Threat database

647 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	–	EPSS 0.1%	CVE-2026-23191Microsoft · ALSA: aloop: Fix racy access at PCM trigger HighEPSS 0.1%2026-03-20GCVE DatabaseCVE-2026-23191 A race condition vulnerability was identified in the ALSA aloop PCM trigger component of the Linux kernel. This issue was addressed in a security update that fixed multiple vulnerabilities across various Linux kernel subsystems. The vulnerability could potentially allow local attackers to escalate privileges or escape container environments. The fix is available and has been incorporated into updated Linux kernel releases. EPSS 0.1%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-03-20
High	–	EPSS 0.1%	CVE-2026-23171Microsoft · bonding: fix use-after-free due to enslave fail after slave array update HighEPSS 0.1%2026-03-20GCVE DatabaseCVE-2026-23171 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.1%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-03-20
Medium	–	EPSS 0.1%	CVE-2026-23157Microsoft · btrfs: do not strictly require dirty metadata threshold for metadata writepages MediumEPSS 0.1%2026-03-20GCVE DatabaseCVE-2026-23157 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.1%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-03-20
Medium	–	EPSS 0.1%	CVE-2026-23154Microsoft · net: fix segmentation of forwarding fraglist GRO MediumEPSS 0.1%2026-03-20GCVE DatabaseCVE-2026-23154 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.1%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-03-20
Medium	–	EPSS <0.1%	CVE-2026-23126Microsoft · netdevsim: fix a race issue related to the operation on bpf_bound_progs list MediumEPSS <0.1%2026-03-20GCVE DatabaseCVE-2026-23126 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS <0.1%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-03-20
Medium	–	EPSS <0.1%	CVE-2026-23118Microsoft · rxrpc: Fix data-race warning and potential load/store tearing MediumEPSS <0.1%2026-03-20GCVE DatabaseCVE-2026-23118 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS <0.1%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-03-20
Medium	–	EPSS 0.1%	CVE-2026-23113Microsoft · io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop MediumEPSS 0.1%2026-03-20GCVE DatabaseCVE-2026-23113 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.1%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-03-20
Medium	–	EPSS 0.1%	CVE-2026-23207Microsoft · spi: tegra210-quad: Protect curr_xfer check in IRQ handler MediumEPSS 0.1%2026-03-20GCVE DatabaseCVE-2026-23207 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.1%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-03-20
Medium	–	EPSS 0.1%	CVE-2026-23141Microsoft · btrfs: send: check for inline extents in range_is_hole_in_parent() MediumEPSS 0.1%2026-03-19GCVE DatabaseCVE-2026-23141 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.1%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-03-19
Medium	–	EPSS 0.1%	CVE-2026-23138Microsoft · tracing: Add recursion protection in kernel stack trace recording MediumEPSS 0.1%2026-03-19GCVE DatabaseCVE-2026-23138 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.1%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-03-19
Medium	–	EPSS 0.1%	CVE-2026-23137Microsoft · of: unittest: Fix memory leak in unittest_data_add() MediumEPSS 0.1%2026-03-19GCVE DatabaseCVE-2026-23137 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.1%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-03-19
Medium	–	EPSS 0.1%	CVE-2025-71202Microsoft · iommu/sva: invalidate stale IOTLB entries for kernel address space MediumEPSS 0.1%2026-03-19GCVE DatabaseCVE-2025-71202 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.1%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-03-19
High	–	EPSS 0.8%	CVE-2026-23231Microsoft · netfilter: nf_tables: fix use-after-free in nf_tables_addchain() HighEPSS 0.8%2026-03-05GCVE DatabaseCVE-2026-23231 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.8%Vulnerability Microsoft Security Response Center #linux #cloud #microsoft-security-response-ce	GCVE Database	2026-03-05
High	7.8	EPSS 0.2%	CVE-2026-23278Microsoft · netfilter: nf_tables: always walk all pending catchall elements High7.8EPSS 0.2%2026-03-02GCVE DatabaseCVE-2026-23278 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.2%Vulnerability Microsoft Security Response Center #ghsa-5vxp-pqjj-287g #microsoft-security-response-ce	GCVE Database	2026-03-02
Medium	–	EPSS 0.1%	CVE-2026-22979Microsoft · net: fix memory leak in skb_segment_list for GRO packets MediumEPSS 0.1%2026-02-28GCVE DatabaseCVE-2026-22979 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.1%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-02-28
Medium	–	EPSS 0.4%	CVE-2025-71161Microsoft · dm-verity: disable recursive forward error correction MediumEPSS 0.4%2026-02-28GCVE DatabaseCVE-2025-71161 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.4%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-02-28
Medium	–	EPSS 0.2%	CVE-2025-71160Microsoft · netfilter: nf_tables: avoid chain re-validation if possible MediumEPSS 0.2%2026-02-28GCVE DatabaseCVE-2025-71160 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.2%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-02-28
Low	–	EPSS 0.1%	CVE-2025-71152Microsoft · net: dsa: properly keep track of conduit reference LowEPSS 0.1%2026-02-28GCVE DatabaseCVE-2025-71152 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.1%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-02-28
Medium	–	EPSS 0.3%	CVE-2025-71150Microsoft · ksmbd: Fix refcount leak when invalid session is found on session lookup MediumEPSS 0.3%2026-02-28GCVE DatabaseCVE-2025-71150 To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle EPSS 0.3%Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-02-28

Showing 541–560 of 647 results · 1 duplicate CVE record merged