Vendor: microsoft

CVE-2026-43414 scsi: qla2xxx: Completely fix fcport double free

2026-05-23 CVE-2026-43414

criticalMicrosoft CVE 2026-W21

CVE-2026-8711 NGINX JavaScript vulnerability

2026-05-21 CVE-2026-8711

criticalMicrosoft CVE 2026-W21

CVE-2026-29518 Rsync < 3.4.3 TOCTOU Race Condition Allows Symlink-Based Arbitrary File Write

2026-05-20 CVE-2026-29518

CVE-2026-3039 BIND 9 server memory exhaustion during GSS-API TKEY negotiation

2026-05-20 CVE-2026-3039

CVE-2026-32792 Packet of death with DNSCrypt

2026-05-20 CVE-2026-32792

CVE-2026-33278 Possible arbitrary code execution during DNSSEC validation

2026-05-20 CVE-2026-33278

criticalMicrosoft CVE 2026-W21

CVE-2026-3592 Amplification vulnerabilities via self-pointed glue records

2026-05-20 CVE-2026-3592

CVE-2026-3593 Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS implementation

2026-05-20 CVE-2026-3593

CVE-2026-40622 Another 'ghost domain names' attack variant

2026-05-20 CVE-2026-40622

CVE-2026-41054 Missing exit out of permission check in haveged could lead to root exploit

2026-05-20 CVE-2026-41054

CVE-2026-41292 Long list of incoming EDNS options degrades performance

2026-05-20 CVE-2026-41292

CVE-2026-42534 Jostle logic bypass degrades resolution performance

2026-05-20 CVE-2026-42534

CVE-2026-42923 Degradation of service with unbounded NSEC3 hash calculations

2026-05-20 CVE-2026-42923

CVE-2026-42944 Heap overflow with multiple NSID, COOKIE, PADDING EDNS options

2026-05-20 CVE-2026-42944

CVE-2026-42959 Crash during DNSSEC validation of malicious content

2026-05-20 CVE-2026-42959

CVE-2026-42960 Possible cache poisoning via promiscuous records for the authority section

2026-05-20 CVE-2026-42960

CVE-2026-43617 Rsync < 3.4.3 Authorization Bypass via Hostname Resolution

2026-05-20 CVE-2026-43617

CVE-2026-43618 Rsync < 3.4.3 Integer Overflow Information Disclosure

2026-05-20 CVE-2026-43618

CVE-2026-43619 Rsync < 3.4.3 Symlink Race Condition via Path-Based Syscalls

2026-05-20 CVE-2026-43619

CVE-2026-5946 Invalid handling of CLASS != IN

2026-05-20 CVE-2026-5946

CVE-2026-5947 SIG(0) validation during query flood may lead to undefined behavior

2026-05-20 CVE-2026-5947

CVE-2026-5950 Unbounded resend loop in BIND 9 resolver

2026-05-20 CVE-2026-5950

Microsoft Defender Denial of Service Vulnerability

2026-05-20 CVE-2026-45498

Microsoft Defender Link Following Vulnerability

2026-05-20 CVE-2026-41091

Microsoft DirectX NULL Byte Overwrite Vulnerability

2026-05-20 CVE-2009-1537

Microsoft Internet Explorer Use-After-Free Vulnerability

2026-05-20 CVE-2010-0249

Microsoft Internet Explorer Use-After-Free Vulnerability

2026-05-20 CVE-2010-0806

Microsoft Windows Buffer Overflow Vulnerability

2026-05-20 CVE-2008-4250

CVE-2025-14575 Uncontrolled Search Path Element in Qt Network OpenSSL TLS backend allows rogue CA certificate loading

2026-05-19 CVE-2025-14575

lowMicrosoft CVE 2026-W21

CVE-2026-42009 Gnutls: gnutls: denial of service via dtls packet reordering vulnerability

2026-05-18 CVE-2026-42009

CVE-2026-46333 ptrace: slightly saner 'get_dumpable()' logic

2026-05-18 CVE-2026-46333

CVE-2026-8723 qs.stringify crashes on null/undefined entries in comma-format arrays under encodeValuesOnly

2026-05-16 CVE-2026-8723

CVE-2026-43490 ksmbd: validate inherited ACE SID length

2026-05-15 CVE-2026-43490

CVE-2026-46483 Vim: Command injection in tar#Vimuntar via missing shellescape {special} flag

2026-05-15 CVE-2026-46483

Microsoft Exchange Server Cross-Site Scripting Vulnerability

2026-05-15 CVE-2026-42897

highMicrosoft CISA KEV 2026-W20

Azure Machine Learning Notebook Spoofing Vulnerability

2026-05-14 CVE-2026-32207

Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability

2026-05-14 CVE-2026-33109

criticalMicrosoft CVE 2026-W20

CVE-2026-44283 etcd: Read access via PrevKv in etcd transactions may bypass RBAC authorization checks

2026-05-14 CVE-2026-44283

CVE-2026-44662 rust-openssl: Heap buffer overflow when encrypting with AES key-wrap-with-padding

2026-05-14 CVE-2026-44662

CVE-2026-44673 libyang: lyb_read_string() integer overflow → heap buffer overflow

2026-05-14 CVE-2026-44673

CVE-2026-6472 PostgreSQL CREATE TYPE does not check multirange schema CREATE privilege

2026-05-14 CVE-2026-6472

CVE-2026-6473 PostgreSQL server undersizes allocations, via integer wraparound

2026-05-14 CVE-2026-6473

CVE-2026-6474 PostgreSQL timeofday() can disclose portions of server memory

2026-05-14 CVE-2026-6474

CVE-2026-6475 PostgreSQL pg_basebackup and pg_rewind can overwrite unrelated files of origin superuser choice

2026-05-14 CVE-2026-6475

CVE-2026-6477 PostgreSQL libpq lo_* functions let server superuser overwrite client stack memory

2026-05-14 CVE-2026-6477

CVE-2026-6478 PostgreSQL discloses MD5-hashed passwords via covert timing channel

2026-05-14 CVE-2026-6478

CVE-2026-6479 PostgreSQL SSL/GSS init causes denial of service, via uncontrolled recursion

2026-05-14 CVE-2026-6479

CVE-2026-6637 PostgreSQL refint allows stack buffer overflow and SQL injection

2026-05-14 CVE-2026-6637

CVE-2026-6638 PostgreSQL REFRESH PUBLICATION allows SQL injection via table name

2026-05-14 CVE-2026-6638

Gnutls: gnutls: security bypass due to incorrect name constraint handling

2026-05-14 CVE-2026-42011

net: af_key: zero aligned sockaddr tail in PF_KEY exports

2026-05-14 CVE-2026-43088

x86: shadow stacks: proper error handling for mmap lock

2026-05-14 CVE-2026-43109

CVE-2026-40460 NGINX ngx_quic_module vulnerability

2026-05-13 CVE-2026-40460

CVE-2026-40701 NGINX ngx_http_ssl_module vulnerability

2026-05-13 CVE-2026-40701

CVE-2026-42934 NGINX ngx_http_charset_module vulnerability

2026-05-13 CVE-2026-42934