URI versions before 5.36 for Perl encode non-NFC host names to non-standard punycode labels via missing normalization in nameprep

CVE-2026-19953

URI versions before 5.36 for Perl encode non-NFC host names to non-standard punycode labels via missing normalization in

历史摘要 · 未重新核验 · Microsoft MSRC

Gdb: gdb: out-of-bounds write in stabs parser read_member_functions() via crafted elf

CVE-2026-13732

Gdb: gdb: out-of-bounds write in stabs parser read_member_functions() via crafted elf

历史摘要 · 未重新核验 · Microsoft MSRC

A Signed Length Overflow in Erlang/OTP's inet TCP Driver Overflows the Receive Buffer Into BEAM VM Memory From an Unauthenticated Peer

CVE-2026-75538

A Signed Length Overflow in Erlang/OTP's inet TCP Driver Overflows the Receive Buffer Into BEAM VM Memory From an Unauth

历史摘要 · 未重新核验 · Microsoft MSRC

inets, httpd: Authentication Bypass via Directory Namespace Collapse in httpd mod_auth

CVE-2026-74994

inets, httpd: Authentication Bypass via Directory Namespace Collapse in httpd mod_auth

历史摘要 · 未重新核验 · Microsoft MSRC

inets,httpd: Memory Exhaustion via Unenforced max_body_size During Chunked Body Reception

CVE-2026-74835

inets,httpd: Memory Exhaustion via Unenforced max_body_size During Chunked Body Reception

历史摘要 · 未重新核验 · Microsoft MSRC

inets, httpd: HTTP Request Smuggling via Transfer-Encoding and Content-Length

CVE-2026-73812

inets, httpd: HTTP Request Smuggling via Transfer-Encoding and Content-Length

历史摘要 · 未重新核验 · Microsoft MSRC

inets, httpd: HTTP Request Smuggling via Whitespace-Before-Colon Header Dropping i

CVE-2026-73276

inets, httpd: HTTP Request Smuggling via Whitespace-Before-Colon Header Dropping i

历史摘要 · 未重新核验 · Microsoft MSRC

httpd mod_auth directory protection bypassed by request path casing on case-insensitive filesystems

CVE-2026-73270

httpd mod_auth directory protection bypassed by request path casing on case-insensitive filesystems

历史摘要 · 未重新核验 · Microsoft MSRC

httpc does not bound server-supplied numeric header values before integer conversion

CVE-2026-71562

httpc does not bound server-supplied numeric header values before integer conversion

历史摘要 · 未重新核验 · Microsoft MSRC

httpd applies no timeout while receiving a request body, parking a worker on a stalled client

CVE-2026-71380

httpd applies no timeout while receiving a request body, parking a worker on a stalled client

历史摘要 · 未重新核验 · Microsoft MSRC

eldap does not bound the port component of a referral URL before integer conversion

CVE-2026-70409

eldap does not bound the port component of a referral URL before integer conversion

历史摘要 · 未重新核验 · Microsoft MSRC

httpd parks a request worker indefinitely on a malformed chunk size sent after the headers

CVE-2026-69664

httpd parks a request worker indefinitely on a malformed chunk size sent after the headers

历史摘要 · 未重新核验 · Microsoft MSRC

httpd mod_auth directory protection bypassed by a doubled slash in the request path

CVE-2026-66835

httpd mod_auth directory protection bypassed by a doubled slash in the request path

历史摘要 · 未重新核验 · Microsoft MSRC

inets,httpd:HTTP Request Smuggling via obs-fold Header Continuation

CVE-2026-66357

inets,httpd:HTTP Request Smuggling via obs-fold Header Continuation

历史摘要 · 未重新核验 · Microsoft MSRC

uri_string does not bound the port component of a URI before integer conversion

CVE-2026-59696

uri_string does not bound the port component of a URI before integer conversion

历史摘要 · 未重新核验 · Microsoft MSRC

httpc memory exhaustion via unbounded response header accumulation

CVE-2026-55951

httpc memory exhaustion via unbounded response header accumulation

历史摘要 · 未重新核验 · Microsoft MSRC

Deserialization of Untrusted Data in Elasticsearch Leading to Remote Code Execution

CVE-2026-72649

Deserialization of Untrusted Data in Elasticsearch Leading to Remote Code Execution

历史摘要 · 未重新核验 · Microsoft MSRC

Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service

CVE-2026-56143

Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service

历史摘要 · 未重新核验 · Microsoft MSRC

Impersonating IT support: how threat actors turn a remote session into enterprise-wide access

Microsoft Threat Intelligence observed a human-operated intrusion campaign that abuses Microsoft Teams external collabor

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

Counterfeit installers to system compromise: Tracking a deceptive software download campaign

An active campaign is impersonating legitimate software vendors to deliver malware through look-alike download pages and

历史摘要 · 未重新核验 · Microsoft Threat Intelligence