CVE-2026-32161 Windows Native WiFi Miniport Driver Remote Code Execution Vulnerability Microsoft Security 15 Mei 2026 om 16:00 Updated Hotpatch links. This is in informational change only.
CVE-2026-32170 Windows Rich Text Edit Elevation of Privilege Vulnerability Microsoft Security 15 Mei 2026 om 16:00 Updated Hotpatch links. This is in informational change only.
CVE-2026-21530 Windows Rich Text Edit Elevation of Privilege Vulnerability Microsoft Security 15 Mei 2026 om 16:00 Updated Hotpatch links. This is in informational change only.
CVE-2026-40379 Azure Entra ID Spoofing Vulnerability Microsoft Security 15 Mei 2026 om 16:00 Corrected CVE title. This is an informational change only.
CVE-2026-33814 Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net Microsoft Security 15 Mei 2026 om 10:42 Information published.
CVE-2026-29181 OpenTelemetry-Go multi-value `baggage` header extraction causes excessive allocations (remote dos amplification) Microsoft Security 15 Mei 2026 om 10:38 Information published.
CVE-2026-43968 CR Injection in SSE Encoder Enables Event Splitting via cow_sse:event/1 Microsoft Security 15 Mei 2026 om 10:02 Information published.
CVE-2026-7790 Unbounded chunk-size hex digits in cowlib cause quadratic CPU and memory DoS Microsoft Security 15 Mei 2026 om 10:02 Information published.
CVE-2026-43969 Cookie Request Header Injection via Unvalidated Encoder in cow_cookie:cookie/1 Microsoft Security 15 Mei 2026 om 10:02 Information published.
CVE-2026-7210 The expat and elementtree parsers use insufficient entropy for XML hash-flooding protection Microsoft Security 15 Mei 2026 om 10:02 Information published.
CVE-2026-34956 Openvswitch: open vswitch: denial of service via malformed ftp epasv command Microsoft Security 15 Mei 2026 om 10:02 Information published.
CVE-2026-42011 Gnutls: gnutls: security bypass due to incorrect name constraint handling Microsoft Security 15 Mei 2026 om 10:02 Information published.
CVE-2026-42010 Gnutls: gnutls: authentication bypass via nul character in username Microsoft Security 15 Mei 2026 om 10:02 Information published.
CVE-2026-8295 Integer overflow in simdjson Microsoft Security 15 Mei 2026 om 10:01 Information published.
CVE-2026-42304 Twisted: Denial of Service (DoS) in twisted.names via Crafted DNS Compression Pointer Chains Microsoft Security 15 Mei 2026 om 10:01 Information published.