CVE-2026-58281 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
Categories: Microsoft
CVE-2024-7598 Network restriction bypass via race condition during namespace termination
Information published.
Categories: Microsoft
CVE-2026-58209 NATS Server: MQTT retained and QoS replay bypass subscribe deny filters
Information published.
Categories: Microsoft
CVE-2026-58252 NATS Server: Subscribe Authz Bypass via Wildcard-Overlap
Information published.
Categories: Microsoft
CVE-2026-58250 NATS Server: Pre-auth server crash via double INFO in leafnode handshake
Information published.
Categories: Microsoft
CVE-2026-58208 NATS Server: MQTT-over-WebSocket Path Can Crash WebSocket-Only JetStream Servers Before MQTT Is Enabled
Information published.
Categories: Microsoft
CVE-2026-58251 NATS Server: Queue Subscribe Authz Bypass
Information published.
Categories: Microsoft
CVE-2026-58207 NATS Server: Remote crash via integer overflow in Connz pagination
Information published.
Categories: Microsoft
CVE-2026-59869 js-yaml: YAML merge-key chains can force quadratic CPU consumption
Information published.
Categories: Microsoft
CVE-2026-59890 setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) on macOS APFS/HFS+
Information published.
Categories: Microsoft
CVE-2026-59930 Mistune toc / TableOfContents directive: heading IDs use predictable `toc_N` numbering with no slugification, allowing collision with attacker-controlled `id="toc_N"` content
Information published.
Categories: Microsoft
CVE-2026-59922 Mistune plugins/formatting: quadratic-time parsing on long runs of `~~x~~`, `==x==`, and `^^x^^` markers (strikethrough / mark / insert)
Information published.
Categories: Microsoft
CVE-2026-59925 inline_parser: quadratic-time parsing on long runs of `**x**` and `***x***` emphasis pairs
Information published.
Categories: Microsoft
CVE-2026-59926 Mistune: XSS via unescaped class option in Admonition directive
Information published.
Categories: Microsoft
CVE-2026-59928 Mistune block_parser: quadratic-time parsing on long lists of repeated reference-link definitions
Information published.
Categories: Microsoft
CVE-2026-14740 DBI versions before 1.650 for Perl read one byte out-of-bounds in preparse when deleting an initial SQL comment
Information published.
Categories: Microsoft
CVE-2026-14380 DBI versions before 1.650 for Perl are vulnerable to code injection via caller-influenced Profile
Information published.
Categories: Microsoft
CVE-2026-14739 DBI versions before 1.650 for Perl have a heap overflow when preparsing SQL statements with an extreme number of placeholders
Information published.
Categories: Microsoft
