Threat database

800 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	–	EPSS 0.1%	CVE-2026-74446Microsoft · drm/amdkfd: hold event_mutex while checkpointing CRIU events HighEPSS 0.1%2026-08-23GCVE DatabaseCVE-2026-74446 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.1%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-08-23
Medium	–	EPSS 0.3%	CVE-2026-74531Microsoft · Bluetooth: hci_conn: hold conn reference in abort_conn_sync() MediumEPSS 0.3%2026-08-23GCVE DatabaseCVE-2026-74531 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.3%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-08-23
Medium	–	EPSS 0.1%	CVE-2026-74454Microsoft · drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO size MediumEPSS 0.1%2026-08-23GCVE DatabaseCVE-2026-74454 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.1%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-08-23
Medium	4.6	EPSS 0.2%	CVE-2026-66485Microsoft · Uncontrolled Memory Allocation in GNU cpio Medium4.6EPSS 0.2%2026-08-11GCVE DatabaseCVE-2026-66485 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.2%Report on CVE-2026-66485 Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-08-11
Medium	–	EPSS 0.1%	CVE-2026-23385Microsoft · netfilter: nf_tables: clone set on flush only MediumEPSS 0.1%2026-08-09GCVE DatabaseCVE-2026-23385 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.1%Vulnerability Microsoft Security Response Center #ghsa-g792-jhj8-228v #microsoft-security-response-ce	GCVE Database	2026-08-09
High	–	EPSS 0.2%	CVE-2026-47243Microsoft · Kata guest escape: runtime-rs guest-root to host-root escape via virtiofs HighEPSS 0.2%2026-08-09GCVE DatabaseCVE-2026-47243 CVE-2026-47243 is a vulnerability in Microsoft software identified as a guest-to-host escape via virtiofs in the Kata runtime environment. It involves a guest-root user gaining host-root privileges, classified under CWE-22 (Path Traversal). The affected version explicitly stated is version 3.0. No CVSS score or detailed technical exploit information is provided. There is no indication of known exploits in the wild or available patches at this time. EPSS 0.2%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-08-09
Critical	–	EPSS 0.3%	CVE-2026-64534Microsoft · nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path CriticalEPSS 0.3%2026-08-07GCVE DatabaseCVE-2026-64534 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.3%Vulnerability Microsoft Security Response Center #ghsa-6vg3-7hp6-mqc5 #microsoft-security-response-ce	GCVE Database	2026-08-07
Medium	–	EPSS 0.2%	CVE-2026-15157Microsoft · undici vulnerable to CRLF Injection via blob-like body 'type' property MediumEPSS 0.2%2026-08-07GCVE DatabaseCVE-2026-15157 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.2%Vulnerability Microsoft Security Response Center #ghsa-m8rv-5g2x-5cg5 #npm #microsoft-security-response-ce	GCVE Database	2026-08-07
High	8.7	EPSS 0.5%	CVE-2026-59248Microsoft · Unbounded HPACK/QPACK prefixed-integer decoding in Cowlib causes memory-exhaustion DoS High8.7EPSS 0.5%2026-08-07GCVE DatabaseCVE-2026-59248 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.5%Report on CVE-2026-59248 Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-08-07
Medium	–	EPSS 0.5%	CVE-2026-42765Microsoft · NULL Dereference in Certificate Verification with OCSP Checking MediumEPSS 0.5%2026-08-07GCVE DatabaseCVE-2026-42765 CVE-2026-42765 is a vulnerability in Microsoft software version 3.0 involving a NULL pointer dereference during certificate verification with OCSP checking. This issue relates to improper handling of null references, classified under CWE-476. No CVSS score or detailed impact information is provided. No known exploits are reported in the wild, and no patch or remediation details are available. EPSS 0.5%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-08-07
Medium	5.6	EPSS 0.2%	CVE-2026-15003Microsoft · Binutils: gnu binutils: heap-buffer-overflow in linker leads to information disclosure and denial of service Medium5.6EPSS 0.2%2026-08-07GCVE DatabaseCVE-2026-15003 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.2%Report on CVE-2026-15003 Vulnerability Microsoft Security Response Center #ghsa-3mxj-5hq2-2h4f #microsoft-security-response-ce #cwe-125	GCVE Database	2026-08-07
Medium	6.8	EPSS 0.2%	CVE-2026-56389Microsoft · Arbitrary Command Execution in GNU Bison Medium6.8EPSS 0.2%2026-08-07GCVE DatabaseCVE-2026-56389 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.2%Report on CVE-2026-56389 Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-08-07
Medium	–	EPSS 0.6%	CVE-2026-66033Microsoft · libssh2 Integer Underflow DoS via AES-GCM Cipher Negotiation MediumEPSS 0.6%2026-07-26GCVE DatabaseCVE-2026-66033 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.6%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-07-26
Medium	–	EPSS 0.4%	CVE-2026-66034Microsoft · libssh2 Heap Out-of-Bounds Read via publickey subsystem MediumEPSS 0.4%2026-07-26GCVE DatabaseCVE-2026-66034 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.4%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-07-26
High	–	EPSS 0.6%	CVE-2026-44210Microsoft · Kata Containers have VM Escape via virtiofsd Argument Injection through Default-Enabled Pod Annotations HighEPSS 0.6%2026-07-25GCVE DatabaseCVE-2026-44210 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.6%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-07-25
Medium	–	EPSS 0.5%	CVE-2026-62299Microsoft · CoreDNS: rewrite-plugin EDNS0 response-revert nil-pointer panic (remote DoS) when a downstream plugin returns a response with no OPT record MediumEPSS 0.5%2026-07-18GCVE DatabaseCVE-2026-62299 A vulnerability in CoreDNS's rewrite-plugin can cause a nil-pointer panic leading to a remote denial of service (DoS) when a downstream plugin returns a response without an OPT record in the EDNS0 section. This issue affects CoreDNS version 3.0. No CVSS score or detailed vendor advisory is available. EPSS 0.5%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-07-18
Medium	–	EPSS 0.7%	CVE-2026-62309Microsoft · CoreDNS: proxyproto plugin panics on PPv2 datagram with non-UDP transport — single 28-byte packet remote DoS MediumEPSS 0.7%2026-07-18GCVE DatabaseCVE-2026-62309 A vulnerability in CoreDNS's proxyproto plugin causes a panic when processing a Proxy Protocol version 2 datagram with a non-UDP transport, resulting in a remote denial of service triggered by a single 28-byte packet. This affects CoreDNS version 3.0. No CVSS score is available for this issue. EPSS 0.7%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-07-18
High	–	EPSS 0.3%	CVE-2026-59831Microsoft · GitHub CLI `gh codespace jupyter` could allow remote code execution when connecting to a malicious Codespace HighEPSS 0.3%2026-07-15GCVE DatabaseCVE-2026-59831 A vulnerability exists in GitHub CLI version 3.0 where the 'gh codespace jupyter' command could allow remote code execution when connecting to a malicious Codespace. This issue is tracked as CVE-2026-59831 and is associated with CWE-829 (Inclusion of Functionality from Untrusted Control Sphere). No patch or official remediation has been provided yet. There are no known exploits in the wild at this time. EPSS 0.3%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-07-15
High	8.0	EPSS 0.3%	CVE-2026-53357Microsoft · In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del()… (CVE-2026-53357) High8.0EPSS 0.3%2026-07-02GCVE DatabaseCVE-2026-53357 A use-after-free (UAF) vulnerability in the Linux kernel's Bluetooth subsystem was resolved. The flaw occurs due to a race condition between socket cleanup and connection deletion functions, leading to use of freed memory. This vulnerability affects the handling of listening sockets and concurrent HCI disconnect events. The issue was identified through KASAN and SMP testing, showing multiple use-after-free reports before the fix. The vulnerability is rated high severity due to its potential impact on confidentiality, integrity, and availability. EPSS 0.3%Vulnerability Microsoft Security Response Center #ghsa-mf4h-hfv8-f4v4 #microsoft-security-response-ce	GCVE Database	2026-07-02
Medium	5.1	EPSS 0.3%	CVE-2026-40553Microsoft · Stack-based Buffer Overflow in GNU gawk (CVE-2026-40553) Medium5.1EPSS 0.3%2026-07-02GCVE DatabaseCVE-2026-40553 CVE-2026-40553 is a stack-based buffer overflow vulnerability affecting version 3.0 of gawk. The vulnerability is categorized under CWE-121. There is no CVSS score available, and no known exploits in the wild have been reported. No patch or remediation information is provided in the available data. EPSS 0.3%Report on CVE-2026-40553 Vulnerability Microsoft Security Response Center #microsoft-security-response-ce #cwe-121	GCVE Database	2026-07-02

Showing 261–280 of 800 results