CVE-2026-58640 Windows NTFS Remote Code Execution Vulnerability Microsoft Security 21 Juli 2026 om 16:00 Updated an acknowledgement. This is an informational change only.
CVE-2026-50462 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Microsoft Security 21 Juli 2026 om 16:00 Updated an acknowledgement. This is an informational change only.
CVE-2026-63831 mac802154: llsec: add skb_cow_data() before in-place crypto Microsoft Security 21 Juli 2026 om 10:44 Information published.
CVE-2026-63796 ocfs2: reject oversized group bitmap descriptors Microsoft Security 21 Juli 2026 om 10:44 Information published.
CVE-2026-63800 pNFS: Fix use-after-free in pnfs_update_layout() Microsoft Security 21 Juli 2026 om 10:44 Information published.
CVE-2026-63824 KEYS: fix overflow in keyctl_pkey_params_get_2() Microsoft Security 21 Juli 2026 om 10:44 Information published.
CVE-2026-3842 Qemu-kvm: hyperv/syndbg: missing mapped-length guard after cpu_physical_memory_map causes host oob write Microsoft Security 21 Juli 2026 om 10:42 Information published.
CVE-2026-38755 A heap overflow in the evalcommand() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input. Microsoft Security 21 Juli 2026 om 10:42 Information published.
CVE-2026-38754 A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input. Microsoft Security 21 Juli 2026 om 10:41 Information published.
CVE-2026-62299 CoreDNS: rewrite-plugin EDNS0 response-revert nil-pointer panic (remote DoS) when a downstream plugin returns a response with no OPT record Microsoft Security 21 Juli 2026 om 10:41 Information published.
CVE-2026-60081 DBI::ProfileData versions before 1.651 for Perl do not limit the path index Microsoft Security 21 Juli 2026 om 10:41 Information published.
CVE-2026-15392 DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location Microsoft Security 21 Juli 2026 om 10:41 Information published.
CVE-2026-60082 DBI versions before 1.651 for Perl do not enforce statement handle consistency with the row Microsoft Security 21 Juli 2026 om 10:41 Information published.
CVE-2026-15043 DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted <= and >= SQL operators on text Microsoft Security 21 Juli 2026 om 10:41 Information published.
CVE-2026-57433 Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX_HOOK record Microsoft Security 21 Juli 2026 om 10:41 Information published.
CVE-2026-48863 Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service Microsoft Security 21 Juli 2026 om 10:40 Information published.
CVE-2026-63827 apparmor: fix use-after-free in rawdata dedup loop Microsoft Security 21 Juli 2026 om 10:39 Information published.
CVE-2026-63828 apparmor: mediate the implicit connect of TCP fast open sendmsg Microsoft Security 21 Juli 2026 om 10:39 Information published.
CVE-2026-63801 tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done Microsoft Security 21 Juli 2026 om 10:39 Information published.
CVE-2026-42770 FFC-DH Peer Validation Uses Attacker-Supplied q Microsoft Security 21 Juli 2026 om 10:05 Information published.
CVE-2026-42769 Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate Microsoft Security 21 Juli 2026 om 10:05 Information published.
CVE-2026-45447 Heap Use-After-Free in the PKCS7_verify() Function Microsoft Security 21 Juli 2026 om 10:05 Information published.
CVE-2026-38752 A stack overflow in the evaluate() function (editors/awk.c) of BusyBox commit 371fe9 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AWK script. Microsoft Security 21 Juli 2026 om 10:05 Information published.
CVE-2026-38753 A use-after-free in the awk_sub() function (editors/awk.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AWK script. Microsoft Security 21 Juli 2026 om 10:05 Information published.
CVE-2026-64082 riscv: Fix register corruption from uninitialized cregs on error Microsoft Security 21 Juli 2026 om 10:05 Information published.
CVE-2026-64146 erofs: fix metabuf leak in inode xattr initialization Microsoft Security 21 Juli 2026 om 10:05 Information published.
CVE-2026-63974 Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close Microsoft Security 21 Juli 2026 om 10:05 Information published.
CVE-2026-63978 net/handshake: Drain pending requests at net namespace exit Microsoft Security 21 Juli 2026 om 10:04 Information published.
CVE-2026-63999 ethtool: rss: fix indir_table and hkey leak on get_rxfh failure Microsoft Security 21 Juli 2026 om 10:04 Information published.
CVE-2026-64017 blk-mq: pop cached request if it is usable Microsoft Security 21 Juli 2026 om 10:04 Information published.