Vulnerabilities
January 2026 vulnerabilities
Browse this month's returned vendor patches and exploitation signals, with filtering and stable pages for browsing without JavaScript.
Microsoft reports 2 vulnerabilities with exploitation detected in the wild this month. This defender-focused view covers 327 vulnerabilities across 327 returned patch records from 1 vendor. Filter the complete month, or browse the static page trail without JavaScript.
- Patch records
- Returned Microsoft and cross-vendor release records. One Common Vulnerabilities and Exposures (CVE) identifier can appear in more than one record.
- Tracked here
- Records joined to a vulnerability record in this tracker.
- Defender priority
- Sorts Microsoft exploitation status, Cybersecurity and Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities (KEV) catalog status, severity, and tracker coverage first.
- More likely
- Microsoft's Exploitability Index rating that exploitation is more likely. It is not a claim that exploitation was detected.
Narrow the complete month
Filters use every patch record in this month, including records on later static pages.
My Stack only keeps records whose vendor you have pinned. Pins are the vendors you added to My Stack on the home page. Your pin list is saved only in this browser. Shared view and feed requests include the selected vendor names in their URLs. Pins never change what the tracker collects or scores.
Microsoft-only signal filters exclude records without Microsoft signal data as unknown, report them separately, and never count them as absent. “Tracked here” covers both Microsoft and cross-vendor records.
Loading the complete-month filter index…
The complete-month filter index could not be loaded, so filters are unavailable. The static records and page links below remain complete and usable.
An Exploit Prediction Scoring System (EPSS) percentage is the global 30-day exploitation probability in the wild, not specific to you. Do not read it as a complete risk score or as evidence about your environment or impact.
Microsoft Security Response Center
CVEDateProductMSRC severityOut-of-bandEPSSTitle
Cross-vendor patches
VendorCVESeverityProductFixed versionPatchAdvisory
Page 2 of 2 · records 201 to 327 of 327
Microsoft Security Response Center
CVEDateProductMSRC severityOut-of-bandEPSSTitle
CVE-2025-68818 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0ModerateOut-of-band<1%Microsoft rating unavailable2 mentionsscsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path"
CVE-2025-68800 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0ModerateOut-of-band<1%Microsoft rating unavailablemlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats
CVE-2025-71093 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0ModerateOut-of-band<1%Microsoft rating unavailablee1000: fix OOB in e1000_tbi_should_accept()
CVE-2025-68799 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0ModerateOut-of-band<1%Microsoft rating unavailablecaif: fix integer underflow in cffrml_receive()
CVE-2025-68806 ↗azl3 kernel 6.6.119.3-1 on Azure Linux 3.0ModerateOut-of-band<1%Microsoft rating unavailableksmbd: fix buffer validation by including null terminator size in EA length
CVE-2025-71078 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0ModerateOut-of-band<1%Microsoft rating unavailablepowerpc/64s/slb: Fix SLB multihit issue during SLB preload
CVE-2025-68803 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0ModerateOut-of-band<1%Microsoft rating unavailable2 mentionsNFSD: NFSv4 file creation neglects setting ACL
CVE-2025-68764 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-band<1%Microsoft rating unavailable2 mentionsNFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags
CVE-2025-12781 ↗azl3 python-py 1.11.0-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablebase64.b64decode() always accepts "+/" characters, despite setting altchars
CVE-2025-11187 ↗azl3 openvmm 0.2.0-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableImproper validation of PBMAC1 parameters in PKCS#12 MAC verification
CVE-2025-15468 ↗azl3 openvmm 0.2.0-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableNULL dereference in SSL_CIPHER_find() function on unknown cipher ID
CVE-2025-68160 ↗azl3 openvmm 0.2.0-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableHeap out-of-bounds write in BIO_f_linebuffer on short writes
CVE-2025-66199 ↗azl3 openvmm 0.2.0-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableTLS 1.3 CompressedCertificate excessive memory allocation
CVE-2025-15469 ↗azl3 openvmm 0.2.0-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailable'openssl dgst' one-shot codepath silently truncates inputs >16MB
CVE-2025-69418 ↗azl3 openvmm 0.2.0-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableUnauthenticated/unencrypted trailing bytes with low-level OCB function calls
CVE-2026-22796 ↗azl3 openvmm 0.2.0-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function
CVE-2026-22795 ↗azl3 openvmm 0.2.0-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableMissing ASN1_TYPE validation in PKCS#12 parsing
CVE-2025-61728 ↗azl3 golang 1.27.0-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableExcessive CPU consumption when building archive index in archive/zip
CVE-2025-61730 ↗azl3 golang 1.27.0-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableHandshake messages may be processed at the incorrect encryption level in crypto/tls
CVE-2025-15504 ↗azl3 nodejs24 24.14.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablelief-project LIEF ELF Binary Parser.tcc parse_binary null pointer dereference
CVE-2026-23004 ↗cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledst: fix races in rt6_uncached_list_del() and rt_del_uncached_list()
CVE-2025-71184 ↗cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailablebtrfs: fix NULL dereference on root when tracing inode eviction
CVE-2025-71183 ↗cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailablebtrfs: always detect conflicting inodes when logging inode refs
CVE-2026-22999 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet/sched: sch_qfq: do not free existing class in qfq_change_class()
CVE-2026-22998 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec
CVE-2026-22997 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts
CVE-2026-22996 ↗cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv
CVE-2026-22992 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailablelibceph: return the handler error from mon_handle_auth_done()
CVE-2026-22991 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailablelibceph: make free_choose_arg_map() resilient to partial allocation
CVE-2026-22990 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailablelibceph: replace overzealous BUG_ON in osdmap_apply_incremental()
CVE-2026-22982 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet: mscc: ocelot: Fix crash when adding interface under a lag
CVE-2026-22979 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet: fix memory leak in skb_segment_list for GRO packets
CVE-2026-22977 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet: sock: fix hardened usercopy panic in sock_recv_errqueue
CVE-2026-22976 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet/sched: sch_qfq: Fix NULL deref when deactivating inactive aggregate in qfq_reset
CVE-2025-71163 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledmaengine: idxd: fix device leaks on compat bind and unbind
CVE-2025-71161 ↗cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledm-verity: disable recursive forward error correction
CVE-2025-71160 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenetfilter: nf_tables: avoid chain re-validation if possible
CVE-2025-71154 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet: usb: rtl8150: fix memory leak on usb_submit_urb() failure
CVE-2025-71150 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableksmbd: Fix refcount leak when invalid session is found on session lookup
CVE-2025-71147 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableKEYS: trusted: Fix a memory leak in tpm2_load_cmd
CVE-2026-23000 ↗cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet/mlx5e: Fix crash on profile change rollback failure
CVE-2025-56226 ↗azl3 libsndfile 1.2.2-3 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableLibsndfile <=1.2.2 contains a memory leak vulnerability in the mpeg_l3_encoder_init() function within the mpeg_l3_encode.c file.
CVE-2026-0990 ↗cbl2 libxml2 2.10.4-9 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableLibxml2: libxml2: denial of service via uncontrolled recursion in xml catalog processing
CVE-2026-0716 ↗azl3 libsoup 3.4.4-14 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableLibsoup: out-of-bounds read in libsoup websocket frame processing
CVE-2025-71120 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableSUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf
CVE-2025-71107 ↗azl3 kernel 6.6.119.3-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablef2fs: ensure node page reads complete before f2fs_put_super() finishes
CVE-2025-71102 ↗azl3 kernel 6.6.119.3-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablescs: fix a wrong parameter in __scs_magic
CVE-2025-71138 ↗azl3 kernel 6.6.119.3-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/msm/dpu: Add missing NULL pointer check for pingpong interface
CVE-2025-71113 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablecrypto: af_alg - zero initialize memory allocated via sock_kmalloc
CVE-2025-71125 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabletracing: Do not register unsupported perf events
CVE-2025-71131 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablecrypto: seqiv - Do not use req->iv after crypto_aead_encrypt
CVE-2025-71127 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablewifi: mac80211: Discard Beacon frames to non-broadcast address
CVE-2025-71121 ↗azl3 kernel 6.6.119.3-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableparisc: Do not reprogram affinitiy on ASP chip
CVE-2025-71129 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableLoongArch: BPF: Sign extend kfunc call arguments
CVE-2025-71115 ↗azl3 kernel 6.6.119.3-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableum: init cpu_tasks[] earlier
CVE-2025-71108 ↗azl3 kernel 6.6.119.3-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableusb: typec: ucsi: Handle incorrect num_connectors capability
CVE-2025-71132 ↗azl3 kernel 6.6.119.3-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablesmc91x: fix broken irq-context in PREEMPT_RT
CVE-2025-71119 ↗azl3 kernel 6.6.119.3-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablepowerpc/kexec: Enable SMT before waking offline CPUs
CVE-2025-71118 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableACPICA: Avoid walking the Namespace if start_node is NULL
CVE-2025-71111 ↗azl3 kernel 6.6.119.3-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablehwmon: (w83791d) Convert macros to functions to avoid TOCTOU
CVE-2025-68780 ↗azl3 kernel 6.6.119.3-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablesched/deadline: only set free_cpus for online runqueues
CVE-2025-71069 ↗azl3 kernel 6.6.119.3-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablef2fs: invalidate dentry cache on failed whiteout creation
CVE-2025-68776 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet/hsr: fix NULL pointer dereference in prp_get_untagged_frame()
CVE-2025-68797 ↗azl3 kernel 6.6.119.3-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablechar: applicom: fix NULL pointer dereference in ac_ioctl
CVE-2025-71088 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemptcp: fallback earlier on simult connection
CVE-2025-68777 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableInput: ti_am335x_tsc - fix off-by-one error in wire_order validation
CVE-2025-68788 ↗azl3 kernel 6.6.119.3-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablefsnotify: do not generate ACCESS/MODIFY events on child for special files
CVE-2025-71077 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabletpm: Cap the number of PCR banks
CVE-2025-68816 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet/mlx5: fw_tracer, Validate format string parameters
CVE-2025-71084 ↗azl3 kernel 6.6.119.3-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableRDMA/cm: Fix leaking the multicast GID table reference
CVE-2025-68773 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablespi: fsl-cpm: Check length parity before switching to 16 bit mode
CVE-2025-71097 ↗azl3 kernel 6.6.119.3-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableipv4: Fix reference count leak when using error routes with nexthop objects
CVE-2025-68769 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablef2fs: fix return value of f2fs_recover_fsync_data()
CVE-2025-68787 ↗azl3 kernel 6.6.119.3-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenetrom: Fix memory leak in nr_sendmsg()
CVE-2025-68772 ↗azl3 kernel 6.6.119.3-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablef2fs: fix to avoid updating compression context during writeback
CVE-2025-71065 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablef2fs: fix to avoid potential deadlock
CVE-2025-68783 ↗azl3 kernel 6.6.119.3-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableALSA: usb-mixer: us16x08: validate meter packet indices
CVE-2025-71083 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/ttm: Avoid NULL pointer deref for evicted BOs
CVE-2025-68768 ↗azl3 kernel 6.6.119.3-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableinet: frags: flush pending skbs in fqdir_pre_exit()
CVE-2025-68798 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableperf/x86/amd: Check event before enable to avoid GPF
CVE-2025-71096 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableRDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly
CVE-2025-68778 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablebtrfs: don't log conflicting inode if it's a dir moved in the current transaction
CVE-2025-71079 ↗azl3 kernel 6.6.119.3-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write
CVE-2025-68767 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablehfsplus: Verify inode mode when loading from disk
CVE-2025-68796 ↗azl3 kernel 6.6.119.3-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablef2fs: fix to avoid updating zero-sized extent in extent cache
CVE-2025-71095 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablenet: stmmac: fix the crash issue for zero copy XDP_TX action
CVE-2025-68471 ↗cbl2 avahi 0.8-4 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableAvahi has a reachable assertion in lookup_start
CVE-2025-68468 ↗cbl2 avahi 0.8-4 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableAvahi has a reachable assertion in lookup_multicast_callback
CVE-2025-68276 ↗cbl2 avahi 0.8-4 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableAvahi has a reachable assertion in avahi_wide_area_scan_cache
CVE-2026-22695 ↗cbl2 libpng 1.6.52-1 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableLIBPNG has a heap buffer over-read in png_image_read_direct_scaled (regression from CVE-2025-65018 fix)
CVE-2026-22801 ↗azl3 libpng 1.6.52-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableLIBPNG has an integer truncation causing heap buffer over-read in png_image_write_*
CVE-2026-22701 ↗cbl2 python-filelock 3.0.12-13 on CBL Mariner 2.0ModerateNot availableMicrosoft rating unavailablefilelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock
CVE-2026-22702 ↗cbl2 python-virtualenv 20.26.6-3 on CBL Mariner 2.0ModerateNot availableMicrosoft rating unavailablevirtualenv Has TOCTOU Vulnerabilities in Directory Creation
CVE-2026-21860 ↗cbl2 python-tensorboard 2.11.0-3 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailableWerkzeug safe_join() allows Windows special device names with compound extensions
CVE-2026-22693 ↗azl3 harfbuzz 8.3.0-4 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableNull Pointer Dereference in SubtableUnicodesCache::create leading to DoS
CVE-2025-68151 ↗azl3 coredns 1.11.4-12 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableCoreDNS gRPC/HTTPS/HTTP3 servers lack resource limits, enabling DoS via unbounded connections and oversized messages
CVE-2025-14819 ↗azl3 curl 8.11.1-4 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableOpenSSL partial chain store policy bypass
CVE-2025-15079 ↗cbl2 cmake 3.21.4-20 on CBL Mariner 2.0ModerateOut-of-bandNot availableMicrosoft rating unavailablelibssh global known_hosts override
CVE-2025-14524 ↗azl3 cmake 3.30.3-10 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablebearer token leak on cross-protocol redirect
CVE-2025-14017 ↗azl3 curl 8.11.1-4 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablebroken TLS options for threaded LDAPS
CVE-2025-13034 ↗azl3 curl 8.11.1-4 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailableNo QUIC certificate pinning with GnuTLS
CVE-2026-21444 ↗azl3 libtpms 0.9.6-8 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablelibtpms returns wrong initialization vector when certain symmetric ciphers are used
CVE-2025-68758 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablebacklight: led-bl: Add devlink to supplier LEDs
CVE-2025-68757 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailabledrm/vgem-fence: Fix potential deadlock on release
CVE-2025-68763 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablecrypto: starfive - Correctly handle return of sg_nents_for_len
CVE-2025-68765 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablemt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add()
CVE-2025-68755 ↗azl3 kernel 6.6.117.1-1 on Azure Linux 3.0ModerateOut-of-bandNot availableMicrosoft rating unavailablestaging: most: remove broken i2c driver
CVE-2025-13151 ↗azl3 gnutls 3.8.3-6 on Azure Linux 3.0LowOut-of-band1%Microsoft rating unavailableCVE-2025-13151
CVE-2026-22978 ↗cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0LowOut-of-bandNot availableMicrosoft rating unavailablewifi: avoid kernel-infoleak from struct iw_point
CVE-2026-0992 ↗azl3 libxml2 2.11.5-7 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailableLibxml2: libxml2: denial of service via crafted xml catalogs
CVE-2026-0989 ↗cbl2 libxml2 2.10.4-9 on CBL Mariner 2.0LowOut-of-bandNot availableMicrosoft rating unavailableLibxml2: unbounded relaxng include recursion leading to stack overflow
CVE-2025-71094 ↗azl3 kernel 6.6.119.3-3 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablenet: usb: asix: validate PHY address before use
CVE-2026-21895 ↗azl3 kata-containers-cc 3.15.0.aks0-5 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablersa crate has potential panic on a prime being equal to 1
CVE-2025-15224 ↗azl3 cmake 3.30.3-10 on Azure Linux 3.0LowOut-of-bandNot availableMicrosoft rating unavailablelibssh key passphrase bypass without agent set
CVE-2026-1504 ↗Microsoft Edge (Chromium-based)N/AOut-of-band<1%Microsoft rating unavailableChromium: CVE-2026-1504 Inappropriate implementation in Background Fetch API
CVE-2026-1220 ↗Microsoft Edge (Chromium-based)N/AOut-of-band<1%Microsoft rating unavailableChromium: CVE-2026-1220 Race in V8
CVE-2026-0908 ↗Microsoft Edge (Chromium-based)N/AOut-of-band<1%Microsoft rating unavailableChromium: CVE-2026-0908 Use after free in ANGLE
CVE-2026-0907 ↗Microsoft Edge (Chromium-based)N/AOut-of-band9%Microsoft rating unavailableChromium: CVE-2026-0907 Incorrect security UI in Split View
CVE-2026-0905 ↗Microsoft Edge (Chromium-based)N/AOut-of-band<1%Microsoft rating unavailableChromium: CVE-2026-0905 Insufficient policy enforcement in Network
CVE-2026-0906 ↗Microsoft Edge (Chromium-based)N/AOut-of-band<1%Microsoft rating unavailableChromium: CVE-2026-0906 Incorrect security UI
CVE-2026-0904 ↗Microsoft Edge (Chromium-based)N/AOut-of-band<1%Microsoft rating unavailableChromium: CVE-2026-0904 Incorrect security UI in Digital Credentials
CVE-2026-0903 ↗Microsoft Edge (Chromium-based)N/AOut-of-band<1%Microsoft rating unavailableChromium: CVE-2026-0903 Insufficient validation of untrusted input in Downloads
CVE-2026-0902 ↗Microsoft Edge (Chromium-based)N/AOut-of-band<1%Microsoft rating unavailableChromium: CVE-2026-0902 Inappropriate implementation in V8
CVE-2026-0901 ↗Microsoft Edge (Chromium-based)N/AOut-of-band<1%Microsoft rating unavailableChromium: CVE-2026-0901 Inappropriate implementation in Blink
CVE-2026-0900 ↗Microsoft Edge (Chromium-based)N/AOut-of-band<1%Microsoft rating unavailableChromium: CVE-2026-0900 Inappropriate implementation in V8
CVE-2026-21223 ↗Microsoft Edge (Chromium-based)N/AOut-of-band<1%Microsoft rates: Exploitation Less LikelyMicrosoft Edge (Chromium-based) Security Feature Bypass Vulnerability
CVE-2026-0628 ↗Microsoft Edge (Chromium-based)N/AOut-of-band21%Microsoft rating unavailableChromium: CVE-2026-0628 Insufficient policy enforcement in WebView tag
The next page could not be added in place. The ordinary page link remains available; try it again to navigate normally.