CVE-2026-80842 is a use-after-free vulnerability in the multicast context handling of a master VLAN in the network bridge component. This flaw affects specific versions of Microsoft software and related Linux kernel versions as indicated. The vulnerability has a medium severity rating and no known exploits in the wild have been reported. No CVSS score is provided. The vulnerability could potentially lead to stability or security issues related to improper memory handling in network bridging.
This vulnerability involves the failure of the function tls_sw_splice_read() after an asynchronous decryption operation fails in certain Microsoft-related software versions. The issue has been identified in specific versions of the Microsoft product, with a medium severity rating. No CVSS score is provided, and there is no indication of known exploits in the wild. The vulnerability affects multiple specific versions, primarily related to Microsoft and Ubuntu distributions. No patch or remediation details are provided in the available data.
CVE-2026-80805 is a medium severity vulnerability affecting specific versions of Microsoft software related to the xfs filesystem. The issue involves improper validation of attribute entry pointers before field access, which could potentially lead to unexpected behavior or errors. There is no CVSS score available for this vulnerability. No information about active exploitation or patch availability is provided.
A use-after-free vulnerability exists in the HID uclogic driver related to the inrange_timer on device removal. This vulnerability affects specific versions of the Microsoft product listed. The severity is assessed as medium. No CVSS score is provided. There is no information about available patches or exploits in the wild.
This vulnerability concerns the nvmet-tcp component, where warnings are improperly triggered on remotely-controlled oversized Scatter-Gather List (SGL) allocations. It affects specific Microsoft-related software versions. The issue has been classified with medium severity. No CVSS score is provided, and no known exploits are reported in the wild. The vulnerability does not appear to be related to a cloud service, and no patch or remediation details are provided in the available data.
A vulnerability identified as CVE-2026-80883 affects certain Microsoft products involving the drm/tegra graphics driver, specifically related to initializing the address register map before the HOST1X client is registered. This issue is addressed by patches available for the affected versions. The vulnerability is rated medium severity and no known exploits are reported in the wild. The vendor advisory references a broader set of Linux kernel security fixes, including this issue, with official patches provided.
CVE-2026-78607 is a vulnerability involving missing authorization in Elasticsearch components related to Microsoft Azure Linux 3.0 and rubygem-elasticsearch. This flaw could lead to unauthorized information disclosure due to insufficient access control. No CVSS score or detailed technical exploitation data is provided. There is no indication of known exploits in the wild or available patches. The affected versions include Microsoft Azure Linux 3.0 and rubygem-elasticsearch version 3.0.
grpc-gateway version 2.28.0 contains an incorrect access control vulnerability involving the processing of the X-HTTP-Method-Override header in ServeMux.ServeHTTP. The application does not properly restrict allowed HTTP methods, which can lead to unintended method overrides when handling POST requests with Content-Type application/x-www-form-urlencoded. This vulnerability is assigned CVE-2026-37236 and is rated medium severity. No patch or CVSS score is currently available, and no known exploits have been reported in the wild.
CVE-2026-54330 is a vulnerability in the Ceph RGW SigV4 handler where it accepts unsigned x-amz-* headers on presigned requests. This behavior can lead to privilege escalation. The affected product version is Microsoft Ceph RGW 3.0. No CVSS score is provided, and there are no known exploits in the wild. No patch or remediation details are currently available.
CVE-2026-18743 is a low severity vulnerability in the popt library related to a short realloc operation in poptconfigfiletostring. This issue affects certain versions of popt used in Microsoft and Red Hat Hardened Images. A security update is available from Red Hat to address this vulnerability.
A low severity vulnerability identified as CVE-2026-80689 affects certain Microsoft-related software versions. The issue involves the tracing/mmiotrace component where a NULL check for mmio_trace_array is missing in logging functions. This could potentially lead to unexpected behavior or errors during logging operations.
A vulnerability exists in the drm/amdkfd component related to a missing authorization check in the KFD_IOC_DBG_TRAP_DISABLE operation. This issue affects specific versions of the Microsoft product listed and has been assigned CVE-2026-80703. The severity is assessed as medium. No CVSS score is provided. There is no information on available patches or exploits in the wild.
CVE-2026-80686 is a medium severity vulnerability affecting specific Microsoft software versions. It involves an issue in the memory management component where pte_pfn and pte_dirty functions are called on non-present page table entries (PTEs). This could potentially lead to incorrect memory handling. No CVSS score is provided, and no known exploits are reported. The affected versions are explicitly listed. No patch or remediation information is available in the provided data.
CVE-2026-80709 is a low-severity vulnerability in the s390/zcrypt component related to incorrect domain value verification with EP11 CPRBs. It affects specific versions of Microsoft software as listed. No CVSS score is provided. There are no known exploits in the wild and no patch information is available in the provided data.
This vulnerability involves the handling of Generic Segmentation Offload (GSO) state in network fragments before reassembly. It affects specific versions of Microsoft-related software. The issue is categorized as medium severity. No CVSS score is provided, and there is no indication of known exploits in the wild. Patch or remediation status is not confirmed from the available data.
CVE-2026-80715 is a medium severity vulnerability affecting specific versions of Microsoft software. The issue involves the removal of the napi_synchronize() function in igc_down(), as referenced in the vulnerability title. The affected versions are explicitly listed, spanning multiple builds. There is no CVSS score provided, and no known exploits in the wild have been reported. No patch or remediation details are included in the provided data. The vulnerability is tagged with multiple references to Ubuntu and Microsoft security advisories.
This vulnerability involves a race condition and error handling issue in the i2c imx slave registration process. It affects specific versions of Microsoft software and related Ubuntu distributions. The severity is assessed as low. No CVSS score or detailed technical exploit information is provided. No known exploits are reported in the wild. Patch or remediation status is not confirmed from the available data.
This vulnerability involves a wrong NULL check in the SCSI target iblock driver related to PREEMPT/RELEASE operations. It affects multiple specific versions of Microsoft software and Ubuntu Linux kernel builds. The issue could potentially lead to incorrect handling of certain operations in the affected software versions. No CVSS score is provided, but the severity is assessed as high based on the description and tagging. There is no information about known exploits in the wild or official patches in the provided data.
A vulnerability identified as CVE-2026-80684 affects certain Microsoft products involving KVM on s390 architecture, specifically related to PCI. The issue is a NULL pointer dereference occurring during AIBV allocation failure. This vulnerability has a medium severity rating. Multiple specific versions are affected. No CVSS score is available for this vulnerability.