Microsoft Security Center Center News

Subscribe to Microsoft Security Center Center News feed
URL: https://msrc.microsoft.com/update-guide/
Updated: 21 min 1 sec ago

CVE-2026-34182 CMS AuthEnvelopedData Processing May Accept Forged Messages

Sat, 06/13/2026 - 08:03
Information published.
Categories: Microsoft

CVE-2026-34183 Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler

Sat, 06/13/2026 - 08:02
Information published.
Categories: Microsoft

CVE-2026-45447 Heap Use-After-Free in the PKCS7_verify() Function

Sat, 06/13/2026 - 08:02
Information published.
Categories: Microsoft

CVE-2026-45445 AES-OCB IV Ignored on EVP_Cipher() Path

Sat, 06/13/2026 - 08:02
Information published.
Categories: Microsoft

CVE-2026-44705 tmp: Path Traversal via unsanitized prefix/postfix enables directory escape

Sat, 06/13/2026 - 08:01
Information published.
Categories: Microsoft

CVE-2026-52858 Vim: Arbitrary Code Execution via Python Omni-Completion

Sat, 06/13/2026 - 08:01
Information published.
Categories: Microsoft

CVE-2026-47162 Vim: Vimscript Code Injection in netrw NetrwBookHistSave() via crafted directory name

Sat, 06/13/2026 - 08:01
Information published.
Categories: Microsoft

CVE-2026-47167 Vim: Vimscript Code Injection in cucumber filetype plugin via crafted step-definition regex

Sat, 06/13/2026 - 08:01
Information published.
Categories: Microsoft

CVE-2026-52859 Vim: Out-of-bounds Read in Terminal Screen Snapshot

Sat, 06/13/2026 - 08:01
Information published.
Categories: Microsoft

CVE-2026-52860 Vim: Arbitrary Code Execution via Python Omni-Completion

Sat, 06/13/2026 - 08:01
Information published.
Categories: Microsoft

CVE-2026-46683 Snappy: SSRF and local file read via the xsl-style-sheet option

Fri, 06/12/2026 - 08:01
Information published.
Categories: Microsoft

CVE-2026-46643 Snappy: Binary path is never shell-escaped due to an inverted is_executable check

Fri, 06/12/2026 - 08:01
Information published.
Categories: Microsoft

CVE-2026-42012 Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans

Thu, 06/11/2026 - 08:43
Information published.
Categories: Microsoft

CVE-2026-5260 Gnutls: gnutls: information disclosure via heap overread in rsa key exchange

Thu, 06/11/2026 - 08:43
Information published.
Categories: Microsoft

CVE-2026-42015 Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling

Thu, 06/11/2026 - 08:43
Information published.
Categories: Microsoft

CVE-2026-42013 Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name

Thu, 06/11/2026 - 08:43
Information published.
Categories: Microsoft

CVE-2026-34355 Apache HTTP Server: mod_proxy_html buffer overflow

Thu, 06/11/2026 - 08:02
Information published.
Categories: Microsoft

CVE-2026-44185 Apache HTTP Server: Stack Buffer Over-Read in mod_ssl OCSP `send_request`

Thu, 06/11/2026 - 08:02
Information published.
Categories: Microsoft

CVE-2026-34356 Apache HTTP Server: ProxyPassReverseCookieMap buffer overflow

Thu, 06/11/2026 - 08:02
Information published.
Categories: Microsoft

CVE-2026-44186 Apache HTTP Server: Loop in `proxy_ftp_handler` in mod_proxy_ftp

Thu, 06/11/2026 - 08:02
Information published.
Categories: Microsoft

Pages