CVE-2026-40510 OpenSC < 0.27.0-rc1 Stack Buffer Overflow via piv_process_history() in card-piv.c
Information published.
Categories: Microsoft
CVE-2026-40528 OpenSC < 0.27.0 Buffer Overrun in do_key_value() via profile.c
Information published.
Categories: Microsoft
CVE-2026-42496 Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory
Information published.
Categories: Microsoft
CVE-2026-39833 Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent
Information published.
Categories: Microsoft
CVE-2026-42501 Malicious module proxy can bypass checksum database in cmd/go
Information published.
Categories: Microsoft
CVE-2026-42499 Quadratic string concatenation in consumePhrase in net/mail
Information published.
Categories: Microsoft
CVE-2026-39836 Panic in Dial and LookupPort when handling NUL byte on Windows in net
Information published.
Categories: Microsoft
CVE-2026-39820 Quadratic string concatentation in consumeComment in net/mail
Information published.
Categories: Microsoft
CVE-2026-33811 Crash when handling long CNAME response in net
Information published.
Categories: Microsoft
CVE-2026-23479 redis-server use-after-free in unblock client flow may allow remote code execution
Information published.
Categories: Microsoft
CVE-2026-23631 redis-server Lua use-after-free may allow remote code execution
Information published.
Categories: Microsoft
CVE-2026-25243 redis-server RESTORE invalid memory access may allow remote code execution
Information published.
Categories: Microsoft
CVE-2026-27144 Miscompilation allows memory corruption via CONVNOP-wrapped array copy in cmd/compile
Information published.
Categories: Microsoft
CVE-2026-27143 Missing bound checks can lead to memory corruption in safe Go in cmd/compile
Information published.
Categories: Microsoft
CVE-2026-27140 Code execution vulnerability in SWIG code generation in cmd/go
Information published.
Categories: Microsoft
CVE-2026-32280 Unexpected work during chain building in crypto/x509
Information published.
Categories: Microsoft
CVE-2026-27142 URLs in meta content attribute actions are not escaped in html/template
Information published.
Categories: Microsoft
CVE-2026-50263 Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free information disclosure in createsaverwindow()
Information published.
Categories: Microsoft
CVE-2026-50258 Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb key types due to unchecked shift levels
Information published.
Categories: Microsoft
CVE-2026-50257 Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in misyncdestroyfence()
Information published.
Categories: Microsoft
