CVE-2026-71226 Libkcapi: memory corruption via uncanceled aio requests on error in libkcapi's one-shot aio path
Information published.
Categories: Microsoft
CVE-2026-71225 Libkcapi: iv reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundaries
Information published.
Categories: Microsoft
CVE-2026-54876 Client-Side Memory Leak in OCSP Response Checking
Information published.
Categories: Microsoft
CVE-2026-68082 libceph: fix two unsafe bare decodes in decode_lockers()
Information published.
Categories: Microsoft
CVE-2026-68081 KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state
Information published.
Categories: Microsoft
CVE-2026-34502 Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client
Information published.
Categories: Microsoft
CVE-2026-34501 Apache Portable Runtime Utility: Heap buffer overflow in APR redis client
Information published.
Categories: Microsoft
CVE-2026-34191 Apache Portable Runtime Utility: SQL Injection in apr_dbd_oracle
Information published.
Categories: Microsoft
CVE-2025-49506 Apache Portable Runtime Utility: apr_password_validate() vulnerable to timing attack
Information published.
Categories: Microsoft
CVE-2026-47243 Kata guest escape: runtime-rs guest-root to host-root escape via virtiofs
Information published.
Categories: Microsoft
CVE-2026-64676 Kata Containers: Unauthorized mem-agent ttRPC methods let an untrusted host tamper with confidential-guest memory
Information published.
Categories: Microsoft
CVE-2026-50540 Kata Containers: Config Path Annotation Arbitrary File Loading
Information published.
Categories: Microsoft
CVE-2026-55995 Double-free in the iSNS attribute decoder in open-iscsi
Information published.
Categories: Microsoft
CVE-2026-44944 iscsiuio control-socket authentication bypass in open-iscsi
Information published.
Categories: Microsoft
CVE-2026-44943 remote limited file-write as root via discovery in open-iscsi
Information published.
Categories: Microsoft
CVE-2026-6879 Quadratic Behavior in xml.etree.ElementPath Index Predicates
Information published.
Categories: Microsoft
CVE-2026-32597 PyJWT accepts unknown `crit` header extensions (RFC 7515 §4.1.11 MUST violation)
Information published.
Categories: Microsoft
CVE-2026-48524 PyJWT: PyJWKClient unbounded JWKS endpoint requests via attacker-controlled kid values (DoS)
Information published.
Categories: Microsoft
CVE-2025-62725 Docker Compose Vulnerable to Path Traversal via OCI Artifact Layer Annotations
Information published.
Categories: Microsoft
CVE-2026-68480 x86/bugs: Make Safe-RET robust against interrupt injection
Information published.
Categories: Microsoft