Microsoft Security Center Center News

Subscribe to Microsoft Security Center Center News feed
URL: https://msrc.microsoft.com/update-guide/
Updated: 11 min 42 sec ago

CVE-2026-11526 GD versions before 2.86 for Perl allow OS command injection and file overwrite via a 2-arg open() of filename arguments in _make_filehandle

Mon, 06/15/2026 - 08:02
Information published.
Categories: Microsoft

CVE-2026-40034 gitoxide - Command Injection via Partial .gitmodules Override in gix-submodule

Sat, 06/13/2026 - 08:43
Information published.
Categories: Microsoft

CVE-2026-5222 Cargo can be coerced to share credentials between registries

Sat, 06/13/2026 - 08:42
Information published.
Categories: Microsoft

CVE-2026-5223 Crates in third party registries can override the cached source of other crates

Sat, 06/13/2026 - 08:42
Information published.
Categories: Microsoft

CVE-2026-5545 wrong reuse of HTTP Negotiate connection

Sat, 06/13/2026 - 08:42
Information published.
Categories: Microsoft

CVE-2026-6429 netrc credential leak with reused proxy connection

Sat, 06/13/2026 - 08:42
Information published.
Categories: Microsoft

CVE-2026-4873 connection reuse ignores TLS requirement

Sat, 06/13/2026 - 08:41
Information published.
Categories: Microsoft

CVE-2026-6276 stale custom cookie host causes cookie leak

Sat, 06/13/2026 - 08:41
Information published.
Categories: Microsoft

CVE-2026-6253 proxy credentials leak over redirect-to proxy

Sat, 06/13/2026 - 08:41
Information published.
Categories: Microsoft

CVE-2023-5678 Excessive time spent in DH check / generation with large Q parameter value

Sat, 06/13/2026 - 08:06
Information published.
Categories: Microsoft

CVE-2026-34181 PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys

Sat, 06/13/2026 - 08:06
Information published.
Categories: Microsoft

CVE-2026-34180 Heap Buffer Over-read in ASN.1 Content Parsing

Sat, 06/13/2026 - 08:06
Information published.
Categories: Microsoft

CVE-2026-42769 Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate

Sat, 06/13/2026 - 08:05
Information published.
Categories: Microsoft

CVE-2026-42767 NULL Pointer Dereference in CRMF EncryptedValue Decryption

Sat, 06/13/2026 - 08:05
Information published.
Categories: Microsoft

CVE-2026-42766 Possible NULL Dereference in Password-Based CMS Decryption

Sat, 06/13/2026 - 08:05
Information published.
Categories: Microsoft

CVE-2026-42764 NULL Pointer Dereference in QUIC Server Initial Packet Handling

Sat, 06/13/2026 - 08:04
Information published.
Categories: Microsoft

CVE-2026-45446 Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes

Sat, 06/13/2026 - 08:04
Information published.
Categories: Microsoft

CVE-2026-9076 Out-of-Bounds Read in CMS Password-Based Decryption

Sat, 06/13/2026 - 08:04
Information published.
Categories: Microsoft

CVE-2026-42768 Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()

Sat, 06/13/2026 - 08:03
Information published.
Categories: Microsoft

CVE-2026-7383 Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion

Sat, 06/13/2026 - 08:03
Information published.
Categories: Microsoft

Pages