Week: 2026-W03

filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock

2026-01-13 CVE-2026-22701

fsnotify: do not generate ACCESS/MODIFY events on child for special files

2026-01-13 CVE-2025-68788

getnetbyaddr and getnetbyaddr_r leak stack contents to DNS resovler

2026-01-13 CVE-2026-0915

hfsplus: fix missing hfs_bnode_get() in __hfs_bnode_create

2026-01-13 CVE-2025-68774

hfsplus: Verify inode mode when loading from disk

2026-01-13 CVE-2025-68767

Host Process for Windows Tasks Elevation of Privilege Vulnerability

2026-01-13 CVE-2026-20941

hwmon: (w83791d) Convert macros to functions to avoid TOCTOU

2026-01-13 CVE-2025-71111

iavf: fix off-by-one issues in iavf_config_rss_reg()

2026-01-13 CVE-2025-71087

In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer overflow for a large update size to resize() in kdb_log.c. An authenticated attacker ca

2026-01-13 CVE-2025-24528

In the eap-mschapv2 plugin (client-side) in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integer underflow

2026-01-13 CVE-2025-62291

Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability

2026-01-13 CVE-2026-21219

inet: frags: flush pending skbs in fqdir_pre_exit()

2026-01-13 CVE-2025-68768

Input: alps - fix use-after-free bugs caused by dev3_register_work

2026-01-13 CVE-2025-68822

criticalMicrosoft MSRC 2026-W03

Input: ti_am335x_tsc - fix off-by-one error in wire_order validation

2026-01-13 CVE-2025-68777

Integer overflow in memalign leads to heap corruption

2026-01-13 CVE-2026-0861

iomap: adjust read range correctly for non-block-aligned positions

2026-01-13 CVE-2025-68794

iommu: disable SVA when CONFIG_X86 is set

2026-01-13 CVE-2025-71089

iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED

2026-01-13 CVE-2025-71122

ipv4: Fix reference count leak when using error routes with nexthop objects

2026-01-13 CVE-2025-71097

irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc()

2026-01-13 CVE-2025-68766

KEYS: trusted: Fix a memory leak in tpm2_load_cmd

2026-01-13 CVE-2025-71147

ksmbd: fix buffer validation by including null terminator size in EA length

2026-01-13 CVE-2025-68806

ksmbd: Fix refcount leak when invalid session is found on session lookup

2026-01-13 CVE-2025-71150

ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency

2026-01-13 CVE-2025-68817

ksmbd: skip lock-range check on equal size to avoid size==0 underflow

2026-01-13 CVE-2025-68786

ksmbd: vfs: fix race on m_flags in vfs_cache

2026-01-13 CVE-2025-68809

LDAP Tampering Vulnerability

2026-01-13 CVE-2026-20812

libceph: make decode_pool() more resilient against corrupted osdmaps

2026-01-13 CVE-2025-71116

libceph: make free_choose_arg_map() resilient to partial allocation

2026-01-13 CVE-2026-22991

libceph: prevent potential out-of-bounds reads in handle_auth_done()

2026-01-13 CVE-2026-22984

libceph: replace overzealous BUG_ON in osdmap_apply_incremental()

2026-01-13 CVE-2026-22990

libceph: return the handler error from mon_handle_auth_done()

2026-01-13 CVE-2026-22992

LIBPNG has a heap buffer over-read in png_image_read_direct_scaled (regression from CVE-2025-65018 fix)

2026-01-13 CVE-2026-22695

LIBPNG has an integer truncation causing heap buffer over-read in png_image_write_*

2026-01-13 CVE-2026-22801

Libsndfile <=1.2.2 contains a memory leak vulnerability in the mpeg_l3_encoder_init() function within the mpeg_l3_encode.c file.

2026-01-13 CVE-2025-56226

Libsoup: out-of-bounds read in libsoup websocket frame processing

2026-01-13 CVE-2026-0716

Libsoup: signed to unsigned conversion error leading to stack-based buffer overflow in libsoup ntlm authentication

2026-01-13 CVE-2026-0719

libssh global known_hosts override

2026-01-13 CVE-2025-15079

libssh key passphrase bypass without agent set

2026-01-13 CVE-2025-15224

libtpms returns wrong initialization vector when certain symmetric ciphers are used

2026-01-13 CVE-2026-21444

Libxml2: libxml2: denial of service via crafted xml catalogs

2026-01-13 CVE-2026-0992

Libxml2: libxml2: denial of service via uncontrolled recursion in xml catalog processing

2026-01-13 CVE-2026-0990

Libxml2: unbounded relaxng include recursion leading to stack overflow

2026-01-13 CVE-2026-0989

LoongArch: BPF: Sign extend kfunc call arguments

2026-01-13 CVE-2025-71129

media: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status()

2026-01-13 CVE-2025-71136

media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg()

2026-01-13 CVE-2025-68819

criticalMicrosoft MSRC 2026-W03

media: vidtv: initialize local pointers upon transfer of memory ownership

2026-01-13 CVE-2025-68808

Microsoft DWM Core Library Elevation of Privilege Vulnerability

2026-01-13 CVE-2026-20842

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

2026-01-13 CVE-2026-21223

Microsoft Excel Remote Code Execution Vulnerability

2026-01-13 CVE-2026-20946

Microsoft Excel Remote Code Execution Vulnerability

2026-01-13 CVE-2026-20950

Microsoft Excel Remote Code Execution Vulnerability

2026-01-13 CVE-2026-20955

Microsoft Excel Remote Code Execution Vulnerability

2026-01-13 CVE-2026-20956

Microsoft Excel Remote Code Execution Vulnerability

2026-01-13 CVE-2026-20957

Microsoft Excel Security Feature Bypass Vulnerability

2026-01-13 CVE-2026-20949

Microsoft Office Click-To-Run Remote Code Execution Vulnerability

2026-01-13 CVE-2026-20943

Microsoft Office Remote Code Execution Vulnerability

2026-01-13 CVE-2026-20952

Microsoft Office Remote Code Execution Vulnerability

2026-01-13 CVE-2026-20953

Microsoft Office Security Feature Bypass Vulnerability

2026-01-13 CVE-2026-21509