A vulnerability identified as CVE-2026-80893 involves swap entry corruption when clearing uffd-wp at fork() in certain Microsoft-related software versions. The issue affects multiple specific versions, primarily related to Linux kernel versions used in Ubuntu distributions. The severity is assessed as medium. No CVSS score is provided. There is no information about known exploits in the wild or vendor-provided patches in the available data.
This vulnerability involves the HID magicmouse driver improperly retaining a stale msc->input reference when no input is claimed. It affects specific Microsoft-related software versions listed. The issue is categorized as medium severity. No CVSS score or detailed technical impact is provided. There is no information on available patches or exploits in the wild.
This vulnerability involves a use-after-free (UAF) issue in the Bluetooth HCI event handling related to the LE list on reset. It affects specific Microsoft software versions identified by exact build numbers. The severity is assessed as medium. No CVSS score is provided. There is no information about available patches or vendor advisories in the provided data.
A use-after-free vulnerability exists in the enable_sensor function of the HID sensor custom driver in Microsoft software. This vulnerability could potentially lead to memory corruption issues. The affected versions are specific builds of version 4.4.0. The severity is assessed as medium. No CVSS score is provided. No known exploits in the wild have been reported. There is no explicit information about patch availability or remediation status in the provided data.
This vulnerability involves the IPv4 implementation rejecting undersized MTUs in the ip_do_fragment() function. It affects specific Microsoft-related versions listed and has a medium severity rating. No CVSS score is provided. There is no information about active exploitation or patch availability.
A medium severity vulnerability identified as CVE-2026-80852 affects specific versions of Microsoft software. The issue involves an out-of-bounds write in the tls_append_frag() function related to TLS device handling. No CVSS score is provided. There is no information about active exploitation or patch availability. The affected versions are explicitly listed. No geographic targeting is indicated.
CVE-2026-80789 is a medium severity vulnerability affecting specific versions of Microsoft software related to nvmet-tcp. The issue involves the handling of bound SGL data length before allocating command buffers. No CVSS score is provided, and there is no information about active exploitation or available patches.
A use-after-free vulnerability exists in the usbfs component of Microsoft software, specifically in the usbdev_release() function. This vulnerability affects multiple specific versions of the Microsoft product kernel. The issue could potentially lead to memory corruption or instability. The severity is assessed as medium. No CVSS score is provided. There is no information about active exploitation or an official patch status in the provided data.
CVE-2026-80842 is a use-after-free vulnerability in the multicast context handling of a master VLAN in the network bridge component. This flaw affects specific versions of Microsoft software and related Linux kernel versions as indicated. The vulnerability has a medium severity rating and no known exploits in the wild have been reported. No CVSS score is provided. The vulnerability could potentially lead to stability or security issues related to improper memory handling in network bridging.
This vulnerability involves the failure of the function tls_sw_splice_read() after an asynchronous decryption operation fails in certain Microsoft-related software versions. The issue has been identified in specific versions of the Microsoft product, with a medium severity rating. No CVSS score is provided, and there is no indication of known exploits in the wild. The vulnerability affects multiple specific versions, primarily related to Microsoft and Ubuntu distributions. No patch or remediation details are provided in the available data.
CVE-2026-80805 is a medium severity vulnerability affecting specific versions of Microsoft software related to the xfs filesystem. The issue involves improper validation of attribute entry pointers before field access, which could potentially lead to unexpected behavior or errors. There is no CVSS score available for this vulnerability. No information about active exploitation or patch availability is provided.
A use-after-free vulnerability exists in the HID uclogic driver related to the inrange_timer on device removal. This vulnerability affects specific versions of the Microsoft product listed. The severity is assessed as medium. No CVSS score is provided. There is no information about available patches or exploits in the wild.
This vulnerability concerns the nvmet-tcp component, where warnings are improperly triggered on remotely-controlled oversized Scatter-Gather List (SGL) allocations. It affects specific Microsoft-related software versions. The issue has been classified with medium severity. No CVSS score is provided, and no known exploits are reported in the wild. The vulnerability does not appear to be related to a cloud service, and no patch or remediation details are provided in the available data.
A vulnerability identified as CVE-2026-80883 affects certain Microsoft products involving the drm/tegra graphics driver, specifically related to initializing the address register map before the HOST1X client is registered. This issue is addressed by patches available for the affected versions. The vulnerability is rated medium severity and no known exploits are reported in the wild. The vendor advisory references a broader set of Linux kernel security fixes, including this issue, with official patches provided.
CVE-2026-78607 is a vulnerability involving missing authorization in Elasticsearch components related to Microsoft Azure Linux 3.0 and rubygem-elasticsearch. This flaw could lead to unauthorized information disclosure due to insufficient access control. No CVSS score or detailed technical exploitation data is provided. There is no indication of known exploits in the wild or available patches. The affected versions include Microsoft Azure Linux 3.0 and rubygem-elasticsearch version 3.0.
CVE-2026-54330 is a vulnerability in the Ceph RGW SigV4 handler where it accepts unsigned x-amz-* headers on presigned requests. This behavior can lead to privilege escalation. The affected product version is Microsoft Ceph RGW 3.0. No CVSS score is provided, and there are no known exploits in the wild. No patch or remediation details are currently available.
CVE-2026-18743 is a low severity vulnerability in the popt library related to a short realloc operation in poptconfigfiletostring. This issue affects certain versions of popt used in Microsoft and Red Hat Hardened Images. A security update is available from Red Hat to address this vulnerability.
A low severity vulnerability identified as CVE-2026-80689 affects certain Microsoft-related software versions. The issue involves the tracing/mmiotrace component where a NULL check for mmio_trace_array is missing in logging functions. This could potentially lead to unexpected behavior or errors during logging operations.
A vulnerability exists in the drm/amdkfd component related to a missing authorization check in the KFD_IOC_DBG_TRAP_DISABLE operation. This issue affects specific versions of the Microsoft product listed and has been assigned CVE-2026-80703. The severity is assessed as medium. No CVSS score is provided. There is no information on available patches or exploits in the wild.