Threat database

800 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Medium	–	EPSS 0.2%	CVE-2026-43137Microsoft · ASoC: SOF: Intel: hda: Fix NULL pointer dereference MediumEPSS 0.2%2026-05-02GCVE DatabaseCVE-2026-43137 CVE-2026-43137 is a vulnerability identified in Microsoft software version 3.0 involving a NULL pointer dereference issue in the Intel hda component. The vulnerability could cause a denial of service or system instability due to improper handling of NULL pointers. There is no CVSS score provided for this vulnerability. No known exploits in the wild have been reported. No patch or remediation information is currently available from the vendor advisory. The affected version is exactly 3.0. EPSS 0.2%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-05-02
Medium	–	EPSS 2.6%	CVE-2026-43500Microsoft · rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present MediumEPSS 2.6%2026-05-02GCVE DatabaseCVE-2026-43500 CVE-2026-43500 is a vulnerability related to the handling of DATA/RESPONSE packets in the rxrpc protocol when paged fragments are present. The vulnerability affects Microsoft product version 3.0. No CVSS score or detailed technical impact information is provided. There are no known exploits in the wild and no patch or remediation details are available from the provided data. EPSS 2.6%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-05-02
Medium	–	EPSS 0.2%	CVE-2026-43220Microsoft · iommu/amd: serialize sequence allocation under concurrent TLB invalidations MediumEPSS 0.2%2026-05-02GCVE DatabaseCVE-2026-43220 CVE-2026-43220 is a vulnerability related to the iommu/amd component in Microsoft software version 3.0. It involves the need to serialize sequence allocation during concurrent TLB invalidations. No CVSS score or detailed technical exploitation information is provided. EPSS 0.2%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-05-02
Medium	–	EPSS 0.2%	CVE-2026-43308Microsoft · btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() MediumEPSS 0.2%2026-05-02GCVE DatabaseCVE-2026-43308 CVE-2026-43308 is a vulnerability related to the btrfs filesystem in the Linux kernel, specifically involving an unexpected delayed reference type in the run_one_delayed_ref() function. The vulnerability is identified by Microsoft Security Response Center and affects Microsoft Azure Linux kernel version 3.0. No CVSS score or detailed technical exploitation information is provided. EPSS 0.2%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-05-02
Unrated	–	EPSS 0.3%	CVE-2026-6276Microsoft · stale custom cookie host causes cookie leak UnratedEPSS 0.3%2026-05-02GCVE DatabaseCVE-2026-6276 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.3%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-05-02
Unrated	–	EPSS 0.4%	CVE-2026-5545Microsoft · wrong reuse of HTTP Negotiate connection UnratedEPSS 0.4%2026-05-02GCVE DatabaseCVE-2026-5545 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.4%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-05-02
Medium	–	EPSS 0.2%	CVE-2026-40528Microsoft · OpenSC < 0.27.0 Buffer Overrun in do_key_value() via profile.c MediumEPSS 0.2%2026-05-02GCVE DatabaseCVE-2026-40528 A buffer overrun vulnerability exists in OpenSC versions prior to 0.27.0 in the do_key_value() function via profile.c. This vulnerability is classified as CWE-121 (stack-based buffer overflow). No CVSS score or detailed impact information is provided. No patch or remediation details are currently available. EPSS 0.2%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-05-02
Unrated	–	EPSS 0.2%	CVE-2026-46219Microsoft · spi: mpc52xx: fix use-after-free on unbind UnratedEPSS 0.2%2026-05-02GCVE DatabaseCVE-2026-46219 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.2%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-05-02
Unrated	–	EPSS 0.2%	CVE-2026-46231Microsoft · batman-adv: bla: put backbone reference on failed claim hash insert UnratedEPSS 0.2%2026-05-02GCVE DatabaseCVE-2026-46231 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.2%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-05-02
Unrated	–	EPSS 0.2%	CVE-2026-46214Microsoft · vsock/virtio: fix accept queue count leak on transport mismatch UnratedEPSS 0.2%2026-05-02GCVE DatabaseCVE-2026-46214 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.2%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-05-02
Unrated	–	EPSS 0.2%	CVE-2026-46200Microsoft · spi: mpc52xx: fix controller deregistration UnratedEPSS 0.2%2026-05-02GCVE DatabaseCVE-2026-46200 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.2%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-05-02
Unrated	–	EPSS 0.5%	CVE-2026-46137Microsoft · mptcp: pm: ADD_ADDR rtx: fix potential data-race UnratedEPSS 0.5%2026-05-02GCVE DatabaseCVE-2026-46137 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.5%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-05-02
Unrated	–	EPSS 0.2%	CVE-2026-46209Microsoft · drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() UnratedEPSS 0.2%2026-05-02GCVE DatabaseCVE-2026-46209 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.2%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-05-02
Unrated	–	EPSS 0.2%	CVE-2026-46186Microsoft · Bluetooth: virtio_bt: validate rx pkt_type header length UnratedEPSS 0.2%2026-05-02GCVE DatabaseCVE-2026-46186 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.2%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-05-02
Unrated	–	EPSS 0.2%	CVE-2026-46172Microsoft · ipv6: xfrm6: release dst on error in xfrm6_rcv_encap() UnratedEPSS 0.2%2026-05-02GCVE DatabaseCVE-2026-46172 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.2%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-05-02
Unrated	–	EPSS 0.2%	CVE-2026-46148Microsoft · spi: microchip-core-qspi: control built-in cs manually UnratedEPSS 0.2%2026-05-02GCVE DatabaseCVE-2026-46148 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.2%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-05-02
Unrated	–	EPSS 0.2%	CVE-2026-46168Microsoft · mptcp: fix scheduling with atomic in timestamp sockopt UnratedEPSS 0.2%2026-05-02GCVE DatabaseCVE-2026-46168 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.2%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-05-02
Unrated	–	EPSS 0.4%	CVE-2026-46198Microsoft · batman-adv: fix integer overflow on buff_pos UnratedEPSS 0.4%2026-05-02GCVE DatabaseCVE-2026-46198 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.4%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-05-02
Unrated	–	EPSS 0.2%	CVE-2026-46163Microsoft · wifi: b43legacy: enforce bounds check on firmware key index in RX path UnratedEPSS 0.2%2026-05-02GCVE DatabaseCVE-2026-46163 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.2%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-05-02
Unrated	–	EPSS 0.2%	CVE-2026-46111Microsoft · Bluetooth: hci_conn: fix potential UAF in create_big_sync UnratedEPSS 0.2%2026-05-02GCVE DatabaseCVE-2026-46111 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.2%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-05-02

Showing 461–480 of 800 results