Log inCVE-2026-45638 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
7 Juli 2026 om 16:00
Updated an acknowledgement. This is an informational change only.
Normale weergave
Ontvangen — 7 Juli 2026
⏭
Microsoft Security
-
Microsoft Security
- CVE-2026-45638 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVE-2026-9080 UAF after pause in socket callback
7 Juli 2026 om 10:43
Information published.
CVE-2026-8926 password leak with netrc and user in URL
7 Juli 2026 om 10:43
Information published.
CVE-2026-10536 HTTP/2 stream-dependency tree UAF
7 Juli 2026 om 10:42
Information published.
CVE-2026-8286 wrong STARTTLS connection reuse
7 Juli 2026 om 10:42
Information published.
CVE-2026-8458 wrong reuse for different services
7 Juli 2026 om 10:42
Information published.
CVE-2026-8924 trailing dot domain super cookie
7 Juli 2026 om 10:41
Information published.
CVE-2026-8932 incomplete mTLS config matching in conn reuse
7 Juli 2026 om 10:41
Information published.
CVE-2026-9545 exposing HTTP/3 early data
7 Juli 2026 om 10:41
Information published.
-
- CVE-2026-39827 Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh
CVE-2026-39827 Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh
7 Juli 2026 om 10:40
Information published.
-
- CVE-2026-25681 Invoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html
CVE-2026-25681 Invoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html
7 Juli 2026 om 10:40
Information published.
-
- CVE-2026-14647 onnx onnxruntime old.cc convPoolShapeInference_opset19 out-of-bounds
CVE-2026-14647 onnx onnxruntime old.cc convPoolShapeInference_opset19 out-of-bounds
7 Juli 2026 om 10:01
Information published.
-
- CVE-2026-12480 Arbitrary HDF5 File Read via Virtual Dataset Bypass in keras-team/keras
CVE-2026-12480 Arbitrary HDF5 File Read via Virtual Dataset Bypass in keras-team/keras
7 Juli 2026 om 10:01
Information published.
-
- CVE-2026-54891 Plaintext APPLICATION_DATA injected during TLS handshake delivered to client application post-handshake in ssl
CVE-2026-54891 Plaintext APPLICATION_DATA injected during TLS handshake delivered to client application post-handshake in ssl
7 Juli 2026 om 10:01
Information published.
