CYBERSECURITYTRACKER
Vulnerabilities

January 2026 vulnerabilities

Browse this month's returned vendor patches and exploitation signals, with filtering and stable pages for browsing without JavaScript.

Microsoft reports 2 vulnerabilities with exploitation detected in the wild this month. This defender-focused view covers 327 vulnerabilities across 327 returned patch records from 1 vendor. Filter the complete month, or browse the static page trail without JavaScript.

327all patch recordsClear filters30criticalShow these records2Microsoft exploitation detectedShow these records3Microsoft in the Known Exploited Vulnerabilities catalogShow these records202tracked hereShow these records
Patch records
Returned Microsoft and cross-vendor release records. One Common Vulnerabilities and Exposures (CVE) identifier can appear in more than one record.
Tracked here
Records joined to a vulnerability record in this tracker.
Defender priority
Sorts Microsoft exploitation status, Cybersecurity and Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities (KEV) catalog status, severity, and tracker coverage first.
More likely
Microsoft's Exploitability Index rating that exploitation is more likely. It is not a claim that exploitation was detected.
Microsoft 327

Narrow the complete month

Filters use every patch record in this month, including records on later static pages.

Clear all

My Stack only keeps records whose vendor you have pinned. Pins are the vendors you added to My Stack on the home page. Your pin list is saved only in this browser. Shared view and feed requests include the selected vendor names in their URLs. Pins never change what the tracker collects or scores.

Microsoft-only signal filters exclude records without Microsoft signal data as unknown, report them separately, and never count them as absent. “Tracked here” covers both Microsoft and cross-vendor records.

Loading the complete-month filter index…

An Exploit Prediction Scoring System (EPSS) percentage is the global 30-day exploitation probability in the wild, not specific to you. Do not read it as a complete risk score or as evidence about your environment or impact.

Page 1 of 2 · records 1 to 200 of 327

Microsoft Security Response Center

CVEDateProductMSRC severityOut-of-bandEPSSTitle
CVE-2026-21509 ↗Microsoft Office 2019 for 32-bit editionsImportantOut-of-band71%Microsoft rates: Exploitation DetectedCISA KEVVulnCheckENISAKB50027131 mentionsMicrosoft Office Security Feature Bypass Vulnerability
CVE-2026-20805 ↗Windows 10 Version 1809 for 32-bit SystemsImportant7%Microsoft rates: Exploitation DetectedCISA KEVVulnCheckENISAKB5073379KB5073450
and 8 moreKB5073455KB5073457KB5073696KB5073698KB5073722KB5073723KB5073724KB5074109
Desktop Window Manager Information Disclosure Vulnerability
CVE-2026-20963 ↗Microsoft SharePoint Enterprise Server 2016Important29%Microsoft rates: Exploitation Less LikelyCISA KEVVulnCheckENISAKB5002822KB5002825
and 1 moreKB5002828
1 mentionsMicrosoft SharePoint Remote Code Execution Vulnerability
CVE-2026-24821 ↗cbl2 ceph 16.2.10-11 on CBL Mariner 2.0CriticalOut-of-band<1%Microsoft rating unavailableA heap-based buffer over-read that might affect a system that compiles untrusted Lua code in turanszkij/WickedEngine.
CVE-2026-21227 ↗Azure Logic AppsCriticalOut-of-band1%Microsoft rates: N/AAzure Logic Apps Elevation of Privilege Vulnerability
CVE-2026-21264 ↗Microsoft AccountCriticalOut-of-band<1%Microsoft rates: N/AMicrosoft Account Spoofing Vulnerability
CVE-2026-21520 ↗Microsoft Copilot StudioCriticalOut-of-band2%Microsoft rates: N/ACopilot Studio Information Disclosure Vulnerability
CVE-2026-21521 ↗Microsoft 365 Word CopilotCriticalOut-of-band1%Microsoft rates: N/AWord Copilot Information Disclosure Vulnerability
CVE-2026-21524 ↗Azure Data ExplorerCriticalOut-of-band1%Microsoft rates: N/AAzure Data Explorer Information Disclosure Vulnerability
CVE-2026-24304 ↗Azure Resource ManagerCriticalOut-of-band1%Microsoft rates: N/AAzure Resource Manager Elevation of Privilege Vulnerability
CVE-2026-24305 ↗Microsoft Entra IDCriticalOut-of-band1%Microsoft rates: N/AAzure Entra ID Elevation of Privilege Vulnerability
CVE-2026-24306 ↗Azure Front DoorCriticalOut-of-band1%Microsoft rates: N/AAzure Front Door Elevation of Privilege Vulnerability
CVE-2026-24307 ↗Microsoft 365 CopilotCriticalOut-of-band1%Microsoft rates: N/AM365 Copilot Information Disclosure Vulnerability
CVE-2025-68819 ↗azl3 kernel 6.6.119.3-1 on Azure Linux 3.0CriticalOut-of-band<1%Microsoft rating unavailablemedia: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg()
CVE-2025-71066 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0CriticalOut-of-band<1%Microsoft rating unavailablenet/sched: ets: Always remove class from active list before deleting in ets_qdisc_change
CVE-2025-71073 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0CriticalOut-of-band<1%Microsoft rating unavailableInput: lkkbd - disable pending work before freeing device
CVE-2025-68822 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0CriticalOut-of-band<1%Microsoft rating unavailableInput: alps - fix use-after-free bugs caused by dev3_register_work
CVE-2026-20822 ↗Windows 10 Version 1809 for 32-bit SystemsCritical<1%Microsoft rates: Exploitation Less LikelyKB5073379KB5073450
and 6 moreKB5073455KB5073457KB5073722KB5073723KB5073724KB5074109
Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2026-20854 ↗Windows Server 2025 (Server Core installation)Critical1%Microsoft rates: Exploitation Less LikelyKB5073379KB5074109Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability
CVE-2026-20876 ↗Windows Server 2025 (Server Core installation)Critical1%Microsoft rates: Exploitation Less LikelyKB5073379KB5073450
and 2 moreKB5073455KB5074109
Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
CVE-2026-20944 ↗Microsoft 365 Apps for Enterprise for 32-bit SystemsCritical1%Microsoft rates: Exploitation Less LikelyMicrosoft Word Remote Code Execution Vulnerability
CVE-2026-20952 ↗Microsoft Office 2019 for 64-bit editionsCritical1%Microsoft rates: Exploitation Less LikelyKB5002826Microsoft Office Remote Code Execution Vulnerability
CVE-2026-20953 ↗Microsoft Office 2019 for 64-bit editionsCritical1%Microsoft rates: Exploitation Less LikelyKB5002826Microsoft Office Remote Code Execution Vulnerability
CVE-2026-20955 ↗Office Online ServerCritical1%Microsoft rates: Exploitation Less LikelyKB5002824Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-20957 ↗Office Online ServerCritical1%Microsoft rates: Exploitation Less LikelyKB5002824KB5002831Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-22184 ↗cbl2 binutils 2.37-19 on CBL Mariner 2.0CriticalOut-of-band<1%Microsoft rating unavailablezlib <= 1.3.1.2 untgz Global Buffer Overflow in TGZfname()
CVE-2025-71074 ↗cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0CriticalOut-of-bandNot availableMicrosoft rating unavailablefunctionfs: fix the open/removal races
CVE-2025-71098 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0CriticalOut-of-bandNot availableMicrosoft rating unavailableip6_gre: make ip6gre_header() robust
CVE-2025-71064 ↗azl3 kernel 6.6.119.3-1 on Azure Linux 3.0CriticalOut-of-bandNot availableMicrosoft rating unavailablenet: hns3: using the num_tqps in the vf driver to apply for resources
CVE-2025-71072 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0CriticalOut-of-bandNot availableMicrosoft rating unavailableshmem: fix recovery on rename failures
CVE-2025-68814 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0CriticalOut-of-bandNot availableMicrosoft rating unavailableio_uring: fix filename leak in __io_openat_prep()
CVE-2025-68789 ↗azl3 kernel 6.6.119.3-1 on Azure Linux 3.0CriticalOut-of-bandNot availableMicrosoft rating unavailablehwmon: (ibmpex) fix use-after-free in high/low store
CVE-2025-68823 ↗azl3 kernel 6.6.119.3-1 on Azure Linux 3.0CriticalOut-of-bandNot availableMicrosoft rating unavailableublk: fix deadlock when reading partition table
CVE-2025-69420 ↗azl3 openvmm 0.2.0-1 on Azure Linux 3.0ImportantOut-of-band1%Microsoft rating unavailableMissing ASN1_TYPE validation in TS_RESP_verify_response() function
CVE-2025-69421 ↗azl3 openvmm 0.2.0-1 on Azure Linux 3.0ImportantOut-of-band1%Microsoft rating unavailableNULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
CVE-2025-69419 ↗azl3 openvmm 0.2.0-1 on Azure Linux 3.0ImportantOut-of-band1%Microsoft rating unavailableOut of bounds write in PKCS12_get_friendlyname() UTF-8 conversion
CVE-2025-68119 ↗azl3 golang 1.27.0-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableUnexpected code execution when invoking toolchain in cmd/go
CVE-2025-61731 ↗azl3 golang 1.27.0-1 on Azure Linux 3.0ImportantOut-of-band1%Microsoft rating unavailableArbitrary file write using cgo pkg-config directive in cmd/go
CVE-2025-61726 ↗azl3 golang 1.27.0-1 on Azure Linux 3.0ImportantOut-of-band2%Microsoft rating unavailableMemory exhaustion in query parameter parsing in net/url
CVE-2026-22984 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0ImportantOut-of-band<1%Microsoft rating unavailablelibceph: prevent potential out-of-bounds reads in handle_auth_done()
CVE-2026-22980 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0ImportantOut-of-band<1%Microsoft rating unavailable2 mentionsnfsd: provide locking for v4_end_grace
CVE-2025-71162 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0ImportantOut-of-band<1%Microsoft rating unavailable2 mentionsdmaengine: tegra-adma: Fix use-after-free
CVE-2025-71152 ↗cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0ImportantOut-of-band<1%Microsoft rating unavailablenet: dsa: properly keep track of conduit reference
CVE-2026-23490 ↗azl3 python-pyasn1 0.4.8-1 on Azure Linux 3.0ImportantOut-of-band1%Microsoft rating unavailablepyasn1 has a DoS vulnerability in decoder
CVE-2025-62291 ↗azl3 strongswan 5.9.14-7 on Azure Linux 3.0ImportantOut-of-band1%Microsoft rating unavailableIn the eap-mschapv2 plugin (client-side) in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integer underflow that potentially results in a heap-based buffer overflow.
CVE-2026-0899 ↗Microsoft Edge (Chromium-based)ImportantOut-of-band<1%Microsoft rating unavailableChromium: CVE-2026-0899 Out of bounds memory access in V8
CVE-2026-20960 ↗Microsoft Power Apps Desktop ClientImportantOut-of-band1%Microsoft rates: Exploitation Less LikelyPowerApps Desktop Client Remote Code Execution Vulnerability
CVE-2026-0897 ↗azl3 keras 3.3.3-5 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableDenial of Service in Keras via Excessive Memory Allocation in HDF5 Metadata
CVE-2025-71122 ↗azl3 kernel 6.6.119.3-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableiommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED
CVE-2025-71143 ↗azl3 kernel 6.6.119.3-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableclk: samsung: exynos-clkout: Assign .num before accessing .hws
CVE-2025-71133 ↗azl3 kernel 6.6.119.3-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableRDMA/irdma: avoid invalid read in irdma_net_event
CVE-2025-71101 ↗azl3 kernel 6.6.119.3-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableplatform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package parsing
CVE-2025-68817 ↗azl3 kernel 6.6.119.3-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency
CVE-2025-68795 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableethtool: Avoid overflowing userspace buffer on stats query
CVE-2025-71075 ↗azl3 kernel 6.6.119.3-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailable2 mentionsscsi: aic94xx: fix use-after-free in device removal path
CVE-2025-71068 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablesvcrdma: bound check rq_pages index in inline path
CVE-2025-68801 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablemlxsw: spectrum_router: Fix neighbour use-after-free
CVE-2025-68782 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0ImportantOut-of-band1%Microsoft rating unavailable2 mentionsscsi: target: Reset t_task_cdb pointer in error case
CVE-2025-68808 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablemedia: vidtv: initialize local pointers upon transfer of memory ownership
CVE-2025-71082 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableBluetooth: btusb: revert use of devm_kzalloc in btusb
CVE-2025-68785 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailablenet: openvswitch: fix middle attribute validation in push_nsh() action
CVE-2025-71089 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableiommu: disable SVA when CONFIG_X86 is set
CVE-2023-31096 ↗Windows 10 Version 1809 for 32-bit SystemsImportant<1%Microsoft rates: Exploitation More LikelyPublicly disclosedKB5073379KB5073450
and 12 moreKB5073455KB5073457KB5073695KB5073696KB5073697KB5073698KB5073699KB5073700KB5073722KB5073723KB5073724KB5074109
MITRE: CVE-2023-31096 Windows Agere Soft Modem Driver Elevation of Privilege Vulnerability
CVE-2024-55414 ↗Windows 10 Version 1809 for 32-bit SystemsImportant1%Microsoft rates: Exploitation UnlikelyKB5073379KB5073450
and 12 moreKB5073455KB5073457KB5073695KB5073696KB5073697KB5073698KB5073699KB5073700KB5073722KB5073723KB5073724KB5074109
Windows Motorola Soft Modem Driver Elevation of Privilege Vulnerability
CVE-2026-0386 ↗Windows Server 2019Important1%Microsoft rates: Exploitation UnlikelyKB5073379KB5073450
and 9 moreKB5073457KB5073695KB5073696KB5073697KB5073698KB5073699KB5073700KB5073722KB5073723
Windows Deployment Services Remote Code Execution Vulnerability
CVE-2026-20803 ↗Microsoft SQL Server 2022 for x64-based Systems (GDR)Important1%Microsoft rates: Exploitation Less LikelyKB5072936KB5073031
and 1 moreKB5073177
Microsoft SQL Server Elevation of Privilege Vulnerability
CVE-2026-20804 ↗Windows 10 Version 1809 for 32-bit SystemsImportant1%Microsoft rates: Exploitation UnlikelyKB5073379KB5073450
and 6 moreKB5073455KB5073457KB5073722KB5073723KB5073724KB5074109
Windows Hello Tampering Vulnerability
CVE-2026-20808 ↗Windows Server 2025 (Server Core installation)Important<1%Microsoft rates: Exploitation Less LikelyKB5073379KB5073450
and 1 moreKB5074109
Windows File Explorer Elevation of Privilege Vulnerability
CVE-2026-20809 ↗Windows 10 Version 1809 for 32-bit SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5073379KB5073450
and 7 moreKB5073455KB5073457KB5073696KB5073722KB5073723KB5073724KB5074109
Windows Kernel Memory Elevation of Privilege Vulnerability
CVE-2026-20810 ↗Windows 10 Version 1809 for 32-bit SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5073723KB5073724Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVE-2026-20811 ↗Windows Server 2022Important<1%Microsoft rates: Exploitation Less LikelyKB5073379KB5073450
and 3 moreKB5073455KB5073457KB5074109
Win32k Elevation of Privilege Vulnerability
CVE-2026-20812 ↗Windows 10 Version 1809 for 32-bit SystemsImportant1%Microsoft rates: Exploitation Less LikelyKB5073379KB5073450
and 6 moreKB5073455KB5073457KB5073722KB5073723KB5073724KB5074109
LDAP Tampering Vulnerability
CVE-2026-20814 ↗Windows 10 Version 1809 for 32-bit SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5073379KB5073450
and 6 moreKB5073455KB5073457KB5073722KB5073723KB5073724KB5074109
DirectX Graphics Kernel Elevation of Privilege Vulnerability
CVE-2026-20815 ↗Windows Server 2025 (Server Core installation)Important<1%Microsoft rates: Exploitation Less LikelyKB5073379KB5074109Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability
CVE-2026-20816 ↗Windows 10 Version 1809 for 32-bit SystemsImportant2%Microsoft rates: Exploitation More LikelyKB5073379KB5073450
and 12 moreKB5073455KB5073457KB5073695KB5073696KB5073697KB5073698KB5073699KB5073700KB5073722KB5073723KB5073724KB5074109
Windows Installer Elevation of Privilege Vulnerability
CVE-2026-20817 ↗Windows Server 2022Important5%Microsoft rates: Exploitation More LikelyKB5073379KB5073450
and 4 moreKB5073455KB5073457KB5073724KB5074109
Windows Error Reporting Service Elevation of Privilege Vulnerability
CVE-2026-20818 ↗Windows Server 2019Important1%Microsoft rates: Exploitation UnlikelyKB5073379KB5073450
and 3 moreKB5073457KB5073722KB5073723
Windows Kernel Information Disclosure Vulnerability
CVE-2026-20819 ↗Windows 11 Version 25H2 for x64-based SystemsImportant1%Microsoft rates: Exploitation Less LikelyKB5073455KB5074109Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability
CVE-2026-20820 ↗Windows Server 2022 (Server Core installation)Important3%Microsoft rates: Exploitation More LikelyKB5073379KB5073450
and 12 moreKB5073455KB5073457KB5073695KB5073696KB5073697KB5073698KB5073699KB5073700KB5073722KB5073723KB5073724KB5074109
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2026-20821 ↗Windows 10 Version 1809 for 32-bit SystemsImportant1%Microsoft rates: Exploitation UnlikelyKB5073379KB5073450
and 12 moreKB5073455KB5073457KB5073695KB5073696KB5073697KB5073698KB5073699KB5073700KB5073722KB5073723KB5073724KB5074109
Remote Procedure Call Information Disclosure Vulnerability
CVE-2026-20823 ↗Windows 10 Version 1809 for 32-bit SystemsImportant1%Microsoft rates: Exploitation UnlikelyKB5073379KB5073450
and 6 moreKB5073455KB5073457KB5073722KB5073723KB5073724KB5074109
Windows File Explorer Information Disclosure Vulnerability
CVE-2026-20824 ↗Windows 10 Version 1809 for 32-bit SystemsImportant1%Microsoft rates: Exploitation Less LikelyKB5073379KB5073450
and 8 moreKB5073455KB5073457KB5073696KB5073698KB5073722KB5073723KB5073724KB5074109
Windows Remote Assistance Security Feature Bypass Vulnerability
CVE-2026-20825 ↗Windows 10 Version 1809 for x64-based SystemsImportant1%Microsoft rates: Exploitation Less LikelyKB5073379KB5073450
and 5 moreKB5073455KB5073457KB5073723KB5073724KB5074109
Windows Hyper-V Information Disclosure Vulnerability
CVE-2026-20826 ↗Windows 10 Version 1809 for 32-bit SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5073379KB5073450
and 6 moreKB5073455KB5073457KB5073722KB5073723KB5073724KB5074109
Tablet Windows User Interface (TWINUI) Subsystem Information Disclosure Vulnerability
CVE-2026-20827 ↗Windows 10 Version 1809 for 32-bit SystemsImportant1%Microsoft rates: Exploitation UnlikelyKB5073379KB5073450
and 6 moreKB5073455KB5073457KB5073722KB5073723KB5073724KB5074109
Tablet Windows User Interface (TWINUI) Subsystem Information Disclosure Vulnerability
CVE-2026-20828 ↗Windows 10 Version 1809 for 32-bit SystemsImportant1%Microsoft rates: Exploitation Less LikelyKB5073379KB5073450
and 12 moreKB5073455KB5073457KB5073695KB5073696KB5073697KB5073698KB5073699KB5073700KB5073722KB5073723KB5073724KB5074109
Windows rndismp6.sys Information Disclosure Vulnerability
CVE-2026-20829 ↗Windows 10 Version 1809 for x64-based SystemsImportant1%Microsoft rates: Exploitation Less LikelyKB5073379KB5073450
and 5 moreKB5073455KB5073457KB5073723KB5073724KB5074109
TPM Trustlet Information Disclosure Vulnerability
CVE-2026-20830 ↗Windows Server 2025 (Server Core installation)Important<1%Microsoft rates: Exploitation UnlikelyKB5073379Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability
CVE-2026-20831 ↗Windows 10 Version 1809 for 32-bit SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5073379KB5073450
and 12 moreKB5073455KB5073457KB5073695KB5073696KB5073697KB5073698KB5073699KB5073700KB5073722KB5073723KB5073724KB5074109
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVE-2026-20832 ↗Windows 10 Version 1809 for 32-bit SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5073379KB5073450
and 6 moreKB5073455KB5073457KB5073722KB5073723KB5073724KB5074109
Windows Remote Procedure Call Interface Definition Language (IDL) Elevation of Privilege Vulnerability
CVE-2026-20833 ↗Windows Server 2019Important1%Microsoft rates: Exploitation Less LikelyKB5073379KB5073450
and 9 moreKB5073457KB5073695KB5073696KB5073697KB5073698KB5073699KB5073700KB5073722KB5073723
Windows Kerberos Information Disclosure Vulnerability
CVE-2026-20834 ↗Windows 10 Version 1809 for 32-bit SystemsImportant1%Microsoft rates: Exploitation Less LikelyKB5073379KB5073450
and 12 moreKB5073455KB5073457KB5073695KB5073696KB5073697KB5073698KB5073699KB5073700KB5073722KB5073723KB5073724KB5074109
Windows Spoofing Vulnerability
CVE-2026-20835 ↗Windows Server 2025 (Server Core installation)Important1%Microsoft rates: Exploitation Less LikelyKB5073379KB5073450
and 1 moreKB5074109
Capability Access Management Service (camsvc) Information Disclosure Vulnerability
CVE-2026-20836 ↗Windows 10 Version 1809 for 32-bit SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5073379KB5073450
and 6 moreKB5073455KB5073457KB5073722KB5073723KB5073724KB5074109
DirectX Graphics Kernel Elevation of Privilege Vulnerability
CVE-2026-20837 ↗Windows 10 Version 1809 for 32-bit SystemsImportant1%Microsoft rates: Exploitation Less LikelyKB5073379KB5073450
and 5 moreKB5073455KB5073457KB5073723KB5073724KB5074109
Windows Media Remote Code Execution Vulnerability
CVE-2026-20838 ↗Windows Server 2022Important1%Microsoft rates: Exploitation Less LikelyKB5073379KB5073450
and 3 moreKB5073455KB5073457KB5074109
Windows Kernel Information Disclosure Vulnerability
CVE-2026-20839 ↗Windows 10 Version 1809 for 32-bit SystemsImportant<1%Microsoft rates: Exploitation UnlikelyKB5073379KB5073450
and 10 moreKB5073455KB5073457KB5073695KB5073696KB5073698KB5073699KB5073722KB5073723KB5073724KB5074109
Windows Client-Side Caching (CSC) Service Information Disclosure Vulnerability
CVE-2026-20840 ↗Windows 10 Version 1809 for 32-bit SystemsImportant5%Microsoft rates: Exploitation More LikelyKB5073379KB5073450
and 12 moreKB5073455KB5073457KB5073695KB5073696KB5073697KB5073698KB5073699KB5073700KB5073722KB5073723KB5073724KB5074109
Windows NTFS Remote Code Execution Vulnerability
CVE-2026-20842 ↗Windows Server 2022Important<1%Microsoft rates: Exploitation Less LikelyKB5073379KB5073450
and 4 moreKB5073455KB5073457KB5073724KB5074109
Microsoft DWM Core Library Elevation of Privilege Vulnerability
CVE-2026-20843 ↗Windows 10 Version 1809 for 32-bit SystemsImportant3%Microsoft rates: Exploitation More LikelyKB5073379KB5073450
and 12 moreKB5073455KB5073457KB5073695KB5073696KB5073697KB5073698KB5073699KB5073700KB5073722KB5073723KB5073724KB5074109
Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability
CVE-2026-20844 ↗Windows 10 Version 1809 for 32-bit SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5073379KB5073450
and 6 moreKB5073455KB5073457KB5073722KB5073723KB5073724KB5074109
Windows Clipboard Server Elevation of Privilege Vulnerability
CVE-2026-20847 ↗Windows 10 Version 1809 for 32-bit SystemsImportant1%Microsoft rates: Exploitation UnlikelyKB5073379KB5073450
and 10 moreKB5073455KB5073457KB5073695KB5073696KB5073698KB5073699KB5073722KB5073723KB5073724KB5074109
Microsoft Windows File Explorer Spoofing Vulnerability
CVE-2026-20848 ↗Windows 10 Version 1809 for 32-bit SystemsImportant1%Microsoft rates: Exploitation UnlikelyKB5073379KB5073450
and 8 moreKB5073455KB5073457KB5073696KB5073698KB5073722KB5073723KB5073724KB5074109
Windows SMB Server Elevation of Privilege Vulnerability
CVE-2026-20849 ↗Windows 10 Version 1809 for 32-bit SystemsImportant1%Microsoft rates: Exploitation UnlikelyKB5073379KB5073450
and 12 moreKB5073455KB5073457KB5073695KB5073696KB5073697KB5073698KB5073699KB5073700KB5073722KB5073723KB5073724KB5074109
Windows Kerberos Elevation of Privilege Vulnerability
CVE-2026-20851 ↗Windows Server 2025 (Server Core installation)Important1%Microsoft rates: Exploitation Less LikelyKB5073379KB5074109Capability Access Management Service (camsvc) Information Disclosure Vulnerability
CVE-2026-20852 ↗Windows 10 Version 1809 for 32-bit SystemsImportant1%Microsoft rates: Exploitation Less LikelyKB5073379KB5073450
and 6 moreKB5073455KB5073457KB5073722KB5073723KB5073724KB5074109
Windows Hello Tampering Vulnerability
CVE-2026-20853 ↗Windows 10 Version 1809 for 32-bit SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5073455KB5073722
and 3 moreKB5073723KB5073724KB5074109
Windows WalletService Elevation of Privilege Vulnerability
CVE-2026-20856 ↗Windows 10 Version 1809 for 32-bit SystemsImportant1%Microsoft rates: Exploitation Less LikelyKB5073379KB5073450
and 8 moreKB5073455KB5073457KB5073696KB5073698KB5073722KB5073723KB5073724KB5074109
Windows Server Update Service (WSUS) Remote Code Execution Vulnerability
CVE-2026-20857 ↗Windows 11 Version 25H2 for ARM64-based SystemsImportant<1%Microsoft rates: Exploitation UnlikelyKB5073379KB5073450
and 5 moreKB5073455KB5073457KB5073723KB5073724KB5074109
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVE-2026-20858 ↗Windows 10 Version 1809 for 32-bit SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5073379KB5073450
and 5 moreKB5073455KB5073457KB5073723KB5073724KB5074109
Windows Management Services Elevation of Privilege Vulnerability
CVE-2026-20859 ↗Windows Server 2025 (Server Core installation)Important<1%Microsoft rates: Exploitation Less LikelyKB5073379KB5074109Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
CVE-2026-20860 ↗Windows 10 Version 1809 for 32-bit SystemsImportant8%Microsoft rates: Exploitation More LikelyKB5073379KB5073450
and 12 moreKB5073455KB5073457KB5073695KB5073696KB5073697KB5073698KB5073699KB5073700KB5073722KB5073723KB5073724KB5074109
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVE-2026-20861 ↗Windows 10 Version 1809 for 32-bit SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5073379KB5073450
and 5 moreKB5073455KB5073457KB5073723KB5073724KB5074109
Windows Management Services Elevation of Privilege Vulnerability
CVE-2026-20862 ↗Windows 10 Version 1809 for 32-bit SystemsImportant1%Microsoft rates: Exploitation UnlikelyKB5073379KB5073450
and 5 moreKB5073455KB5073457KB5073723KB5073724KB5074109
Windows Management Services Information Disclosure Vulnerability
CVE-2026-20863 ↗Windows Server 2022Important<1%Microsoft rates: Exploitation Less LikelyKB5073379KB5073450
and 3 moreKB5073455KB5073457KB5074109
Win32k Elevation of Privilege Vulnerability
CVE-2026-20864 ↗Windows 10 Version 1809 for 32-bit SystemsImportant1%Microsoft rates: Exploitation UnlikelyKB5073379KB5073450
and 5 moreKB5073455KB5073457KB5073723KB5073724KB5074109
Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
CVE-2026-20865 ↗Windows 10 Version 1809 for 32-bit SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5073379KB5073450
and 5 moreKB5073455KB5073457KB5073723KB5073724KB5074109
Windows Management Services Elevation of Privilege Vulnerability
CVE-2026-20866 ↗Windows 10 Version 1809 for 32-bit SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5073379KB5073450
and 5 moreKB5073455KB5073457KB5073723KB5073724KB5074109
Windows Management Services Elevation of Privilege Vulnerability
CVE-2026-20867 ↗Windows 10 Version 1809 for 32-bit SystemsImportant<1%Microsoft rates: Exploitation UnlikelyKB5073379KB5073450
and 5 moreKB5073455KB5073457KB5073723KB5073724KB5074109
Windows Management Services Elevation of Privilege Vulnerability
CVE-2026-20868 ↗Windows 10 Version 1809 for 32-bit SystemsImportant1%Microsoft rates: Exploitation Less LikelyKB5073379KB5073450
and 12 moreKB5073455KB5073457KB5073695KB5073696KB5073697KB5073698KB5073699KB5073700KB5073722KB5073723KB5073724KB5074109
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2026-20869 ↗Windows 10 Version 1809 for 32-bit SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5073379KB5073450
and 12 moreKB5073455KB5073457KB5073695KB5073696KB5073697KB5073698KB5073699KB5073700KB5073722KB5073723KB5073724KB5074109
Windows Local Session Manager (LSM) Elevation of Privilege Vulnerability
CVE-2026-20870 ↗Windows Server 2025 (Server Core installation)Important<1%Microsoft rates: Exploitation Less LikelyKB5073379KB5074109Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
CVE-2026-20871 ↗Windows Server 2022Important4%Microsoft rates: Exploitation More LikelyKB5073379KB5073450
and 4 moreKB5073455KB5073457KB5073724KB5074109
Desktop Window Manager Elevation of Privilege Vulnerability
CVE-2026-20872 ↗Windows 10 Version 1809 for 32-bit SystemsImportant20%Microsoft rates: Exploitation Less LikelyKB5073379KB5073450
and 12 moreKB5073455KB5073457KB5073695KB5073696KB5073697KB5073698KB5073699KB5073700KB5073722KB5073723KB5073724KB5074109
NTLM Hash Disclosure Spoofing Vulnerability
CVE-2026-20873 ↗Windows 10 Version 1809 for 32-bit SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5073379KB5073450
and 5 moreKB5073455KB5073457KB5073723KB5073724KB5074109
Windows Management Services Elevation of Privilege Vulnerability
CVE-2026-20874 ↗Windows 10 Version 1809 for 32-bit SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5073379KB5073450
and 5 moreKB5073455KB5073457KB5073723KB5073724KB5074109
Windows Management Services Elevation of Privilege Vulnerability
CVE-2026-20875 ↗Windows 10 Version 1809 for 32-bit SystemsImportant2%Microsoft rates: Exploitation Less LikelyKB5073379KB5073450
and 12 moreKB5073455KB5073457KB5073695KB5073696KB5073697KB5073698KB5073699KB5073700KB5073722KB5073723KB5073724KB5074109
Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability
CVE-2026-20877 ↗Windows 10 Version 1809 for 32-bit SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5073379KB5073450
and 5 moreKB5073455KB5073457KB5073723KB5073724KB5074109
Windows Management Services Elevation of Privilege Vulnerability
CVE-2026-20918 ↗Windows 10 Version 1809 for 32-bit SystemsImportant<1%Microsoft rates: Exploitation UnlikelyKB5073379KB5073450
and 5 moreKB5073455KB5073457KB5073723KB5073724KB5074109
Windows Management Services Elevation of Privilege Vulnerability
CVE-2026-20919 ↗Windows 10 Version 1809 for 32-bit SystemsImportant1%Microsoft rates: Exploitation UnlikelyKB5073379KB5073450
and 8 moreKB5073455KB5073457KB5073696KB5073698KB5073722KB5073723KB5073724KB5074109
Windows SMB Server Elevation of Privilege Vulnerability
CVE-2026-20920 ↗Windows Server 2022Important<1%Microsoft rates: Exploitation UnlikelyKB5073450KB5073455
and 1 moreKB5073457
Win32k Elevation of Privilege Vulnerability
CVE-2026-20921 ↗Windows 10 Version 1809 for 32-bit SystemsImportant1%Microsoft rates: Exploitation UnlikelyKB5073379KB5073450
and 12 moreKB5073455KB5073457KB5073695KB5073696KB5073697KB5073698KB5073699KB5073700KB5073722KB5073723KB5073724KB5074109
Windows SMB Server Elevation of Privilege Vulnerability
CVE-2026-20922 ↗Windows Server 2022 (Server Core installation)Important1%Microsoft rates: Exploitation More LikelyKB5073379KB5073450
and 12 moreKB5073455KB5073457KB5073695KB5073696KB5073697KB5073698KB5073699KB5073700KB5073722KB5073723KB5073724KB5074109
Windows NTFS Remote Code Execution Vulnerability
CVE-2026-20923 ↗Windows 10 Version 1809 for 32-bit SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5073379KB5073450
and 5 moreKB5073455KB5073457KB5073723KB5073724KB5074109
Windows Management Services Elevation of Privilege Vulnerability
CVE-2026-20924 ↗Windows 10 Version 1809 for 32-bit SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5073379KB5073450
and 5 moreKB5073455KB5073457KB5073723KB5073724KB5074109
Windows Management Services Elevation of Privilege Vulnerability
CVE-2026-20925 ↗Windows 10 Version 1809 for 32-bit SystemsImportant18%Microsoft rates: Exploitation Less LikelyKB5073379KB5073450
and 12 moreKB5073455KB5073457KB5073695KB5073696KB5073697KB5073698KB5073699KB5073700KB5073722KB5073723KB5073724KB5074109
NTLM Hash Disclosure Spoofing Vulnerability
CVE-2026-20926 ↗Windows 10 Version 1809 for 32-bit SystemsImportant1%Microsoft rates: Exploitation UnlikelyKB5073379KB5073450
and 8 moreKB5073455KB5073457KB5073696KB5073698KB5073722KB5073723KB5073724KB5074109
Windows SMB Server Elevation of Privilege Vulnerability
CVE-2026-20927 ↗Windows 10 Version 1809 for 32-bit SystemsImportant1%Microsoft rates: Exploitation UnlikelyKB5073379KB5073450
and 12 moreKB5073455KB5073457KB5073695KB5073696KB5073697KB5073698KB5073699KB5073700KB5073722KB5073723KB5073724KB5074109
Windows SMB Server Denial of Service Vulnerability
CVE-2026-20929 ↗Windows 10 Version 1809 for 32-bit SystemsImportant3%Microsoft rates: Exploitation UnlikelyKB5073450KB5073455
and 10 moreKB5073457KB5073695KB5073696KB5073697KB5073698KB5073699KB5073700KB5073722KB5073723KB5073724
1 mentionsWindows HTTP.sys Elevation of Privilege Vulnerability
CVE-2026-20931 ↗Windows 10 Version 1809 for 32-bit SystemsImportant1%Microsoft rates: Exploitation UnlikelyVulnCheckKB5073379KB5073450
and 12 moreKB5073455KB5073457KB5073695KB5073696KB5073697KB5073698KB5073699KB5073700KB5073722KB5073723KB5073724KB5074109
Windows Telephony Service Elevation of Privilege Vulnerability
CVE-2026-20932 ↗Windows 10 Version 1809 for 32-bit SystemsImportant1%Microsoft rates: Exploitation UnlikelyKB5073379KB5073450
and 6 moreKB5073455KB5073457KB5073722KB5073723KB5073724KB5074109
Windows File Explorer Information Disclosure Vulnerability
CVE-2026-20934 ↗Windows 10 Version 1809 for 32-bit SystemsImportant1%Microsoft rates: Exploitation UnlikelyKB5073379KB5073450
and 8 moreKB5073455KB5073457KB5073696KB5073698KB5073722KB5073723KB5073724KB5074109
Windows SMB Server Elevation of Privilege Vulnerability
CVE-2026-20935 ↗Windows 11 Version 25H2 for ARM64-based SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5073455KB5074109Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability
CVE-2026-20936 ↗Windows 10 Version 1809 for 32-bit SystemsImportant<1%Microsoft rates: Exploitation UnlikelyKB5073379KB5073450
and 12 moreKB5073455KB5073457KB5073695KB5073696KB5073697KB5073698KB5073699KB5073700KB5073722KB5073723KB5073724KB5074109
Windows NDIS Information Disclosure Vulnerability
CVE-2026-20937 ↗Windows 10 Version 1809 for 32-bit SystemsImportant1%Microsoft rates: Exploitation UnlikelyKB5073379KB5073450
and 6 moreKB5073455KB5073457KB5073722KB5073723KB5073724KB5074109
Windows File Explorer Information Disclosure Vulnerability
CVE-2026-20938 ↗Windows 11 Version 25H2 for x64-based SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5073455KB5074109Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
CVE-2026-20939 ↗Windows 10 Version 1809 for 32-bit SystemsImportant1%Microsoft rates: Exploitation UnlikelyKB5073379KB5073450
and 6 moreKB5073455KB5073457KB5073722KB5073723KB5073724KB5074109
Windows File Explorer Information Disclosure Vulnerability
CVE-2026-20940 ↗Windows 10 Version 22H2 for 32-bit SystemsImportant<1%Microsoft rates: Exploitation UnlikelyKB5073455KB5073457
and 9 moreKB5073695KB5073696KB5073697KB5073698KB5073699KB5073700KB5073722KB5073723KB5073724
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVE-2026-20941 ↗Windows Server 2025 (Server Core installation)Important<1%Microsoft rates: Exploitation Less LikelyKB5073379KB5074109Host Process for Windows Tasks Elevation of Privilege Vulnerability
CVE-2026-20943 ↗Microsoft SharePoint Server 2019Important1%Microsoft rates: Exploitation Less LikelyKB5002822KB5002825
and 2 moreKB5002826KB5002828
Microsoft Office Click-To-Run Remote Code Execution Vulnerability
CVE-2026-20946 ↗Microsoft Office 2019 for 32-bit editionsImportant1%Microsoft rates: Exploitation Less LikelyKB5002831Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-20947 ↗Microsoft SharePoint Enterprise Server 2016Important18%Microsoft rates: Exploitation UnlikelyKB5002822KB5002823
and 3 moreKB5002825KB5002827KB5002828
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2026-20948 ↗Microsoft SharePoint Enterprise Server 2016Important1%Microsoft rates: Exploitation Less LikelyKB5002823KB5002825
and 3 moreKB5002827KB5002828KB5002829
Microsoft Word Remote Code Execution Vulnerability
CVE-2026-20949 ↗Microsoft 365 Apps for Enterprise for 32-bit SystemsImportant<1%Microsoft rates: Exploitation Less LikelyMicrosoft Excel Security Feature Bypass Vulnerability
CVE-2026-20950 ↗Office Online ServerImportant<1%Microsoft rates: Exploitation Less LikelyKB5002824KB5002831Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-20951 ↗Microsoft SharePoint Enterprise Server 2016Important1%Microsoft rates: Exploitation Less LikelyKB5002822KB5002825
and 1 moreKB5002828
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2026-20956 ↗Microsoft 365 Apps for Enterprise for 32-bit SystemsImportant<1%Microsoft rates: Exploitation Less LikelyMicrosoft Excel Remote Code Execution Vulnerability
CVE-2026-20958 ↗Microsoft SharePoint Enterprise Server 2016Important<1%Microsoft rates: Exploitation Less LikelyKB5002822KB5002825
and 1 moreKB5002828
Microsoft SharePoint Information Disclosure Vulnerability
CVE-2026-20959 ↗Microsoft SharePoint Enterprise Server 2016Important8%Microsoft rates: Exploitation Less LikelyKB5002822KB5002825
and 1 moreKB5002828
Microsoft SharePoint Server Spoofing Vulnerability
CVE-2026-20962 ↗Windows 11 Version 25H2 for x64-based SystemsImportant<1%Microsoft rates: Exploitation Less LikelyKB5073379KB5073450
and 5 moreKB5073455KB5073457KB5073723KB5073724KB5074109
Dynamic Root of Trust for Measurement (DRTM) Information Disclosure Vulnerability
CVE-2026-20965 ↗Windows Admin Center in Azure PortalImportant<1%Microsoft rates: Exploitation Less LikelyWindows Admin Center Elevation of Privilege Vulnerability
CVE-2026-21219 ↗Windows SDKImportant<1%Microsoft rates: Exploitation UnlikelyInbox COM Objects (Global Memory) Remote Code Execution Vulnerability
CVE-2026-21221 ↗Windows Server 2025 (Server Core installation)Important<1%Microsoft rates: Exploitation UnlikelyKB5073379KB5074109Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability
CVE-2026-21224 ↗Azure Connected Machine AgentImportant<1%Microsoft rates: Exploitation Less LikelyAzure Connected Machine Agent Elevation of Privilege Vulnerability
CVE-2026-21226 ↗Azure Core shared client library for PythonImportant1%Microsoft rates: Exploitation Less LikelyAzure Core shared client library for Python Remote Code Execution Vulnerability
CVE-2026-21265 ↗Windows 10 Version 1809 for 32-bit SystemsImportant1%Microsoft rates: Exploitation Less LikelyPublicly disclosedKB5073379KB5073450
and 8 moreKB5073455KB5073457KB5073696KB5073698KB5073722KB5073723KB5073724KB5074109
Secure Boot Certificate Expiration Security Feature Bypass Vulnerability
CVE-2026-0719 ↗azl3 libsoup 3.4.4-11 on Azure Linux 3.0ImportantOut-of-band1%Microsoft rating unavailableLibsoup: signed to unsigned conversion error leading to stack-based buffer overflow in libsoup ntlm authentication
CVE-2025-69195 ↗azl3 wget 2.1.0-6 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableWget2: gnu wget2: memory corruption and crash via filename sanitization logic with attacker-controlled urls
CVE-2025-69194 ↗azl3 wget 2.1.0-6 on Azure Linux 3.0ImportantOut-of-band1%Microsoft rating unavailableWget2: arbitrary file write via metalink path traversal in gnu wget2
CVE-2025-15444 ↗azl3 libsodium 1.0.19-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableCrypt::Sodium::XS module versions prior to 0.000042, for Perl, include a vulnerable version of libsodium
CVE-2026-21441 ↗azl3 tensorflow 2.16.1-9 on Azure Linux 3.0ImportantOut-of-band3%Microsoft rating unavailableurllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)
CVE-2026-22185 ↗azl3 openldap 2.6.7-2 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableOpenLDAP <= 2.6.10 LMDB mdb_load Heap Buffer Underflow in readline()
CVE-2025-68753 ↗azl3 kernel 6.6.119.3-1 on Azure Linux 3.0ImportantOut-of-band<1%Microsoft rating unavailableALSA: firewire-motu: add bounds check in put_user loop for DSP events
CVE-2025-71105 ↗azl3 kernel 6.6.119.3-1 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailablef2fs: use global inline_xattr_slab instead of per-sb slab cache
CVE-2025-71130 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailabledrm/i915/gem: Zero-initialize the eb.vma array in i915_gem_do_execbuffer
CVE-2025-71109 ↗cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0ImportantOut-of-bandNot availableMicrosoft rating unavailableMIPS: ftrace: Fix memory corruption when kernel is located beyond 32 bits
CVE-2025-71114 ↗azl3 kernel 6.6.119.3-1 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailablevia_wdt: fix critical boot hang due to unnamed resource allocation
CVE-2025-68786 ↗azl3 kernel 6.6.119.3-1 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailableksmbd: skip lock-range check on equal size to avoid size==0 underflow
CVE-2025-68771 ↗azl3 kernel 6.6.119.3-1 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailableocfs2: fix kernel BUG in ocfs2_find_victim_chain
CVE-2025-71081 ↗azl3 kernel 6.6.119.3-1 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailableASoC: stm32: sai: fix OF node leak on probe
CVE-2025-71067 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailablentfs: set dummy blocksize to read boot_block when mounting
CVE-2025-71087 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailableiavf: fix off-by-one issues in iavf_config_rss_reg()
CVE-2025-68781 ↗azl3 kernel 6.6.119.3-1 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailableusb: phy: fsl-usb: Fix use-after-free in delayed work during device removal
CVE-2025-68756 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailableblock: Use RCU in blk_mq_[un]quiesce_tagset() instead of set->tag_list_lock
CVE-2025-68766 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailableirqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc()
CVE-2025-68759 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ImportantOut-of-bandNot availableMicrosoft rating unavailablewifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring()
CVE-2025-24528 ↗azl3 krb5 1.21.3-2 on Azure Linux 3.0ModerateOut-of-band1%Microsoft rating unavailableIn MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer overflow for a large update size to resize() in kdb_log.c. An authenticated attacker can cause an out-of-bounds write and kadmind daemon crash.
CVE-2025-15281 ↗azl3 glibc 2.38-16 on Azure Linux 3.0ModerateOut-of-band<1%Microsoft rating unavailablewordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory
CVE-2026-0915 ↗azl3 glibc 2.38-16 on Azure Linux 3.0ModerateOut-of-band1%Microsoft rating unavailablegetnetbyaddr and getnetbyaddr_r leak stack contents to DNS resovler
CVE-2025-71137 ↗azl3 kernel 6.6.119.3-1 on Azure Linux 3.0ModerateOut-of-band<1%Microsoft rating unavailableocteontx2-pf: fix "UBSAN: shift-out-of-bounds error"
CVE-2025-71112 ↗azl3 kernel 6.6.119.3-1 on Azure Linux 3.0ModerateOut-of-band<1%Microsoft rating unavailable2 mentionsnet: hns3: add VLAN id validation before using
CVE-2025-71136 ↗azl3 kernel 6.6.119.3-1 on Azure Linux 3.0ModerateOut-of-band<1%Microsoft rating unavailablemedia: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status()
CVE-2025-71116 ↗azl3 kernel 6.6.119.3-1 on Azure Linux 3.0ModerateOut-of-band<1%Microsoft rating unavailablelibceph: make decode_pool() more resilient against corrupted osdmaps
CVE-2026-0861 ↗cbl2 glibc 2.35-7 on CBL Mariner 2.0ModerateOut-of-band<1%Microsoft rating unavailableInteger overflow in memalign leads to heap corruption
CVE-2025-68794 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0ModerateOut-of-band1%Microsoft rating unavailableiomap: adjust read range correctly for non-block-aligned positions
CVE-2025-71091 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0ModerateOut-of-band<1%Microsoft rating unavailableteam: fix check for port enabled in team_queue_override_port_prio_changed()
CVE-2025-68775 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0ModerateOut-of-band1%Microsoft rating unavailablenet/handshake: duplicate handshake cancellations leak socket
CVE-2025-68774 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0ModerateOut-of-band1%Microsoft rating unavailablehfsplus: fix missing hfs_bnode_get() in __hfs_bnode_create
CVE-2025-68815 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0ModerateOut-of-band<1%Microsoft rating unavailablenet/sched: ets: Remove drr class from the active list if it changes to strict
CVE-2025-68809 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0ModerateOut-of-band1%Microsoft rating unavailableksmbd: vfs: fix race on m_flags in vfs_cache

Glossary

Open in glossary