Microsoft Security Center Center News

Subscribe to Microsoft Security Center Center News feed
URL: https://msrc.microsoft.com/update-guide/
Updated: 35 min 32 sec ago

CVE-2026-8925 SASL double-free

Thu, 07/09/2026 - 08:49
Information published.
Categories: Microsoft

CVE-2026-8927 env-set cross-proxy Digest auth state leak

Thu, 07/09/2026 - 08:49
Information published.
Categories: Microsoft

CVE-2026-12064 proto-default skips SSH verification

Thu, 07/09/2026 - 08:48
Information published.
Categories: Microsoft

CVE-2026-11856 cross-origin Digest auth state leak

Thu, 07/09/2026 - 08:47
Information published.
Categories: Microsoft

CVE-2026-9547 SSH improper host validation

Thu, 07/09/2026 - 08:47
Information published.
Categories: Microsoft

CVE-2026-53167 fuse: limit FUSE_NOTIFY_RETRIEVE to uptodate folios

Thu, 07/09/2026 - 08:46
Information published.
Categories: Microsoft

CVE-2026-9079 stale proxy password leak

Thu, 07/09/2026 - 08:46
Information published.
Categories: Microsoft

CVE-2026-53339 i2c: qcom-cci: Fix NULL pointer dereference in cci_remove()

Thu, 07/09/2026 - 08:45
Information published.
Categories: Microsoft

CVE-2026-53336 nvmem: layouts: onie-tlv: fix hang on unknown types

Thu, 07/09/2026 - 08:44
Information published.
Categories: Microsoft

CVE-2026-53327 debugobjects: Do not fill_pool() if pi_blocked_on

Thu, 07/09/2026 - 08:44
Information published.
Categories: Microsoft

CVE-2026-53332 slimbus: qcom-ngd-ctrl: Register callbacks after creating the ngd

Thu, 07/09/2026 - 08:44
Information published.
Categories: Microsoft

CVE-2026-43010 bpf: Reject sleepable kprobe_multi programs at attach time

Thu, 07/09/2026 - 08:44
Information published.
Categories: Microsoft

CVE-2026-53345 KVM: Don't WARN if memory is dirtied without a vCPU when the VM is dying

Thu, 07/09/2026 - 08:44
Information published.
Categories: Microsoft

CVE-2026-53354 arm64: errata: Mitigate TLBI errata on various Arm CPUs

Thu, 07/09/2026 - 08:44
Information published.
Categories: Microsoft

CVE-2026-47241 Net::IMAP: Denial of Service via incomplete raw argument validation

Thu, 07/09/2026 - 08:42
Information published.
Categories: Microsoft

CVE-2026-54908 Pion DTLS: Denial of service via panic while parsing a crafted ECDHE_PSK ServerKeyExchange message

Thu, 07/09/2026 - 08:03
Information published.
Categories: Microsoft

CVE-2026-38969 ruby webrick through v1.9.2 WEBrick reparses trailer Content-Length into canonical request state, enabling request smuggling.

Thu, 07/09/2026 - 08:02
Information published.
Categories: Microsoft

CVE-2026-38968 ntopng through 6.6 is vulnerable to Predictable Session Identifier which can lead to Session Hijacking. HTTP session identifiers in src/HTTPserver.cpp use weak time-seeded pseudo-randomness during session creation. As a result, fresh...

Thu, 07/09/2026 - 08:02
Information published.
Categories: Microsoft

CVE-2026-14191 WinRAR / UnRAR RAR5 recovery-volume (.rev) out-of-bounds heap write in RecVolumes5::ReadHeader

Thu, 07/09/2026 - 08:02
Information published.
Categories: Microsoft

CVE-2026-53269 netfilter: synproxy: add mutex to guard hook reference counting

Thu, 07/09/2026 - 08:02
Information published.
Categories: Microsoft

Pages