2025-47913

highMicrosoft MSRC 2025-W46

Potential DoS Vulnerability through Multiple KeyShareEntry with Same Group in TLS 1.3 ClientHello

2025-11-11 CVE-2025-11936

mediumMicrosoft MSRC 2025-W46

pwm: berlin: Fix wrong register in suspend/resume

2025-11-11 CVE-2025-40188

mediumMicrosoft MSRC 2025-W46

Revert "ipmi: fix msg stack when IPMI is disconnected"

2025-11-11 CVE-2025-40192

mediumMicrosoft MSRC 2025-W46

Revert "NFSD: Remove the cap on number of operations per NFSv4 COMPOUND"

2025-11-11 CVE-2025-40210

mediumMicrosoft MSRC 2025-W46

RGW DoS attack with empty HTTP header in S3 object copy

2025-11-11 CVE-2024-47866

highMicrosoft MSRC 2025-W46

Rsync: Out of bounds array access via negative index

2025-11-11 CVE-2025-10158

mediumMicrosoft MSRC 2025-W46

runc: LSM labels can be bypassed with malicious config using dummy procfs files

2025-11-11 CVE-2025-52881

highMicrosoft MSRC 2025-W46

sctp: Fix MAC comparison to be constant-time

2025-11-11 CVE-2025-40204

highMicrosoft MSRC 2025-W46

smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set().

2025-11-11 CVE-2025-40139

highMicrosoft MSRC 2025-W46

smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match().

2025-11-11 CVE-2025-40168

mediumMicrosoft MSRC 2025-W46

Squashfs: reject negative file sizes in squashfs_read_inode()

2025-11-11 CVE-2025-40200

mediumMicrosoft MSRC 2025-W46

Storvsp.sys Driver Denial of Service Vulnerability

2025-11-11 CVE-2025-60708

mediumMicrosoft MSRC 2025-W46

Timing Side-Channel in PSK Binder Verification

2025-11-11 CVE-2025-11932

mediumMicrosoft MSRC 2025-W46

tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().

2025-11-11 CVE-2025-40149

mediumMicrosoft MSRC 2025-W46

tls: wait for pending async decryptions if tls_strp_msg_hold fails

2025-11-11 CVE-2025-40176

highMicrosoft MSRC 2025-W46

Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity:

2025-11-11 CVE-2025-13226

highMicrosoft MSRC 2025-W46

Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity:

2025-11-11 CVE-2025-13227

highMicrosoft MSRC 2025-W46

Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity:

2025-11-11 CVE-2025-13230

highMicrosoft MSRC 2025-W46

UEFI Shell accessible in AAVMF with Secure Boot enabled on Ubuntu

2025-11-11 CVE-2025-2486

highMicrosoft MSRC 2025-W46

usbnet: Fix using smp_processor_id() in preemptible code warnings

2025-11-11 CVE-2025-40164

mediumMicrosoft MSRC 2025-W46

Visual Studio Remote Code Execution Vulnerability

2025-11-11 CVE-2025-62214

mediumMicrosoft MSRC 2025-W46

WebAssembly Micro Runtime frame_offset_bottom array bounds overflow in fast Interpreter mode when handling GET_GLOBAL(I32) followed by if opcode

2025-11-11 CVE-2025-64713

mediumMicrosoft MSRC 2025-W46

WebAssembly Micro Runtime vulnerable to a segmentation fault in v128.store instruction

2025-11-11 CVE-2025-64704

mediumMicrosoft MSRC 2025-W46

Windows Administrator Protection Elevation of Privilege Vulnerability

2025-11-11 CVE-2025-60718

highMicrosoft MSRC 2025-W46

Windows Administrator Protection Elevation of Privilege Vulnerability

2025-11-11 CVE-2025-60721

highMicrosoft MSRC 2025-W46

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

2025-11-11 CVE-2025-60719

highMicrosoft MSRC 2025-W46

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

2025-11-11 CVE-2025-62213

highMicrosoft MSRC 2025-W46

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

2025-11-11 CVE-2025-62217

highMicrosoft MSRC 2025-W46

Windows Bluetooth RFCOM Protocol Driver Information Disclosure Vulnerability

2025-11-11 CVE-2025-59513

mediumMicrosoft MSRC 2025-W46

Windows Broadcast DVR User Service Elevation of Privilege Vulnerability

2025-11-11 CVE-2025-59515

highMicrosoft MSRC 2025-W46

Windows Broadcast DVR User Service Elevation of Privilege Vulnerability

2025-11-11 CVE-2025-60717

highMicrosoft MSRC 2025-W46

Windows Client-Side Caching Elevation of Privilege Vulnerability

2025-11-11 CVE-2025-60705

highMicrosoft MSRC 2025-W46

Windows Common Log File System Driver Elevation of Privilege Vulnerability

2025-11-11 CVE-2025-60709

highMicrosoft MSRC 2025-W46

Windows Hyper-V Information Disclosure Vulnerability

2025-11-11 CVE-2025-60706

mediumMicrosoft MSRC 2025-W46

Windows Kerberos Elevation of Privilege Vulnerability

2025-11-11 CVE-2025-60704

highMicrosoft MSRC 2025-W46

Windows Kernel Elevation of Privilege Vulnerability

2025-11-11 CVE-2025-62215

highMicrosoft MSRC 2025-W46

Windows License Manager Information Disclosure Vulnerability

2025-11-11 CVE-2025-62208

mediumMicrosoft MSRC 2025-W46

Windows License Manager Information Disclosure Vulnerability

2025-11-11 CVE-2025-62209

mediumMicrosoft MSRC 2025-W46

Windows OLE Remote Code Execution Vulnerability

2025-11-11 CVE-2025-60714

highMicrosoft MSRC 2025-W46

Windows Remote Desktop Services Elevation of Privilege Vulnerability

2025-11-11 CVE-2025-60703

highMicrosoft MSRC 2025-W46

Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability

2025-11-11 CVE-2025-59510

mediumMicrosoft MSRC 2025-W46

Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability

2025-11-11 CVE-2025-60713

highMicrosoft MSRC 2025-W46

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

2025-11-11 CVE-2025-60715

highMicrosoft MSRC 2025-W46

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

2025-11-11 CVE-2025-62452

highMicrosoft MSRC 2025-W46