Threat database

CVE-2026-95101 is a published vulnerability affecting version 3.0 of the NGINX ngx_http_v3_module. The vulnerability is cataloged under CWE-172. No CVSS score or detailed impact information is provided, and no patch or remediation details are available from the vendor. There is no evidence of exploitation in the wild.

CVE-2026-15176 is a vulnerability in the NGINX ngx_http_core_module identified by Microsoft. No detailed technical information or impact description is provided. The affected version is exactly 3.0. There is no CVSS score or public exploit code available, and no known exploitation in the wild has been reported.

CVE-2026-97205 is a vulnerability in the NGINX ngx_http_core_module identified by Microsoft. The vulnerability is associated with use-after-free issues (CWE-416). It affects specific versions 3.0 and 4.0 of the product. No CVSS score or detailed impact information is provided, and no known exploits are reported in the wild. There is no information on available patches or remediation from the vendor advisory.

CVE-2026-98413 is a vulnerability related to SELinux where the AVC decision is always filled in the avc_has_perm_noaudit() function. The advisory does not provide detailed technical or impact information beyond this. The affected Microsoft product versions are 3.0 and 4.0.

This vulnerability involves the WiFi mac80211 component related to requiring a peer station for TDLS setup confirmation. It affects Microsoft products with versions 3.0 and 4.0. No CVSS score or detailed impact information is provided. There is no indication of known exploits in the wild or available patches.

CVE-2026-98430 is a vulnerability related to RDMA/efa functionality in Microsoft products, specifically affecting versions 3.0 and 4.0. The issue involves keeping admin queues alive while an IRQ is registered. No detailed impact or exploitation information is provided.

CVE-2026-98419 is a vulnerability in Microsoft software involving an out-of-bounds write in the reset_per_cpu_data() function of the drop_monitor component. The affected versions are 3.0 and 4.0. No CVSS score or detailed impact information is provided. There is no indication of known exploitation in the wild or available patches.

A vulnerability identified as CVE-2026-98404 affects Microsoft software versions 3.0 and 4.0. It involves a bug in the drm/virtio component, specifically in the virtio_gpu_user_framebuffer_create() function, related to improper handling of NULL versus ERR_PTR() values. No CVSS score or detailed impact information is provided.

This vulnerability, identified as CVE-2026-98409, involves a division by zero issue in the watchdog component for Microsoft products, specifically versions 3.0 and 4.0. The description provided is minimal and does not detail the exploitation method or impact. No CVSS score or detailed technical information is available.

This vulnerability involves the wifi mac80211_hwsim component where frames are improperly handed to mac80211 during the stopping process. The issue affects Microsoft products with versions 3.0 and 4.0. No CVSS score or detailed impact information is provided.

CVE-2026-98429 is a vulnerability related to RDMA/efa where EQ resources are kept alive while an IRQ is registered. The advisory does not provide detailed technical information or impact specifics. The affected software versions are Microsoft products version 3.0 and 4.0.

This vulnerability involves the wifi mac80211 component where a warning (WARN) can occur in the set_bitrate_mask function when sdata is not present in the driver. The issue affects specific Microsoft product versions 3.0 and 4.0. No CVSS score or detailed impact information is provided.

This vulnerability involves an IRQ leak caused by using an incorrect index in the MSI-X error path within the mwifiex WiFi driver. It affects Microsoft products with versions 3.0 and 4.0. No CVSS score or detailed impact information is provided, and there is no indication of active exploitation in the wild.

A heap out-of-bounds (OOB) write vulnerability exists in the WiFi RSI component related to key removal in Microsoft software versions 3.0 and 4.0. This flaw could potentially lead to memory corruption.

This vulnerability, identified as CVE-2026-98422, relates to the wifi mac80211 component and involves resetting the AP_VLAN tailroom counter on interface down events. The information provided is minimal and does not include details on the impact or exploitation. The affected versions are Microsoft products version 3.0 and 4.0. No CVSS score or detailed technical impact is available.

A heap-based out-of-bounds read vulnerability exists in unarr through version 1.1.1 within the zip_parse_extra_fields() function due to an incorrect ZIP64 extra field length check. This flaw allows an attacker to craft a malicious ZIP archive with specific sentinel values and a truncated ZIP64 record, causing the process to read beyond the heap buffer and potentially crash.

CVE-2026-63718 is a vulnerability in Apache HTTP Server's mod_proxy_uwsgi module related to Transfer-Encoding response smuggling. The advisory references Microsoft but provides no detailed technical or impact information. The affected version is Apache HTTP Server 3.0. No CVSS score or exploit details are available.

CVE-2026-95838 is a denial-of-service vulnerability in containerd version 3.0 caused by repeated opaque whiteouts during the unpacking process. This flaw can lead to resource exhaustion or service disruption.

A vulnerability in the github.com/moby/sys/user package version 3.0 allows for a possible denial of service (DoS) due to unbounded parsing of user and group database files. This could lead to resource exhaustion when processing these files.

A security update for the Linux kernel in Red Hat Enterprise Linux 9.4 addresses a potential use-after-free vulnerability in UDP tunnel segmentation (CVE-2026-74705). This flaw could impact system security due to the kernel's critical role. The update requires a system reboot to take effect and is rated as important by Red Hat Product Security.