Libstoragemgmt: libstoragemgmt: denial of service via stack buffer overflow in scsi vpd page parsing
CVE-2026-93433
Libstoragemgmt: libstoragemgmt: denial of service via stack buffer overflow in scsi vpd page parsing
#microsoft
共收录 2274 条相关情报。
← 返回所有主题Privasys rustls fork: RA-TLS challenge mode did not bind attestation evidence to the TLS session
CVE-2026-108266
Privasys rustls fork: RA-TLS challenge mode did not bind attestation evidence to the TLS session
Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if
CVE-2026-102010
Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if
Gcc: libstdc++ integer overflow in `new` operator
CVE-2026-95619
Gcc: libstdc++ integer overflow in `new` operator
Privasys Go fork: RA-TLS challenge mode did not bind attestation evidence to the TLS session
CVE-2026-108267
Privasys Go fork: RA-TLS challenge mode did not bind attestation evidence to the TLS session
Environment-modules: command injection in environment-modules bash completion via malicious module names containing shell metacharacters
CVE-2026-85013
Environment-modules: command injection in environment-modules bash completion via malicious module names containing shel
Cups: null pointer dereference via embedded job ticket comments allows remote denial of service
CVE-2026-107655
Cups: null pointer dereference via embedded job ticket comments allows remote denial of service
Busybox: busybox: tar extraction-root escape via deferred symlink/hardlink creation bypasses cve-2026-26158 fix
CVE-2026-26158 · CVE-2026-108119
Busybox: busybox: tar extraction-root escape via deferred symlink/hardlink creation bypasses cve-2026-26158 fix
ZDR decoding in libnfs through 6.0.2 before 7613236 has an out-of-bounds write related to lib/libnfs-zdr.c with libnfs_zdr_bytes(), libnfs_zdr_string(), and libnfs_zdr_array(). The caller-supplied maxsize value is not honored.
CVE-2026-108985
ZDR decoding in libnfs through 6.0.2 before 7613236 has an out-of-bounds write related to lib/libnfs-zdr.c with libnfs_z
GNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS command injection via a filename because tramp-user-regexp has an incomplete list of disallowed inputs. NOTE: this issue exists because of an incomplete fix for CVE-2026-79992.
CVE-2026-108976 · CVE-2026-79992
GNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS command injection via a filename because tramp-user-regexp has
wifi: mac80211: don't allow injecting frames wider than the chanctx
CVE-2026-98329
wifi: mac80211: don't allow injecting frames wider than the chanctx
Post-quantum authentication: Why organizations should start testing certificate ecosystems now
Prepare for post-quantum authentication by testing certificate ecosystems now. Learn how Microsoft’s PQC TLS Pilot Progr
Azure Event Grid Spoofing Vulnerability
CVE-2026-83947
Missing authorization in Azure Event Grid allows an authorized attacker to perform spoofing over a network.
Microsoft Partner Center Elevation of Privilege Vulnerability
CVE-2026-96207
Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a
Microsoft Bookings Elevation of Privilege Vulnerability
CVE-2026-94510
Authorization bypass through user-controlled key in Microsoft Bookings allows an unauthorized attacker to elevate privil
Microsoft Dataverse Remote Code Execution Vulnerability
CVE-2026-88131
Deserialization of untrusted data in Microsoft Dataverse allows an unauthorized attacker to execute code over a network.
Azure App Service Remote Code Execution Vulnerability
CVE-2026-77900
Missing authentication for critical function in Azure App Service allows an unauthorized attacker to execute code over a
Azure API Center Information Disclosure Vulnerability
CVE-2026-83943
Exposure of sensitive information to an unauthorized actor in Azure API Center allows an unauthorized attacker to disclo
Azure SRE Agent Elevation of Privilege Vulnerability
CVE-2026-69435
Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.
3 lessons from frontier AI vulnerability research
Read how How Microsoft Security's FORGE Lab is scaling vulnerability research from Windows to the Linux kernel. The post