CVE-2026-6429 netrc credential leak with reused proxy connection
Information published.
Categories: Microsoft
CVE-2026-6276 stale custom cookie host causes cookie leak
Information published.
Categories: Microsoft
CVE-2026-6253 proxy credentials leak over redirect-to proxy
Information published.
Categories: Microsoft
CVE-2023-5678 Excessive time spent in DH check / generation with large Q parameter value
Information published.
Categories: Microsoft
CVE-2026-34181 PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys
Information published.
Categories: Microsoft
CVE-2026-34180 Heap Buffer Over-read in ASN.1 Content Parsing
Information published.
Categories: Microsoft
CVE-2026-42769 Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate
Information published.
Categories: Microsoft
CVE-2026-42767 NULL Pointer Dereference in CRMF EncryptedValue Decryption
Information published.
Categories: Microsoft
CVE-2026-42766 Possible NULL Dereference in Password-Based CMS Decryption
Information published.
Categories: Microsoft
CVE-2026-42764 NULL Pointer Dereference in QUIC Server Initial Packet Handling
Information published.
Categories: Microsoft
CVE-2026-45446 Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes
Information published.
Categories: Microsoft
CVE-2026-9076 Out-of-Bounds Read in CMS Password-Based Decryption
Information published.
Categories: Microsoft
CVE-2026-42768 Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()
Information published.
Categories: Microsoft
CVE-2026-7383 Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion
Information published.
Categories: Microsoft
CVE-2026-34182 CMS AuthEnvelopedData Processing May Accept Forged Messages
Information published.
Categories: Microsoft
CVE-2026-34183 Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler
Information published.
Categories: Microsoft
CVE-2026-45447 Heap Use-After-Free in the PKCS7_verify() Function
Information published.
Categories: Microsoft
