Security Warnings — Week: 2026-W07

Sending certain HTTP/2 frames can cause a server to panic in golang.org/x/net

2026-02-10 CVE-2026-27141

highMicrosoft MSRC 2026-W07

smb: client: split cached_fid bitfields to avoid shared-byte RMW races

2026-02-10 CVE-2026-23230

highMicrosoft MSRC 2026-W07

smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection()

2026-02-10 CVE-2026-23228

mediumMicrosoft MSRC 2026-W07

spi: spi-sprd-adi: Fix double free in probe error path

2026-02-10 CVE-2026-23068

highMicrosoft MSRC 2026-W07

spi: tegra210-quad: Protect curr_xfer check in IRQ handler

2026-02-10 CVE-2026-23207

mediumMicrosoft MSRC 2026-W07

TensorFlow HDF5 Library Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

2026-02-10 CVE-2026-2492

highMicrosoft MSRC 2026-W07

tracing: Add recursion protection in kernel stack trace recording

2026-02-10 CVE-2026-23138

mediumMicrosoft MSRC 2026-W07

tracing: Fix crash on synthetic stacktrace field usage

2026-02-10 CVE-2026-23088

mediumMicrosoft MSRC 2026-W07

Unexpected session resumption in crypto/tls

2026-02-10 CVE-2025-68121

highMicrosoft MSRC 2026-W07

Valkey Affected by RESP Protocol Injection via Lua error_reply

2026-02-10 CVE-2025-67733

highMicrosoft MSRC 2026-W07

Valkey has Pre-Authentication DOS from malformed RESP request

2026-02-10 CVE-2026-27623

highMicrosoft MSRC 2026-W07

Vim has a heap-buffer-overflow and a segmentation fault

2026-02-10 CVE-2026-28421

mediumMicrosoft MSRC 2026-W07

Vim has Heap-based Buffer Overflow and OOB Read in :terminal

2026-02-10 CVE-2026-28420

mediumMicrosoft MSRC 2026-W07

Vim has Heap-based Buffer Overflow in Emacs tags parsing

2026-02-10 CVE-2026-28418

mediumMicrosoft MSRC 2026-W07

Vim has Heap-based Buffer Underflow in Emacs tags parsing

2026-02-10 CVE-2026-28419

mediumMicrosoft MSRC 2026-W07

Vim has OS Command Injection in netrw

2026-02-10 CVE-2026-28417

mediumMicrosoft MSRC 2026-W07

Vim has stack-buffer-overflow in build_stl_str_hl()

2026-02-10 CVE-2026-28422

lowMicrosoft MSRC 2026-W07

vsock/virtio: cap TX credit to local buffer size

2026-02-10 CVE-2026-23086

mediumMicrosoft MSRC 2026-W07

vsock/virtio: fix potential underflow in virtio_transport_get_credit()

2026-02-10 CVE-2026-23069

mediumMicrosoft MSRC 2026-W07

wcurl path traversal with percent-encoded slashes

2026-02-10 CVE-2025-11563

mediumMicrosoft MSRC 2026-W07

wifi: iwlwifi: Implement settime64 as stub for MVM/MLD PTP

2026-02-10 CVE-2025-71226

highMicrosoft MSRC 2026-W07

wifi: mac80211: don't WARN for connections on invalid channels

2026-02-10 CVE-2025-71227

mediumMicrosoft MSRC 2026-W07

wifi: rtl8xxxu: fix slab-out-of-bounds in rtl8xxxu_sta_add

2026-02-10 CVE-2025-71234

highMicrosoft MSRC 2026-W07

wifi: rtw88: Fix alignment fault in rtw_core_enable_beacon()

2026-02-10 CVE-2025-71229

highMicrosoft MSRC 2026-W07

Windows Admin Center Elevation of Privilege Vulnerability

2026-02-10 CVE-2026-26119

highMicrosoft MSRC 2026-W07

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

2026-02-10 CVE-2026-21236

highMicrosoft MSRC 2026-W07

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

2026-02-10 CVE-2026-21238

highMicrosoft MSRC 2026-W07

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

2026-02-10 CVE-2026-21241

highMicrosoft MSRC 2026-W07

Windows App for Mac Installer Elevation of Privilege Vulnerability

2026-02-10 CVE-2026-21517

mediumMicrosoft MSRC 2026-W07

Windows Connected Devices Platform Service Elevation of Privilege Vulnerability

2026-02-10 CVE-2026-21234

highMicrosoft MSRC 2026-W07

Windows Graphics Component Elevation of Privilege Vulnerability

2026-02-10 CVE-2026-21235

highMicrosoft MSRC 2026-W07

Windows Graphics Component Elevation of Privilege Vulnerability

2026-02-10 CVE-2026-21246

highMicrosoft MSRC 2026-W07

Windows HTTP.sys Elevation of Privilege Vulnerability

2026-02-10 CVE-2026-21232

highMicrosoft MSRC 2026-W07

Windows HTTP.sys Elevation of Privilege Vulnerability

2026-02-10 CVE-2026-21240

highMicrosoft MSRC 2026-W07

Windows HTTP.sys Elevation of Privilege Vulnerability

2026-02-10 CVE-2026-21250

highMicrosoft MSRC 2026-W07

Windows Hyper-V Remote Code Execution Vulnerability

2026-02-10 CVE-2026-21244

highMicrosoft MSRC 2026-W07

Windows Hyper-V Remote Code Execution Vulnerability

2026-02-10 CVE-2026-21247

highMicrosoft MSRC 2026-W07

Windows Hyper-V Remote Code Execution Vulnerability

2026-02-10 CVE-2026-21248

highMicrosoft MSRC 2026-W07

Windows Hyper-V Security Feature Bypass Vulnerability

2026-02-10 CVE-2026-21255

highMicrosoft MSRC 2026-W07

Windows Kernel Elevation of Privilege Vulnerability

2026-02-10 CVE-2026-21231

highMicrosoft MSRC 2026-W07

Windows Kernel Elevation of Privilege Vulnerability

2026-02-10 CVE-2026-21239

highMicrosoft MSRC 2026-W07

Windows Kernel Elevation of Privilege Vulnerability

2026-02-10 CVE-2026-21245

highMicrosoft MSRC 2026-W07

Windows Kernel Information Disclosure Vulnerability

2026-02-10 CVE-2026-21222

mediumMicrosoft MSRC 2026-W07

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

2026-02-10 CVE-2026-21243

highMicrosoft MSRC 2026-W07

Windows Notepad App Remote Code Execution Vulnerability

2026-02-10 CVE-2026-20841

highMicrosoft MSRC 2026-W07

Windows NTLM Spoofing Vulnerability

2026-02-10 CVE-2026-21249

lowMicrosoft MSRC 2026-W07

Windows Remote Access Connection Manager Denial of Service Vulnerability

2026-02-10 CVE-2026-21525

mediumMicrosoft MSRC 2026-W07

Windows Remote Desktop Services Elevation of Privilege Vulnerability

2026-02-10 CVE-2026-21533

highMicrosoft MSRC 2026-W07

Windows Shell Security Feature Bypass Vulnerability

2026-02-10 CVE-2026-21510

highMicrosoft MSRC 2026-W07

Windows Storage Elevation of Privilege Vulnerability

2026-02-10 CVE-2026-21508

highMicrosoft MSRC 2026-W07

Windows Subsystem for Linux Elevation of Privilege Vulnerability

2026-02-10 CVE-2026-21237

highMicrosoft MSRC 2026-W07

Windows Subsystem for Linux Elevation of Privilege Vulnerability

2026-02-10 CVE-2026-21242

highMicrosoft MSRC 2026-W07

WordPress Oxygen theme <= 6.0.8 - Server Side Request Forgery (SSRF) vulnerability

2026-02-10 CVE-2025-69299

highMicrosoft MSRC 2026-W07

x86/vmware: Fix hypercall clobbers

2026-02-10 CVE-2026-23215

highMicrosoft MSRC 2026-W07

xfs: fix UAF in xchk_btree_check_block_owner

2026-02-10 CVE-2026-23223

mediumMicrosoft MSRC 2026-W07

zlib before 1.3.2 allows CPU consumption via crc32_combine64 and crc32_combine_gen64 because x2nmodp can do right shifts within a loop that has no termination condition.

2026-02-10 CVE-2026-27171

lowMicrosoft MSRC 2026-W07

functionfs: fix the open/removal races

2026-02-09 CVE-2025-71074

criticalMicrosoft CVE 2026-W07

Input: lkkbd - disable pending work before freeing device

2026-02-09 CVE-2025-71073

criticalMicrosoft CVE 2026-W07

io_uring: fix filename leak in __io_openat_prep()

2026-02-09 CVE-2025-68814

criticalMicrosoft CVE 2026-W07

ip6_gre: make ip6gre_header() robust

2026-02-09 CVE-2025-71098

criticalMicrosoft CVE 2026-W07