❌

Normale weergave

Ontvangen — 28 April 2026 ⏭ Microsoft Security

Microsoft Security
Chromium: CVE-2026-6920 Out of bounds read in GPU 28 April 2026 om 16:00

Chromium: CVE-2026-6920 Out of bounds read in GPU

Microsoft Security

28 April 2026 om 16:00

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

Microsoft Security
Chromium: CVE-2026-6919 Use after free in DevTools 28 April 2026 om 16:00

Chromium: CVE-2026-6919 Use after free in DevTools

Microsoft Security

28 April 2026 om 16:00

Added a second Security Only package to Edge security update. This is an informational change only.

Microsoft Security
CVE-2026-40372 ASP.NET Core Elevation of Privilege Vulnerability 28 April 2026 om 16:00

CVE-2026-40372 ASP.NET Core Elevation of Privilege Vulnerability

Microsoft Security

28 April 2026 om 16:00

This CVE has been updated to include the Visual Studios 2026 18.5 as an Affected Software

Microsoft Security
CVE-2026-33103 Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability 28 April 2026 om 16:00

CVE-2026-33103 Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

Microsoft Security

28 April 2026 om 16:00

Added acknowledgements. This is an informational change only.

Microsoft Security
CVE-2026-32202 Windows Shell Spoofing Vulnerability 27 April 2026 om 16:00

CVE-2026-32202 Windows Shell Spoofing Vulnerability

Microsoft Security

27 April 2026 om 16:00

Corrected the Exploitability Index, Exploited flag and CVSS vector which was incorrect at the time of publication on 4/14/2026. This is an informational change only.

Ontvangen — 27 April 2026 ⏭ Microsoft Security

Microsoft Security
CVE-2026-26149 Microsoft Power Apps Desktop Client Spoofing Vulnerability 27 April 2026 om 16:00

CVE-2026-26149 Microsoft Power Apps Desktop Client Spoofing Vulnerability

Microsoft Security

27 April 2026 om 16:00

Microsoft Security
CVE-2018-0734 Timing attack against DSA 27 April 2026 om 10:04

CVE-2018-0734 Timing attack against DSA

Microsoft Security

27 April 2026 om 10:04

Information published.

Microsoft Security
CVE-2018-0735 Timing attack against ECDSA signature generation 27 April 2026 om 10:04

CVE-2018-0735 Timing attack against ECDSA signature generation

Microsoft Security

27 April 2026 om 10:04

Information published.

Ontvangen — 26 April 2026 ⏭ Microsoft Security

Microsoft Security
CVE-2026-23372 nfc: rawsock: cancel tx_work before socket teardown 26 April 2026 om 10:11

CVE-2026-23372 nfc: rawsock: cancel tx_work before socket teardown

Microsoft Security

26 April 2026 om 10:11

Information published.

Microsoft Security
CVE-2026-23371 sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting 26 April 2026 om 10:11

CVE-2026-23371 sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting

Microsoft Security

26 April 2026 om 10:11

Information published.

Microsoft Security
CVE-2026-23370 platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data 26 April 2026 om 10:10

CVE-2026-23370 platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data

Microsoft Security

26 April 2026 om 10:10

Information published.

Microsoft Security
CVE-2026-23368 net: phy: register phy led_triggers during probe to avoid AB-BA deadlock 26 April 2026 om 10:10

CVE-2026-23368 net: phy: register phy led_triggers during probe to avoid AB-BA deadlock

Microsoft Security

26 April 2026 om 10:10

Information published.

Microsoft Security
CVE-2026-23367 wifi: radiotap: reject radiotap with unknown bits 26 April 2026 om 10:10

CVE-2026-23367 wifi: radiotap: reject radiotap with unknown bits

Microsoft Security

26 April 2026 om 10:10

Information published.

Microsoft Security
CVE-2026-23365 net: usb: kalmia: validate USB endpoints 26 April 2026 om 10:10

CVE-2026-23365 net: usb: kalmia: validate USB endpoints

Microsoft Security

26 April 2026 om 10:10

Information published.

Microsoft Security
CVE-2026-23364 ksmbd: Compare MACs in constant time 26 April 2026 om 10:10

CVE-2026-23364 ksmbd: Compare MACs in constant time

Microsoft Security

26 April 2026 om 10:10

Information published.

Microsoft Security
CVE-2026-23362 can: bcm: fix locking for bcm_op runtime updates 26 April 2026 om 10:10

CVE-2026-23362 can: bcm: fix locking for bcm_op runtime updates

Microsoft Security

26 April 2026 om 10:10

Information published.

Microsoft Security
CVE-2026-31656 drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat 26 April 2026 om 10:10

CVE-2026-31656 drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat

Microsoft Security

26 April 2026 om 10:10

Information published.

Microsoft Security
CVE-2026-23361 PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry 26 April 2026 om 10:10

CVE-2026-23361 PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry

Microsoft Security

26 April 2026 om 10:10

Information published.

Microsoft Security
CVE-2026-23359 bpf: Fix stack-out-of-bounds write in devmap 26 April 2026 om 10:10

CVE-2026-23359 bpf: Fix stack-out-of-bounds write in devmap

Microsoft Security

26 April 2026 om 10:10

Information published.

Microsoft Security
CVE-2026-23357 can: mcp251x: fix deadlock in error path of mcp251x_open 26 April 2026 om 10:10

CVE-2026-23357 can: mcp251x: fix deadlock in error path of mcp251x_open

Microsoft Security

26 April 2026 om 10:10

Information published.

Microsoft Security
CVE-2026-23356 drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock() 26 April 2026 om 10:10

CVE-2026-23356 drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock()

Microsoft Security

26 April 2026 om 10:10

Information published.

Microsoft Security
CVE-2026-23352 x86/efi: defer freeing of boot services memory 26 April 2026 om 10:09

CVE-2026-23352 x86/efi: defer freeing of boot services memory

Microsoft Security

26 April 2026 om 10:09

Information published.

Microsoft Security
CVE-2026-31658 net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit() 26 April 2026 om 10:09

CVE-2026-31658 net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit()

Microsoft Security

26 April 2026 om 10:09

Information published.

Microsoft Security
CVE-2026-23351 netfilter: nft_set_pipapo: split gc into unlink and reclaim phase 26 April 2026 om 10:09

CVE-2026-23351 netfilter: nft_set_pipapo: split gc into unlink and reclaim phase

Microsoft Security

26 April 2026 om 10:09

Information published.

Microsoft Security
CVE-2026-31592 KVM: SEV: Protect *all* of sev_mem_enc_register_region() with kvm->lock 26 April 2026 om 10:09

CVE-2026-31592 KVM: SEV: Protect all of sev_mem_enc_register_region() with kvm->lock

Microsoft Security

26 April 2026 om 10:09

Information published.

Microsoft Security
CVE-2026-23348 cxl: Fix race of nvdimm_bus object when creating nvdimm objects 26 April 2026 om 10:09

CVE-2026-23348 cxl: Fix race of nvdimm_bus object when creating nvdimm objects

Microsoft Security

26 April 2026 om 10:09

Information published.

Microsoft Security
CVE-2026-31597 ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY 26 April 2026 om 10:09

CVE-2026-31597 ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY

Microsoft Security

26 April 2026 om 10:09

Information published.

Microsoft Security
CVE-2026-31622 NFC: digital: Bounds check NFC-A cascade depth in SDD response handler 26 April 2026 om 10:09

CVE-2026-31622 NFC: digital: Bounds check NFC-A cascade depth in SDD response handler

Microsoft Security

26 April 2026 om 10:09

Information published.

Microsoft Security
CVE-2026-31664 xfrm: clear trailing padding in build_polexpire() 26 April 2026 om 10:09

CVE-2026-31664 xfrm: clear trailing padding in build_polexpire()

Microsoft Security

26 April 2026 om 10:09

Information published.

Microsoft Security
CVE-2026-31673 af_unix: read UNIX_DIAG_VFS data under unix_state_lock 26 April 2026 om 10:09

CVE-2026-31673 af_unix: read UNIX_DIAG_VFS data under unix_state_lock

Microsoft Security

26 April 2026 om 10:09

Information published.